summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Merge 2610c05b5b95cc7036b3d6dfb894c6cfbdb68483 as Samba-4.0alpha16samba-4.0.0alpha16Andrew Bartlett2011-06-241484-25241/+78250
|\
| * release Samba 4.0 alpha16Andrew Bartlett2011-06-241-1/+1
| |
| * Update WHATSNEW.txt with news for Samba 4.0 alpha16Andrew Bartlett2011-06-242-318/+101
| |
| * build: Remove blacklist now we have a common buildAndrew Bartlett2011-06-241-10/+0
| |
| * s3-build Require fully defined symbols in ALL libraries by defaultAndrew Bartlett2011-06-242-56/+29
| | | | | | | | | | | | | | | | | | | | | | The only exception here is libsmbregistry, which needs further work to resolve the library loop caused by the registry based smb.conf loading. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri Jun 24 05:01:38 CEST 2011 on sn-devel-104
| * s3-build: Require fully defined symbols for all public librariesAndrew Bartlett2011-06-241-1/+1
| |
| * s3-build: Remove SECRETS3 as a samba3core depAndrew Bartlett2011-06-241-5/+10
| | | | | | | | | | | | | | | | This resolves the the library loop between libsmbconf and SECRETS3/passdb, and allows the next commit to require fully defined symbols in public libraries. Andrew Bartlett
| * s3-param Remove %(DomainSID) supportAndrew Bartlett2011-06-241-102/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This also removes the now unused longvar support. This experiment never took off. Fixing this allows me to resolve the the library loop between libsmbconf and SECRETS3/passdb. Andreas correctly points out that this loop originally comes from my patch to obtain the domain sid from passdb (25cfa29e29bdbb6c84bd85ea02ec542228ae585f), but as I would prefer to keep that feature, I'm hoping to break the loop here instead. Andrew Bartlett
| * Fix bug #8254 - "acl check permissions = no" does not work in all casesJeremy Allison2011-06-242-2/+16
| | | | | | | | | | | | | | | | | | | | | | Move lp_acl_check_permissions() into can_delete_file_in_directory() where it makes sense. Remove ACL check when requesting DELETE_ACCESS when lp_acl_check_permissions is false. Thanks to John Janosik @ IBM for noticing this. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Jun 24 01:18:11 CEST 2011 on sn-devel-104
| * build: Add a script to install python and Samba with one commandAndrew Bartlett2011-06-231-0/+41
| | | | | | | | | | | | | | | | | | | | | | | | | | This should help folks on systems that don't have a recent python provided by the OS. Python is installed into the same prefix as Samba, not in the default path. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Jun 23 14:56:54 CEST 2011 on sn-devel-104
| * s3-param Remove 'announce version' parameterAndrew Bartlett2011-06-2310-103/+22
| | | | | | | | | | | | | | | | The only users I can find of this on the internet involve confused users, and our own documentation recommends never setting this. Don't confuse our users any longer. Andrew Bartlett
| * param: Remove "announce as" parameterAndrew Bartlett2011-06-235-98/+4
| |
| * s3-net: Bind our gettext results to 'unix charset'Andrew Bartlett2011-06-233-2/+12
| | | | | | | | | | | | | | | | | | | | This ensures that the translations and any embedded strings are in the same charset. It won't be the one from the user's locale (we no longer auto-detect that), but it will be self-consistent. Thanks to Steve Langasek for pointing this function out! Andrew Bartlett
| * s3-swat Remove d_printf() callsAndrew Bartlett2011-06-231-2/+2
| | | | | | | | | | | | | | | | These calls only ever output ASCII strings (protocol strings and debugging), and never user content, so make it clear that these don't need to be converted into UTF8. Andrew Bartlett
| * lib/util/charset: Remove autodetection of charset from LOCALEAndrew Bartlett2011-06-233-34/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In the past, our LOCALE would set the display charset of Samba. The display charset has now been removed. This patch removes the support code that detected the locale from the environment. We cannot safely have 'unix charset' follow the locale (at it creates files on disk and entries in databases that must not vary), so this code is unused. As an example, imagine a database is manipulated in the administrator's locale, and then read by smbd starting up in the system default locale. Or smbd restarted by the administrator rather than a startup script. Both of these situations could corrupt databases or filenames on disk. Andrew Bartlett
| * lib/util/charset: Remove 'display charset'Andrew Bartlett2011-06-2313-157/+63
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As discussed in 'CH_DISPLAY and gettext' on the samba-technical list: http://lists.samba.org/archive/samba-technical/2011-June/078190.html Setting this to a value other than 'unix charset' does not make sense, as any system where the filesytem charset does not equal the terminal charset will already have problems with programs as simple as 'ls'. It also means that our output could not be pasted as our input in interactive programs or onto our command line, as we never did translate in the DISPLAY -> UNIX direction. The d_printf() calls are retained in case we need to revisit this, and to support display_set_stderr(). Andrew Bartlett
| * s3: Add IO_REPARSE_TAG_SYMLINK defineVolker Lendecke2011-06-231-0/+1
| | | | | | | | | | | | | | From http://msdn.microsoft.com/en-us/library/dd541667%28v=PROT.13%29.aspx Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Thu Jun 23 13:46:37 CEST 2011 on sn-devel-104
| * s3: Fix some nonempty blank linesVolker Lendecke2011-06-231-3/+3
| |
| * s3: remove prototype of convert_string_error from proto.hMichael Adam2011-06-231-4/+0
| | | | | | | | | | Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Thu Jun 23 12:34:31 CEST 2011 on sn-devel-104
| * s3: remove prototype of convert_string from proto.hMichael Adam2011-06-231-4/+0
| |
| * dfsreferral: search client's site and use itMatthieu Patou2011-06-231-2/+2
| | | | | | | | | | Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Thu Jun 23 01:50:39 CEST 2011 on sn-devel-104
| * s4-dbcheck: fix uninitialized errstr in err_dn_target_mismatchMatthieu Patou2011-06-221-2/+3
| | | | | | | | | | Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Wed Jun 22 21:22:27 CEST 2011 on sn-devel-104
| * s4-dbcheck: remove unused includeMatthieu Patou2011-06-221-1/+1
| |
| * s4-schema: avoid segfaulting if id3.guid is NULLMatthieu Patou2011-06-221-2/+1
| |
| * s4-samba_dnsupdate: set environment via the env parameterMatthieu Patou2011-06-221-1/+1
| | | | | | | | | | I faced a situation where the os.environ("KRB5CCNAME") = ... didn't seems to be effective
| * s4-upgradeprovision: Don't forget to populate the non replicated objects, ↵Matthieu Patou2011-06-221-2/+4
| | | | | | | | and don't touch rIDPreviousAllocationPool
| * dbchecker: cope with a broken link to Deleted ObjectsAndrew Tridgell2011-06-221-2/+9
| | | | | | | | | | if a DN link to Deleted Objects has a bad GUID, we need to use show_deleted
| * dbchecker: fixed argument error for -H and DNAndrew Tridgell2011-06-221-1/+1
| |
| * dbchecker: when fixing a bad GUID in a DN, search by the string DNAndrew Tridgell2011-06-221-1/+1
| |
| * samba-tool: added --attrs option to dbcheckAndrew Tridgell2011-06-222-8/+15
| | | | | | | | this allows checking of a specific list of attributes
| * samba-tool: make the dbcheck class available outside of samba-toolAndrew Tridgell2011-06-222-285/+324
| | | | | | | | | | this will be used in provision, and probably in upgradeprovision as well
| * samba-tool: added --quiet option to dbcheckAndrew Tridgell2011-06-221-35/+43
| | | | | | | | | | this will be used to allow for other tools (such as provision) to call into dbcheck without generating a lot of noise
| * s4:winbind/wb_init_domain: use DCERPC_SCHANNEL_128 in order to work against ↵Stefan Metzmacher2011-06-221-1/+1
| | | | | | | | | | | | | | | | | | w2k8r2 metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jun 22 19:40:47 CEST 2011 on sn-devel-104
| * s4:ntvfs/cifs: add option to use S4U2ProxyStefan Metzmacher2011-06-221-0/+49
| | | | | | | | | | | | | | | | | | Note: this doesn't work against a Samba4 KDC yet. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jun 22 18:17:43 CEST 2011 on sn-devel-104
| * s4:auth/kerberos: protect kerberos_kinit_password_cc() against old KDCsStefan Metzmacher2011-06-221-1/+48
| | | | | | | | | | | | | | If the KDC does not support S4U2Proxy, it might return a ticket for the TGT client principal. metze
| * s4:auth/kerberos: add S4U2Proxy support to kerberos_kinit_password_cc()Stefan Metzmacher2011-06-223-5/+134
| | | | | | | | | | | | | | For S4U2Proxy we need to use the ticket from the S4U2Self stage and ask the kdc for the delegated ticket for the target service. metze
| * Update eDirectory schemaJim McDonough2011-06-221-49/+20
| | | | | | | | | | Autobuild-User: Jim McDonough <jmcd@samba.org> Autobuild-Date: Wed Jun 22 14:48:09 CEST 2011 on sn-devel-104
| * s4-dsdb: bypass validation when relax setAndrew Tridgell2011-06-221-1/+2
| | | | | | | | | | | | | | this allows dbcheck to fix bad attributes Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Jun 22 12:27:06 CEST 2011 on sn-devel-104
| * samba-tool: allow for running dbcheck against a remove ldap serverAndrew Tridgell2011-06-221-5/+14
| | | | | | | | this is useful for running it against a Windows server
| * samba-tool: expanded dbcheck DN checkingAndrew Tridgell2011-06-221-21/+104
| | | | | | | | | | | | | | this now checks for bad GUID elements in DN links, and offers to fix them when possible Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
| * s4-dsdb: prioritise GUID in extended_dn_inAndrew Tridgell2011-06-221-8/+11
| | | | | | | | | | | | | | if we search with a base DN that has both a GUID and a SID, then use the GUID first. This matters for the S-1-5-17 SID. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
| * s4-dsdb: catch duplicate matches in extended_dn_inAndrew Tridgell2011-06-221-0/+12
| | | | | | | | | | | | | | | | When searching using extended DNs, if there are multiple matches then return an object not found error. This is needed for the case of a duplicate objectSid, which happens for S-1-5-17 Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
| * s3: Added missing includes to .clang_complete.Andreas Schneider2011-06-221-0/+2
| | | | | | | | | | Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Wed Jun 22 11:15:56 CEST 2011 on sn-devel-104
| * s4:auth/kerberos: protect kerberos_kinit_password_cc() against old KDCsStefan Metzmacher2011-06-221-1/+47
| | | | | | | | | | | | | | | | | | | | Old KDCs may not support S4U2Self (or S4U2Proxy) and return tickets which belongs to the client principal of the TGT. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jun 22 09:10:55 CEST 2011 on sn-devel-104
| * s4:auth/kerberos: remove one indentation level in kerberos_kinit_password_cc()Stefan Metzmacher2011-06-221-94/+99
| | | | | | | | | | | | This will make the following changes easier to review. metze
| * s4:auth/kerberos: reformat kerberos_kinit_password_cc()Stefan Metzmacher2011-06-221-32/+41
| | | | | | | | | | | | In order to make the following changes easier to review. metze
| * s4:auth/kerberos: don't mix s4u2self creds with machine account credsStefan Metzmacher2011-06-221-24/+76
| | | | | | | | | | | | | | | | | | | | | | It's important that we don't store the tgt for the machine account in the same krb5_ccache as the ticket for the impersonated principal. We may pass it to some krb5/gssapi functions and they may use them in the wrong way, which would grant machine account privileges to the client. metze
| * s4:auth/kerberos: use better variable names in kerberos_kinit_password_cc()Stefan Metzmacher2011-06-221-27/+41
| | | | | | | | | | | | This will make the following changes easier to review. metze
| * s4:auth/kerberos: don't ignore return code in kerberos_kinit_password_cc()Stefan Metzmacher2011-06-221-0/+2
| | | | | | | | metze
| * samba-tool: added missing GUID component checks to dbcheckAndrew Tridgell2011-06-221-4/+93
| | | | | | | | | | | | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Jun 22 07:59:30 CEST 2011 on sn-devel-104