samba - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author	Files	Lines
2008-04-17	Specify event_context to ldb_wrap_connect explicitly.	Jelmer Vernooij	1	-2/+3
	(This used to be commit b4e1ae07a284c044704322446c94351c2decff91)
2008-04-02	Install public header files again and include required prototypes.	Jelmer Vernooij	1	-1/+1
	(This used to be commit 47ffbbf67435904754469544390b67d34c958343)
2007-12-21	r26319: Split encoding functions out of libcli_ldap.	Jelmer Vernooij	1	-1/+1
	(This used to be commit 95a6ef7fc8757ccfd90dbf0d6c9b5098f10b10b6)
2007-12-21	r26252: Specify loadparm_context explicitly when creating sessions.	Jelmer Vernooij	1	-1/+1
	(This used to be commit 7280c1e9415daabb2712db1372e23f9846272ede)
2007-12-21	r26229: Set loadparm context as opaque pointer in ldb, remove more uses of ↵	Jelmer Vernooij	1	-2/+2
	global_loadparm. (This used to be commit 37d05fdc7b0e6b3211ba6ae56b1b5da30a6a392a)
2007-12-21	r26227: Make loadparm_context part of a server task, move loadparm_contexts ↵	Jelmer Vernooij	1	-1/+2
	further up the call stack. (This used to be commit 0721a07aada6a1fae6dcbd610b8783df57d7bbad)
2007-12-21	r26003: Split up DB_WRAP, as first step in an attempt to sanitize dependencies.	Jelmer Vernooij	1	-1/+1
	(This used to be commit 56dfcb4f2f8e74c9d8b2fe3a0df043781188a555)
2007-10-10	r23966: It isn't great, but at least now we have some access control in SWAT	Andrew Bartlett	1	-0/+5
	This patch prevents non-root and non-administrator users from running the provision, upgrade and vampire pages. I think the rest of SWAT is LDB operations, or otherwise authenticated, so we should now be secure. I wish I had a better way to 'prove' we got this right, but this is better than nothing, and moves us closer to an alpha. Andrew Bartlett (This used to be commit d61061052dc4711f886199e49bc303002c8f9b11)
2007-10-10	r23792: convert Samba4 to GPLv3	Andrew Tridgell	1	-3/+2
	There are still a few tidyups of old FSF addresses to come (in both s3 and s4). More commits soon. (This used to be commit fcf38a38ac691abd0fa51b89dc951a08e89fdafa)
2007-10-10	r14894: - add some 'const'	Stefan Metzmacher	1	-1/+1
	- remove sid_active_in_token() was the same as security_token_has_sid() - rename some functions metze (This used to be commit 81390dcda50f53d61e70059fb33014de0d283dc5)
2007-10-10	r14891: fix a bug found by the ibm checker	Stefan Metzmacher	1	-10/+6
	the problem was that we shift with <<= (privilege-1) and we called the function with privilege=0 add some checks to catch invalid privilege values and hide the mask representation in privilege.c metze (This used to be commit a69f000324764bcd4cf420f2ecba1aca788258e4)
2007-10-10	r14860: create libcli/security/security.h	Stefan Metzmacher	1	-1/+1
	metze (This used to be commit 9ec706238c173992dc938d537bdf1103bf519dbf)
2007-10-10	r14840: - rename some functions	Stefan Metzmacher	1	-2/+2
	- stack specific functions on top of generic ones metze (This used to be commit e391f3c98aae600c5f64d5975dd55567a09c3100)
2007-10-10	r13961: make function public	Stefan Metzmacher	1	-1/+1
	metze (This used to be commit 9f2e20600d22fbdf582a5a90e8099fe591d5cc48)
2007-10-10	r13924: Split more prototypes out of include/proto.h + initial work on header	Jelmer Vernooij	1	-0/+2
	file dependencies (This used to be commit 122835876748a3eaf5e8d31ad1abddab9acb8781)
2007-10-10	r12608: Remove some unused #include lines.	Jelmer Vernooij	1	-2/+0
	(This used to be commit 70e7449318aa0e9d2639c76730a7d1683b2f4981)
2007-10-10	r12542: Move some more prototypes out to seperate headers	Jelmer Vernooij	1	-0/+3
	(This used to be commit 0aca5fd5130d980d07398f3291d294202aefe3c2)
2007-10-10	r10810: This adds the hooks required to communicate the current user from the	Andrew Bartlett	1	-2/+14
	authenticated session down into LDB. This associates a session info structure with the open LDB, allowing a future ldb_ntacl module to allow/deny operations on that basis. Along the way, I cleaned up a few things, and added new helper functions to assist. In particular the LSA pipe uses simpler queries for some of the setup. In ldap_server, I have removed the 'ldasrv:hacked' module, which hasn't been worked on (other than making it continue to compile) since January, and I think the features of this module are being put into ldb anyway. I have also changed the partitions in ldap_server to be initialised after the connection, with the private pointer used to associate the ldb with the incoming session. Andrew Bartlett (This used to be commit fd7203789a2c0929eecea8125b57b833a67fed71)
2007-10-10	r9240: - move struct security_token to the idl file, with this we can	Stefan Metzmacher	1	-3/+3
	the ndr_pull/push/print functions for it in the ntacl-lsm module - fix compiler warnings in the ldap_encode_ndr_* code metze (This used to be commit 83d65d0d7ed9c240ad44aa2c881c1f07212bfda4)
2007-10-10	r7864: fixed some const bugs	Andrew Tridgell	1	-1/+1
	(This used to be commit 616f54015ff8c7b25fa500cb03d025a9950ed6cf)
2007-10-10	r7860: switch our ldb storage format to use a NDR encoded objectSid. This is	Andrew Tridgell	1	-7/+4
	quite a large change as we had lots of code that assumed that objectSid was a string in S- format. metze and simo tried to convince me to use NDR format months ago, but I didn't listen, so its fair that I have the pain of fixing all the code now :-) This builds on the ldb_register_samba_handlers() and ldif handlers code I did earlier this week. There are still three parts of this conversion I have not finished: - the ltdb index records need to use the string form of the objectSid (to keep the DNs sane). Until that it done I have disabled indexing on objectSid, which is a big performance hit, but allows us to pass all our tests while I rejig the indexing system to use a externally supplied conversion function - I haven't yet put in place the code that allows client to use the "S-xxx-yyy" form for objectSid in ldap search expressions. w2k3 supports this, presumably by looking for the "S-" prefix to determine what type of objectSid form is being used by the client. I have been working on ways to handle this, but am not happy with them yet so they aren't part of this patch - I need to change pidl to generate push functions that take a "const void " instead of a "void" for the data pointer. That will fix the couple of new warnings this code generates. Luckily it many places the conversion to NDR formatted records actually simplified the code, as it means we no longer need as many calls to dom_sid_parse_talloc(). In some places it got more complex, but not many. (This used to be commit d40bc2fa8ddd43560315688eebdbe98bdd02756c)
2007-10-10	r5988: Fix the -P option (use machine account credentials) to use the Samba4	Andrew Bartlett	1	-1/+1
	secrets system, and not the old system from Samba3. This allowed the code from auth_domain to be shared - we now only lookup the secrets.ldb in lib/credentials.c. In order to link the resultant binary, samdb_search() has been moved from deep inside rpc_server into lib/gendb.c, along with the existing gendb_search_v(). The vast majority of this patch is the simple rename that followed, (Depending on the whole SAMDB for just this function seemed pointless, and brought in futher dependencies, such as smbencrypt.c). Andrew Bartlett (This used to be commit e13c671619bd290a8b3cae8555cb281a9a185ee0)
2007-10-10	r4547: - added talloc_new(ctx) macro that is a neater form of the common ↵	Andrew Tridgell	1	-1/+1
	talloc(ctx, 0) call. - cleaned up some talloc usage in various files I'd like to get to the point that we have no calls to talloc(), at which point we will rename talloc_p() to talloc(), to encourage everyone to use the typesafe functions. (This used to be commit e6c81d7c9f8a6938947d3c1c8a971a0d6d50b67a)
2007-10-10	r4419: move security_token stuff to the libcli/security/	Stefan Metzmacher	1	-1/+1
	and debug privileges metze (This used to be commit c981808ed4cfa63c7ba7c4f9190b6b14f74bab40)
2007-10-10	r4151: added privilege attribute handling on samdb.	Andrew Tridgell	1	-0/+107
	pvfs will now honor some privileges on ACLs, and it will be quite easy to add the checks for more privileges in the necessary places, by making calls to sec_privilege_check(). (This used to be commit 3549039d0fbc54f87ae679e7288b82b28713e487)