summaryrefslogtreecommitdiff
path: root/source3
AgeCommit message (Collapse)AuthorFilesLines
2008-08-22cifs.upcall: bump SPNEGO msg version number and don't reject old versionsJeff Layton2-3/+3
When we added the ability for the kernel to send sec=mskrb5 to the upcall, we subtly broke old cifs.upcall versions that don't understand it. Bump the spnego message version to 2 to make this clear. Also, change cifs.upcall to not reject requests with a version that's lower than the current one, and to send the reply with the same version that the request sent. The idea is to try and keep cifs.upcall backward compatible with old kernels. Signed-off-by: Jeff Layton <jlayton@redhat.com> (This used to be commit b868463015dedc684eb13d12118a98ccca71250a)
2008-08-22net: Add missing colon to unify usage messages.Karolin Seeger1-2/+2
Karolin (This used to be commit c7aef4b38bd2b152b316d8d76b45be4b73ca315f)
2008-08-22loadparm: idmap backend is not depracated any longer.Karolin Seeger1-1/+1
Karolin (This used to be commit fcfab4703628e19902c140a7ad9531d4be0de01d)
2008-08-21cifs.upcall: fix build warningJeff Layton1-1/+2
Signed-off-by: Jeff Layton <jlayton@redhat.com> (This used to be commit aa3443492c58a7c109fe159e15d763dbafc66f2a)
2008-08-21cifs.upcall: enable building by default on linuxJeff Layton1-4/+19
When building on linux, default to building cifs.upcall. Throw a warning if ADS support is disabled or keyutils isn't installed. Signed-off-by: Jeff Layton <jlayton@redhat.com> (This used to be commit d8018d15f013b8d7be8618b75dac5112711193b7)
2008-08-21cifs.upcall: move default install location to EPREFIX/sbinJeff Layton1-4/+4
cifs.upcall links to libraries that live under /usr, so installing it in /sbin doesn't seem appropriate. Move it to EPREFIX/sbin instead (i.e. /usr/sbin). Signed-off-by: Jeff Layton <jlayton@redhat.com> (This used to be commit 5c9a1b2c98cc712fc519225e62fba4e5088631a3)
2008-08-21cifs.upcall: handle MSKRB5 OID properlyJeff Layton1-5/+13
When the kernel sends the upcall a sec=mskrb5 parameter, that means the the MSKRB5 OID is preferred by the server. This patch fixes the upcall to use that OID in place of the "normal" krb5 OID when it gets a sec=mskrb5 parameter. Signed-off-by: Jeff Layton <jlayton@redhat.com> Acked-by: Steve French <smfrench@gmail.com> (This used to be commit 6287e13b34efeaa8fd94c7c6d99468350ce6172e)
2008-08-21mount.cifs: don't prompt for password on krb5 mountsJeff Layton1-1/+2
krb5 mounts require that the user already have a valid krb5 ticket. Since we can't currently use the password entered, don't prompt for it. Also, switch to using strncmp instead of strcmp here. Signed-off-by: Jeff Layton <jlayton@redhat.com> (This used to be commit c75791c34abebe23c6f6a5534b0358514ec4eabc)
2008-08-21Fix broken net rpc join message when DC can't be found. Ensure we pass in a ↵Jeremy Allison1-2/+3
domain name. Jeremy. (This used to be commit 33019fe2b5f521c143fc79edb915eca69b9ed98d)
2008-08-22rpc_server: make it a little more obvious what flags we send to a client.Günther Deschner1-1/+10
Guenther (This used to be commit f3791e03ab09cadb1f54e32e67f4dfb3cf42e708)
2008-08-21Fix Bug #5710 and make machine account password changing work again.Günther Deschner1-23/+52
When we negotiated NETLOGON_NEG_PASSWORD_SET2 we need to use NetrServerPasswordSet2 to change the machine password. Tested with NT4, W2k, W2k3 and W2k8. Guenther (This used to be commit 5820360451e4db0fad0472f814cae667b2ea51fd)
2008-08-21Fix bug 5698 - mixup of TALLOC/malloc. Spotted by Douglas Wegscheid ↵Jeremy Allison1-2/+3
<Douglas_E_Wegscheid@whirlpool.com>. Jeremy. (This used to be commit 1295bb9787dde69b4be4acee7b66eb782afe9c42)
2008-08-21re-run make idl.Günther Deschner4-14/+40
Guenther (This used to be commit f24cef9fa7be45212744d39b7c66804e64147afd)
2008-08-21IDL: fix IDL for netr_ServerPasswordSet2().Günther Deschner1-3/+3
Guenther (This used to be commit 7b312a0abc6de5a51555ccfbde7f8f78fc11d043)
2008-08-21build: add [clean_]libsmbclient_examples targets to top level MakefileMichael Adam1-0/+11
Michael (This used to be commit b476400f0afcaf4e1a37b9f0b358f01dc7a194be)
2008-08-21libsmbclient examples: add Makefile.internal.in for building from a samba sourceMichael Adam1-0/+1
Without needing to install libsmbclient to /usr/local/samba first. Michael (This used to be commit f0e47bce2e98131812e96fb88cc3d1fe939e8d6c)
2008-08-20Here is a re-working of the winbinddJeremy Allison5-9/+46
reconnect code to cope with rebooting a DC. This replaces the code I asked Volker to revert. The logic is pretty simple. It adds a new parameter, "winbind reconnect delay", set to 30 seconds by default, which determines how long to wait between connection attempts. To avoid overwhelming the box with DC-probe forked children, the code now keeps track of the DC probe child per winbindd_domain struct and only starts a new one if the existing one has died. I also added a little logic to make sure the dc probe child always sends a message whatever the reason for exit so we will always reschedule another connect attempt. Also added documentation. Jeremy. (This used to be commit 8027197635b988b3dcf9d3d00126a024e768fa62)
2008-08-20build: auto-generate symbols for libsmbsharemodes.Michael Adam2-5/+5
Michael (This used to be commit f1d84e76bb6935e80b01d13414980f8de1f71824)
2008-08-20build: autogenerate symbols for libsmbclient.soMichael Adam2-6/+5
Michael (This used to be commit d6fb6348a3672e915556dcb36c1a4999d4abae18)
2008-08-20build: fix bug #5590 by not linking in the static libs but the objects.Michael Adam1-1/+1
Michael (This used to be commit 6ad2090391a92ebe822b2d7b80e180c251dc8e7a)
2008-08-20build: fall down to the same place when using an internal lib statically.Michael Adam1-1/+1
Michael (This used to be commit 702c0bc04668117e3521d687b9b5a87fd7e0f1b1)
2008-08-20build: remove duplicated and hardcoded definition of LIBSMBSHAREMODESMichael Adam1-2/+0
Michael (This used to be commit c3c3dadcab81f0a1ae8834e85e7e80a3da6601fb)
2008-08-20build: rename LIBNETAPI_OBJ1 to LIBNETAPI_OBJ0 for consistency.Michael Adam1-4/+4
Michael (This used to be commit ead9b9d7167d999d73cf4111f3b321236aac2a15)
2008-08-20fix build warning.Günther Deschner1-1/+1
Guenther (This used to be commit a75055be5ff7ebe3476cfac86c6597a56a843c23)
2008-08-20libads: remove unused vars.Günther Deschner1-3/+0
Guenther (This used to be commit ea9fc3bea31b11e715d9524defc18b75e5943842)
2008-08-20fix another build warning.Günther Deschner1-2/+2
Guenther (This used to be commit 43693ce6c678b961fa516bbf502af92f87cd5346)
2008-08-20nss_winbind: When returning NSS_UNAVAIL, squash errno to ENOENTGerald (Jerry) Carter1-2/+18
According to the GNU libc nss guide, we should always set errno to ENOENT when returning NSS_UNAVAIL. http://www.gnu.org/software/libtool/manual/libc/NSS-Modules-Interface.html#NSS-Modules-Interface At least the MQ Series message queing service that runs on WebSphere will fail if you return any other errno in this case. (This used to be commit ee26664602445fa7798e2061f6bcbef0756d6528)
2008-08-20smbd: fix the handling of create_options to pass RAW-OPENStefan Metzmacher3-4/+28
Some of the bits generate INVALID_PARAMETER and some bits are ignored when they come from a client, that's why we need to use bits from the ignored range for our internal usage. metze (This used to be commit 7b4c8a4e39f310eb450918fa841b0ea1b4af19f7)
2008-08-20Updated Doxyfile conf to doxygen version 1.5.3Steven Danneman1-31/+47
* Removed deprecated configuration parameters * Silenced all warnings due to lack of doxygen comments * Reordered config parameters to match doxygen's canonical ordering (This used to be commit d3295d13aeb396377cb7fd46dcdb1f504f18efef)
2008-08-19Fix bug 5697 nmbd spins in reload_interfaces when only loopback has an IPv4 ↵Jeremy Allison4-10/+14
address reported by Ted Percival <ted@midg3t.net>. Jeremy. (This used to be commit ab06efccf31fbc899536d2681a2076e6dfd65b9e)
2008-08-19winbindd: consistently use false/true.Günther Deschner1-27/+27
Guenther (This used to be commit e8619121d16d086f1ab186051d0ecdc83c02e5b5)
2008-08-19winbindd: use set_auth_errors (avoid code duplication).Günther Deschner1-28/+6
Guenther (This used to be commit ae35a5110ea03d8ff27f320cdc685e5623715a2a)
2008-08-19winbindd: fill_in_password_policy (to avoid redundant code).Günther Deschner1-20/+18
Guenther (This used to be commit dbfa7ba14c9f1a4d7a1e7205dd0b3ea2fc2e6131)
2008-08-19pam_winbind: some doxygen fixes.Günther Deschner1-24/+12
Guenther (This used to be commit f2a2ed315e393353110aa7760b4eca4f1f49ca21)
2008-08-19wbinfo: use wbinfo_prompt_pass() everywhere.Günther Deschner1-23/+16
Guenther (This used to be commit 687ef28874eb311b3e3919c3a38a22e5186d4c1b)
2008-08-19wbinfo: add wbinfo_prompt_pass.Günther Deschner1-0/+27
Guenther (This used to be commit 7cf6ed68236e7dd64657cb1087a5a687d6f59ad1)
2008-08-19pam_winbind: use pam error string function to display result.Günther Deschner1-1/+2
Guenther (This used to be commit 8504a92ac55d6936df051be66207a59a76bf32a3)
2008-08-19pam_winbind: add _pam_error_code_str().Günther Deschner1-0/+72
Guenther (This used to be commit 693f90fd2394309ce40d3ca5fc007543058b342a)
2008-08-19pam_winbind: use integer constants.Günther Deschner1-14/+14
Guenther (This used to be commit 8d19b2ceb131ca2a0fd983cdb4fd17acdad9c26e)
2008-08-19winbindd: kill some trailing/leading whitespace.Günther Deschner1-159/+159
Guenther (This used to be commit b5bb7844952a87b123551b478b60bfe232afc308)
2008-08-19build: fix linking cifs.upcall when nscd_flush_cache() is found.Michael Adam1-1/+1
Michael (This used to be commit 661b7fdffda40a9ca7cb36627dbaf91cb4357cd0)
2008-08-18Make the change to smbcontrol for "all" to mean broadcast,Jeremy Allison1-4/+3
and "smbd" to mean the main smb daemon. Update docs to match. Jeremy. (This used to be commit e415420b086a236be6bcc1e7584bec276a74e457)
2008-08-18Fix length error in wrapping spnego blobIgor Mammedov1-1/+1
(This used to be commit 16ee95494ba495c5f5ff8779206f380db1067b2d)
2008-08-16Fix bug 5696. The problem was when smbdJeremy Allison1-2/+18
was asking for a winbindd name to SID lookup of "Unix Group\name" where "name" was also a valid username, the winbindd passdb lookup of that name was losing the domain string info before calling lookup name (ie. lookup_name() was being called with just the string "name", not the full string "Unix Group\name"). The passdb backend of winbindd has to cope with not only names from it's own global SAM domain, but it does lookups for BUILTIN and "Unix User" and "Unix Group" also, so making it guess by losing the domain string is "A Bad Idea" (tm) :-). Note that as winbind globally calls winbind_off() at startup, it's safe for winbind to call sys_getgrnam() to do the "Unix Group" lookup from inside lookup_name(). Jeremy. (This used to be commit 5293af6c3cbfdde340e6add47b914b6ee6fd7b6f)
2008-08-16Attempt to fix Coverity ID 596Volker Lendecke1-1/+1
Jeremy, please check & push if it's ok. (This used to be commit f06070c188d6d2efed3205bbc9c3c290718397b1)
2008-08-16Attempt to fix Coverity ID 595Volker Lendecke1-1/+1
is_ipaddress already dereferences "name", so the NULL check is pointless after calling it. (This used to be commit 31ca7b2dbbbfbb3a55670b58c08ebda68888af7e)
2008-08-15I think the problem with these functions is that lookup_usergroupsHerb Lewis2-18/+18
should never include the user SID. The comment for the function in winbindd/winbindd_ads.c says /* Lookup groups a user is a member of. */ The following patch makes the wbinfo calls return the correct data before and after a login. wbinfo --user-domgroups and --user-sids (This used to be commit 7849938906a9c859805cbaeca66fae9d3c515aad)
2008-08-15configure: use libdir=${prefix}/lib and modules=${libdir}/samba as default ↵Michael Adam1-2/+2
with-fhs. This is what one actually wants: Shared/static libs in /usr/lib, shared modules and so on in /usr/lib/samba. Michael (This used to be commit 03de8c1955a85f2e3e9f947309e09023138a1591)
2008-08-15configure: use ${libdir} instead of \${LIBDIR}.Michael Adam1-4/+4
Now after removing --with-libdir, the value of ${libdir} won't change anymore at that stage, so there is no need to have the variable expansion deferred to "make". Michael (This used to be commit 256977cf05cb4c4073ece1389a7e4939b18f5f13)
2008-08-15configure: remove the --with-libdir parameter.Michael Adam1-16/+0
This is redundant: use the autoconf-provided --libdir instead. This will also make the new distinction between libdir and modulesdir more visible. Michael (This used to be commit c1d53b7c767275b39dc8ecfcd5b6129ee2cabb6d)