summaryrefslogtreecommitdiff
path: root/source3
AgeCommit message (Collapse)AuthorFilesLines
2010-10-14s3-acl Merge source4-supported privileges into se_access_checkAndrew Bartlett1-5/+9
This will shortly be the common se_access_check function. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14s3-util_nttoken.c Also copy the rights_mask when copying a security_tokenAndrew Bartlett1-0/+4
These are unused in source3/ code at the moment, but it would be unfortunate if that were to change, and this function not be updated. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14s3-auth Use security_token_debug() from common codeAndrew Bartlett8-35/+7
This prints the security token including the privileges as strings instead of just a bitmap. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14s3-auth use security_token_has_sid() from the common codeAndrew Bartlett1-9/+2
The wrapper call is left here to avoid changing semantics for the NULL parameter case. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14s3 Replace is_sid_in_token() with security_token_has_sid() from common codeAndrew Bartlett6-21/+10
The two routines are identical, so there is no need to keep both. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-13s3:gpfs: Add support for the gpfs_ftruncate callChristian Ambach3-2/+28
ported from the v3-4-ctdb branch to master This used to be commit 1f138cc9f4a Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Wed Oct 13 13:34:25 UTC 2010 on sn-devel-104
2010-10-13s3:vfs:gpfs convert sharemodes/leases parameterChristian Ambach2-20/+64
convert gpfs:sharemodes and gpfs:leases parameters from a global setting to a per share setting
2010-10-13s3:vfs:syncops add option to disable module per shareChristian Ambach1-6/+35
add an option to disable the syncops module completely for a share with syncops:disable = true
2010-10-13s3:vfs:syncops make it possible to specify syncops:onclose per shareChristian Ambach1-7/+43
convert the onclose option of the vfs_syncops module from a global option to a service-specific one as preparation for further flags, use a struct to store in the VFS handle instead of just the onclose flag
2010-10-12s3:registry: fix some trailing spaces in reg_backend_dbMichael Adam1-6/+6
Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Tue Oct 12 14:15:42 UTC 2010 on sn-devel-104
2010-10-12libcli/security Provide a common, top level libcli/security/security.hAndrew Bartlett145-45/+145
This will reduce the noise from merges of the rest of the libcli/security code, without this commit changing what code is actually used. This includes (along with other security headers) dom_sid.h and security_token.h Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 12 05:54:10 UTC 2010 on sn-devel-104
2010-10-12Make the vfs_acl_xattr and other modules work with NULL SD's. FixJeremy Allison1-41/+29
the "protected" inheritance problem (bleeding up from the POSIX layer). Jeremy Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Tue Oct 12 00:57:41 UTC 2010 on sn-devel-104
2010-10-11Canonicalize incoming and outgoing ACLs.Jeremy Allison1-4/+55
Jeremy.
2010-10-11Make the posix ACL module cope with a NULL incoming DACL and aJeremy Allison1-0/+31
missing owner/group. Jeremy.
2010-10-11s3-spoolss: add more userlevel info validation to _spoolss_OpenPrinterEx.Günther Deschner1-0/+9
Guenther
2010-10-11s3-spoolss: let set_printer_hnd_name return WERROR.Günther Deschner1-17/+19
Guenther
2010-10-11s3-spoolss: convert open_printer_hnd to return WERROR.Günther Deschner1-11/+16
Guenther
2010-10-11s3-spoolss: fix set_printer_hnd_name() to match torture test.Günther Deschner1-9/+15
Guenther
2010-10-09More neccessary const.Jeremy Allison2-2/+2
Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Sat Oct 9 01:47:25 UTC 2010 on sn-devel-104
2010-10-08s3: Hang the isilon kernel oplocks off the NULL contextVolker Lendecke1-1/+2
All I see is a fd_event that does not need a special destructor. Tim, Steven, I've added the #error as well for you to remove after review. Thanks, Volker Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Fri Oct 8 20:48:11 UTC 2010 on sn-devel-104
2010-10-08s3: Hang the irix kernel oplocks off the NULL ctxVolker Lendecke1-1/+1
Just a fd_event to be cleaned up. The pipe is closed implicitly.
2010-10-08s3: Hang the linux kernel oplocks off the NULL ctxVolker Lendecke1-1/+1
The destructor that is called removes the signal handler. But at process exit the signal handling is lost anyway.
2010-10-08s3: Call printer_list_parent_init in the parentVolker Lendecke1-0/+5
Simo, please check!
2010-10-08s3: Remove talloc_autofree_context() from get_printer_list_db()Volker Lendecke1-1/+1
Another db that does not need explicit closing
2010-10-08s3: Remove talloc_autofree_context() from loadparm.cVolker Lendecke1-6/+5
None of these uses requires a special destructor
2010-10-08s3: Add a little test for the echo responderVolker Lendecke4-1/+146
2010-10-08s3: Implement echo_TestSleepVolker Lendecke1-1/+1
2010-10-08Move talloc_enable_null_tracking() to the s3 daemonsVolker Lendecke3-3/+21
2010-10-08s3-waf: slowly getting modules to match how they look like in old build.Günther Deschner5-170/+170
Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Fri Oct 8 09:31:01 UTC 2010 on sn-devel-104
2010-10-08s3: Fix input check in is_encrypted_packetVolker Lendecke1-1/+3
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Fri Oct 8 07:40:52 UTC 2010 on sn-devel-104
2010-10-08Fix bug 7716 - acl_xattr and acl_tdb modules don't store unmodified copies ↵Jeremy Allison1-1/+13
of security descriptors. As pointed out by an OEM, the code within smbd/posix_acl.c, even though passed a const pointer to a security descriptor, still modifies the ACE entries within it (which are not const pointers). This means ACLs stored in the extended attribute by the acl_xattr module have already been modified by the POSIX acl layer, and are not the original intent of storing the "unmodified" ACL from the client. Use dup_sec_desc to make a copy of the incoming ACL on talloc_tos() - that is what is then modified inside smbd/posix_acl.c, leaving the original ACL to be correctly stored in the xattr. Jeremy. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Oct 8 00:37:53 UTC 2010 on sn-devel-104
2010-10-07s3: Fix the async echo responder for netbios keepalivesVolker Lendecke1-10/+23
This fixes a crash in the echo responder when the client started to send the NetBIOS-Level 0x85-style keepalive packets. We did not correctly check the packet length, so the code writing the signing seqnum overwrote memory after the malloc'ed area for the 4 byte keepalive packet. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Thu Oct 7 19:47:35 UTC 2010 on sn-devel-104
2010-10-07s3-spoolss: make it possible to have and announce a [prnproc$] share on the ↵Günther Deschner1-2/+12
printserver. Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Thu Oct 7 16:09:14 UTC 2010 on sn-devel-104
2010-10-07s3-rpcclient: add openprinter_ex command.Günther Deschner1-1/+47
Guenther
2010-10-07samr: for correctness, rename samr_RidTypeArray to samr_RidAttrArray.Günther Deschner6-12/+12
Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Thu Oct 7 12:04:32 UTC 2010 on sn-devel-104
2010-10-07s3-samr: fix _samr_QueryGroupMember().Günther Deschner1-2/+5
that array contains attributes, not sid types. Guenther
2010-10-07 s3: Adding TCP_KEEPALIVE_THRESHOLD and TCP_KEEPALIVE_ABORT_THRESHOLD to ↵Ira Cooper1-0/+6
the list of accepted socket settings. These are both exclusive to Solaris/OpenSolaris. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Thu Oct 7 00:26:39 UTC 2010 on sn-devel-104
2010-10-06Fix crash in SMB2 rename found by gentest. We must always have an lcompJeremy Allison1-1/+1
in the destination struct for a rename, so set the flag appropriately. Jeremy.
2010-10-06s3: Make the write end of the echo responder pipe non-blockingVolker Lendecke1-0/+1
Without this, we can get a writable pipe end, but the writev call on the pipe will block. Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Wed Oct 6 13:57:30 UTC 2010 on sn-devel-104
2010-10-06s3-build: use the simpler "make bin/smbtorture" for s4 tortureAndrew Tridgell1-2/+2
and the same for bin/ndrdump Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Oct 6 12:58:21 UTC 2010 on sn-devel-104
2010-10-06s3-spoolss: added another intermittent failure to knownfailAndrew Tridgell1-0/+1
Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Oct 6 11:55:00 UTC 2010 on sn-devel-104
2010-10-06Fix crash in SMB2 rename found by gentest. We must always have an lcompJeremy Allison1-1/+1
in the destination struct for a rename, so set the flag appropriately. Jeremy. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Oct 6 00:29:51 UTC 2010 on sn-devel-104
2010-10-05selftest: make it more obvious we only expect the printjob tests to fail.Günther Deschner1-1/+2
Guenther
2010-10-05s3-waf: add slightly different mkbuildoptions awk script for waf.Günther Deschner2-1/+274
This allows to run make test (w/o smbtorture4 for now) using waf. Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Tue Oct 5 18:24:55 UTC 2010 on sn-devel-104
2010-10-05s3-waf: use more of the NDR_ subsystems.Günther Deschner1-8/+7
Guenther
2010-10-05Fix bug 7704 - Possible error in fix to rpc_server/srv_spoolss_nt.c.Jeremy Allison1-1/+1
From pjb1008@cam.ac.uk - Service numbers start from 0. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Tue Oct 5 17:32:34 UTC 2010 on sn-devel-104
2010-10-05s3-selftest: enable smb2 torture tests against samba3.Günther Deschner2-1/+5
Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Tue Oct 5 14:38:07 UTC 2010 on sn-devel-104
2010-10-05s3-reg_parse: fix uninitialized variable in srprs_key().Günther Deschner1-1/+1
Guenther
2010-10-05s3-libndr: handle NDR_ERR_IPV6ADDRESS case in ndr_errstr().Günther Deschner1-0/+3
Guenther
2010-10-05s3-waf: convert NSS_INFO into a subsystem.Günther Deschner2-8/+52
We don't do the fancy symlinking to idmap modules though. Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Tue Oct 5 10:50:53 UTC 2010 on sn-devel-104