summaryrefslogtreecommitdiff
path: root/source3
AgeCommit message (Collapse)AuthorFilesLines
2009-04-19Add "uint32_t access_granted" to policy handlesVolker Lendecke3-58/+97
All policy handles have a mask of allowed operations attached that were calculated at creation time, so they should carry this mask. This is the basis for consolidating all our policy handle access checks. If you want to do your own more complicated access checks further down, just pass "0" to policy_handle_find.
2009-04-19Make "struct policy" private to srv_lsa_hnd.cVolker Lendecke5-19/+31
2009-04-18Convert the samr connect_handles to type-safe callsVolker Lendecke1-23/+37
2009-04-18Add type-safe policy_handle_create/findVolker Lendecke2-0/+57
2009-04-18Add some constVolker Lendecke2-3/+7
2009-04-17s3-spoolss: remove some direct checks for 0 uid in AddForm,SetForm,DelForm.Günther Deschner1-4/+13
Also add some become_root()/unbecome_root() pairs which were missing IMHO. Guenther
2009-04-17s3:net: add --request-timeout optionStefan Metzmacher3-0/+4
metze
2009-04-17s3:net_rpc: don't shutdown a cli_state passed from the callerStefan Metzmacher1-9/+8
This fixes a crash bug if we timeout in net rpc trustdom list. metze
2009-04-17s3-selftest: enable RPC-SPOOLSS.Günther Deschner1-1/+1
Guenther
2009-04-17s3-spoolss: add support for _spoolss_EnumPrinterDrivers() level 6.Günther Deschner1-1/+25
Guenther
2009-04-17s3-spoolss: add support for _spoolss_EnumPrinterDrivers() level 5.Günther Deschner1-0/+71
Guenther
2009-04-17s3-spoolss: add support for _spoolss_EnumPrinterDrivers() level 4.Günther Deschner1-0/+90
Guenther
2009-04-17s3: make installmo and uninstallmo scripts executableMichael Adam2-0/+0
Michael
2009-04-17s3: Fix uninstallmoMichael Adam1-1/+2
Michael
2009-04-17s3-selftest: samba 3 also passes RPC-JOIN so enable it.Günther Deschner1-1/+1
Guenther
2009-04-17s3:registry: Prevent creation of keys containing the '/' character.Michael Adam1-0/+10
This creates a broken registry that can only be fixed with tdbtool, since the '/' sign is used as a key separator after normalization at a lower level. This makes e.g. "net conf setparm abc/def comment xyz" fail with WERR_INVALID_PARAM, which is much more desirable than a broken registry.tdb. Michael
2009-04-17s3-samr: set the builtin_domain bool flag in get_samr_dispinfo_by_sid().Günther Deschner1-0/+2
Volker, please check. Found by torture test RPC-SAMR-PASSWORDS-PWDLASTSET (which we pass with this fix). Guenther
2009-04-17s3-selftest: enable RPC-SAMR-PASSWORDS-PWDLASTSET whilte testing Samba3.Günther Deschner1-1/+2
Guenther
2009-04-17Merge branch 'master' of /home/jmcd/samba/git.samba.org/samba-master into ↵Jim McDonough14-11/+470
mymaster
2009-04-17s3-selftest: enable RPC-LSA-LOOKUPSIDS against samba 3.Günther Deschner1-1/+1
Guenther
2009-04-16Add torture tester to ensure we don't regress the ulogoff bug.Jeremy Allison1-0/+45
Jeremy.
2009-04-16Fix bug found by Tim Prouty, logging off and then re-using a vuid can cause ↵Jeremy Allison1-0/+11
smbd to access a freed structure. Jeremy.
2009-04-16When doing a cli_ulogoff don't invalidate the cnum, invalidate the vuid.Jeremy Allison1-1/+1
Jeremy.
2009-04-16Fix IDL licensing file that got missed when IDL files were moved.Jeremy Allison1-0/+9
Jeremy.
2009-04-16Don't look up local user for remote changes, even when root.Jim McDonough1-6/+10
2009-04-16Add notify_onelevel.tdbVolker Lendecke8-0/+383
This optimizes non-recursive notifys. For non-recursive notifies we can use a per-directory file-id indexed notify record. This matters for the Windows Explorer and IIS cases which do not use recursive notifies. In these cases, we do not have to shuffle around the whole notify record on every change. For the cluster case, this improves correctness of the notifies, ctdb only distributes the tdb seqnum once a second, so we can lose notifies.
2009-04-16Rename notify_context->db to db_recursiveVolker Lendecke1-9/+12
2009-04-16In net_conf_import, start a transaction when importing a single share.Martin Schwenke1-0/+8
Commit d69c3db9d44ad5d9fd1f5d7a9499f3bd79ecfb47 caused the transaction start to be conditional but the commit is still unconditional, so an error occurs when importing a single share. An alternate fix would be to return the transaction start to be unconditional but then it would occur before other error checking. Signed-off-by: Martin Schwenke <martin@meltin.net> Signed-off-by: Michael Adam <obnox@samba.org>
2009-04-16s3-lsa: Fix Bug #6263. Unexpected LookupSids reply crashes XP pre-SP3.Günther Deschner1-1/+9
LookupSids needs to bounce back string sids in case of NT_STATUS_NONE_MAPPED. Guenther (cherry picked from commit 1c9266c8caa59e287b993393b6050732a0b33547)
2009-04-15Fix bug #6089 - Winbind samr_OpenDomain not possible with Samba 3.2.6+Jeremy Allison8-53/+45
What a difference a name makes... :-). Just because something is missnamed SAMR_ACCESS_OPEN_DOMAIN, when it should actually be SAMR_ACCESS_LOOKUP_DOMAIN, don't automatically use it for a security check in _samr_OpenDomain(). Jeremy.
2009-04-14s3-spoolss: Fix format of description string in spoolss_PrinterInfo1.Günther Deschner1-10/+6
This is what windows does and should get us closer to show the appropriate printer location string in explorer. Guenther
2009-04-14netdomjoin-gui: make sure to grey out change fields when not running as root.Günther Deschner1-0/+15
Guenther
2009-04-14s3-nsswitch: fix make test_wbpad.Günther Deschner1-1/+1
Guenther
2009-04-14s3-svcctl: fix memcpy in _svcctl_EnumServicesStatusW().Günther Deschner1-2/+1
Make sure we are not copying more than what we have as valid data. Fix from Jeremy. Thanks a lot for watching this so closely! Guenther
2009-04-14s3-spoolss: remove unused dup_nt_devicemode().Günther Deschner2-29/+0
Guenther
2009-04-14s3:charcnv remove now unused malloc() based conversion functionsAndrew Bartlett2-43/+0
2009-04-14Add some harmless use of talloc_tos() in ntlm_authAndrew Bartlett2-5/+5
2009-04-14Convert Samba3 to use the common lib/util/charset APIAndrew Bartlett21-356/+190
This removes calls to push_*_allocate() and pull_*_allocate(), as well as convert_string_allocate, as they are not in the common API To allow transition to a common charcnv in future, provide Samba4-like strupper functions in source3/lib/charcnv.c (the actual implementation remains distinct, but the API is now shared) Andrew Bartlett
2009-04-14Solve some of the conflict between Samba3 and Samba4 push_stringAndrew Bartlett8-53/+86
This renames push_string in Samba3 into push_string_base and push_string_check for the two different use cases. This should allow push_string to be imported from Samba4, using it's calling conventions.
2009-04-13s3-rpcclient: add set_job command.Günther Deschner1-0/+55
Guenther
2009-04-13s3-spoolss: fix typo in fill_printer_driver_info3().Günther Deschner1-1/+1
Guenther
2009-04-13s3-loadparm: Fix resume command typo for "printing = vlp".Günther Deschner1-1/+1
Guenther
2009-04-13s3-spoolss: Fix permission checks for _spoolss_AddForm,SetForm and DelForm.Günther Deschner1-12/+34
Found by smbtorture test. Guenther
2009-04-13s3-spoolss: use enumprinterdrivers_level() for level 3 enum.Günther Deschner1-67/+6
Guenther
2009-04-13s3-spoolss: use enumprinterdrivers_level() for level 2 enum.Günther Deschner1-66/+6
Guenther
2009-04-13s3-spoolss: use enumprinterdrivers_level() for level 1 enum.Günther Deschner1-67/+7
Guenther
2009-04-13s3-spoolss: add generic enumprinterdrivers_level function.Günther Deschner1-0/+86
Guenther
2009-04-13Use convert_string_talloc, thanks Andrew!Volker Lendecke1-1/+1
2009-04-12We have to deny a level 2 oplock if kernel oplocks are enabledVolker Lendecke1-0/+6
The second r/o opener of a file is supposed to get a level2 oplock. The first opener due to the protection in process_oplock_break_message() has been forced to break to no oplock. The second opener according to locking.tdb gets a level2 oplock. Further down in open_file_ntcreate we try to set this level2 oplock in the kernel, and the non-clustered Linux kernel disallows this. The rules for the kernel leases are a bit baroque, but the attempt to do the SETLEASE correctly fails and we end up with no oplock for any client. In the clustered case however the linux kernel on the second opening node has not seen the open fd of the first node, it is only the cluster fs that has this information. If the cluster fs does not have the very same notion of leases as the local kernel has, we can end up with a WRLCK style kernel lease for the second opener where locking.tdb only indicates a level2 oplock. Getting a kernel oplock break signal with just a level2 oplock in locking.tdb is something smbd is not prepared for. For example after sending out the break in response to the kernel signal we set a timeout, waiting for a reply. More work needs to be done to make level2 kernel oplocks real for us. This patch addresses a real problem we have right now without them.
2009-04-12Fix a bug in smbclient not sending the correct called nameVolker Lendecke1-1/+5
Jeremy, I think the ability to say smbclient //foo/bar -I <ip-address> -p 139 making the called name to "foo" got lost with 3d2d0203. Was this removed deliberately? If so, please revert this patch. If not, please merge appropriately. Thanks, Volker
generated by cgit (git 2.34.1) at 2025-03-05 07:46:28 +0000