summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* s3/docs: Fix typo.samba-3.3.5Karolin Seeger2009-06-161-1/+1
| | | | | Karolin (cherry picked from commit 6e45c21384b8845422967ff1fa46e48de9fee1ab)
* WHATSNEW: Fix typo.Karolin Seeger2009-06-151-1/+1
| | | | | Karolin (cherry picked from commit acde34bc7d5b038f5965acc0fccaff6f7658f3d5)
* WHATSNEW: Update changes since 3.3.4.Karolin Seeger2009-06-151-0/+10
| | | | | Karolin (cherry picked from commit 80e7638aed61cc908e7d658d208d1925ff16247c)
* Fix the section of the pam_winbind manpage.Andreas Schneider2009-06-152-4/+4
| | | | | Signed-off-by: Andreas Schneider <mail@cynapses.org> (cherry picked from commit 2f2ef4afae99eadb2b546319aa915f6391acce40)
* Move pam_winbind to the right manpage section (8).Andreas Schneider2009-06-151-0/+0
| | | | | | | Signed-off-by: Andreas Schneider <mail@cynapses.org> (cherry picked from commit 59ab1574e41993d24733affbca07d3f7da245fc7) (cherry picked from commit d547aab1511c72e1cab034e2945f6ad63bda6659) (cherry picked from commit c9b89676983c5fd0ec12df121fc5d9e06facdd80)
* Dcoument the PAM data exports in the pam_winbind manpage.Andreas Schneider2009-06-151-0/+44
| | | | | | | Signed-off-by: Andreas Schneider <mail@cynapses.org> (cherry picked from commit 1809ff4b2339bd3066532abccea0944da45edf64) (cherry picked from commit 5d2dfba6d1699c6e417cc21233a1cc871f3c0ad1) (cherry picked from commit 282682c989a8008de5f8d30c48c9a740b315a230)
* Document the try_first_pass option in the pam_winbind manpage.Andreas Schneider2009-06-151-5/+8
| | | | | | | Signed-off-by: Andreas Schneider <mail@cynapses.org> (cherry picked from commit 779eea49de3f53040fe792de4b74b73a0c51ecb3) (cherry picked from commit 24d6f697844bc85a03c047e5470abcfdd53735a2) (cherry picked from commit 2ed85b0ebfc50cad847050cc6b5269c470956ea3)
* Add a synopsis section to the pam_winbind manpage.Andreas Schneider2009-06-151-0/+25
| | | | | | | Signed-off-by: Andreas Schneider <mail@cynapses.org> (cherry picked from commit 24f9f32fedb92f881658db856db15173e57af0bd) (cherry picked from commit 55df96313c5b966f41b0b5c426cf6a420cafa855) (cherry picked from commit f738862d9f419fec27c9fb15c880a452aff333d9)
* Revert the extra SAMR and LSA checks.Jeremy Allison2009-06-151-58/+0
| | | | | | These were added between 3.2.4 and 3.2.5 that have caused users problems. This fixes among others bug #6089 and #6112. (cherry picked from commit bd2f3695c117773032e16958a0266d0d1e75defe)
* s3/libsmb: Fix debug message.Karolin Seeger2009-06-151-1/+1
| | | | | | | | | | | This fixes bug #6472. Karolin Signed-off-by: Volker Lendecke <vl@samba.org> Was commit f92269a6 in master. (cherry picked from commit 7108ebb87902f3b5d2c43ba95d557278ad8e120f)
* Fix bug #6297 - owner of sticky directory cannot delete files created by ↵Jeremy Allison2009-06-151-2/+13
| | | | | | others. The reason we couldn't delete was we were erroring out early if requestor was not the owner of the file we wanted to delete, instead of checking if the requestor owned the directory as well. If either of these is true, we must go on and check the ACL. Karolin, this is a must for 3.4.0 and also 3.3.next. I'll update the bug report with patches for 3.4.0 and 3.3.next and ask vl to review. Jeremy. (cherry picked from commit 966a51da8998cfd15875ba047b7f765c84b914dd)
* WHATSNEW: Attach older 3.3 release notes.Karolin Seeger2009-06-151-0/+1310
| | | | | Karolin (cherry picked from commit adbba72c332b59f4ffe87cb25c5ec7f8d90148dc)
* s3-groupdb: fix enum_aliasmem in ldb branch.Günther Deschner2009-06-151-1/+1
| | | | | | | | | | | | It is totally valid to have an alias with no members. This fixes bug #6465. Tridge, please check. Found by RPC-SAMR torture test. Guenther (cherry picked from commit d7b749b056a667f0b180d6d5198faca9b0a69fea)
* s3-docs: Fix Bug #4280. Shutdown scripts are called as root for privileged ↵Günther Deschner2009-06-152-2/+2
| | | | | | | | | users. GUenther (cherry picked from commit 3938d1e5fa1996f64e92d33d6893bab620d16b23) (cherry picked from commit 0491f038403036814acf6eacc7bb742345bbe27b) (cherry picked from commit d4b57dab0beada704fcbeae86ae5b5dd257030a0)
* VERSION: Raise version number up to 3.3.5.Karolin Seeger2009-06-101-1/+1
| | | | | Karolin (cherry picked from commit 48b5d16c39b60c0fb6db60780bc36eaa8ef2506c)
* WHATSNEW: Update changes since 3.3.4.Karolin Seeger2009-06-101-40/+52
| | | | | Karolin (cherry picked from commit 95550d2e69848089172c00798b9b50ea4e56dd48)
* s3/docs: Fix typos.Karolin Seeger2009-06-101-3/+3
| | | | | | | | | | Fix typos reported by OPC oota <t-oota [at] dh.jp.nec.com>. Thanks! Karolin (cherry picked from commit ad0d8032068fc9b920e205d3f5f923174101d777) (cherry picked from commit b7d54f443ade79d3f2b71aa138fd5254754bb750) (cherry picked from commit cec179962a833771b9fdba3ba747b571ef27ace6)
* Further fix for 6449Volker Lendecke2009-06-101-1/+1
| | | | | Thanks to TAKAHASHI Motonobu <monyo@samba.gr.jp> for reporting! (cherry picked from commit aa03326fe523e9bc85e6db276f94e9d04aaf009d)
* Fix bug 6449Volker Lendecke2009-06-101-1/+1
| | | | | Thanks to TAKAHASHI Motonobu <monyo@samba.gr.jp> for reporting! (cherry picked from commit a956e36ceb22072cd4ea755ce9b4457896af4b14)
* Fix bug 6441 -- fix the compile with --enable-dnssdVolker Lendecke2009-06-101-4/+0
| | | | | | | | | The server side of dnssd has been replaced with native avahi support. The code is only left in in case some OS/X fan wants to revive it, and the client-side has not been converted yet. Fix the build of the server side by removing the #ifdef (cherry picked from commit 8b8336a115b73eb99cd1f9a8d1286df713ec53c3)
* s3/docs: Fix example.Karolin Seeger2009-06-101-2/+2
| | | | | | | | | | | The 'ldap suffix' is not added automatically to the 'ldap admin dn'. This fixes bug #5584. Thanks to Stefan Bauer <stefan.bauer [at] plzk.de> for reporting! Karolin (cherry picked from commit 0fee798552038b730b0107540d6cfeb475803555) (cherry picked from commit 629e7aa91a33a5428676d8f6eeac19ea9fec14d6) (cherry picked from commit 01acd8d9277362ae3c0e92963f66e7af3202b84d)
* Fix bug 6157Volker Lendecke2009-06-103-1/+60
| | | | | | This patch picks the alphabetically smallest one of the multi-value attribute "uid". This fixes a regression against 3.0 and also becomes deterministic. (cherry picked from commit 47333fc8785457239a499a298536664f152b681d)
* s3/passdb: Fix debug message: 'net setmaxrid' does not exist.Karolin Seeger2009-06-101-2/+2
| | | | | | | | This is aiming bug #6351. Karolin (cherry picked from commit c94d1cd7b1dc3ff99ae5a1eb9058ed6015fb9749) (cherry picked from commit 11ed212591d612632fcb47f1eac10507b89ffdec)
* s3-samr: Fix Bug #6372, usermanager only displaying 1024 groups and aliases.Günther Deschner2009-06-101-0/+12
| | | | | | | | This is now also verified with the RPC-SAMR-LARGE-DC test. Guenther (cherry picked from commit fca7dce1a908570e463ddcbd663955fcafd1d843) (cherry picked from commit f3bf1eebe1cb74aa9ed2d00b823c90c6ed743980)
* s3/docs: Fix typo.Karolin Seeger2009-06-101-2/+2
| | | | | | | Karolin (cherry picked from commit 613c8acbdd93210b40ec6fa48cbbf297a061b3cc) (cherry picked from commit c84f1c7ac9da7e26f28cb233efe45614f0cedea3) (cherry picked from commit 8878670414bd2607ad238b4fb61a109d5f430538)
* Simplify the dropbox patchJeremy Allison2009-06-101-5/+10
| | | | (cherry picked from commit f9ea09b61a46136fc55314e2e1cd2e9cfb362802)
* Re-Add the "dropbox" functionality with -wx rights on a directoryVolker Lendecke2009-06-101-3/+3
| | | | (cherry picked from commit f586b209b0216150f07bcc998c0d57e0d179b8ee)
* s3/docs: Fix typo.Karolin Seeger2009-06-101-1/+1
| | | | | | | | | | This fixes bug #4341. Thanks to Michael Cartmell <michael.cartmell [at] thomson.com> for reporting! Karolin (cherry picked from commit 2228cc6a0f942b774bef7fb0b99009897fa4dff4) (cherry picked from commit e1b1f14e0260395a8d452ea0a129bcc9bb3f98cc) (cherry picked from commit de156e6ee292ad7fc683d681d7c4b44edba67626)
* s3:idmap_tdb: filter out of range mappings in default idmap configMichael Adam2009-06-101-16/+57
| | | | | | | | This fixes bug #6415 Michael (cherry picked from commit 3d3f39838261ddc401053dadcc5bd8e6317a3a8e) (cherry picked from commit 307c73ce8bc29803230c22e3f8abd579c5d90ba2)
* s3:idmap_ldap: filter out of range mappings in default idmap configMichael Adam2009-06-101-16/+55
| | | | | | | | This fixes bug #6417 Michael (cherry picked from commit e381c13b023f2b512b3f6aec133db9f323bc8132) (cherry picked from commit 06cab60eb0ba966174f493fcbe25bede0c5d2125)
* s3:idmap_tdb2: filter out of range mappings in default idmap configMichael Adam2009-06-101-12/+49
| | | | | | | | This fixes bug #6416 Michael (cherry picked from commit e12670a1053edf57af137026bd3fdb9fc7dfb0b2) (cherry picked from commit a74cb0ca04d61df6f01f3d737e52a8b7349d5a73)
* s3: zero an uninitialized arrayMarc VanHeyningen2009-06-101-1/+4
| | | | | | | | Invalid pointers were being dereferenced in lookup_sids causing occasional seg faults. Signed-off-by: Tim Prouty <tprouty@samba.org> (cherry picked from commit 34ca12c9396f7c8475cd1525bdbc40021b0e533f)
* s3/docs: Correct version number.Karolin Seeger2009-06-101-1/+1
| | | | | Karolin (cherry picked from commit 7e4682d0b54ba85c7366e7232b148a594718f7cf)
* Fix a race condition in winbind leading to a panicVolker Lendecke2009-06-101-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | In winbind, we do multiple events in one select round. This needs fixing, but as long as we're still using it, for efficiency reasons we need to do that. What can happen is the following: We have outgoing data pending for a client, thus state->fd_event.flags == EVENT_FD_WRITE Now a new client comes in, we go through the list of clients to find an idle one. The detection for idle clients in remove_idle_client does not take the pending data into account. We close the socket that has pending outgoing data, the accept(2) one syscall later gives us the same socket. In new_connection(), we do a setup_async_read, setting up a read fde. The select from before however had found the socket (that we had already closed!!) to be writable. In rw_callback we only want to see a readable flag, and we panic in the SMB_ASSERT(flags == EVENT_FD_READ). Found using bin/smbtorture //127.0.0.1/tmp -U% -N 500 -o 2 local-wbclient Volker (commit 68c5c6df in master) (cherry picked from commit c9df9c68da21610d9c32a57e24f45d36ebe432c5)
* s3/docs: Fix typos.Karolin Seeger2009-06-101-4/+4
| | | | | | | | Thanks to Oota Toshiya <t-oota at dh.jp.nec.com> for reporting! Karolin (cherry picked from commit f3df38362cc15211d9fca8229a0f9d9fc9c8e481) (cherry picked from commit 7434898b10a5c5780bd015b7bdca3eaa7a2b5475)
* Fix bug 6382: Case insensitive access to DFS links brokenVolker Lendecke2009-06-101-0/+2
| | | | (cherry picked from commit fda54237e8a4a87086a670499273c1402d1cd02b)
* s3/docs: Fix shutdown script example.Karolin Seeger2009-06-101-4/+5
| | | | | | | | | This fixes bug #5897. Thanks to TAKAHASHI Motonobu <monyo [at] samba.gr.jp> for reporting and providing the example! Karolin (cherry picked from commit f741b90ee8f74077871a0b5d1df55c0dd34a313f) (cherry picked from commit 1653bbf50b02e4f4dc2f01c5dab32c1cc4894582)
* s3-auth: use full 16byte session key in make_user_info_netlogon_interactive().Jeremy Allison2009-06-102-3/+2
| | | | | | | | | | | | | | | | | | | Patch from Jeremy. With this patch, I was able to join Windows 7 RC to a Samba3 DC, and login into a Samba 3 Domain. There are still two registry settings required: HKLM\System\CCS\Services\LanmanWorkstation\Parameters DWORD DomainCompatibilityMode = 1 DWORD DNSNameResolutionRequired = 0 Do *not* modify the other netlogon registry parameters that were passed around, they weaken security. Guenther / Jeremy. (cherry picked from commit 0da133101ab149b074ab369d819fc48b7c95bf71)
* s3-credentials: protect netlogon_creds_server_step() against NULL creds.Guenther Deschner2009-06-101-0/+4
| | | | | | | Found by SCHANNEL torture tests. Guenther (cherry picked from commit 339b99e31577d8a522711f84bc7d94e88c75d334)
* After getting confirmation from Guenther, add 3 changes we'll ultimately ↵Jeremy Allison2009-06-101-13/+23
| | | | | | need to fix bug #6099 Samba returns incurrate capabilities list. 1). Add a comment to point out that r->in.negotiate_flags is an aliased pointer to r->out.negotiate_flags. 2). Ensure we return NETLOGON_NEG_STRONG_KEYS in our flags return if the client requested it. 3). Clean up the error exits so we always return the same way. Signed off by Guenther. Jeremy. (cherry picked from commit 41f9e61d7c8c106a98792e9009bbecf5edfcebe9)
* s3-netlogon: Fix NETLOGON credential chain. Fixes Bug #6099 (Windows 7 ↵Guenther Deschner2009-06-101-2/+6
| | | | | | | | | | | | | | | joining Samba3) and probably many, many more. Jeremy, with 9a5d5cc1db0ee60486f932e34cd7961b90c70a56 you alter the in negotiate flags (which are a pointer to the out negotiate flags assigned in the generated netlogon server code). So, while you wanted to just set the *out* negflags, you did in fact reset the *in* negflags, effectively eliminating the NETLOGON_NEG_STRONG_KEYS bit (formerly known as NETLOGON_NEG_128BIT) which then caused creds_server_init() to generate 64bit creds instead of 128bit, causing the whole chain to break. *Please* check. Guenther (cherry picked from commit 1f05472b9a27861f8e4b9b60410890b920f9d359)
* Fix bug 6361: Make --rcfile work in smbgetVolker Lendecke2009-06-101-1/+1
| | | | | Thanks to j scott <gl@arlut.utexas.edu> for reporting! (cherry picked from commit 2238f7eede55fe780630df70b712fad7ebc95c76)
* Do not use the file system GET_REAL_FILENAME for mangled namesVolker Lendecke2009-06-101-7/+53
| | | | (cherry picked from commit 5ed457f984c093642afde854715b3792524e0798)
* Revert "Do not use the file system GET_REAL_FILENAME for mangled names"Karolin Seeger2009-06-101-23/+7
| | | | | This reverts commit 5a5dcd125fe236ddd93a6e56ae361fc84e306185. (cherry picked from commit 79003837947882c4a62490c0eff7984f7c343807)
* s3/ldap: also handle DirX return codesBjörn Jacke2009-06-101-0/+2
| | | | | this is a backport of f238809d236443b8968e1b4b197a55935c7c7e85 from master (cherry picked from commit 1b040289f14bb22d3b6ab07a452236549d6c9bf6)
* s3:loadparm: handle registry config source in file_list - fixes bug #6320Michael Adam2009-06-101-34/+44
| | | | | | | | | | I.e. does not require smbd restart after changing share default options in the global registry section with "include = registry". Michael This was commit 4842e45d59 in master. (cherry picked from commit a72e409bd1b9a9d91bd7311417d7175a64aa39b0)
* s3:smbd: fix posix acls when setting an ACL without explicit ACE for the ↵Stefan Metzmacher2009-06-101-3/+18
| | | | | | | | | | | | | | | | | | owner (bug#2346) The problem of bug #2346 remains for users exported by winbindd, because create_token_from_username() just fakes the token when the user is not in the local sam domain. This causes user_in_group_sid() to give totally wrong results. In uid_entry_in_group() we need to check if we already have the full unix token in the current_user struct. If so we should use the current_user unix token, instead of doing a very complex user_in_group_sid() which doesn't give reliable results anyway. metze (cherry picked from commit b79eff843be392f3065e912edca1434081d93c44) (cherry picked from commit cb5c72c0a05a78ff1b86eb02cf5ecd3d7d69623d)
* Fix bug #6330 - DFS doesn't work on AIX. Jeremy.Jeremy Allison2009-06-103-0/+47
| | | | | This was commit 3d6f4a7af in master. (cherry picked from commit c66b3807a356655d1d4e351502cad939f4d1d101)
* s3/packaging: Fix build on RHEL when ccache is not available.Karolin Seeger2009-06-101-2/+1
| | | | | | | | | | | This fixes bug #5832. Patch was provided by D.L. Meyer <dlmeyer [at] uiuc.edu>. Thanks for reporting and providing the patch! Karolin (cherry picked from commit 42e0cb8c0a1b8470ac8e9ad1c5a741e299debb8f) (cherry picked from commit b2205a7697598729f85cb767621b8c610654053c)
* Fix Coverity ID 897: REVERSE_INULLVolker Lendecke2009-06-101-1/+1
| | | | (cherry picked from commit a0e9521b306a7e83d09de4616a66b49d259f0bbc)
generated by cgit (git 2.34.1) at 2025-07-30 10:21:44 +0000