summaryrefslogtreecommitdiffstats
path: root/source3
Commit message (Collapse)AuthorAgeFilesLines
...
* Add 'bool use_privs' to smbd_calculate_access_mask().Jeremy Allison2012-09-154-5/+10
| | | | | | | | Replaces blanket root allow if set. Set to 'false' for all current callers. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Sat Sep 15 00:37:49 CEST 2012 on sn-devel-104
* Fix bad string in debug message (remove it).Jeremy Allison2012-09-141-4/+2
|
* Add bool use_privs parameter to smbd_check_access_rights()Jeremy Allison2012-09-145-4/+18
| | | | | If this is set we should use it in preference to blindly assuming root can do anything. Currently set to 'false' in (most) callers.
* Add "backup_intent" bool.Jeremy Allison2012-09-141-1/+2
|
* Don't call can_write_to_file() if we already have 'fsp->can_write' set.Jeremy Allison2012-09-141-0/+2
|
* build: Fix build on systems without ldap development headersAndrew Bartlett2012-09-141-0/+1
| | | | | Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri Sep 14 22:53:30 CEST 2012 on sn-devel-104
* s3: fix the hpux acl moduleBjörn Jacke2012-09-141-5/+5
| | | | | | | This was not adopted to the recent VFS acl structure changes. Autobuild-User(master): Björn Jacke <bj@sernet.de> Autobuild-Date(master): Fri Sep 14 12:23:23 CEST 2012 on sn-devel-104
* s3: fix the tru64 acl moduleBjörn Jacke2012-09-141-5/+5
| | | | This was not adopted to the recent VFS acl structure changes.
* s3: fix the aix acl moduleBjörn Jacke2012-09-141-9/+9
| | | | This was not adopted to the recent VFS acl structure changes.
* s3: Fix the vfs_solarisacl module to compile.Ira Cooper2012-09-141-5/+5
| | | | | | | This got broken with the recent VFS acl structure changes. Autobuild-User(master): Ira Cooper <ira@samba.org> Autobuild-Date(master): Fri Sep 14 05:21:29 CEST 2012 on sn-devel-104
* autoconf: fix --with(out)-sendfile-support option handlingBjörn Jacke2012-09-141-15/+20
| | | | this fixes bug #8344
* s3: make smbldaphelper subsystem an internal libraryAlexander Bokovoy2012-09-143-11/+10
| | | | | | | | | | | | | | | | | Break pdb_ldap -> smbldaphelper -> pdb -> pdb_ldap loop by making smbldaphelp intentionally underlinked internal library. It means that libsmbldaphelp is not usable unless its user is also linked to libpdb (that is the case for both its users, idmap_ldap and pdb_ldap, already) but gives us a break of the circular dependency in case pdb_ldap statically linked into pdb (default). This should solve case when idmap_ldap and pdb_ldap are dynamically loaded modules Autobuild-User(master): Alexander Bokovoy <ab@samba.org> Autobuild-Date(master): Fri Sep 14 01:02:21 CEST 2012 on sn-devel-104
* Sigh :-(. Removing optimization prematurely is the root of all evil :-(.Jeremy Allison2012-09-133-0/+15
| | | | | | | | | | | | | | | | | Sorry for the mistake, but the LastDir singleton cache in vfs_ChDir() actually plays an important role. When we're processing a stream of SMB1/SMB2/SMB3 requests we don't want to add a chdir()/getcwd() system call pair on every request if they're all on the same connection and dealing with the same base path. I did some testing with a program that times 1,000,000 chdir() requests vs. 1,000,000 strcmp requests and it's a penalty of 10x doing the system calls. Just because it's old code, doesn't mean it's bad :-(. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Thu Sep 13 21:31:42 CEST 2012 on sn-devel-104
* s3: make ldapsam-related functions a smbldaphelper subsystemAlexander Bokovoy2012-09-133-4/+7
| | | | | | | | | | | | | | | Since these functions are used in pdb_ldap and idmap_ldap, and pdb_ldap might be statically linked to libpdb (default), it is better to keep them as separate subsystem to avoid polluting libpdb namespace. This is first step in refactoring libpdb. Right now I cannot move these functions into proper libsmbldaphelper as it uses more of libpdb-included functions and linking pdb_ldap against libsmbldaphelper library would have created a loop if pdb_ldap is included into libpdb. Autobuild-User(master): Alexander Bokovoy <ab@samba.org> Autobuild-Date(master): Thu Sep 13 17:36:07 CEST 2012 on sn-devel-104
* s3:build: rewrite autogen.sh to be called from any directoryMichael Adam2012-09-121-5/+20
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* In vfs modules, don't use 'conn->origpath' when we really mean 'conn->cwd'.Jeremy Allison2012-09-124-10/+10
| | | | | | | | This allows VFS modules to work even when we've changed directory under the connect path in order to do root-safe calls. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Wed Sep 12 23:45:23 CEST 2012 on sn-devel-104
* Move cached cwd onto conn struct.Jeremy Allison2012-09-123-1/+17
| | | | | This enables us to make VFS modules safe for use in root called code when we've changed directory under conn->connectpath.
* Remove ancient "optimization" global LastDir.Jeremy Allison2012-09-123-18/+3
|
* Avoid overriding default ccache for ads operations.Simo Sorce2012-09-128-14/+102
| | | | | | | | | | | | | | | | | | | | | | | | Avoid overriding default ccache for ads operations. Nowadays various samba components may need to use GSSAPI and a default cred cache to perform their tasks. This code was completely overriding the whole process default ccache name, thus altering the current credentials and sometimes hijacking them (or getting preemptively hijaked). By using gss_krb5_import_cred we can instead use a private ccache (necessary sometimes to use a different set of credentials fromt he default cifs/fqdn@realm one, for example when contacting foreign DCs using trust credentials) that does not affect the rest of the process. For the kerberos versions which don't have gss_krb5_import_cred we fallback to temp override of KRB5CCNAME and gss_acquire_cred. Signed-off-by: Alexander Bokovoy <ab@samba.org> Signed-off-by: Günther Deschner <gd@samba.org> Autobuild-User(master): Alexander Bokovoy <ab@samba.org> Autobuild-Date(master): Wed Sep 12 21:18:09 CEST 2012 on sn-devel-104
* s3: remove unneeded noquota.c fileBjörn Jacke2012-09-121-38/+0
| | | | | Autobuild-User(master): Björn Jacke <bj@sernet.de> Autobuild-Date(master): Wed Sep 12 16:50:50 CEST 2012 on sn-devel-104
* s3-rap: Open printers with the right access mask.Andreas Schneider2012-09-121-3/+3
| | | | | Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Wed Sep 12 14:05:42 CEST 2012 on sn-devel-104
* s3-pdb: filter out more symbols only used in ldapsam internalsAlexander Bokovoy2012-09-122-2/+1
|
* smbd: Add extra VFS hooks to get the posix ACL as a blobAndrew Bartlett2012-09-126-0/+202
| | | | | | | | | | | This will allow us to hash this, rather than the NT ACL it maps to. This will in turn allow us to know if the NT ACL is valid even if we have to change the mapping code. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Sep 12 07:06:01 CEST 2012 on sn-devel-104
* smbd: Remove pre-allocation of ACL array in sys_acl_init()Andrew Bartlett2012-09-125-18/+15
| | | | | | | | Instead, this is just handled with realloc in sys_acl_create_entry() This allows us to remove the size element from the SMB_ACL_T. Andrew Bartlett
* smbd-posix_acls: Use a IDL union to store the ACL entryAndrew Bartlett2012-09-122-13/+11
| | | | | | | This is a clearer, long-term-stable structure we can hash without risking it changing. Andrew Bartlett
* Make metze happy and the code clearer :-).Jeremy Allison2012-09-121-0/+6
| | | | | | | | Ensure we know after the destructor fires we're never going to look at this again. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Wed Sep 12 03:00:21 CEST 2012 on sn-devel-104
* smbd: Print ACL used to create hash in vfs_xattr_commonAndrew Bartlett2012-09-111-0/+10
| | | | | | | | | This should help us understand why sometimes an ACL set won't stick. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Tue Sep 11 18:19:53 CEST 2012 on sn-devel-104
* docs: Move idmap manpage to there old location.Andreas Schneider2012-09-118-891/+0
| | | | | | | This wasn't planned and slipped trough, sorry. Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Tue Sep 11 14:28:53 CEST 2012 on sn-devel-104
* quota: move function again to its belonging ifdef blockBjörn Jacke2012-09-111-11/+9
| | | | | Autobuild-User(master): Björn Jacke <bj@sernet.de> Autobuild-Date(master): Tue Sep 11 04:44:28 CEST 2012 on sn-devel-104
* s3:proto.h: remove duplicate disk_quotas prototypesBjörn Jacke2012-09-111-10/+0
|
* quota: fix configure test for HP-UXBjörn Jacke2012-09-111-0/+6
| | | | | | | while HP-UX does have the 4A quota interface our test failed due to a missing function prototype in HP-UX and our test running in strict mode with compile warnings be errors. So let's make our own prototype in the test when we are on HP*UX
* s3: Run raw.oplockVolker Lendecke2012-09-101-1/+1
| | | | Signed-off-by: Jeremy Allison <jra@samba.org>
* s3: delete requests are not specialVolker Lendecke2012-09-101-16/+0
| | | | | | | The only difference between batch and exclusive oplocks is the time of the check: Batch is checked before the share mode check, exclusive after. Signed-off-by: Jeremy Allison <jra@samba.org>
* Call TALLOC_FREE() before we return otherwise we will never free sam_accountMichele Baldessari2012-09-101-1/+1
| | | | Signed-off-by: Jeremy Allison <jra@samba.org>
* Fix talloc memory heirarchy bug. If there's an SMB2 sessionsetup in flight ↵Jeremy Allison2012-09-101-5/+36
| | | | | | | when we're shut down, we end up freeing the struct smbXsrv_session *session pointer twice. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Mon Sep 10 23:34:06 CEST 2012 on sn-devel-104
* wafbuild: add defines for linux quota and sysquota supportBjörn Jacke2012-09-101-0/+8
| | | | | Autobuild-User(master): Björn Jacke <bj@sernet.de> Autobuild-Date(master): Mon Sep 10 21:55:53 CEST 2012 on sn-devel-104
* s3:smbd Bump the smbd vfs interface version to 30Christian Ambach2012-09-101-1/+2
| | | | | | | that is what Samba 4.0.0 will ship with Autobuild-User(master): Christian Ambach <ambi@samba.org> Autobuild-Date(master): Mon Sep 10 19:40:01 CEST 2012 on sn-devel-104
* s3:vfs/time_audit: Add back pointer for sys_acl_delete_def_file_fnChristof Schmitt2012-09-101-0/+1
| | | | | | | | | Commit e25830dcd87387a237b96f0d70deb204a5bf0a54 removed the function pointer from the time_audit module, although the VFS function still exists. Add the function pointer again in time_audit as this seems to be an accidentally deletion. Signed-off-by: Christian Ambach <ambi@samba.org>
* s3:vfs/time_audit: add path names to log messagesRalph Wuerthner2012-09-101-80/+170
| | | | Signed-off-by: Christian Ambach <ambi@samba.org>
* s3:client use more access bits for snapshot displayChristian Ambach2012-09-101-1/+2
| | | | | otherwise Windows server will reject the request for shadow copy enumeration with access denied
* s3-passdb: update abi_match and ignore more statically linked functionsAlexander Bokovoy2012-09-102-17/+21
| | | | | Autobuild-User(master): Alexander Bokovoy <ab@samba.org> Autobuild-Date(master): Mon Sep 10 16:14:50 CEST 2012 on sn-devel-104
* uid_t is a synonym for int on osXMatthieu Patou2012-09-101-1/+1
| | | | | This function is clearly osX oriented so we adapt the modifier to the target
* s3:quota-nfs: add RQ_PATHLEN define for systems that don't have itBjörn Jacke2012-09-091-0/+4
| | | | | Autobuild-User(master): Björn Jacke <bj@sernet.de> Autobuild-Date(master): Sun Sep 9 17:44:51 CEST 2012 on sn-devel-104
* s3:quota-nfs: another build fix for the old Unix worldBjörn Jacke2012-09-091-1/+1
|
* s3: fix wrong invocations of talloc_reallocBjörn Jacke2012-09-091-2/+2
|
* selftest/knownfail: we pass some samba3.smb2.durable-* tests nowStefan Metzmacher2012-09-081-0/+3
| | | | | | | metze Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Sat Sep 8 23:18:39 CEST 2012 on sn-devel-104
* s3:vfs_default: add basic support for durable handle request and reconnectMichael Adam2012-09-086-3/+610
| | | | | | | | | | | | We only grant durable handles for CIFS/SMB2 only access, that means "kernel oplocks", "kernel share modes" and "posix locking" need to be set to "no". For now we also don't grant durable handles if delete on close is active on the handle. Pair-Programmed-With: Stefan Metzmacher <metze@samba.org> Pair-Programmed-With: Volker Lendecke <vl@samba.org>
* s3: introduce a new share config option "durable handles" defaulting to "yes"Michael Adam2012-09-082-0/+2
| | | | | | | | | | | | | | | This is in order to be able to turn durable handles off and on on a per share basis. Note: This is only used in combination with: kernel share modes = no kernel oplocks = no posix locking = no Which means CIFS/SMB2 only access. Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3:smbd: make fd_open() publicMichael Adam2012-09-082-4/+6
|
* s3:smbd: don't set kernel flock if "kernel share modes = no"Michael Adam2012-09-081-1/+1
| | | | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Sat Sep 8 13:05:05 CEST 2012 on sn-devel-104