| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
|
|
|
|
|
|
| |
1. Unify Posix ACL detection (Linux, FreeBSD, ...)
2. Turn ACL support detection on by default.
3. Disable ACL support for darwin.
This should finally fix Bug #4543.
Michael
|
|
|
|
|
|
|
|
| |
from successfully deleting an entry when "account" is
the STRUCTURAL objectclass used for users and machines.
"account" is used each time the user entry is in /etc/passwd
and we have only the samba attributes in ldap, as well
as for rfc2307(bis) standard based directories.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
I'm 100% certain I've forgotten to merge something, but the main code
should be in. It's mainly in dbwrap_ctdb.c, ctdbd_conn.c and
messages_ctdbd.c.
There should be no changes to the non-cluster case, it does survive make
test on my laptop.
It survives some very basic tests with ctdbd enables, I did not do the
full test suite for clusters yet.
Phew...
Volker
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
the code to add a machine was different then the one used
to add a user, the old code led to the machine SID not being
built out correctly allocationg a new RID out of the passdb
but instead by using the old algorithmic method.
This may easily end up in creating duplicated SID when the
RID counter get close to the values built by the algorithmic method.
Simo.
|
|
|
|
|
|
| |
init also in idmap_nss and idmap_passdb for coherency and to
prevent errors in future if we change the init functions to
actually do something and not just return NT_STATUS_OK
|
|
|
|
|
|
| |
evaluation loop
Fixes one of the segfaults in bug #4667
|
|
|
|
|
|
| |
off the pipe ctx now ->names is part of the containing
struct.
Jeremy.
|
|
|
|
| |
Jeremy.
|
|
|
|
|
|
|
|
|
|
|
| |
in a lookup_sidX reply isn't optional - like the
lookup_sidX query it needs to be defined in the
struct.
All this will go away with PIDL (thank goodness....).
Jerry - I think this is a showstopper to be merged
for 3.0.25b.
I'll be watching the build farm to see if anything broke.
Jeremy.
|
|
|
|
|
| |
Support membership of >16 groups on Darwin by making sure we opt in to the
dynamic group resolution mechanism when switching UNIX credentials.
|
|
|
|
|
| |
Make VFS callbacks static. Mark operations as OPAQUE because they
do not pass through.
|
|
|
|
|
| |
Support BSD group semantics by making sure that the effective GID
is always passed as the first GID when calling setgroups(2).
|
| |
|
|
|
|
|
|
|
|
| |
(Adapted to the later change in r22935.)
wrap regdb_store_keys and regdb_store_values in tdb transactions
Michael
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Change the sequence :
gain_root();
sys_setgroups(ngroups, groups);
become_id(uid, gid);
to a function call :
set_unix_security_ctx(uid_t uid, gid_t gid, int ngroups, gid_t *groups)
James - should be safe for you to create a Darwin-specific
version of this function now.
Jeremy.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Doing this in two stages to make it very easy to
review. Context switching must look like :
gain_root();
sys_setgroups(ngroups, groups);
become_id(uid, gid);
Re-arrange order so these three calls are always
seen together.
Next will be to turn these into a function.
Jeremy.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
I found some checkins that apply almost seamlessly:
r19837, r19838, r19839
There is not much flesh to these. - Inteded do reduce
the diff for subsequent merges.
* reformat some long lines
* in regdb_store_keys(), delete value record too when deleting
old keys, otherwise the old values will pop up again when
re-creating the key.
Michael
|
|
|
|
|
|
|
|
|
| |
rpc_server/srv_pipe.c:api_pipe_bind_req.
This had the effect of not being able to set privileges via (e.g.) net rpc
rights.
Michael
|
|
|
|
| |
with non-GNU implementations of tr in autogen.sh
|
| |
|
| |
|
|
|
|
| |
Jeremy.
|
|
|
|
|
|
| |
say "locks chain and returned record", not
"and returns record"
Jeremy.
|
|
|
|
|
|
|
|
|
|
|
|
| |
travlocks.lock_rw for lock read/write types, it
was sometimes using it (tdb_next_lock) and
sometimes explicitly using F_WRLCK instead.
Change this to consistently use travlocks.lock_rw
only.
I'm pretty sure about this fix (else I woudn't
be checking this in :-) but tridge and Volker
please review.
Jeremy.
|
|
|
|
| |
the patch :-)
|
| |
|
|
|
|
|
|
|
|
|
|
| |
This fixes the build on a SuSE 6.1. :-)
I guess this had been merely forgotten.
But beware: The implementations of rep_pread and rep_pwrite are
not thread safe.
Michael
|
|
|
|
| |
this in your tree.
|
|
|
|
| |
Jeremy.
|
|
|
|
|
| |
expire a password if it's explicitly set as ACB_PWNOTREQ.
Jeremy.
|
|
|
|
|
| |
(multiplying tv_sec, not tv_usec).
Jeremy.
|
|
|
|
|
|
|
|
| |
shell escaping.
I hate this kind of bugs more than how Jeremy hates off by ones :(
Simo.
|
|
|
|
| |
Guenther
|
|
|
|
| |
Guenther
|
|
|
|
| |
never used.
|
|
|
|
|
|
| |
allow SIGTERM to cause nmbd to exit on awaiting
an interface to come up. Debian bug #168079
Jeremy.
|
|
|
|
|
| |
Herb).
Jeremy.
|
|
|
|
| |
Jeremy.
|
|
|
|
|
|
| |
in storing the access mask. I shouldn't have made this
mistake. Damn. Fixes bug #4673.
Jeremy
|
|
|
|
| |
Jeremy.
|
| |
|
| |
|
|
|
|
| |
Jeremy.
|
|
|
|
|
| |
are now identical, use the same version number (16) for both.
Jeremy.
|
|
|
|
| |
Michael
|
|
|
|
|
|
|
|
|
|
|
| |
fix a crash bug...I wonder why only HP-UX 11.00 ans 11.11 noticed
it via a SIGBUS...
I missed to remove the samba3 specifc code path to tdb_open_ex()
when I synced lib/tdb/ with samba4. The explicit cast in on tdb_open_ex()
dropped the compiler warning :-(
metze
|
|
|
|
|
|
|
|
|
|
| |
Send access to the trusted domain passwords through the pdb backend.
I did not yet find the time to implement the next step: trusted
domain passwords support in pdb_ldap. But at I wanted to have the
infrastructure available at least.
Michael
|
|
|
|
| |
Michael
|