summaryrefslogtreecommitdiffstats
path: root/source3/include
Commit message (Collapse)AuthorAgeFilesLines
* Fix bug #7146 - Samba miss-parses authenticated RPC packets.Jeremy Allison2010-02-171-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Parts of the Samba RPC client and server code misinterpret authenticated packets. DCE authenticated packets actually look like this : +--------------------------+ |header | | ... frag_len (packet len)| | ... auth_len | +--------------------------+ | | | Data payload | ... .... | | +--------------------------+ | | | auth_pad_len bytes | +--------------------------+ | | | Auth footer | | auth_pad_len value | +--------------------------+ | | | Auth payload | | (auth_len bytes long) | +--------------------------+ That's right. The pad bytes come *before* the footer specifying how many pad bytes there are. In order to read this you must seek to the end of the packet and subtract the auth_len (in the packet header) and the auth footer length (a known value). The client and server code gets this right (mostly) in 3.0.x -> 3.4.x so long as the pad alignment is on an 8 byte boundary (there are some special cases in the code for this). Tridge discovered there are some (DRS replication) cases where on 64-bit machines where the pad alignment is on a 16-byte boundary. This breaks the existing S3 hand-optimized rpc code. This patch removes all the special cases in client and server code, and allows the pad alignment for generated packets to be specified by changing a constant in include/local.h (this doesn't affect received packets, the new code always handles them correctly whatever pad alignment is used). This patch also works correctly with rpcclient using sign+seal from the 3.4.x and 3.3.x builds (testing with 3.0.x and 3.2.x to follow) so even as a server it should still work with older libsmbclient and winbindd code. Jeremy
* s3-includes: enable TYPESAFE_QSORT() in s3Andrew Tridgell2010-02-141-0/+1
|
* s3: Remove unused comparison fn from "struct sorted_tree"Volker Lendecke2010-02-131-1/+1
|
* s3: Make adt_tree data definitions private to adt_tree.cVolker Lendecke2010-02-131-16/+1
|
* s3: SORTED_TREE -> struct sorted_treeVolker Lendecke2010-02-131-6/+6
|
* s3: TREE_NODE -> struct tree_nodeVolker Lendecke2010-02-131-5/+5
|
* s3:ctdb_conn: add ctdbd_conn_get_fd() to get the fd out of the ctdb connectionMichael Adam2010-02-121-0/+2
| | | | Michael
* s3: Add ctdb_conn_msg_ctx()Volker Lendecke2010-02-121-0/+1
|
* s3: Implement global locks in a g_lock tdbVolker Lendecke2010-02-122-0/+57
| | | | | | This is the basis to implement global locks in ctdb without depending on a shared file system. The initial goal is to make ctdb persistent transactions deterministic without too many timeouts.
* Remove lp_safe_widelinks() -> convert to just lp_widelinks. Suggestion from ↵Jeremy Allison2010-02-111-1/+1
| | | | | | | | Volker. Create widelinks_warning(int snum) to cover the message needed in make_connection. Jeremy.
* Introduce lp_safe_widelinks()Simo Sorce2010-02-111-0/+1
| | | | | This way we avoid any chance that a configuration reload may turn back on wide links when unix extensions are enabled.
* s3:nmbd: change "nmbd:bind explicit broadcast" into "nmbd bind explicit ↵Stefan Metzmacher2010-02-081-0/+1
| | | | | | broadcast" metze
* s3:nmbd: also listen explicit on the subnet broadcast addressesStefan Metzmacher2010-02-081-1/+4
| | | | | | | | | And send replies always via the unicast address of the subnet. This behavior is off by default (as before) and can be enabled with "nmbd:bind explicit broadcast = yes". metze
* s3:pdb_ldap: optimize ldapsam_alias_memberships() and cache ldap searches.Stefan Metzmacher2010-02-081-0/+5
| | | | | | | | | ldapsam_alias_memberships() does the same LDAP search twice, triggered via add_aliases() from create_local_nt_token(). This happens when no domain aliases are used. metze
* s3: Make cli_get_fs_volume_info() use cli_trans()Volker Lendecke2010-02-071-1/+2
|
* s3: Remove some unused codeVolker Lendecke2010-02-071-1/+0
|
* s3: Make guest_user_info() staticVolker Lendecke2010-02-051-1/+0
|
* Change uint_t to unsigned int in source3Matt Kraai2010-02-021-4/+4
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* Fix bug #7079 - cliconnect gets realm wrong with trusted domains.Jeremy Allison2010-01-301-0/+2
| | | | | | | | | | | Passing NULL as dest_realm for cli_session_setup_spnego() was always using our own realm (as for a NetBIOS name). Change this to look for the mapped realm using krb5_get_host_realm() if the destination machine name is a DNS name (contains a '.'). Could get fancier with DNS name detection (length, etc.) but this will do for now. Jeremy.
* Fix bug #7067 - Linux asynchronous IO (aio) can cause smbd to fail to ↵Jeremy Allison2010-01-261-1/+2
| | | | | | | | | respond to a read or write. Only works on Linux kernels 2.6.26 and above. Grants CAP_KILL capability to allow Linux threads under different euids to send signals to each other. Jeremy.
* s3-libsmbclient: Add smbc_setOptionUseCCache()Volker Lendecke2010-01-241-0/+11
| | | | | | | Can we enable this by default? This would be a change in behaviour, but this feature is just too cool for everyone to catch up in the apps. The patch would be
* s3: Add CLI_FULL_CONNECTION_USE_CCACHEVolker Lendecke2010-01-241-0/+1
|
* s3: Add -C (--use-ccache) to popt_common_credentialsVolker Lendecke2010-01-242-0/+4
|
* s3: Add ccache use to cli_session_setup_ntlmsspVolker Lendecke2010-01-241-0/+1
|
* s3: Add NTLMSSP_FEATURE_CCACHEVolker Lendecke2010-01-241-0/+2
| | | | Uses the winbind ccache to do authentication if asked to do so
* s3: Remove string_sid_tallocVolker Lendecke2010-01-231-1/+0
| | | | All but one call were pointless, so I think this API should go
* s3: Make "init_smb_request" static to process.cVolker Lendecke2010-01-211-4/+0
|
* s3: Move "yesno" to the only place where it is used: client.cVolker Lendecke2010-01-211-1/+0
|
* s3:smbldap: add smbldap_talloc_first_attribute()Stefan Metzmacher2010-01-141-0/+3
| | | | | | | metze Signed-off-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit c992127f8a96c37940a6d298c7c6859c47f83d9b)
* Fix bug #6876 - Delete of an object whose parent folder does not have delete ↵Jeremy Allison2010-01-121-0/+1
| | | | | | | | | | rights fails even if the delete right is set on the object. Final fix for the vfs_acl_xattr and vfs_acl_tdb code. Ensure we can delete a file even if the underlying POSIX permissions don't allow it, if the Windows permissions do. Jeremy.
* s3: Remove unused samr_make_sam_obj_sdVolker Lendecke2010-01-101-1/+0
|
* s3: Remove the typedef for "auth_serversupplied_info"Volker Lendecke2010-01-102-10/+12
|
* s3: Remove the typedef for "auth_usersupplied_info"Volker Lendecke2010-01-102-11/+11
|
* s3: Factor password_in_history() out of check_passwd_history()Volker Lendecke2010-01-071-0/+3
|
* s3:lib/time: remoce null_mtime() - use null_time()Björn Jacke2010-01-071-1/+0
|
* s3:lib/time: remove unused nt_time_equalsBjörn Jacke2010-01-071-1/+0
| | | | we have nt_time_equal doing the same in lib/util/
* s3: Fix infinite loop in NCACN_IP_TCP asa there is no timeout. Assume ↵Bo Yang2010-01-061-0/+5
| | | | | | lsa_pipe_tcp is ok but network is down, then send request is ok, but select() on writeable fds loops forever since there is no response. Signed-off-by: Bo Yang <boyang@samba.org>
* s3: Happy New Year 2010Stefan Metzmacher2010-01-041-1/+1
| | | | metze
* s3: Convert cli_ulogoff to the async APIVolker Lendecke2010-01-031-1/+5
|
* s3: Convert cli_tdis to the async APIVolker Lendecke2010-01-031-1/+5
|
* s3:ntlmssp: change get_challange() to return NTSTATUSStefan Metzmacher2009-12-291-2/+2
| | | | metze
* s3:ntlmssp: remove unused ntlmssp_stored_response()Stefan Metzmacher2009-12-292-7/+0
| | | | metze
* s3:ntlmssp: remove unused ref_count from ntlmssp_stateStefan Metzmacher2009-12-291-1/+0
| | | | metze
* s3:ntlmssp: fix whitespace in ntlmssp.hStefan Metzmacher2009-12-291-1/+1
| | | | metze
* s3:ntlmssp: fix spellingStefan Metzmacher2009-12-291-1/+1
| | | | metze
* s3:ntlmssp: rename NTLM_MESSAGE_TYPE into ntlmssp_message_typeStefan Metzmacher2009-12-291-1/+1
| | | | metze
* s3: Remove unused delete_negative_conn_cache()Volker Lendecke2009-12-241-1/+0
|
* s3: Remove unused flush_negative_conn_cache()Volker Lendecke2009-12-241-1/+0
|
* The posix acl version of set_nt_acl() could set the stat_exJeremy Allison2009-12-231-0/+4
| | | | | | | | struct in the fsp->fsp_name pointer incorrectly for a directory. Fix this. Make map_canon_ace_perms() public. Jeremy.
* s3:ntlmssp: only include ntlmssp.h where actually neededAndrew Bartlett2009-12-221-1/+3
| | | | Andrew Bartlett
generated by cgit (git 2.34.1) at 2025-09-25 18:37:25 +0000