summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* s3:is_trusted_domain: shortcut if domain name is NULL or emptyMichael Adam2010-02-151-0/+4
| | | | | | | | | | This saves some roundtrips to LDAP in an ldapsm setup. Michael (cherry picked from commit 0aa5a60d3033fddd652eb4ea89abdf97db912df3) Signed-off-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 85d8565e8c5a290698d0f0599f851dc0bee50245)
* s3: shortcut uid_to_sid when "ldapsam:trusted = yes"Michael Adam2010-02-151-0/+75
| | | | | | | | | | | | | | | | | | The normal uid_to_sid behaviour is to call sys_getpwuid() to get the name for the given uid and then call the getsampwnam passdb method for the resulting name. In the ldapsam:trusted case we can reduce the uid_to_sid operation to one simple search for the uidNumber attribute and only get the sambaSID attribute from the correspoinding LDAP object. This reduces the number of ldap roundtrips for this operation. Michael (cherry picked from commit 37dcc8a400ea41fb0a0559c9922cc41ac28ad045) Signed-off-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 91e40dfde99b08158b809590c44c22b503403157)
* s3:smbd: also fill the memcache with sid<->id mappings in ldapsam_sid_to_id()Michael Adam2010-02-151-0/+2
| | | | | | | | | | not only the persistent idmap cache. Michael (cherry picked from commit ee2565bd461ccfb916c5290c883e5ced3af72141) Signed-off-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 05f23a8dd6824bb6af3f60304096e621e534f4d4)
* s3:smbd: make idmap cache persistent for "ldapsam:trusted".Michael Adam2010-02-151-0/+4
| | | | | | | | | | | | | | This stores the mappings found in the idmap cache (which lives inside gencache). This cache is already read in sid_to_Xid() and Xid_to_sid() for ldapsam:trusted, this fills the opposite direction, massively reducing the number of ldap roundtrips across smbd restarts. Michael (cherry picked from commit d5537cbbf931f0bca519371bfd084fb0051acd57) Signed-off-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit c7220ff3a8281867ffc1a3bcaa992ca9eafba6ed)
* Fix large paged searchVolker Lendecke2010-02-151-0/+1
| | | | | | | | Signed-off-by: Michael Adam <obnox@samba.org> (cherry picked from commit afb06a8af3c4e86ef9960c8beb19a22f5fd0f3c2) Signed-off-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit cc529f47e10a87ef6688b14ec399edcd2e4e884d)
* =?utf-8?q?=D1=953:ldap:=20search=20for=20account=20policies=20in=20objectcla ↵Björn Jacke2010-02-151-1/+6
| | | | | | | | | | | | ss=20sambaDomain,=20not=20* =20(cherry=20picked=20from=20commit=20e5f41591504769b5c7beb5a35bb0f95b33d27a8b)?= MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Signed-off-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 4e66860d89872d2ba808761e0d58ed18e7ed428e)
* s3:ldap: don't search when no values where found (cherry picked from commit ↵Björn Jacke2010-02-151-1/+1
| | | | | | | 70063522065ab3e5a21fb11db0097b808aa11100) Signed-off-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 0b7d7e7c3d6a5abe94a0864f1ccaf9d1c00b8b7d)
* Fix bug #7122 - Reading a large browselist fails (server returns invalid ↵Jeremy Allison2010-02-152-3/+6
| | | | | | | | | | | | | | | | | | values in subsequent SMBtrans replies) There are two problems: 1). The server is off-by-one in the end of buffer space test. 2). The server returns 0 in the totaldata (smb_vwv1) and totalparams (smb_vwv0) fields in the second and subsequent SMBtrans replies. This patch fixes both. Jeremy. (cherry picked from commit 8ddc977c1421a47bedba8d5494f7ae67692b772a) Signed-off-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 8ac6085a2c7382e544888e632ff62c30f7e7a884)
* Fix off-by-one error in working out the limit of the NetServerEnum comment.Jeremy Allison2010-02-151-1/+1
| | | | | | | | Jeremy. (cherry picked from commit 9ad6f432f3f5844b4b419e7cbaf3c3e70b052d29) Signed-off-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 026f05839b6dbdeb5be3953930a28f7650c1e1da)
* s3:smbd: use StrCaseCmp() instead of strcasecmpStefan Metzmacher2010-02-151-4/+3
| | | | | | metze (cherry picked from commit bc8242a08e1bb9489cc8171b1ec02bd2518b1857) (cherry picked from commit 8142883b40819b5cb92ea671bb6c89bff68d3680)
* s3:smbd: Fix really ugly bool vs. int bug!!!Stefan Metzmacher2010-02-151-2/+2
| | | | | | | | | | A comparison function for qsort needs to return an 'int'! Otherwise you'll get random results depending on the compiler and the architecture... metze (cherry picked from commit 1686a5e7e7eb1b411b003cbbde5c0d28741c6d02) (cherry picked from commit 4e419df9154c329b3376ab00d6bb55093fbfe71a)
* s3:libsmb: fix NetServerEnum3 rap calls.Stefan Metzmacher2010-02-151-5/+19
| | | | | | metze (cherry picked from commit 9b5198dd443a00fdad4faa1f9cdabedd81012d93) (cherry picked from commit 86eae5b4862735309313e1800be44dab2641b393)
* s3:smbd: implement api_RNetServerEnum3Stefan Metzmacher2010-02-151-1/+212
| | | | | | | | This is needed to support large browse lists. metze (cherry picked from commit 30eec0656c926d3d85a438dc28f17649b53318f8) (cherry picked from commit f37f187070934e1046ce05d298d92ede7e6f7030)
* util: added binsearch.h for binary array searchesAndrew Tridgell2010-02-151-0/+68
| | | | | | | | | | | | | This was moved from the schema_query code. It will now be used in more than one place, so best to make it a library macro. I think there are quite a few places that could benefit from this. (cherry picked from commit 71943e8858943718affb6a3c0ded2127f07057f0) Signed-off-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 448b8f35d7a7cff73d35304673302178f593c9d0) Signed-off-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 2614ed62c8ca281d95151913ed591a86409e0566)
* s3:smbd: add/improve some DEBUG messages in api_RNetServerEnum2()Stefan Metzmacher2010-02-151-4/+6
| | | | | | metze (cherry picked from commit 495ac4616654c9e62e14031b7439aff21e42ec91) (cherry picked from commit f8f6beff57fd58b69648633f5b1c15289015f96b)
* s3:smbd: rename api_RNetServerEnum => api_RNetServerEnum2Stefan Metzmacher2010-02-151-3/+3
| | | | | | metze (cherry picked from commit dc58672c6588a1715698721153b35ed2d594bc67) (cherry picked from commit 0b6d850a553c0a558d579ab5e46f49794a015e34)
* Missed one check on the memcpy for bug #7063.Jeremy Allison2010-02-151-1/+1
| | | | | Jeremy. (cherry picked from commit 832fed700589ba0a49381fac71ff99edb5e8f167)
* Second part of fix for bug 7063 - Samba 3.4.5 on ubuntu 8.04 64 bit - Core ↵Jeremy Allison2010-02-151-1/+4
| | | | | | | | | | | dumps. Ensure we have no naked memcpy calls. This isn't a crash bug (it's already checked in the data_blob_talloc_zero() above, but I want to get into the pattern of having all memcpy's covered by safety checks. Jeremy. (cherry picked from commit 974bc68d7884ab77210a237e4ca8020ee88ae059)
* Fix bug 7104 - "wide links" and "unix extensions" are incompatible.Jeremy Allison2010-02-156-43/+22
| | | | | | | | | | | | | | | | Change parameter "wide links" to default to "no". Ensure "wide links = no" if "unix extensions = yes" on a share. Fix man pages to refect this. Remove "within share" checks for a UNIX symlink set - even if widelinks = no. The server will not follow that link anyway. Correct DEBUG message in check_reduced_name() to add missing "\n" so it's really clear when a path is being denied as it's outside the enclosing share path. Jeremy. (cherry picked from commit 9e64c33b7757dd4528a9c8d31d0c0c159a33daf8)
* Fix bug 7063 - Samba 3.4.5 on ubuntu 8.04 64 bit - Core dumps.Jeremy Allison2010-02-151-2/+9
| | | | | | | | | Reported and found by Martin Hochreiter <linuxbox@wavenet.at>. Ensure we copy the right amount of registry data into the outgoing buffer. Jeremy. (cherry picked from commit 4dd841cf3f71b33a18db70bbbb968a647aaa8efc)
* s3: Fix an uninitialized variable referenceVolker Lendecke2010-02-151-1/+2
| | | | | Fix bug #5885 (swat prints a bogus ip-address in smb.conf). (cherry picked from commit 2db64331ae27c8bf6ce341f6cab8f02e706a3f7a)
* s3: Fix malformed require_membership_of_sid.Bo Yang2010-02-151-0/+12
| | | | | | | | Signed-off-by: Bo Yang <boyang@samba.org> (cherry picked from commit 913a9f4e420c7a4177e6a7874e8ec2703f447918) Fix bug #7106. (cherry picked from commit 7e965f545b6f4d5f1ad12f4177eb477248c895c8)
* s3: normalize "Changing password for" msg IDs and STRsLars Müller2010-02-1518-30/+30
| | | | | | | | | | An additional space at the end of the "Changing password for" msgid lead to untranslated pam_winnind messages. (cherry picked from commit f9f1db18834648da73b7b1f6d9472523941e8277) Fix bug #7102 (normalize "Changing password for" msg IDs and STRs). (cherry picked from commit f6322442f54d49b8bacec2d8fc7960d0b87d674b) (cherry picked from commit 1bbbc152b4222554b2738108f3e267e147411166)
* s3:libsmb: don't reuse the callers stype variable in cli_NetServerEnum()Stefan Metzmacher2010-02-151-2/+3
| | | | | | | | | | | | | When we need to do more than one network operation to get the browse list we need to use the same 'stype' value each time. metze Signed-off-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit c2e4746fa9d68e7601e8e90cc0144d2e65a695b6) Fix bug #7098 (smbclient -L gives wrong results with a large browse list). (cherry picked from commit 49ed8e5ef079edf42bbe5325a46547ecfdff8a7d)
* Add cross option to samba_cv_linux_getgrouplist_okLars Müller2010-02-151-1/+3
| | | | | | | | | | | "cross" as an option got removed accidentl with commit e5a95132 while moving in direction of 3.2. Patch proposed by Richard Sharpe <realrichardsharpe@gmail.com>. (cherry picked from commit 30ea9932f5ea8a73c84dbab3ae3e997c2ae34e79) Fix bug #7047. (cherry picked from commit 050f86f83b8d6642e1b88c37f4ad294f5e206b87)
* s3/smbd: Fix string buffer overflow causing heap corruptionSteven Danneman2010-02-151-1/+2
| | | | | | | | | | | | | | | | | | The destname malloc size was not taking into account the 1 extra byte needed if a string without a leading '/' was passed in and that slash was added. This would cause the '\0' byte to be written past the end of the malloced destname string and corrupt whatever heap memory was there. This problem would be hit if a share name was given in smb.conf without a leading '/' and if it was the exact size of the allocated STRDUP memory which in some implementations of malloc is a power of 2. (cherry picked from commit f42971c520360e69c4cdd64bebb02a5f5ba49b94) Fix bug #7096. (cherry picked from commit db5ccb70b6ac51ea263889cc9cdd523673ae8ecd) (cherry picked from commit 3916710b9414d679774399e6d0cff61e4b67a2e3)
* s3: Simplify the code a bit: Catch (len==0) earlyVolker Lendecke2010-02-151-7/+4
| | | | | Part of a fix for bug #7081. (cherry picked from commit ecec9fb2d283f17aee8eceb39ab61d8204cff0f3)
* Fix bug 7081 - vfs_expand_msdfs doesn't work correctly (with fix identified)Jeremy Allison2010-02-151-3/+16
| | | | | | | | Fix inspired by idea from Eric Horst <erich@cac.washington.edu>. Jeremy. (cherry picked from commit de24209f0a745ada4220a1751c4ed88ae6eea575) (cherry picked from commit fd630147319b9a21426ba2a34b726c35c03396b6)
* Fix bug #7072 - Accounts can't be unlocked from ldap.Jeremy Allison2010-02-151-8/+17
| | | | | | | | | | | | | | | | Fix suggested by Andy Hanton <andyhanton@gmail.com>. The LOGIN_CACHE struct contains two time_t entries, but was being written to and read from via tdb_pack/tdb_unpack functions using explicit 32-bit int specifiers. This would break on machines with a 64-bit time_t. Use correct int sizes for tdb_pack/tdb_unpack. We have to fix this properly before 2037 :-). Contains fixes from master 627fb85092f728065b6d772c41aeb75018154e86 and 69fd8461b8792f4fee1b61db03953044565492c6. Jeremy. (cherry picked from commit 3a341c54ba6b8b63419662207f1d42767a00eb16)
* Fix bug #7067 - Linux asynchronous IO (aio) can cause smbd to fail to ↵Jeremy Allison2010-02-153-5/+71
| | | | | | | | | | | respond to a read or write. Only works on Linux kernels 2.6.26 and above. Grants CAP_KILL capability to allow Linux threads under different euids to send signals to each other. Jeremy. (cherry picked from commit 899bd0005f56dcc1e95c3988d41ab3f628bb15db) (cherry picked from commit 246eba3b807e5ce50ee838c51823a9eb44f6b690)
* Do not segfault in pdb_search_destructor if no real search was startedVolker Lendecke2010-02-151-1/+2
| | | | | | | (cherry picked from commit d07464b21fe652e205f5eb2c74d12495bab100ce) Fix bug #7068 (pdb_search api may crash as non-root user). (cherry picked from commit 135b67a627fd1e98b4211fe3ac738ae2fec10145)
* s3-docs: Adapt version in man ldbrename.Karolin Seeger2010-02-151-1/+1
| | | | | Karolin (cherry picked from commit 69100db8c331ed15651ae52b88632d047f148ae4)
* s3/docs: Add missing meta data to man ldbrename.Karolin Seeger2010-02-151-0/+3
| | | | | | | | | Avoid warnings. Karolin (cherry picked from commit 6a9e88e08bfa4463ce5bdc57183f6518b524c98c) (cherry picked from commit 1a25ef232bacb59aa753fbe21fed53a996d2e6b3) (cherry picked from commit ba665a53b3a86a56b1cf3adeccf6764291dc264b)
* s3: Fix bug 7052: "DFS broken on AIX (maybe others)"William Jojo2010-02-151-1/+1
| | | | | | (cherry picked from commit c531d00ab4444db19ff6ba4c60ebdcc8319949c6) (cherry picked from commit f21796955e7aa2e84a1c810612f2fdee2bde611c) (cherry picked from commit 28b3cf328312a26cd72bbc54f3283bc46b51bc32)
* s3-docs: Fix typos.Karolin Seeger2010-02-156-6/+6
| | | | | | | | | | | | Thanks to the Debian samba package maintainers <pkg-samba-maint@lists.alioth.debian.org> for providing the patch! Fix bug #7017 (Typos and spelling errors in manpages). Karolin (cherry picked from commit e1e6b19acff6d8ba3b70c3ab474a85de8b6f6a6c) (cherry picked from commit eaa10cfec3c389c79ac3c43f7ec1596015a9b8e1) (cherry picked from commit 436e13608e489b4bd5c00597efca9c9ca66b8be1)
* s3:pdb_ldap: restore Samba 3.0.x behavior and use the first "uid" value.Stefan Metzmacher2010-02-151-1/+1
| | | | | | | | | | | See bug #6157 for more details. metze Signed-off-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 25806f43ddee7e2653e907eea2c6fcc075960fa1) (cherry picked from commit ac224452b94865db346ed68dc517f84d40e6303c) (cherry picked from commit 20a405288fb1b33c43b31b170f1acc9c82732208)
* s3:smbldap: add smbldap_talloc_first_attribute()Stefan Metzmacher2010-02-152-0/+37
| | | | | | | | | metze Signed-off-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit c992127f8a96c37940a6d298c7c6859c47f83d9b) (cherry picked from commit 915b7552b71904baf6a452bdc1649e76d8286a14) (cherry picked from commit 6402321d5bbbb28b335787856b16c3d8556e8e0a)
* WHATSNEW: Start release notes for Samba 3.4.6.Karolin Seeger2010-02-151-2/+47
| | | | | Karolin (cherry picked from commit bcb4da881426d1e863582aab8c455430f3a224f0)
* VERSION: Raise version number up to 3.4.6.Karolin Seeger2010-02-151-1/+1
| | | | | Karolin (cherry picked from commit febac98cadd14ece58f3df99ce7670d41c046e3d)
* WHATSNEW: Update changes.samba-3.4.5Karolin Seeger2010-01-181-1/+7
| | | | | Karolin (cherry picked from commit fb7af5cfcf4f8c45e4c56f85a82eb93647068c8b)
* s3: Fix a crash in libsmbclient used against the OpenSolaris CIFS serverVolker Lendecke2010-01-181-1/+1
| | | | | | | | | A user has sent me a sniff where the OpenSolaris CIFS server returns "32" in totalentries, but the array in ctr only contains 15 entries. Look at the right delimiter for walking the array. Fix bug #7046 (libsmbclient crash against OpenSolaris CIFS server). (cherry picked from commit 734446bb3a8984ec805c73e06e553312b46e4094)
* Fix bug 7045 - Bad (non memory copying) interfaces in smbc_setXXXX calls.Jeremy Allison2010-01-182-10/+31
| | | | | | | | | | | | | | | In smbc_free_context libsmbclient just called free() on the string options so it assumes the callers have malloced them before setting them via smbc_set calls. Change to correctly malloc/free string options to the library. Protect against SMB_STRDUP of null. Contains 2d41b1ab78639abe4ae030ff482573f464564dd7 and f85b6ee90b88c7f7b2a92c8a5f3e2ebe59c1087b from master. Jeremy (cherry picked from commit 1d9dc38aec417c8ccc9fa34d32015ee57d877ba9)
* WHATSNEW: Update changes since 3.4.4.Karolin Seeger2010-01-181-2/+21
| | | | | Karolin (cherry picked from commit b8ff43eedef4315595e6b4c4467e8e2d8d19ffc4)
* s3-libsmbclient: Fix crash bug in SMBC_parse_path().Günther Deschner2010-01-181-1/+1
| | | | | | | | | | | | | Patch from Tim Waugh <twaugh@redhat.com>. This resolves https://bugzilla.redhat.com/show_bug.cgi?id=552658 LIBSMBCLIENT-OPENDIR torture test checks this as well. Guenther (cherry picked from commit e635b0074c55e0376495abe940355aa7b04f0b70) Fix bug #7043 (SIGSEGV in "SMBC_parse_path"). (cherry picked from commit 01009416998219a27268211a3ae26d7b3ab157f8)
* docs: add -K option to the pdbedit manpage.Michael Adam2010-01-181-0/+1
| | | | | | | | | Thanks to Oota Toshiya <t-oota at dh.jp.nec.com> for pointing this out! Michael Fix bug #7041. (cherry picked from commit 918045b22b1607acf51c40d8c8765862f3400a1d)
* Fix bug #7036 - net rpc getsid fails in hardened windows environments.Jeremy Allison2010-01-181-1/+7
| | | | | | Fix suggested by Dave.Daugherty@Centrify.com. (cherry picked from commit 6653cc43233381a941cdd85550f04b087fe880ff) (cherry picked from commit 59b46630ac205bdfe409c0c8b60dc5f5ddad5cf1)
* Fix bug #7034 - vfs_cap causes signal 11 (SIGSEGV) (cherry picked from ↵SASAJIMA Toshihiro2010-01-181-1/+2
| | | | | | commit ca847952054f5bbde1d40ad4260589b6fcc9721d) (cherry picked from commit 62bed0de7f6dbde183c3002253008941c4b88b3f)
* smbd: Fix opening the quota magic fileStefan Metzmacher2010-01-181-5/+10
| | | | | | | This fixes bug #6642 and bug #6919. metze (cherry picked from commit 7fd0767c6abdc9f4c456ae0a7d247f3a25ffcbd9)
* Re-fix bug 5202 - cannot change ACLs on writable file with "dos filemode=yes"Jeremy Allison2010-01-181-0/+3
| | | | | | | | | | | | | | | | This bug re-occurred for 3.3.x and above. The reason is that to change a NT ACL we now have to open the file requesting WRITE_DAC and WRITE_OWNER access. The mapping from POSIX "w" to NT permissions in posix_acls doesn't add these bits when "dos filemode = yes", so even though the permission or owner change would be allowed by the POSIX ACL code, the NTCreateX call fails with ACCESS_DENIED now we always check NT permissions first. Added in the mapping from "w" to WRITE_DAC and WRITE_OWNER access. Jeremy. (cherry picked from commit f04a8d1811c1099eb653efda314bc98553fa6d02)
* Second part of the fix for bug #7020 - smbd using 2G memory.Jeremy Allison2010-01-181-0/+7
| | | | | | | | | There was a second leak in the processing of the out_data.frag prs_struct. It needs freeing once the current pdu has been returned asynchronously. Jeremy. (cherry picked from commit 3c092c7acb18620e3769c791a9ea4055605247ee)