summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* docs: Rename manpages-3 -> manpages.Karolin Seeger2012-09-0395-75/+75
| | | | | | | | | | This change was suggested by Andrew Bartlett on the samba-technical mailing list. Karolin Autobuild-User(master): Karolin Seeger <kseeger@samba.org> Autobuild-Date(master): Mon Sep 3 23:35:38 CEST 2012 on sn-devel-104
* s4-docs: Remove empty s4 HOWTO Collection.Karolin Seeger2012-09-0322-490/+0
| | | | | | This change was proposed by Andrew Bartlett on the samba-technical mailing list. Karolin
* build: skip shipping the alpha13 provision in the release tarballsAndrew Bartlett2012-09-031-1/+1
| | | | | | | | | | This test is important, but it is not important enough to include this volume of data in every tarball. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Mon Sep 3 13:01:58 CEST 2012 on sn-devel-104
* s4-classicupgrade: Show more clearly what is wrong with the Adminstrator SIDAndrew Bartlett2012-09-031-0/+1
|
* build: Only make bin/ if it does not existAndrew Bartlett2012-09-031-1/+2
|
* selftest: skip tests if the tarball did not include the alpha13 provisionAndrew Bartlett2012-09-031-6/+28
|
* waf: add new quota header checks and sysquota_4B source fileBjörn Jacke2012-09-022-1/+3
| | | | | Autobuild-User(master): Björn Jacke <bj@sernet.de> Autobuild-Date(master): Sun Sep 2 23:21:22 CEST 2012 on sn-devel-104
* s3: remove some duplicate quota codeBjörn Jacke2012-09-021-27/+12
|
* s3: adopt the new sysquotas_4B support for BSDBjörn Jacke2012-09-022-3/+28
| | | | | most BSD systems have ufs/ufs/quota.h and they count the quota in blocks, not bytes and have slightly different dqblk struct members.
* s3: add sysquotas_4B supportBjörn Jacke2012-09-025-4/+227
| | | | | | | | this is from James Peach's darwin patch, that exists since a couple of years already. Autobuild-User(master): Björn Jacke <bj@sernet.de> Autobuild-Date(master): Sun Sep 2 01:00:41 CEST 2012 on sn-devel-104
* s3: Make an if statement a bit easier to readVolker Lendecke2012-09-011-2/+3
| | | | | | | | | Fix indentation a bit Signed-off-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Sat Sep 1 07:07:12 CEST 2012 on sn-devel-104
* Now SEC_RIGHTS_PRIV_RESTORE and SEC_RIGHTS_PRIV_BACKUP don't include any ↵Jeremy Allison2012-08-312-4/+28
| | | | | | generic bits (they're used directly in the fileserver where the generic bits have already been mapped into file specific bits) we need to add the generic bits to the test when we have these privileges. Mark samba4.base.maximum_allowed knownfail until we implement NTCREATEX_OPTIONS_BACKUP_INTENT.
* Rewrite torture_samba3_rpc_sharesec() to use a non-privileged user for share ↵Jeremy Allison2012-08-312-15/+182
| | | | security descriptor testing.
* Add a comment showing where to set log level in tests.Jeremy Allison2012-08-311-0/+3
|
* Change the S3 fileserver over to se_file_access_check().Jeremy Allison2012-08-312-7/+10
| | | | | Don't set the priv_open_requested yet until the open-for-backup request is correctly passed in.
* Factor out privilege checking code into se_file_access_check() which takes a ↵Jeremy Allison2012-08-312-10/+87
| | | | bool priv_open_requested parameter.
* SEC_RIGHTS_DIR_PRIV_BACKUP and SEC_RIGHTS_DIR_PRIV_RESTORE aren't used ↵Jeremy Allison2012-08-311-8/+7
| | | | | | | | anywhere. Remove (can re-add if needed). Ensure the privilege rights are always specific rights, not generic. By the time the privilege rights are examined, we've already mapped from generic to specific in the access_mask.
* s4-dsdb: Remove unused variablesAndrew Bartlett2012-09-011-3/+0
| | | | | Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Sat Sep 1 05:10:47 CEST 2012 on sn-devel-104
* s4-kdc: Improve grammer and clarity of password change failure messages.Andrew Bartlett2012-09-011-4/+3
| | | | | | | This can still be improved further, but avoid mentioning reasons that clearly do not apply in this case. Andrew Bartlett
* s3: Fix warnings in aio_fork.cVolker Lendecke2012-09-011-2/+4
|
* s3: Remove a shadowing variable declarationVolker Lendecke2012-09-011-2/+0
|
* s4-dsdb: Remove unused tmp_ctx leaked onto long-term ldb_contextAndrew Bartlett2012-09-011-2/+0
| | | | | | | This was found based on a log provided by Ricky Nance <ricky.nance@weaubleau.k12.mo.us>. Thanks Ricky! Andrew Bartlett
* s4 dns: Store TKEYs in a ringbufferKai Blin2012-08-313-57/+106
| | | | | | | This stops us from potentially being DoSed by tons of TKEYs Autobuild-User(master): Kai Blin <kai@samba.org> Autobuild-Date(master): Fri Aug 31 22:46:01 CEST 2012 on sn-devel-104
* tdb: return unpack error on strdup failureDavid Disseldorp2012-08-311-0/+3
| | | | | | | Signed-off-by: Lars Müller <lars@samba.org> Autobuild-User(master): David Disseldorp <ddiss@samba.org> Autobuild-Date(master): Fri Aug 31 21:05:21 CEST 2012 on sn-devel-104
* s3: Fix a few "warning: ISO C90 forbids mixed declarations and code"Volker Lendecke2012-08-311-154/+234
| | | | | Autobuild-User(master): Björn Jacke <bj@sernet.de> Autobuild-Date(master): Fri Aug 31 19:24:47 CEST 2012 on sn-devel-104
* s3:build fix autoconf build on RHEL5Christian Ambach2012-08-311-0/+236
| | | | | | | | RHEL5 only has autoconf 2.59, so autogen.sh still needs to find autoconf-2.60.m4 somewhere, but it was removed with 5f58359 Autobuild-User(master): Christian Ambach <ambi@samba.org> Autobuild-Date(master): Fri Aug 31 12:50:03 CEST 2012 on sn-devel-104
* s3:doc Fix name of timeout parameter in documentationChristof Schmitt2012-08-311-3/+3
| | | | | | The name is time_audit:timeout, not time_audit:audit_timeout. Signed-off-by: Christian Ambach <ambi@samba.org>
* s3:dbwrap_ctdb: Add DB name and key to warning messageChristof Schmitt2012-08-311-1/+8
| | | | | | | When a operation takes too long, it is useful for debugging to know the DB and the key. Signed-off-by: Christian Ambach <ambi@samba.org>
* s4 dns: Negotiate GSSAPI-based TKEYsKai Blin2012-08-314-1/+254
| | | | | Autobuild-User(master): Kai Blin <kai@samba.org> Autobuild-Date(master): Fri Aug 31 10:38:35 CEST 2012 on sn-devel-104
* s4-kdc: Give information on how long the password history isAndrew Bartlett2012-08-311-1/+2
| | | | | Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri Aug 31 08:06:17 CEST 2012 on sn-devel-104
* s4-libnet: Fix memory leak of lsa_RefDomainList and lsa_String onto libnet_ctxAndrew Bartlett2012-08-311-2/+2
| | | | | | | | | | These are only needed for as long as the call, and should be children of the private context. This was found based on a log provided by Ricky Nance <ricky.nance@weaubleau.k12.mo.us>. Thanks Ricky! Andrew Bartlett
* auth/credentials: Do not print passwords in a talloc memory dumpAndrew Bartlett2012-08-311-0/+8
| | | | | | | The fact that a password was created here is enough information, so overwrite with the function name and line. Andrew Bartlett
* VERSION: Move on to beta9Andrew Bartlett2012-08-311-2/+2
| | | | | | | | | | | We home beta8 will be the last beta, but to avoid confusion and allow more releases if required I won't mark it as rc1 until the actual release candidate. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri Aug 31 02:07:23 CEST 2012 on sn-devel-104
* VERSION: Mark as the beta8 releaseAndrew Bartlett2012-08-311-1/+1
|
* WHATSNEW: prepare for 4.0 beta8Andrew Bartlett2012-08-311-35/+30
|
* The NTVFS server doesn't pass the SMB1 INHERITFLAGS test.Jeremy Allison2012-08-301-0/+1
| | | | | Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Thu Aug 30 21:38:02 CEST 2012 on sn-devel-104
* Now ACL inheritance flags are working, add test_inheritance_flags() back ↵Jeremy Allison2012-08-301-5/+10
| | | | into raw.acls to ensure we don't regress.
* With the inheritance ACL changes we now pass samba3.smb2.acls.INHERITFLAGS.Jeremy Allison2012-08-301-1/+0
|
* Fix bug #9124 - Samba fails to set "inherited" bit on inherited ACE's.Jeremy Allison2012-08-301-3/+7
| | | | Change se_create_child_secdesc() to handle inheritance correctly.
* Windows does canonicalization of inheritance bits. Do the same.Jeremy Allison2012-08-301-0/+35
| | | | | | | | | | | | | We need to filter out the SEC_DESC_DACL_AUTO_INHERITED|SEC_DESC_DACL_AUTO_INHERIT_REQ bits. If both are set we store SEC_DESC_DACL_AUTO_INHERITED as this alters whether SEC_ACE_FLAG_INHERITED_ACE is set when an ACE is inherited. Otherwise we zero these bits out. See: http://social.msdn.microsoft.com/Forums/eu/os_fileservices/thread/11f77b68-731e-407d-b1b3-064750716531 for details.
* Change the other two places where we set a security descriptor given by the ↵Jeremy Allison2012-08-302-25/+2
| | | | | | client to got through set_sd(), the canonicalize sd function.
* Re-add set_sd(), called from set_sd_blob(). Allows us to centralize all ACL ↵Jeremy Allison2012-08-302-14/+28
| | | | canonicalization.
* Rename set_sd() to set_sd_blob() - this describes what it does.Jeremy Allison2012-08-303-6/+6
|
* s3:libsmb correctly set isFsctl for snapshot listChristian Ambach2012-08-301-1/+1
| | | | | | | | | FSCTL_GET_SHADOW_COPY_DATA is a FSCTL, so set the isFsctl marker otherwise smbclient allinfo will not report snapshots any more with the changes made for Bug #8311 Autobuild-User(master): Christian Ambach <ambi@samba.org> Autobuild-Date(master): Thu Aug 30 18:57:24 CEST 2012 on sn-devel-104
* selftest: Remove spoolss tests from knownfail.Andreas Schneider2012-08-301-66/+0
| | | | | Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Thu Aug 30 17:17:55 CEST 2012 on sn-devel-104
* selftest: Add missing printing options for plugin_s4_dc.Andreas Schneider2012-08-301-0/+24
|
* file_server: Fix spoolss support with s3fs.Andreas Schneider2012-08-301-1/+1
|
* selftest: Define the log directory for s3fs.Andreas Schneider2012-08-301-0/+3
|
* auth/credentials: Support match-by-key in cli_credentials_get_server_gss_creds()Andrew Bartlett2012-08-303-3/+10
| | | | | | | | | | | | | This allows a password alone to be used to accept kerberos tickets. Of course, we need to have got the salt right, but we do not need also the correct kvno. This allows gensec_gssapi to accept tickets based on a secrets.tdb entry. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Thu Aug 30 01:26:12 CEST 2012 on sn-devel-104
* s4-torture: Add start of a test to confirm winbindd PAC parsingAndrew Bartlett2012-08-293-2/+157
| | | | | | | So far this confirms that we can accept a ticket using the secrets.tdb entry. Andrew Bartlett