summaryrefslogtreecommitdiffstats
path: root/source3
Commit message (Collapse)AuthorAgeFilesLines
...
* s3:vfs_gpfs: Check softquota before gracetimeChristof Schmitt2012-07-111-1/+2
| | | | | | | gpfs_quotactl can return a non-zero softquota gracetime even when no softquota has been set. This could lead to "disk full" being reported to a client. The easiest fix is to check for a valid softquota before checking the softquota gracetime.
* build: fix some indentation (tabs/vs spaces) in source3/wscriptMichael Adam2012-07-111-2/+2
| | | | | Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Wed Jul 11 19:37:12 CEST 2012 on sn-devel-104
* build: fix waf checks for seteuid on non-Linux platformsMichael Adam2012-07-111-5/+4
| | | | | | An indentation error had linux-specific checks called on non-linux with the effect that "#define USE_LINUX_THREAD_CREDENTIALS 1" was effective.
* Add in the threaded async open engine.Jeremy Allison2012-07-111-0/+393
| | | | | | | | | | | | | | | | | Fixes all issues raised originally. This code will only do threaded opens with thread-specific credentials (Linux for now) and changes credentials before doing the call. Also only fires on O_CREAT|O_EXCL so will only create new files, never open old ones async. Volker, this is isolated enough that it shouldn't prevent you from refactoring it into a new module when the aio pread/pwrite code is moved into the default aio path. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Wed Jul 11 08:04:56 CEST 2012 on sn-devel-104
* Move set_thread_credentials_permanently() to set_thread_credentials()Jeremy Allison2012-07-112-16/+16
| | | | | | | | | | as we need to keep the saved set uid/gid otherwise there is an interaction with open[at]() and NO_ATIME returning EPERM. As this is meant for threaded code inside the process we don't need to do an irreverisble change anyway. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Wed Jul 11 03:54:00 CEST 2012 on sn-devel-104
* Fix typo we've had for a long time in set_re_uid() in the USE_SETRESUID case.Jeremy Allison2012-07-101-1/+1
| | | | | | | | | We only set the real euid, not the effective one. This is not a security issue as this is *only* used in the quota code, and only between code that brackets it with save_re_uid()/restore_re_uid(), Also this is not used on most platforms (we use USE_SETREUID by preference) but it's better to have this right. Bug to follow to get this fixed in 3.6.next and 3.5.next.
* Cope with a (non-security) open race we've had for ever as NTCreateX isn't ↵Jeremy Allison2012-07-101-0/+25
| | | | | | | | | | | | | | | | atomic on POSIX. On open without create, the file did exist, but some other (local or NFS) process either renamed/unlinked and re-created the file with different dev/ino after we walked the path, but before we did the open. We could retry the open but it's a rare enough case it's easier to just fail the open to prevent creating any problems in the open file db having the wrong dev/ino key. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Jul 10 21:57:33 CEST 2012 on sn-devel-104
* Now we have a guaranteed indication of a file being created, use it to set ↵Jeremy Allison2012-07-101-12/+8
| | | | the create disposition correctly.
* Add function fd_open_atomic() which uses O_CREAT|O_EXCL to return a ↵Jeremy Allison2012-07-101-4/+107
| | | | guaranteed indication of creation of a new file.
* Simplify the logic in open_file() some more.Jeremy Allison2012-07-101-48/+36
| | | | | | | | | | Move the inheritance work into the if block where we created the file. We can never have created the file (and thus need no inheritance) for a stat-open. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Jul 10 03:30:22 CEST 2012 on sn-devel-104
* Simplify the logic in open_file().Jeremy Allison2012-07-091-22/+15
| | | | | | Move the fstat call into the block which opens a file descriptor. Remove the stat() call in the stat-open case. We already failed the open if !file_existed.
* Use new common function.Jeremy Allison2012-07-091-1/+1
|
* Make check_same_stat() and check_same_dev_ino() common functions.Jeremy Allison2012-07-094-31/+33
|
* Factor out check_same_dev_ino() from check_same_stat() so it can be called ↵Jeremy Allison2012-07-091-2/+15
| | | | separately.
* s3: Fix Coverity ID 709470 Uninitialized scalar variableVolker Lendecke2012-07-061-1/+1
| | | | | | | Signed-off-by: Michael Adam <obnox@samba.org> Autobuild-User(master): Michael Adam <obnox@samba.org> Autobuild-Date(master): Fri Jul 6 18:46:06 CEST 2012 on sn-devel-104
* auth: Common function for retrieving PAC_LOGIN_INFO from PACChristof Schmitt2012-07-063-78/+7
| | | | | | | | Several functions use the same logic as kerberos_pac_logon_info. Move kerberos_pac_logon_info to common code and reuse it to remove the code duplication. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s3-lsarpc: Enforce a secure connection for LookupSids3 and LookupNames4.Andreas Schneider2012-07-061-8/+14
| | | | http://thread.gmane.org/gmane.network.protocol.cifs.general/291
* s3-lsarpc: Restrict lsa_LookupNames4 to ncacn_ip_tcp connections.Andreas Schneider2012-07-061-12/+23
| | | | See MS-LAT, Section 2.1 Transport.
* s3-lsarpc: Restrict lsa_LookupSids3 to ncacn_ip_tcp connections.Andreas Schneider2012-07-061-12/+23
| | | | See MS-LAT, Section 2.1 Transport.
* s3-lsarpc: Restrict the transport for ncacn_np functions.Andreas Schneider2012-07-061-0/+42
| | | | See MS-LAT, section 2.1 Transport.
* s3-rpc: Return the correct ntstatus depending on the transport.Andreas Schneider2012-07-061-3/+15
|
* s3-rpc_server: Make it possible to use more rpc exceptions.Andreas Schneider2012-07-0618-376/+348
|
* s3-selftest: Run lsa tests over np and tcpip.Andreas Schneider2012-07-061-0/+5
|
* s3: evaluate MNT_QUOTA and MNT_RDONLY in statvfs also on darwinBjörn Jacke2012-07-051-1/+1
|
* s3:registry: untangle assignment from check in reg_enumkey()Michael Adam2012-07-051-1/+2
| | | | | Autobuild-User(master): Michael Adam <obnox@samba.org> Autobuild-Date(master): Thu Jul 5 17:57:16 CEST 2012 on sn-devel-104
* s3:registry: untangle assignment from check in reg_enumvalue()Michael Adam2012-07-051-1/+2
|
* s3: if we know a file is immutable, report it to be readonlyBjörn Jacke2012-07-041-0/+6
| | | | on *BSD we get the immutable flag via st_flags, we should use that if possible.
* Add waf/configure tests for openat.Jeremy Allison2012-07-042-0/+23
| | | | | Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Wed Jul 4 02:37:59 CEST 2012 on sn-devel-104
* Move copy_unix_token() from locking/locking.c to lib/util.c.Jeremy Allison2012-07-033-29/+31
| | | | Make public.
* Add function set_thread_credentials_permanently(). Panic if fail.Jeremy Allison2012-07-032-0/+52
| | | | Not yet used.
* Allow init_aio_threadpool() to be setup for different threadpool handles ↵Jeremy Allison2012-07-031-10/+19
| | | | with different completion functions.
* s3-smbd: Remove deprecated 'share modes' option.Andreas Schneider2012-07-033-14/+0
|
* s3-passdb: Remove obsolte ldapsam_compat support.Andreas Schneider2012-07-037-187/+6
|
* s3-printing: Remove deprecated lp_printer_admin().Andreas Schneider2012-07-034-64/+14
|
* s3-winbind: Remove obsolte idmap_adex.Andreas Schneider2012-07-0310-3795/+0
|
* s3: Fix Coverity ID 709217 Dereference after null checkVolker Lendecke2012-07-031-2/+10
| | | | | | | | | | A few lines before we did check for x != NULL. I think this might fix a potential remote crash. Signed-off-by: Michael Adam <obnox@samba.org> Autobuild-User(master): Michael Adam <obnox@samba.org> Autobuild-Date(master): Tue Jul 3 15:30:17 CEST 2012 on sn-devel-104
* s3: Fix Coverity ID 709218 Uninitialized pointer readVolker Lendecke2012-07-031-0/+5
| | | | Signed-off-by: Michael Adam <obnox@samba.org>
* s3:vfs: use smbXsrv_open instead of smbXsrv_open0 in files_structMichael Adam2012-07-031-1/+1
|
* s3:vfs: use smbXsrv_tcon instead of smbXsrv_tcon0 in connection_struct.Michael Adam2012-07-031-1/+1
|
* s3:smb: include "smbXsrv.h" before "vfs.h"Michael Adam2012-07-031-0/+6
| | | | | | This is still needed as long as smbXsrv_open/_tcon are referenced in files_struct and connection_struct respectively. Eventually, these structures should not have a backlink to the smb world any more.
* s3:smbd: Include smbXsrv.h before vfs.h (in smbd.h) so that the smbXsrv ↵Michael Adam2012-07-031-1/+1
| | | | | | | | structures are available This is currently needed for files_struct and connection_struct that contain backlinks to smbXsrv_open and smbXsrv_tcon, respectively. Finally, these backlinks to the smb level structures should be removed.
* s3:smbd:smb2: fix prototype of make_connection_smb2() to use smbXsrv_tconMichael Adam2012-07-031-2/+1
| | | | instead of internal smbXsrv_tcon0.
* s3:smbd: include smbXsrv.h before smbd/proto.h to have the smbXsrv_ structs ↵Michael Adam2012-07-031-0/+1
| | | | available
* s3:smbd:smb2: change smbXsrv_tcon0 to smbXsrv_tcon in ↵Michael Adam2012-07-031-1/+1
| | | | | | | smbd_smb2_request_check_tcon() smbXsrv_tcon0 is the internal name for the (current) version0 of the structure. Externally, only smbXsrv_tcon should be used.
* s3:smbd:smb2: change smbXsrv_session0 to smbXsrv_session in struct user_struct.Michael Adam2012-07-031-1/+1
| | | | | smbXsrv_session0 is the internal name of (current) version 0 of the structure. Externally, only smbXsrv_session should be used.
* Fix the waf/autoconf builds to detect correctly the 32-bit or 64-bit syscall ↵Jeremy Allison2012-07-032-34/+134
| | | | | | | ABI on Linux. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Jul 3 05:32:21 CEST 2012 on sn-devel-104
* auth: Remove .get_challenge (only used for security=server)Andrew Bartlett2012-07-036-140/+6
| | | | | | | | | | | | | With NTLMSSP, for NTLM2 we need to be able to set the effective challenge, so if we ever did use a module that needed this functionlity, we would downgrade to just NTLM. Now that security=server has been removed, we have no such module. This will make it easier to make the auth subsystem async, as we will not need to consider making .get_challenge async. Andrew Bartlett
* s3-libpidfile: fix check for running process.Björn Baumbach2012-07-021-1/+1
| | | | | | | | | | Call pidfile_pid() with process name instead of pid file name. pidfile_pid does create the pid file name by itself. Signed-off-by: Michael Adam <obnox@samba.org> Autobuild-User(master): Michael Adam <obnox@samba.org> Autobuild-Date(master): Mon Jul 2 19:19:21 CEST 2012 on sn-devel-104
* s3-libpidfile: some more debug outputBjörn Baumbach2012-07-021-0/+6
| | | | Signed-off-by: Michael Adam <obnox@samba.org>
* Disable selections of USE_LINUX_THREAD_CREDENTIALS until we have specificJeremy Allison2012-07-022-27/+35
| | | | | | | 32-bit and 64-bit versions. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Mon Jul 2 03:02:47 CEST 2012 on sn-devel-104