summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* s4-smbtorture: skip unsupported ACB bits for Samba3 in RPC-SAMR-USER.Günther Deschner2009-05-261-4/+10
| | | | | | Guenther (cherry picked from commit 4f3bfb6261dfb9836404399db57373ef91a411bf) (cherry picked from commit 85ee8f36029deba69959aeacd68b55e676348d5f)
* s3-samr: more accurateness in _samr_SetDomainInfo().Günther Deschner2009-05-261-3/+3
| | | | | | Guenther (cherry picked from commit b7925cb3f219b0502bb7d5ffff2dbda7bb4c2bda) (cherry picked from commit 1136037b814472d09b98c7a276d4041603953a45)
* s4-smbtorture: Support timestamp handling for Samba3 in RPC-SAMR-USERS.Günther Deschner2009-05-261-8/+23
| | | | | | | | Timestamps in passdb (currently) only have second granularity. Guenther (cherry picked from commit 67df4489e20f17c334544818227e905136b6f5aa) (cherry picked from commit a9c907bbc7fb6af7616e990eb1feb02bf3e844f8)
* Fix bug #6330 - DFS doesn't work on AIX. Jeremy.Jeremy Allison2009-05-263-0/+47
| | | | (cherry picked from commit c6bf4cb7e611c4acd3df2e8a52ed535ec3210c24)
* Expand the comment explaining why user_in_group_sid isJeremy Allison2009-05-261-1/+6
| | | | | | not reliable for winbindd users from foreign domains. Jeremy. (cherry picked from commit 32eaef7d2f2e9be171f835b8f440b7c78ee22bd8)
* s3:smbd: fix posix acls when setting an ACL without explicit ACE for the ↵Stefan Metzmacher2009-05-261-3/+18
| | | | | | | | | | | | | | | | | | owner (bug#2346) The problem of bug #2346 remains for users exported by winbindd, because create_token_from_username() just fakes the token when the user is not in the local sam domain. This causes user_in_group_sid() to give totally wrong results. In uid_entry_in_group() we need to check if we already have the full unix token in the current_user struct. If so we should use the current_user unix token, instead of doing a very complex user_in_group_sid() which doesn't give reliable results anyway. metze (cherry picked from commit b79eff843be392f3065e912edca1434081d93c44) (cherry picked from commit 369c52cc8c3042dab5b60c25c03218a761ffd3ef)
* s3-samr: Fix the build of _samr_QueryDomainInfo, sorry :)Günther Deschner2009-05-261-3/+3
| | | | | Guenther (cherry picked from commit 891e677a97f90383803cd6203515ec9a98b1a430)
* s3-selftest: run RPC-LSA-GETUSER against Samba 3.Günther Deschner2009-05-261-1/+2
| | | | | | Guenther (cherry picked from commit 66cf7e1835d5d711c91d0541b05eb11b61267ba8) (cherry picked from commit 921cd4b58f31e2ab821172b79ece8fb34d6b5cee)
* s4-smbtorture: Fix printf info-level mismatch in RPC-SAMR.Günther Deschner2009-05-261-1/+1
| | | | | | Guenther (cherry picked from commit c2498d133db4dcb76e636661110b6432d017d13c) (cherry picked from commit aa569ecfcf9d9f6084ab171afb64fb918870958b)
* s3-samr: implement more info levels in _samr_QueryDomainInfo().Günther Deschner2009-05-261-0/+82
| | | | | | | | Gets us closer to pass RPC-SAMR. Guenther (cherry picked from commit 266b79e004470ae1859085ca018fd6aff6836059) (cherry picked from commit 21d7315fcf08836dfc6f5584bc018f9e46a81a26)
* s3-samr: Fix potential memory leak in _samr_ChangePasswordUser().Günther Deschner2009-05-261-1/+2
| | | | | | Guenther (cherry picked from commit d7b32b51f840d34e0ecb62dd8b7df862974d6271) (cherry picked from commit 2d52c7c605d92356211aa11c31ce9c8392952557)
* s3-selftest: finally enable RPC-SAMR-PASSWORDS which samba3 now passes.Günther Deschner2009-05-261-1/+1
| | | | | | Guenther (cherry picked from commit 53713be2cbc1156769b8b82d3df9da02459232ce) (cherry picked from commit 5fc5c808962ee87e618ab9661f449cd587dce361)
* s4-smbtorture: avoid acct_flags check at the end of RPC-SAMR-PASSWORDS for ↵Günther Deschner2009-05-261-1/+4
| | | | | | | | | | Samba3. I don't get this, why would the account suddenly get ACB_PWNOTREQ ? Guenther (cherry picked from commit 310031274d8b0fdf15a5e33fccfd7b6cb81c8a50) (cherry picked from commit 7dee64aa3544057bc4d436974441052bc863fb3e)
* s3-selftest: need to enable lanman auth in order make RPC-SAMR-PASSWORDS pass.Günther Deschner2009-05-263-0/+6
| | | | | | Guenther (cherry picked from commit 6f4b5798c96ed69d965d6c3c005518f87afda8d6) (cherry picked from commit 664cc387c18aafdf481ce468127dfba05009ea94)
* s3-samr: Do not leak information whether a user exist or not in pwd change ↵Günther Deschner2009-05-261-0/+11
| | | | | | | | | | calls. Found by torture test. Guenther (cherry picked from commit 227b61d7ea9895240e0e7f554fbb10d3e78feaae) (cherry picked from commit d0ab51ff71c726af483cc71ac721b624087d54d7)
* s3-samr: implement _samr_ChangePasswordUser().Günther Deschner2009-05-261-10/+113
| | | | | | | | This is vastly copied from samba4 samr server. Guenther (cherry picked from commit 5773d7d10253f6f53a9ae96e9979a87393b242a6) (cherry picked from commit 8e0390378ab8afed728bdd76d977fd8207b5defc)
* s3-samr: implement _samr_OemChangePasswordUser2().Günther Deschner2009-05-261-10/+48
| | | | | | Guenther (cherry picked from commit d17c6af57c6e5ec10d71a9fcbffc6ce4d34a553f) (cherry picked from commit ae7d88941121190ef999c281a0ddd972e2661321)
* s3-samr: disable check for ACB_DISABLED in check_oem_password().Günther Deschner2009-05-261-1/+4
| | | | | | | | | | | It is a bad idea to just tell everyone that an account is disabled without really having checked the password first. Found by torture test. Guenther (cherry picked from commit c400fc1e1e9a0c3db82c9a96e9684c8debfb3b74) (cherry picked from commit e754be3e03f96952ab1d8a4af1762a9f68562fa3)
* s3-samr: rework check_oem_password() to take a struct samu, not to return one.Günther Deschner2009-05-261-39/+27
| | | | | Guenther (cherry picked from commit 2c0238226e95101b193615fd122e0494480b746a)
* s4-smbtorture: prepare for running RPC-SAMR-USERS against samba3.Günther Deschner2009-05-261-16/+24
| | | | | | | | | In Samba 3 there are no pdb calls to store comments, codepages and countrycodes (yet). Guenther (cherry picked from commit 41cb06fba7126c79fe536321f2dc461e87e83076) (cherry picked from commit bcf7dbdcfde8704e8990871706904c31c008d651)
* s3-samr: Let _samr_TestPrivateFunctionsUser() return not supported.Günther Deschner2009-05-261-1/+0
| | | | | | | | This is to get us closer to pass RPC-SAMR-USERS. Guenther (cherry picked from commit 6aca5fca8dd73ff33cfac5000480520def04e7fa) (cherry picked from commit e43120ebef1d3e4c9710d4d913fda41f9b727bb9)
* s3-samr: let set_user_info_16 and 20 follow the same pattern as all other ↵Günther Deschner2009-05-263-29/+40
| | | | | | | | levels. Guenther (cherry picked from commit f05d888d7ab910b3ed39e4d36eeb52cb86bd990e) (cherry picked from commit 970ccd28f32e4b67188629b99a0a1a2d6762b897)
* s3-samr: support some more info levels in samr_SetUserInfo calls.Günther Deschner2009-05-263-0/+468
| | | | | | Guenther (cherry picked from commit f93f713898f2208fda51f24121b060ee09f5fe3a) (cherry picked from commit 07f33f9d7d9401390eb304866e5e1010b6d5ff13)
* s3-samr: support some more info levels in samr_QueryUser calls.Günther Deschner2009-05-261-0/+266
| | | | | | Guenther (cherry picked from commit b0df0e8cc76e67a977129aca8b254fe38de85ebd) (cherry picked from commit 281d035ab2ca526dc7772a1124d2c612ea2a6e6c)
* s3-samr: Fix _samr_Connect5(). In error case it still needs to return empty ↵Günther Deschner2009-05-261-1/+2
| | | | | | | | info1. Guenther (cherry picked from commit 599b9fe86eba932171bb4ec13347ed28ea5edebd) (cherry picked from commit 48818f8e5ebd64efa9fd26508422db7feba7dc25)
* After getting confirmation from Guenther, add 3 changes we'llJeremy Allison2009-05-261-13/+23
| | | | | | | | | | | | | | ultimately need to fix bug #6099 Samba returns incurrate capabilities list. 1). Add a comment to point out that r->in.negotiate_flags is an aliased pointer to r->out.negotiate_flags. 2). Ensure we return NETLOGON_NEG_STRONG_KEYS in our flags return if the client requested it. 3). Clean up the error exits so we always return the same way. Signed off by Guenther. Jeremy. (cherry picked from commit 78fb479325ce7073ab8383ada3903080d12aef91) (cherry picked from commit 2ea00bf3a65c76211a42d29adfa3f71e06c813e8)
* s3-netlogon: Fix NETLOGON credential chain. Fixes Bug #6099 (Windows 7 ↵Günther Deschner2009-05-261-2/+6
| | | | | | | | | | | | | | | | joining Samba3) and probably many, many more. Jeremy, with 9a5d5cc1db0ee60486f932e34cd7961b90c70a56 you alter the in negotiate flags (which are a pointer to the out negotiate flags assigned in the generated netlogon server code). So, while you wanted to just set the *out* negflags, you did in fact reset the *in* negflags, effectively eliminating the NETLOGON_NEG_STRONG_KEYS bit (formerly known as NETLOGON_NEG_128BIT) which then caused creds_server_init() to generate 64bit creds instead of 128bit, causing the whole chain to break. *Please* check. Guenther (cherry picked from commit 78754ab2c9b28ea8ab09d3fd1f5450abe721a2c1) (cherry picked from commit e527a1aa73b3fdb86787e9c55f6a01660b4d1a0f)
* s3-rpcclient: rework enumdrivers call a bit to allow queries like win7 does.Günther Deschner2009-05-261-69/+97
| | | | | | Guenther (cherry picked from commit b8ddb8765c6421b595737dac8deaeb88546a847a) (cherry picked from commit d0854a690d1ce25a0c4f0ed92a3706a90f12305f)
* s3-credentials: protect netlogon_creds_server_step() against NULL creds.Günther Deschner2009-05-261-0/+4
| | | | | | | | Found by SCHANNEL torture tests. Guenther (cherry picked from commit 8e490d2fa1c52be5da331df0b314508f77ec1f6e) (cherry picked from commit 80e1a92ae770fbf97b22e6e99103def755294992)
* s3-selftest: run RPC-SCHANNEL, RPC-SCHANNEL2 and RPC-BENCH-SCHANNEL1 against ↵Günther Deschner2009-05-261-0/+1
| | | | | | | | Samba3. Guenther (cherry picked from commit 949cd77ca2529249dc8cd04740c2ca342fb0c283) (cherry picked from commit 707be96878c5618f42470e10ec68ce859c307678)
* s4-smbtorture: Avoid failing RPC-SCHANNEL when testing lsa_GetUserName ↵Günther Deschner2009-05-261-2/+8
| | | | | | | | behaviour against Samba 3. Guenther (cherry picked from commit 2cdfd67cae1ce4a08c6d42314916959ce6ef99fb) (cherry picked from commit e88dc4c58226fdbd4d6a67d2260e0b200e0a52e4)
* s3-auth: use full 16byte session key in make_user_info_netlogon_interactive().Günther Deschner2009-05-262-3/+2
| | | | | Guenther (cherry picked from commit b5097d54cb74ca0ea328f9e029562f65f4a01134)
* Fix bug 6336: "net groupmap set" segfaultsVolker Lendecke2009-05-261-2/+4
| | | | (cherry picked from commit 33a53cb98a5f66d56ca1e0633297065f05d12a48)
* s3/docs: Remove unnecessary .sp.Karolin Seeger2009-05-261-10/+10
| | | | | | Karolin (cherry picked from commit 4a4dc776b2f0ca813abcf4f47f0d5721f75f3e6a) (cherry picked from commit 6a617a9677da9df8f70cf2039245cfb5ce3d94c3)
* s3-docs: Fix Bug #6331. Document "net dom join/net dom unjoin".Günther Deschner2009-05-261-0/+81
| | | | | | Guenther (cherry picked from commit e398f1e91575909d2a90fab1e6f00804815a0b2f) (cherry picked from commit 80d32b8bfcc9a7805d864bd60d89d747bbe9ad0d)
* s3-docs: Fix "net eventlog dump" syntax in manpage.Günther Deschner2009-05-261-1/+1
| | | | | | Guenther (cherry picked from commit bf197a9c0ab8a58a775277896d40617d36279288) (cherry picked from commit 163d0699e83c43f136449a16f539c99320a3eeaa)
* s3-rpcclient: print more infolevels in printer and driver info levels.Günther Deschner2009-05-261-7/+238
| | | | | | Guenther (cherry picked from commit d77c45675744895b01d905f7f27ae55e64264c26) (cherry picked from commit 133a98abd58ccecb15f493bf74f6e3e076b87dcd)
* s3-printing: fix debug statement in virtual registry layerGünther Deschner2009-05-261-1/+1
| | | | | | | | (key_driver_fetch_keys). Guenther (cherry picked from commit 7ac1ae8d1c3bcf4d001e29fdc1ee314dcbe3df76) (cherry picked from commit 5ebe6755699fb970368580d4394289f9028ce9a8)
* s3-printing: simplify print_queue helper functions and return WERROR.Günther Deschner2009-05-264-42/+23
| | | | | | Guenther (cherry picked from commit 9966541f89b45834cdf63060202621f885bf9f5c) (cherry picked from commit 4d67491ef558c96fd57a959bb58df9efa5e83ceb)
* s3:loadparm: handle registry config source in file_list - fixes bug #6320Michael Adam2009-05-261-34/+44
| | | | | | Michael (cherry picked from commit 4842e45d59dbd6c9ac138e796d30fcf747807d1c) (cherry picked from commit a2c023c5511d5f07def53da7e72cc32c52434ccf)
* Fix Coverity ID 897: REVERSE_INULLVolker Lendecke2009-05-261-1/+1
| | | | (cherry picked from commit c4a15b70b894e413ac76f4c8d7c04d8eedeba723)
* s3 onefs: Turn up the debug level for non-error casestprouty2009-05-261-3/+3
| | | | (cherry picked from commit e4628c6fc7348f56666adc69722809ea539c4fe7)
* s3: Fix trans2 path to use case-insensitive stat optimizationtprouty2009-05-263-8/+57
| | | | | | | | | | | | | | | | | | | | | Often times before creating a file, a client will first query to see if it already exists. Since some systems have a case-insensitive stat that is called from unix_convert, we can definitively return STATUS_NO_SUCH_FILE to the client without scanning the whole directory. This code path is taken from trans2querypathinfo, but trans2findfirst still does a full directory scan even though the get_real_filename (the case-insensitive stat vfs call) can prevent this. This patch adds the get_real_filename call to the trans2find* path, and also changes the vfs_default behavior for SMB_VFS_GET_REAL_FILENAME. Previously, in the absence of a get_real_filename implementation, we would fallback to the full directory scan. The default behavior now returns -1 and sets errno to EOPNOTSUPP. This allows SMB_VFS_GET_REALFILENAME to be called from trans2* and unix_convert. (cherry picked from commit 92558a875ebf842e652614a5519ae101dd62ffd1)
* s3:onefs.so Change system function namesSteven Danneman2009-05-261-4/+4
| | | | | Addendum to c49730e1. Use newer cookie conversion names. (cherry picked from commit f4e2f7bc23da5f73311bb7adeab2838af14bdeaf)
* Fix bug 6302: Give the VFS a chance to read from 0-byte filesVolker Lendecke2009-05-261-8/+9
| | | | (cherry picked from commit 651ae5c705c15c84882f6c1c3d73292794c63aa9)
* s3:loadparm: use the returnvalue of service_ok() in process_smbconf_service().Michael Adam2009-05-261-1/+1
| | | | | | Michael (cherry picked from commit 0ca795ef4fab1f880c2b76d7fe8f0aabb302b6e2) (cherry picked from commit e606a32d2981a67290379e7b2d4da7237746731a)
* s3-ldap: fix more callers of smbldap_dn_talloc() that were passing a NULL ↵Günther Deschner2009-05-262-2/+2
| | | | | | | | context. Guenther (cherry picked from commit fee4c99be494b9679c414d6ba1938aa88adeacd3) (cherry picked from commit 10c009cec59358ec11a9d25242fe395f31f671a6)
* s3-ldapsam: Fix Bug #6313: ldapsam_update_sam_account() crashes while doing ↵Günther Deschner2009-05-261-1/+1
| | | | | | | | talloc_free on malloced memory. Guenther (cherry picked from commit 5b37df21f6af52d20ad3a25361b1d7faa51308d1) (cherry picked from commit 079c52a2c39ca2723402e7c6e2f8fd5825c2c40f)
* error-codes: add some more group specific windows error codes.Günther Deschner2009-05-262-0/+6
| | | | | | Guenther (cherry picked from commit e7a8577df1e92982ff717a62280f86e3b0384d54) (cherry picked from commit 14734deb6aacb592af5ddbbc93397ea79fe0d9bc)
* s3-printing: Fix driver upload for Xerox 4110 PS printer driver.Günther Deschner2009-05-261-0/+2
| | | | | | | | | | | | | | | | | | | | | | | We need to allow to set filesystem capabilities from the default vfs in create_conn_struct() in order to find mixed-case filenames. Thanks Volker! This one was hard to find, so a little longer explanation: When a Windows client tries to upload e.g. the Xerox 4110 PS driver, the client first uploads the driver files to the [print$] share. Some of them (in this case the Windows Postscript drivers) are with uppercase filenames while some of them (like the PPD file) are in lowercase. After the driver upload the client issues the spoolss_AddPrinterDriverEx() call with level 6. There the client tries to add the PPD file with an uppercase filename (while having stored it in lowercase on the server). The internal spoolss add driver functions then could not find the appropriate filename while trying to move them to the version subdirectory (in this case W32X86/3) and fails then entire spoolss_AddPrinterDriverEx() call. With this fix, the convert_unix_name() name finds the correct file and the spoolss_AddPrinterDriverEx() succeeds. Guenther (cherry picked from commit fe839b65a7b4e8d5e085287b7d33ee1f970fe7c2) (cherry picked from commit d9233f534e9087cf6b35db5b72aefdd396b772e0)