summaryrefslogtreecommitdiff
path: root/source3
AgeCommit message (Collapse)AuthorFilesLines
2009-08-21s3: fix bug #6650, authentication at member servers when winbindd is not runningMichael Adam1-1/+1
Authentication of domain users on the member server fails when winbindd is not running. This is because the is_trusted_domain() check behaves differently when winbindd is running and when it isn't: Since wb_is_trusted_domain() calls wbcDomainInfo(), and this will also give a result for our own domain, this succeeds for the member server's own domain when winbindd is running. When winbindd is not running, is_trusted_domain() checks (and possibly updates) the trustdom cache, and this does the lsa_EnumTrustDom() rpc call to the DC which does not return its own domain. In case of winbindd not running, before 3.4, the domain part was _silently_ mapped to the workgroup in auth_util.c:make_user_info_map(), which effectively did nothing in the member case. But then the parameter "map untrusted to domain" was introduced and the mapping was made to the workstation name instead of the workgroup name by default unless "map untrusted to domain = yes". (Commits d8c54fddda2dba3cbc5fc13e93431b152813892e, 5cd4b7b7c03df6e896186d985b6858a06aa40b3f, and fbca26923915a70031f561b198cfe2cc0d9c3aa6) This was ok as long as winbindd was running, but with winbindd not running, these changes actually uncovered the above logic bug in the check. So the correct check is to treat the workgroup as trusted / or known in the member case. This is most easily achieved by not comparing the domain name against get_global_sam_name() which is the host name unless for a DC but against my_sam_name() which is the workgroup for a DC and for a member, too. (These names are not very intuitive...) I admit that this is a very long commit message for a one-liner, but this has needed some tracking down, and I think the change deserves some justification. Michael
2009-08-21Add missing CreateFile flags to smb.hSteve French1-1/+12
2009-08-20Fix bug 6638 - ADS Domain Member: Computer Mgr can not set share ACLsJeremy Allison1-3/+19
Add good error message for share modification denial. Jeremy.
2009-08-20s3-idmap: fix two uninitialized variable warnings in idmap_tdb2.Günther Deschner1-3/+3
Guenther
2009-08-20s3:dsgetdcname: Fix a crash in dsgetdcnameVolker Lendecke1-0/+2
When returning NT_STATUS_OK we can't leave *info == NULL, this crashes in is_closest_site called from dsgetdcname(). Signed-off-by: Günther Deschner <gd@samba.org>
2009-08-20s3:dsgetdcname: Inline dsgetdcname_cache_refreshVolker Lendecke1-26/+7
Signed-off-by: Günther Deschner <gd@samba.org>
2009-08-20s3-spoolss: add stubs for new idl opcodes in spoolss server.Günther Deschner1-0/+153
Guenther
2009-08-19Fix bug #6647 - get_root_nt_token: getpwnam("root") failed!Jeremy Allison1-2/+2
Not all systems may have a "root" user, but all must have a passwd entry for a uid of zero. Jeremy.
2009-08-19Fix Red Hat bugzilla bug : https://bugzilla.redhat.com/show_bug.cgi?id=516165Jeremy Allison1-1/+1
nautilus fails to copy files from an SMB share. This is a show-stopper for 3.4.1 (I'll open a Samba.org bug). Although gnome-vfs is doing *incredibly* stupid things by asking for a read size of 65535 - this translates on the wire to a 65534 byte read followed by a 1 byte read. Please send this back to the gnome developers that they will ge horrid on the wire performance for this. Jeremy.
2009-08-19s3:smbd: implement SMB2 Find (Query Directory)Stefan Metzmacher1-1/+197
metze
2009-08-19s3:smbd: store a dirptr on the files_struct for SMB2 Query DirectoryStefan Metzmacher2-0/+6
metze
2009-08-19s3:smbd: add a generic smbd_dirptr_lanman2_entry() functionStefan Metzmacher2-46/+214
This can we used by SMB2, the key difference between SMB1 and SMB2 is that with SMB2 entries are aligned to 8 bytes and there's no padding at the end of the last entry. metze
2009-08-19s3:smbd: implement all SMB2 Create contexts except "ExtA"Stefan Metzmacher1-8/+217
metze
2009-08-19s3:smbd: make smbd_check_open_rights() function non-static for use in SMB2Stefan Metzmacher2-8/+13
metze
2009-08-19s3 merged build: Don't build wbinfo twice.Kai Blin1-0/+3
Many, many thanks to Metze for telling me which chicken to sacrifice.
2009-08-19Make refusal of SEC_DESC_DACL_PROTECTED configurableVolker Lendecke1-1/+3
This adds a parameter "gpfs:refuse_dacl_protected" that defaults to false. GPFS has no place to store the SEC_DESC_DACL_PROTECTED ACL bit. With this parameter we give customers an option to either ignore this bit or refuse setting an ACL with it.
2009-08-19s3:smbd: parse context blobs in SMB2 CreateStefan Metzmacher1-48/+150
metze
2009-08-18wbinfo: Fix up s3 blackbox test. wbinfo no longer needs a config file.Kai Blin1-1/+1
2009-08-18wbinfo: Use one codebase for Samba3 and Samba4.Kai Blin1-1/+1
There can be only one....wbinfo that is.
2009-08-18s3 net: Add getauthuser/setauthuser commands.Kai Blin1-0/+124
These replace the functionality of wbinfo --get-auth-user/--set-auth-user
2009-08-17s3-spoolss: remove another duplicate copy of print_architecture_table.Günther Deschner1-23/+12
Guenther
2009-08-17s3:smbd: add support for canceling SMB2 Notify calls.Stefan Metzmacher1-0/+17
metze
2009-08-17s3:smbd: add smbd_notify_cancel_by_smbreq()Stefan Metzmacher2-0/+23
This function will be used by the SMB2 notify code. metze
2009-08-17s3:smbd: implement SMB2 Cancel correctly.Stefan Metzmacher13-60/+32
metze
2009-08-16s3:winbind: The get[gr|pw]end functions need access to the client stateVolker Lendecke18-3/+36
2009-08-16s3:winbind: Convert WINBINDD_GETGRNAM to the new APIVolker Lendecke5-253/+199
2009-08-16s3:winbind: Convert WINBINDD_GETGRGID to the new APIVolker Lendecke5-52/+143
2009-08-16s3:winbind: Add winbindd_print_groupmemVolker Lendecke2-0/+75
This converts a talloc_dict retrieved from wb_group_members to the string that the pipe protocol expects
2009-08-16s3:winbind: Make fill_grent publically availableVolker Lendecke2-3/+4
2009-08-16s3:winbind: Add const to normalize_name_mapVolker Lendecke2-4/+4
2009-08-16s3:winbind: Add async wb_getgrsidVolker Lendecke3-0/+160
2009-08-16s3:winbind: Add async wb_group_membersVolker Lendecke12-2/+1091
2009-08-16s3:winbind: Make wcache_lookup_groupmem available publicallyVolker Lendecke2-24/+60
2009-08-16s3: Add talloc_dict.[ch]Volker Lendecke5-0/+258
2009-08-16s3:winbind: Convert winbindd_show_sequence to the new APIVolker Lendecke5-112/+178
2009-08-16s3:winbind: Add async wb_seqnumsVolker Lendecke3-0/+139
This is something that would have been very difficult with the old style of async requests: Send the request to all children simultaneously.
2009-08-16s3:winbind: Add async wb_seqnumVolker Lendecke12-2/+447
2009-08-16s3:winbind: WINBIND_USERINFO -> wbint_userinfoVolker Lendecke12-87/+49
2009-08-16s3:winbind: Simplify _wbint_[GU]id2SidVolker Lendecke1-16/+4
2009-08-15s3:Makefile: build ../libcli/smb/smb2_create_blob.o as part of smbdStefan Metzmacher1-0/+1
metze
2009-08-14Use defined names rather than numeric constants to make codeJeremy Allison1-2/+2
clearer. Jeremy.
2009-08-14gpfs.so: map the file_inherit and dir_inherit flags away for filesMichael Adam1-1/+15
GPFS sets inherits dir_inhert and file_inherit flags to files, too, which confuses windows, and seems to be wrong anyways. So when mapping a nfs4 acl to a windows acl, we map these flags away for files. Michael
2009-08-14s3:smbd: allow SMB2 Cancel to have the async flag setStefan Metzmacher1-6/+8
metze
2009-08-14s3:smbd: fix parsing of the SMB2 bodyStefan Metzmacher1-5/+7
Maybe there's no dynamic part on the wire. metze
2009-08-12Fix EVERY SINGLE build on the buildfarm that doesn't haveJeremy Allison2-0/+5
bindtextdomain or textdomain. C'mon, this is what configure.in is *FOR*. Jeremy.
2009-08-12Move build over to storing DOS attributes in EA's.Jeremy Allison1-2/+4
Turn off "map to" directives. I've now fixed the issues with the build tests running this way. I think this is how most people run these days - please raise this on the list (or revert) if you disagree.
2009-08-12When mapping EA's into a TDB, don't remove the EAJeremy Allison1-0/+9
until the last link to the file is gone (fixes the build farm RAW-RENAME test with xattr's in tdb's). Jeremy.
2009-08-12Fix BASE-DELAYWRITE test by removing const from struct smb_filenameJeremy Allison3-21/+21
in smbd_do_qfilepathinfo(). update_stat_ex_mtime() modifies the stat struct inside the smb_fname so don't make a copy of that stat struct, use it directly - it's meant to be updated and represent the state of the file we're returning. Jeremy.
2009-08-12Add "store create time" parameter (docs to follow)Jeremy Allison10-15/+140
that stores the create time in the user.DosTimestamps EA. Jeremy.
2009-08-12Fix some warnings in the AIX ACL code.Jeremy Allison1-4/+3
Jeremy.
generated by cgit (git 2.34.1) at 2024-07-15 15:01:09 +0000