Age | Commit message (Collapse) | Author | Files | Lines |
|
Win2008 domain (merged from v3-0-test).
commit 8dc4e979776aae0ecaa74b51dc1eac78a7631405
Author: Steven Danneman <sdanneman@isilon.com>
Date: Wed May 7 13:34:26 2008 -0700
spnego SPN fix when contacting trusted domains
cli_session_setup_spnego() was not taking into consideration the situation
where we're connecting to a trusted domain, specifically one (like W2K8)
which doesn't return a SPN in the NegTokenInit.
This caused two problems:
1) When guessing the SPN using kerberos_get_default_realm_from_ccache() we
were always using our default realm, not the realm of the domain we're
connecting to.
2) When falling back on NTLMSSP for authentication we were passing the name
of the domain we're connecting to for use in our credentials when we should be
passing our own workgroup name.
The fix for both was to split the single "domain" parameter into
"user_domain" and "dest_realm" parameters. We use the "user_domain"
parameter to pass into the NTLM call, and we used "dest_realm" to create an SPN
if none was returned in the NegTokenInit2 packet. If no "dest_realm" is
provided we assume we're connecting to our own domain and use the credentials
cache to build the SPN.
Since we have a reasonable guess at the SPN, I removed the check that defaults
us directly to NTLM when negHint is empty.
(This used to be commit b78b14c88e8354aadf9ba7644bdb1c29245fe419)
|
|
looking up trust credentials in our tdb.
commit fd0ae47046d37ec8297396a2733209c4d999ea91
Author: Steven Danneman <sdanneman@isilon.com>
Date: Thu May 8 13:34:49 2008 -0700
Use machine account and machine password from our domain when
contacting trusted domains.
(This used to be commit 69b37ae60757075a0712149c5f97f17ee22c2e41)
|
|
This should fix the build with non gnu make
metze
(cherry picked from commit 401a0c84fe5f60e57e95331805da6b53dd1d7c2e)
(This used to be commit 36ba31e39b28e5495b0aeb8638df3a10ce6c51e6)
|
|
metze
(cherry picked from commit b68916328e935e61840cb03560ebeeee15bb2c6f)
(This used to be commit 196d9017627220786d8b726dc0d02e16e96c4c05)
|
|
metze
(cherry picked from commit 04d465c622c614bec29f24793ae897a73bcb51f4)
(This used to be commit e7dcbf56aef836e1b4be70b21064f65338221b5a)
|
|
There's --enable-symbol-versioning=no to disable it.
metze
(cherry picked from commit cb5492978b6b157f529806afb2f5fc6202888129)
(This used to be commit a739652d94300881479262648592223536fc8eec)
|
|
metze
(cherry picked from commit 8e0fcd583a643a8f4240698efcbb177463534a82)
(This used to be commit 17ce13775423efffd8ddfb967e1e09b2f41849af)
|
|
metze
(cherry picked from commit ce9d8ea9818d91bd91f95149f3b0a7ed4f2dae3b)
(This used to be commit dc0a4f7dc502cb285bce9de2ef72a722f91c43b9)
|
|
metze
(cherry picked from commit efb23fdce72db48b4c149fb3dd4a6f4aa3eebbbe)
(This used to be commit 3bf5a047e3d478b3356df7aa5c4f4a9d0b763639)
|
|
(This used to be commit 6106d48a5c94e7c1f3a7234807e43aca0a51fa62)
|
|
Michael
(This used to be commit 5a99f59d7514edadbab081dc0c5c28a6ea26972a)
|
|
metze
(cherry picked from commit dc09e04d524dcc92a29da0864666fd4258a81b76)
(This used to be commit c3797d6a2cc2e4c5b0678dc92924c26b18bd2678)
|
|
as they are no longer needed now we have IDL marshalling.
Change the calculation of the 32-bit fileid we return
to a Windows client. We can't just use the generation
count as it starts at zero for every smbd - and this
command must enumerate all files open across all smbds.
We'd really like combination of process-id + dev + inode +
generation count to be unique, but as we can't fit that
into 32 bits just use 16 bits of pid + generation count.
Jeremy.
(This used to be commit 8b926d5a93d04b828990057ae6f1e090764305c1)
|
|
This reverts commit 1078b5c53ae9d6f9532eecebf9cf4a1712200b7e.
This message doesn't match the actual change.
(This used to be commit a65abb49cf8d291c7deb659912c0df34ec37da02)
|
|
Jeremy.
(This used to be commit 1078b5c53ae9d6f9532eecebf9cf4a1712200b7e)
|
|
Jeremy.
(This used to be commit 2281274480d8cf9e773874301dbbc7bf06346901)
|
|
the IDL is documented incorrectly in the MS-DOCS.
Username and path need to be reversed (yes I will
raise this with MS). Secondly, we need to check
access_mask for the permissions, not share_access
(share_access are the deny modes).
Jeremy.
(This used to be commit bdaad19f90e991aba2afccfa13afbbfe2ac7baaf)
|
|
Jeremy.
(This used to be commit 0bc18967aa7cb6f4debeaa48be81d0e48a7d9503)
|
|
Previously WINBINDD_LIST_GROUPS requests (ex: wbinfo -g) were handled by the
winbindd parent process in a sequential fashion. This patch, delegates the work
to the winbindd children so that the request is handled much faster in large
domain topologies, and doesn't block the parent from receiving new requests.
The core group enumeration and conversion that was handled in
winbindd_list_groups() has been moved into winbindd_dual_list_groups() to be
done by the child.
The parent winbindd_list_groups() simply calls each of the children
asynchronously.
listgroups_recv() aggregates the final group list that will be returned to the
client and tracks how many of the children have returned their lists.
The domain name of the child is passed back through the callbacks to be used in
debugging messages.
There are also several fixes to typos in various comments.
(This used to be commit 037b9689d9042a398cb91e4628a82fcdfa913c21)
|
|
standalone builds
metze
(This used to be commit 87fa2f4a287eccb596d803096c10c3d58a253452)
|
|
detected
metze
(cherry picked from commit 84b5652d3e5766521436e4c7d59615b08b2bb198)
(This used to be commit b28b63c911efe17ba37c15c9b74edd96e9584832)
|
|
metze
(This used to be commit d53b589debdb95d3ae46e6b45c6951f522ccc5a1)
|
|
metze
(This used to be commit e94ff756be627b40c433cb53547007a5c219cc9e)
|
|
Samba can later just check libreplace_cv_HAVE_IPV6 = yes.
metze
(cherry picked from commit e835e7eebcc064ce0813814796828f15ad112fbd)
(This used to be commit 1ca4508f3a996982a528942da1b12b94b91e94cd)
|
|
Slim the interface...
Michael
(This used to be commit 9971118c23900d81e885a013e738a67df790c90c)
|
|
This is still very raw and has yet to be integrated into the test suite.
Michael
(This used to be commit 3ec3ab4e5309c63bbf2fa5efa5d2c47856560a0f)
|
|
Michael
(This used to be commit f7db445c828c0eef2c08b538bd07d485dc248689)
|
|
(This used to be commit 9e39ac1cc31d48db968e79c4698901e079007ff7)
|
|
(This used to be commit fe8f9e427af3eb42d63fde96c4fe20a255facb95)
|
|
used in rpc_pipe_open_tcp() and rpc_pipe_open_ncalrpc().
(This used to be commit a0bdd56c75ca6f6c6068995647c0dc1ba89aef12)
|
|
(This used to be commit 24ac40518f79fd480baaedc1d42f3b6fe8ea1c94)
|
|
(This used to be commit be5d54a363a57113e494202a2d22dd9bbcf13b41)
|
|
(This used to be commit 2ff908a902ec857856518eaddb5246dd5067063d)
|
|
(This used to be commit 8ae39c1339758795a91c6a168e210357e7f29eae)
|
|
be adhered to.
Jeremy.
(This used to be commit 478a359edead0677281a3ca4e64db6521941b0f3)
|
|
Conflicts:
source/Makefile.in
(This used to be commit 01987778a123f853fccdcb7fe9566143e2d7c490)
|
|
(This used to be commit 256200e951476ff31c95a7d5621a50ba297ea6e4)
|
|
used for tdb_traverse() to tdb_traverse_read().
Jeremy.
(This used to be commit bda0f03fb3fa8a7b14d4f54bee7076d691cad44f)
|
|
(This used to be commit eb281532b1721ded39c39bb00c26202080dcd735)
|
|
(This used to be commit dbb4d8107a61051d8bcf6c4c69ee976efc50b961)
|
|
This patch is the second iteration of an inside-out conversion to cleanup
functions in charcnv.c returning size_t == -1 to indicate failure.
(This used to be commit 6b189dabc562d86dcaa685419d0cb6ea276f100d)
|
|
Calling tdb_traverse inside a transaction led to the transaction lock being
held indefinitely. This was caused by the tdb_transaction_lock/unlock inside
tdb_traverse: The transaction code holds the global lock at offset
TRANSACTION_LOCK. The call to tdb_transaction_lock does nothing because the
transaction_lock is already being held. tdb_transaction_unlock inside tdb_wrap
resets tdb->have_transaction_lock but does not release the kernel-level fcntl
lock. transaction_commit later on does not release that fcntl lock either,
because tdb->have_transaction_lock was already reset by tdb_transaction().
This patch does fix that problem for me. An alternative would be to make
tdb->have_transaction_lock a counter that can cope with proper nesting, maybe
in other places as well.
Volker
(This used to be commit 80e700e3bd73f2ffa38046bdcba7f532e25198ef)
|
|
Jeremy.
(This used to be commit 830337f054a6c0646d85df33d9958e99283e727a)
|
|
I have no idea what I've been smoking when I checked this in :-(
Karolin, this fixes the join bug 3.0.28->3.2.0rc1
Thanks,
Volker
(This used to be commit f845dbbceeff032cd248117ddf63af3d3736b21c)
|
|
Guenther
(cherry picked from commit d3dd7ea5a77414c0d802668ab5bfbe3487b66926)
(This used to be commit 68d6b0053f3ce63747bc26a2bebb1fb0b46c8ca0)
|
|
(cherry picked from commit fb0a25d59ddd28ea1d5af33ec7d9f817fac3fb9d)
(This used to be commit 89f87efa2394e99802ca23307e712fc5820a5fc6)
|
|
(This used to be commit f7d0903a58b0b0fc248a613937a101f15baa5311)
|
|
(This used to be commit d26681b169a533f838f74d48af072b57afc9f8df)
|
|
(This used to be commit 2ee3d1aefab8dada5bd05a92b72776554617b7f9)
|
|
(This used to be commit 25d4c6f692cf50d675a1de7c6eaeed271f349289)
|