summaryrefslogtreecommitdiff
path: root/source3
AgeCommit message (Collapse)AuthorFilesLines
2012-09-15Add 'bool use_privs' to smbd_calculate_access_mask().Jeremy Allison4-5/+10
Replaces blanket root allow if set. Set to 'false' for all current callers. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Sat Sep 15 00:37:49 CEST 2012 on sn-devel-104
2012-09-14Fix bad string in debug message (remove it).Jeremy Allison1-4/+2
2012-09-14Add bool use_privs parameter to smbd_check_access_rights()Jeremy Allison5-4/+18
If this is set we should use it in preference to blindly assuming root can do anything. Currently set to 'false' in (most) callers.
2012-09-14Add "backup_intent" bool.Jeremy Allison1-1/+2
2012-09-14Don't call can_write_to_file() if we already have 'fsp->can_write' set.Jeremy Allison1-0/+2
2012-09-14build: Fix build on systems without ldap development headersAndrew Bartlett1-0/+1
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri Sep 14 22:53:30 CEST 2012 on sn-devel-104
2012-09-14s3: fix the hpux acl moduleBjörn Jacke1-5/+5
This was not adopted to the recent VFS acl structure changes. Autobuild-User(master): Björn Jacke <bj@sernet.de> Autobuild-Date(master): Fri Sep 14 12:23:23 CEST 2012 on sn-devel-104
2012-09-14s3: fix the tru64 acl moduleBjörn Jacke1-5/+5
This was not adopted to the recent VFS acl structure changes.
2012-09-14s3: fix the aix acl moduleBjörn Jacke1-9/+9
This was not adopted to the recent VFS acl structure changes.
2012-09-14s3: Fix the vfs_solarisacl module to compile.Ira Cooper1-5/+5
This got broken with the recent VFS acl structure changes. Autobuild-User(master): Ira Cooper <ira@samba.org> Autobuild-Date(master): Fri Sep 14 05:21:29 CEST 2012 on sn-devel-104
2012-09-14autoconf: fix --with(out)-sendfile-support option handlingBjörn Jacke1-15/+20
this fixes bug #8344
2012-09-14s3: make smbldaphelper subsystem an internal libraryAlexander Bokovoy3-11/+10
Break pdb_ldap -> smbldaphelper -> pdb -> pdb_ldap loop by making smbldaphelp intentionally underlinked internal library. It means that libsmbldaphelp is not usable unless its user is also linked to libpdb (that is the case for both its users, idmap_ldap and pdb_ldap, already) but gives us a break of the circular dependency in case pdb_ldap statically linked into pdb (default). This should solve case when idmap_ldap and pdb_ldap are dynamically loaded modules Autobuild-User(master): Alexander Bokovoy <ab@samba.org> Autobuild-Date(master): Fri Sep 14 01:02:21 CEST 2012 on sn-devel-104
2012-09-13Sigh :-(. Removing optimization prematurely is the root of all evil :-(.Jeremy Allison3-0/+15
Sorry for the mistake, but the LastDir singleton cache in vfs_ChDir() actually plays an important role. When we're processing a stream of SMB1/SMB2/SMB3 requests we don't want to add a chdir()/getcwd() system call pair on every request if they're all on the same connection and dealing with the same base path. I did some testing with a program that times 1,000,000 chdir() requests vs. 1,000,000 strcmp requests and it's a penalty of 10x doing the system calls. Just because it's old code, doesn't mean it's bad :-(. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Thu Sep 13 21:31:42 CEST 2012 on sn-devel-104
2012-09-13s3: make ldapsam-related functions a smbldaphelper subsystemAlexander Bokovoy3-4/+7
Since these functions are used in pdb_ldap and idmap_ldap, and pdb_ldap might be statically linked to libpdb (default), it is better to keep them as separate subsystem to avoid polluting libpdb namespace. This is first step in refactoring libpdb. Right now I cannot move these functions into proper libsmbldaphelper as it uses more of libpdb-included functions and linking pdb_ldap against libsmbldaphelper library would have created a loop if pdb_ldap is included into libpdb. Autobuild-User(master): Alexander Bokovoy <ab@samba.org> Autobuild-Date(master): Thu Sep 13 17:36:07 CEST 2012 on sn-devel-104
2012-09-12s3:build: rewrite autogen.sh to be called from any directoryMichael Adam1-5/+20
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-09-12In vfs modules, don't use 'conn->origpath' when we really mean 'conn->cwd'.Jeremy Allison4-10/+10
This allows VFS modules to work even when we've changed directory under the connect path in order to do root-safe calls. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Wed Sep 12 23:45:23 CEST 2012 on sn-devel-104
2012-09-12Move cached cwd onto conn struct.Jeremy Allison3-1/+17
This enables us to make VFS modules safe for use in root called code when we've changed directory under conn->connectpath.
2012-09-12Remove ancient "optimization" global LastDir.Jeremy Allison3-18/+3
2012-09-12Avoid overriding default ccache for ads operations.Simo Sorce8-14/+102
Avoid overriding default ccache for ads operations. Nowadays various samba components may need to use GSSAPI and a default cred cache to perform their tasks. This code was completely overriding the whole process default ccache name, thus altering the current credentials and sometimes hijacking them (or getting preemptively hijaked). By using gss_krb5_import_cred we can instead use a private ccache (necessary sometimes to use a different set of credentials fromt he default cifs/fqdn@realm one, for example when contacting foreign DCs using trust credentials) that does not affect the rest of the process. For the kerberos versions which don't have gss_krb5_import_cred we fallback to temp override of KRB5CCNAME and gss_acquire_cred. Signed-off-by: Alexander Bokovoy <ab@samba.org> Signed-off-by: Günther Deschner <gd@samba.org> Autobuild-User(master): Alexander Bokovoy <ab@samba.org> Autobuild-Date(master): Wed Sep 12 21:18:09 CEST 2012 on sn-devel-104
2012-09-12s3: remove unneeded noquota.c fileBjörn Jacke1-38/+0
Autobuild-User(master): Björn Jacke <bj@sernet.de> Autobuild-Date(master): Wed Sep 12 16:50:50 CEST 2012 on sn-devel-104
2012-09-12s3-rap: Open printers with the right access mask.Andreas Schneider1-3/+3
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Wed Sep 12 14:05:42 CEST 2012 on sn-devel-104
2012-09-12s3-pdb: filter out more symbols only used in ldapsam internalsAlexander Bokovoy2-2/+1
2012-09-12smbd: Add extra VFS hooks to get the posix ACL as a blobAndrew Bartlett6-0/+202
This will allow us to hash this, rather than the NT ACL it maps to. This will in turn allow us to know if the NT ACL is valid even if we have to change the mapping code. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Sep 12 07:06:01 CEST 2012 on sn-devel-104
2012-09-12smbd: Remove pre-allocation of ACL array in sys_acl_init()Andrew Bartlett5-18/+15
Instead, this is just handled with realloc in sys_acl_create_entry() This allows us to remove the size element from the SMB_ACL_T. Andrew Bartlett
2012-09-12smbd-posix_acls: Use a IDL union to store the ACL entryAndrew Bartlett2-13/+11
This is a clearer, long-term-stable structure we can hash without risking it changing. Andrew Bartlett
2012-09-12Make metze happy and the code clearer :-).Jeremy Allison1-0/+6
Ensure we know after the destructor fires we're never going to look at this again. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Wed Sep 12 03:00:21 CEST 2012 on sn-devel-104
2012-09-11smbd: Print ACL used to create hash in vfs_xattr_commonAndrew Bartlett1-0/+10
This should help us understand why sometimes an ACL set won't stick. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Tue Sep 11 18:19:53 CEST 2012 on sn-devel-104
2012-09-11docs: Move idmap manpage to there old location.Andreas Schneider8-891/+0
This wasn't planned and slipped trough, sorry. Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Tue Sep 11 14:28:53 CEST 2012 on sn-devel-104
2012-09-11quota: move function again to its belonging ifdef blockBjörn Jacke1-11/+9
Autobuild-User(master): Björn Jacke <bj@sernet.de> Autobuild-Date(master): Tue Sep 11 04:44:28 CEST 2012 on sn-devel-104
2012-09-11s3:proto.h: remove duplicate disk_quotas prototypesBjörn Jacke1-10/+0
2012-09-11quota: fix configure test for HP-UXBjörn Jacke1-0/+6
while HP-UX does have the 4A quota interface our test failed due to a missing function prototype in HP-UX and our test running in strict mode with compile warnings be errors. So let's make our own prototype in the test when we are on HP*UX
2012-09-10s3: Run raw.oplockVolker Lendecke1-1/+1
Signed-off-by: Jeremy Allison <jra@samba.org>
2012-09-10s3: delete requests are not specialVolker Lendecke1-16/+0
The only difference between batch and exclusive oplocks is the time of the check: Batch is checked before the share mode check, exclusive after. Signed-off-by: Jeremy Allison <jra@samba.org>
2012-09-10Call TALLOC_FREE() before we return otherwise we will never free sam_accountMichele Baldessari1-1/+1
Signed-off-by: Jeremy Allison <jra@samba.org>
2012-09-10Fix talloc memory heirarchy bug. If there's an SMB2 sessionsetup in flight ↵Jeremy Allison1-5/+36
when we're shut down, we end up freeing the struct smbXsrv_session *session pointer twice. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Mon Sep 10 23:34:06 CEST 2012 on sn-devel-104
2012-09-10wafbuild: add defines for linux quota and sysquota supportBjörn Jacke1-0/+8
Autobuild-User(master): Björn Jacke <bj@sernet.de> Autobuild-Date(master): Mon Sep 10 21:55:53 CEST 2012 on sn-devel-104
2012-09-10s3:smbd Bump the smbd vfs interface version to 30Christian Ambach1-1/+2
that is what Samba 4.0.0 will ship with Autobuild-User(master): Christian Ambach <ambi@samba.org> Autobuild-Date(master): Mon Sep 10 19:40:01 CEST 2012 on sn-devel-104
2012-09-10s3:vfs/time_audit: Add back pointer for sys_acl_delete_def_file_fnChristof Schmitt1-0/+1
Commit e25830dcd87387a237b96f0d70deb204a5bf0a54 removed the function pointer from the time_audit module, although the VFS function still exists. Add the function pointer again in time_audit as this seems to be an accidentally deletion. Signed-off-by: Christian Ambach <ambi@samba.org>
2012-09-10s3:vfs/time_audit: add path names to log messagesRalph Wuerthner1-80/+170
Signed-off-by: Christian Ambach <ambi@samba.org>
2012-09-10s3:client use more access bits for snapshot displayChristian Ambach1-1/+2
otherwise Windows server will reject the request for shadow copy enumeration with access denied
2012-09-10s3-passdb: update abi_match and ignore more statically linked functionsAlexander Bokovoy2-17/+21
Autobuild-User(master): Alexander Bokovoy <ab@samba.org> Autobuild-Date(master): Mon Sep 10 16:14:50 CEST 2012 on sn-devel-104
2012-09-10uid_t is a synonym for int on osXMatthieu Patou1-1/+1
This function is clearly osX oriented so we adapt the modifier to the target
2012-09-09s3:quota-nfs: add RQ_PATHLEN define for systems that don't have itBjörn Jacke1-0/+4
Autobuild-User(master): Björn Jacke <bj@sernet.de> Autobuild-Date(master): Sun Sep 9 17:44:51 CEST 2012 on sn-devel-104
2012-09-09s3:quota-nfs: another build fix for the old Unix worldBjörn Jacke1-1/+1
2012-09-09s3: fix wrong invocations of talloc_reallocBjörn Jacke1-2/+2
2012-09-08selftest/knownfail: we pass some samba3.smb2.durable-* tests nowStefan Metzmacher1-0/+3
metze Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Sat Sep 8 23:18:39 CEST 2012 on sn-devel-104
2012-09-08s3:vfs_default: add basic support for durable handle request and reconnectMichael Adam6-3/+610
We only grant durable handles for CIFS/SMB2 only access, that means "kernel oplocks", "kernel share modes" and "posix locking" need to be set to "no". For now we also don't grant durable handles if delete on close is active on the handle. Pair-Programmed-With: Stefan Metzmacher <metze@samba.org> Pair-Programmed-With: Volker Lendecke <vl@samba.org>
2012-09-08s3: introduce a new share config option "durable handles" defaulting to "yes"Michael Adam2-0/+2
This is in order to be able to turn durable handles off and on on a per share basis. Note: This is only used in combination with: kernel share modes = no kernel oplocks = no posix locking = no Which means CIFS/SMB2 only access. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-09-08s3:smbd: make fd_open() publicMichael Adam2-4/+6
2012-09-08s3:smbd: don't set kernel flock if "kernel share modes = no"Michael Adam1-1/+1
Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Sat Sep 8 13:05:05 CEST 2012 on sn-devel-104