summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* spoolss: use ndr_push_spoolss_PrinterInfo2 hand-marshalled version (moves ↵Günther Deschner2010-02-184-239/+239
| | | | | | devmode relative pointer down to sd). Guenther
* spoolss: add spoolss_security_descriptor.Günther Deschner2010-02-185-52/+115
| | | | Guenther
* s3: re-run make samba3-idl.Günther Deschner2010-02-185-1263/+1627
| | | | Guenther
* security: make two bitmaps public.Günther Deschner2010-02-181-2/+2
| | | | Guenther
* spoolss: make two bitmaps public.Günther Deschner2010-02-181-2/+2
| | | | Guenther
* spoolss: make all security descriptors and devicemodes 4 byte aligned and ↵Stefan Metzmacher2010-02-181-8/+8
| | | | | | add missing subcontexts. Guenther
* spoolss: set NDR_RELATIVE_REVERSE flag for various unions that have relative ↵Günther Deschner2010-02-181-10/+10
| | | | | | pointers. Guenther
* ndr_spoolss_buf: use LIBNDR_FLAG_NO_NDR_SIZE in NDR_SPOOLSS_SIZE_*Stefan Metzmacher2010-02-181-2/+2
| | | | metze
* spoolss: use subcontext in NDR_SPOOLSS_PUSH_ENUM_OUT macro.Stefan Metzmacher2010-02-181-1/+4
| | | | metze
* libndr: fix ndr_size_* calculation with relative reverse buffersStefan Metzmacher2010-02-181-0/+6
| | | | metze
* libndr: for now align reverse relative pointers to 2 bytes by default.Stefan Metzmacher2010-02-181-0/+3
| | | | | | | This is just a hack and we should let the callers use FLAG_ALIGN2 explicit in future. metze
* libndr: implement LIBNDR_RELATIVE_REVERSE handlingStefan Metzmacher2010-02-182-3/+87
| | | | | | This is based on Guenther's initial code. metze
* libndr: store a subcontext buffer size in ndr_push_subcontext_start.Günther Deschner2010-02-182-0/+2
| | | | Guenther
* libndr: give an error when ndr_push_relative_ptr2_start()/_end() is used ↵Stefan Metzmacher2010-02-181-1/+6
| | | | | | with the RELATIVE_REVERSE flag metze
* libndr: add LIBNDR_FLAG_NO_RELATIVE_REVERSE so that relative reverse processingGünther Deschner2010-02-183-0/+7
| | | | | | can be disabled for single structure elements. Guenther
* libndr: add LIBNDR_FLAG_RELATIVE_REVERSE flag.Günther Deschner2010-02-182-0/+4
| | | | Guenther
* libndr: change subcontext buffer allocation to allocate on subcontext_start.Günther Deschner2010-02-181-3/+7
| | | | Guenther
* librpc/ndr: make ndr_push_relative_ptr2() staticStefan Metzmacher2010-02-182-2/+1
| | | | metze
* librpc/ndr_krb5pac: use ndr_push_relative_ptr2_start()/_end()Stefan Metzmacher2010-02-181-1/+2
| | | | metze
* librpc/ndr_drsblobs: use ndr_push_relative_ptr2_start()/_end()Stefan Metzmacher2010-02-181-2/+4
| | | | metze
* spoolss: fix relative pointers in ndr_push_spoolss_DriverInfo101.Günther Deschner2010-02-181-10/+20
| | | | Guenther
* s3: re-run make full_idl.Günther Deschner2010-02-186-172/+344
| | | | Guenther
* pidl: use ndr_push_relative_ptr2_start and ndr_push_relative_ptr2_end.Günther Deschner2010-02-181-1/+5
| | | | Guenther
* libndr: add ndr_push_relative_ptr2_start and ndr_push_relative_ptr2_end.Günther Deschner2010-02-182-0/+26
| | | | Guenther
* s3-docs: Remove trailing whitespaces and fix a typo.Karolin Seeger2010-02-181-3/+3
| | | | Karolin
* s3:docs: add some advice for usage of strict allocateBjörn Jacke2010-02-181-6/+18
|
* s3-spoolss: Fix _spoolss_EnumPrinters servername handling.Günther Deschner2010-02-181-1/+1
| | | | Guenther
* s3-selftest: fix return code for modprinter.pl -a.Günther Deschner2010-02-181-1/+2
| | | | | | | | | | | Background is: the SetPrinter level 2 calls "addprinter command" an fails if a share already existed (and the addprinter command returned a non-0 return code). Removing the non-0 return code is fine, as in AddPrinter{Ex}, we have checks to see if a share already exists before calling out the addprinter command. Maybe one day, we need to have a "changeprinter command"... Guenther
* tsocket/bsd: fix comment in tdgram_bsd_recvfrom_handler()Stefan Metzmacher2010-02-181-2/+4
| | | | metze
* Revert "Got back to 16-byte padding on auth RPC. S3 clients and servers now ↵Jeremy Allison2010-02-171-6/+4
| | | | | | | | | | | cope with this. Jeremy" This reverts commit 38c50c7027d2a2a9a3df060b74b2a2efce4d9e6f. As tridge requested, we need this to work with older S3 servers, not just for smbtorture4. Jeremy.
* s3-selftest: finally enable RPC-SPOOLSS-PRINTER against Samba 3.Günther Deschner2010-02-181-1/+2
| | | | Guenther
* s3-selftest: include addprinter/deleteprinter command.Günther Deschner2010-02-183-0/+136
| | | | Guenther
* s3-spoolss: fix return code of spoolss_DeletePrinter.Günther Deschner2010-02-181-1/+1
| | | | | | | | When the printer has been removed by the "deleteprinter command", we need to check if it is still there and then fail, not fail if we successfully removed it (found by RPC-SPOOLSS-PRINTER). Guenther
* s3-spoolss: in spoolss_EnumPrinters r->in.server is a *unique* pointer!Günther Deschner2010-02-181-3/+5
| | | | Guenther
* s3-spoolss: more AddPrinter{Ex} checks.Günther Deschner2010-02-181-0/+18
| | | | | | | | | Windows will allow to add a non-shared printer that is returned by EnumPrinters. Samba has no notion of non-shared local printers yet, so just make sure to behave like we do elsewhere: a printer autoloaded by samba or added to samba is shared. Guenther
* s3-spoolss: add some printer info validation for AddPrinter calls.Günther Deschner2010-02-181-0/+22
| | | | Guenther
* testprogs: print SDDL string of printer security descriptorsGünther Deschner2010-02-181-1/+11
|
* s3-modules: fix get_acl_blob in the acl_tdb VFS module.Günther Deschner2010-02-181-1/+1
| | | | | | Shuttle-reviewed by jra :) Guenther
* s4-smbtorture: skip printer info cross tests against samba 3 for now.Günther Deschner2010-02-181-0/+4
| | | | | | Not even w2k8r2 passes them atm. Guenther
* s4-smbtorture: try more combinations to find printers in ↵Günther Deschner2010-02-181-0/+14
| | | | | | | | | test_EnumPrinters_findname(). Also take a note of servers returning full UNC printer paths although we did not set the servername. Guenther
* s4-smbtorture: simplify test_PrinterInfo_DevMode a bit.Günther Deschner2010-02-181-17/+4
| | | | Guenther
* s4-smbtorture: avoid potential loop while adding a new printer in ↵Günther Deschner2010-02-181-0/+7
| | | | | | RPC-SPOOLSS-PRINTER. Guenther
* s3-rpcclient: fix uninitialized variable in wkssvc_enumerateusers.Günther Deschner2010-02-181-2/+2
| | | | Guenther
* Got back to 16-byte padding on auth RPC. S3 clients and servers now cope ↵Jeremy Allison2010-02-171-4/+6
| | | | with this. Jeremy
* s4:param Modify secrets_get_domain_sid to give more useful errorsAndrew Bartlett2010-02-185-87/+55
| | | | | | | | | This also moves the calls to secrets_get_domain_sid back into winbind_task_init(), so that we can terminate with a much more detailed error message. (The previous message was simply NT_STATUS_CANT_ACCESS_DOMAIN_INFO). Andrew Bartlett
* Fix bug #7146 - Samba miss-parses authenticated RPC packets.Jeremy Allison2010-02-174-138/+363
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Parts of the Samba RPC client and server code misinterpret authenticated packets. DCE authenticated packets actually look like this : +--------------------------+ |header | | ... frag_len (packet len)| | ... auth_len | +--------------------------+ | | | Data payload | ... .... | | +--------------------------+ | | | auth_pad_len bytes | +--------------------------+ | | | Auth footer | | auth_pad_len value | +--------------------------+ | | | Auth payload | | (auth_len bytes long) | +--------------------------+ That's right. The pad bytes come *before* the footer specifying how many pad bytes there are. In order to read this you must seek to the end of the packet and subtract the auth_len (in the packet header) and the auth footer length (a known value). The client and server code gets this right (mostly) in 3.0.x -> 3.4.x so long as the pad alignment is on an 8 byte boundary (there are some special cases in the code for this). Tridge discovered there are some (DRS replication) cases where on 64-bit machines where the pad alignment is on a 16-byte boundary. This breaks the existing S3 hand-optimized rpc code. This patch removes all the special cases in client and server code, and allows the pad alignment for generated packets to be specified by changing a constant in include/local.h (this doesn't affect received packets, the new code always handles them correctly whatever pad alignment is used). This patch also works correctly with rpcclient using sign+seal from the 3.4.x and 3.3.x builds (testing with 3.0.x and 3.2.x to follow) so even as a server it should still work with older libsmbclient and winbindd code. Jeremy
* Fix bug #6557 - Do not work VFS full_auditJeremy Allison2010-02-171-51/+34
| | | | | | | | | | | Re-arrange the operations order so SMB_VFS_CONNECT is done first as root (to allow modules to correctly initialize themselves). Reviewed modules to check if they needed CONNECT invoked as a user (which we previously did) and it turns out any of them that cared needed root permissions anyway. Jeremy.
* s3: go straight to winbindd_dual_pam_auth() in case of !NT_STATUS_OKLars Müller2010-02-171-1/+1
| | | | | | At the formerly used process_result statement we have alone one NT_STATUS_IS_OK() which never could be hit in our case as we only go here if NT_STATUS_EQUAL is not ok.
* s3: let the pam_winbind po files reference the correct locationLars Müller2010-02-1720-644/+644
|
* Fix commit d07cd37b993d3c9beded20323174633b806196b5Jeremy Allison2010-02-171-1/+4
| | | | | | | | | | | | | Which was: tsocket/bsd: fix bug #7115 FreeBSD includes the UDP header in FIONREAD Metze, this has to have been wrong - you are throwing away the talloc_realloc pointer returned. Also no error checking. Please review. Thank goodness for gcc warnings :-). Jeremy.