summaryrefslogtreecommitdiff
path: root/source4/libcli
AgeCommit message (Collapse)AuthorFilesLines
2010-03-05s4:libcli/wrepl: convert wrepl_associate_send to tevent_reqStefan Metzmacher1-36/+98
metze
2010-03-05s4:libcli/wrepl: convert wrepl_pull_table_send to tevent_reqStefan Metzmacher1-39/+98
metze
2010-03-05s4:libcli/wrepl: convert wrepl_pull_names_send to tevent_reqStefan Metzmacher1-63/+142
metze
2010-03-05s4:libcli/wrepl: use UTIL_TEVENTStefan Metzmacher2-1/+2
metze
2010-03-05s4:libcli/wrepl: avoid neested named structuresStefan Metzmacher1-15/+19
metze
2010-03-05s4-pvfs: move the private ntcreatex flags to private_flagsAndrew Tridgell2-8/+7
Re-using two of the create_options bits was bound to eventually cause problems, and indeed, Windows7 now uses one of those bits when opening text files. Fixes bug 7189
2010-03-05s4-dns-ex: use autoclose on the dns child pipeAndrew Tridgell1-2/+1
I'm hoping this will fix an occasional segfault I've noticed where epoll still calls events on a closed fde Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-03-03s4:move the sddl code down to the top levelMichael Adam3-627/+2
Michael
2010-03-02s4-libcli: Added NULL handlers for DSDB_CONTROL_DN_STORAGE_FORMAT_OID and ↵Endi S. Dewata1-0/+4
LDB_CONTROL_AS_SYSTEM_OID Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-02-26s4-krb5: propogate errors from a lot more kerberos functionsAndrew Tridgell1-0/+5
We need to be able to give sensible error messages when a kerberos calls fails. This propogates the kerberos error up the stack to the caller. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-02-17s4/ldap: Refactor the fix for ldap nested searchesKamen Mazdrashki1-4/+0
Current implementation synchronizes processing for all types of LDAP request, not only LDAP_Search ones. Synchronization for ldap replies processing is done locally in ldb_ildap module as this concerns only ildb_callback() function. Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
2010-02-11s4: Switch to S3-style id mapping data types.Kai Blin2-9/+9
2010-02-09s4-torture: allow host-only in unc lists in smbtortureAndrew Tridgell1-2/+2
Allow UNC lists like this: 192.168.2.1 192.168.2.2 192.168.2.3 the share name will be taken from the command line
2010-02-02Change uint_t to unsigned int in source4Matt Kraai16-90/+90
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-01-29s4/ldap: Fix nested searches SEGFAULT bugKamen Mazdrashki1-0/+4
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-01-29s4:libcli: remove unneeded talloc_reference() usageStefan Metzmacher1-4/+1
metze
2010-01-26s4-libcli: Fixed a talloc_reference error.Andreas Schneider1-0/+1
Signed-off-by: Andreas Schneider <asn@redhat.com> Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
2010-01-08libcli/util: add tstream_read_pdu_blob_send/recvStefan Metzmacher1-0/+5
This will take the some full_request callback function as the Samba4 packet code. metze
2010-01-06s4: Fix result check for getaddrinfo()Kamen Mazdrashki1-6/+11
I think this completes commit 50feca550eed7828198b7c0fc5f0e5ddc863313d. Now result should be handled correctly both for systems that support EAI_NODATA but returns EAI_NONAME (as my Ubuntu 9.x) and systems that doesn't support EAI_NODATA at all. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-01-02s4-sddl: DRS replication needs REVISION_ADS for SDsAndrew Tridgell1-1/+1
DRS replication with w2k8-r2 fails with a schema mismatch error if we set the revision to NT4
2009-12-31s4-net: fixed finddcs to use empty SID instead of NULL sid (NDR error)Andrew Tridgell1-0/+3
2009-12-31py/security: Add test for dom_sid.split.Jelmer Vernooij1-3/+8
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-12-17Fixed incorrect checking of PRINCIPAL_SELF permissions.Nadezhda Ivanova1-3/+12
If an ace has the PRINCIPAL_SELF as trustee, this sid has to be replaced with the onjectSid of the object being checked. PRINCIPAL_SELF is the way to grant rights to an account over itself.
2009-12-10s4-libcli: GUID_from_ndr_blob() is strict about the blob sizeAndrew Tridgell1-2/+4
We need to create a blob of the right length
2009-12-10s4-libcli: use GUID_to_ndr_blob()Andrew Tridgell2-11/+9
2009-12-10s4-libcli: use new GUID functions in libcliAndrew Tridgell3-18/+9
2009-12-07s4 torure: Add SMB2 utility functionsZack Kirsch1-0/+1
- Add a torture_setup_dir() equivalent in SMB2, called smb2_util_setup_dir(). - Add verify_sd() and verify_attrib() helper functions for SMB2.
2009-12-07s4/libcli: add define for exclusive lock modeSteven Danneman1-0/+1
2009-12-03s4 torture: Add lockread_supported based off of CAP_LOCK_AND_READZachary Loafman2-0/+4
Signed-off-by: Tim Prouty <tprouty@samba.org>
2009-11-28s4: fix SD update and password change in upgrade scriptMatthieu Patou1-0/+20
- reserve a new Samba OID for recalculate SD control - fix the update SD function - fix handling of kvno in the update_machine_account_password function - fix handling of handles in RPC winreg server Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-11-27s4:security/sddl - rework of the security descriptor abbreviationsMatthias Dieter Wallnöfer1-28/+33
- Reoder them - Add some new ones (needed for the security descriptor in the provision script)
2009-11-25s4/libcli: rename previously reserved field in SMB2 LOCK structSteven Danneman2-2/+2
The lock.in.reserved field has been renamed lock_sequence in the SMB 2.1 dialect. See MS-SMB 2.2.26.
2009-11-25s4/libcli: Initialize client PID for SMB2 connectionsSteven Danneman3-0/+6
Set the SMB pid to the Unix pid of the client process.
2009-11-19s4:ldbcli - Added encoder/decoder for relax control.Endi S. Dewata1-2/+20
2009-11-17s4/libcli: add a FILE_NOTIFY_CHANGE_ALL macroAravind Srinivasan1-0/+8
This macro encompasses all possible file notifications that can be raised.
2009-11-17Fixed incorrect SID for RAS Servers.Nadezhda Ivanova2-1/+2
2009-11-15Fixed some major bugs in inheritance and access checks.Nadezhda Ivanova1-13/+16
Fixed sd creation not working on LDAP modify. Fixed incorrect replacement of CO and CG. Fixed incorrect access check on modify for SD modification. Fixed failing sec_descriptor test and enabled it. Fixed failing sd add test in ldap.python
2009-11-12s4:libcli/ldap Add 'relax' OID to known network representationsAndrew Bartlett1-0/+2
This patch, inspired by a patche by Endi S. Dewata <edewata@redhat.com>, allows this control to be passed to the LDAP backend. Andrew Bartlett
2009-11-05Version 1.0 of the directory service acls module.Nadezhda Ivanova2-47/+60
At this point, support for checks on LDAP add, delete, rename and modify. Old kludge_acl is still there to handle the searches. This module is synchronous as the async version was impossible to debug, will be converted to async after some user testing.
2009-11-03Fixed some missing flags and bugs in the security creation.Nadezhda Ivanova1-11/+47
Also, added some logging. It needs improvement, possibly ability to turn in on and off via configuration file.
2009-11-03Fixed a bug in object specific access checks.Nadezhda Ivanova1-2/+4
2009-10-22s4:libcli/security/access_check - Add "const" in front of "type"Matthias Dieter Wallnöfer1-1/+1
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2009-10-17s4-acl: SEC_FLAG_MAXIMUM_ALLOWED doesn't auto-apply privilege access masksAndrew Tridgell1-6/+2
2009-10-17s4-security: honor more of the privilege access bitsAndrew Tridgell1-4/+12
2009-10-15s4-libcli: fixed structure element bug in ntcreatexreadxAndrew Tridgell1-1/+1
This one didn't matter until the root_fid changed the alignment of the two structures.
2009-10-15s4-smb: declare root_fid as a file handleAndrew Tridgell4-7/+7
In order to implement root_fid in the s4 SMB server we need to declare it as a handle type, just as for other fnum values in SMB. This required some extensive (but simple) changes in many bits of code.
2009-10-14s4: Changes the old occurences of "lp_realm" in "lp_dnsdomain" where neededMatthias Dieter Wallnöfer1-1/+3
For KERBEROS applications the realm should be upcase (function "lp_realm") but for DNS ones it should be used lowcase (function "lp_dnsdomain"). This patch implements the use of both in the right way.
2009-10-02s4: fix various warnings (not "const" related ones)Matthias Dieter Wallnöfer3-6/+5
2009-10-01s4/torture: Add two new SMB RAW-OPEN testsAravind Srinivasan2-0/+126
* Add chained NTCREATEX_READX test which first tries to open/read a non-existant file failing on the open, then attempts the same operation on a file that does exist, opening and reading successfully. * Add test for open_dispositions on directories.
2009-10-01s4/torture: Ported SMB oplock torture tests to SMB2Steven Danneman1-0/+9
I've ported all applicable SMB oplock torture tests to SMB2, giving us a good base for SMB2 oplock testing. There are several differences between oplocks in SMB and SMB2, mostly because of differences in W2K3 and W2K8. The existing SMB oplock tests all pass against W2K3, but several fail against W2K8. These same tests were failing in SMB2, util I reworked them. BATCH19, BATCH20: In W2K3/SMB a setfileinfo - rename command wouldn't cause a sharing violation or break an existing oplock. It appears that in W2K8/SMB2 a sharing violation is raised. BATCH22: In W2K3/SMB when a second opener was waiting the full timeout of an oplock break, it would receive NT_STATUS_SHARING_VIOLATION after about 35 seconds. This bug has been fixed in W2K8/SMB2 and instead the second opener succeeds. LEVELII500: Added 1 new test checking that the server returns a proper error code when a client improperly replies to a levelII to none break notification. STREAM1: W2K8 now grants oplocks on alternate data streams.
generated by cgit (git 2.34.1) at 2024-06-28 20:17:02 +0000