summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* s3:idmap_tdb2: remove legacy commentMichael Adam2011-07-271-2/+0
|
* s3:idmap_tdb2: remove superfluous initialization with bogus commentMichael Adam2011-07-271-3/+0
|
* s3:idmap_tdb2: fix a legacy comment that does not apply any moreMichael Adam2011-07-271-2/+1
|
* s3:doc: add an example with idmap script to the idmap_tdb2 manpageMichael Adam2011-07-271-0/+12
|
* s3:docs: remove legacy text from the example in the idmap_tdb2 manpageMichael Adam2011-07-271-2/+0
|
* s3:doc: clarify the idmap script section in the idmap_tdb2 manpageMichael Adam2011-07-271-7/+9
|
* s3:docs:idmap_tdb2: update the documentation of idmap scriptMichael Adam2011-07-271-2/+16
| | | | to reflect the new variant "idmap config * : script" of configuring the idmap script
* s3:idmap_tdb2: deprecate the idmap:script parameter and use "idmap config * ↵Michael Adam2011-07-271-18/+21
| | | | | | | | | : script" instead With this patch, "idmap config * : script" will override "idmap : script". If "idmap : script" is present, a deprecation warning will be printed in any case. If "idmap config * : script" is not set, then the value of "idmap :script" will be used for backwards compatibility.
* waf: update to latest waf 1.5 versionAndrew Tridgell2011-07-271-0/+0
| | | | | | | | | | | this includes an on_results fix from thomas that fixes a dependency problem with our autoproto code Note that this changes task signatures, so it will trigger a complete rebuild Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Jul 27 04:27:32 CEST 2011 on sn-devel-104
* Fix bug #8324 - smbclient cannot list directories from a big-endian machine.Jeremy Allison2011-07-271-2/+2
| | | | | | | | Two uses of the setup array are not being correctly byte-swapped to little endian. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Jul 27 03:14:48 CEST 2011 on sn-devel-104
* s3: cli_close_done->write_andx_done in test_async_echoVolker Lendecke2011-07-271-2/+2
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Wed Jul 27 02:03:49 CEST 2011 on sn-devel-104
* s3: Fix a debug messageVolker Lendecke2011-07-271-1/+1
|
* s3: Fix formattingVolker Lendecke2011-07-271-2/+4
|
* s3: Fix an error messageVolker Lendecke2011-07-271-1/+1
|
* s3: Fix async smb handlingVolker Lendecke2011-07-272-9/+22
| | | | | | | | | | | | In cli_echo with more than one response we ended up with more than one read_smb request. One from the call to cli_smb_req_set_pending called from cli_smb_received. The other one from cli_smb_received itself. I don't really see another way to deal with this than to hold the read_smb request in the cli_state. Metze, please check! Volker
* s4-dcerpc: Do not return linked attribute on deleted objects it makes W2k8R2 ↵Matthieu Patou2011-07-271-1/+15
| | | | | | | loops when joining s4 domains Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Wed Jul 27 00:46:56 CEST 2011 on sn-devel-104
* s4-dsdb: Improve the calculation of system flags according to 3.1.1.5.2.4Matthieu Patou2011-07-261-2/+3
|
* s4-upgradeprovision: Detect recent provision in a more reliable wayMatthieu Patou2011-07-261-1/+12
|
* s3 swat: Create random nonce in CGI modeKai Blin2011-07-261-1/+19
| | | | | | | | | | | | | In CGI mode, we don't get access to the user's password, which would reduce the hash used so far to parameters an attacker can easily guess. To work around this, read the nonce from secrets.tdb or generate one if it's not there. Also populate the C_user field so we can use that for token creation. Signed-off-by: Kai Blin <kai@samba.org> Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Tue Jul 26 23:33:24 CEST 2011 on sn-devel-104
* s3 swat: Add time component to XSRF tokenKai Blin2011-07-262-5/+25
| | | | Signed-off-by: Kai Blin <kai@samba.org>
* s3 swat: Add XSRF protection to printer pageKai Blin2011-07-261-10/+18
| | | | Signed-off-by: Kai Blin <kai@samba.org>
* s3 swat: Add XSRF protection to password pageKai Blin2011-07-261-3/+8
| | | | Signed-off-by: Kai Blin <kai@samba.org>
* s3 swat: Add XSRF protection to shares pageKai Blin2011-07-261-5/+13
| | | | Signed-off-by: Kai Blin <kai@samba.org>
* s3 swat: Add XSRF protection to globals pageKai Blin2011-07-261-0/+7
| | | | Signed-off-by: Kai Blin <kai@samba.org>
* s3 swat: Add XSRF protection to wizard pageKai Blin2011-07-261-0/+7
| | | | Signed-off-by: Kai Blin <kai@samba.org>
* s3 swat: Add XSRF protection to wizard_params pageKai Blin2011-07-261-0/+7
| | | | Signed-off-by: Kai Blin <kai@samba.org>
* s3 swat: Add XSRF protection to viewconfig pageKai Blin2011-07-261-0/+7
| | | | Signed-off-by: Kai Blin <kai@samba.org>
* s3 swat: Add XSRF protection to status pageKai Blin2011-07-261-0/+7
| | | | Signed-off-by: Kai Blin <kai@samba.org>
* s3 swat: Add support for anti-XSRF tokenKai Blin2011-07-262-0/+59
|
* s3 swat: Allow getting the user's HTTP auth passwordKai Blin2011-07-262-0/+10
| | | | Signed-off-by: Kai Blin <kai@samba.org>
* s3-swat: Fix typo.Karolin Seeger2011-07-261-1/+1
| | | | | | | | Thanks to Simo for reporting! Karolin (cherry picked from commit 9f73c1990a19daa899fa5345530a867e69a5be94) (cherry picked from commit bcb052c29212954a3ed10c9f095c51e4e0a96af5)
* s3 swat: Fix possible XSS attack (bug #8289)Kai Blin2011-07-261-12/+2
| | | | | | | | | | | Nobuhiro Tsuji of NTT DATA SECURITY CORPORATION reported a possible XSS attack against SWAT, the Samba Web Administration Tool. The attack uses reflection to insert arbitrary content into the "change password" page. This patch fixes the reflection issue by not printing user-specified content on the website anymore. Signed-off-by: Kai Blin <kai@samba.org>
* talloc: Support PYTHON environment variable.Jelmer Vernooij2011-07-261-0/+1
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Tue Jul 26 22:21:30 CEST 2011 on sn-devel-104
* s3-build: Only define ldb3 when not in standalone build.Jelmer Vernooij2011-07-261-4/+3
| | | | | | | | This prevents errors about it by 'make SYMBOLCHECK=1' if there is a system ldb present. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Tue Jul 26 18:21:48 CEST 2011 on sn-devel-104
* shares: Remove dependencies on share modules.Jelmer Vernooij2011-07-261-1/+1
| | | | The build system will already pull these in - if necessary.
* s4:samba-tool: ldapcmp needs CredentialsOptionsDoubleStefan Metzmacher2011-07-261-0/+6
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Jul 26 17:09:32 CEST 2011 on sn-devel-104
* s3:lib change default share security access maskChristian Ambach2011-07-261-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | when there is no share SD set, the default share SD that is used e.g. for the output of sharesec -v defaults to a value that is not equivalent to the desired FULL access. This is a more or less a cosmetical follow-up for the patches in Bug #8201 that makes them more consumeable by printing FULL (that is what the user expects) instead of a bitmask in hexadecimal form. previous output: REVISION:1 OWNER:(NULL SID) GROUP:(NULL SID) ACL:S-1-1-0:ALLOWED/0/0x101f01ff with patch: REVISION:1 OWNER:(NULL SID) GROUP:(NULL SID) ACL:S-1-1-0:ALLOWED/0/FULL Autobuild-User: Christian Ambach <ambi@samba.org> Autobuild-Date: Tue Jul 26 15:57:55 CEST 2011 on sn-devel-104
* libsamba-util: Build in libbitmap.Jelmer Vernooij2011-07-263-11/+4
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Tue Jul 26 14:45:27 CEST 2011 on sn-devel-104
* policy: Rename to samba-policy to avoid name space clashes.Jelmer Vernooij2011-07-263-6/+6
|
* cli_composite: Lowercase name.Jelmer Vernooij2011-07-264-5/+5
|
* cli_smb_common: Lowercase name.Jelmer Vernooij2011-07-263-7/+7
|
* cli_cldap: Lowercase name.Jelmer Vernooij2011-07-266-6/+6
|
* cli_spools: Lowercase name.Jelmer Vernooij2011-07-261-5/+5
|
* s3: Fix MIT trustsVolker Lendecke2011-07-261-0/+5
| | | | | | | | | Winbind can't really cope with trusts that don't have a SID associated. This happens with external MIT trusts for example. This filters them out when sending the trust list from child to parent. Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Jul 26 11:39:53 CEST 2011 on sn-devel-104
* s4:kdc: canonicalize the principal if HDB_F_FOR_TGS_REQ is givenStefan Metzmacher2011-07-261-2/+7
| | | | | | | | | Windows seems to always canonicalize the principal in TGS replies. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Jul 26 03:25:06 CEST 2011 on sn-devel-104
* s4:heimdal_build: hdb.asn1 needs --sequence=HDB-Ext-KeySet --sequence=KeysStefan Metzmacher2011-07-261-0/+1
| | | | metze
* s4:heimdal: import lorikeet-heimdal-201107241840 (commit ↵Stefan Metzmacher2011-07-2642-115/+555
| | | | 0fdf11fa3cdb47df9f5393ebf36d9f5742243036)
* Fix typo Loggs -> Logs.Jeremy Allison2011-07-251-1/+1
| | | | | Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Mon Jul 25 23:49:04 CEST 2011 on sn-devel-104
* s3:docs: document the smbclient "tid" commandMichael Adam2011-07-251-0/+9
| | | | | Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Mon Jul 25 13:14:57 CEST 2011 on sn-devel-104
* s3:docs: document the smbclient "tdis" commandMichael Adam2011-07-251-0/+7
|