summaryrefslogtreecommitdiff
path: root/source3
AgeCommit message (Collapse)AuthorFilesLines
2012-08-30Windows does canonicalization of inheritance bits. Do the same.Jeremy Allison1-0/+35
We need to filter out the SEC_DESC_DACL_AUTO_INHERITED|SEC_DESC_DACL_AUTO_INHERIT_REQ bits. If both are set we store SEC_DESC_DACL_AUTO_INHERITED as this alters whether SEC_ACE_FLAG_INHERITED_ACE is set when an ACE is inherited. Otherwise we zero these bits out. See: http://social.msdn.microsoft.com/Forums/eu/os_fileservices/thread/11f77b68-731e-407d-b1b3-064750716531 for details.
2012-08-30Change the other two places where we set a security descriptor given by the ↵Jeremy Allison2-25/+2
client to got through set_sd(), the canonicalize sd function.
2012-08-30Re-add set_sd(), called from set_sd_blob(). Allows us to centralize all ACL ↵Jeremy Allison2-14/+28
canonicalization.
2012-08-30Rename set_sd() to set_sd_blob() - this describes what it does.Jeremy Allison3-6/+6
2012-08-30s3:libsmb correctly set isFsctl for snapshot listChristian Ambach1-1/+1
FSCTL_GET_SHADOW_COPY_DATA is a FSCTL, so set the isFsctl marker otherwise smbclient allinfo will not report snapshots any more with the changes made for Bug #8311 Autobuild-User(master): Christian Ambach <ambi@samba.org> Autobuild-Date(master): Thu Aug 30 18:57:24 CEST 2012 on sn-devel-104
2012-08-29s4-torture: Add start of a test to confirm winbindd PAC parsingAndrew Bartlett1-1/+3
So far this confirms that we can accept a ticket using the secrets.tdb entry. Andrew Bartlett
2012-08-29s3:vfs_gpfs: Use directory not file to get fileset idChristof Schmitt2-5/+35
The query of the fileset quota needs to determine the file set id first. With the currently available interface, this requires opening the file to get a file descriptor. For files, this open can fail when a share mode is set. Workaround this by querying the fileset id on the directory instead. The proper solution would be getting an interface for getting the fileset id that does not require opening the file. Autobuild-User(master): Christian Ambach <ambi@samba.org> Autobuild-Date(master): Wed Aug 29 18:58:34 CEST 2012 on sn-devel-104
2012-08-29vfs_media_harmony: fix some compile warnings with llvmBjörn Jacke1-66/+66
Autobuild-User(master): Björn Jacke <bj@sernet.de> Autobuild-Date(master): Wed Aug 29 16:05:10 CEST 2012 on sn-devel-104
2012-08-29s3-printing: fix bug 9123 lprng job tracking errorsDavid Disseldorp2-3/+3
The lprng printing back-end is truncating the print job filename in the lpq output, which means that Samba is not able to determine the back-end job ID for a newly submitted print job. Remove the unneeded spoolss job ID from the print job file name to ensure the job filename is not truncated. Also log these warnings at a higher log level. Autobuild-User(master): David Disseldorp <ddiss@samba.org> Autobuild-Date(master): Wed Aug 29 14:25:13 CEST 2012 on sn-devel-104
2012-08-28s3-smbd: Fix flooding the logs with records we don't find in pcap.Andreas Schneider1-1/+1
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Tue Aug 28 16:38:55 CEST 2012 on sn-devel-104
2012-08-28s3-vfs: Indicate the symlink destination when failing check_reduced_nameAndrew Bartlett1-2/+2
2012-08-28s3-vfs: Try to be consistent about localtime vs GMT handling in vfs_shadow_copy2Andrew Bartlett1-12/+19
With the ability to handle times a abolute time_t values since 1970 this becomes more important to get absolutly correct. Andrew Bartlett
2012-08-28s3-vfs_shadow_copy2: Also accept a sscanf resultAndrew Bartlett1-18/+46
2012-08-28s3-passdb: Allow reload of the static passdb from pythonAndrew Bartlett2-2/+21
This is then used in provision when the passdb backend is forced. Andrew Bartlett
2012-08-28selftest: Add test of smbclient --machine-pass against and using both s3 and s4Andrew Bartlett2-0/+24
This uses both smbclient binaries to ensure that both work in both environments. Andrew Bartlett
2012-08-28s3-secrets: Use talloc_stackframe() in secrets_init_path()Andrew Bartlett1-3/+6
2012-08-28s3-secrets: Handle all valid ROLE_ values in get_default_sec_channel()Andrew Bartlett1-1/+2
2012-08-28s3-secrets: Add helper function to set machine account password from ↵Andrew Bartlett2-0/+92
secrets_tdb_sync secrets_tdb_sync will be a new ldb module designed to sync secrets.ldb entries with the secrets.tdb file. While not ideal to keep two copies of this data, this routine will assist in allowing the samba-tool domain join code to operate correctly in most cases where winbindd and smbd are used. Andrew Bartlett
2012-08-28s3-param: Avoid assert on use of talloc_tos() without stackframeAndrew Bartlett1-2/+3
This is hit during samba-tool domain classicupgrade Andrew Bartlett
2012-08-24s3:lib: make sure we don't try to send messages to server_id's marked as ↵Stefan Metzmacher1-0/+4
disconnected metze Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Fri Aug 24 15:54:48 CEST 2012 on sn-devel-104
2012-08-24s3:lib: remove unused processes_exist()Stefan Metzmacher1-70/+0
metze
2012-08-24s3:lib: readd the CTDB_CONTROL_CHECK_SRVIDS optimization to serverids_exist()Stefan Metzmacher1-0/+45
metze
2012-08-24s3:lib: only loop over the server_ids we need to verify in serverids_exist()Stefan Metzmacher1-11/+23
metze
2012-08-24s3:lib: use server_id_is_disconnected() in serverids_exist()Stefan Metzmacher1-0/+4
metze
2012-08-24s3:lib: inline processes_exist() into serverids_exist()Stefan Metzmacher1-14/+99
metze
2012-08-24s3:lib: SERVERID_UNIQUE_ID_NOT_TO_VERIFY only means not to verify the ↵Stefan Metzmacher1-3/+4
'unique_id' part It doesn't mean the the server_id is always valid. metze
2012-08-24s3:lib: implement process_exists() as wrapper of serverid_exists()Stefan Metzmacher1-14/+2
The changes the behavior of process_exists() it checks the pid.unique_id now, if it's not SERVERID_UNIQUE_ID_NOT_TO_VERIFY. metze
2012-08-24s3:g_lock: use serverid_exists() with SERVERID_UNIQUE_ID_NOT_TO_VERIFYStefan Metzmacher1-1/+10
metze
2012-08-24s3:lib: implement serverid_exists() as wrapper of serverids_exist()Stefan Metzmacher1-30/+5
metze
2012-08-24s3:lib: remove CTDB_CONTROL_CHECK_SRVIDS optimization in serverids_exist() ↵Stefan Metzmacher1-6/+0
for now This will be readded... metze
2012-08-23s3: fix compile warning on openindianaBjörn Jacke1-5/+5
Autobuild-User(master): Björn Jacke <bj@sernet.de> Autobuild-Date(master): Thu Aug 23 18:22:13 CEST 2012 on sn-devel-104
2012-08-23s3/registry: fix compile warning on openindianaBjörn Jacke1-1/+1
2012-08-23s3-smbd: Add security_info_wanted argument to get_nt_acl_no_snumAndrew Bartlett4-7/+7
I need to get at the owner, group, DACL and SACL when testing correct ACL storage. Andrew Bartlett
2012-08-23s3-pysmbd: Fix return type of smbd.get_nt_aclAndrew Bartlett1-1/+1
The security_ prefix is stripped off in the python bindings. Andrew Bartlett
2012-08-23s3-smbd: Add talloc_stackframe() to get_nt_acl_no_snum()Andrew Bartlett1-3/+8
This is required because the functions it calls use talloc_tos(). Andrew Bartlett
2012-08-23param: Add startup checks for valid server role/binary combinationsAndrew Bartlett3-0/+23
This should eliminate confusion from our users about what they can expect to successfully run. Andrew Bartlett
2012-08-23s3-pysmbd: Fix error messageAndrew Bartlett1-2/+2
2012-08-23s3-pysmbd: Allow a mode to be specified for the simple ACLAndrew Bartlett1-27/+32
The additional group for the ACL is now optional. Andrew Bartlett
2012-08-23file_server: Move default VFS module settings to loadparm.cAndrew Bartlett1-0/+13
This means that any utility that calls into the VFS layer will get the right modules. Because we use the fake_acls backend we need to override this whole list in Samba4.pm however. Andrew Bartlett
2012-08-23s3:smb2_break: encrypt OPLOCK BREAK notificationsStefan Metzmacher3-18/+107
metze Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Thu Aug 23 10:01:14 CEST 2012 on sn-devel-104
2012-08-23s3:smb2_server: use smbXsrv_session->nonce_*Stefan Metzmacher2-25/+27
metze
2012-08-23smbXsrv.idl: add nonce_* to smbsrv_sessionStefan Metzmacher1-0/+2
metze
2012-08-23s3:smb2_server: remove dump_data() from smbd_smb2_request_pending_timer()Stefan Metzmacher1-1/+0
This was just for debugging... metze
2012-08-22Remove align_string(). No longer used.Jeremy Allison2-12/+0
Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Wed Aug 22 20:38:50 CEST 2012 on sn-devel-104
2012-08-22Fix bug in SMB_FIND_INFO_STANDARD parsing found by Volker.Jeremy Allison1-1/+3
The function align_string() is now broken as base_ptr no longer points at the start of the SMB data packet, but at the start of the returned TRANS2 data area. Replace it with a check for FLAGS2_UNICODE_STRINGS and a call to ucs2_align().
2012-08-22s3-pysmbd: Correct the python type for smb_acl_tAndrew Bartlett1-2/+2
The t is weird, but the python bindings trim the traditional IDL name prefix of each element, as it is usually rudundent. Andrew Bartlett
2012-08-22s3-vfs: Remove extra calls to SMB_VFS_HANDLE_GET_DATAAndrew Bartlett1-6/+0
Found by the talloc_stackframe() out of order checker! Andrew Bartlett
2012-08-21Fix bug #9098 - winbind does not refresh kerberos tickets.Jeremy Allison3-0/+39
Based on work from Ian Gordon <ian.gordon@strath.ac.uk>. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Aug 21 22:01:15 CEST 2012 on sn-devel-104
2012-08-21selftest: Add tests for vfs_aio_forkAndrew Bartlett1-0/+4
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Tue Aug 21 13:12:33 CEST 2012 on sn-devel-104
2012-08-21s3-vfs: Make vfs_aio_fork erratic timing behaviour a run-time optionAndrew Bartlett1-5/+44
This will allow this to be tested as part of a normal selftest. Andrew Bartlett