Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-08-23 | s4:security Change struct security_token->sids from struct dom_sid * to ↵ | Andrew Bartlett | 1 | -1/+1 | |
struct dom_sid This makes the structure much more like NT_USER_TOKEN in the source3/ code. (The remaining changes are that privilages still need to be merged) Andrew Bartlett | |||||
2010-08-18 | s4:ntvfs Don't treat the user SID and primary group SID special for idmap | Andrew Bartlett | 1 | -12/+4 | |
This simply askes IDMAP about all the user SIDs, rather than the user and group sid, followed by all but the first two sids from the token. Andrew Bartlett | |||||
2010-07-16 | s4-loadparm: 2nd half of lp_ to lpcfg_ conversion | Andrew Tridgell | 9 | -20/+20 | |
this converts all callers that use the Samba4 loadparm lp_ calling convention to use the lpcfg_ prefix. Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-06-29 | s4:ntvfs/ipc/vfs_ipc.c - remove unused code | Matthias Dieter Wallnöfer | 1 | -4/+0 | |
Spotted by the Solaris 10 compiler | |||||
2010-06-29 | s4:ntvfs/ipc/vfs_ipc.c - add casts to suppress warnings on Solaris 10 | Matthias Dieter Wallnöfer | 1 | -3/+3 | |
2010-05-28 | s4:ntvfs/simple/svfs_util.c - change an "asprintf" into a "talloc_asprintf" | Matthias Dieter Wallnöfer | 1 | -2/+3 | |
2010-05-28 | s4:ntvfs/nbench/vfs_bench.c - change a "asprintf" into a "talloc_asprintf" | Matthias Dieter Wallnöfer | 1 | -2/+4 | |
2010-05-24 | s4:idmap Adjust code to new idmap structure names and layout. | Andrew Bartlett | 3 | -53/+37 | |
Andrew Bartlett | |||||
2010-05-24 | s4:ntvfs rename notify.idl to s4_notify.idl until we can merge this IDL | Andrew Bartlett | 3 | -3/+3 | |
This IDL is almost common, but the source3 version has a hand-marshalled server_id. The s3compat build has problems with two different idl files of the same name. Andrew Bartlett | |||||
2010-05-21 | s4:ntvfs/ipc/vfs_ipc.c - add more "const" in order to fix warnings | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
2010-05-21 | s4:ntvfs/posix/pvfs_wait.c - fix a "calculated value unused" warning | Matthias Dieter Wallnöfer | 1 | -3/+5 | |
The calculated value is "req" (!= NULL) if "talloc_reference" did work correctly or it is NULL if we ran out of memory. | |||||
2010-05-18 | s3: Remove use of iconv_convenience. | Jelmer Vernooij | 1 | -1/+0 | |
2010-05-18 | Finish removal of iconv_convenience in public API's. | Jelmer Vernooij | 8 | -46/+30 | |
2010-05-18 | s4:ntvfs Prepare for a possible future sharing of notify.idl | Andrew Bartlett | 1 | -0/+4 | |
I would love for notify.idl to be shared between Samba4 and Samba3 some day, and this seems to be the point at which the structure is initialised. Andrew Bartlett | |||||
2010-05-14 | s4:ntvfs Prepare for a possible future sharing of notify.idl | Andrew Bartlett | 1 | -0/+4 | |
I would love for notify.idl to be shared between Samba4 and Samba3 some day, and this seems to be the point at which the structure is initialised. Andrew Bartlett | |||||
2010-04-27 | s4:ntvfs/ipc: remote // debug comments | Stefan Metzmacher | 1 | -5/+0 | |
metze | |||||
2010-04-27 | s4:ntvfs: remove socket_address based functions | Stefan Metzmacher | 2 | -32/+0 | |
metze | |||||
2010-04-27 | s4:ntvfs/ipc: pass the already given tsocket_address structures to the ↵ | Stefan Metzmacher | 1 | -29/+2 | |
named_pipe_auth code metze | |||||
2010-04-27 | s4:ntvfs: add tsocket based addresses to ntvfs_context | Stefan Metzmacher | 2 | -0/+27 | |
metze | |||||
2010-04-26 | s4: fix some build warnings. | Günther Deschner | 1 | -1/+1 | |
Guenther | |||||
2010-04-26 | s4: use generated rap header. | Günther Deschner | 3 | -3/+3 | |
Guenther | |||||
2010-04-26 | s4: rename RAP share_enum_info to share_info. | Günther Deschner | 2 | -11/+11 | |
Guenther | |||||
2010-04-06 | s4-waf: move to a universal method of recursing into subdirs | Andrew Tridgell | 1 | -4/+4 | |
This works with both standalone lib builds and bundled builds | |||||
2010-04-06 | s4-waf: removed the AUTOGENERATED markers | Andrew Tridgell | 3 | -11/+0 | |
we won't be using the mk -> wscript generator again | |||||
2010-04-06 | s4-waf: sys_lease depends on talloc | Andrew Tridgell | 1 | -1/+2 | |
2010-04-06 | s4-waf: more dependencies on talloc | Andrew Tridgell | 1 | -1/+2 | |
these are needed so we can support a system talloc without using the bundled talloc.h | |||||
2010-04-06 | s4-waf: cleaned up tevent dependency | Andrew Tridgell | 1 | -1/+1 | |
2010-04-06 | s4-waf: mark the wscript files as python so vim/emacs knows how to highlight ↵ | Andrew Tridgell | 6 | -0/+12 | |
them | |||||
2010-04-06 | build: sys_lease_linux needs to be conditionally enabled | Andrew Tridgell | 1 | -9/+12 | |
2010-04-06 | build: conditionally enable inotify | Andrew Tridgell | 2 | -8/+10 | |
2010-04-06 | build: waf quicktest nearly works | Andrew Tridgell | 2 | -6/+6 | |
Rewrote wafsamba using a new dependency handling system, and started adding the waf test code | |||||
2010-04-06 | build: commit all the waf build files in the tree | Andrew Tridgell | 5 | -0/+168 | |
2010-04-06 | build: improve autoconf macros | Andrew Tridgell | 1 | -2/+4 | |
- enable headers to be specified - enable both forms of DECL check - more libreplace checks - more heimdal checks - more sysdep checks | |||||
2010-04-06 | build: ntvfs/sysdep configure checks | Andrew Tridgell | 1 | -0/+7 | |
2010-03-05 | s4-pvfs_sys: build on systems without O_NOFOLLOW or O_DIRECTORY | Andrew Tridgell | 1 | -4/+22 | |
2010-03-05 | s4-pvfs_sys: talloc_free should be before errno restore | Andrew Tridgell | 1 | -13/+13 | |
talloc can potentially change the errno | |||||
2010-03-05 | s4-pvfs: use pvfs_sys_fchmod() | Andrew Tridgell | 3 | -4/+4 | |
2010-03-05 | s4-pvfs: set default for perm override based on system features | Andrew Tridgell | 1 | -1/+9 | |
If the system has O_NOFOLLOW and O_DIRECTORY then we allow for overrides by default. If not, then we disable by default, as we will be more vulnerable to symlink attacks | |||||
2010-03-05 | s4-pvfs: use O_FOLLOW one level at a time for security overrides | Andrew Tridgell | 1 | -37/+357 | |
To prevent symlink attacks we need to use O_NOFOLLOW one level at a time when processing a root security override | |||||
2010-03-05 | s4-pvfs: use pvfs_sys_*() functions to wrap posix calls | Andrew Tridgell | 5 | -20/+20 | |
This allows for root override, which fixes many problems with mismatches between NT ACL permissions and unix permissions. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-03-05 | s4-pvfs: new pvfs_sys module | Andrew Tridgell | 2 | -0/+301 | |
The pvfs_sys_*() calls provide wrapper functions for posix file functions which use root privileges to override EACCES failures if PVFS_FLAG_PERM_OVERRIDE is set Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-03-05 | s4-pvfs: added new pvfs flag PVFS_FLAG_PERM_OVERRIDE | Andrew Tridgell | 2 | -0/+4 | |
This flag indicates that we should use root privileges to override unix permissions when the NT ACLs indicate that access should be granted Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-03-05 | s4-pvfs: log more error conditions in NTVFS backend | Andrew Tridgell | 3 | -0/+31 | |
This should make is easier to track down some bug reports Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-03-05 | s4-pvfs: move the private ntcreatex flags to private_flags | Andrew Tridgell | 3 | -6/+12 | |
Re-using two of the create_options bits was bound to eventually cause problems, and indeed, Windows7 now uses one of those bits when opening text files. Fixes bug 7189 | |||||
2010-03-03 | s4-posix: allow change ownership of files if the user has the right privileges | Andrew Tridgell | 1 | -2/+21 | |
When a user has SEC_PRIV_TAKE_OWNERSHIP or SEC_PRIV_RESTORE they have permission to change the ownership of a file. This should fix bug 6987 Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-02-26 | s4-krb5: propogate errors from a lot more kerberos functions | Andrew Tridgell | 1 | -1/+2 | |
We need to be able to give sensible error messages when a kerberos calls fails. This propogates the kerberos error up the stack to the caller. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-02-13 | s4-ntvfs: use TYPESAFE_QSORT() in notify code | Andrew Tridgell | 1 | -3/+2 | |
2010-02-11 | s4: Switch to S3-style id mapping data types. | Kai Blin | 3 | -22/+22 | |
2010-02-09 | s4:Remove "Py_RETURN_NONE" compatibility code | Matthias Dieter Wallnöfer | 2 | -8/+0 | |
This was needed only by Python 2.3 which we no longer support. | |||||
2010-02-05 | s4:UID wrapper - Fix includes | Matthias Dieter Wallnöfer | 2 | -0/+18 | |
The includes of the UID wrapper headers werent't really efficient according to metze's post on the technical mailing list (http://lists.samba.org/archive/samba-technical/2010-February/069165.html). To achieve this move the "uid_wrapper.h" includes into "lib/util/unix_privs.c", "lib/util/util.c", "ntvfs/posix/pvfs_acl.c" and "ntvfs/unixuid/vfs_unixuid.c". |