summaryrefslogtreecommitdiff
path: root/source3
AgeCommit message (Collapse)AuthorFilesLines
2010-03-22s3:param: add "async smb echo handler" optionStefan Metzmacher2-0/+12
This will enable an extra forked process that will reply to SMBecho requests, while the main process is blocked by another request. metze
2010-03-22s3:smbd: pass down trusted_channel via receive_smb_talloc()Stefan Metzmacher1-3/+5
metze
2010-03-22s3:smbd: let reply_readbraw_error use the locked socketStefan Metzmacher1-0/+11
metze
2010-03-22s3:smbd: send keepalive packets under the socket lockStefan Metzmacher1-1/+16
metze
2010-03-22s3:smbd: smbd_[un]lock_socket() while accessing the socket to the clientStefan Metzmacher1-1/+24
metze
2010-03-22s3:smbd: add smbd_[un]lock_socket() dummiesStefan Metzmacher2-0/+13
metze
2010-03-22s3:smbd: add an option to skip signings checks srv_check_sign_mac for ↵Stefan Metzmacher3-3/+25
trusted channels metze
2010-03-22s3:libsmb: add a smb_signing_init_ex() functionStefan Metzmacher2-8/+56
Make it possible to overload memory handling functions. metze
2010-03-22s3: Fix a bad memleak in winbindVolker Lendecke1-1/+2
2010-03-22s3: Add "log writeable files on exit" parameterVolker Lendecke3-0/+45
This boolean option controls whether at exit time the server dumps a list of files with debug level 0 that were still open for write. This is an administrative aid to find the files that were potentially corrupt if the network connection died.
2010-03-22s3: file_walk_table -> files_forallVolker Lendecke3-3/+3
This is more in line with the rest of the Samba code, like connections_forall etc.
2010-03-22s3: Fix some nonempty blank linesVolker Lendecke2-7/+6
2010-03-21s3: Fix bug 7202 for multi-threaded applicationsVolker Lendecke1-0/+1
Thanks to Sergey Tereschenko <serg.partizan@gmail.com> for providing good feedback! Volker
2010-03-21s3: Open winbindd_cache.tdb with read/write access.Bo Yang1-1/+1
Open winbindd_cache.tdb with read/write access when validate the cache, otherwise, validation fails to get lock in tdb_check. It results in validation failure even the cache is good. Signed-off-by: Bo Yang <boyang@samba.org>
2010-03-19s3-selftest: use proper names for samba3 dcerpc tests.Günther Deschner1-2/+2
Guenther
2010-03-19s3:librpc: remove unused stuffStefan Metzmacher4-229/+0
metze
2010-03-19s3-selftest: enable RAP calls testsuite against samba3.Günther Deschner1-1/+3
Guenther
2010-03-19s3-selftest: rearrange uid/gid calculation to achieve correct membership.Günther Deschner1-21/+25
(make test variant) Guenther
2010-03-19error_codes: fix NT_STATUS_RPC_UNKNOWN_IF typo.Günther Deschner1-1/+1
Metze, please check. Guenther
2010-03-18s3:libsmb/nterr.c: fix/add NT_STATUS_RPC_* codesStefan Metzmacher1-4/+9
metze
2010-03-18s3-selftest: make sure we do not have duplicate uids/gids in nsswrapper.Günther Deschner1-15/+31
Guenther
2010-03-18s3-printing: Fix "printer admin" functionality.Jeremy Allison1-1/+1
Fix bug #7255 ("printer admin" parameter does not work as expected).
2010-03-17s3-eventlog: fix elog_tdbname(), we were always lower-casing entire lockdir ↵Günther Deschner1-5/+19
path... Found by RPC-EVENTLOG torture test. Guenther
2010-03-17s3-selftest: run RPC-EVENTLOG against s3.Günther Deschner1-1/+1
Guenther
2010-03-17s3-test: setup initial eventlog infrastructure.Günther Deschner1-1/+6
Guenther
2010-03-16s3-vfs: fix some buildwarnings in traffic analyzer, there are many more.Günther Deschner1-9/+11
Holger, please check. Guenther
2010-03-16s3: Make login_cache_write take a pointerVolker Lendecke3-8/+10
2010-03-16s3: Make login_cache_read take a pointer, avoid a mallocVolker Lendecke3-25/+17
2010-03-16s3: Remove a typedefVolker Lendecke4-10/+11
2010-03-16s3: Fix some nonempty blank linesVolker Lendecke1-7/+7
2010-03-16s3: fix buildwarning in smbta-util.Günther Deschner1-3/+5
Guenther
2010-03-16Fix developer build, remove mallocAndreas Schneider1-11/+7
2010-03-16s3-winreg: change notify call has no meaning when called remotely.Günther Deschner1-4/+0
Just return not supported to make smbtorture happy. Guenther
2010-03-16s3-registry: make sure root has full registry access (in particular for make ↵Günther Deschner1-0/+6
test). Guenther
2010-03-16s3-lsa: fix _lsa_lsaRSetForestTrustInformation server stub.Günther Deschner1-1/+1
Guenther Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-16Update copyrightJim McDonough1-1/+1
2010-03-16Don't exit(0) on errorJim McDonough1-3/+3
2010-03-16s3: vfs_smb_traffic_analyzer.c: add VFS functions for file open and closeHolger Hetterich2-2/+65
2010-03-16smb_traffic_analyzer.c: optimize marshalling function and documentHolger Hetterich2-34/+54
Collect all data that is needed, and use only one talloc_asprintf operation to create the string of common data. This simplifies the code a bit and is most probably faster than the old method. Also, #define SMBTA_COMMON_DATA_COUNT as a complete string, speeding things up because we know the value at compile time.
2010-03-16vfs_smb_traffic_analyzer.c: added functionHolger Hetterich1-63/+58
static char *smb_traffic_analyzer_anonymize This takes a lot of code out of the main functions, and makes it a bit simpler. Do the anonymization in a function. Since we already anonymized the username we don't need to do this a second time in the v2 marshalling function.
2010-03-16Simplify the code a bit by creating the functions:Holger Hetterich1-84/+123
smb_traffic_analyzer_encrypt - doing the encryption of a data block, smb_traffic_analyzer_create_header - create the protocol header, smb_traffic_analyzer_write_data - actually write the data to the socket.
2010-03-16Add the number of common data blocks to the protocol.Holger Hetterich2-10/+33
Always send the number of common data blocks first. This way, we can make the protocol backwards compatible. A receiver running with an older subprotocol can just ignore if a newer sender sends more common data. Add a few remarks to the marshalling function. Add two #define lines defining the protocol subrelease number and the number of common data blocks to the header file.
2010-03-16Put all the protocol stuff into a separate header file.Holger Hetterich2-114/+152
All the structures and the vfs function identifier list is required by the receiver. It's therefore very handy to have this in an extra header file.
2010-03-16Add smbta-util to manage the encryption key.Holger Hetterich3-4/+225
This program allows the administrator to enable or disable AES encryption when using vfs_smb_traffic_analyzer. It also generates new keys, stores them to a file, so that the file can be reused on another client or server.
2010-03-16Implement AES encryption of the data block.Holger Hetterich1-13/+33
First try. This runs on 16 bytes long AES block size, and enlarges the data block with 16 bytes, to make sure all bytes are in. The added bytes are filled with '.'. It then creates a header featuring the new length to be send, and finally sends the data block, then returns. This code is untested, as creating the receiver will be my next step. To simplify traffic_analyzer's code, this code should run as a function. It's on the do-to-list.
2010-03-16Implement anonymization for protocol v2.Holger Hetterich1-14/+53
Since we need to care for the SID too, do the anonymization in the marshalling function and anonymize both the username and the SID. Remove the 'A' status flag from the header definition. A listener could see from the unencrypted header if the module is anonymizing or not, which is certainly not wanted.
2010-03-16Make all remarks compatible to the linux kernel coding styleguide.Holger Hetterich1-27/+33
2010-03-16Added an exact description of the V2 protocol.Holger Hetterich1-0/+62
I don't think it should have it's place the man page, because this is developer information.
2010-03-16Move the creation of the header.Holger Hetterich1-11/+37
Since the header block of the protocol contains the number of bytes to come, we always send the header itself unmodified. If we compress or crypt the data we are about to send, the length of the data to send may change. Therefore, we no longer create the header in smb_traffic_analyzer_create_string, but shortly before we send the data. For both cases, encryption and normal, we create our own header, and send it before the actual data. In case of protocol v1, we don't need to create an extra header. Just send the data, and return from the function. Change a debug message to say that the header for crypted data has been created. Add a status flags consisting of 6 bytes to the header. Their function will be descriped in one of the next patches, which is descriping the header in a longer comment. When anonymization and/or encryption is used, set the flags accordingly.
2010-03-16Fetch the SID of the user we are running as and send with the commonHolger Hetterich1-2/+5
data.