summaryrefslogtreecommitdiff
path: root/source3
AgeCommit message (Collapse)AuthorFilesLines
2007-10-10r1183: Updates to the code cleanup so I don't lose my changes...Jeremy Allison1-52/+62
Jeremy. (This used to be commit 786a440c189556d5c122b2c9ddca9fdf6bd65d1d)
2007-10-10r1182: Partial re-write of keytab code to clean up, remove memory leaks etc. ↵Jeremy Allison1-47/+77
Work in progress ! It seems the krb5 interfaces are so horrible it's impossible to write good error checking code :-(. Jeremy. (This used to be commit 03f8c8bc07c9d8a378a34c271dcc088d17adb342)
2007-10-10r1180: New file - basis of new system keytab code.Jeremy Allison1-0/+434
Jeremy. (This used to be commit 858e849af697bba67ebaa970257d93b6cff7d9e0)
2007-10-10r1179: Start of system keytab merge. Config tests.Jeremy Allison1-0/+35
Jeremy. (This used to be commit 730d750c045a762d54a6ce3df94c871231dc6596)
2007-10-10r1175: Nowadays we actually do have local groups, so add the corresponding ↵Volker Lendecke1-8/+11
SIDs to the NT token we build. Thanks to Guenther Deschner <gd@sernet.de>. Volker (This used to be commit 2f9143dee901f7fc9e5ff0218527f1f4cff1991e)
2007-10-10r1171: Patch from "Lu, Jianliang" <Jianliang.Lu@getronics.com> toJeremy Allison1-0/+6
reset password counts when account is reset. Jeremy. (This used to be commit 6fb64d8b368d1b24768c5817d5deac1e502e694a)
2007-10-10r1156: Ensure new remote arch of CIFSFS is seen.Jeremy Allison1-0/+3
Jeremy. (This used to be commit 33fa4b8b27427874ac70af00908d97709c1cddc7)
2007-10-10r1154: Change default setting for case sensitivity to "auto". If set to autoJeremy Allison13-33/+98
then is the client supports it (current clients supported are Samba and CIFSVFS - detected by the negprot strings "Samba", "POSIX 2" and a bare "NT LM 0.12" string) then the setting of the per packet flag smb_flag FLAG_CASELESS_PATHNAMES is taken into account per packet. This allows the linux CIFS client to use Samba in a case sensitive manner. Additional command in smbclient "case_sensitive", toggles the flag in subsequent packets. Docs to follow. Jeremy. (This used to be commit cf84c0fe1a061acc0313f7db124b8f947cdf623d)
2007-10-10r1128: The end-of-file is not the end of the world, so don't make a load ↵Andrew Bartlett1-3/+7
DEBUG() about it. Andrew Bartlett (This used to be commit 4da976dbd07e70726055cc4251fd1c26f63b3b2c)
2007-10-10r1127: Finding trusted domains is not so important as to require a DEBUG(1).Andrew Bartlett1-1/+1
Andrew Bartlett (This used to be commit 999b2501a14d1f611f6bfe1f800a852825a21526)
2007-10-10r1126: Allow more flexible GSS-SPENGO client and server operation. TheAndrew Bartlett1-16/+18
client now falls back to NTLMSSP, and the server allows the client to start, without first asking for a mech list. Andrew Bartlett (This used to be commit feccc3daca7b2e9091b81fbbb93dc7284baedb99)
2007-10-10r1125: Remove bougus comments. (The real fix was to the sealed pipe padding)Andrew Bartlett2-7/+2
Andrew Bartlett (This used to be commit 61768f4cb3a268ce30911b15b30f82de36716b5f)
2007-10-10r1124: ntlm_auth memory leak fixes by James Wilkinson - ↵Andrew Bartlett1-0/+4
jwilk@alumni.cse.ucsc.edu Andrew Bartlett (This used to be commit 94c0827ce20d8d1084703f6f5e4ad3b3c33151f8)
2007-10-10r1122: As spotted by lha@stacken.kth.se we don't actually use this variable ↵Andrew Bartlett1-2/+0
any more. Andrew Bartlett (This used to be commit 9d5821d5ee5e9f666dfbe75419e97508af9cad5e)
2007-10-10r1121: Fix memory leak in the trans2 signing code.Andrew Bartlett1-2/+10
We would start the trans2 state, which is fine, but never pull the expected reply off the packet queue. I'm not sure if this is still a major problem after jra's recent 'no duplicate mids on the list' change, but I think this is correct anyway. (This used to be commit ee23a4237d427ce72d6a8c5f180ef48d6454cddc)
2007-10-10r1117: Doh ! Remember to turn off signing when sending a "break to level II" ↵Jeremy Allison2-11/+33
oplock message, or we mess up the signing sequence number.... Also improve sign error reporting. Also when deferring an open that had been deferred due to an oplock break, don't re-add the mid to the pending sign queue or we increment the sequence number twice and mess up signing again... I can now bounce between 2 WinXP/Win2003 boxes opening Excel spreadsheets with signing turned on and get correct "file in use" messages. Jeremy. (This used to be commit 1745ce4e2cf7fcb4c27c077973258d157cd241b1)
2007-10-10r1115: Fix for #1427. Catch bad path errors at the right point. Ensure allJeremy Allison8-80/+203
our pathname parsing is consistent. Jeremy. (This used to be commit 5e8237e306f0bb0e492f10fb6487938132899384)
2007-10-10r1111: Rename vsnprintf to smb_vsnprintf so we don't get duplicate symbol errorsJelmer Vernooij2-1/+2
when linking against an app that does have vsnprintf() (bug #478) (This used to be commit 9f1c978088321b09dea96c54026ebdfaaf770641)
2007-10-10r1108: Index: pdb_ldap.cVolker Lendecke2-0/+18
=================================================================== --- pdb_ldap.c (revision 1095) +++ pdb_ldap.c (working copy) @@ -1134,6 +1134,19 @@ return NT_STATUS_OK; } +static void append_attr(char ***attr_list, const char *new_attr) +{ + int i; + + for (i=0; (*attr_list)[i] != NULL; i++) + ; + + (*attr_list) = Realloc((*attr_list), sizeof(**attr_list) * (i+2)); + SMB_ASSERT((*attr_list) != NULL); + (*attr_list)[i] = strdup(new_attr); + (*attr_list)[i+1] = NULL; +} + /********************************************************************** Get SAM_ACCOUNT entry from LDAP by username. *********************************************************************/ @@ -1149,6 +1162,7 @@ int rc; attr_list = get_userattr_list( ldap_state->schema_ver ); + append_attr(&attr_list, MODIFY_TIMESTAMP_STRING); rc = ldapsam_search_suffix_by_name(ldap_state, sname, &result, attr_list); free_attr_list( attr_list ); @@ -1194,6 +1208,7 @@ switch ( ldap_state->schema_ver ) { case SCHEMAVER_SAMBASAMACCOUNT: attr_list = get_userattr_list(ldap_state->schema_ver); + append_attr(&attr_list, MODIFY_TIMESTAMP_STRING); rc = ldapsam_search_suffix_by_sid(ldap_state, sid, result, attr_list); free_attr_list( attr_list ); Index: login_cache.c =================================================================== --- login_cache.c (revision 1095) +++ login_cache.c (working copy) @@ -95,10 +95,13 @@ &entry->bad_password_count, &entry->bad_password_time) == -1) { DEBUG(7, ("No cache entry found\n")); + SAFE_FREE(entry); SAFE_FREE(databuf.dptr); return NULL; } + SAFE_FREE(databuf.dptr); + DEBUG(5, ("Found login cache entry: timestamp %12u, flags 0x%x, count %d, time %12u\n", (unsigned int)entry->entry_timestamp, entry->acct_ctrl, entry->bad_password_count, (unsigned int)entry->bad_password_time)); (This used to be commit c0bf8425f4b9ee30ffc878704bde980d8c51ed05)
2007-10-10r1106: Lars Mueller <lmuelle@suse.de> asked me to apply this patch, as this ↵Volker Lendecke1-5/+9
is needed for their build environment. The AFS stuff is linux 2.4 only currently, it works for me on this platform, so apply it. Volker (This used to be commit 69e8c65f1f0cb0c5237bb3b2560cd6f936503eb7)
2007-10-10r1104: get_called_name is used in the printing subsystem. In case of multi-homedVolker Lendecke2-1/+26
servers we need to make sure that the clients are given back the IP address they connected to. Volker (This used to be commit 5f482df169eebae87ec769a05e3c3fc6e32af1e3)
2007-10-10r1103: need to leave empty dacl so we can remove last ACEHerb Lewis1-5/+0
(This used to be commit d8a545368c8111fddcfdd423c4d6fcbab65e96d6)
2007-10-10r1101: Implement 'rpcclient setprintername'.Volker Lendecke1-0/+71
Thanks to Guenther Deschner <gd@sernet.de>. This needs to be generalized somewhat. Jerry, which of the parameters in the printer_info_2 struct are settable via cli_spoolss_setprinter? Volker (This used to be commit 473dd03833f5b742499750c5f3c91ea515c78f7e)
2007-10-10r1097: Fix errno being incorrectly set. Noticed by Richard.Jeremy Allison1-0/+1
Jeremy. (This used to be commit c8a55e92dd9622fa2a408b5a16f1adcf22253fc5)
2007-10-10r1093: Ensure we clear any cached errors on a deferred open call soJeremy Allison4-0/+20
we don't return the wrong error code on the next packet. Jeremy. (This used to be commit c1b06deb574d7b8e746bdf0d6f0eab16848a6cc1)
2007-10-10r1089: Removed spurious oplock message in deferred open processing.Jeremy Allison3-5/+17
Fix smb signing sequence counts. Jeremy. (This used to be commit 7e2a5c36614282b6bd50b60360f443549426dd4b)
2007-10-10r1087: BUG 1221: revert old change that used single and double quotes as ↵Gerald Carter2-3/+3
delimters in next_token(), and change print_parameter() to print out parm values surrounded by double quotes (instead of single quotes) (This used to be commit b0739b073a1db8b0b163726a1d181b2f05d71883)
2007-10-10r1085: Now it's had some proper user testing, merge in the deferred open ↵Jeremy Allison16-83/+974
fix. I'm still doing more testing, but it fixes a behaviour that we've been wrong on ever since the start of Samba. Jeremy. (This used to be commit 894cc6d16296b934c112786eec896846156aee5d)
2007-10-10r1011: fix bad merge (from a few months ago) and ensure that we always use ↵Gerald Carter5-12/+12
tdb_open_log() instead of tdb_open_ex() (This used to be commit e65564ab4aa1240e84b8d272510aa770cad0ed0e)
2007-10-10r1007: merge from SAMBA_4_0:Stefan Metzmacher1-0/+5
print out the SVN revision by configure, so that the build farm can use it metze (This used to be commit 98e6c3105dff65ed0312e8f121a9038b33a4397a)
2007-10-10r998: Arrrgggh. Do it right this time :-(.Jeremy Allison1-3/+3
Jeremy. (This used to be commit 7ac7cd41629779c877b62ebd54b965980f4dc7bf)
2007-10-10r996: Fix error in change to queuing code (dlink).Jeremy Allison1-3/+3
Jeremy. (This used to be commit 6bd6359090b59d48370e16bb0ddc267a51b361c7)
2007-10-10r993: BUG 703 -- finishing patch by Eric Boehm <boehm@nortelnetworks.com> ↵Gerald Carter1-14/+17
for netgroup case lookups (This used to be commit 82f3fee5954ef57e922a9da077893422e054839f)
2007-10-10r991: Allow winbindd to use the domain trust account passwordGerald Carter10-55/+207
for setting up an schannel connection. This solves the problem of a Samba DC running winbind, trusting a native mode AD domain, and needing to enumerate AD users via wbinfo -u. (This used to be commit e9f109d1b38e0b0adec9b7e9a907f90a79d297ea)
2007-10-10r989: Calling sid_to_gid from within winbind makes no sense, as this callsVolker Lendecke2-1/+10
winbind_sid_to_gid. For the consistency check, local_sid_to_gid must set the name_type it found. Volker (This used to be commit 5070c1b68f2add16916ba3135984f6e70bbe42cf)
2007-10-10r988: When adding local aliases' gids to the user token, don't do a ↵Volker Lendecke1-11/+31
idmap_sid_to_gid on the user sid. This might lead to a user SID entered as a GID in the idmap. Volker (This used to be commit 98e10d149710d9b70404e77a4bc0560c2e48aeaf)
2007-10-10r984: Ensure memmove & memcpy aren't called with len == 0.Jeremy Allison1-4/+8
Jeremy. (This used to be commit 40c77dddc65e18b879d922379d562ffb8be80ab5)
2007-10-10r979: Implement the 'cups server' option. This makes it possible to have virtualVolker Lendecke2-18/+33
smbd's connect to different cups daemons. Volker (This used to be commit 148dc71ea5c1ec619ba6f4873fa7c69a608e58cc)
2007-10-10r977: Implement 'net rpc group rename' -- rename domain groups.Volker Lendecke3-0/+133
Volker (This used to be commit 9ceff803278bdbc09cb5ab678a108cea24ab49a9)
2007-10-10r974: Fix open code to pass more torture tests. We now pass the Samba4Jeremy Allison1-28/+87
oplock test. We do this be changing the algorithm when breaking oplocks slightly. Previously we broke an oplock, then re-loaded the share modes and re-iterated. Now we break all oplocks, then re-load the share modes and check the share details - then iterate. This seems to match the way Win2k3 does it. Jeremy. (This used to be commit 5ec4f4e4e6596ea0f52aca5c9e1a75bf35612e37)
2007-10-10r971: Auto remove store dos attributes if underlying filesystemJeremy Allison3-11/+37
doesn't support EA's. Jeremy. (This used to be commit 9de6b25c9e9abe982e21b0229df520802cafbfd8)
2007-10-10r964: The max_size field in cli_samr_enum_als_groups is more like an ↵Volker Lendecke1-1/+7
account_control field with indiviual bits what to retrieve. Set this to 0xffff as NT4 usrmgr.exe does to get everything. I'm too lazy (sorry) to get this through to rpc_parse/ etc. Volker (This used to be commit d7239c2611a62873cc9eff296c84e91198a5c552)
2007-10-10r957: Fixup moribund unix extensions mknod code path. Don't add inJeremy Allison1-2/+3
configure test yet. Also allow unix domain socket create. Jeremy. (This used to be commit 2db0c4ca7b23cdd1dbf83d4de58acbf4dc118df2)
2007-10-10r947: Patch from Fabian Franz <FabianFranz@gmx.de> that allows youJelmer Vernooij1-4/+16
to specify a port in the device URL. (This used to be commit e6dcda2b10c4871ca8488bf04b22c2c11673621d)
2007-10-10r945: "Correct" (as in, more correct) way to handle stat opens. Doesn't regressJeremy Allison1-22/+25
the torture tester. Passes OPEN tests in Samba3 and Samba4 and oplock tests in Samba4. Last thing to check, can an "attribute only" open actually create a file. I think it can.... Jeremy. (This used to be commit d8177a42d4a2a2b6df5d0593f2f92bddc29ffe94)
2007-10-10r942: If using DOS error codes, we need to return ERRDOS/ERRbadpath for ↵Volker Lendecke1-1/+1
chkpth even if only the last component failed. I'm not sure if all the other cases of NT_STATUS_OBJECT_NAME_NOT_FOUND also need to be fixed, this at least helps with 'copy test1.txt test2.txt' from DOS within a subdirectory. Yes, I do have someone who needs this :-) Jeremy, could you take a look at this? Thanks, Volker (This used to be commit 3093ab100653782bd8e029170d315c68b7f271af)
2007-10-10r938: on an error save the original errno before calling iconv to resetHerb Lewis1-1/+5
the conversion state (This used to be commit 4a5a122b3a85c653bbf458342400f3b8a69dc615)
2007-10-10r936: Fix a rather weird error that crippled my site, when we upgraded toAndrew Bartlett1-7/+4
Samba 3.0.4. If we fail a query for the members of the 'administrators' group (and we may well just have the IDL wrong), this destroys later parts of the domain logon process. For reasons I can't understand, the client-side 'heck, what happened' bailout causes the connection to the DC to be dropped, and causes the mandetory profile not to be loaded. (This also only occours after a reboot) Return the members of 'administrators', and it all works fine. The reason we hit this is because we run winbindd (to support pam_winbind) on our DC, and the winbindd lookup in sid_to_gid was messing things up. As we don't care what type of thing this is, provided it exists in the group mapping db, we should not bother winbindd here. Andrew Bartlett (This used to be commit d626b5c6d401e72296cf570e50f324c145fd70e0)
2007-10-10r933: When using widelinks = no, use realpath to canonicalize theJeremy Allison3-2/+41
connection path on connection create for the user. We'll be checking all symlinked paths are below this directory. Jeremy. (This used to be commit b562fe9fbca4971059b913959bbaca02af42c1a4)
2007-10-10r931: Ensure we push 16 bytes (including null termination)Jeremy Allison1-2/+2
not 15. (This used to be commit 1d3fd1a58e0a8b08fe028ceee03618180c7d4b97)