summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* s4:heimdal Allow KRB5_NT_ENTERPRISE names in all DB lookupsAndrew Bartlett2009-06-305-24/+35
| | | | | | | | | | | | | | The previous code only allowed an KRB5_NT_ENTERPRISE name (an e-mail list user principal name) in an AS-REQ. Evidence from the wild (Win2k8 reportadely) indicates that this is instead valid for all types of requests. While this is now handled in heimdal/kdc/misc.c, a flag is now defined in Heimdal's hdb so that we can take over this handling in future (once we start using a system Heimdal, and if we find out there is more to be done here). Andrew Bartlett
* s4:kdc Only get the lp_ctx once for a LDB_fetch()Andrew Bartlett2009-06-301-11/+18
|
* Rework hdb-samba4 to remove useless abstractions.Andrew Bartlett2009-06-301-84/+44
| | | | | | | | | | | The function LDB_lookup_principal() has been eliminated, and it's contents spread back to it's callers. Removing the abstraction makes the code clearer. Also ensure we never pass unescaped user input to a LDB search function. Andrew Bartlett
* s4:dsdb Explain the parsing steps for userPrincipalName cracknames callsAndrew Bartlett2009-06-301-0/+4
|
* s4-smbtorture: use torture_comment & torture_warning in RPC samr tests.Günther Deschner2009-06-291-205/+206
| | | | Guenther
* s3:build: check for external liblua, link lua statically if using internal libMichael Adam2009-06-292-14/+42
| | | | | | So liblua is treated the same way as libtalloc and libtdb. Michael
* s4-smbtorture: correctly test comment behaviour in RPC-SAMR-USERS against s3.Günther Deschner2009-06-291-7/+4
| | | | Guenther
* s3-pdb_tdb: give 'unknown_str' the proper name 'comment' and set comment in ↵Günther Deschner2009-06-291-10/+15
| | | | | | | | passdb. pdb_{get,set}_comment were already existing in the API but were never used. Guenther
* s3:pdb_ads: we need to make the fd for tldap/tsocket non-blockingStefan Metzmacher2009-06-291-0/+2
| | | | metze
* s3:fix build of old linux quota system and other unixes' quota implementationMichael Adam2009-06-291-14/+14
| | | | | | By fixing the use of struct stat_ex. Michael
* s3:lib/sysquotas: fix usage of SMB_STRUCT_STAT (struct stat_ex).Michael Adam2009-06-291-3/+3
| | | | | | | This fixes the build with quotas / configure time detection of sys_quota interface. Michael
* lib/util: fix building tevent_ntstatus without config.hMichael Adam2009-06-291-1/+0
| | | | | | (when called from places with "#define NO_CONFIG_H" set, such as configure) Michael
* tsocket/bsd: also ask for TEVENT_FD_READ when we want to write into a stream ↵Stefan Metzmacher2009-06-291-2/+9
| | | | | | | | socket Otherwise we would not notice a broken connection. metze
* tsocket/bsd: more correctly check if the cached tevent_fd is still validStefan Metzmacher2009-06-291-4/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | I some cases the pointer value of tevent_context is the same again, if we do something like: ev1 = tevent_context_init(); ... fde = tevent_add_fd(ev1, fd, TEVENT_FD_READ...); ... talloc_free(ev1); ... ev2 = tevent_context_init(); if (ev1 == ev2) { /* this can happen! */ } if (tevent_fd_get_flags(fde) == 0) { /* this is always true */ } But the "talloc_free(ev1)" will set fde->event_ctx to NULL and tevent_fd_get_flags() will always return 0. metze
* s3-selftest: add RPC-SAMR-MACHINE-AUTH to list of test to run against s3.Günther Deschner2009-06-291-2/+3
| | | | Guenther
* s4-smbtorture: add RPC-SAMR-MACHINE-AUTH test.Günther Deschner2009-06-292-1/+486
| | | | | | | | | | | | This test talks to a DC as a joined workstation member - in the same way winbindd does, in particular the calls used in this test's query pattern will all request for SEC_FLAG_MAXIMUM_ALLOWED access_mask (which pretty much all of samba's client code does as well). In fact this test verifies that winbind can correctly talk to a samba dc using samr dcerpc calls. Guenther
* s4-smbtorture: add torture_suite_add_machine_workstation_rpc_iface_tcase.Günther Deschner2009-06-295-10/+65
| | | | | | | Unlike torture_suite_add_machine_bdc_rpc_iface_tcase() which joins as a BDC (ACB_SRVTRUST) this joins as a member workstation (ACB_WSTRUST). Guenther
* mount.cifs: don't pass text ro/rw options to kernelJeff Layton2009-06-291-0/+2
| | | | | | | /bin/mount strips off the ro/rw options after setting the MS_RDONLY flag appropriately. Make mount.cifs do the same thing. Signed-off-by: Jeff Layton <jlayton@samba.org>
* Fix ndrdump to use a common setup_logging() APIAndrew Bartlett2009-06-295-2/+29
| | | | | | | | | By adding a new common setup_logging_stdout() API, we no longer need to abuse the ABI compatability between the different setup_logging() calls in Samba3 and Samba4's DEBUG() subsystems. The revert of 49a6d757b4d944cd22c91b2838beb83f04fbe1e9 works with this to fix bug 6211. Andrew Bartlett
* Revert "s4:debug: make setup_logging() a bit more compatible with samba3"Andrew Bartlett2009-06-291-1/+1
| | | | | | | | The problem is that the enum was previously a 'rachet', that is, it would only reset to a level higher than it was previouly set to. Changing the order broke file-based logging for our production sites. This reverts commit 49a6d757b4d944cd22c91b2838beb83f04fbe1e9.
* Adds the impersonation level in ntcreatex requests to SAMBA 3 misc torture testMatthias Dieter Wallnöfer2009-06-291-0/+4
| | | | Specifies the impersonation level according to the reporter commit in bug #6283
* Fix bug 6514: net gives unhelpful "lp_load failed" when it's missing smb.confDavid Markey2009-06-291-1/+1
|
* Correct some typos in the LDB partition moduleMatthias Dieter Wallnöfer2009-06-291-5/+5
|
* SAMDB: Don't check for "sAMAccountName" twiceMatthias Dieter Wallnöfer2009-06-291-1/+0
|
* Enhancement of "simple ldap map" with "systemFlags" attributeMatthias Dieter Wallnöfer2009-06-291-0/+22
| | | | | Enhance the simple ldap map to support also the "systemFlags" attribute in the correct way.
* ldb: Properly handle NULL when copying attr lists.Andrew Kroeger2009-06-291-4/+4
| | | | | When copying an attribute list, ensure the list itself is not NULL before attempting to access elements of the list.
* Correct the headers of some SAMBA 4 setup python scriptsMatthias Dieter Wallnöfer2009-06-293-3/+3
|
* Two patches which fix issues on cross compiling/buildingNathaniel McCallum2009-06-292-2/+4
|
* Fixes for SAMBA3RPC torture testMatthias Dieter Wallnöfer2009-06-291-4/+11
| | | | | | On calls where both NT_STATUS and WERROR results are returned and consulted we have to make sure to form function results considering both. This errors have been found through a run against SAMBA 4.
* Small patch for SPOOLSS pipeMatthias Dieter Wallnöfer2009-06-291-5/+5
| | | | | Prevents a crash of the SAMBA 4 daemon on the torture SPOOLSS test due to not initialised structures.
* _lsa_QueryInfoPolicy: Use symbolic info level namesVolker Lendecke2009-06-281-4/+4
|
* Turn the pdb_rid_algorithm into a capabilities call that returns flagsVolker Lendecke2009-06-2810-30/+33
|
* Make pdb_ads survive a restart of Samba4Volker Lendecke2009-06-281-106/+225
| | | | | | | The search function retries once, the modifying call that hits a dead smbd returns an error. The next try will reconnect. This was simple to implement and provides a good compromise against Samba4 idling our connection. Most of the modifying calls are quickly after a search (like OpenUser) anyway.
* If the connection is down, don't try another write.Volker Lendecke2009-06-282-0/+18
|
* Add tldap_search_vaVolker Lendecke2009-06-282-8/+24
|
* tldap_msg_received: Properly free the asn1_struct in case of an errorVolker Lendecke2009-06-281-0/+1
|
* Move read_ldap_done after read_ldap_sendVolker Lendecke2009-06-272-26/+27
|
* Convert tldap to tstreamVolker Lendecke2009-06-272-12/+18
|
* Add tstream_read_packetVolker Lendecke2009-06-273-0/+150
|
* Properly free a downlevel readv request. Metze, please checkVolker Lendecke2009-06-271-0/+1
|
* tldap: Don't fire off more than one read_ldap request during searchesVolker Lendecke2009-06-271-10/+22
|
* Stop listening for inotify data when there's noneVolker Lendecke2009-06-271-0/+1
| | | | | | There have been some reports that we're flooding syslog with "No data on inotify fd?!". I haven't been able to reproduce this yet. Until then, it is better to just list this message once.
* Fix some nonempty blank linesVolker Lendecke2009-06-271-9/+9
|
* s3/lanman: Workaround for KB932762.Volker Lendecke2009-06-271-0/+1
| | | | This addresses bug #6498.
* The solaris linker seems to require an extra mention of dependent libsVolker Lendecke2009-06-261-3/+8
|
* Don't use ads realm name for non-ads case. #6481Jim McDonough2009-06-261-7/+9
| | | | Also check that the connection to ads worked.
* Fix some dead code warnings from SUN StudioVolker Lendecke2009-06-262-4/+4
|
* Fix a typo in a commentVolker Lendecke2009-06-261-1/+1
|
* Upgrade ntvfs_map_*info to ntvfs_map_async_setup/ntvfs_map_async_finishSam Liddicott2009-06-261-33/+80
| | | | | | | | | | | | | ntvfs_map_fsinfo, ntvfs_map_qpathinfo, ntvfs_map_qfileinfo used an old synchronous mapping technique, acceptable on the grounds that they were only used by the simple vfs which was synchronous. Other vfs may/do use these functions, and by upgrading them to use the ntvfs_map_async_setup/ntvfs_map_async_finish framework, they can now be used asynchronously. Signed-off-by: Sam Liddicott <sam@liddicott.com> Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3:passdb: fix bug #6509: use gid (not uid) cache in fetch_gid_from_cache().Michael Adam2009-06-261-1/+1
| | | | | | With the previous code, the cache can never have been hit at all. Michael