summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
| * s3-docs: fix eventlogadm manpage typo.Günther Deschner2010-01-071-1/+1
| | | | | | | | Guenther
| * s3: Lock down some srvsvc calls according to what w2k3 seems to doVolker Lendecke2010-01-071-0/+21
| |
| * s3:auth:check_sam_security: improve calling and logging of ↵Michael Adam2010-01-071-4/+16
| | | | | | | | | | | | | | | | | | pdb_update_sam_account Log what went wrongl, and also call pdb_update_sam_account inside become_root/unbecome_root: do the logging outside. Michael
| * s3:auth:check_sam_security: fix a leading tab/ws mixupMichael Adam2010-01-071-1/+1
| | | | | | | | Michael
| * s3:auth:check_sam_security: create (and use) a common exit pointMichael Adam2010-01-071-11/+7
| | | | | | | | | | | | for use after sam_password_ok() has been called. Michael
| * s3:auth:check_sam_security: null out sampass after it has been stolen.Michael Adam2010-01-071-0/+1
| | | | | | | | | | | | | | | | So that a later talloc_free would not harm. I could have used talloc_move instead of talloc steal in make_server_info_sam(), but this would have required a change of the signature. Michael
| * s3:auth:sam_password_ok: take username, acct_ctrl and nt/lm hashes, not sampassMichael Adam2010-01-071-14/+20
| | | | | | | | | | | | | | | | This is in preparation to extending check_sam_security to also check against the password history before updating the bad password count. This way, sam_password_ok can more easily be reused for that purpose. Michael
| * s3:auth: use data_blob_null instead of data_blob(NULL, 0) in sam_password_ok()Michael Adam2010-01-071-2/+2
| | | | | | | | | | | | | | This way it is more explicit that there is no allocated data here that may leak. Michael
| * s3:auth:sam_password_ok: fix allocation of a data blob.Michael Adam2010-01-071-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | data_blob(mem_ctx, 16) does not use mem_ctx as a talloc ctx but copies 16 bytes from mem_ctx into the newly allocated data blob. This can not have been intentional. A blank uint8_t array of length 16 is allocated by passing NULL instead of mem_ctx. And using data_blob_talloc(mem_ctx, NULL, 16) adds the allocated blank 16 byte array to mem_ctx - so this is what must have been intended. Michael
| * s3:auth:sam_password_ok: enhance readability (imho) by adding some pointersMichael Adam2010-01-071-17/+24
| | | | | | | | | | | | and removing bool variables and several checks. Michael
| * s3:check_sam_security: untangle assignment from statementMichael Adam2010-01-071-1/+2
| | | | | | | | Michael
| * s3: Factor password_in_history() out of check_passwd_history()Volker Lendecke2010-01-072-25/+44
| |
| * Simplify E_md5hash a bitVolker Lendecke2010-01-071-6/+2
| |
| * s3: Simplify pdb_set_plaintext_passwd: pwhistory==NULL can not happen anymoreVolker Lendecke2010-01-071-24/+19
| |
| * s3: Simplify pdb_set_plaintext_passwd: pwHistLen==0 was checked aboveVolker Lendecke2010-01-071-2/+4
| |
| * s3: Add a paranoia check to pdb_set_plaintext_passwd()Volker Lendecke2010-01-071-0/+5
| |
| * s3: Simplify pdb_set_plaintext_passwd() by removing a redundant conditionVolker Lendecke2010-01-071-22/+11
| | | | | | | | | | | | | | | | | | if (current_history_len != pwHistLen) { if (current_history_len < pwHistLen) { } } The second "if" is a bit pointless here
| * s3: Simplify pdb_set_plaintext_passwd: memcpy deals fine with 0 bytesVolker Lendecke2010-01-071-5/+2
| |
| * s3: Simplify pdb_set_plaintext_passwd by using talloc_zero_arrayVolker Lendecke2010-01-071-5/+2
| |
| * s3: Make use of talloc_array in pdb_set_plaintext_passwd()Volker Lendecke2010-01-071-2/+3
| |
| * s3: Simplify pdb_set_plaintext_passwd() a bitVolker Lendecke2010-01-071-66/+63
| | | | | | | | | | | | | | | | | | | | Remove an indentation by the early return in + if (pwHistLen == 0) { + /* Set the history length to zero. */ + pdb_set_pw_history(sampass, NULL, 0, PDB_CHANGED); + return true; + }
| * s3: Simplify pdb_set_plaintext_passwd() slightlyVolker Lendecke2010-01-071-56/+83
| | | | | | | | | | | | | | | | | | | | | | | | | | | | No functional change, this just removes an indentation level by the early "return True;" in + if ((pdb_get_acct_ctrl(sampass) & ACB_NORMAL) == 0) { + /* + * No password history for non-user accounts + */ + return true; + } Volker
| * s3: Fix a typoVolker Lendecke2010-01-071-1/+1
| |
| * s3: Avoid a memset(, 0, ) callVolker Lendecke2010-01-071-2/+1
| |
| * s3:pdb_set_pw_history: free the old history before setting the new.Michael Adam2010-01-071-0/+1
| | | | | | | | | | | | | | | | This is not strictly necessary, since this only leaks into the struct samu, and this is not so long-lived in the code path that changes the password, but it definitely correct and does not harm. Michael
| * s3:pdb_ldap:init_sam_from_ldap: untangle an assignment from the checkMichael Adam2010-01-071-3/+3
| | | | | | | | | | | | to enhance readability and denbuggability. Michael
* | Merge branch 'master' of git://git.samba.org/sambaNadezhda Ivanova2010-01-0733-1699/+2299
|\|
| * s4/torture: fix small bug in lock testSteven Danneman2010-01-061-0/+1
| | | | | | | | Cleanup path should unlock, not cancel existing locked range.
| * s4/torture: add more lock cancellation testsSteven Danneman2010-01-061-2/+95
| | | | | | | | | | * Test the SMB1 behavior when multiple lock ranges are requested, pend, and then are cancelled. The entire LockingAndX request fails.
| * s3:lib/time: remove TIME_T_MIN/MAX definesBjörn Jacke2010-01-071-8/+0
| | | | | | | | we already get them from lib/util/time.h
| * lib/util: move TIME_T_MIN/MAX defines into header fileBjörn Jacke2010-01-072-14/+14
| |
| * ѕ3:lib/time: replace make_dos_ and put_dos_ functions with those from lib/util/Björn Jacke2010-01-071-89/+6
| |
| * s3:lib/time: remoce null_mtime() - use null_time()Björn Jacke2010-01-072-14/+2
| |
| * s3:lib/time: remove unused nt_time_equalsBjörn Jacke2010-01-072-9/+0
| | | | | | | | we have nt_time_equal doing the same in lib/util/
| * Second part of the fix for bug #7020 - smbd using 2G memory.Jeremy Allison2010-01-061-0/+7
| | | | | | | | | | | | | | | | There was a second leak in the processing of the out_data.frag prs_struct. It needs freeing once the current pdu has been returned asynchronously. Jeremy.
| * s4-smbtorture: add test_ChangeID to RPC-SPOOLSS.Günther Deschner2010-01-061-0/+179
| | | | | | | | | | | | | | This tests ChangeID consistency between spoolss_GetPrinterData, spoolss_GetPrinterDataEx and spoolss_GetPrinter (level 0). Guenther
| * s4-smbtorture: add test_SetPrinter to RPC-SPOOLSS.Günther Deschner2010-01-061-0/+26
| | | | | | | | Guenther
| * s4-smbtorture: refactor test_GetPrinter in RPC-SPOOLSS.Günther Deschner2010-01-061-28/+50
| | | | | | | | Guenther
| * ѕ3:configure: use gettimeofday check from lib/util/Björn Jacke2010-01-061-9/+1
| |
| * vfs_commit: print warning when no fsync support is thereBjörn Jacke2010-01-061-0/+2
| | | | | | | | this one was part of an old patch from jpeach.
| * tdb: fix standalone 'make installdocs'Stefan Metzmacher2010-01-062-3/+4
| | | | | | | | metze
| * tdb: create symbol links to shared libraries see ↵Brian Lu2010-01-061-0/+4
| | | | | | | | | | | | https://bugzilla.samba.org/show_bug.cgi?id=6991 for details Signed-off-by: Stefan Metzmacher <metze@samba.org>
| * talloc: create symbol links to shared libraries see ↵Brian Lu2010-01-061-0/+5
| | | | | | | | | | | | https://bugzilla.samba.org/show_bug.cgi?id=6991 for details Signed-off-by: Stefan Metzmacher <metze@samba.org>
| * tevent: create symbol links to shared libraries see ↵Brian Lu2010-01-061-0/+4
| | | | | | | | | | | | https://bugzilla.samba.org/show_bug.cgi?id=6991 for details Signed-off-by: Stefan Metzmacher <metze@samba.org>
| * s4: Fix result check for getaddrinfo()Kamen Mazdrashki2010-01-061-6/+11
| | | | | | | | | | | | | | | | | | I think this completes commit 50feca550eed7828198b7c0fc5f0e5ddc863313d. Now result should be handled correctly both for systems that support EAI_NODATA but returns EAI_NONAME (as my Ubuntu 9.x) and systems that doesn't support EAI_NODATA at all. Signed-off-by: Stefan Metzmacher <metze@samba.org>
| * Fix bug #7020 - smbd using 2G memory.Jeremy Allison2010-01-051-0/+10
| | | | | | | | | | | | | | | | When deferring an async pipe writeX and readX transfer the outstanding request struct onto the conn struct. This needs freeing after the packet is finally processed. Jeremy.
| * s4:SAMLDB LDB module - Fix trailing whitespacesMatthias Dieter Wallnöfer2010-01-051-17/+17
| |
| * s4:SAMLDB LDB module - Rework to allow checks for wrong ↵Matthias Dieter Wallnöfer2010-01-051-50/+96
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | "defaultObjectCategory" attributes This allows a stricter check for "defaultObjectCategory" attributes which is performed when the "relax" control isn't specified. Additional note: As the added comment points out this isn't complete. And I personally think that moving this at some point to the "objectclass" module is a better idea to make this fully work (since there we have direct access to the schema). If someone has a good idea how to do this please inform me. Anyway, the SAMLDB module does require some restructure since at the moment it's very overloaded and therefore a bit a mess. In the meantime I started to work on a new approach to realise it in a better way.
| * s4:schema_load.c - TypoMatthias Dieter Wallnöfer2010-01-051-1/+1
| |
| * s4:ldap_schema.py - add an additional check for validity of ↵Matthias Dieter Wallnöfer2010-01-051-0/+25
| | | | | | | | "defaultObjectCategory"
generated by cgit (git 2.34.1) at 2025-09-28 00:15:39 +0000