summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* cifs.upcall: negatively instantiate keys on errorJeff Layton2009-01-121-2/+10
| | | | | | | | | | | | | | | When a request-key upcall exits without instantiating a key, the kernel will negatively instantiate the key with a 60s timeout. Older kernels, however seem to also link that key into the session keyring. This behavior can interefere with subsequent mount attempts until the key times out. The next request_key() call will get this negative key even if the upcall would have worked the second time. Fix this by having cifs.upcall negatively instantiate the key itself with a 1s timeout and don't attach it to the session keyring. Signed-off-by: Jeff Layton <jlayton@redhat.com> (cherry picked from commit 8ee20a90bf312ba8c98ae86439bb8365a4c55561)
* Building cifs.upcall is giving this build warning:Steve French2009-01-121-1/+1
| | | | | | | | | | client/cifs.upcall.c:205: warning: function declaration isn’t a prototype This patch fixes this by properly declaring usage() args as void. Signed-off-by: Jeff Layton <jlayton@redhat.com> Signed-off-by: Steve French <sfrench@samba.org> (cherry picked from commit 186eb5b26e29b687e9eab981a0ef673462f68f78)
* cifs.upcall: fix manpage and commentsSteve French2009-01-122-6/+6
| | | | | | | | | | | | | The "cifs.resolver" key type has been changed to "dns_resolver". Fix the comments at the top of cifs.upcall and the manpage accordingly. Signed-off-by: Jeff Layton <jlayton@redhat.com> Signed-off-by: Steve French <sfrench@samba.org> --- docs-xml/manpages-3/cifs.upcall.8.xml | 4 ++-- source/client/cifs.upcall.c | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) (cherry picked from commit de0e8337d4fdde8fc3e892710c1f27a697fdcef5)
* cifs.upcall was not recognizing the newer name "dns_resolver" key typeSteve French2009-01-121-1/+2
| | | | | | | | (as a synonym for the older "cifs.resolver" name) when resolving host names to ip addresses for the kernel. Acked-by: Jeff Layton (cherry picked from commit da92a35cae09d312f11f77d900132422162c435a)
* cifs.upcall: fix compile warningSteve French2009-01-121-3/+3
| | | | | | | | | | | | | | | | | Steve French noticed these warnings when building cifs.upcall: Compiling client/cifs.upcall.c client/cifs.upcall.c: In function 'usage': client/cifs.upcall.c:204: warning: declaration of 'prog' shadows a global declaration client/cifs.upcall.c:33: warning: shadowed declaration is here Change the usage function to not take and arg and have it just use the global "prog" variable. Fix a typo in the log message generated when an unknown option is specified. Also getopt() always returns '?' when it sees an unknown option so there's no point in printing it out. Signed-off-by: Jeff Layton <jlayton@redhat.com> (cherry picked from commit fb47f5de055a444b8b7a4555da0160f8d624e286)
* build: fix linking cifs.upcall when nscd_flush_cache() is found.Michael Adam2009-01-121-1/+1
| | | | | Michael (cherry picked from commit c3d0508619e11f3c70fec3427d6cf1213b98895f)
* cifs.upcall: move default install location to EPREFIX/sbinJeff Layton2009-01-121-4/+4
| | | | | | | | | cifs.upcall links to libraries that live under /usr, so installing it in /sbin doesn't seem appropriate. Move it to EPREFIX/sbin instead (i.e. /usr/sbin). Signed-off-by: Jeff Layton <jlayton@redhat.com> (cherry picked from commit af743c4407c41ef988ee99891e36b66153697330)
* cifs.upcall: enable building by default on linuxJeff Layton2009-01-121-4/+19
| | | | | | | | When building on linux, default to building cifs.upcall. Throw a warning if ADS support is disabled or keyutils isn't installed. Signed-off-by: Jeff Layton <jlayton@redhat.com> (cherry picked from commit 362092be7114d0ed4a8771ff3b4b5166350bac92)
* This patchset comprises a number of cleanups for the cifs upcallJeremy Allison2009-01-124-37/+161
| | | | | | | | | | | | | | | binary. The biggest change is that it renames it from cifs.spnego to cifs.upcall since the cifs.spnego name really isn't applicable anymore. It also fixes a segfault when the program is run without any args and adds a manpage. Comments and/or suggestions appreciated. This set should apply cleanly to the 3.3 test branch. Signed-off-by: Jeff Layton <jlayton@redhat.com> Jeremy. (cherry picked from commit e2e41ff95cc2388dd41cee1e105a280fbfcf7c02)
* Adds support for cifs.resolver upcall.Igor Mammedov2009-01-121-2/+61
| | | | | | | | | | | | | | Here is a patch for userspace cifs.spnego handler that adds support for cifs.resolver upcall used in DFS code. Any comments are appreciated. ############################# Cifs upcall with key type cifs.resolver is used for resolving server names in handling DFS refferals. Signed-off-by: Igor Mammedov <niallain@gmail.com> (cherry picked from commit 64f1f899dc983196692f535e6142acc0c817c0ab)
* Fix warningSimo Sorce2009-01-121-1/+1
| | | | (cherry picked from commit 63aae3f3135741eab8702eb9b261f7cee2fbeca0)
* * helper source for handling cifs kernel module upcall for kerberosIgor Mammedov2009-01-122-0/+347
| | | | | | | | | | authorization * Added -c option to set service prefix to "cifs" in service principal by default service prefix "host" is used * replaced malloc/free/srtncpy with replacements from samba project Signed-off-by: Igor Mammedov <niallain@gmail.com> (cherry picked from commit 88989075056fb7b14e3ed33b951d5587227a7be7)
* * Adds support for cifs.spnego helper into configure and Makefile.inIgor Mammedov2009-01-122-4/+59
| | | | | | | * Added checks for spnego prereq keyutils.h and kerberos in configure.in Signed-off-by: Igor Mammedov <niallain@gmail.com> (cherry picked from commit 9d2c5aee56d58930d4d982046b7164e12c12db5d)
* Backport of bugfix for #5751, smbclient: cannot show ACLs on DFS, done byJeremy Allison2009-01-121-13/+34
| | | | | | SATOH Fumiyasu <fumiyas@osstech.co.jp>. Jeremy. (cherry picked from commit 5e73ddba11cbf9ea2d6ca63be098720ff0d5a0d1)
* Here's the fix for bug #5750. Note this bug does *NOT* affectJeremy Allison2009-01-121-4/+6
| | | | | | 3.2.x (code is different there). Jeremy. (cherry picked from commit d3e790fa70d083a53de221907c951580ce2537a4)
* Fix bug #5052 - not work cancel inheritance on share. We wereJeremy Allison2009-01-121-3/+10
| | | | | | | using the parent security descriptor type and flags instead of using the passed in SD. Jeremy. (cherry picked from commit 78941c166debc8315516d895b2ef77e52417f067)
* Remove unecessary msync.Jeremy Allison2009-01-121-4/+0
| | | | | Jeremy. (cherry picked from commit 2f509fdbed5b0ab3d9ff06bc8101d9851989be19)
* Fix a memleakQiao Yang2009-01-121-1/+2
| | | | | | | request.extra_data is not freed if there is no extra_data in response or when there is some error happens in processing. This patch will free the buffer right after processing a request before sending back a response. (cherry picked from commit 05a80132ea95f40fdc8d4cfa6f90d8ba472a0272)
* Fix bug #5729. Explicitly allow "-valid".Jeremy Allison2009-01-121-1/+1
| | | | | Jeremy (cherry picked from commit f3d604ab72173c9d51661f3b696b0f25da602226)
* The msync manpage reports that msync *must* be called before munmap. Failure ↵Simo Sorce2009-01-122-2/+8
| | | | | | to do so may result in lost data. Fix an ifdef check, I really think we meant to check HAVE_MMAP here. (cherry picked from commit 0b39c04fed2720aad07544c65a57b6580ae322a0)
* net: net should just use machine account creds when changing passwords.Günther Deschner2009-01-121-0/+2
| | | | | Guenther (cherry picked from commit 09145720b510647e7c24e3062a4a1246cc7bff5b)
* Backport bugfix for bug #5710.Günther Deschner2009-01-122-13/+17
| | | | | | | | In order to successfully update a machine account password we need to use Netlogon ServerPasswordSet2 when NETLOGON_NEG_PASSWORD_SET2 has been negotiated. Guenther (cherry picked from commit 84fbac51ffc5f4a8a4f7b1baf5e9b1af174505f5)
* netlogon: "re-run make idl" - implement netr_ServerPasswordSet2 client.Günther Deschner2009-01-122-0/+130
| | | | | Guenther (cherry picked from commit a5b913dd31cc3c4d01458e6fcc0a03852a2738a2)
* netlogon: define NET_SRVPWSET2 call.Günther Deschner2009-01-121-0/+18
| | | | | Guenther (cherry picked from commit 15fe1a3fa07493060a0155bd4f9f0f9bd1588d50)
* become root for AIO operationsAndrew Tridgell2009-01-121-0/+6
| | | | | | | We need to become root for AIO read and write to allow the AIO thread to send a completion signal to the parent process when the IO completes (cherry picked from commit 91dcce0e4deb87c6d5e491eb9dbb09fd04981d28)
* EINVAL is also a valid error return, meaning "this filesystemAndrew Tridgell2009-01-121-2/+3
| | | | | cannot do sendfile for this file" (cherry picked from commit 5f30f87dcbeaf30713fadeb130193cb86021e87f)
* Avoid a race condition in glibc between AIO and setresuid().Andrew Tridgell2009-01-121-11/+13
| | | | | | | | | | | | | | See this test: http://samba.org/~tridge/junkcode/aio_uid.c The problem is that setresuid() tries to be clever about threads, and tries to change the euid of any threads that are running. If a AIO read or write completes while this is going on then the signal from the thread where the IO completed is lost, as it gets -1/EPERM from rt_sigqueueinfo() The simplest fix is to try to use setreuid() instead of setresuid(), as setreuid() doesn't try to be clever. Unfortunately this also means we must use become_root()/unbecome_root() in the aio code. (cherry picked from commit 5e3b978c51e741d413b856adafa1b1090ed8dd7b)
* Set version to 3.0.33-GITGerald (Jerry) Carter2009-01-121-1/+1
| | | | (cherry picked from commit 1e1449afba5d37fcfd26e0ca7edde05715bc48f7)
* Fix bug 4516, no IPv6 on Solaris 2.6.David Leonard2009-01-121-3/+22
| | | | (cherry picked from commit e05cf6e9337f949d369c915d8eec20dc58aa614e)
* WHATSNEW: Update WHATSNEW for 3.0.33.samba-3.0.33Karolin Seeger2008-11-181-7/+34
| | | | Karolin
* Fix the offset checks in the trans routinesVolker Lendecke2008-11-183-10/+10
| | | | | | | This fixes a potential crash bug, a client can make us read memory we should not read. Luckily I got the disp checks right... Volker
* VERSION: Raise version number up to 3.0.33.Karolin Seeger2008-11-181-1/+1
| | | | Karolin
* Add workaround for docs build and dependency on parameters.all.xmlsamba-3.0.32Gerald (Jerry) Carter2008-08-251-2/+5
|
* Updating release notes for 3.0.32.Gerald (Jerry) Carter2008-08-251-4/+69
|
* Set version to 3.0.32.Gerald (Jerry) Carter2008-08-251-1/+1
|
* Don't re-initialize a token when we already have one. This fixes the build ↵Jeremy Allison2008-08-221-8/+10
| | | | | | | farm failures when winbindd connects as guest. This one took a *lot* of tracking down :-). Jeremy.
* nss_winbind: When returning NSS_UNAVAIL, squash errno to ENOENTGerald (Jerry) Carter2008-08-201-0/+14
| | | | | | | | | | | According to the GNU libc nss guide, we should always set errno to ENOENT when returning NSS_UNAVAIL. http://www.gnu.org/software/libtool/manual/libc/NSS-Modules-Interface.html#NSS-Modules-Interface At least the MQ Series message queing service that runs on WebSphere will fail if you return any other errno in this case. (cherry picked from commit ee26664602445fa7798e2061f6bcbef0756d6528)
* Fix bug 5697 nmbd spins in reload_interfaces when only loopback exists.Jeremy Allison2008-08-193-4/+21
| | | | | Reported by Ted Percival <ted@midg3t.net>. Jeremy.
* net: Fix IPC connections with interactive password prompt.Michael Adam2008-08-041-1/+1
| | | | | | This fixes a regression introduced with 52f916c6. Some net subcommands didn't work when the username, but not the corresponding password was given on the command line.
* man pages: Fix typos in man smbclient.Karolin Seeger2008-07-291-2/+1
| | | | | | Karolin (cherry picked from commit db843d2faafb3487e3c7df4a3a52d6c71f369e1d) (cherry picked from commit 3a3640a85daa1a85415c949f9c2b804b4f067dd7)
* Back-port of Volkers fix.Jeremy Allison2008-07-251-4/+3
| | | | | | | | | | | | | | | | | | Fix a race condition in winbind leading to a crash When SIGCHLD handling is delayed for some reason, sending a request to a child can fail early because the child has died already. In this case async_main_request_sent() directly called the continuation function without properly removing the malfunctioning child process and the requests in the queue. The next request would then crash in the DLIST_ADD_END() in async_request() because the request pending for the child had been talloc_free()'ed and yet still was referenced in the list. This one is *old*... Volker Jeremy.
* man pages: "printcap name" is a global parameter, not a share specific one.Karolin Seeger2008-07-221-1/+1
| | | | | | | Karolin (cherry picked from commit 9cde2525560536e16e2dbf991dbeb446260dd0df) (cherry picked from commit 76061eee93fd67b96916a088c64a038e47a48814) (cherry picked from commit 32dab019adaa3a0999af7baf6bcb8b2865e386c3)
* Fix link for Using SambaAlexander Bokovoy2008-07-201-1/+1
|
* In the "log file = " case, don't overwrite theJim McDonough2008-07-172-7/+13
| | | | log.wb-<domain> logfile name on smb.conf reload.
* Allow %u parameters for print job username - use advanced subBo Yang2008-07-161-2/+4
|
* man pages: Fix typos and add improvements.Christoph Zauner2008-07-162-6/+7
| | | | | | (cherry picked from commit 060ff6d8d4e61f3ce89f980182413852cc5719be) (cherry picked from commit dab5cf616ce044040dd598fec3da9d3c97e51f6d) (cherry picked from commit 253405062237edfa78dc669a275af7ce9db849c4)
* docs: fix the specified default of "password server" - it is *, not "".Michael Adam2008-07-101-2/+1
| | | | | Michael (cherry picked from commit d7f759d302612ef9eb0bba022f3b3e1dd433f843)
* Updating release notes for 3.0.31samba-3.0.31Gerald W. Carter2008-07-101-3/+126
|
* Fix from Volker. Fix a segfault in base64_encode_data_blobJeremy Allison2008-07-101-1/+3
| | | | | We did not allocate enough memory for the \0 and a = at the end. Jeremy.
* Setting version to 3.0.31Gerald W. Carter2008-07-101-3/+3
|