summaryrefslogtreecommitdiffstats
path: root/source3
Commit message (Collapse)AuthorAgeFilesLines
...
* ntlm_auth: use data_blob_talloc() to allocate session keyKai Blin2009-11-211-2/+2
| | | | | Thanks to Shibu Piriyath <shibunair80@ymail.com> for spotting the issue.
* Fix logic bug where high bits tests was beingJeremy Allison2009-11-201-1/+1
| | | | | | | | done on both Windows and POSIX mkdirs instead of only on Windows mkdir (as intended). The variable "file_attributes" had already had FILE_FLAG_POSIX_SEMANTICS removed above in the function if it had already been set. Jeremy.
* s3:fix endianness bug in dbwrap_change_int32_atomic() (bug #6901)Michael Adam2009-11-211-4/+6
| | | | Michael
* s3:fix endianness bug in dbwrap_change_uint32_atomic() (bug #6901)Michael Adam2009-11-211-4/+6
| | | | Michael
* s3-build: delete more object files for "make clean".Günther Deschner2009-11-201-2/+3
| | | | Guenther
* s3:idmap_ldap: trim the " chars from the location string in idmap_ldap_db_initMichael Adam2009-11-201-0/+2
| | | | | | | | | When idmap backend is specified as idmap backend = ldap:"ldap://server1 ldap://server2" then currently "ldap://server1 ldap://server2" was passed to ldap_initialize including the quotes, leading to an ldap error. Michael
* s3:idmap_ldap: trim the " chars from the location string in ↵Michael Adam2009-11-201-0/+2
| | | | | | | | | | | idmap_ldap_alloc_init When idmap alloc backend is specified as idmap alloc backend = ldap:"ldap://server1 ldap://server2" then currently "ldap://server1 ldap://server2" was passed to ldap_initialize including the quotes, leading to an ldap error. Michael
* s3: Avoid races to change the machine password in winbindVolker Lendecke2009-11-191-0/+18
| | | | | | | | | | The machine password handler has code to deal with every node in the cluster trying to change the machine password at the same time. However, it is not very nice to the DC if everyone tries this simultaneously. This adds a random 0-255 second offset to our timed event. When this fires a bit later than strictly calculated, someone else might have stepped in and have already changed it. The timed event handler will handle this gracefully, it won't even try to do it again.
* s3: Protect against flooding the DC with pwchange requestsVolker Lendecke2009-11-191-14/+24
| | | | | When there is a temporary problem changing passwords we flooded the DC with pwchange requests. This gives the DC a 60-second break to recover.
* s3: Re-check the timeout in machine_password_change_handler()Volker Lendecke2009-11-191-0/+6
| | | | | Someone else might have come in between and changed the password since we created that timed request
* s3: Add some debugs to the winbind machine pwchange machineryVolker Lendecke2009-11-191-0/+16
|
* s3: Factor timeval_string out of current_timestring()Volker Lendecke2009-11-192-12/+14
|
* s3: Do not kill the whole smb session if a machine pwchange failedVolker Lendecke2009-11-191-1/+1
|
* s3:pdb_ldap: fix a comment typoMichael Adam2009-11-191-1/+1
| | | | Michael
* s3: shortcut uid_to_sid when "ldapsam:trusted = yes"Michael Adam2009-11-191-0/+75
| | | | | | | | | | | | | | The normal uid_to_sid behaviour is to call sys_getpwuid() to get the name for the given uid and then call the getsampwnam passdb method for the resulting name. In the ldapsam:trusted case we can reduce the uid_to_sid operation to one simple search for the uidNumber attribute and only get the sambaSID attribute from the correspoinding LDAP object. This reduces the number of ldap roundtrips for this operation. Michael
* s3-build: really fix build of winbind_krb5_locator.Günther Deschner2009-11-191-1/+1
| | | | Guenther
* s3-build: make sure to remove libds and client object files on make clean.Günther Deschner2009-11-191-1/+3
| | | | Guenther
* s3: Replace some create_synthetic_smb_fname() callsVolker Lendecke2009-11-187-115/+63
| | | | | In very hot codepaths like the statcache copy_smb_filename and the subsequent recursive talloc_free is noticable in the CPU load.
* s3: Do not talloc in readdirVolker Lendecke2009-11-1812-141/+198
| | | | This is a hot codepath (called from the stat cache)
* s3:load_interfaces(): use function gfree_interfaces() that we have.Michael Adam2009-11-181-9/+1
| | | | | | To reduce code duplication. Michael
* Start removing SMB_STRUCT_STAT variables except forJeremy Allison2009-11-171-15/+13
| | | | | the directory enumeration code (which needs it). Jeremy.
* Remove "store create time" code, cause create time to be storedJeremy Allison2009-11-1713-165/+231
| | | | | | | | | | | | in the "user.DOSATTRIB" EA. From the docs: In Samba 3.5.0 and above the "user.DOSATTRIB" extended attribute has been extended to store the create time for a file as well as the DOS attributes. This is done in a backwards compatible way so files created by Samba 3.5.0 and above can still have the DOS attribute read from this extended attribute by earlier versions of Samba, but they will not be able to read the create time stored there. Storing the create time separately from the normal filesystem meta-data allows Samba to faithfully reproduce NTFS semantics on top of a POSIX filesystem. Passes make test but will need more testing. Jeremy.
* s3: Fix the build on SolarisVolker Lendecke2009-11-172-7/+7
|
* Don't overwrite a dynamic pointer with the address of a stackJeremy Allison2009-11-163-17/+12
| | | | | variable. Jeremy.
* s3:libsmb: avoid passing a function call as function parameterStefan Metzmacher2009-11-162-21/+21
| | | | | | | Using a helper variable makes it easier to "step" into the desired function within gdb. metze
* s3: Fix a memleak in sys_popenVolker Lendecke2009-11-151-0/+1
| | | | Found with "dfree command" set
* s3: Add min_setup, min_param and min_data to cli_trans_recvVolker Lendecke2009-11-147-129/+72
| | | | | | | | | | Every caller that expects to receive something needs to check if enough was sent. Make this check mandatory for everyone. Yes, this makes the parameter list for cli_trans a bit silly, but that's just the way it is: A silly protocol request :-) While there, convert some _done functions to tevent_req_simple_finish_ntstatus.
* Attempt to fix the s4 build -- we can not use map_nt_error_from_unix in lib/Volker Lendecke2009-11-142-0/+14
|
* s3: Convert cli_set_unix_extensions_capabilities_send to asyncVolker Lendecke2009-11-144-44/+96
|
* s3: Tiny logic simplificationVolker Lendecke2009-11-141-10/+11
|
* s3:fix a comment typoMichael Adam2009-11-141-1/+1
| | | | Michael
* s3:is_trusted_domain: shortcut if domain name == global_sam_nameMichael Adam2009-11-141-0/+4
| | | | | | | A domain can't have a trust with itself. This saves some roundtrips to the ldap server for ldapsam. Michael
* s3:is_trusted_domain: shortcut if domain name is NULL or emptyMichael Adam2009-11-141-0/+4
| | | | | | This saves some roundtrips to LDAP in an ldapsm setup. Michael
* s3:passdb: bump interface VERSION 18->19 (removed uid_to_rid)Michael Adam2009-11-141-1/+2
| | | | Michael
* s3:passdb: remove the uid_to_rid method - we only need uid_to_sidMichael Adam2009-11-145-42/+1
| | | | Michael
* s3:pdb_default_uid_to_sid: fix some debug statements.Michael Adam2009-11-141-3/+3
| | | | Michael
* s3/pam: move variable declaration into belonging ifdef sectionBjörn Jacke2009-11-131-1/+1
| | | | This fixes a unused variable 'addr' warning on some platforms
* s3:smbd: also fill the memcache with sid<->id mappings in ldapsam_sid_to_id()Michael Adam2009-11-131-0/+2
| | | | | | not only the persistent idmap cache. Michael
* s3:smbd: make idmap cache persistent for "ldapsam:trusted".Michael Adam2009-11-131-0/+4
| | | | | | | | | | This stores the mappings found in the idmap cache (which lives inside gencache). This cache is already read in sid_to_Xid() and Xid_to_sid() for ldapsam:trusted, this fills the opposite direction, massively reducing the number of ldap roundtrips across smbd restarts. Michael
* Fix large paged searchVolker Lendecke2009-11-131-0/+1
| | | | Signed-off-by: Michael Adam <obnox@samba.org>
* fix bogus "out of memory" winbind msgVolker Lendecke2009-11-131-1/+2
| | | | Signed-off-by: Michael Adam <obnox@samba.org>
* s3: Convert cli_unix_extensions_version to asyncVolker Lendecke2009-11-135-55/+159
|
* s3-rpcclient: use the parsed binding string flags for auth choice.Günther Deschner2009-11-131-0/+18
| | | | | | | | This allows rpcclient to be called like this: rpcclient ncacn_ip_tcp:w2k8r2[sign,seal] -U administrator%secret -c "dscracknames gd" Guenther
* Remove unused variable warning.Jeremy Allison2009-11-121-1/+0
| | | | Jeremy.
* Remove erroneous 'presult = NULL' changes. Now presult only gets setJeremy Allison2009-11-121-9/+2
| | | | | if NTSTATUS == OK. Jeremy.
* Revert "Ensure every return path initializes presult as NULL."Jeremy Allison2009-11-121-40/+0
| | | | | | Vl is correct, this is the wrong way to fix this. This reverts commit 83c2c177a5e86d04da37384f1f04230c8274e1e6.
* Ensure all callers to the rpc_client/cli_pipe functions correctlyJeremy Allison2009-11-1213-34/+21
| | | | | initialize return variables. Jeremy.
* Fix bug 6891 - using windows explorer to change ownership on a folder fails ↵Jeremy Allison2009-11-121-1/+11
| | | | | | with Bad File Descriptor. Jeremy.
* Ensure every return path initializes presult as NULL.Jeremy Allison2009-11-121-0/+40
| | | | | | Ensures no crashes in calling code that forgets to init return as null. Jeremy.
* s3-kerberos: remove smb_krb5_get_tkt_from_creds().Günther Deschner2009-11-121-60/+4
| | | | | | | Now that cli_krb5_get_ticket() already handles S4U2SELF impersonation, remove smb_krb5_get_tkt_from_creds() which is not required anymore. Guenther