summaryrefslogtreecommitdiff
path: root/source4/smb_server/smb2
AgeCommit message (Collapse)AuthorFilesLines
2011-11-08s4-smb_server No longer follow the security=share smb.conf directiveAndrew Bartlett1-1/+0
By ignoring the value of security= from the smb.conf, we can allow this to instead set the value of 'server role' in a manner compatible with the Samba 3.x release stream. Andrew Bartlett
2011-11-03s4:smb_server: s/SMB_SIGNING_SUPPORTED/SMB_SIGNING_IF_REQUIRED/Stefan Metzmacher1-1/+1
metze
2011-11-03s4:smb_server: change the default for "server signing" to "default"Stefan Metzmacher1-1/+4
metze
2011-11-03s4:smb_server/smb2: add the same SMB_SIGNING_AUTO logic as for smb1Stefan Metzmacher1-2/+25
metze
2011-10-31s4:smb_server/smb2: correctly implement related compound requestsStefan Metzmacher2-0/+15
We need to remember the session id and tree id. metze
2011-10-31s4:smb_server/smb2: always grant the requested creditsStefan Metzmacher3-20/+20
At least one credit, if the client asked for 0. metze
2011-10-31s4:smb_server/smb2: echo back more header fieldsStefan Metzmacher1-3/+7
metze
2011-10-19s4:smb_server/smb2: make use of _smb_setlen_tcp()Stefan Metzmacher1-1/+1
metze
2011-10-18gensec: move event context from gensec_*_init() to gensec_update()Andrew Bartlett1-1/+1
This avoids keeping the event context around on a the gensec_security context structure long term. In the Samba3 server, the event context we either supply is a NULL pointer as no server-side modules currently use the event context. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-09-29s4:smb_server/smb2: make sure we sign the final session setupStefan Metzmacher1-3/+10
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Sep 29 18:59:54 CEST 2011 on sn-devel-104
2011-09-05s4:smb_server: make use of PROTOCOL_SMB2_02Stefan Metzmacher1-1/+1
metze
2011-08-03gensec: clarify memory ownership for gensec_session_info() and ↵Andrew Bartlett1-1/+1
gensec_session_key() This is slightly less efficient, because we no longer keep a cache on the gensec structures, but much clearer in terms of memory ownership. Both gensec_session_info() and gensec_session_key() now take a mem_ctx and put the result only on that context. Some duplication of memory in the callers (who were rightly uncertain about who was the rightful owner of the returned memory) has been removed to compensate for the internal copy. Andrew Bartlett
2011-03-04s4-nterr: move auth_nt_status_squash to nt_status_squash and move to nterr.cGünther Deschner1-2/+2
Guenther
2010-12-01s4-smb_server Return why the ntvfs_connect() failed.Andrew Bartlett1-1/+1
Andrew Bartlett
2010-10-31s4: Remove the old perl/m4/make/mk-based build system.Jelmer Vernooij1-19/+0
The new waf-based build system now has all the same functionality, and the old build system has been broken for quite some time. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Oct 31 02:01:44 UTC 2010 on sn-devel-104
2010-10-11smb2: Add missing dependency on NDR_DFSBLOBS.Jelmer Vernooij1-1/+1
2010-09-15s4-smb: serialise session setup operationsAndrew Tridgell1-0/+9
the mixture of async and sync code in gensec makes a EOF on a socket during a session setup cause a crash. The simplest solution is to stop processing events on the socket until the session setup is complete.
2010-07-16s4-loadparm: 2nd half of lp_ to lpcfg_ conversionAndrew Tridgell2-5/+5
this converts all callers that use the Samba4 loadparm lp_ calling convention to use the lpcfg_ prefix. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-06-29s4:smb_server/smb2/find.c - remove unused codeMatthias Dieter Wallnöfer1-3/+0
Spotted by the Solaris 10 compiler
2010-05-18Finish removal of iconv_convenience in public API's.Jelmer Vernooij2-3/+3
2010-04-27s4:smb_server: pass tsocket_addresses to the ntvfs layerStefan Metzmacher1-2/+4
metze
2010-04-06s4-waf: removed the AUTOGENERATED markersAndrew Tridgell1-4/+0
we won't be using the mk -> wscript generator again
2010-04-06s4-waf: mark the wscript files as python so vim/emacs knows how to highlight ↵Andrew Tridgell1-0/+2
them
2010-04-06build: commit all the waf build files in the treeAndrew Tridgell1-0/+10
2010-02-02Change uint_t to unsigned int in source4Matt Kraai1-2/+2
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-12-24s4:gensec: change gensec_update_send/recv to tevent_reqStefan Metzmacher1-5/+12
metze
2009-12-10s4-server: use GUID_to_ndr_blob() in cldap and smb serversAndrew Tridgell1-3/+2
2009-12-10s4-smb2: use new GUID function in smb2 negprotAndrew Tridgell1-3/+2
2009-11-27s4:smb_server/smb2: don't reset highest_smb2_seqnum on SMB2 CancelStefan Metzmacher1-2/+4
metze
2009-11-27s4-smb2: sequence numbers are not checked in SMB2_OP_CANCELAndrew Tridgell1-1/+2
2009-11-25s4/libcli: rename previously reserved field in SMB2 LOCK structSteven Danneman1-1/+1
The lock.in.reserved field has been renamed lock_sequence in the SMB 2.1 dialect. See MS-SMB 2.2.26.
2009-09-19s4-smbd: minimise includes in smbd/ and smb_serverAndrew Tridgell8-15/+0
2009-06-09s4:smb2srv: don't allow the related flag on the first request in a ↵Stefan Metzmacher1-0/+7
compounded chain metze
2009-06-09s4:smb2srv: correctly fail remaining compounded requests after a failureStefan Metzmacher2-5/+18
metze
2009-06-09s4:smb2srv: remove old TODO comment, we already check the seqnumStefan Metzmacher1-2/+0
metze
2009-06-09s4:smb2srv: fix handling of multiple compounded requestsStefan Metzmacher1-7/+12
metze
2009-06-09s4:smb2srv: remove the chained file handle on closeStefan Metzmacher1-0/+4
metze
2009-05-26s4:smb2srv: We only support SMB 2.002.Stefan Metzmacher1-5/+12
We need to loop over all given dialects and check if we can find SMB2_DIALECT_REVISION_202. metze
2009-05-20Have ntvfs_connect() accept union smb_tcon *tcon instead of char* sharenameSam Liddicott1-7/+7
This change brings ntvfs_connect into compliance with other ntvfs functions which take an ntvfs module, an ntvfs request and an smb io union. It now becomes the responsibility of ntvfs modules to examine tcon->generic.level themselves and derive the share name and any other options directly; e.g. const char *sharename; switch (tcon->generic.level) { case RAW_TCON_TCON: sharename = tcon->tcon.in.service; break; case RAW_TCON_TCONX: sharename = tcon->tconx.in.path; break; case RAW_TCON_SMB2: default: return NT_STATUS_INVALID_LEVEL; } if (strncmp(sharename, "\\\\", 2) == 0) { char *p = strchr(sharename+2, '\\'); if (p) { sharename = p + 1; } } service.c smbsrv_tcon_backend() is called before ntvfs_connect and fills in some of the tcon->..out values. For the case of RAW_TCON_TCONX, it filles out tcon->tconx.out.tid and tcon->tconx.out.options For the case of RAW_TCON_TCON it fills out tcon->tcon.out.tid and tcon->tcon.out.max_xmit Thus the ntvfs_connect function for vfs modules may override these values if desired, but are not required to. ntvfs_connect functions are required to fill in the tcon->tconx.out.*_type fields, for RAW_TCON_TCONX, perhaps something like: if (tcon->generic.level == RAW_TCON_TCONX) { tcon->tconx.out.fs_type = ntvfs->ctx->fs_type; tcon->tconx.out.dev_type = ntvfs->ctx->dev_type; } Signed-off-by: Sam Liddicott <sam@liddicott.com> (I fixed the ntvfs_connect() in the smb_server/smb2/ and the RAW_TCON_SMB2 switch case in the modules) Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-05-11s4:smb_server: return after we have processed an invalid smb2 requestStefan Metzmacher1-0/+2
metze
2009-02-13Remove auth/ntlm as a dependency of GENSEC by means of function pointers.Andrew Bartlett3-21/+22
When starting GENSEC on the server, the auth subsystem context must be passed in, which now includes function pointers to the key elements. This should (when the other dependencies are fixed up) allow GENSEC to exist as a client or server library without bundling in too much of our server code. Andrew Bartlett
2009-02-02s4:smb_server: s/private/private_dataStefan Metzmacher2-4/+4
metze
2008-12-05Let ntvfs request transport close via ntvfs_request stateSam Liddicott1-0/+10
[I can't swear that this covers all the smb2 cases, there are some reply functions that I can't trace properly] Add NTVFS_ASYNC_STATE_CLOSE bit to ntvfs_request->async_states->state so that the ntvfs layer can signify that the client transport should be closed, most useful for proxy servies, and most likely due to a forwarding transport having been closed. Signed-off-by: Sam Liddicott <sam@liddicott.com> Signed-off-by: Stefan Metzmacher <metze@samba.org>
2008-11-02Add gensec_settings structure. This wraps loadparm_context for now, butJelmer Vernooij2-2/+2
should in the future only contain some settings required for gensec.
2008-10-24Remove unused include param/param.h.Jelmer Vernooij1-1/+0
2008-10-24Remove iconv_convenience parameter from simple string push/pullJelmer Vernooij1-1/+1
functions.
2008-09-24we need different error handling for truncated packets in NETPROT andAndrew Tridgell1-2/+39
other SMB2 operations.
2008-09-24we should terminate the connection on a bad negprot packet sizeAndrew Tridgell1-2/+2
2008-09-24cope with body_size zero in SMB2 receiveAndrew Tridgell1-1/+2
2008-09-24check for a 0 byte in the buffer in SMB2 readAndrew Tridgell1-0/+6