Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2012-09-05 | s3:smb2_create: check for SMB2_CREATE_TAG_DHNC first | Stefan Metzmacher | 1 | -43/+14 | |
metze Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Wed Sep 5 12:27:25 CEST 2012 on sn-devel-104 | |||||
2012-09-05 | s3: Slightly simplify fd_open_atomic | Volker Lendecke | 1 | -8/+7 | |
Replace an if-statement by a direct assignment Signed-off-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Wed Sep 5 01:56:46 CEST 2012 on sn-devel-104 | |||||
2012-09-04 | s3: Put a comment into the right place | Volker Lendecke | 1 | -4/+5 | |
Signed-off-by: Jeremy Allison <jra@samba.org> | |||||
2012-09-04 | s3: Factor out disposition_to_open_flags | Volker Lendecke | 1 | -24/+57 | |
Signed-off-by: Jeremy Allison <jra@samba.org> | |||||
2012-09-04 | s3: Factor out calculation of clear_ads | Volker Lendecke | 1 | -5/+17 | |
Signed-off-by: Jeremy Allison <jra@samba.org> | |||||
2012-09-04 | s3: Slightly simplify open_file_ntcreate | Volker Lendecke | 1 | -5/+5 | |
We have not set flags2 before, so do direct assignment and not |= Signed-off-by: Jeremy Allison <jra@samba.org> | |||||
2012-09-04 | s3: Make "open_match_attributes" static | Volker Lendecke | 2 | -12/+6 | |
Signed-off-by: Jeremy Allison <jra@samba.org> | |||||
2012-09-04 | s3:smbd: in sys_disk_free(), improve a debug message | Michael Adam | 1 | -1/+1 | |
2012-09-04 | s3:smbd: in sys_disk_free(), improve a debug message | Michael Adam | 1 | -1/+1 | |
2012-09-04 | s3:smbd: in sys_disk_free(), fix line length and indentation of debug statement | Michael Adam | 1 | -2/+3 | |
2012-09-04 | s3:smbd: in sys_disk_free(), fix a debug message | Michael Adam | 1 | -1/+1 | |
2012-09-02 | s3: remove some duplicate quota code | Björn Jacke | 1 | -27/+12 | |
2012-09-01 | s3: Make an if statement a bit easier to read | Volker Lendecke | 1 | -2/+3 | |
Fix indentation a bit Signed-off-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Sat Sep 1 07:07:12 CEST 2012 on sn-devel-104 | |||||
2012-08-31 | Change the S3 fileserver over to se_file_access_check(). | Jeremy Allison | 1 | -6/+9 | |
Don't set the priv_open_requested yet until the open-for-backup request is correctly passed in. | |||||
2012-08-30 | Windows does canonicalization of inheritance bits. Do the same. | Jeremy Allison | 1 | -0/+35 | |
We need to filter out the SEC_DESC_DACL_AUTO_INHERITED|SEC_DESC_DACL_AUTO_INHERIT_REQ bits. If both are set we store SEC_DESC_DACL_AUTO_INHERITED as this alters whether SEC_ACE_FLAG_INHERITED_ACE is set when an ACE is inherited. Otherwise we zero these bits out. See: http://social.msdn.microsoft.com/Forums/eu/os_fileservices/thread/11f77b68-731e-407d-b1b3-064750716531 for details. | |||||
2012-08-30 | Change the other two places where we set a security descriptor given by the ↵ | Jeremy Allison | 1 | -5/+1 | |
client to got through set_sd(), the canonicalize sd function. | |||||
2012-08-30 | Re-add set_sd(), called from set_sd_blob(). Allows us to centralize all ACL ↵ | Jeremy Allison | 2 | -14/+28 | |
canonicalization. | |||||
2012-08-30 | Rename set_sd() to set_sd_blob() - this describes what it does. | Jeremy Allison | 3 | -6/+6 | |
2012-08-28 | s3-smbd: Fix flooding the logs with records we don't find in pcap. | Andreas Schneider | 1 | -1/+1 | |
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Tue Aug 28 16:38:55 CEST 2012 on sn-devel-104 | |||||
2012-08-28 | s3-vfs: Indicate the symlink destination when failing check_reduced_name | Andrew Bartlett | 1 | -2/+2 | |
2012-08-23 | s3-smbd: Add security_info_wanted argument to get_nt_acl_no_snum | Andrew Bartlett | 3 | -6/+6 | |
I need to get at the owner, group, DACL and SACL when testing correct ACL storage. Andrew Bartlett | |||||
2012-08-23 | s3-pysmbd: Fix return type of smbd.get_nt_acl | Andrew Bartlett | 1 | -1/+1 | |
The security_ prefix is stripped off in the python bindings. Andrew Bartlett | |||||
2012-08-23 | s3-smbd: Add talloc_stackframe() to get_nt_acl_no_snum() | Andrew Bartlett | 1 | -3/+8 | |
This is required because the functions it calls use talloc_tos(). Andrew Bartlett | |||||
2012-08-23 | param: Add startup checks for valid server role/binary combinations | Andrew Bartlett | 1 | -0/+7 | |
This should eliminate confusion from our users about what they can expect to successfully run. Andrew Bartlett | |||||
2012-08-23 | s3-pysmbd: Fix error message | Andrew Bartlett | 1 | -2/+2 | |
2012-08-23 | s3-pysmbd: Allow a mode to be specified for the simple ACL | Andrew Bartlett | 1 | -27/+32 | |
The additional group for the ACL is now optional. Andrew Bartlett | |||||
2012-08-23 | s3:smb2_break: encrypt OPLOCK BREAK notifications | Stefan Metzmacher | 3 | -18/+107 | |
metze Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Thu Aug 23 10:01:14 CEST 2012 on sn-devel-104 | |||||
2012-08-23 | s3:smb2_server: use smbXsrv_session->nonce_* | Stefan Metzmacher | 2 | -25/+27 | |
metze | |||||
2012-08-23 | s3:smb2_server: remove dump_data() from smbd_smb2_request_pending_timer() | Stefan Metzmacher | 1 | -1/+0 | |
This was just for debugging... metze | |||||
2012-08-22 | s3-pysmbd: Correct the python type for smb_acl_t | Andrew Bartlett | 1 | -2/+2 | |
The t is weird, but the python bindings trim the traditional IDL name prefix of each element, as it is usually rudundent. Andrew Bartlett | |||||
2012-08-21 | s3-pysmbd: Add get/set functions for the posix ACL layer | Andrew Bartlett | 1 | -0/+89 | |
These will be used to verify that an ACL set as an NT ACL creates the correct posix ACL. Andrew Bartlett | |||||
2012-08-21 | s3-pysmbd: Correct comments in python VFS bindings | Andrew Bartlett | 1 | -2/+2 | |
2012-08-21 | s3-pysmbd: Add hook for a VFS chown() | Andrew Bartlett | 1 | -0/+53 | |
2012-08-20 | s3-smbd: ensure we give appropriate errors for EA requests on streams | Andrew Bartlett | 1 | -35/+77 | |
2012-08-20 | s3-smbd: Do not look for EA information on a stream | Andrew Bartlett | 1 | -6/+8 | |
The estimated EA size needs to be of the main file. However, the fsp may point to the stream, so we need to ignore it if this is the case. This may mean we estimate wrong if there has been a rename. Andrew Bartlett | |||||
2012-08-20 | s3-smbd: Push smb_fname into estimate_ea_size | Andrew Bartlett | 1 | -12/+20 | |
This ensures that we return the ea size of the stream, not the overall file. This is important as if there is an EA on the main file, the raw.streams test was failing. Andrew Bartlett | |||||
2012-08-17 | s3:smb2_negprot: annouce/negotiate SMB3 encryption support | Stefan Metzmacher | 1 | -0/+8 | |
metze | |||||
2012-08-17 | s3:smb2_server: add SMB3 encryption support | Stefan Metzmacher | 2 | -49/+353 | |
metze | |||||
2012-08-17 | s3:smbd: don't disconnect the client when a share has "smb encrypt = required" | Stefan Metzmacher | 2 | -6/+8 | |
It's not the client fault, if he doesn't know that encryption is required. We should just return ACCESS_DENIED and let the client work on other shares and open files on the current SMB connection. metze | |||||
2012-08-17 | s3:smbd: lp_smb_encrypt() returns SMB_SIGNING_* values | Stefan Metzmacher | 2 | -6/+6 | |
metze | |||||
2012-08-17 | s3:smbd: make use of ENCRYPTION_REQUIRED() | Stefan Metzmacher | 1 | -2/+2 | |
metze | |||||
2012-08-17 | s3:smb2_server: try to sign an error response if we have a signing key | Stefan Metzmacher | 1 | -1/+18 | |
metze Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Fri Aug 17 00:54:01 CEST 2012 on sn-devel-104 | |||||
2012-08-16 | s3:smb2_server: verify the signature before the session_status | Stefan Metzmacher | 1 | -3/+4 | |
metze | |||||
2012-08-16 | s3:smb2_server: add some const to print_req_vectors() | Stefan Metzmacher | 1 | -1/+1 | |
metze | |||||
2012-08-16 | s3-libsmb: Add a python wrapper | Volker Lendecke | 1 | -1/+1 | |
Please note that this is not finished and only for internal use. Signed-off-by: Stefan Metzmacher <metze@samba.org> | |||||
2012-08-16 | s3-smbd: Do not check no_acl_syscall_error(errno) after sys_acl_init() | Andrew Bartlett | 1 | -11/+2 | |
This is no longer a VFS call, so will no longer fail in this way. Andrew Bartlett | |||||
2012-08-15 | s3:smb2_server: do calculations based on SMBD_SMB2_NUM_IOV_PER_REQ in ↵ | Stefan Metzmacher | 1 | -3/+3 | |
smbd_smb2_request_validate() metze | |||||
2012-08-15 | s3-sysacls: Remove sys_acl_free_qualifier() as it is a no-op | Andrew Bartlett | 2 | -4/+0 | |
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Aug 15 05:23:18 CEST 2012 on sn-devel-104 | |||||
2012-08-15 | s3-sysacls: Remove sys_acl_free_acl() and replace with TALLOC_FREE() | Andrew Bartlett | 3 | -41/+41 | |
2012-08-15 | s3-smbd: Remove sys_acl_*() VFS wrapper functions | Andrew Bartlett | 1 | -129/+0 | |
We no longer do struct smb_acl_t manipuations via the VFS layer, which is now reduced to handling the get/set functions. The only backend that implemented these functions (aside from audit) was the vfs_default module calling the sys_acl code. The various ACL implementation modules either worked on the fully initilaised smb_acl_t object or on NT ACLs. This not only makes the operation of the posix ACL code more efficient (as allocation and free is not put via the VFS), it makes it easier to test and removes the fantasy that a module could safely redefine this structure or the behaviour here. The smb_acls.idl now defines the structure, and it is now allocated with talloc. These operations were originally added to the VFS in commit 3bb219161a270f12c27c3bc7e1220829c6e9f284. Andrew Bartlett |