summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* s3-waf: add PRINTING subsystems.Günther Deschner2010-09-271-12/+21
| | | | Guenther
* s3-waf: add two more REGF based subsystems.Günther Deschner2010-09-271-9/+14
| | | | Guenther
* tdb: fix non-WAF build, commit 1.2.6 ABI file.Rusty Russell2010-09-272-1/+62
| | | | | | Sorry Jeremy. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
* tdb: TDB_INCOMPATIBLE_HASH, to allow safe changing of default hash.Rusty Russell2010-09-276-6/+23
| | | | | | | | | | | | | | | | This flag to tdb_open/tdb_open_ex effects creation of a new database: 1) Uses the Jenkins lookup3 hash instead of the old gdbm hash if none is specified, 2) Places a non-zero field in header->rwlocks, so older versions of TDB will refuse to open it. This means that the caller (ie Samba) can set this flag to safely change the hash function. Versions of TDB from this one on will either use the correct hash or refuse to open (if a different hash is specified). Older TDB versions will see the nonzero rwlocks field and refuse to open it under any conditions. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
* tdb: automatically identify Jenkins hash tdbsRusty Russell2010-09-271-14/+27
| | | | | | | | | | If the caller to tdb_open_ex() doesn't specify a hash, and tdb_old_hash doesn't match, try tdb_jenkins_hash. This was Metze's idea: it makes life simpler, especially with the upcoming TDB_INCOMPATIBLE_HASH flag. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
* tdb: add Bob Jenkins lookup3 hash as helper hash.Rusty Russell2010-09-277-18/+447
| | | | | | | | | | This is a better hash than the default: shipping it with tdb makes it easy for callers to use it as the hash by passing it to tdb_open_ex(). This version taken from CCAN and modified, which took it from http://www.burtleburtle.net/bob/c/lookup3.c. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
* s3-waf: rework static and shared list handling a little.Günther Deschner2010-09-271-17/+20
| | | | Guenther
* waf: add delimiter argument to TO_LIST.Günther Deschner2010-09-271-2/+2
| | | | Guenther
* s3-waf: add missing IDMAP modules.Günther Deschner2010-09-272-1/+18
| | | | Guenther
* s3-waf: rework CLDAP and LIBCLI_LDAP subsystems.Günther Deschner2010-09-272-9/+18
| | | | Guenther
* s3-waf: move gpext subsystem to libgpo/gpext/wscript_build.Günther Deschner2010-09-272-35/+36
| | | | Guenther
* s3-waf: move perfcount subsystem to modules/wscript_build.Günther Deschner2010-09-272-23/+23
| | | | Guenther
* s3-waf: move charset subsystem to modules/wscript_build.Günther Deschner2010-09-272-41/+43
| | | | Guenther
* s3-waf: move idmap subsystem to winbindd/wscript_build.Günther Deschner2010-09-272-77/+77
| | | | Guenther
* s3-waf: move pdb subsystem to pdb/wscript_build.Günther Deschner2010-09-272-50/+51
| | | | Guenther
* s3-waf: move auth subsystem to auth/wscript_build.Günther Deschner2010-09-272-83/+85
| | | | Guenther
* s3-waf: support --with-acl-support, at least for posix acls.Günther Deschner2010-09-272-22/+55
| | | | Guenther
* s3-waf: move VFS subsystem to modules/wscript_build.Günther Deschner2010-09-272-389/+403
| | | | Guenther
* s3-waf: add some module specific functions for s3 waf build.Günther Deschner2010-09-272-0/+23
| | | | | | Thanks to Kai. Guenther
* s3-waf: convert VFS into a subsystem.Günther Deschner2010-09-271-0/+340
| | | | Guenther
* s3-waf: convert GPEXT into a subsystem.Günther Deschner2010-09-271-0/+27
| | | | Guenther
* s3-waf: convert PERFCOUNT into a subsystem.Günther Deschner2010-09-271-0/+20
| | | | Guenther
* s3-waf: convert CHARSET into a subsystem.Günther Deschner2010-09-271-0/+34
| | | | Guenther
* s3-waf: convert IDMAP into subsystem.Günther Deschner2010-09-271-0/+55
| | | | Guenther
* s3-waf: convert PDB into subsystem.Günther Deschner2010-09-271-0/+41
| | | | Guenther
* s3-waf: convert AUTH into subsystem.Günther Deschner2010-09-271-0/+59
| | | | Guenther
* s4-ldbmodules: Added new module aclread to handle access checks on LDAP searchNadezhda Ivanova2010-09-264-0/+327
| | | | | | | It is currently enabled only if the request comes from the LDAP server, and is disabled by default. Use acl:search=true in smb.conf to enable it. It filters out all objects the user is not allowed to see, and all attributes the user does not have RP on. Extended access not supported yet.
* s4-tests: Added tests for search checks on attributesNadezhda Ivanova2010-09-262-5/+102
| | | | | The ACL reach tests are in the knowfail because aclread module is not enabled by default
* s4-tests: Removed search tests with anonymous credentials as they fail ↵Nadezhda Ivanova2010-09-262-4/+4
| | | | | | againts Windows These tests will fail in make test as well if the acl_read module is enabled.
* s4-dsdb: Added a function to check access on a particular object by its guidNadezhda Ivanova2010-09-261-0/+37
| | | | Similar to dsdb_check_access_on_dn, only it searches by guid.
* s4-dsdb: A helper to determine if an attribute is part of the search filterNadezhda Ivanova2010-09-261-0/+46
|
* s4-dsdb: Moved some helper functions to a separate fileNadezhda Ivanova2010-09-265-222/+260
| | | | We need these to be accessible to the aclread module as well.
* s4-ldap: Added a control to apply the access checks on read via LDAPNadezhda Ivanova2010-09-263-0/+6
|
* autobuild: use killbysubdir if availableAndrew Tridgell2010-09-261-2/+4
| | | | | this will reduce the spurious test output while processes are being killed
* autobuild: exit immediately if no changes from masterAndrew Tridgell2010-09-261-1/+9
| | | | we don't need to test master in autobuild
* s3-waf: convert LIBGPO into a subsystem.Günther Deschner2010-09-261-2/+5
| | | | Guenther
* s3-waf: convert PLAINTEXT_AUTH, SLCACHE and DCUTIL into subsystems.Günther Deschner2010-09-261-11/+19
| | | | Guenther
* s3-vfs: fix the build of nfs4_acls.cGünther Deschner2010-09-261-1/+2
| | | | Guenther
* s3-waf: Link smbd against RPCECHO.Andreas Schneider2010-09-261-1/+1
|
* s3: Remove talloc_autofree_context() from nametouid()Volker Lendecke2010-09-261-1/+1
| | | | pass is freed a few lines down
* s3: Remove talloc_autofree_context() from guest_user_info()Volker Lendecke2010-09-261-1/+2
| | | | pwd is freed a few lines down
* s3: Remove talloc_autofree_context() from getpwnam_alloc()Volker Lendecke2010-09-261-1/+1
| | | | This is given to the memcache a few lines down
* s3: Remove talloc_autofree_context() from notify_internal_parent_init()Volker Lendecke2010-09-263-6/+5
|
* Fix bug #7698 - Assert causes smbd to panic on invalid NetBIOS session request.Jeremy Allison2010-09-266-57/+134
| | | | | | | | | | | | | | Found by the CodeNomicon test suites at the SNIA plugfest. http://www.codenomicon.com/ If an invalid NetBIOS session request is received the code in name_len() in libsmb/nmblib.c can hit an assert. Re-write name_len() and name_extract() to use "buf/len" pairs and always limit reads. Jeremy.
* s4:schannel: handle move flag combinations in the serverStefan Metzmacher2010-09-261-13/+23
| | | | | | This fixes some testsuites in the CIFS plugfest. metze
* s4-auth: fixed the SID list for DCs in the PACAndrew Tridgell2010-09-264-29/+16
| | | | | | | | | | | the S-1-5-9 SID is added in the PAC by the KDC, not on the server that receives the PAC Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Stefan Metzmacher <metze@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Sun Sep 26 07:09:08 UTC 2010 on sn-devel-104
* autobuild: fixed detection of master changesAndrew Tridgell2010-09-261-3/+4
|
* s3-selftest: added samba3.posix_s3.rap.printing as a knownfailAndrew Tridgell2010-09-261-0/+1
| | | | | this fails intermittently on sn-devel, Günther suggests adding this to knownfail for now
* idl-pac: add a decoder for the pac info ctrAndrew Tridgell2010-09-261-0/+4
| | | | | Pair-Programmed-With: Stefan Metzmacher <metze@samba.org> Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: use the system sam_ctx for updaterefsAndrew Tridgell2010-09-261-8/+9
| | | | this is needed for RODC clients calling updaterefs