summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Set SIGRTMIN to NSIGTimur I. Bakeyev2009-06-082-4/+1
| | | | | | | | | | | | | | In the includes we define SIGRTMIN to 32 if it's not defined already. This value could be fairly low and it's better to use NSIG(number of defined signals) as the lower mark for the available signals. We have similar defenition in the source3/smbd/aio.c, which can be safely removed, as it comes from includes.h then. With regards, Timur Bakeyev. Signed-off-by: Stefan Metzmacher <metze@samba.org>
* Check for dmalloc at the end of the configureTimur I. Bakeyev2009-06-081-10/+10
| | | | | | | | | | | | | | | | Enabling dmalloc in Samba3 build leads to the wrong detection of the strndup() function - there isn't one in FreeBSD prior to 7.2, but dmalloc defines it, so, farther tests with -ldmalloc added wrongly find it. the cheapest fix is to move dmalloc detection and inclusion to the bottom of configure, so it can't affect detection of the system capabilities. Here is the patch. With regards, Timur Bakeyev. Signed-off-by: Stefan Metzmacher <metze@samba.org>
* Add langinfo.h to the system/locale.hTimur I. Bakeyev2009-06-082-1/+5
| | | | | | | | | | | | | | | This patch for Samba4. It's not really inspired by any real need, just for the consistency. We define replace/system/locale.h as a generic header, that includes all locale related headers and we are using nl_langinfo at least in Samba3. So, it would be consistent to add yet another locale-related header to the set of locale.h headers. Here is the patch. With regards, Timur Bakeyev. Signed-off-by: Stefan Metzmacher <metze@samba.org>
* Make tunable for modulesdirTimur I. Bakeyev2009-06-081-0/+16
| | | | | | | | | | | | | | | This patch is for Samba4. It adds configure tunable for modulesdir - location, where modules should be installed. In the case, when no FHS compliance is used and libdir is redefined, modulesdir still points to $PREFIX/modules. In some installations it may be not desired. I'd rather set it myself :) So, here is the patch. With regards, Timur Bakeyev. Signed-off-by: Stefan Metzmacher <metze@samba.org>
* rl_event_hook detectionTimur I. Bakeyev2009-06-081-1/+4
| | | | | | | | | | | This patch is relevant for Samba4 source mostly. The way, how readline compiled under FreeBSD makes it require stdio.h to get all the necessary declarations. Without this addition rl_event_hook is not properly detected. With regards, Timur Bakeyev. Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-test: finally enable RPC-SAMR against samba3.Günther Deschner2009-06-081-1/+1
| | | | | | We now pass it :-) Guenther
* s3-winbindd: workaround alias enumeration in expand_groups().Günther Deschner2009-06-081-3/+16
| | | | | | alias enumeration in NSS is not done properly done atm and needs to be fixed. Guenther
* s3-selftest: forward NSS_WRAPPER_WINBIND_SO_PATH env to tests.Günther Deschner2009-06-081-0/+4
| | | | Guenther
* test: add NSS_WRAPPER_WINBIND_SO_PATH to make test.Günther Deschner2009-06-081-1/+2
| | | | Guenther
* s3-samr: support _samr_SetGroupInfo level 2.Günther Deschner2009-06-081-2/+2
| | | | Guenther
* s4-smbtorture: exclude oem_information checking for s3 in RPC-SAMR.Günther Deschner2009-06-081-4/+10
| | | | Guenther
* s3-charcnv: always talloc_free in convert_string_talloc() error path.Günther Deschner2009-06-081-2/+1
| | | | Guenther
* s3-charcnv: remove remaining malloc references in convert_string_talloc().Günther Deschner2009-06-081-2/+2
| | | | Guenther
* nss_wrapper: add my copyright.Günther Deschner2009-06-081-0/+1
| | | | Guenther
* Further fix for 6449Volker Lendecke2009-06-081-1/+1
| | | | Thanks to TAKAHASHI Motonobu <monyo@samba.gr.jp> for reporting!
* Fix a valgrind error in "net rap user add"Volker Lendecke2009-06-081-0/+1
|
* Fix bug 6449Volker Lendecke2009-06-081-1/+1
| | | | Thanks to TAKAHASHI Motonobu <monyo@samba.gr.jp> for reporting!
* replace: add fallback define for IOV_MAXStefan Metzmacher2009-06-081-0/+16
| | | | | | This hopefully fixes the build on IRIX. metze
* talloc: try to fix the source4 build on AIXStefan Metzmacher2009-06-081-1/+1
| | | | metze
* async_sock: try fix the source4 build on FreeBSD, Solaris, SLES8Stefan Metzmacher2009-06-085-16/+15
| | | | metze
* Update WHATSNEW for an alpha8 release this week.Andrew Bartlett2009-06-081-30/+11
| | | | | | | Please update this file with things you have worked on, if you want them to be mentioned in the release. Andrew Bartlett
* Add "net sam createdomaingroup"Volker Lendecke2009-06-071-0/+36
|
* More pdb_ads stuffVolker Lendecke2009-06-071-6/+108
|
* Add tldap_pull_uint32Volker Lendecke2009-06-072-0/+14
|
* mount.cifs: update the mount.cifs manpageJeff Layton2009-06-071-50/+95
| | | | | | | | | | | | Add a new section entitled FILE AND DIRECTORY OWNERSHIP AND PERMISSIONS that attempts to cover information about this topic. Change the uid= and gid= options to refer to that section. Add new varlistentries for forceuid, forcegid and dynperm. Also update the information about how the program behaves when installed as a setuid binary. Signed-off-by: Jeff Layton <jlayton@redhat.com>
* Make "net sam list" work for groups, aliases and builtinsVolker Lendecke2009-06-071-7/+58
|
* Return full info in pdb_ads_search_users()Volker Lendecke2009-06-071-5/+17
|
* Fix syntax of sending a delete requestVolker Lendecke2009-06-071-1/+1
|
* req_del and req_abandon are ASN1_APPLICATION_SIMPLEVolker Lendecke2009-06-071-2/+4
| | | | Ok, ASN1_APPLICATION everywhere was too easy :-)
* Fix after making tldap independent of ldap.hVolker Lendecke2009-06-071-21/+24
|
* s3-groupdb: fix enum_aliasmem in ldb branch.Günther Deschner2009-06-071-1/+1
| | | | | | | | | | It is totally valid to have an alias with no members. Tridge, please check. Found by RPC-SAMR torture test. Guenther
* s3-samr: fix return code of _samr_LookupRids when run with pdb_ldap.Günther Deschner2009-06-071-0/+5
| | | | | | | | | when _samr_LookupRids is called with no rids, it needs to return NT_STATUS_NONE_MAPPED (not NT_STATUS_NO_MEMORY). Found by RPC-SAMR torture test. Guenther
* s3-samr: SetGroupInfo level 1 should not return NT_STATUS_INVALID_INFO_CLASS.Günther Deschner2009-06-071-3/+0
| | | | | | Found by RPC-SAMR torture test. Guenther
* mount.cifs: properly check for mount being in fstab when running setuid root ↵Jeff Layton2009-06-061-40/+162
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | (try#3) This is the third attempt to clean up the checks when a setuid mount.cifs is run by an unprivileged user. The main difference in this patch from the last one is that it fixes a bug where the mount might have failed if unnecessarily if CIFS_LEGACY_SETUID_CHECK was set. When mount.cifs is installed setuid root and run as an unprivileged user, it does some checks to limit how the mount is used. It checks that the mountpoint is owned by the user doing the mount. These checks however do not match those that /bin/mount does when it is called by an unprivileged user. When /bin/mount is called by an unprivileged user to do a mount, it checks that the mount in question is in /etc/fstab, that it has the "user" option set, etc. This means that it's currently not possible to set up user mounts the standard way (by the admin, in /etc/fstab) and simultaneously protect from an unprivileged user calling mount.cifs directly to mount a share on any directory that that user owns. Fix this by making the checks in mount.cifs match those of /bin/mount itself. This is a necessary step to make mount.cifs safe to be installed as a setuid binary, but not sufficient. For that, we'd need to give mount.cifs a proper security audit. Since some users may be depending on the legacy behavior, this patch also adds the ability to build mount.cifs with the older behavior. Signed-off-by: Jeff Layton <jlayton@redhat.com>
* s3-samr: fix _QueryDisplayInformation r->out.returned_size.Günther Deschner2009-06-071-1/+1
| | | | | | | | *r->out.returned_size needs to be 0 if nothing was enumerated. Found by RPC-SAMR torture test. Guenther
* s3-samr: remove total_data_size variable in _samr_QueryDisplayInfo.Günther Deschner2009-06-071-5/+2
| | | | Guenther
* s3-samr: let _samr_SetGroupInfo level 3 just pass with success.Günther Deschner2009-06-071-0/+2
| | | | Guenther
* s3-samr: _samr_EnumDomain{Users,Groups} need to return an emtpy array even ↵Günther Deschner2009-06-071-12/+12
| | | | | | | | for builtin domain. Found by RPC-SAMR torture test. Guenther
* s4-smbtorture: skip samr MultipleMember alias tests for 3 as well as we do ↵Günther Deschner2009-06-071-2/+3
| | | | | | already for s4. Guenther
* s3-samr: cosmetic fixes for _samr_QueryDisplayInfo.Günther Deschner2009-06-071-20/+18
| | | | | | | use the variables of the struct samr_QueryDisplayInfo directly to make it easier to track where variables are defined from. Guenther
* testsuite/nsswitch/get{gr,pw}ent_r.c(dump_{gr,pw}ent): fixed wrong condition.Slava Semushin2009-06-062-2/+2
| | | | | | | When fopen() fails it return NULL, so condition where return value less than zero never evaluated to truth. Found by cppcheck.
* lib/tdb/tools/tdbtorture.c: fixed memory leak.Slava Semushin2009-06-061-0/+2
| | | | | Found by cppcheck: [lib/tdb/tools/tdbtorture.c:326]: (error) Memory leak: pids
* s3/docs: Fix example.Karolin Seeger2009-06-061-2/+2
| | | | | | | | The 'ldap suffix' is not added automatically to the 'ldap admin dn'. This fixes bug #5584. Thanks to Stefan Bauer <stefan.bauer [at] plzk.de> for reporting! Karolin
* Attempt to fix the build without system-ldap.Volker Lendecke2009-06-061-1/+1
| | | | I really tried, but I knew I would miss something... :-)
* s3/passdb: Fix debug message: 'net setmaxrid' does not exist.Karolin Seeger2009-06-061-2/+2
| | | | | | This is aiming bug #6351. Karolin
* Add an early prototyp of pdb_ads.c.Volker Lendecke2009-06-063-1/+1290
| | | | | | | | | The purpose of this module is to connect to a locally running samba4 ldap server for an alternative "Franky" setup. Right now it contains a couple of gross hacks: For example it just takes the s4-chosed RID directly as uid/gid... Checking in tldap and pdb_ads now, I think 3777 insertions are enough for a start...
* Allow access as SYSTEM on a privileged ldapi connectionVolker Lendecke2009-06-061-13/+83
| | | | | | | This patch creates ldap_priv/ as a subdirectory under the private dir with the appropriate permissions to only allow the same access as the privileged winbind socket allows. Connecting to ldap_priv/ldapi gives SYSTEM access to the ldap database.
* Add some samba-style tldap utility functionsVolker Lendecke2009-06-064-1/+406
|
* Add the early start of an async ldap libraryVolker Lendecke2009-06-064-0/+2075
| | | | | | | There's a lot of things this does not do yet: For example it does not parse the reply blob in the sasl bind, it does not do anything with controls yet, a lot of the ldap requests are not covered yet. But it provides a basis for me to play with a pdb_ads passdb module.
* s3:smbd: FSCTL_PIPE_TRANSCEIVE on a none IPC$ share should give NOT_SUPPORTEDStefan Metzmacher2009-06-061-1/+1
| | | | metze