summaryrefslogtreecommitdiffstats
path: root/source3
Commit message (Collapse)AuthorAgeFilesLines
...
* s3:idmap_autorid: move HWM initialization into a functionChristian Ambach2011-10-211-17/+27
| | | | | we will need some more HWM soon, so move out initialization and optimize the logic using the new interface of dbwrap_fetch_uint32
* s3:idmap_autorid: use strings as parameter for range allocatorChristian Ambach2011-10-211-14/+14
| | | | | this prepares for allocation of non-domain ranges that cannot be expressed by a SID (e.g. an allocation pool)
* s3:winbindd/idmap make idmap modules loadable againChristian Ambach2011-10-216-6/+6
| | | | | commit 355b5e3a831415d9bef97 changed the module system to expect 'samba_init_module' as fixed initializer function
* Revert "s3:idmap/autorid add a small alloc pool to autorid"Christian Ambach2011-10-211-61/+0
| | | | | | | | | | This reverts commit 0aa558718ad7427ee8b02046da73eea1838a5a32. just having 500 uid/gids values is not good enough for users using local users and groups in the order of thousands better solution which will use a complete range for allocated uids/gids will come next.
* s3-waf: only compile common.c in netapi examples code once.Günther Deschner2011-10-211-2/+8
| | | | Guenther
* s3-netapi: use NetApiBufferAllocate() for returned buffer in getdc calls.Günther Deschner2011-10-211-2/+30
| | | | Guenther
* s3-netapi: fix missing include in examples code.Günther Deschner2011-10-211-0/+2
| | | | Guenther
* libcli/smb: move smb_seal.c to the toplevelStefan Metzmacher2011-10-218-506/+7
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Oct 21 10:22:39 CEST 2011 on sn-devel-104
* s3-ntlmssp Remove references to auth_ntlmssp_context from the rpc codeAndrew Bartlett2011-10-217-74/+75
| | | | | | | | | We always dereferenced auth_ntlmssp_state->gensec_security, so now we do not bother passing around the whole auth_ntlmssp_state. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-seal Remove struct smb_srv_trans_enc_ctxAndrew Bartlett2011-10-213-104/+54
| | | | | | | | | | | | | This structure added no value, particularly after the move to gensec. It was added at a time when auth_ntlmssp_state was not available in the client. This changed a while back (the wrapper was extended with client calls), and the move to gensec again reinforced that we do not need the extra complexity. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp Remove references to auth_ntlmssp_context from the smb sealing codeAndrew Bartlett2011-10-214-46/+54
| | | | | | Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp Remove auth_ntlmssp_session_key()Andrew Bartlett2011-10-214-17/+12
| | | | | | | | We now just call the gensec_session_key() directly. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp Remove auth_ntlmssp_want_feature()Andrew Bartlett2011-10-219-31/+17
| | | | | | | | We now just call the gensec_want_feature() directly. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-seal use gensec_[un]wrap() instead of gensec_[un]seal_packet()Andrew Bartlett2011-10-211-54/+41
| | | | | | | | | | | | | This should not make a difference for NTLMSSP as it still calls the low level ntlmssp_[un]seal_packet() functions with the same input parameters. If we convert the gss-api/krb5 based code to gensec we have to use gensec_[un]wrap() as the wire format is different compared to gensec_[un]seal_packet() there. Andrew Bartlett Split from another commit by Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp use gensec_{seal,unseal,sign,check}_packetAndrew Bartlett2011-10-215-125/+55
| | | | | | | | This avoids the indirection via the auth_ntlmsssp wrapper functions. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp Remove auth_ntlmssp_negotiated_sign() and ↵Andrew Bartlett2011-10-214-16/+4
| | | | | | | | | | auth_ntlmssp_negotiated_seal() We now just call the gensec_have_feature() directly. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp Remove auth_ntlmssp_update wrapperAndrew Bartlett2011-10-2110-47/+41
| | | | | | | | We now just call gensec_update directly. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-auth remove auth_ntlmssp_session_info()Andrew Bartlett2011-10-215-23/+11
| | | | | | | | Instead, call gensec_session_info() directly. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3:smbd/seal: pass talloc_tos() auth_ntlmssp_update(), because we free a few ↵Stefan Metzmacher2011-10-211-1/+1
| | | | | | lines later metze
* s3:libsmb/smb_seal: always use SAFE_FREE(buf) in common_free_enc_buffer()Stefan Metzmacher2011-10-211-14/+1
| | | | | | | There's no need to do gss-api specific stuff, the buffer is always malloc'ed. metze
* s3:libsmb/smb_seal: use plain malloc() in common_ntlm_encrypt_buffer()Stefan Metzmacher2011-10-211-2/+7
| | | | metze
* s3:libsmb/smb_seal: avoid ads_errstr() dependency and use gssapi_error_string()Stefan Metzmacher2011-10-211-9/+28
| | | | metze
* s3:libsmb/smb_seal: make use of common [_]smb_[set]len_nbt() macrosStefan Metzmacher2011-10-211-11/+11
| | | | metze
* s3:include: make smb_setlen() a macroStefan Metzmacher2011-10-213-15/+1
| | | | metze
* libcli/smb: move some common defines to smb_constants.hStefan Metzmacher2011-10-211-27/+0
| | | | metze
* build: compile (but do not install) netapi examplesAndrew Bartlett2011-10-212-0/+65
| | | | | | | | | The only example not yet built is the GTK domain join gui. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri Oct 21 01:31:55 CEST 2011 on sn-devel-104
* s3:Makefile: make DSO_EXPORTS_CMD more portable (#8531)Björn Jacke2011-10-201-1/+1
| | | | | | | | | It sems like every not completely trivial sed expression should be tested with Solaris' sed. Its regexp engine is way more limited than the one of GNU sed. Thanks to Michael Pelletier for finding this! This fixes bug #8531 Autobuild-User: Björn Jacke <bj@sernet.de> Autobuild-Date: Thu Oct 20 23:15:05 CEST 2011 on sn-devel-104
* Refactor to create check_parent_access() which can be called for file ↵Jeremy Allison2011-10-201-23/+64
| | | | | | | creation too. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Thu Oct 20 20:29:22 CEST 2011 on sn-devel-104
* Make mkdir_internal() check the parent ACL for SEC_DIR_ADD_SUBDIR rights.Jeremy Allison2011-10-201-2/+33
|
* s3-netapi Compile (but do not install) netapi testsAndrew Bartlett2011-10-202-1/+7
|
* s3:libsmb/async_smb: in cli_state_notify_pending() we always disconnectStefan Metzmacher2011-10-201-7/+5
| | | | | | | | | So we should always set state->mid = 0. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Oct 20 11:34:23 CEST 2011 on sn-devel-104
* Fix error return to be NT_STATUS_NOT_A_DIRECTORY.Jeremy Allison2011-10-201-2/+2
|
* Make use of the "dir_exists" we already have on directory open.Jeremy Allison2011-10-201-8/+28
|
* s3-waf: make sure we always compile (not install) our libsmbclient testcode.Günther Deschner2011-10-191-0/+1
| | | | | | | Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Oct 19 20:42:52 CEST 2011 on sn-devel-104
* s3:libsmb/smb_seal: move smb_set_enclen() to smb_seal.c and make it static thereStefan Metzmacher2011-10-193-14/+13
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Oct 19 19:06:35 CEST 2011 on sn-devel-104
* s3:libsmb/smb_seal: s/uint16/uint16_tStefan Metzmacher2011-10-192-5/+5
| | | | metze
* s3:include: move smb_seal.c prototypes to smb_crypt.hStefan Metzmacher2011-10-193-9/+10
| | | | metze
* s3:libsmb/smb_seal: make common_ntlm_[en|de]crypt_buffer staticStefan Metzmacher2011-10-192-7/+2
| | | | metze
* s3:include: use smb_[set]len_[nbt|tcp]() macrosStefan Metzmacher2011-10-191-4/+4
| | | | metze
* s3: Remove duplicate fsctl function definitionsDavid Disseldorp2011-10-194-52/+0
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3: Avoid a winbind 100% cpu loopVolker Lendecke2011-10-191-0/+8
| | | | | | | | | | | | When a DC goes down hard, winbind can end up in a 100% CPU loop. The next (small) RPC request to the DC ends up as a trans2 request. If the connection goes down, we end up trying to discard the request via the loop in cli_state_notify_pending(). Because this is a trans2 request, cli_smb_req_unset_pending will not kick in. Thus the pending array will always remain at length 1. Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Wed Oct 19 01:39:35 CEST 2011 on sn-devel-104
* vfs_netatalk should be using strstr_m, not strstr to find .AppleDouble paths.Jeremy Allison2011-10-191-5/+5
| | | | | Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Oct 19 00:05:45 CEST 2011 on sn-devel-104
* The last argument to atalk_build_paths() is always false, remove it.Jeremy Allison2011-10-181-12/+9
|
* s3-util: dbwrap_tool: add fetch fuctions for hex and stringBjörn Baumbach2011-10-181-0/+61
| | | | Signed-off-by: Michael Adam <obnox@samba.org>
* s3-util: dbwrap_tool: add store hex functionBjörn Baumbach2011-10-181-3/+43
| | | | | | Allows the user to store hex blobs in a tdb. Signed-off-by: Michael Adam <obnox@samba.org>
* pdb-interface: Do not use unid_t hereSimo Sorce2011-10-188-52/+59
| | | | | | | | This interface needs to be publicly available, unid_t here is not really useful and makes it harder to use it as unid_t is not a public union. Autobuild-User: Simo Sorce <idra@samba.org> Autobuild-Date: Tue Oct 18 20:57:16 CEST 2011 on sn-devel-104
* s3-auth move the s3 auth context onto gensec_ntlmssp once we startAndrew Bartlett2011-10-181-2/+2
| | | | | | | | | We do not need it on the auth_ntlmssp_state any longer. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 18 13:54:36 CEST 2011 on sn-devel-104
* s3-libsmb Use a gensec module to provide the ntlmssp client in ntlmssp_wrap.cAndrew Bartlett2011-10-182-85/+198
| | | | | | This removes the need to have if (ans->gensec_security) everywhere. Andrew Bartlett
* s3-ntlmssp split auth_ntlmssp_client_start() into two partsAndrew Bartlett2011-10-185-25/+34
| | | | | | | | | | | This will allow it to be a wrapper around a gensec module, which requires that they options be set on a context, but before the mechanism is started. This also simplfies the callers, by moving the lp_*() calls into one place. Andrew Bartlett
* s3-rpc_client remove cli_auth_ntlmssp_data_destructorAndrew Bartlett2011-10-181-9/+1
| | | | | | | | | This can be an ordinary talloc child without causing any problem. This seems to have been inherited from a time when ntlmssp_client_start() returned malloc() based memory. Andrew Bartlett