summaryrefslogtreecommitdiffstats
path: root/source3
Commit message (Collapse)AuthorAgeFilesLines
...
* s3-gse Make gse available as a gensec client moduleAndrew Bartlett2012-01-182-1/+3
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-build: Rework object lists to allow gse gensec moduleAndrew Bartlett2012-01-183-73/+40
| | | | | | | | This also allows the spnego_parse_krb5_wrap() function to be shared. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-gse: Add gensec wrapper for gse GSSAPI clientAndrew Bartlett2012-01-182-0/+441
| | | | | | | | | This brings in part of the s4 gensec_gssapi as the boilerplate for the new module. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-auth Match session setup handling of krb5, store the PACAndrew Bartlett2012-01-181-1/+4
| | | | | | | | | This will allow non-krb5 services to get the full user groups without need to do an online s4u2self. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-auth Add auth hook for PAC parsingAndrew Bartlett2012-01-181-2/+128
| | | | | | | | | | | This will allow gensec_gse to parse the PAC. This is a copy from source3/rpc_server/dcesrv_generic.c to preserve behaviour. A future commit will enable the samlogon cache. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3: Use lock_order for setting the db priorityVolker Lendecke2012-01-181-0/+18
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Wed Jan 18 16:21:52 CET 2012 on sn-devel-104
* s3: Pass down lock_order to db_open_ctdbVolker Lendecke2012-01-183-4/+10
|
* Revert "Fix bug #8175 - smbd deadlock."Volker Lendecke2012-01-181-68/+26
| | | | This reverts commit 5a2b5b6cfed74e0e9c2965525995f64cdad7b7c9.
* s3: Change locking order between brlock and lockingVolker Lendecke2012-01-181-8/+58
| | | | | | | | But 8175 was fixed in a way that brlock.tdb was always locked before locking.tdb. This patch fixes the bug in a different way. locking.tdb is the central tdb for files and should always be locked first. This patch solves the problem by postponing the level2 break messages, which are async anyway.
* s3: Enforce a lock order in dbwrapVolker Lendecke2012-01-184-1/+85
| | | | | | | This makes sure we do not deadlock from doing two dbwrap_fetch_locked in two processes in different orders. At open time, we assign a strict order to all databases. lock_order 1 will be locked first, lock_order 2 second. No two records of the same lock order may be locked at the same time.
* s3: Add a "lock_order" argument to db_openVolker Lendecke2012-01-1830-40/+97
| | | | | | | This will be used to enforce a lock hierarchy between the databases. We have seen deadlocks between locking.tdb, brlock.tdb, serverid.tdb and notify*.tdb. These should be fixed by refusing a dbwrap_fetch_locked that does not follow a defined lock hierarchy.
* s3-passdb: trying to decouple passdb and secrets a little.Günther Deschner2012-01-188-105/+173
| | | | | | | Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Jan 18 14:46:18 CET 2012 on sn-devel-104
* s3: Fix bug 8695Volker Lendecke2012-01-171-0/+1
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Jan 17 18:55:01 CET 2012 on sn-devel-104
* s3:lib/messages: remove unused messaging_event_context()Stefan Metzmacher2012-01-172-6/+0
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Jan 17 09:45:30 CET 2012 on sn-devel-104
* s3:smbcontrol: avoid using messaging_event_context()Stefan Metzmacher2012-01-171-10/+7
| | | | metze
* s3:smbcontrol: pass tevent_context down to wait_replies()Stefan Metzmacher2012-01-171-10/+11
| | | | metze
* s3:smbcontrol: pass tevent_context down to subcommandsStefan Metzmacher2012-01-171-38/+69
| | | | metze
* s3:printing: avoid messaging_event_context() in print_queue_housekeeping()Stefan Metzmacher2012-01-171-6/+21
| | | | metze
* s3-install: Don't let MANDIR and SRCDIR be overwrittenVolker Lendecke2012-01-161-1/+2
| | | | | | | In installman.sh, we get them via cmd line args Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Mon Jan 16 18:55:40 CET 2012 on sn-devel-104
* s3:selftest: rpcclient doesn't support smb2Stefan Metzmacher2012-01-161-29/+27
| | | | metze
* s3: ADS support is needed for dns updatesVolker Lendecke2012-01-141-1/+1
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Sat Jan 14 15:32:15 CET 2012 on sn-devel-104
* s3: Fix the talloc hierarchy in fetch_share_mode_unlockedVolker Lendecke2012-01-131-1/+1
| | | | | | | Thanks, metze for noticing! Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Fri Jan 13 13:16:44 CET 2012 on sn-devel-104
* s3-waf: check for KRB5_PDU_NONE as in the autoconf build.Günther Deschner2012-01-131-0/+1
| | | | | | | Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Fri Jan 13 11:15:35 CET 2012 on sn-devel-104
* s3-autoconf: fix the build of the pdb_ldap shared module in autoconf build ↵Günther Deschner2012-01-132-5/+4
| | | | | | as well. Guenther
* s3-waf: fix compile of pdb_ldap as shared module by moving ldap schema ↵Günther Deschner2012-01-132-2/+3
| | | | | | | | | helpers to libpdb.so These helpers are used in other parts of Samba as well (like in idmap and in the net provision code). Guenther
* s3-waf: also check for gsskrb5_extract_authz_data_from_sec_context() duringGünther Deschner2012-01-131-1/+2
| | | | | | configure. Guenther
* s3:build: add auth/gensec/spnego.oStefan Metzmacher2012-01-132-5/+9
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Jan 13 06:32:30 CET 2012 on sn-devel-104
* s3-selftest The krb5 encrypted CIFS test was wrongAndrew Bartlett2012-01-131-1/+1
| | | | | | | | | | Sadly this fails in the test environement for now. It needs a /etc/krb5.keytab which we do not provide. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri Jan 13 04:57:22 CET 2012 on sn-devel-104
* Add comments to all functions (to help me understand it better).Jeremy Allison2012-01-132-0/+32
| | | | | Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Jan 13 01:35:03 CET 2012 on sn-devel-104
* s3: Fix nested get_share_mode_lock callsVolker Lendecke2012-01-121-5/+57
| | | | | | | This forces us to only do one real get_share_mode_lock call and share the data between the nested get_share_mode_lock calls. Signed-off-by: Jeremy Allison <jra@samba.org>
* s3: Move the share_mode_lock handling to its own fileVolker Lendecke2012-01-124-417/+465
| | | | Signed-off-by: Jeremy Allison <jra@samba.org>
* s3: Put an indirection layer into share_mode_lockVolker Lendecke2012-01-129-173/+193
| | | | Signed-off-by: Jeremy Allison <jra@samba.org>
* s3: Introduce get_share_mode_lock_fresh()Volker Lendecke2012-01-127-41/+40
| | | | | | | | This slightly simplifies the code path for all callers which assume that a share mode exists already. Only the callers in open_file_ntcreate and open_directory will ever create new share modes. Signed-off-by: Jeremy Allison <jra@samba.org>
* s3: Replace fill_share_mode_lock()Volker Lendecke2012-01-121-84/+67
| | | | | | | | This replaces fill_share_mode_lock() with the two routines fresh_share_mode_lock() and parse_share_modes(). This lifts the decision whether a share mode already existed on level up. Signed-off-by: Jeremy Allison <jra@samba.org>
* s3-waf: auth_netlogond depends on tldap.Andreas Schneider2012-01-121-0/+1
| | | | | Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Thu Jan 12 17:33:10 CET 2012 on sn-devel-104
* s3-waf: link SECRETS3 only against samba3util.Andreas Schneider2012-01-121-1/+1
|
* s3-waf: Create a smaller samba3util subsystem.Andreas Schneider2012-01-121-7/+18
|
* s3: Split a line with 1 statementsVolker Lendecke2012-01-121-1/+2
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Thu Jan 12 13:10:19 CET 2012 on sn-devel-104
* s3:smbd: explicitly ask for GENSEC_FEATURE_UNIX_TOKENStefan Metzmacher2012-01-122-0/+6
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Jan 12 11:22:53 CET 2012 on sn-devel-104
* Ensure we always free aio_ex on all error paths by moving the TALLOC_FREEJeremy Allison2012-01-123-3/+4
| | | | | | | call out of smbd_aio_complete_aio_ex() and into the caller. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Thu Jan 12 03:10:52 CET 2012 on sn-devel-104
* First part of fix for bug #8673 - NT ACL issue.Jeremy Allison2012-01-111-18/+31
| | | | | Simplify the logic in the unlink/rmdir calls - makes it readable (and correct).
* s3-rpcclient: add deldriverex flags argumentDavid Disseldorp2012-01-111-7/+7
| | | | | | | | | | | | | | | | The spoolss DeletePrinterDriverEx command offers three flags for controlling how associated files and other versions of the driver are effected: DPD_DELETE_UNUSED_FILES (1), DPD_DELETE_SPECIFIC_VERSION (2) and DPD_DELETE_ALL_FILES (4). This commit adds an optional numeric flags argument to the rpcclient deldriverex command. Signed-off-by: David Disseldorp <ddiss@samba.org> Signed-off-by: Andreas Schneider <asn@samba.org> Autobuild-User: David Disseldorp <ddiss@samba.org> Autobuild-Date: Wed Jan 11 14:39:35 CET 2012 on sn-devel-104
* spoolss: fix DPD_DELETE_ALL_FILES error returnDavid Disseldorp2012-01-111-2/+1
| | | | | | | | | If DeletePrinterDriverEx is called with DPD_DELETE_ALL_FILES and files assigned to the to-be-deleted driver overlap with other drivers then an error is returned. Change the error code here to match Windows 2k8r2. Signed-off-by: David Disseldorp <ddiss@samba.org> Signed-off-by: Andreas Schneider <asn@samba.org>
* s3-librpc Supply target service and server to spnego_generic_init_client()Andrew Bartlett2012-01-113-0/+19
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc: Rename spnego_ntlmssp_init_client and make genericAndrew Bartlett2012-01-113-5/+17
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-libsmb: split out auth_generic client functions into auth_generic.cAndrew Bartlett2012-01-115-129/+164
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc: rename get_ntlmssp_auth_footer to be more genericAndrew Bartlett2012-01-111-5/+5
| | | | | | | | This can handle any gensec auth type now. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc Set target service and server into gensecAndrew Bartlett2012-01-111-0/+10
| | | | | | | | This will allow cli_rpc_pipe_open_generic_auth() to handle kerberos mechanisms. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc Rename and rework cli_rpc_pipe_open_ntlmssp() to be genericAndrew Bartlett2012-01-115-48/+61
| | | | | | | | | | This also includes renaming the helper function rpccli_ntlmssp_bind_data, and allows this function to operate on any gensec-supplied auth type. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc Rename create_ntlmssp_auth_rpc_bind_req() to be more genericAndrew Bartlett2012-01-111-6/+3
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>