summaryrefslogtreecommitdiff
path: root/source3
AgeCommit message (Collapse)AuthorFilesLines
2010-09-15s3-rpc_server: Make process_incoming_data() public.Simo Sorce2-1/+3
Signed-off-by: Andreas Schneider <asn@cynapses.org>
2010-09-15s3-rpc_server: Make pipe destructor public.Simo Sorce2-3/+2
Signed-off-by: Andreas Schneider <asn@cynapses.org>
2010-09-15s3-rpc_server: Fixed unhandled error condition.Simo Sorce1-1/+2
Signed-off-by: Andreas Schneider <asn@samba.org>
2010-09-15s3-misc: Introduce lp_ncalrpc_dir() in S3, like we have in S4.Simo Sorce2-0/+15
2010-09-15s3-printing: Document the printer list functions.Andreas Schneider1-0/+64
2010-09-15s3-printing: Add method to skip refresh if just happned.Simo Sorce3-0/+34
This way if multiple process try to refresh at the same time we don't do it over and over again. Signed-off-by: Andreas Schneider <asn@cynapses.org>
2010-09-15s3-printing: Use printer list tdb in pcap.Simo Sorce1-21/+35
Signed-off-by: Andreas Schneider <asn@cynapses.org>
2010-09-15s3-printing: Added a printer list database.Simo Sorce3-1/+433
Signed-off-by: Andreas Schneider <asn@cynapses.org>
2010-09-15s3-nltest: add dsgetdc command.Günther Deschner1-3/+181
Guenther
2010-09-15s3-libnetapi: try using netr_DsRGetDCNameEx() in DsGetDcName().Günther Deschner1-0/+13
Guenther
2010-09-15s3-libnetapi: add DS request flags to public header.Günther Deschner1-0/+21
Guenther
2010-09-15s3-libnetapi: add DS_X_FLAGs to public header.Günther Deschner1-0/+16
Guenther
2010-09-15libnetapi: add DOMAIN_CONTROLLER_INFO_FLAGS.Günther Deschner1-1/+19
Guenther
2010-09-15s3-nltest: convert server input argument into --server.Günther Deschner1-24/+19
Guenther
2010-09-15s3-nltest: rename print_result to print_netlogon_info_result.Günther Deschner1-4/+17
Guenther
2010-09-15s3-build: only link in prs parser where needed.Günther Deschner1-2/+2
Guenther
2010-09-15s3-waf: only link in prs parser where needed.Günther Deschner1-2/+2
Guenther
2010-09-14Allows changing the maximum number of simultaneous clients in winbindd ↵Pierre Carrier4-9/+16
through an smb.conf option. Signed-off-by: Jeremy Allison <jra@samba.org>
2010-09-14Ensure incoming timespec values correctly wrap at nsecs.Jeremy Allison1-0/+4
Jeremy.
2010-09-14s3-torture Add tests to show that the dom_sid parsing was faulty.Andrew Bartlett1-0/+98
Andrew Bartlett
2010-09-14s3-util_sid Use the NDR parser to parse struct dom_sidAndrew Bartlett1-14/+8
The manual parser failed to constrain the maximum number of sub-authorities to 15, allowing an overflow of the array. Andrew Bartlett
2010-09-14libcli/security Merge source3/ string_to_sid() to common codeAndrew Bartlett1-106/+0
The source3 code repsects the limit of a maximum of 15 subauths, while the source4 code does not, creating a security issue as we parse string-form SIDs from clients. Andrew Bartlett
2010-09-14s3-util_sid use ARRAY_SIZE() to ensure we never overflow the dom_sidAndrew Bartlett1-1/+1
This ensures that this, unlike the MAXSUBAUTHS macro, can't get out of sync with the structure. Andrew Bartlett
2010-09-14s3-util_sid Accept S-1-5 as a SIDAndrew Bartlett1-2/+10
2010-09-14s3-dom_sid Use C99 types in dom_sid handlingAndrew Bartlett1-7/+7
Andrew Bartlett
2010-09-14s3/profile: remove the magical clock initialization from the profile codeBjörn Jacke2-64/+3
there's no point in not profiling times if no monotonic clock is found - monotonic and realtime clock are equally fast. Just use clock_gettime_mono instead.
2010-09-14s3/profiling: don't use CLOCK_PROCESS_CPUTIME_IDBjörn Jacke3-36/+0
that clock is a CPU burnometer but we need a chronometer for profiling.
2010-09-14s3-waf: fix the build after privilege code changes.Günther Deschner1-1/+1
Guenther
2010-09-13s3: Remove some unnecessary if-statementsVolker Lendecke1-10/+5
2010-09-13Fix bug 7409 - Thousands of reduce_name: couldn't get realpath.Jeremy Allison1-1/+1
Don't log this at level 1 - every EACCES will generate one. Thanks to muehlfeld@medizinische-genetik.de for pointing this out. Jeremy.
2010-09-13ntlm_auth: Fix a valgrind errorVolker Lendecke1-1/+1
2010-09-13s3: Fix a typoVolker Lendecke1-1/+1
2010-09-13s3: Fix a typo (authentictaion->authentication)Volker Lendecke1-1/+3
2010-09-12s3: Remove a nesting level in winbindd_dual_pam_chauthtokVolker Lendecke1-18/+19
2010-09-11s3-auth Fix typo in commentAndrew Bartlett1-1/+1
2010-09-11s3-krb5 Fix Kerberos on FreeBSD with Samba4 DCsAndrew Bartlett1-3/+1
The idea of this patch is: Don't support a mix of different kerberos features. Either we should prepare a GSSAPI (8003) checksum and mark the request as such, or we should use the old behaviour (a normal kerberos checksum of 0 data). Sending the GSSAPI checksum data, but without marking it as GSSAPI broke Samba4, and seems well outside the expected behaviour, even if Windows accepts it. Andrew Bartlett
2010-09-11libcli/security Move 'private' privileges functions to another headerAndrew Bartlett1-0/+1
These functions work on the bitmap, and are only exposed because the source3/ privileges storage uses the bitmap in account_policy.tdb Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-samr Explian better the use of two privileges in this callAndrew Bartlett1-0/+4
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11libcli/security Remove 'always true' return from se_priv_put_all_privilegesAndrew Bartlett1-3/+1
Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-util_sid Tidy up global struct security_tokenAndrew Bartlett4-16/+8
This no longer needs to be global, and should be const. We now also init it with the C99 style initialisers. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Add constAndrew Bartlett2-6/+6
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Remove extra pointer on privilege maskAndrew Bartlett1-4/+4
Now that this is a scalar, this isn't required. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privileges: add handling of both old and new formats in databaseAndrew Tridgell1-28/+48
We update privileges on a per-record basis instead of all at once, as this maintains maximum compatibility is someone uses old tools with a new version of Samba. The also auto-detects the byte order of the old entries in the database, and copes with either native or reversed byte order. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-11s3-privs Remove unused functionAndrew Bartlett2-31/+0
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Overhaul PRIVILEGE_SET handling, avoid dealing with the bitmapAndrew Bartlett3-106/+36
This avoids us dealing with the privilege bitmap in the LSA server, and overhauls much of the rest of the handling to be currnet with the modern world of talloc. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Hide the bitmap-based grant_privilege and revoke_privilegeAndrew Bartlett4-28/+44
The new wrappers avoid anything but the core privileges code dealing with the bitmap values directly. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Make privilege_enum_sids() take an LUID, not a bitmapAndrew Bartlett4-9/+12
This moves one more privileges call away from direct bitmap manipuation. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11libcli/security make sec_privilege_id() return SEC_PRIV_INVALID on failure.Andrew Bartlett1-1/+1
Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Rework access_check_object() to take two privilegesAndrew Bartlett3-68/+60
This allows the privileges bitmap to be used only when setting privileges, and uses an the LUID constant for all 'does this user have this privilege' operations. The advantage is that we now only need one API to determine if a token has a privilege, and much less code needs to know what type is used for the underlying bitmap. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s3-privs Rework privilege enumeration to also use new DB formatAndrew Bartlett1-5/+18
Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>