summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* WHATSNEW: prepare for 4.0 beta4Andrew Bartlett2012-07-171-28/+44
|
* Revert "Remove XSLT script to generate image dependencies, instead rely on make"Jelmer Vernooij2012-07-162-17/+89
| | | | | | | | | | | | This reverts commit c4493c22f129b2c94f361e6f8657adc7cd2dc1c6. Bug: https://bugzilla.samba.org/show_bug.cgi?id=7562 Conflicts: docs-xml/Makefile Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org> Autobuild-Date(master): Mon Jul 16 16:18:46 CEST 2012 on sn-devel-104
* pytdb: Check if the database is closed before we touch itAndrew Bartlett2012-07-162-10/+85
| | | | | | | | | | | If .close() has already been called, we have to play dead - the self->ctx is just not valid any more, as we have been shut down to allow some other part of Samba to open the tdb. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Mon Jul 16 13:51:52 CEST 2012 on sn-devel-104
* pytdb: Check for errors parsing strings into TDB_DATAAndrew Bartlett2012-07-161-0/+16
| | | | | | | The call to PyStringAsString() can raise an exception, and we want to return that rather than following a NULL pointer later. Andrew Bartlett
* auth/credentials: Look in the secrets.tdb for the machine accountAndrew Bartlett2012-07-152-3/+50
| | | | | | | | | This is for use with the -P/--machine-pass option. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Sun Jul 15 05:41:28 CEST 2012 on sn-devel-104
* s4-param: Use a unique header nameAndrew Bartlett2012-07-151-3/+3
|
* s3-secrets: Use C99 typesAndrew Bartlett2012-07-152-11/+11
|
* Fix bug #9016 - Connection to outbound trusted domain goes offline.Jeremy Allison2012-07-141-6/+0
| | | | | | | | | | | | By the time we've gotten to init_dc_connection_network() we shouldn't be second guessing the caller by calling winbindd_can_contact_domain(). If for some reason we do need to restrict the contact list here we can add a condition to only contact the primary domain or domains listed in the tdc cache, but I don't think that's neccessary. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Sat Jul 14 03:17:57 CEST 2012 on sn-devel-104
* s3: Make us survive smb2.lock.rw-shared with aio enabledVolker Lendecke2012-07-131-1/+1
| | | | | | | | | | | | schedule_aio_smb2_write can return NT_STATUS_FILE_LOCK_CONFLICT. This is a valid error code that smb2.lock.rw-shared expects and checks for. The code before this patch maps this to NT_STATUS_FILE_CLOSED, masking the real, correct error message. Signed-off-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Fri Jul 13 21:53:51 CEST 2012 on sn-devel-104
* s3-auth_samba4: Explain that check_samba4_security is actually unusedAndrew Bartlett2012-07-131-0/+10
| | | | | | | | | | | Because of the evolution in the way the auth handling has been done, we do not need this code any more. Raw NTLM Session setup & X is done via the auth4 context which returns a full session info. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri Jul 13 10:04:05 CEST 2012 on sn-devel-104
* lib/util: Allocate enough space to reference blob->data[len]Andrew Bartlett2012-07-131-3/+3
| | | | | | | | Found by Thomas Hood <jdthood@gmail.com> using valgrind. Thanks! Andrew Bartlett
* s3-auth Remove unused global_machine_account_needs_changingAndrew Bartlett2012-07-133-82/+0
| | | | | | | | | | | | | | This boolean was only set if the old machine account store (with an MD4 hash in it) was returned. We have not set that password type for years. If this call ever worked, it would store a plaintext password, so we could only ever be here if we had set a password using a version of Samba so old as not to store plaintext, and then never honered the flag anyway. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri Jul 13 07:52:40 CEST 2012 on sn-devel-104
* s3-auth Remove confusing reference to global_machine_password_needs_changingAndrew Bartlett2012-07-131-8/+0
| | | | | | This is in the trusted domain codepath, not the primary domain code path. Andrew Bartlett
* s4-provision: Provide YP/NIS subtree to allow ADUC to see and set rfc2307 attrsGeza Gemes2012-07-133-2/+536
| | | | | | | | | | When provisioning with --use_rfc2307=yes populate the subtree: CN=ypServ30,CN=RpcServices,CN=System,${DOMAINDN} This makes it possible to manipulate the posix attributes via ADUC (commit message adjusted by abartlet) Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* Use HAVE_FSYNC, we bothered to test for it.Jeremy Allison2012-07-131-0/+2
| | | | | Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Fri Jul 13 04:44:42 CEST 2012 on sn-devel-104
* s4:registry:regdiff: use existing talloc context for the event contextMichael Adam2012-07-131-1/+1
| | | | | Autobuild-User(master): Michael Adam <obnox@samba.org> Autobuild-Date(master): Fri Jul 13 02:51:44 CEST 2012 on sn-devel-104
* s4:registry:regdiff: add TALLOC_CTX * argument to open_backend()Michael Adam2012-07-131-6/+7
|
* s4:registry: add a TALLOC_CTX argument to reg_open_remote()Michael Adam2012-07-134-5/+7
|
* Linux-specific optimization in aio_open code.Jeremy Allison2012-07-131-0/+22
| | | | | | | | Use initial_allocation_size to allocate on disk if sent. Ignore failures (upper level will cope). Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Fri Jul 13 00:35:48 CEST 2012 on sn-devel-104
* Set fsp->initial_allocation_size before calling open_file_ntcreate().Jeremy Allison2012-07-121-0/+5
| | | | | Allows an SMB_VFS_OPEN() vfs module to do something interesting with the request.
* Make sure we reset fsp->initial_allocation_size to zero if we didn't create ↵Jeremy Allison2012-07-121-0/+2
| | | | | | | the file. This will become important as we set fsp->initial_allocation_size before create.
* Add an optimization to pthread aio writes to also do fsync if requested.Jeremy Allison2012-07-123-0/+25
| | | | | Should help by ensuring complete writes done in sub-thread, not in the main thread.
* s3: Make us survive base-delaywrite with aio enabledVolker Lendecke2012-07-121-0/+4
| | | | | | | Signed-off-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Thu Jul 12 21:28:19 CEST 2012 on sn-devel-104
* s3: Factor out "mark_file_modified"Volker Lendecke2012-07-122-25/+43
| | | | | | This is in preparation of making us survive base-delaywrite with async I/O activated Signed-off-by: Jeremy Allison <jra@samba.org>
* s3: rename sid_check_is_in_our_domain() to sid_check_is_in_our_sam()Michael Adam2012-07-1213-24/+24
| | | | | | | | | This does not check whether the given sid is in our domain, but but whether it belongs to the local sam, which is a different thing on a domain member server. Autobuild-User(master): Michael Adam <obnox@samba.org> Autobuild-Date(master): Thu Jul 12 18:36:02 CEST 2012 on sn-devel-104
* s3: rename sid_check_is_domain() to sid_check_is_our_sam()Michael Adam2012-07-1213-26/+26
| | | | | | This does not check whether the given sid is the domain sid, but whether it is the sid of the local sam, which is different for a domain member server.
* s3:passdb: remove commented out pdb_lookup_names codeMichael Adam2012-07-121-82/+0
| | | | This code is lying there unused since more than five years now.
* s3/torture: adjust dependency to fix build when no winbind was build beforeBjörn Jacke2012-07-121-1/+1
| | | | | Autobuild-User(master): Björn Jacke <bj@sernet.de> Autobuild-Date(master): Thu Jul 12 14:44:14 CEST 2012 on sn-devel-104
* s3: make log message of FSCTL_IS_VOLUME_DIRTY more clearBjörn Jacke2012-07-121-1/+1
|
* test: fix compile warning on test summaryBjörn Jacke2012-07-121-1/+1
|
* mkversion: Remove quotes around SAMBA_VERSION_VENDOR_PATCH stringRalph Wuerthner2012-07-121-1/+1
| | | | | | | | | | This fixes a build error in source3/smbd/trans2.c when SAMBA_VERSION_VENDOR_PATCH is set (as integer value). Signed-off-by: Amitay Isaacs <amitay@gmail.com> Autobuild-User(master): Amitay Isaacs <amitay@samba.org> Autobuild-Date(master): Thu Jul 12 04:03:08 CEST 2012 on sn-devel-104
* s3:vfs_gpfs: fix ACL length calculationRalph Wuerthner2012-07-111-9/+4
| | | | | | | | | | GPFS 3.5 introduces ACL enhancements which are breaking our ACL length calculations. Signed-off-by: Ralph Wuerthner <ralph.wuerthner@de.ibm.com> Autobuild-User(master): Christian Ambach <ambi@samba.org> Autobuild-Date(master): Wed Jul 11 21:28:23 CEST 2012 on sn-devel-104
* s3:vfs_gpfs: Check softquota before gracetimeChristof Schmitt2012-07-111-1/+2
| | | | | | | gpfs_quotactl can return a non-zero softquota gracetime even when no softquota has been set. This could lead to "disk full" being reported to a client. The easiest fix is to check for a valid softquota before checking the softquota gracetime.
* build: fix some indentation (tabs/vs spaces) in source3/wscriptMichael Adam2012-07-111-2/+2
| | | | | Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Wed Jul 11 19:37:12 CEST 2012 on sn-devel-104
* build: fix waf checks for seteuid on non-Linux platformsMichael Adam2012-07-111-5/+4
| | | | | | An indentation error had linux-specific checks called on non-linux with the effect that "#define USE_LINUX_THREAD_CREDENTIALS 1" was effective.
* Add in the threaded async open engine.Jeremy Allison2012-07-111-0/+393
| | | | | | | | | | | | | | | | | Fixes all issues raised originally. This code will only do threaded opens with thread-specific credentials (Linux for now) and changes credentials before doing the call. Also only fires on O_CREAT|O_EXCL so will only create new files, never open old ones async. Volker, this is isolated enough that it shouldn't prevent you from refactoring it into a new module when the aio pread/pwrite code is moved into the default aio path. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Wed Jul 11 08:04:56 CEST 2012 on sn-devel-104
* Move set_thread_credentials_permanently() to set_thread_credentials()Jeremy Allison2012-07-112-16/+16
| | | | | | | | | | as we need to keep the saved set uid/gid otherwise there is an interaction with open[at]() and NO_ATIME returning EPERM. As this is meant for threaded code inside the process we don't need to do an irreverisble change anyway. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Wed Jul 11 03:54:00 CEST 2012 on sn-devel-104
* Fix typo we've had for a long time in set_re_uid() in the USE_SETRESUID case.Jeremy Allison2012-07-101-1/+1
| | | | | | | | | We only set the real euid, not the effective one. This is not a security issue as this is *only* used in the quota code, and only between code that brackets it with save_re_uid()/restore_re_uid(), Also this is not used on most platforms (we use USE_SETREUID by preference) but it's better to have this right. Bug to follow to get this fixed in 3.6.next and 3.5.next.
* Cope with a (non-security) open race we've had for ever as NTCreateX isn't ↵Jeremy Allison2012-07-101-0/+25
| | | | | | | | | | | | | | | | atomic on POSIX. On open without create, the file did exist, but some other (local or NFS) process either renamed/unlinked and re-created the file with different dev/ino after we walked the path, but before we did the open. We could retry the open but it's a rare enough case it's easier to just fail the open to prevent creating any problems in the open file db having the wrong dev/ino key. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Jul 10 21:57:33 CEST 2012 on sn-devel-104
* Now we have a guaranteed indication of a file being created, use it to set ↵Jeremy Allison2012-07-101-12/+8
| | | | the create disposition correctly.
* Add function fd_open_atomic() which uses O_CREAT|O_EXCL to return a ↵Jeremy Allison2012-07-101-4/+107
| | | | guaranteed indication of creation of a new file.
* Simplify the logic in open_file() some more.Jeremy Allison2012-07-101-48/+36
| | | | | | | | | | Move the inheritance work into the if block where we created the file. We can never have created the file (and thus need no inheritance) for a stat-open. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Jul 10 03:30:22 CEST 2012 on sn-devel-104
* Simplify the logic in open_file().Jeremy Allison2012-07-091-22/+15
| | | | | | Move the fstat call into the block which opens a file descriptor. Remove the stat() call in the stat-open case. We already failed the open if !file_existed.
* Use new common function.Jeremy Allison2012-07-091-1/+1
|
* Make check_same_stat() and check_same_dev_ino() common functions.Jeremy Allison2012-07-094-31/+33
|
* Factor out check_same_dev_ino() from check_same_stat() so it can be called ↵Jeremy Allison2012-07-091-2/+15
| | | | separately.
* lib/ldb: Bump ldb release due to pyldb changesAndrew Bartlett2012-07-093-1/+261
| | | | | | | | | | We strictly need these changes to pass make test, and the concat change is backwards incompatible, so we really want to use the right version. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Mon Jul 9 04:34:06 CEST 2012 on sn-devel-104
* s4-torture: add ntprinting ndr operations testsuite.Günther Deschner2012-07-063-1/+442
| | | | | | | Guenther Autobuild-User(master): Günther Deschner <gd@samba.org> Autobuild-Date(master): Fri Jul 6 20:55:26 CEST 2012 on sn-devel-104
* ntprinting: mark the final 4 byte null pointer for printer data in ↵Günther Deschner2012-07-061-0/+1
| | | | | | ndr_pull_ntprinting_printer as read. Guenther
* ndr: fix push/pull DATA_BLOB with NDR_NOALIGNDavid Disseldorp2012-07-061-12/+22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This change addresses bug 9026. There are 3 use cases for DATA_BLOB marshalling/unmarshalling: 1) ndr_push_DATA_BLOB and ndr_pull_DATA_BLOB when called with LIBNDR_FLAG_ALIGN* alignment flags set, are used to push/pull padding bytes _only_. The length is determined by the alignment required and the current ndr offset. e.g. dcerpc.idl: typedef struct { ... [flag(NDR_ALIGN8)] DATA_BLOB _pad; } dcerpc_request; 2) When called with the LIBNDR_FLAG_REMAINING flag, all remaining bytes in the ndr buffer are pushed/pulled. e.g. dcerpc.idl: typedef struct { ... [flag(NDR_REMAINING)] DATA_BLOB stub_and_verifier; } dcerpc_request; 3) When called without alignment flags, push/pull a uint32 length _and_ a corresponding byte array to/from the ndr buffer. e.g. drsblobs.idl typedef [public] struct { ... DATA_BLOB data; } DsCompressedChunk; The fix for bug 8373 changed the definition of "alignment flags", such that when called with LIBNDR_FLAG_NOALIGN ndr_push/pull_DATA_BLOB behaves as (1: padding bytes) rather than (3: uint32 length + byte array). This breaks marshalling/unmarshalling for the following structures. eventlog.idl: typedef [flag(NDR_NOALIGN|NDR_PAHEX),public] struct { ... DATA_BLOB sid; ... } eventlog_Record_tdb; ntprinting.idl: typedef [flag(NDR_NOALIGN),public] struct { ... DATA_BLOB *nt_dev_private; } ntprinting_devicemode; typedef [flag(NDR_NOALIGN),public] struct { ... DATA_BLOB data; } ntprinting_printer_data; Signed-off-by: Günther Deschner <gd@samba.org>