summaryrefslogtreecommitdiffstats
path: root/source3
Commit message (Collapse)AuthorAgeFilesLines
* s3-samr: Fix potential memory leak in _samr_ChangePasswordUser().Günther Deschner2009-05-081-1/+2
| | | | Guenther
* s3: make release_ip() call (ctdb) cope with IPv4 mapped addressesMichael Adam2009-05-081-1/+8
| | | | Michael
* s3-selftest: finally enable RPC-SAMR-PASSWORDS which samba3 now passes.Günther Deschner2009-05-081-1/+1
| | | | Guenther
* s3-selftest: need to enable lanman auth in order make RPC-SAMR-PASSWORDS pass.Günther Deschner2009-05-082-0/+5
| | | | Guenther
* s3-samr: Do not leak information whether a user exist or not in pwd change ↵Günther Deschner2009-05-081-0/+11
| | | | | | | | calls. Found by torture test. Guenther
* s3-samr: implement _samr_ChangePasswordUser().Günther Deschner2009-05-081-10/+106
| | | | | | This is vastly copied from samba4 samr server. Guenther
* s3-samr: implement _samr_OemChangePasswordUser2().Günther Deschner2009-05-081-10/+48
| | | | Guenther
* s3-samr: disable check for ACB_DISABLED in check_oem_password().Günther Deschner2009-05-081-1/+4
| | | | | | | | | It is a bad idea to just tell everyone that an account is disabled without really having checked the password first. Found by torture test. Guenther
* s3-samr: rework check_oem_password() to take a struct samu, not to return one.Günther Deschner2009-05-081-39/+27
| | | | Guenther
* s3-samr: Let _samr_TestPrivateFunctionsUser() return not supported.Günther Deschner2009-05-081-1/+0
| | | | | | This is to get us closer to pass RPC-SAMR-USERS. Guenther
* s3-samr: Do not return users in _samr_QueryDisplayInfo() for builtin domain.Günther Deschner2009-05-081-0/+5
| | | | | | Found by torture test. Guenther
* s3-samr: let set_user_info_16 and 20 follow the same pattern as all other ↵Günther Deschner2009-05-083-29/+40
| | | | | | levels. Guenther
* s3-samr: support some more info levels in samr_SetUserInfo calls.Günther Deschner2009-05-083-0/+468
| | | | Guenther
* s3-samr: support some more info levels in samr_QueryUser calls.Günther Deschner2009-05-081-0/+266
| | | | Guenther
* s3/ldap: also handle DirX return codesBjörn Jacke2009-05-081-0/+2
|
* s3:configure: "test" only takes one "="Björn Jacke2009-05-081-1/+1
|
* Fix some type-punned warningsVolker Lendecke2009-05-073-7/+13
|
* Remove a misleading commentVolker Lendecke2009-05-071-2/+0
|
* Fix some nonempty blank linesVolker Lendecke2009-05-071-11/+10
|
* Convert lib/wb_reqtrans.c to unix calling conventionsVolker Lendecke2009-05-073-97/+113
|
* Adapt wb_reqtrans to "recent" coding conventionsVolker Lendecke2009-05-071-44/+28
|
* s3-auth: use full 16byte session key in make_user_info_netlogon_interactive().Günther Deschner2009-05-072-3/+2
| | | | | | | | | | | | | | | | | | | Patch from Jeremy. With this patch, I was able to join Windows 7 RC to a Samba3 DC, and login into a Samba 3 Domain. There are still two registry settings required: HKLM\System\CCS\Services\LanmanWorkstation\Parameters DWORD DomainCompatibilityMode = 1 DWORD DNSNameResolutionRequired = 0 Do *not* modify the other netlogon registry parameters that were passed around, they weaken security. Guenther (cherry picked from commit b5097d54cb74ca0ea328f9e029562f65f4a01134)
* Async API needs all parameters to be kept around until sent,Jeremy Allison2009-05-071-55/+15
| | | | | | ensure they're attached to the state structure. Thanks to Metze for pointing this out. Jeremy.
* Fix a typoVolker Lendecke2009-05-071-1/+1
|
* Add simple test chaining up sesssetup and tconVolker Lendecke2009-05-071-0/+53
|
* Make cli_tcon_andx chainableVolker Lendecke2009-05-072-15/+48
|
* Make cli_session_setup_guest chainableVolker Lendecke2009-05-072-9/+35
|
* s3-samr: Fix _samr_Connect5(). In error case it still needs to return empty ↵Günther Deschner2009-05-071-1/+2
| | | | | | info1. Guenther
* s3-rpcclient: rework enumdrivers call a bit to allow queries like win7 does.Günther Deschner2009-05-071-69/+97
| | | | Guenther
* s3-credentials: protect netlogon_creds_server_step() against NULL creds.Günther Deschner2009-05-071-0/+4
| | | | | | Found by SCHANNEL torture tests. Guenther
* s3-selftest: run RPC-SCHANNEL, RPC-SCHANNEL2 and RPC-BENCH-SCHANNEL1 against ↵Günther Deschner2009-05-071-0/+1
| | | | | | Samba3. Guenther
* Fix bug 6336: "net groupmap set" segfaultsVolker Lendecke2009-05-071-2/+4
|
* Make cli_setatr async.Jeremy Allison2009-05-067-8/+145
| | | | Jeremy.
* After getting confirmation from Guenther, add 3 changes we'llJeremy Allison2009-05-061-13/+23
| | | | | | | | | | | | ultimately need to fix bug #6099 Samba returns incurrate capabilities list. 1). Add a comment to point out that r->in.negotiate_flags is an aliased pointer to r->out.negotiate_flags. 2). Ensure we return NETLOGON_NEG_STRONG_KEYS in our flags return if the client requested it. 3). Clean up the error exits so we always return the same way. Signed off by Guenther. Jeremy.
* Make cli_setattrE async.Jeremy Allison2009-05-064-31/+112
| | | | Jeremy.
* s3-netlogon: Fix NETLOGON credential chain. Fixes Bug #6099 (Windows 7 ↵Günther Deschner2009-05-061-2/+6
| | | | | | | | | | | | | | joining Samba3) and probably many, many more. Jeremy, with 9a5d5cc1db0ee60486f932e34cd7961b90c70a56 you alter the in negotiate flags (which are a pointer to the out negotiate flags assigned in the generated netlogon server code). So, while you wanted to just set the *out* negflags, you did in fact reset the *in* negflags, effectively eliminating the NETLOGON_NEG_STRONG_KEYS bit (formerly known as NETLOGON_NEG_128BIT) which then caused creds_server_init() to generate 64bit creds instead of 128bit, causing the whole chain to break. *Please* check. Guenther
* Fix Coverity ID 897: REVERSE_INULLVolker Lendecke2009-05-061-1/+1
|
* s3-rpcclient: print more infolevels in printer and driver info levels.Günther Deschner2009-05-061-7/+238
| | | | Guenther
* s3-printing: fix debug statement in virtual registry layerGünther Deschner2009-05-061-1/+1
| | | | | | (key_driver_fetch_keys). Guenther
* s3-printing: simplify print_queue helper functions and return WERROR.Günther Deschner2009-05-064-42/+23
| | | | Guenther
* Make cli_getatr() async.Jeremy Allison2009-05-056-36/+149
| | | | Jeremy.
* s3 Reorder loadparm to keep aliases togetherSteven Danneman2009-05-051-6/+6
| | | | This keeps the "browseable" and "browsable" aliases together.
* s3:loadparm: handle registry config source in file_list - fixes bug #6320Michael Adam2009-05-061-34/+44
| | | | Michael
* s3 onefs: Turn up the debug level for non-error casestprouty2009-05-051-3/+3
|
* s3: Fix trans2 path to use case-insensitive stat optimizationtprouty2009-05-053-8/+57
| | | | | | | | | | | | | | | | | | | | Often times before creating a file, a client will first query to see if it already exists. Since some systems have a case-insensitive stat that is called from unix_convert, we can definitively return STATUS_NO_SUCH_FILE to the client without scanning the whole directory. This code path is taken from trans2querypathinfo, but trans2findfirst still does a full directory scan even though the get_real_filename (the case-insensitive stat vfs call) can prevent this. This patch adds the get_real_filename call to the trans2find* path, and also changes the vfs_default behavior for SMB_VFS_GET_REAL_FILENAME. Previously, in the absence of a get_real_filename implementation, we would fallback to the full directory scan. The default behavior now returns -1 and sets errno to EOPNOTSUPP. This allows SMB_VFS_GET_REALFILENAME to be called from trans2* and unix_convert.
* Make cli_getattrE async.Jeremy Allison2009-05-057-44/+156
| | | | Jeremy.
* s3:onefs.so Change system function namesSteven Danneman2009-05-051-4/+4
| | | | Addendum to c49730e1. Use newer cookie conversion names.
* Fix bug 6302: Give the VFS a chance to read from 0-byte filesVolker Lendecke2009-05-051-8/+9
|
* s3-ldap: fix more callers of smbldap_dn_talloc() that were passing a NULL ↵Günther Deschner2009-05-052-2/+2
| | | | | | context. Guenther
* s3-ldapsam: Fix Bug #6313: ldapsam_update_sam_account() crashes while doing ↵Günther Deschner2009-05-051-1/+1
| | | | | | talloc_free on malloced memory. Guenther