Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2009-02-02 | fix for commit d96248a9b46 which broke Heimdal builds | Björn Jacke | 1 | -0/+6 | |
2009-02-02 | s3:selftest: pass correct arguments to $SCRIPTDIR/test_smbtorture_s3.sh | Stefan Metzmacher | 1 | -2/+2 | |
metze | |||||
2009-02-02 | s3:build: fix typo introduced in "fix build without shared libs" | Michael Adam | 1 | -1/+1 | |
Michael | |||||
2009-02-02 | s3:build: fix linking of bin/net when shared libs have been disabled | Michael Adam | 1 | -1/+1 | |
Michael | |||||
2009-02-02 | s3 build: Fix "assignment discards qualifiers from pointer target type" warnings | Tim Prouty | 2 | -13/+6 | |
2009-02-01 | Add two new parameters to control how we verify kerberos tickets. Removes ↵ | Dan Sledz | 10 | -34/+170 | |
lp_use_kerberos_keytab parameter. The first is "kerberos method" and replaces the "use kerberos keytab" with an enum. Valid options are: secrets only - use only the secrets for ticket verification (default) system keytab - use only the system keytab for ticket verification dedicated keytab - use a dedicated keytab for ticket verification. secrets and keytab - use the secrets.tdb first, then the system keytab For existing installs: "use kerberos keytab = yes" corresponds to secrets and keytab "use kerberos keytab = no" corresponds to secrets only The major difference between "system keytab" and "dedicated keytab" is that the latter method relies on kerberos to find the correct keytab entry instead of filtering based on expected principals. The second parameter is "dedicated keytab file", which is the keytab to use when in "dedicated keytab" mode. This keytab is only used in ads_verify_ticket. | |||||
2009-02-02 | s3:winbind_group: fix "getent group" to allocate new gids. | Michael Adam | 1 | -2/+8 | |
"getent group" used to fill the idmap cache with negative cache entries for unmapped group sids. Don't pass domain name unconditionally to idmap_sid_to_gid(). idmap_sid_to_gid() only creates new mappings (allocating idmap backends tdb, tdb2, ldap...) when the domain name passed in is "". Note that it is _wrong_ to directly call the idmap_sid_to_gid() functions here, in the main winbindd. The correct fix would be to send a sid_to_gid request to winbindd itself, but this needs more work to prepare the async mechanisms, and we nee a quick fix for getent passwd now. Michael | |||||
2009-02-02 | s3:winbind_user: fix "getent passwd" to allocate new uids. | Michael Adam | 1 | -2/+7 | |
"getent passwd" used to fill the idmap cache with negative cache entries for unmapped user sids. Don't pass domain name unconditionally to idmap_sid_to_[ug]id(). idmap_sid_to_[ug]id() only creates new mappings (allocating idmap backends tdb, tdb2, ldap...) when the domain name passed in is "". Note that it is _wrong_ to directly call the idmap_sid_to_[ug]id() functions here, in the main winbindd. The correct fix would be to send a sid_to_[ug]id request to winbindd itself, but this needs more work to prepare the async mechanisms, and we nee a quick fix for getent passwd now. Michael | |||||
2009-02-02 | s3:winbind_user: move initialization of domain up in winbindd_fill_pwent() | Michael Adam | 1 | -11/+9 | |
and streamline logic some Michael | |||||
2009-02-01 | shared: Move dom_sid_* utility functions to top level | Kai Blin | 2 | -2/+3 | |
2009-02-01 | Split up async_req into a generic and a NTSTATUS specific part | Volker Lendecke | 15 | -185/+185 | |
2009-02-01 | Convert api_RNetUserEnum to use the srv_samr_nt.c directly | Volker Lendecke | 1 | -26/+77 | |
This is a sample for other accesses to pdb to go via samr. The goal is to access passdb only via srv_samr_nt.c. If that is done, then we can easily swap in another samr implementation like for example samba4's via a unix domain socket. | |||||
2009-02-01 | Move rpc_pipe_open_internal to srv_pipe_hnd.c | Volker Lendecke | 2 | -37/+37 | |
This is a smbd-only function | |||||
2009-02-01 | Replace pipe names in pipes_struct by ndr_syntax_id | Volker Lendecke | 5 | -72/+117 | |
This was mainly used for debugging output | |||||
2009-02-01 | Fix some type-punned warnings | Volker Lendecke | 1 | -3/+3 | |
2009-02-01 | cli_get_pipe_name_from_interface does not really need a talloc_ctx | Volker Lendecke | 6 | -32/+28 | |
2009-02-01 | Fix nonempty blank lines | Volker Lendecke | 2 | -119/+117 | |
2009-02-01 | Just for fun: Move some bytes from bss to text | Volker Lendecke | 2 | -2/+2 | |
2009-02-01 | fix build with external dns_sd libraries | Björn Jacke | 1 | -1/+1 | |
2009-02-01 | Fix the build on Solaris CC | Volker Lendecke | 1 | -1/+1 | |
2009-01-31 | Remove unused np_read sync wrapper | Volker Lendecke | 2 | -32/+0 | |
2009-01-31 | Make reply_pipe_read_andx async | Volker Lendecke | 1 | -13/+57 | |
2009-01-31 | Remove unused np_write sync wrapper | Volker Lendecke | 2 | -32/+0 | |
2009-01-31 | Make reply_pipe_write async | Volker Lendecke | 1 | -13/+48 | |
2009-01-31 | Make reply_pipe_write_and_X async | Volker Lendecke | 1 | -20/+52 | |
2009-01-31 | Make-np_write-handle-0-byte-writes-as-NT_STATUS_OK | Volker Lendecke | 2 | -43/+33 | |
2009-01-31 | Convert api_rpc_trans_reply to async np_* | Volker Lendecke | 2 | -29/+135 | |
2009-01-31 | Add an async np_read wrapper | Volker Lendecke | 2 | -22/+107 | |
2009-01-31 | Add an async np_write wrapper | Volker Lendecke | 2 | -15/+106 | |
2009-01-31 | make send_file_readbraw static | Volker Lendecke | 2 | -12/+6 | |
2009-01-31 | Remove the global variable "chain_size" | Volker Lendecke | 8 | -24/+34 | |
2009-01-31 | Make is_andx_req non-static | Volker Lendecke | 3 | -26/+26 | |
2009-01-31 | s4:build: require ldb 0.9.3 when building against an external library | Stefan Metzmacher | 1 | -1/+1 | |
metze | |||||
2009-01-30 | s3 onefs: Fix onefs ACLs to work with updated ACL syscall | Tim Prouty | 1 | -1/+1 | |
2009-01-30 | s3 build: Remove unused fstat check to fix a bunch of HAVE_FSTAT warnings | Tim Prouty | 1 | -1/+1 | |
2009-01-30 | Fix memleaks | Volker Lendecke | 1 | -0/+7 | |
2009-01-30 | pass NULL to prs_give_memory, that is a pointer | Volker Lendecke | 1 | -1/+1 | |
2009-01-30 | s3:selftest: run the same tests as 'make test' | Stefan Metzmacher | 1 | -29/+73 | |
Only the tests with samba4's smbtorture are missing. metze | |||||
2009-01-30 | s3:tests: add a guard arround . $incdir/test_functions.sh | Stefan Metzmacher | 11 | -0/+21 | |
So that caller can overwrite the functions. metze | |||||
2009-01-30 | s3:smbconftort: don't use reserved words ('test:', 'failure:', 'success:') | Stefan Metzmacher | 1 | -31/+29 | |
Temporary results printfs should not contain reserved subunit words. metze | |||||
2009-01-30 | selftest: don't export $CONFIGURATION anymore only $SMB_CONF_PATH | Stefan Metzmacher | 1 | -1/+1 | |
metze | |||||
2009-01-30 | Add the "SMBD" rpc transport | Volker Lendecke | 5 | -1/+785 | |
The idea of this is that all client utils like smbpasswd and also for example "net join" do not access our internal databases like passdb and secrets.tdb directly anymore but pass everything throught the well-established RPC interfaces. The way you use this is the following: With rpc_cli_smbd_conn_init() or its async variant you initialize a "struct rpc_cli_smbd_conn". This structure is the link to a freshly forked smbd, ready to be used for RPC services. You should only ever have one such structure in your program. More don't hurt, but are plainly unnecessary. If you want to use the SAMR pipe to change a passwort, you connect to that pipe with rpc_pipe_open_local. Do you normal rpccli_samr calls on that and your locally forked smbd will connect to passdb for you. GD, this might make the distinction between the _l and _r calls in libnetapi mostly unnecessary. At least it is intended to do so... :-) | |||||
2009-01-30 | Make rpc_transport_np_init async | Volker Lendecke | 2 | -32/+128 | |
2009-01-30 | Add async cli_ntcreate | Volker Lendecke | 2 | -0/+154 | |
2009-01-30 | Make cli_tcon_andx async | Volker Lendecke | 13 | -101/+210 | |
2009-01-30 | Make cli_session_setup_guest async | Volker Lendecke | 2 | -37/+107 | |
2009-01-29 | Fix coverity CID#117 - resource leak in error path. | Jeremy Allison | 1 | -24/+53 | |
Jeremy. | |||||
2009-01-29 | Fix coverity CID#116. Resource leak on error path. | Jeremy Allison | 1 | -2/+4 | |
Jeremy. | |||||
2009-01-29 | Fix coverity CID#115. Resource leak in error path. | Jeremy Allison | 1 | -1/+4 | |
Jeremy. | |||||
2009-01-29 | Upgrade POSIX inheritance storage to a new format (version 2). Stores | Jeremy Allison | 1 | -200/+360 | |
the Windows ACL type and flags if "map acl inherit" is set. Jeremy. |