summaryrefslogtreecommitdiff
path: root/source4/smb_server/smb2
AgeCommit message (Collapse)AuthorFilesLines
2012-06-15lib/param: Create a seperate server role for "active directory domain ↵Andrew Bartlett1-1/+1
controller" This will allow us to detect from the smb.conf if this is a Samba4 AD DC which will allow smarter handling of (for example) accidentially starting smbd rather than samba. To cope with upgrades from existing Samba4 installs, 'domain controller' is a synonym of 'active directory domain controller' and new parameters 'classic primary domain controller' and 'classic backup domain controller' are added. Andrew Bartlett
2012-05-23Introduce system MIT krb5 build with --with-system-mitkrb5 option.Alexander Bokovoy1-1/+2
System MIT krb5 build also enabled by specifying --without-ad-dc When --with-system-mitkrb5 (or --withou-ad-dc) option is passed to top level configure in WAF build we are trying to detect and use system-wide MIT krb5 libraries. As result, Samba 4 DC functionality will be disabled due to the fact that it is currently impossible to implement embedded KDC server with MIT krb5. Thus, --with-system-mitkrb5/--without-ad-dc build will only produce * Samba 4 client libraries and their Python bindings * Samba 3 server (smbd, nmbd, winbindd from source3/) * Samba 3 client libraries In addition, Samba 4 DC server-specific tests will not be compiled into smbtorture. This in particular affects spoolss_win, spoolss_notify, and remote_pac rpc tests.
2012-05-09s4:smb_server/smb: only create a new session with vuid == 0Stefan Metzmacher1-0/+5
metze
2012-04-11s4-smb2: Fix a talloc crash bug.Andreas Schneider1-2/+2
The talloc context needs to be initialzed or NULL. So move talloc_steal() to the position where req is initialized. Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Wed Apr 11 15:59:39 CEST 2012 on sn-devel-104
2012-04-02s4:smb_server/smb2: add missing 'return;' statements in smb2srv_chain_reply()Stefan Metzmacher1-0/+3
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Apr 2 23:02:53 CEST 2012 on sn-devel-104
2012-04-02s4:smb_server/smb2: after smbsrv_terminate_connection() we have to returnStefan Metzmacher1-1/+0
req is a talloc child of the connection... metze
2012-04-02s4:smb_server/smb2: fix memory leak in smb2srv_chain_reply()Stefan Metzmacher1-0/+2
metze
2012-04-02s4:smb_server/smb2: use helper variable smb2srv_chain_reply()Stefan Metzmacher1-6/+7
metze
2011-11-08s4-smb_server No longer follow the security=share smb.conf directiveAndrew Bartlett1-1/+0
By ignoring the value of security= from the smb.conf, we can allow this to instead set the value of 'server role' in a manner compatible with the Samba 3.x release stream. Andrew Bartlett
2011-11-03s4:smb_server: s/SMB_SIGNING_SUPPORTED/SMB_SIGNING_IF_REQUIRED/Stefan Metzmacher1-1/+1
metze
2011-11-03s4:smb_server: change the default for "server signing" to "default"Stefan Metzmacher1-1/+4
metze
2011-11-03s4:smb_server/smb2: add the same SMB_SIGNING_AUTO logic as for smb1Stefan Metzmacher1-2/+25
metze
2011-10-31s4:smb_server/smb2: correctly implement related compound requestsStefan Metzmacher2-0/+15
We need to remember the session id and tree id. metze
2011-10-31s4:smb_server/smb2: always grant the requested creditsStefan Metzmacher3-20/+20
At least one credit, if the client asked for 0. metze
2011-10-31s4:smb_server/smb2: echo back more header fieldsStefan Metzmacher1-3/+7
metze
2011-10-19s4:smb_server/smb2: make use of _smb_setlen_tcp()Stefan Metzmacher1-1/+1
metze
2011-10-18gensec: move event context from gensec_*_init() to gensec_update()Andrew Bartlett1-1/+1
This avoids keeping the event context around on a the gensec_security context structure long term. In the Samba3 server, the event context we either supply is a NULL pointer as no server-side modules currently use the event context. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-09-29s4:smb_server/smb2: make sure we sign the final session setupStefan Metzmacher1-3/+10
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Sep 29 18:59:54 CEST 2011 on sn-devel-104
2011-09-05s4:smb_server: make use of PROTOCOL_SMB2_02Stefan Metzmacher1-1/+1
metze
2011-08-03gensec: clarify memory ownership for gensec_session_info() and ↵Andrew Bartlett1-1/+1
gensec_session_key() This is slightly less efficient, because we no longer keep a cache on the gensec structures, but much clearer in terms of memory ownership. Both gensec_session_info() and gensec_session_key() now take a mem_ctx and put the result only on that context. Some duplication of memory in the callers (who were rightly uncertain about who was the rightful owner of the returned memory) has been removed to compensate for the internal copy. Andrew Bartlett
2011-03-04s4-nterr: move auth_nt_status_squash to nt_status_squash and move to nterr.cGünther Deschner1-2/+2
Guenther
2010-12-01s4-smb_server Return why the ntvfs_connect() failed.Andrew Bartlett1-1/+1
Andrew Bartlett
2010-10-31s4: Remove the old perl/m4/make/mk-based build system.Jelmer Vernooij1-19/+0
The new waf-based build system now has all the same functionality, and the old build system has been broken for quite some time. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Oct 31 02:01:44 UTC 2010 on sn-devel-104
2010-10-11smb2: Add missing dependency on NDR_DFSBLOBS.Jelmer Vernooij1-1/+1
2010-09-15s4-smb: serialise session setup operationsAndrew Tridgell1-0/+9
the mixture of async and sync code in gensec makes a EOF on a socket during a session setup cause a crash. The simplest solution is to stop processing events on the socket until the session setup is complete.
2010-07-16s4-loadparm: 2nd half of lp_ to lpcfg_ conversionAndrew Tridgell2-5/+5
this converts all callers that use the Samba4 loadparm lp_ calling convention to use the lpcfg_ prefix. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-06-29s4:smb_server/smb2/find.c - remove unused codeMatthias Dieter Wallnöfer1-3/+0
Spotted by the Solaris 10 compiler
2010-05-18Finish removal of iconv_convenience in public API's.Jelmer Vernooij2-3/+3
2010-04-27s4:smb_server: pass tsocket_addresses to the ntvfs layerStefan Metzmacher1-2/+4
metze
2010-04-06s4-waf: removed the AUTOGENERATED markersAndrew Tridgell1-4/+0
we won't be using the mk -> wscript generator again
2010-04-06s4-waf: mark the wscript files as python so vim/emacs knows how to highlight ↵Andrew Tridgell1-0/+2
them
2010-04-06build: commit all the waf build files in the treeAndrew Tridgell1-0/+10
2010-02-02Change uint_t to unsigned int in source4Matt Kraai1-2/+2
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-12-24s4:gensec: change gensec_update_send/recv to tevent_reqStefan Metzmacher1-5/+12
metze
2009-12-10s4-server: use GUID_to_ndr_blob() in cldap and smb serversAndrew Tridgell1-3/+2
2009-12-10s4-smb2: use new GUID function in smb2 negprotAndrew Tridgell1-3/+2
2009-11-27s4:smb_server/smb2: don't reset highest_smb2_seqnum on SMB2 CancelStefan Metzmacher1-2/+4
metze
2009-11-27s4-smb2: sequence numbers are not checked in SMB2_OP_CANCELAndrew Tridgell1-1/+2
2009-11-25s4/libcli: rename previously reserved field in SMB2 LOCK structSteven Danneman1-1/+1
The lock.in.reserved field has been renamed lock_sequence in the SMB 2.1 dialect. See MS-SMB 2.2.26.
2009-09-19s4-smbd: minimise includes in smbd/ and smb_serverAndrew Tridgell8-15/+0
2009-06-09s4:smb2srv: don't allow the related flag on the first request in a ↵Stefan Metzmacher1-0/+7
compounded chain metze
2009-06-09s4:smb2srv: correctly fail remaining compounded requests after a failureStefan Metzmacher2-5/+18
metze
2009-06-09s4:smb2srv: remove old TODO comment, we already check the seqnumStefan Metzmacher1-2/+0
metze
2009-06-09s4:smb2srv: fix handling of multiple compounded requestsStefan Metzmacher1-7/+12
metze
2009-06-09s4:smb2srv: remove the chained file handle on closeStefan Metzmacher1-0/+4
metze
2009-05-26s4:smb2srv: We only support SMB 2.002.Stefan Metzmacher1-5/+12
We need to loop over all given dialects and check if we can find SMB2_DIALECT_REVISION_202. metze
2009-05-20Have ntvfs_connect() accept union smb_tcon *tcon instead of char* sharenameSam Liddicott1-7/+7
This change brings ntvfs_connect into compliance with other ntvfs functions which take an ntvfs module, an ntvfs request and an smb io union. It now becomes the responsibility of ntvfs modules to examine tcon->generic.level themselves and derive the share name and any other options directly; e.g. const char *sharename; switch (tcon->generic.level) { case RAW_TCON_TCON: sharename = tcon->tcon.in.service; break; case RAW_TCON_TCONX: sharename = tcon->tconx.in.path; break; case RAW_TCON_SMB2: default: return NT_STATUS_INVALID_LEVEL; } if (strncmp(sharename, "\\\\", 2) == 0) { char *p = strchr(sharename+2, '\\'); if (p) { sharename = p + 1; } } service.c smbsrv_tcon_backend() is called before ntvfs_connect and fills in some of the tcon->..out values. For the case of RAW_TCON_TCONX, it filles out tcon->tconx.out.tid and tcon->tconx.out.options For the case of RAW_TCON_TCON it fills out tcon->tcon.out.tid and tcon->tcon.out.max_xmit Thus the ntvfs_connect function for vfs modules may override these values if desired, but are not required to. ntvfs_connect functions are required to fill in the tcon->tconx.out.*_type fields, for RAW_TCON_TCONX, perhaps something like: if (tcon->generic.level == RAW_TCON_TCONX) { tcon->tconx.out.fs_type = ntvfs->ctx->fs_type; tcon->tconx.out.dev_type = ntvfs->ctx->dev_type; } Signed-off-by: Sam Liddicott <sam@liddicott.com> (I fixed the ntvfs_connect() in the smb_server/smb2/ and the RAW_TCON_SMB2 switch case in the modules) Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-05-11s4:smb_server: return after we have processed an invalid smb2 requestStefan Metzmacher1-0/+2
metze
2009-02-13Remove auth/ntlm as a dependency of GENSEC by means of function pointers.Andrew Bartlett3-21/+22
When starting GENSEC on the server, the auth subsystem context must be passed in, which now includes function pointers to the key elements. This should (when the other dependencies are fixed up) allow GENSEC to exist as a client or server library without bundling in too much of our server code. Andrew Bartlett
2009-02-02s4:smb_server: s/private/private_dataStefan Metzmacher2-4/+4
metze