| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
When a request-key upcall exits without instantiating a key, the kernel
will negatively instantiate the key with a 60s timeout. Older kernels,
however seem to also link that key into the session keyring. This
behavior can interefere with subsequent mount attempts until the
key times out. The next request_key() call will get this negative key
even if the upcall would have worked the second time.
Fix this by having cifs.upcall negatively instantiate the key itself
with a 1s timeout and don't attach it to the session keyring.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
(cherry picked from commit 8ee20a90bf312ba8c98ae86439bb8365a4c55561)
|
|
|
|
|
|
|
|
|
|
| |
client/cifs.upcall.c:205: warning: function declaration isn’t a prototype
This patch fixes this by properly declaring usage() args as void.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Signed-off-by: Steve French <sfrench@samba.org>
(cherry picked from commit 186eb5b26e29b687e9eab981a0ef673462f68f78)
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The "cifs.resolver" key type has been changed to "dns_resolver". Fix
the comments at the top of cifs.upcall and the manpage accordingly.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Signed-off-by: Steve French <sfrench@samba.org>
---
docs-xml/manpages-3/cifs.upcall.8.xml | 4 ++--
source/client/cifs.upcall.c | 8 ++++----
2 files changed, 6 insertions(+), 6 deletions(-)
(cherry picked from commit de0e8337d4fdde8fc3e892710c1f27a697fdcef5)
|
|
|
|
|
|
|
|
| |
(as a synonym for the older "cifs.resolver" name) when resolving host
names to ip addresses for the kernel.
Acked-by: Jeff Layton
(cherry picked from commit da92a35cae09d312f11f77d900132422162c435a)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Steve French noticed these warnings when building cifs.upcall:
Compiling client/cifs.upcall.c
client/cifs.upcall.c: In function 'usage':
client/cifs.upcall.c:204: warning: declaration of 'prog' shadows a global declaration
client/cifs.upcall.c:33: warning: shadowed declaration is here
Change the usage function to not take and arg and have it just use the global
"prog" variable. Fix a typo in the log message generated when an unknown
option is specified. Also getopt() always returns '?' when it sees an unknown
option so there's no point in printing it out.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
(cherry picked from commit fb47f5de055a444b8b7a4555da0160f8d624e286)
|
|
|
|
|
| |
Michael
(cherry picked from commit c3d0508619e11f3c70fec3427d6cf1213b98895f)
|
|
|
|
|
|
|
|
|
| |
cifs.upcall links to libraries that live under /usr, so installing it
in /sbin doesn't seem appropriate. Move it to EPREFIX/sbin instead
(i.e. /usr/sbin).
Signed-off-by: Jeff Layton <jlayton@redhat.com>
(cherry picked from commit af743c4407c41ef988ee99891e36b66153697330)
|
|
|
|
|
|
|
|
| |
When building on linux, default to building cifs.upcall. Throw a
warning if ADS support is disabled or keyutils isn't installed.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
(cherry picked from commit 362092be7114d0ed4a8771ff3b4b5166350bac92)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
binary. The biggest change is that it renames it from cifs.spnego
to cifs.upcall since the cifs.spnego name really isn't applicable
anymore.
It also fixes a segfault when the program is run without any args
and adds a manpage. Comments and/or suggestions appreciated.
This set should apply cleanly to the 3.3 test branch.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Jeremy.
(cherry picked from commit e2e41ff95cc2388dd41cee1e105a280fbfcf7c02)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Here is a patch for userspace cifs.spnego handler that adds support for cifs.resolver
upcall used in DFS code.
Any comments are appreciated.
#############################
Cifs upcall with key type cifs.resolver is used for resolving
server names in handling DFS refferals.
Signed-off-by: Igor Mammedov <niallain@gmail.com>
(cherry picked from commit 64f1f899dc983196692f535e6142acc0c817c0ab)
|
|
|
|
| |
(cherry picked from commit 63aae3f3135741eab8702eb9b261f7cee2fbeca0)
|
|
|
|
|
|
|
|
|
|
| |
authorization
* Added -c option to set service prefix to "cifs" in service principal by
default service prefix "host" is used
* replaced malloc/free/srtncpy with replacements from samba project
Signed-off-by: Igor Mammedov <niallain@gmail.com>
(cherry picked from commit 88989075056fb7b14e3ed33b951d5587227a7be7)
|
|
|
|
|
|
|
| |
* Added checks for spnego prereq keyutils.h and kerberos in configure.in
Signed-off-by: Igor Mammedov <niallain@gmail.com>
(cherry picked from commit 9d2c5aee56d58930d4d982046b7164e12c12db5d)
|
|
|
|
|
|
| |
SATOH Fumiyasu <fumiyas@osstech.co.jp>.
Jeremy.
(cherry picked from commit 5e73ddba11cbf9ea2d6ca63be098720ff0d5a0d1)
|
|
|
|
|
|
| |
3.2.x (code is different there).
Jeremy.
(cherry picked from commit d3e790fa70d083a53de221907c951580ce2537a4)
|
|
|
|
|
|
|
| |
using the parent security descriptor type and flags instead
of using the passed in SD.
Jeremy.
(cherry picked from commit 78941c166debc8315516d895b2ef77e52417f067)
|
|
|
|
|
| |
Jeremy.
(cherry picked from commit 2f509fdbed5b0ab3d9ff06bc8101d9851989be19)
|
|
|
|
|
|
|
| |
request.extra_data is not freed if there is no extra_data in response or when
there is some error happens in processing. This patch will free the buffer
right after processing a request before sending back a response.
(cherry picked from commit 05a80132ea95f40fdc8d4cfa6f90d8ba472a0272)
|
|
|
|
|
| |
Jeremy
(cherry picked from commit f3d604ab72173c9d51661f3b696b0f25da602226)
|
|
|
|
|
|
| |
to do so may result in lost data. Fix an ifdef check, I really think we meant to check HAVE_MMAP here.
(cherry picked from commit 0b39c04fed2720aad07544c65a57b6580ae322a0)
|
|
|
|
|
| |
Guenther
(cherry picked from commit 09145720b510647e7c24e3062a4a1246cc7bff5b)
|
|
|
|
|
|
|
|
| |
In order to successfully update a machine account password we need to use
Netlogon ServerPasswordSet2 when NETLOGON_NEG_PASSWORD_SET2 has been negotiated.
Guenther
(cherry picked from commit 84fbac51ffc5f4a8a4f7b1baf5e9b1af174505f5)
|
|
|
|
|
| |
Guenther
(cherry picked from commit a5b913dd31cc3c4d01458e6fcc0a03852a2738a2)
|
|
|
|
|
| |
Guenther
(cherry picked from commit 15fe1a3fa07493060a0155bd4f9f0f9bd1588d50)
|
|
|
|
|
|
|
| |
We need to become root for AIO read and write to allow the AIO thread
to send a completion signal to the parent process when the IO
completes
(cherry picked from commit 91dcce0e4deb87c6d5e491eb9dbb09fd04981d28)
|
|
|
|
|
| |
cannot do sendfile for this file"
(cherry picked from commit 5f30f87dcbeaf30713fadeb130193cb86021e87f)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
See this test: http://samba.org/~tridge/junkcode/aio_uid.c
The problem is that setresuid() tries to be clever about threads, and
tries to change the euid of any threads that are running. If a AIO read
or write completes while this is going on then the signal from the thread
where the IO completed is lost, as it gets -1/EPERM from rt_sigqueueinfo()
The simplest fix is to try to use setreuid() instead of setresuid(),
as setreuid() doesn't try to be clever. Unfortunately this also means
we must use become_root()/unbecome_root() in the aio code.
(cherry picked from commit 5e3b978c51e741d413b856adafa1b1090ed8dd7b)
|
|
|
|
| |
(cherry picked from commit 1e1449afba5d37fcfd26e0ca7edde05715bc48f7)
|
|
|
|
| |
(cherry picked from commit e05cf6e9337f949d369c915d8eec20dc58aa614e)
|
|
|
|
| |
Karolin
|
|
|
|
|
|
|
| |
This fixes a potential crash bug, a client can make us read memory we
should not read. Luckily I got the disp checks right...
Volker
|
|
|
|
| |
Karolin
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
| |
farm failures when winbindd connects as guest.
This one took a *lot* of tracking down :-).
Jeremy.
|
|
|
|
|
|
|
|
|
|
|
| |
According to the GNU libc nss guide, we should always set
errno to ENOENT when returning NSS_UNAVAIL.
http://www.gnu.org/software/libtool/manual/libc/NSS-Modules-Interface.html#NSS-Modules-Interface
At least the MQ Series message queing service that runs
on WebSphere will fail if you return any other errno in this case.
(cherry picked from commit ee26664602445fa7798e2061f6bcbef0756d6528)
|
|
|
|
|
| |
Reported by Ted Percival <ted@midg3t.net>.
Jeremy.
|
|
|
|
|
|
| |
This fixes a regression introduced with 52f916c6.
Some net subcommands didn't work when the username, but not the
corresponding password was given on the command line.
|
|
|
|
|
|
| |
Karolin
(cherry picked from commit db843d2faafb3487e3c7df4a3a52d6c71f369e1d)
(cherry picked from commit 3a3640a85daa1a85415c949f9c2b804b4f067dd7)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fix a race condition in winbind leading to a crash
When SIGCHLD handling is delayed for some reason, sending a request to a child
can fail early because the child has died already. In this case
async_main_request_sent() directly called the continuation function without
properly removing the malfunctioning child process and the requests in the
queue. The next request would then crash in the DLIST_ADD_END() in
async_request() because the request pending for the child had been
talloc_free()'ed and yet still was referenced in the list.
This one is *old*...
Volker
Jeremy.
|
|
|
|
|
|
|
| |
Karolin
(cherry picked from commit 9cde2525560536e16e2dbf991dbeb446260dd0df)
(cherry picked from commit 76061eee93fd67b96916a088c64a038e47a48814)
(cherry picked from commit 32dab019adaa3a0999af7baf6bcb8b2865e386c3)
|
| |
|
|
|
|
| |
log.wb-<domain> logfile name on smb.conf reload.
|
| |
|
|
|
|
|
|
| |
(cherry picked from commit 060ff6d8d4e61f3ce89f980182413852cc5719be)
(cherry picked from commit dab5cf616ce044040dd598fec3da9d3c97e51f6d)
(cherry picked from commit 253405062237edfa78dc669a275af7ce9db849c4)
|
|
|
|
|
| |
Michael
(cherry picked from commit d7f759d302612ef9eb0bba022f3b3e1dd433f843)
|
| |
|
|
|
|
|
| |
We did not allocate enough memory for the \0 and a = at the end.
Jeremy.
|
| |
|