summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Revert "s3:build: for now do not require ↵Stefan Metzmacher2012-01-252-10/+9
| | | | | | | | | | | | | | gsskrb5_extract_authz_data_from_sec_context" This reverts commit 74abe369df26c58094a601dd6ff8c27c3d0b2b2a. Having gsskrb5_extract_authz_data_from_sec_context as symbol in the library is in indicator that gss_inquire_sec_context_by_oid() would work. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jan 25 05:26:14 CET 2012 on sn-devel-104
* Revert "build: Add -lz to wbinfo to fix build on some hosts"Stefan Metzmacher2012-01-251-1/+1
| | | | | | | | | This reverts commit 88daf798fec56a99e5eb3aed67f3b58572d97d34. This is not needed as 5c88cfcc525290d0ad1c322401685c60c1abdf10 is the better fix, see https://bugzilla.samba.org/show_bug.cgi?id=8711 metze
* s3: improve the code in the AES encryption.Matthieu Patou2012-01-251-8/+8
| | | | | | | | | Remove looping replace them by memcpy. Fix bug #8674 (Buffer overflow in vfs_smb_traffic_analyzer). Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Jan 25 03:12:14 CET 2012 on sn-devel-104
* s3: Fix bug #8674.Jeremy Allison2012-01-251-2/+1
| | | | Buffer overflow issue with AES encryption in samba traffic analyzer.
* s4-torture: For authenticated users, add AUTHENTICATED USERS sidAmitay Isaacs2012-01-251-0/+4
| | | | | Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Wed Jan 25 01:36:02 CET 2012 on sn-devel-104
* dlz_bind9: for authenticated user, set the AUTHENTICATED USERS sid in tokenAmitay Isaacs2012-01-251-0/+5
|
* s3: Remove a typedefVolker Lendecke2012-01-241-3/+3
| | | | | | | | We have it in README.Coding to avoid typedef for structs, but I think it also applies to enums. Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Jan 24 22:45:50 CET 2012 on sn-devel-104
* s3: Remove a typedefVolker Lendecke2012-01-241-3/+3
|
* s3: Add debug when a message is registeredVolker Lendecke2012-01-241-0/+4
| | | | | | | We've always had the corresponding deregister message Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Jan 24 15:27:51 CET 2012 on sn-devel-104
* s3:registry: do not write empty value lists to registry.tdbGregor Beck2012-01-241-0/+5
| | | | | | | Signed-off-by: Michael Adam <obnox@samba.org> Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Tue Jan 24 13:54:09 CET 2012 on sn-devel-104
* selftest: Add test for smbpasswd against pdb_samba4Andrew Bartlett2012-01-241-4/+41
| | | | | Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Jan 24 11:05:09 CET 2012 on sn-devel-104
* s3-passdb: Fix pdb_samba4 setting of plaintext passwordsAndrew Bartlett2012-01-241-1/+9
| | | | | | | | We were setting a UTF8 password into the UTF16 clearTextPassword. Converting from CH_UNIX to CH_UTF16 should fix this. Andrew Bartlett
* s3-passdb: Use DSDB_PASSWORD_BYPASS_LAST_SET flags in pdb_samba4Andrew Bartlett2012-01-241-9/+9
|
* dsdb: Allow DSDB_CONTROL_PASSWORD_BYPASS_LAST_SET_OID to be specified as a flagAndrew Bartlett2012-01-242-0/+8
|
* python: Change except: statement to except Exception:Amitay Isaacs2012-01-249-15/+15
| | | | | | | | This way we only catch true exceptions and keyboard interrupts are not caught here. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Tue Jan 24 03:32:40 CET 2012 on sn-devel-104
* autobuild.py: Catch only true exceptions in except statementAmitay Isaacs2012-01-241-3/+3
| | | | | | sys.exit(0) raises systemExit which is caught in empty except: statement. This can change the exit status if except: condition is supposed to exit with different status value.
* Another fix for bug #8556 - ACL permissions ignored when SMBsetatr is requested.Jeremy Allison2012-01-241-5/+0
| | | | | | | | | Remove erroneous check on FILE_WRITE_ATTRIBUTES when changing POSIX permissions - this isn't an attribute set call (unless you're storing attributes in POSIX permissions, which is not recommended). Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Tue Jan 24 00:44:24 CET 2012 on sn-devel-104
* Another fix for bug #8556 - ACL permissions ignored when SMBsetatr is requested.Richard Sharpe2012-01-231-0/+1
| | | | | Prevent systems with "store dos attributes = yes" from overriding FILE_WRITE_ATTRIBUITES.
* lib: use differing NTSTATUS and WERROR struct membersDavid Disseldorp2012-01-231-2/+2
| | | | | | | | | | | This allows the compiler to catch uses of incorrectly typed arguments for [NT_STATUS|W_ERROR]_IS_OK() and [NT_STATUS|W_ERROR]_EQUAL(). I.e. WERROR werr; werr = my_fn(); /* XXX returns WERROR type */ if (NT_STATUS_EQUAL(werr, NT_STATUS_OBJECT_NAME_COLLISION)) {
* WERROR type variable being incorrectly checked with a NT_STATUS_IS_XDavid Disseldorp2012-01-233-3/+3
| | | | type macro.
* s3-spoolss: fix incorrect error check typeDavid Disseldorp2012-01-221-1/+1
| | | | | | | NT_STATUS_IS_OK used to check WERROR type. Autobuild-User: David Disseldorp <ddiss@samba.org> Autobuild-Date: Sun Jan 22 05:03:36 CET 2012 on sn-devel-104
* Log short_princ instead of uninitialised filter.Michael Wood2012-01-211-5/+6
| | | | | Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Sat Jan 21 13:06:35 CET 2012 on sn-devel-104
* param: handle P_BYTES in more placesAndrew Bartlett2012-01-212-0/+3
|
* script/autobuild.py: cleanup on rebase failureStefan Metzmacher2012-01-211-0/+2
| | | | | | | | | We can improve this to generate logs.tar.gz later... metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sat Jan 21 11:29:58 CET 2012 on sn-devel-104
* s3-libsmb: Always allow SMB_TRANS_ENC_GSS to be definedAndrew Bartlett2012-01-211-4/+2
| | | | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sat Jan 21 01:28:54 CET 2012 on sn-devel-104
* s3-libsmb: Remove unused smb_tran_enc_state_gss and gssapi headersAndrew Bartlett2012-01-201-15/+0
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-libsmb: use struct gensec_security directlyAndrew Bartlett2012-01-204-20/+18
| | | | | | | | This is rather than via a now one-element union. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-libcli Change krb5 smb sealing to call via gensec and gensec_gseAndrew Bartlett2012-01-205-487/+86
| | | | | | | | | This also fixes the support for smb sealing with krb5 in make test, as this now relies on secrets.tdb rather than /etc/krb5.keytab. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4:auth/gensec: make sure GSS_C_CONF_FLAG implies GSS_C_INTEG_FLAGStefan Metzmacher2012-01-201-0/+1
| | | | metze
* s3-gse: make sure GSS_C_CONF_FLAG implies GSS_C_INTEG_FLAGStefan Metzmacher2012-01-201-0/+6
| | | | metze
* s3-gse: implement fill_mem_keytab_from_[system|dedicated]_keytabStefan Metzmacher2012-01-201-6/+234
| | | | metze
* s3-gse: create memory keytab in gse_krb5_get_server_keytab()Stefan Metzmacher2012-01-201-27/+25
| | | | | | The other functions just add entries to it. metze
* s3-gse: fix SECRETS_AND_KEYTAB fallback in gse_krb5_get_server_keytab()Stefan Metzmacher2012-01-201-6/+13
| | | | metze
* s3:kerberos_verify: ads_dedicated_keytab_verify_ticket() only needs read accessStefan Metzmacher2012-01-201-1/+1
| | | | metze
* s3:smbd/proto.h: remove unused do_map_to_guest() prototypeStefan Metzmacher2012-01-201-4/+0
| | | | metze
* build: Add -lz to wbinfo to fix build on some hostsAndrew Bartlett2012-01-201-1/+1
| | | | | | | | | This is required after the rework of the object lists for gensec_gse Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri Jan 20 23:33:14 CET 2012 on sn-devel-104
* s3: Fix the build on FreeBSD8Volker Lendecke2012-01-201-5/+6
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Fri Jan 20 21:58:04 CET 2012 on sn-devel-104
* s3:configure.in: move gss_wrap_iov check to the other function checksStefan Metzmacher2012-01-201-1/+1
| | | | | | | | | | This also makes sure we search for it if it's in -lgssapi instead of -lgssapi_krb5 or -lgss. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Jan 20 20:23:13 CET 2012 on sn-devel-104
* s3:configure.in: require gssapi for ads supportStefan Metzmacher2012-01-201-0/+1
| | | | | | This matches the waf checks. metze
* s3:configure.in: move krb5_set_real_time check to other function checksStefan Metzmacher2012-01-201-2/+1
| | | | metze
* s3:build: for now do not require gsskrb5_extract_authz_data_from_sec_contextStefan Metzmacher2012-01-202-9/+10
| | | | | | We do not use it yet. metze
* s3:configure.in: fix the shell logic in krb5 checksStefan Metzmacher2012-01-201-1/+1
| | | | metze
* torture: add spoolss overlapping driver deletion testsDavid Disseldorp2012-01-201-1/+118
| | | | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Autobuild-User: David Disseldorp <ddiss@samba.org> Autobuild-Date: Fri Jan 20 18:20:14 CET 2012 on sn-devel-104
* s3-spoolss: fix printer_driver_files_in_use() call orderingDavid Disseldorp2012-01-201-8/+10
| | | | | | | | | | | | | | printer_driver_files_in_use() performs two tasks: it returns whether any of the files in the to-be-deleted driver overlap with other drivers, it also trims such files from the info structure passed in. In processing a DeletePrinterDataEx request with DPD_DELETE_UNUSED_FILES set, printer_driver_files_in_use() must be called to ensure files in use by other drivers are not removed. https://bugzilla.samba.org/show_bug.cgi?id=4942 Signed-off-by: Andreas Schneider <asn@samba.org>
* torture: confirm printer driver file removalDavid Disseldorp2012-01-201-1/+81
| | | | Signed-off-by: Andreas Schneider <asn@samba.org>
* torture: add spoolss del printer driver testDavid Disseldorp2012-01-201-0/+63
| | | | | | | Test handling of DeletePrinterDriverEx when the DPD_DELETE_ALL_FILES flag is set. Signed-off-by: Andreas Schneider <asn@samba.org>
* s3-spoolss: fix printer driver version deletionDavid Disseldorp2012-01-201-167/+111
| | | | | | | | | | Spoolss delete printer driver code currently makes invalid version assumptions based on the architecture requested by the client. Ugly hacks are in place to cover removal of other versions (2 and 3). This change wraps multi version deletion in a simple for loop. Signed-off-by: Andreas Schneider <asn@samba.org>
* s3-spoolss: prefix print$ path on driver file deletionDavid Disseldorp2012-01-201-44/+37
| | | | | | | | | Driver file paths stored in the registry do not include the server path prefix. delete_driver_files() incorrectly assumes such a prefix. https://bugzilla.samba.org/show_bug.cgi?id=8697 Signed-off-by: Andreas Schneider <asn@samba.org>
* s3: Fix a typoVolker Lendecke2012-01-191-1/+1
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Thu Jan 19 13:43:07 CET 2012 on sn-devel-104
* Now make_connection_snum() is a static function that takes aJeremy Allison2012-01-191-33/+26
| | | | | | | | connection_struct as a parameter, fix the interface to allow it to return an NTSTATUS. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Thu Jan 19 07:25:49 CET 2012 on sn-devel-104