Age | Commit message (Collapse) | Author | Files | Lines |
|
like the
isolated !.
Metze, can you check this?
Thanks,
Volker
(This used to be commit c9542c64ce2a21671b8f4e30780e8a6e07ab6632)
|
|
(This used to be commit 17f701ab4f46502ca7a957d3e79b005a0acebdc1)
|
|
(This used to be commit c24bfdce625782637b5f4d11a5117ef795ddfc2f)
|
|
(This used to be commit 09f3c7a86f931371dc6f886edccc15d3f5437d34)
|
|
(This used to be commit 4dd8694a250e4d064a790fe8f422c965ab533880)
|
|
<aruna.prabakar@hp.com>
(This used to be commit 0a81af4fef5b794fea257d9e3e11b16c3a4de12f)
|
|
Fix more potential segfaults when something on our way to a DC connection
fails.
We can not continue if dcip_to_name() fails. With
192.168.234.100 nt4pdc
192.168.234.100 windows#1c
192.168.234.100 windows#1b
in the lmhosts file when nt4pdc is rebooted, we do find the DC's IP address,
we can connect to TCP 139 while it is booting but anything else fails. So we
fall back to put the IP address into domain->dcname. When the DC is fully up
later on we try to do the auth2 against \\192.168.234.100 which gives
INVALID_COMPUTER_NAME. And we never get out of this loop again.
Fix this.
Jerry, maybe you can take a look.
Thanks,
Volker
(This used to be commit b1244e79068af9e287252b2dfbb8d612e717674a)
|
|
the same function (deals with races).
Jeremy.
(This used to be commit 4962548dfe8ec2854e209217066556f339d3186e)
|
|
Jeremy.
(This used to be commit a8eb1186a12b44178a28b013373f6f8a4356d9ec)
|
|
Invalid comparisons.
Jeremy.
(This used to be commit 9890a31c5f4a8911b0f56eee67cfbcc46f15ee43)
|
|
Jeremy.
(This used to be commit c66620770d2154543a6ec99d369771b339df5463)
|
|
Jeremy.
(This used to be commit 1d9dbe3b662ea757224ca4d8c991ae73bb92ae8d)
|
|
and even uses them on the manpage. this should now enable make test on
AIX.
(This used to be commit de836d2077e53c07a50c51d1580f8e93700eb5bd)
|
|
doesn't work there.
(This used to be commit 0ee78d96d9bd039084a270172316d80df4c00248)
|
|
reserved word check when we selecte --enable-developer
(This used to be commit ece5fe3e78da460fb1c0eca3185da7f80c5cfdc4)
|
|
int16 and int32 definitions in internal and system headers
(This used to be commit 094443ed6c0fdd06f459211dbca50feed58463ef)
|
|
dynconfig.c. This is mainly useful for test harness scripts, hence the
lack of short options.
(This used to be commit bf3b71c84595608d71e0f15a6158adacb295518e)
|
|
a domain
controller the next time we connect this child ran into a segfault because it
tried to reference a half-baked connection.
Volker
(This used to be commit c8a8204c744cf7aa1a1a6992a3433d99b6bb73a1)
|
|
own when runing on a Samba DC (since we don't implement the getdcname() call that well
(This used to be commit 39f7ff75a7a21b85b54cba954f1c5552e562be5c)
|
|
Jeremy.
(This used to be commit f6c110ddb8cfaa1a57dea52818e7611134c2dcfe)
|
|
(This used to be commit 7c375fd540fa54ac8ae71c42ed07e01c593044b3)
|
|
(This used to be commit 72f103708d17aa86e09fa7a02699f969f7ee9190)
|
|
cli_session_setup
derefences it.
Volker
(This used to be commit b013b6908d22cfd38fcc56a9cb2ca675d75996d1)
|
|
metze
(This used to be commit 8709bba24a2359aff14920b1dab6b51f21401149)
|
|
metze
(This used to be commit e5a8553a57e0b1463a421ba69631f234184404b0)
|
|
Jeremy.
(This used to be commit 5137006233a0c2de94ce3da7340ff0032ef7426d)
|
|
Jeremy.
(This used to be commit 9f5c95c41872deac5e029b69daa5004d5c0fb4cc)
|
|
solaris sheel scripting bugs with 'make test'
(This used to be commit 94e0bc50135646039a2ebcf5c922a82cc0c4a2e7)
|
|
(This used to be commit 466478f07e6233b89f442660ad42ef7ee870ad48)
|
|
Volker
(This used to be commit e4a2cb4b9143394a54ae1de91e59722c11a0b2e4)
|
|
Guenther
(This used to be commit 6cfc65ea20793a72ff1666759bd4e8e446247071)
|
|
Guenther
(This used to be commit 741602e03ad2404d4e38e55b9e5fd20b85fd205d)
|
|
(since removal implies greater permissions that Windows clients require)
(This used to be commit ad1f947625612ef16adb69fc2cfeffc68a9a2e02)
|
|
with select returning true but no data being available.
Fix for bug #3779.
Jeremy.
(This used to be commit e5787cf75b2e7d50f551f34f28d280c27b0aa134)
|
|
more scalable:
The most efficient way is to use the "tokenGroups" attribute which gives
the nested group membership. As this attribute can not always be
retrieved when binding with the machine account (the only garanteed way
to get the tokenGroups I could find is when the machine account is a
member of the "Pre Win2k Access" builtin group).
Our current fallback when "tokenGroups" failed is looking for all groups
where the userdn was in the "member" attribute. This behaves not very
well in very large AD domains.
The patch first tries the "memberOf" attribute on the user's dn in that
case and directly retrieves the group's sids by using the LDAP Extended
DN control from the user's object.
The way to pass down the control to the ldap search call is rather
painfull and probably will be rearranged later on.
Successfully tested on win2k sp0, win2k sp4, wink3 sp1 and win2k3 r2.
Guenther
(This used to be commit 7d766b5505e4099ef7dd4e88bb000ebe38d71bd0)
|
|
Expand the "winbind nss info" to also take "rfc2307" to support the
plain posix attributes LDAP schema from win2k3-r2.
This work is based on patches from Howard Wilkinson and Bob Gautier
(and closes bug #3345).
Guenther
(This used to be commit 52423e01dc209ba5abde808a446287714ed11567)
|
|
Guenther
(This used to be commit ec26c355b3ef1d3d809c4fbe911ce6fcef5db955)
|
|
- samba3 pass the limited version of RAW-LOCK
(the lock cancel and error checking tests are skipped)
metze
(This used to be commit b79ceece9550c0fe9f59ae59bad6709351e93906)
|
|
- RAW-READ now passes samba3
- skip the rest for now
metze
(This used to be commit fc343051afe560b1ddb8715dbc574e2ae645571e)
|
|
metze
(This used to be commit cd2fa1da6cdcaaa8a4d92a38163d54ecc0f9d756)
|
|
(This used to be commit d77768cb237461b06119ee19f822b120623d77dd)
|
|
the machine creds (just like WinXP)
(This used to be commit ae2bf464c47eb52ff24400d1cc362e74e77fbac5)
|
|
(This used to be commit 126ab8ccec69240e8e526190f4712bd274237985)
|
|
Spotted by "John E. Malmberg" <wb8tyw@qsl.net>.
Jeremy.
(This used to be commit ff3fe39b837e0d0de2edaa284c2dd7d1c8161c46)
|
|
if it returned -1 (treat as undefined). Ensure we obey
this.
Jeremy.
(This used to be commit 256ae3a16bcafe70cc1a00496681c709380e4fc3)
|
|
to make connections to ports 445 or 139 on the DC it's trying
to contact. It calls sys_select() on the non-blocking sockets,
not sys_select_intr(). This is a mistake (I believe) as it allows
a signal to early terminate the connection attempts - whereas
sys_select_intr() will ignore signals until we get back to
the main processing loop where they'll be handled correctly.
This change means winbindd_cm will not early terminate if it
gets a message whilst trying to connect to DC's.
Gunther, Volker and Jerry please review (but I think this
is correct).
Jeremy.
(This used to be commit 24aaa486771f797d35ea6b0711c12cd3e663dd8c)
|
|
We were forgetting to increment after copying
the primary group gid.
Jeremy
(This used to be commit 31d16c434e1ee94691f013ed0b31d9f26baeb2cb)
|
|
fsp pointers. Ensure we cope with this to pass Samba4
DENY tests (we used to pass these, there must have been
a regression with newer code). We now pass them.
Jeremy
(This used to be commit fd6fa1d4eaf61783df74ee2da50d331477f06998)
|
|
close fd=-1 fnum=4321 (numopen=1)
close_file: Could not get share mode lock for file $Extend/$Quota:$Q:$INDEX_ALLOCATION
unix_error_packet: error string = Das Argument ist ungültig
error packet at smbd/reply.c(3325) cmd=4 (SMBclose) NT_STATUS_INVALID_HANDLE
so a fake file needs special close handling I think. Jeremy, can you check
this?
Thanks,
Volker
(This used to be commit f66b9701b5c6bb6302fa11889adab6902cbaf2e3)
|
|
(This used to be commit a85dfb9eff222142eb1f9d89beb3d156661dd047)
|