Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2009-08-27 | s3-ntlmssp: remove trailing whitespace. | Günther Deschner | 3 | -137/+137 | |
Guenther | |||||
2009-08-27 | s3-schannel: remove remaining code that was using "struct dcinfo". | Günther Deschner | 3 | -192/+0 | |
Guenther | |||||
2009-08-27 | s3-credentials: remove unused code. | Günther Deschner | 4 | -314/+1 | |
Guenther | |||||
2009-08-27 | s3-schannel: upgrade old format schannel_store.tdb. | Günther Deschner | 1 | -4/+9 | |
Guenther | |||||
2009-08-27 | s3-netlogon: use shared credential and schannel storage infrastructure for ↵ | Günther Deschner | 3 | -196/+146 | |
netlogon server. Guenther | |||||
2009-08-27 | s3-netlogon: add netr_creds_server_step_check() convenience wrapper. | Günther Deschner | 1 | -0/+34 | |
Guenther | |||||
2009-08-27 | s3-schannel: add simple wrappers to fetch and store schannel auth info. | Günther Deschner | 4 | -1/+79 | |
Guenther | |||||
2009-08-27 | s3-schannel: make open_schannel_session_store() public. | Günther Deschner | 2 | -1/+2 | |
Guenther | |||||
2009-08-27 | libcli/auth: add tdb backend for schannel state. | Günther Deschner | 1 | -1/+3 | |
Guenther | |||||
2009-08-27 | s3-build: add SCHANNEL_OBJ to Makefile.in. | Günther Deschner | 1 | -2/+5 | |
Guenther | |||||
2009-08-27 | s3:winbind: Convert WINBINDD_GETUSERSIDS to the new API | Volker Lendecke | 6 | -255/+130 | |
2009-08-27 | s3:winbind: Fix a typo | Volker Lendecke | 1 | -1/+1 | |
2009-08-27 | s3:winbind: Remove the manual caching for the async wb_ functions | Volker Lendecke | 6 | -80/+15 | |
The generic NDR-based cache in winbindd_dual_ndr.c replaces this. | |||||
2009-08-27 | s3:winbind: Some calls are not cacheable | Volker Lendecke | 1 | -0/+19 | |
2009-08-27 | s3:winbind: Factor out wcache_store_seqnum() | Volker Lendecke | 2 | -19/+34 | |
2009-08-27 | s3:winbind: Add a generic cache for NDR based parent-child requests | Volker Lendecke | 7 | -21/+157 | |
2009-08-27 | s3:winbind: Factor out wcache_fetch_seqnum | Volker Lendecke | 1 | -14/+39 | |
2009-08-26 | s3/smbd: open the share_info.tdb on startup instead of tconx | Steven Danneman | 3 | -1/+11 | |
This is a small performance optimization. Instead of opening the tdb on every smb connection in the forked child process, we now open it in the parent and share the fd. This also reduces the total fd usage in the system. | |||||
2009-08-26 | s3/debug: make SPENGO OID list appear under one debug header | Steven Danneman | 1 | -1/+4 | |
2009-08-26 | s3/winbindd: Remove unnecessary check for NULL SID | Steven Danneman | 2 | -8/+7 | |
There's a known bug in some Windows implementations of DsEnumerateDomainTrusts() where domain SIDs are not returned for transitively trusted domains within the same forest. Jerry originally worked around this in the winbindd parent by checking for S-0-0 and converting it to S-1-0 in 8b0fce0b. Guenter later moved these checks into the child process in commit 3bdfcbac making the initial patch unecessary. I've removed it and added a clarifying comment to the child process. If ever this SID is needed we could add an extra DsEnumerateDomainTrusts() call in trusted_domains() as suggested by the Microsoft KB. | |||||
2009-08-26 | s3-selftest: enable running RPC-NETLOGON-S3 against samba3. | Günther Deschner | 1 | -1/+1 | |
Guenther | |||||
2009-08-26 | s3 onefs: Canonicalize the ACL in the correct order | tprouty | 1 | -4/+8 | |
2009-08-26 | s3: Allow full_audit to play nice with smbd if it's using syslog | tprouty | 2 | -1/+17 | |
Explictly pass the facility from both smbd and full_audit to syslog. Really the only major change is to not call openlog() in full_audit if WITH_SYSLOG is defined, which implies that smbd is already using syslog. This allows full audit to piggy-back on the same ident as smbd, while still differentiating the logging via the facility. | |||||
2009-08-26 | s3 audit: Change create_file in full_audit to print whether a directory or ↵ | tprouty | 1 | -2/+28 | |
file was requested full_audit will now print out whether the createfile was requested for a file or directory. The create disposition is also printed out. | |||||
2009-08-26 | s3:winbind: Fix Coverity ID 942: Resource Leak | Volker Lendecke | 1 | -0/+2 | |
2009-08-26 | s3-netlogon: let get_md4pw() return a struct dom_sid. | Günther Deschner | 1 | -7/+5 | |
Guenther | |||||
2009-08-26 | Add a parameter to disable the automatic creation of krb5.conf files | Volker Lendecke | 3 | -1/+19 | |
This is necessary because MIT 1.5 can't deal with certain types (Tree Root) of transitive AD trusts. The workaround is to add a [capaths] directive to /etc/krb5.conf, which we don't automatically put into the krb5.conf winbind creates. The alternative would have been something like a "krb5 conf include", but I think if someone has to mess with /etc/krb5.conf at this level, it should be easy to add the site-local KDCs as well. Next alternative is to correctly figure out the [capaths] parameter for all trusted domains, but for that I don't have the time right now. Sorry :-) | |||||
2009-08-26 | s3-netlogon: fix default case when _netr_LogonSamLogon is called from other ↵ | Günther Deschner | 1 | -1/+3 | |
opcodes. Guenther | |||||
2009-08-26 | Revert "s3: Fix uninitialized const char *" | Günther Deschner | 1 | -1/+0 | |
Tim, I am reverting this as this eliminates "_netr_LogonSamLogonEx" from the debug messages completely. Followup fix to come immediately. This reverts commit add9b4afb14d3426d1f3bf5b8e7c86926f462578. | |||||
2009-08-26 | s3-netlogon: get rid of init_net_r_req_chal(). | Günther Deschner | 1 | -13/+1 | |
Guenther | |||||
2009-08-26 | s3-netlogon: let get_md4pw() return a struct samr_Password. | Günther Deschner | 2 | -8/+7 | |
(in preparation of credential merge). Guenther | |||||
2009-08-26 | s3-netlogon: make _netr_ServerAuthenticate a callback to ↵ | Günther Deschner | 1 | -46/+16 | |
_netr_ServerAuthenticate3. Guenther | |||||
2009-08-25 | Allow for name array strings that don't end in a slash | Zach Loafman | 1 | -12/+17 | |
Fix set_namearray to allow for strings that don't end in a slash. Also remove unnecessary strdup()s. Signed-off-by: Tim Prouty <tprouty@samba.org> | |||||
2009-08-25 | Add some const to dsgetdcname | Volker Lendecke | 2 | -6/+6 | |
2009-08-25 | Do an early TALLOC_FREE | Volker Lendecke | 1 | -1/+2 | |
2009-08-24 | Help debug for bug 6651 - smbd SIGSEGV when breaking oplocks. | Jeremy Allison | 1 | -0/+4 | |
Should help track if we get invoked with an invalid fd from the signal handler. Jeremy. | |||||
2009-08-24 | Second attempt at fix for bug 6529 - Offline files conflict with Vista and ↵ | Jeremy Allison | 19 | -133/+188 | |
Office 2003. Confirmation from reporter that this fixes the issue in master on ext3/ext4. Back-ports to follow. Jeremy. | |||||
2009-08-24 | Use existing time_t rounding function, don't invent my own. | Jeremy Allison | 1 | -1/+1 | |
Jeremy. | |||||
2009-08-24 | s3-netlogon: Only hand out rid when netlogon credential chain has been setup ↵ | Günther Deschner | 1 | -1/+5 | |
sucessfully. Guenther | |||||
2009-08-24 | Second part of fix for 6529 - Offline files conflict with Vista and Office 2003. | Jeremy Allison | 3 | -0/+22 | |
ext4 may be able to store ns timestamps, but the only API to *set* timestamps takes usec, not nsec. Round to usec on set requests. Jeremy. | |||||
2009-08-24 | make smbcontrol smbd ping work proper checking for arguments handle short ↵ | Olaf Flebbe | 2 | -14/+21 | |
pid_t correctly | |||||
2009-08-24 | LIBREPLACEOBJ now contains the full path | Andrew Tridgell | 1 | -4/+1 | |
2009-08-24 | s3:lib: setup talloc log and abort functions | Stefan Metzmacher | 1 | -0/+7 | |
metze | |||||
2009-08-24 | s3:configure: require talloc >= 2.0.0 | Stefan Metzmacher | 1 | -1/+1 | |
metze | |||||
2009-08-23 | s3:winbind: Fallback to the forest root for lookupname | Volker Lendecke | 1 | -0/+49 | |
Thanks to Steven Danneman for watching me closely :-) | |||||
2009-08-23 | s3:winbind: Even on a domain controller, "our" domain is internal | Volker Lendecke | 1 | -6/+0 | |
It happens to be what we also share out via NETLOGON/SAMR, but winbind has direct access to it via the passdb domain methods | |||||
2009-08-23 | s3:winbind: Do not drop the first user in sam_query_user_list | Volker Lendecke | 1 | -3/+4 | |
2009-08-23 | s3:winbind: For internal domains it is pointless to connect to a DC | Volker Lendecke | 2 | -1/+11 | |
2009-08-23 | s3:winbind: winbindd_dual_ndrcmd should output what it's doing | Volker Lendecke | 1 | -0/+4 | |
2009-08-23 | s3:winbind: Fix the talloc hierarchy in wb_queryuser_done | Volker Lendecke | 1 | -1/+1 | |
We need to return state->userinfo beyond the end of wb_queryuser_recv, so the unmarshalled strings are children of that, not the state that is lost sooner. Metze, this scheme works fine as long as we only have a single malloc'ed entity that is returned. I think we need a different scheme in the future when we might have more than one independent object to be returned. |