summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* s3-smbd: Rename reload_printers() and add documentation.Andreas Schneider2011-09-055-11/+22
| | | | | Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Mon Sep 5 17:59:47 CEST 2011 on sn-devel-104
* s3: Fix smbcontrol smbd idmap kill S-1-5-21-...Volker Lendecke2011-09-051-6/+20
| | | | | | | | | The calls to sid_to_gid and sid_to_uid create id mapping entries themselves, which makes it pretty difficult to reliably delete id mapping entries everywhere just using a SID. Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Mon Sep 5 16:30:41 CEST 2011 on sn-devel-104
* s3: Reformat msg_idmap.c to match Samba codingVolker Lendecke2011-09-051-13/+19
|
* libcli/smb: add PROTOCOL_SMB2_10Stefan Metzmacher2011-09-051-1/+2
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Sep 5 14:57:06 CEST 2011 on sn-devel-104
* libcli/smb: remove PROTOCOL_SMB2 alias of PROTOCOL_SMB2_02Stefan Metzmacher2011-09-051-1/+0
| | | | metze
* s3:smbd: make use of PROTOCOL_SMB2_02Stefan Metzmacher2011-09-051-1/+1
| | | | metze
* s4:libcli/raw: make use of PROTOCOL_SMB2_02Stefan Metzmacher2011-09-051-1/+1
| | | | metze
* s4:ntvfs: s/!= PROTOCOL_SMB2/< PROTOCOL_SMB2_02/Stefan Metzmacher2011-09-054-8/+8
| | | | metze
* s4:ntvfs: s/== PROTOCOL_SMB2/>= PROTOCOL_SMB2_02/Stefan Metzmacher2011-09-058-9/+9
| | | | metze
* s4:smb_server: make use of PROTOCOL_SMB2_02Stefan Metzmacher2011-09-053-3/+3
| | | | metze
* s4:param: make use of PROTOCOL_SMB2_02Stefan Metzmacher2011-09-051-1/+2
| | | | metze
* libcli/smb: move smb2_signing.c to the toplevelStefan Metzmacher2011-09-057-13/+42
| | | | metze
* s4-cracknames: fixed cracknames to use more specific searchAndrew Tridgell2011-09-051-13/+12
| | | | | | | | | | this uses the bitwise comparison ldap operators to ensure we only get NC roots Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Sep 5 12:48:39 CEST 2011 on sn-devel-104
* s4-cldap: fixed cldap search based on dom_sidAndrew Tridgell2011-09-051-15/+4
| | | | | | we were not filling in the sid pointer correctly for the ldb_search Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* ndr: range check on push of dom_sid blobAndrew Tridgell2011-09-051-1/+4
| | | | | | | this ensures we get an error if we try to push a dom_sid with too many sub_auths Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-ldb: allow decoding of trustAuthIncoming and trustAuthOutgoingAndrew Tridgell2011-09-052-0/+23
| | | | | | | this allows --show-binary to display trustAuthOutgoing and trustAuthIncoming NDR blobs. Useful for debugging trust issues Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* heimdal: Try to handle the PAC checking when we are in a cross-realm environmentAndrew Bartlett2011-09-051-1/+10
|
* s4-samdb: added a few function comments for pydocAndrew Tridgell2011-09-051-0/+3
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-provision: these substitutuons are not used any moreAndrew Tridgell2011-09-051-4/+1
| | | | | | we now create partitions dynamically Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
* drsblobs: fixed alignment of drs blobs authentication informationAndrew Tridgell2011-09-051-5/+5
| | | | | | | the two types of ndr flags were being mixed up, so NDR_BUFFERS was being interpreted as LIBNDR_FLAG_NOALIGN Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-torture: enable password comparison in drsblobs testAndrew Tridgell2011-09-051-2/+2
| | | | | | I'm not sure why this was commented out, as it does pass Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-torture: fixed a ndr string errorAndrew Tridgell2011-09-051-1/+1
| | | | | | the dos charset global changes with the new loadparm context Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-s3-upgrade Fix error handling in add_users_to_groupAndrew Bartlett2011-09-051-2/+5
|
* s4-schema consolidate schema handlingAndrew Bartlett2011-09-053-80/+48
| | | | | | | It also creates a single routine dsdb_load_ldb_results_into_schema() to handle cases where the schema is in the form of an ldb_result. Andrew Bartlett
* s3-spoolssd: Remove stale printers only on a valid pcap update.Andreas Schneider2011-09-051-2/+2
| | | | | | | | | load_printers() removes stale printers and we should only remove them if we have a CUPS connection and talked to cups. Else we will remove every configured printer if cups is not available. Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Mon Sep 5 11:18:23 CEST 2011 on sn-devel-104
* s4-provision handle a number of invalid but real-world upgrade casesAndrew Bartlett2011-09-051-9/+36
| | | | | | | | | | Real world databass have the wrong account flags (U and W at the same time) and have the wrong group type in group mapping databases. Cope with these. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Sep 5 04:58:09 CEST 2011 on sn-devel-104
* s4-provision Fix type error on existing idmap entries in s3 upgradeAndrew Bartlett2011-09-051-1/+1
| | | | | | This is already a DN object. Andrew Bartlett
* s4-dsdb Print clearer error messages when invalid account flags are ↵Andrew Bartlett2011-09-051-0/+9
| | | | specified on add
* s4-provision Use ProvisioningError and the eadbAndrew Bartlett2011-09-052-6/+27
| | | | | | | | | | The eadb flag tells us to avoid using system extended attributes, typcially if we are not running as root (ie, in a test environment). The ProvisioningError class allows us to return failures to the upgrade_from_s3 script which can then be detected correctly by the selftest framework. Andrew Bartlett
* s4-provision Add realm to DC configuration in upgrade_from_s3 testAndrew Bartlett2011-09-051-0/+1
|
* s4-provision Allow a missing idmap DB in upgrade.pyAndrew Bartlett2011-09-041-2/+9
| | | | | Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Sun Sep 4 06:34:16 CEST 2011 on sn-devel-104
* s4-provision cope with SID_NAME_WKN_GRP mappings in upgrade.pyAndrew Bartlett2011-09-041-1/+5
| | | | | | | | Some incorrect LDAP backends have entries with this group type, but due to the pdb_ldap code, we cannot read the group members, and we already skip them in add_group_from_mapping_entry(). Andrew Bartlett
* s3:smb2cli: ask for a session key in smb2cli_sesssetup_send()Stefan Metzmacher2011-09-031-0/+3
| | | | | | | | | This is needed if we want to support SMB2 signing later. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sat Sep 3 16:21:35 CEST 2011 on sn-devel-104
* s3-spoolss: Fix bug #8236 empty notify servername.Andreas Schneider2011-09-031-0/+9
| | | | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Sat Sep 3 02:58:42 CEST 2011 on sn-devel-104
* Part 5 of bugfix for bug #7509 - smb_acl_to_posix: ACL is invalid for set ↵Jeremy Allison2011-09-031-4/+21
| | | | | | | | | | (Invalid argument) Be smarter about setting default permissions when a ACL_GROUP_OBJ isn't given. Use the principle of least surprises for the user. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Sat Sep 3 00:16:05 CEST 2011 on sn-devel-104
* Part 4 of bugfix for bug #7509 - smb_acl_to_posix: ACL is invalid for set ↵Jeremy Allison2011-09-021-8/+11
| | | | | | | (Invalid argument) Be smarter about setting default permissions when a ACL_USER_OBJ isn't given. Use the principle of least surprises for the user.
* Part 3 of bugfix for bug #7509 - smb_acl_to_posix: ACL is invalid for set ↵Jeremy Allison2011-09-021-7/+6
| | | | | | | | (Invalid argument) Don't call check_owning_objs() to convert ACL_USER->ACL_USER_OBJ and AC_GROUP->ACL_GROUP_OBJ for default (directory) ACLs, we do this separately inside ensure_canon_entry_valid().
* Part 2 of bugfix for bug #7509 - smb_acl_to_posix: ACL is invalid for set ↵Jeremy Allison2011-09-021-0/+38
| | | | | | | (Invalid argument) Only map CREATOR_OWNER/CREATOR_GROUP to ACL_USER_OBJ/ACL_GROUP_OBJ in a default(directory) ACL set.
* Part 1 of bugfix for bug #7509 - smb_acl_to_posix: ACL is invalid for set ↵Jeremy Allison2011-09-021-72/+0
| | | | | | | (Invalid argument) Remove the code I added for bug "6878 - Cannot change ACL's inherit flag". It is incorrect and causes the POSIX ACL ACL_USER_OBJ duplication.
* s3:registry: fix a debug message typoMichael Adam2011-09-021-1/+1
| | | | | Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Fri Sep 2 11:47:11 CEST 2011 on sn-devel-104
* s3:registry: introduce a define REGDB_CODE_VERSION and use it in regdb code.Michael Adam2011-09-022-9/+9
| | | | | This is to not use the precise code version REGDB_VERSION_V3 explicitly in the code.
* s3:registry: rename REGVE_Vx toREGDB_VERSION_Vx for consistencyMichael Adam2011-09-022-15/+15
|
* s3:registry: implement regdb_set_secdesc() with regdb_trans_do()Michael Adam2011-09-021-22/+43
| | | | | Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Fri Sep 2 00:51:40 CEST 2011 on sn-devel-104
* s3:registry: implement regdb_store_values() with regdb_trans_do()Michael Adam2011-09-011-1/+26
| | | | This adds the runtime check for changed regdb format version to store_values
* s3:registry: change regdb_store_values_internal() from bool to NTSTATUS ↵Michael Adam2011-09-011-11/+15
| | | | return code
* s3:registry: use the regdb_trans_do wrapper instead of using dbwrap_trans_do ↵Michael Adam2011-09-011-18/+18
| | | | | | directly in the registry db code. This verifies the regdb format version number before the corresponding write operations.
* s3:registry: add regdb_trans_do(): a transaction wrapper that will check the ↵Michael Adam2011-09-011-0/+42
| | | | | | | regdb version If the version has changed since initialization, the write will fail with ACCESS_DENIED.
* s3:registry: drop log level of unknown regdb version message in regdb_init() ↵Michael Adam2011-09-011-1/+1
| | | | to 0
* Fix bug 8433, segfault in iconv.cVolker Lendecke2011-09-011-1/+0
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Thu Sep 1 18:25:34 CEST 2011 on sn-devel-104
* s3-rpc_server: Add missing rng_fault_state in epmapper.Andreas Schneider2011-09-011-0/+2
| | | | | | | | | We need to raise an exception so we need to set the rng_fault_state for epm_Insert and epm_Delete if someone connects over a transport other than NCALRPC. Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Thu Sep 1 15:59:50 CEST 2011 on sn-devel-104