summaryrefslogtreecommitdiff
path: root/source3
AgeCommit message (Collapse)AuthorFilesLines
2008-05-23Manually merge Steven Danneman's patch for SPNEGO auth to a trustedGerald W. Carter3-26/+31
Win2008 domain (merged from v3-0-test). commit 8dc4e979776aae0ecaa74b51dc1eac78a7631405 Author: Steven Danneman <sdanneman@isilon.com> Date: Wed May 7 13:34:26 2008 -0700 spnego SPN fix when contacting trusted domains cli_session_setup_spnego() was not taking into consideration the situation where we're connecting to a trusted domain, specifically one (like W2K8) which doesn't return a SPN in the NegTokenInit. This caused two problems: 1) When guessing the SPN using kerberos_get_default_realm_from_ccache() we were always using our default realm, not the realm of the domain we're connecting to. 2) When falling back on NTLMSSP for authentication we were passing the name of the domain we're connecting to for use in our credentials when we should be passing our own workgroup name. The fix for both was to split the single "domain" parameter into "user_domain" and "dest_realm" parameters. We use the "user_domain" parameter to pass into the NTLM call, and we used "dest_realm" to create an SPN if none was returned in the NegTokenInit2 packet. If no "dest_realm" is provided we assume we're connecting to our own domain and use the credentials cache to build the SPN. Since we have a reasonable guess at the SPN, I removed the check that defaults us directly to NTLM when negHint is empty. (This used to be commit b78b14c88e8354aadf9ba7644bdb1c29245fe419)
2008-05-23Manually port Steven Dannenman fix for using the correct machine domain whenGerald W. Carter2-6/+6
looking up trust credentials in our tdb. commit fd0ae47046d37ec8297396a2733209c4d999ea91 Author: Steven Danneman <sdanneman@isilon.com> Date: Thu May 8 13:34:49 2008 -0700 Use machine account and machine password from our domain when contacting trusted domains. (This used to be commit 69b37ae60757075a0712149c5f97f17ee22c2e41)
2008-05-23build: make sure LIBWBCLIENT_*_TARGET is never emptyStefan Metzmacher1-4/+4
This should fix the build with non gnu make metze (cherry picked from commit 401a0c84fe5f60e57e95331805da6b53dd1d7c2e) (This used to be commit 36ba31e39b28e5495b0aeb8638df3a10ce6c51e6)
2008-05-23libwbclient: add wbcLibraryDetails()Stefan Metzmacher2-0/+38
metze (cherry picked from commit b68916328e935e61840cb03560ebeeee15bb2c6f) (This used to be commit 196d9017627220786d8b726dc0d02e16e96c4c05)
2008-05-23libwbclient: rename MAXSUBAUTHS => WBC_MAXSUBAUTHSStefan Metzmacher3-5/+5
metze (cherry picked from commit 04d465c622c614bec29f24793ae897a73bcb51f4) (This used to be commit e7dcbf56aef836e1b4be70b21064f65338221b5a)
2008-05-23build: add symbol versioning when we build with gnu ldStefan Metzmacher6-16/+69
There's --enable-symbol-versioning=no to disable it. metze (cherry picked from commit cb5492978b6b157f529806afb2f5fc6202888129) (This used to be commit a739652d94300881479262648592223536fc8eec)
2008-05-23build: autogenerate exports/libwbclient.symsStefan Metzmacher3-8/+16
metze (cherry picked from commit 8e0fcd583a643a8f4240698efcbb177463534a82) (This used to be commit 17ce13775423efffd8ddfb967e1e09b2f41849af)
2008-05-23build: autogenerate exports/libtalloc.symsStefan Metzmacher2-11/+10
metze (cherry picked from commit ce9d8ea9818d91bd91f95149f3b0a7ed4f2dae3b) (This used to be commit dc0a4f7dc502cb285bce9de2ef72a722f91c43b9)
2008-05-23build: pass .syms extention via @SYMSEXT@ from configureStefan Metzmacher2-3/+7
metze (cherry picked from commit efb23fdce72db48b4c149fb3dd4a6f4aa3eebbbe) (This used to be commit 3bf5a047e3d478b3356df7aa5c4f4a9d0b763639)
2008-05-23Fix a (bogus) uninitialized variable warningVolker Lendecke1-1/+1
(This used to be commit 6106d48a5c94e7c1f3a7234807e43aca0a51fa62)
2008-05-23build: add a "make shlibs" target to build all the shared libraries.Michael Adam1-0/+2
Michael (This used to be commit 5a99f59d7514edadbab081dc0c5c28a6ea26972a)
2008-05-23build: autogenerate exports/libnetapi.symsStefan Metzmacher2-4/+6
metze (cherry picked from commit dc09e04d524dcc92a29da0864666fd4258a81b76) (This used to be commit c3797d6a2cc2e4c5b0678dc92924c26b18bd2678)
2008-05-22Remove MAX_SESS_ENTRIES and MAX_CONN_ENTRIES limitsJeremy Allison1-19/+6
as they are no longer needed now we have IDL marshalling. Change the calculation of the 32-bit fileid we return to a Windows client. We can't just use the generation count as it starts at zero for every smbd - and this command must enumerate all files open across all smbds. We'd really like combination of process-id + dev + inode + generation count to be unique, but as we can't fit that into 32 bits just use 16 bits of pid + generation count. Jeremy. (This used to be commit 8b926d5a93d04b828990057ae6f1e090764305c1)
2008-05-22Revert "Arggh. Got the path/user the wrong way around. IDL is correct :-)."Jeremy Allison1-6/+19
This reverts commit 1078b5c53ae9d6f9532eecebf9cf4a1712200b7e. This message doesn't match the actual change. (This used to be commit a65abb49cf8d291c7deb659912c0df34ec37da02)
2008-05-22Arggh. Got the path/user the wrong way around. IDL is correct :-).Jeremy Allison1-19/+6
Jeremy. (This used to be commit 1078b5c53ae9d6f9532eecebf9cf4a1712200b7e)
2008-05-22Arggh. Got the path/user the wrong way around. IDL is correct :-).Jeremy Allison1-4/+4
Jeremy. (This used to be commit 2281274480d8cf9e773874301dbbc7bf06346901)
2008-05-22Fix 2 bugs with displaying open file state. FirstlyJeremy Allison1-3/+3
the IDL is documented incorrectly in the MS-DOCS. Username and path need to be reversed (yes I will raise this with MS). Secondly, we need to check access_mask for the permissions, not share_access (share_access are the deny modes). Jeremy. (This used to be commit bdaad19f90e991aba2afccfa13afbbfe2ac7baaf)
2008-05-22Get rid of "shadowed local var" warnings with gcc.Jeremy Allison1-7/+7
Jeremy. (This used to be commit 0bc18967aa7cb6f4debeaa48be81d0e48a7d9503)
2008-05-22Make WINBINDD_LIST_GROUPS handler asynchronous.Steven Danneman6-60/+187
Previously WINBINDD_LIST_GROUPS requests (ex: wbinfo -g) were handled by the winbindd parent process in a sequential fashion. This patch, delegates the work to the winbindd children so that the request is handled much faster in large domain topologies, and doesn't block the parent from receiving new requests. The core group enumeration and conversion that was handled in winbindd_list_groups() has been moved into winbindd_dual_list_groups() to be done by the child. The parent winbindd_list_groups() simply calls each of the children asynchronously. listgroups_recv() aggregates the final group list that will be returned to the client and tracks how many of the children have returned their lists. The domain name of the child is passed back through the callbacks to be used in debugging messages. There are also several fixes to typos in various comments. (This used to be commit 037b9689d9042a398cb91e4628a82fcdfa913c21)
2008-05-22library-versions: use the same version for talloc and tdb as for the ↵Stefan Metzmacher1-2/+2
standalone builds metze (This used to be commit 87fa2f4a287eccb596d803096c10c3d58a253452)
2008-05-22libreplace: we need to use AC_TRY_LINK() to make sure HAVE_IPV6 is correctly ↵Stefan Metzmacher1-1/+1
detected metze (cherry picked from commit 84b5652d3e5766521436e4c7d59615b08b2bb198) (This used to be commit b28b63c911efe17ba37c15c9b74edd96e9584832)
2008-05-22configure: samba_cv_unixsocket was renamed into libreplace_cv_HAVE_UNIXSOCKETStefan Metzmacher1-1/+1
metze (This used to be commit d53b589debdb95d3ae46e6b45c6951f522ccc5a1)
2008-05-22configure: remove HAVE_IPV6 test as LIBREPLACE_NETWORK_CHECKS already have thisStefan Metzmacher1-23/+0
metze (This used to be commit e94ff756be627b40c433cb53547007a5c219cc9e)
2008-05-22libreplace: add test for HAVE_IPV6Stefan Metzmacher1-0/+29
Samba can later just check libreplace_cv_HAVE_IPV6 = yes. metze (cherry picked from commit e835e7eebcc064ce0813814796828f15ad112fbd) (This used to be commit 1ca4508f3a996982a528942da1b12b94b91e94cd)
2008-05-22rpc_client: make rpc_pipe_open_tcp_port and rpc_pipe_get_tcp_port static.Michael Adam2-14/+7
Slim the interface... Michael (This used to be commit 9971118c23900d81e885a013e738a67df790c90c)
2008-05-22torture: add a test program rpc_open_tcp() to test the rpc_pipe_open_tcp() func.Michael Adam2-0/+135
This is still very raw and has yet to be integrated into the test suite. Michael (This used to be commit 3ec3ab4e5309c63bbf2fa5efa5d2c47856560a0f)
2008-05-22rpc_client: use endpoint mapper to get the port for rpc_pipe_open_tcp().Michael Adam4-12/+171
Michael (This used to be commit f7db445c828c0eef2c08b538bd07d485dc248689)
2008-05-22client: Fix the proto header to fix the build.Kai Blin1-1/+1
(This used to be commit 9e39ac1cc31d48db968e79c4698901e079007ff7)
2008-05-21Compile endpoint mapper pidl outputVolker Lendecke4-1/+8
(This used to be commit fe8f9e427af3eb42d63fde96c4fe20a255facb95)
2008-05-21rpc_client: add a destructor to close the socket for pipes over tcp.Volker Lendecke1-0/+10
used in rpc_pipe_open_tcp() and rpc_pipe_open_ncalrpc(). (This used to be commit a0bdd56c75ca6f6c6068995647c0dc1ba89aef12)
2008-05-21Add client support for NCACN_UNIX_STREAMVolker Lendecke2-4/+89
(This used to be commit 24ac40518f79fd480baaedc1d42f3b6fe8ea1c94)
2008-05-21rpccli_schannel_bind_data only needs the schannel keyVolker Lendecke2-4/+5
(This used to be commit be5d54a363a57113e494202a2d22dd9bbcf13b41)
2008-05-21Rename rpc_pipe_client.tcp.sock to rpc_pipe_client.sock.fdVolker Lendecke2-9/+9
(This used to be commit 2ff908a902ec857856518eaddb5246dd5067063d)
2008-05-21Fix a commentVolker Lendecke1-1/+1
(This used to be commit 8ae39c1339758795a91c6a168e210357e7f29eae)
2008-05-21Fix bug #5479, print spool shares require max_xmit toJeremy Allison1-1/+6
be adhered to. Jeremy. (This used to be commit 478a359edead0677281a3ca4e64db6521941b0f3)
2008-05-21Merge branch 'v3-3-test' of ssh://git.samba.org/data/git/samba into docbookJelmer Vernooij91-2262/+14449
Conflicts: source/Makefile.in (This used to be commit 01987778a123f853fccdcb7fe9566143e2d7c490)
2008-05-21Add double-colon where it makes sense.Jelmer Vernooij1-66/+64
(This used to be commit 256200e951476ff31c95a7d5621a50ba297ea6e4)
2008-05-20Convert in_transaction to a bool. Add the same fix VolkerJeremy Allison1-4/+9
used for tdb_traverse() to tdb_traverse_read(). Jeremy. (This used to be commit bda0f03fb3fa8a7b14d4f54bee7076d691cad44f)
2008-05-20Fix type error in debug messageVolker Lendecke1-1/+1
(This used to be commit eb281532b1721ded39c39bb00c26202080dcd735)
2008-05-20Fix some signed/unsigned warningsVolker Lendecke2-2/+3
(This used to be commit dbb4d8107a61051d8bcf6c4c69ee976efc50b961)
2008-05-20Cleanup size_t return values in callers of convert_string_allocateTim Prouty29-400/+537
This patch is the second iteration of an inside-out conversion to cleanup functions in charcnv.c returning size_t == -1 to indicate failure. (This used to be commit 6b189dabc562d86dcaa685419d0cb6ea276f100d)
2008-05-20Fix nesting tdb_traverse in a transactionVolker Lendecke1-3/+8
Calling tdb_traverse inside a transaction led to the transaction lock being held indefinitely. This was caused by the tdb_transaction_lock/unlock inside tdb_traverse: The transaction code holds the global lock at offset TRANSACTION_LOCK. The call to tdb_transaction_lock does nothing because the transaction_lock is already being held. tdb_transaction_unlock inside tdb_wrap resets tdb->have_transaction_lock but does not release the kernel-level fcntl lock. transaction_commit later on does not release that fcntl lock either, because tdb->have_transaction_lock was already reset by tdb_transaction(). This patch does fix that problem for me. An alternative would be to make tdb->have_transaction_lock a counter that can cope with proper nesting, maybe in other places as well. Volker (This used to be commit 80e700e3bd73f2ffa38046bdcba7f532e25198ef)
2008-05-20Fix bug #5477 - recvfile code was broken.Jeremy Allison2-8/+14
Jeremy. (This used to be commit 830337f054a6c0646d85df33d9958e99283e727a)
2008-05-20Fix memcache_flush()Volker Lendecke1-5/+34
I have no idea what I've been smoking when I checked this in :-( Karolin, this fixes the join bug 3.0.28->3.2.0rc1 Thanks, Volker (This used to be commit f845dbbceeff032cd248117ddf63af3d3736b21c)
2008-05-20Fix typo.Günther Deschner1-1/+1
Guenther (cherry picked from commit d3dd7ea5a77414c0d802668ab5bfbe3487b66926) (This used to be commit 68d6b0053f3ce63747bc26a2bebb1fb0b46c8ca0)
2008-05-20Fix a valgrind error in _samr_LookupNamesVolker Lendecke1-5/+8
(cherry picked from commit fb0a25d59ddd28ea1d5af33ec7d9f817fac3fb9d) (This used to be commit 89f87efa2394e99802ca23307e712fc5820a5fc6)
2008-05-20net: The top level help function for net cmd is always net_cmd_usageKai Blin7-55/+37
(This used to be commit f7d0903a58b0b0fc248a613937a101f15baa5311)
2008-05-20net: Move help for "net status" to net_status.cKai Blin3-13/+14
(This used to be commit d26681b169a533f838f74d48af072b57afc9f8df)
2008-05-20net: Move printer help to net_rpc where it's used.Kai Blin3-34/+27
(This used to be commit 2ee3d1aefab8dada5bd05a92b72776554617b7f9)
2008-05-20net: Split out "net share"Kai Blin7-51/+86
(This used to be commit 25d4c6f692cf50d675a1de7c6eaeed271f349289)