summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* s3: Fix clear_if_first for the async echo handlerVolker Lendecke2012-12-071-1/+1
| | | | | | | | | | | | A worker smbd is as not long-lived as the main smbd, but as the async echo handler exits when the worker smbd does, passing "true" here is the right thing to do and fixes our clear_if_first handling when the async echo handler is active. Reviewed-by: Christian Ambach <ambi@samba.org> Autobuild-User(master): Christian Ambach <ambi@samba.org> Autobuild-Date(master): Fri Dec 7 11:29:36 CET 2012 on sn-devel-104
* s4:dsdb/password_hash: Honor password complexity settings.Stefan Metzmacher2012-12-061-1/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | Honor password complexity settings when creating new users. Without this patch, you could set simple passwords although the complexity settings were enabled. This was an issue with 'samba-tool user add' and also when adding new users via Windows' "Active Directory Users and Computers" MMC Snap-In. The following scenarios were tested successfully after applying the patch: -'samba-tool user add' against s4 -'samba-tool user add -H' against a Windows DC -Adding a new user on a s4 DC using Windows' "Active Directory Users and Computers" MMC Snap-In. Please note that this bug was caused by a mistake in the documentation. Fix bug #9414 - 'samba-tool user add' ignores password complexity settings. Pair-programmed-with: Karolin Seeger <kseeger@samba.org> Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Karolin Seeger <kseeger@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Thu Dec 6 05:11:43 CET 2012 on sn-devel-104
* build: Install .po files for SWAT intl supportAndrew Bartlett2012-12-061-0/+3
|
* scripting: Handle missing LDAP entries in samba-tool domain classicupgradeAndrew Bartlett2012-12-061-0/+6
| | | | Reported-by: Thomas Simmons <twsnnva@gmail.com>
* Clean up client timeout definitions [rev. 2]Scott Lovenberg2012-12-064-8/+5
| | | | | | | | | | The definitions for default client timeout values have been moved to client.h. When initializing a client struct we use this value instead of the old hardcoded value. The timeout value remains 20 seconds. Signed-off-by: Scott Lovenberg <scott.lovenberg@gmail.com> Reviewed by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Thu Dec 6 03:25:58 CET 2012 on sn-devel-104
* s3:smbd: fix a cut and paste error in a debug messageMichael Adam2012-12-051-2/+2
| | | | | Signed-off-by: Michael Adam <obnox@samba.org> Reviewed by: Jeremy Allison <jra@samba.org>
* Documentation fixes for bug #9462 - Users can not be given write permissions ↵Jeremy Allison2012-12-058-36/+4
| | | | | | | | | | any more by default Ensure we don't apply the masks + force modes on security setting changes, only on create. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Michael Adam <obnox@samba.org>
* s3:smbd: don't apply create/directory mask and modes in apply_default_perms()Michael Adam2012-12-051-77/+11
| | | | | | | | | | | The mask/mode parameters should only apply to a situation with only pure posix permissions. Once we are dealing with ACLs and inheritance, we need to do it correctly. This fixes bug #9462: Users can not be given write permissions any more by default Signed-off-by: Michael Adam <obnox@samba.org> Reviewed by: Jeremy Allison <jra@samba.org>
* Fix bug #9460 - Samba 3.6.x and Master respond incorrectly to ↵Richard Sharpe2012-12-061-1/+22
| | | | | | | | | | | FILE_STREAM_INFO requests. Ensure we check the buffer size correctly. Reviewed by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Thu Dec 6 01:31:08 CET 2012 on sn-devel-104
* wsgi: Serve '500 Internal Server Error' page when errors occur.Jelmer Vernooij2012-12-051-0/+19
| | | | | Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org> Autobuild-Date(master): Wed Dec 5 18:40:25 CET 2012 on sn-devel-104
* web_server: Make second argument to websrv_output const.Jelmer Vernooij2012-12-052-2/+2
|
* wsgi: When encountering error in Python code, print traceback to logs.Jelmer Vernooij2012-12-051-9/+52
| | | | Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
* BUG 9459: Install manpages only if we install the target.Andreas Schneider2012-12-041-4/+5
| | | | | | | Reviewed-by: Alexander Bokovoy <ab@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Tue Dec 4 18:07:47 CET 2012 on sn-devel-104
* Remove unused append_parent_acl().Jeremy Allison2012-12-042-204/+0
| | | | | | | | | | Get rid of a large chunk of unused code. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org> Autobuild-User(master): David Disseldorp <ddiss@samba.org> Autobuild-Date(master): Tue Dec 4 11:59:30 CET 2012 on sn-devel-104
* s3:smbd:vfs_acl: fix a PANIC when setting an ACL fails with ACCESS_DENIEDMichael Adam2012-12-041-0/+1
| | | | | | | | | | | | Omission to free the talloc frame causes a panic (at least in developer mode) in the next main event loop due to "Frame not freed in order." (Freed frame ../source3/smbd/process.c:3617, expected ../source3/modules/vfs_acl_common.c:534.) Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Tue Dec 4 09:03:25 CET 2012 on sn-devel-104
* s3:passdb: fix building pdb_ldap as shared moduleMichael Adam2012-12-032-2/+3
| | | | | | | | Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Mon Dec 3 19:12:29 CET 2012 on sn-devel-104
* docs: Merge both samba.8 manpages.Karolin Seeger2012-12-033-190/+100
| | | | | | | | | | | | | Remove source4/smbd/samba.8.xml and add the additional content to docs-xml/samba.8.xml to be able to build this manpage with the autoconf build also. Karolin Reviewed-by: Andreas Schneider <asn@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Mon Dec 3 16:28:32 CET 2012 on sn-devel-104
* docs: Add samba.8 and samba-tool manpage to waf build.Karolin Seeger2012-12-031-0/+2
| | | | | | Karolin Reviewed-by: Andreas Schneider <asn@samba.org>
* docs: Update man 7 samba.Karolin Seeger2012-12-031-86/+109
| | | | | | | | Update man 7 samba. Still incomplete, but at least a bit more up to date. Karolin Reviewed-by: Andreas Schneider <asn@samba.org>
* lib/talloc: Move manpage to man/.Karolin Seeger2012-12-032-13/+13
| | | | | | | | Trying to be more consistent. Karolin Reviewed-by: Andreas Schneider <asn@samba.org>
* lib/tdb: Rename manpages/ to man/.Karolin Seeger2012-12-035-12/+12
| | | | | | | | Trying to be more consistent. Karolin Reviewed-by: Andreas Schneider <asn@samba.org>
* replace: Remove deprecated getpass() support.Andreas Schneider2012-12-038-285/+0
| | | | Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
* ntlm_auth4: Use new samba_getpass() function.Andreas Schneider2012-12-031-1/+7
| | | | Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
* cmdline: Use new samba_getpass() function.Andreas Schneider2012-12-031-5/+9
| | | | Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
* smbget: Use new samba_getpass() function.Andreas Schneider2012-12-031-3/+2
| | | | Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
* util: Use new samba_getpass() function for passwd util.Andreas Schneider2012-12-031-1/+8
| | | | Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
* ntlm_auth: Use new samba_getpass() function.Andreas Schneider2012-12-031-1/+7
| | | | Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
* net: Use samba_getpass() function in net util.Andreas Schneider2012-12-031-3/+7
| | | | Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
* net: Use new samba_getpass() function for 'net rpc'.Andreas Schneider2012-12-031-1/+8
| | | | Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
* net: Use new samba_getpass() function for 'net ads'.Andreas Schneider2012-12-031-1/+9
| | | | Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
* torture: Use new samba_getpass() in masktest.Andreas Schneider2012-12-031-2/+5
| | | | Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
* torture: Use new samba_getpass() in smbtorture3.Andreas Schneider2012-12-031-3/+6
| | | | Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
* torture: Use new samba_getpass() in locktest2.Andreas Schneider2012-12-031-3/+6
| | | | Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
* util: Use new samba_getpass() function.Andreas Schneider2012-12-031-4/+5
| | | | Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
* smbclient: Use new samba_getpass() function.Andreas Schneider2012-12-031-3/+6
| | | | Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
* wbinfo: Use new samba_getpass() function.Andreas Schneider2012-12-031-4/+11
| | | | Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
* util: Add a UNIX platform independent samba_getpass().Andreas Schneider2012-12-034-2/+266
| | | | Reviewed-by: Jelmer Vernooij <jelmer@samba.org>
* docs: Fix typo in the howto collection.Karolin Seeger2012-12-031-1/+1
| | | | | | | | | Thanks to Hermann Gausterer <git-samba-2012@mrq1.org> for reporting! Karolin Autobuild-User(master): Volker Lendecke <vl@samba.org> Autobuild-Date(master): Mon Dec 3 12:36:14 CET 2012 on sn-devel-104
* s3:selftest: extend sids2xids test script to cope with "ID_TYPE_BOTH mappingsMichael Adam2012-12-031-1/+1
| | | | | | | | Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> Autobuild-User(master): Michael Adam <obnox@samba.org> Autobuild-Date(master): Mon Dec 3 10:47:17 CET 2012 on sn-devel-104
* s3:passdb: don't look into group mappings in legacy_sid_to_unixid()Michael Adam2012-12-031-28/+1
| | | | | | | The backends (tdbsam and ldapsam) do this. Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* s3:passdb:pdb_ldap: treat "Unix User" and "Unix Group" in sid_to_id()Michael Adam2012-12-031-0/+5
| | | | | Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* s3:passdb:pdb_ldap: pre-validate sid with sid_check_object_is_for_passdb()Michael Adam2012-12-031-3/+3
| | | | | | | | | | | instead of sid_check_sid_is_in_our_sam). This allows for builtin sids, wellknown sids and "Unix User" and "Unix Group" domains. This broadens up the check moved here in commit 02e25b2a43ae02205a3412f862a1482d24b70aa4. Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* s3:passdb: add sid_check_object_is_for_passdb()Michael Adam2012-12-033-0/+35
| | | | | | | | Variant of sid_check_is_for_passdb() that only checks for objects in the various domains, not for the domain sids themselves. Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* s3:passdb: factor pdb_sid_to_id_unix_users_and_groups() out of ↵Michael Adam2012-12-032-16/+35
| | | | | | | | | | pdb_default_sid_to_id() The special treatment of the "Unix User" and "Unix Group" pseudo domains can be reused. Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* s3:passdb: don't bail out in pdb_default_sid_to_id() if sid is not in our samMichael Adam2012-12-031-5/+0
| | | | | | | | | | This code treats the own sam, builtin, wellknown, and sids from the "Unix User" and "Unix Group" pseudo-domains. This reverts part of commit 02e25b2a43ae02205a3412f862a1482d24b70aa4. Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* s3:winbindd: use the new sid_check_is_for_passdb() in ↵Michael Adam2012-12-031-6/+2
| | | | | | | | | | | idmap_find_domain_with_sid() This is more correct than the original one: It also hands the wellknown and "Unix Users" and "Unix Groups" sids to passdb for id mapping. Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* build the new sid_check_is_for_passdb() function into passdbMichael Adam2012-12-033-0/+3
| | | | | Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* s3:lib: add utility function sid_check_is_for_passdb()Michael Adam2012-12-032-0/+102
| | | | | | | | This function checks whether the given sid should be treated by passdb (e.g. for id mapping). Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* s3:winbindd: remove unused function idmap_backends_sid_to_unixid()Michael Adam2012-12-032-43/+0
| | | | | Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* s3:test:wbinfo_sids2xids: test the results with singular calls with filled ↵Michael Adam2012-12-032-11/+29
| | | | | | | and with empty cache Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>