| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
|
|
| |
Guenther
(cherry picked from commit 4f3bfb6261dfb9836404399db57373ef91a411bf)
(cherry picked from commit 85ee8f36029deba69959aeacd68b55e676348d5f)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit b7925cb3f219b0502bb7d5ffff2dbda7bb4c2bda)
(cherry picked from commit 1136037b814472d09b98c7a276d4041603953a45)
|
|
|
|
|
|
|
|
| |
Timestamps in passdb (currently) only have second granularity.
Guenther
(cherry picked from commit 67df4489e20f17c334544818227e905136b6f5aa)
(cherry picked from commit a9c907bbc7fb6af7616e990eb1feb02bf3e844f8)
|
|
|
|
| |
(cherry picked from commit c6bf4cb7e611c4acd3df2e8a52ed535ec3210c24)
|
|
|
|
|
|
| |
not reliable for winbindd users from foreign domains.
Jeremy.
(cherry picked from commit 32eaef7d2f2e9be171f835b8f440b7c78ee22bd8)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
owner (bug#2346)
The problem of bug #2346 remains for users exported by
winbindd, because create_token_from_username() just fakes
the token when the user is not in the local sam domain. This causes
user_in_group_sid() to give totally wrong results.
In uid_entry_in_group() we need to check if we already
have the full unix token in the current_user struct.
If so we should use the current_user unix token,
instead of doing a very complex user_in_group_sid()
which doesn't give reliable results anyway.
metze
(cherry picked from commit b79eff843be392f3065e912edca1434081d93c44)
(cherry picked from commit 369c52cc8c3042dab5b60c25c03218a761ffd3ef)
|
|
|
|
|
| |
Guenther
(cherry picked from commit 891e677a97f90383803cd6203515ec9a98b1a430)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit 66cf7e1835d5d711c91d0541b05eb11b61267ba8)
(cherry picked from commit 921cd4b58f31e2ab821172b79ece8fb34d6b5cee)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit c2498d133db4dcb76e636661110b6432d017d13c)
(cherry picked from commit aa569ecfcf9d9f6084ab171afb64fb918870958b)
|
|
|
|
|
|
|
|
| |
Gets us closer to pass RPC-SAMR.
Guenther
(cherry picked from commit 266b79e004470ae1859085ca018fd6aff6836059)
(cherry picked from commit 21d7315fcf08836dfc6f5584bc018f9e46a81a26)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit d7b32b51f840d34e0ecb62dd8b7df862974d6271)
(cherry picked from commit 2d52c7c605d92356211aa11c31ce9c8392952557)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit 53713be2cbc1156769b8b82d3df9da02459232ce)
(cherry picked from commit 5fc5c808962ee87e618ab9661f449cd587dce361)
|
|
|
|
|
|
|
|
|
|
| |
Samba3.
I don't get this, why would the account suddenly get ACB_PWNOTREQ ?
Guenther
(cherry picked from commit 310031274d8b0fdf15a5e33fccfd7b6cb81c8a50)
(cherry picked from commit 7dee64aa3544057bc4d436974441052bc863fb3e)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit 6f4b5798c96ed69d965d6c3c005518f87afda8d6)
(cherry picked from commit 664cc387c18aafdf481ce468127dfba05009ea94)
|
|
|
|
|
|
|
|
|
|
| |
calls.
Found by torture test.
Guenther
(cherry picked from commit 227b61d7ea9895240e0e7f554fbb10d3e78feaae)
(cherry picked from commit d0ab51ff71c726af483cc71ac721b624087d54d7)
|
|
|
|
|
|
|
|
| |
This is vastly copied from samba4 samr server.
Guenther
(cherry picked from commit 5773d7d10253f6f53a9ae96e9979a87393b242a6)
(cherry picked from commit 8e0390378ab8afed728bdd76d977fd8207b5defc)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit d17c6af57c6e5ec10d71a9fcbffc6ce4d34a553f)
(cherry picked from commit ae7d88941121190ef999c281a0ddd972e2661321)
|
|
|
|
|
|
|
|
|
|
|
| |
It is a bad idea to just tell everyone that an account is disabled without
really having checked the password first.
Found by torture test.
Guenther
(cherry picked from commit c400fc1e1e9a0c3db82c9a96e9684c8debfb3b74)
(cherry picked from commit e754be3e03f96952ab1d8a4af1762a9f68562fa3)
|
|
|
|
|
| |
Guenther
(cherry picked from commit 2c0238226e95101b193615fd122e0494480b746a)
|
|
|
|
|
|
|
|
|
| |
In Samba 3 there are no pdb calls to store comments, codepages and countrycodes
(yet).
Guenther
(cherry picked from commit 41cb06fba7126c79fe536321f2dc461e87e83076)
(cherry picked from commit bcf7dbdcfde8704e8990871706904c31c008d651)
|
|
|
|
|
|
|
|
| |
This is to get us closer to pass RPC-SAMR-USERS.
Guenther
(cherry picked from commit 6aca5fca8dd73ff33cfac5000480520def04e7fa)
(cherry picked from commit e43120ebef1d3e4c9710d4d913fda41f9b727bb9)
|
|
|
|
|
|
|
|
| |
levels.
Guenther
(cherry picked from commit f05d888d7ab910b3ed39e4d36eeb52cb86bd990e)
(cherry picked from commit 970ccd28f32e4b67188629b99a0a1a2d6762b897)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit f93f713898f2208fda51f24121b060ee09f5fe3a)
(cherry picked from commit 07f33f9d7d9401390eb304866e5e1010b6d5ff13)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit b0df0e8cc76e67a977129aca8b254fe38de85ebd)
(cherry picked from commit 281d035ab2ca526dc7772a1124d2c612ea2a6e6c)
|
|
|
|
|
|
|
|
| |
info1.
Guenther
(cherry picked from commit 599b9fe86eba932171bb4ec13347ed28ea5edebd)
(cherry picked from commit 48818f8e5ebd64efa9fd26508422db7feba7dc25)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
ultimately need to fix bug #6099 Samba returns incurrate capabilities list.
1). Add a comment to point out that r->in.negotiate_flags is an aliased pointer to
r->out.negotiate_flags.
2). Ensure we return NETLOGON_NEG_STRONG_KEYS in our flags
return if the client requested it.
3). Clean up the error exits so we always return the same
way.
Signed off by Guenther.
Jeremy.
(cherry picked from commit 78fb479325ce7073ab8383ada3903080d12aef91)
(cherry picked from commit 2ea00bf3a65c76211a42d29adfa3f71e06c813e8)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
joining Samba3) and probably many, many more.
Jeremy, with 9a5d5cc1db0ee60486f932e34cd7961b90c70a56 you alter the in negotiate
flags (which are a pointer to the out negotiate flags assigned in the generated
netlogon server code). So, while you wanted to just set the *out* negflags, you
did in fact reset the *in* negflags, effectively eliminating the
NETLOGON_NEG_STRONG_KEYS bit (formerly known as NETLOGON_NEG_128BIT) which then
caused creds_server_init() to generate 64bit creds instead of 128bit, causing
the whole chain to break. *Please* check.
Guenther
(cherry picked from commit 78754ab2c9b28ea8ab09d3fd1f5450abe721a2c1)
(cherry picked from commit e527a1aa73b3fdb86787e9c55f6a01660b4d1a0f)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit b8ddb8765c6421b595737dac8deaeb88546a847a)
(cherry picked from commit d0854a690d1ce25a0c4f0ed92a3706a90f12305f)
|
|
|
|
|
|
|
|
| |
Found by SCHANNEL torture tests.
Guenther
(cherry picked from commit 8e490d2fa1c52be5da331df0b314508f77ec1f6e)
(cherry picked from commit 80e1a92ae770fbf97b22e6e99103def755294992)
|
|
|
|
|
|
|
|
| |
Samba3.
Guenther
(cherry picked from commit 949cd77ca2529249dc8cd04740c2ca342fb0c283)
(cherry picked from commit 707be96878c5618f42470e10ec68ce859c307678)
|
|
|
|
|
|
|
|
| |
behaviour against Samba 3.
Guenther
(cherry picked from commit 2cdfd67cae1ce4a08c6d42314916959ce6ef99fb)
(cherry picked from commit e88dc4c58226fdbd4d6a67d2260e0b200e0a52e4)
|
|
|
|
|
| |
Guenther
(cherry picked from commit b5097d54cb74ca0ea328f9e029562f65f4a01134)
|
|
|
|
| |
(cherry picked from commit 33a53cb98a5f66d56ca1e0633297065f05d12a48)
|
|
|
|
|
|
| |
Karolin
(cherry picked from commit 4a4dc776b2f0ca813abcf4f47f0d5721f75f3e6a)
(cherry picked from commit 6a617a9677da9df8f70cf2039245cfb5ce3d94c3)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit e398f1e91575909d2a90fab1e6f00804815a0b2f)
(cherry picked from commit 80d32b8bfcc9a7805d864bd60d89d747bbe9ad0d)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit bf197a9c0ab8a58a775277896d40617d36279288)
(cherry picked from commit 163d0699e83c43f136449a16f539c99320a3eeaa)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit d77c45675744895b01d905f7f27ae55e64264c26)
(cherry picked from commit 133a98abd58ccecb15f493bf74f6e3e076b87dcd)
|
|
|
|
|
|
|
|
| |
(key_driver_fetch_keys).
Guenther
(cherry picked from commit 7ac1ae8d1c3bcf4d001e29fdc1ee314dcbe3df76)
(cherry picked from commit 5ebe6755699fb970368580d4394289f9028ce9a8)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit 9966541f89b45834cdf63060202621f885bf9f5c)
(cherry picked from commit 4d67491ef558c96fd57a959bb58df9efa5e83ceb)
|
|
|
|
|
|
| |
Michael
(cherry picked from commit 4842e45d59dbd6c9ac138e796d30fcf747807d1c)
(cherry picked from commit a2c023c5511d5f07def53da7e72cc32c52434ccf)
|
|
|
|
| |
(cherry picked from commit c4a15b70b894e413ac76f4c8d7c04d8eedeba723)
|
|
|
|
| |
(cherry picked from commit e4628c6fc7348f56666adc69722809ea539c4fe7)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Often times before creating a file, a client will first query to see
if it already exists. Since some systems have a case-insensitive stat
that is called from unix_convert, we can definitively return
STATUS_NO_SUCH_FILE to the client without scanning the whole
directory.
This code path is taken from trans2querypathinfo, but trans2findfirst
still does a full directory scan even though the get_real_filename
(the case-insensitive stat vfs call) can prevent this.
This patch adds the get_real_filename call to the trans2find* path,
and also changes the vfs_default behavior for
SMB_VFS_GET_REAL_FILENAME. Previously, in the absence of a
get_real_filename implementation, we would fallback to the full
directory scan. The default behavior now returns -1 and sets errno to
EOPNOTSUPP. This allows SMB_VFS_GET_REALFILENAME to be called from
trans2* and unix_convert.
(cherry picked from commit 92558a875ebf842e652614a5519ae101dd62ffd1)
|
|
|
|
|
| |
Addendum to c49730e1. Use newer cookie conversion names.
(cherry picked from commit f4e2f7bc23da5f73311bb7adeab2838af14bdeaf)
|
|
|
|
| |
(cherry picked from commit 651ae5c705c15c84882f6c1c3d73292794c63aa9)
|
|
|
|
|
|
| |
Michael
(cherry picked from commit 0ca795ef4fab1f880c2b76d7fe8f0aabb302b6e2)
(cherry picked from commit e606a32d2981a67290379e7b2d4da7237746731a)
|
|
|
|
|
|
|
|
| |
context.
Guenther
(cherry picked from commit fee4c99be494b9679c414d6ba1938aa88adeacd3)
(cherry picked from commit 10c009cec59358ec11a9d25242fe395f31f671a6)
|
|
|
|
|
|
|
|
| |
talloc_free on malloced memory.
Guenther
(cherry picked from commit 5b37df21f6af52d20ad3a25361b1d7faa51308d1)
(cherry picked from commit 079c52a2c39ca2723402e7c6e2f8fd5825c2c40f)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit e7a8577df1e92982ff717a62280f86e3b0384d54)
(cherry picked from commit 14734deb6aacb592af5ddbbc93397ea79fe0d9bc)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
We need to allow to set filesystem capabilities from the default vfs in
create_conn_struct() in order to find mixed-case filenames. Thanks Volker!
This one was hard to find, so a little longer explanation:
When a Windows client tries to upload e.g. the Xerox 4110 PS driver, the client
first uploads the driver files to the [print$] share. Some of them (in this case
the Windows Postscript drivers) are with uppercase filenames while some of them
(like the PPD file) are in lowercase. After the driver upload the client issues
the spoolss_AddPrinterDriverEx() call with level 6. There the client tries to
add the PPD file with an uppercase filename (while having stored it in lowercase
on the server). The internal spoolss add driver functions then could not find the
appropriate filename while trying to move them to the version subdirectory (in
this case W32X86/3) and fails then entire spoolss_AddPrinterDriverEx() call.
With this fix, the convert_unix_name() name finds the correct file and
the spoolss_AddPrinterDriverEx() succeeds.
Guenther
(cherry picked from commit fe839b65a7b4e8d5e085287b7d33ee1f970fe7c2)
(cherry picked from commit d9233f534e9087cf6b35db5b72aefdd396b772e0)
|