summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* libcli-cldap: avoid the case local == remote == NULLMatthieu Patou2011-10-211-1/+5
|
* libcli/cldap: make sure the local and remote address family matchesStefan Metzmacher2011-10-211-5/+25
| | | | | | metze Signed-off-by: Matthieu Patou <mat@matws.net>
* s4-resolv: fix resolution of SRV records pointing to A and AAAA recordsMatthieu Patou2011-10-211-161/+238
|
* Deprecate "acl check permissions".Jeremy Allison2011-10-212-1/+4
| | | | | Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Oct 21 21:51:18 CEST 2011 on sn-devel-104
* s3:idmap_autorid: document allocation poolChristian Ambach2011-10-211-1/+6
| | | | | | | | document the need that excessive use of local users/group might require increasing the rangesize Autobuild-User: Christian Ambach <ambi@samba.org> Autobuild-Date: Fri Oct 21 18:04:50 CEST 2011 on sn-devel-104
* s3:idmap_autorid: add an allocation range to autoridChristian Ambach2011-10-211-1/+96
| | | | | | | | | | this is needed to allocate gids for BUILTIN\Users and BUILTIN\Administrators and for local users/group that admins might want to create autorid will now allocate one range for this purpose and can so give out as many uids and gids as the configured rangesize allows
* s3:idmap_autorid: move HWM initialization into a functionChristian Ambach2011-10-211-17/+27
| | | | | we will need some more HWM soon, so move out initialization and optimize the logic using the new interface of dbwrap_fetch_uint32
* s3:idmap_autorid: use strings as parameter for range allocatorChristian Ambach2011-10-211-14/+14
| | | | | this prepares for allocation of non-domain ranges that cannot be expressed by a SID (e.g. an allocation pool)
* s3:winbindd/idmap make idmap modules loadable againChristian Ambach2011-10-216-6/+6
| | | | | commit 355b5e3a831415d9bef97 changed the module system to expect 'samba_init_module' as fixed initializer function
* Revert "s3:idmap/autorid add a small alloc pool to autorid"Christian Ambach2011-10-211-61/+0
| | | | | | | | | | This reverts commit 0aa558718ad7427ee8b02046da73eea1838a5a32. just having 500 uid/gids values is not good enough for users using local users and groups in the order of thousands better solution which will use a complete range for allocated uids/gids will come next.
* libcli: remove unneeded com_err.h and fix the build here.Günther Deschner2011-10-211-4/+0
| | | | | | | Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Fri Oct 21 15:52:36 CEST 2011 on sn-devel-104
* s3-waf: only compile common.c in netapi examples code once.Günther Deschner2011-10-211-2/+8
| | | | Guenther
* s3-netapi: use NetApiBufferAllocate() for returned buffer in getdc calls.Günther Deschner2011-10-211-2/+30
| | | | Guenther
* s3-netapi: fix missing include in examples code.Günther Deschner2011-10-211-0/+2
| | | | Guenther
* libcli/smb: move smb_seal.c to the toplevelStefan Metzmacher2011-10-2110-18/+20
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Oct 21 10:22:39 CEST 2011 on sn-devel-104
* s3-ntlmssp Remove references to auth_ntlmssp_context from the rpc codeAndrew Bartlett2011-10-217-74/+75
| | | | | | | | | We always dereferenced auth_ntlmssp_state->gensec_security, so now we do not bother passing around the whole auth_ntlmssp_state. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-seal Remove struct smb_srv_trans_enc_ctxAndrew Bartlett2011-10-213-104/+54
| | | | | | | | | | | | | This structure added no value, particularly after the move to gensec. It was added at a time when auth_ntlmssp_state was not available in the client. This changed a while back (the wrapper was extended with client calls), and the move to gensec again reinforced that we do not need the extra complexity. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp Remove references to auth_ntlmssp_context from the smb sealing codeAndrew Bartlett2011-10-214-46/+54
| | | | | | Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp Remove auth_ntlmssp_session_key()Andrew Bartlett2011-10-214-17/+12
| | | | | | | | We now just call the gensec_session_key() directly. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp Remove auth_ntlmssp_want_feature()Andrew Bartlett2011-10-219-31/+17
| | | | | | | | We now just call the gensec_want_feature() directly. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-seal use gensec_[un]wrap() instead of gensec_[un]seal_packet()Andrew Bartlett2011-10-211-54/+41
| | | | | | | | | | | | | This should not make a difference for NTLMSSP as it still calls the low level ntlmssp_[un]seal_packet() functions with the same input parameters. If we convert the gss-api/krb5 based code to gensec we have to use gensec_[un]wrap() as the wire format is different compared to gensec_[un]seal_packet() there. Andrew Bartlett Split from another commit by Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp use gensec_{seal,unseal,sign,check}_packetAndrew Bartlett2011-10-215-125/+55
| | | | | | | | This avoids the indirection via the auth_ntlmsssp wrapper functions. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp Remove auth_ntlmssp_negotiated_sign() and ↵Andrew Bartlett2011-10-214-16/+4
| | | | | | | | | | auth_ntlmssp_negotiated_seal() We now just call the gensec_have_feature() directly. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp Remove auth_ntlmssp_update wrapperAndrew Bartlett2011-10-2110-47/+41
| | | | | | | | We now just call gensec_update directly. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-auth remove auth_ntlmssp_session_info()Andrew Bartlett2011-10-215-23/+11
| | | | | | | | Instead, call gensec_session_info() directly. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3:smbd/seal: pass talloc_tos() auth_ntlmssp_update(), because we free a few ↵Stefan Metzmacher2011-10-211-1/+1
| | | | | | lines later metze
* s3:libsmb/smb_seal: always use SAFE_FREE(buf) in common_free_enc_buffer()Stefan Metzmacher2011-10-211-14/+1
| | | | | | | There's no need to do gss-api specific stuff, the buffer is always malloc'ed. metze
* s3:libsmb/smb_seal: use plain malloc() in common_ntlm_encrypt_buffer()Stefan Metzmacher2011-10-211-2/+7
| | | | metze
* s3:libsmb/smb_seal: avoid ads_errstr() dependency and use gssapi_error_string()Stefan Metzmacher2011-10-211-9/+28
| | | | metze
* s3:libsmb/smb_seal: make use of common [_]smb_[set]len_nbt() macrosStefan Metzmacher2011-10-211-11/+11
| | | | metze
* s3:include: make smb_setlen() a macroStefan Metzmacher2011-10-213-15/+1
| | | | metze
* libcli/smb: add smb_setlen_[nbt|tcp] macrosStefan Metzmacher2011-10-211-0/+8
| | | | metze
* libcli/smb: move some common defines to smb_constants.hStefan Metzmacher2011-10-213-55/+27
| | | | metze
* build: compile (but do not install) netapi examplesAndrew Bartlett2011-10-212-0/+65
| | | | | | | | | The only example not yet built is the GTK domain join gui. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri Oct 21 01:31:55 CEST 2011 on sn-devel-104
* s3:Makefile: make DSO_EXPORTS_CMD more portable (#8531)Björn Jacke2011-10-201-1/+1
| | | | | | | | | It sems like every not completely trivial sed expression should be tested with Solaris' sed. Its regexp engine is way more limited than the one of GNU sed. Thanks to Michael Pelletier for finding this! This fixes bug #8531 Autobuild-User: Björn Jacke <bj@sernet.de> Autobuild-Date: Thu Oct 20 23:15:05 CEST 2011 on sn-devel-104
* Refactor to create check_parent_access() which can be called for file ↵Jeremy Allison2011-10-201-23/+64
| | | | | | | creation too. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Thu Oct 20 20:29:22 CEST 2011 on sn-devel-104
* Make mkdir_internal() check the parent ACL for SEC_DIR_ADD_SUBDIR rights.Jeremy Allison2011-10-201-2/+33
|
* build: compile (but do not install) all the libsmbclient testsAndrew Bartlett2011-10-202-0/+40
| | | | | Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Oct 20 13:49:39 CEST 2011 on sn-devel-104
* s3-netapi Compile (but do not install) netapi testsAndrew Bartlett2011-10-202-1/+7
|
* examples: compile libsmbclient tests using just SAMBA_BINARYAndrew Bartlett2011-10-201-17/+17
| | | | | | This ensures that these compile without the extra includes that SAMBA3_BINARY adds. Andrew Bartlett
* s3:libsmb/async_smb: in cli_state_notify_pending() we always disconnectStefan Metzmacher2011-10-201-7/+5
| | | | | | | | | So we should always set state->mid = 0. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Oct 20 11:34:23 CEST 2011 on sn-devel-104
* Revert "selftest: Avoid being run over by armies of the undead"Andrew Bartlett2011-10-201-2/+0
| | | | | | | | This reverts commit 2b47aface434000b29aa29f4ff6348cc147ae757 because it had a typo in $SIG{CHILD} (it needed to be $SIG{CHLD}), which when fixed simply broke the whole selftest system. Andrew Bartlett
* build: explain the passing of make options to wafAndrew Tridgell2011-10-201-0/+7
| | | | | | | | add a comment explaining how we pass make command line options into waf Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Thu Oct 20 07:24:02 CEST 2011 on sn-devel-104
* ldb: ldb_errstring() takes ldb_contxt as an argumentAmitay Isaacs2011-10-201-1/+1
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-dns: Update serial number for zone on dns updatesAmitay Isaacs2011-10-201-3/+83
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-selftest: Add tests for RPC dnsserverAmitay Isaacs2011-10-203-0/+183
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* samba-tool: Added dns command for DNS managementAmitay Isaacs2011-10-202-0/+861
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-dns: Added DCERPC dns server for DNS managementAmitay Isaacs2011-10-207-1/+3771
| | | | | | | | | | dnsserver.h - typedefs and prototypes dnsserver.c - RPC API and implementation methods dnsdb.c - samdb operations dnsdata.c - functions to manipulate dns structures dnsutils.c - function for serverinfo and zoneinfo structures Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-provision: Provision DNS records with correct rankAmitay Isaacs2011-10-201-18/+23
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* werror: Added missing DNS error codesAmitay Isaacs2011-10-201-0/+36
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>