summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* r4830: Fix for problem noticed by Guy Harris <gharris@apple.com>, returnJeremy Allison2005-01-181-2/+4
| | | | | | correct DOS/NT error code on transact named pipe on closed pipe handle. Jeremy.
* r4827: add 'net rpc rights list accounts' & update help textGerald Carter2005-01-181-15/+60
|
* r4825: Printing changesGerald Carter2005-01-182-45/+136
| | | | | | | | | | | | | ---------------- * bracket the add/delete/set printer scripts with checks for se_print_op * slight change to the add/set printer script semantics. smbd no longer relies on output from the script (on stdout) to re-read smb.conf * remove SIGHUP from set/add/delete printin script code and now just use MSG_SMB_CONF_UPDATED * bracket the add/delete/set share scripts with checks for se_print_op (this includes setting share ACLs)
* r4824: wrap the shutdown and abort_shutdown calls in check for the ↵Gerald Carter2005-01-181-1/+24
| | | | SE_REMOTE_SHUTDOWN privilege
* r4823: remove -O1 from --with-developerGerald Carter2005-01-181-1/+1
|
* r4822: fix return code when you ask for a non-privileged SID via one of the ↵Gerald Carter2005-01-182-0/+12
| | | | privileges RPC calls
* r4821: finish off 'net rpc rights [list|grant|revoke]'Gerald Carter2005-01-184-45/+271
| | | | | | one small todo item is to add a 'accounts' sub option to 'net rpc list' so enumerate all privileged SIDs and their associated rights.
* r4820: add beginnings of 'net rpc rights' for managing privilege assignmentsGerald Carter2005-01-184-8/+134
|
* r4809: * include SeDiskOperatorPrivilege and SeRemoteShutdownPrivilegeGerald Carter2005-01-173-88/+36
| | | | | | (noty enfornced yet though) * add 'enable privileges (off by default) to control whether or not any privuleges can be assigned to SIDs
* r4805: Last planned change to the privileges infrastructure:Gerald Carter2005-01-179-194/+406
| | | | | | | | | | | * rewrote the tdb layout of privilege records in account_pol.tdb (allow for 128 bits instead of 32 bit flags) * migrated to using SE_PRIV structure instead of the PRIVILEGE_SET structure. The latter is now used for parsing routines mainly. Still need to incorporate some client support into 'net' so for setting privileges. And make use of the SeAddUserPrivilege right.
* r4802: Don't try to update a column with the name "NULL"Jelmer Vernooij2005-01-171-1/+7
|
* r4788: Don't log mysql password at debug level 1.Jelmer Vernooij2005-01-161-2/+1
|
* r4760: Make wbinfo --user-sids expand domain local groups. Andrew B., my testingVolker Lendecke2005-01-156-0/+206
| | | | | | | shows that this info is correctly returned to us in to info3 struct, so check_info3_in_group does not need to be adapted. Volker
* r4751: This is a domain policy, not a user oneVolker Lendecke2005-01-151-2/+2
|
* r4750: Fix cli_samr_queryuseraliases. There can be more than one sid, thus ↵Volker Lendecke2005-01-151-2/+10
| | | | | | | | more than one pointer... Volker
* r4749: Fix memleakVolker Lendecke2005-01-151-0/+2
|
* r4746: add server support for lsa_enum_acct_rights(); last checkin for the nightGerald Carter2005-01-155-19/+105
|
* r4742: add server support for lsa_add/remove_account_rights() and fix some ↵Gerald Carter2005-01-155-18/+247
| | | | parsing bugs related to that code
* r4740: allow SE_PRINT_OPERATORS to have printer admin accessGerald Carter2005-01-142-5/+18
|
* r4739: require membership in Domain Admins to be able to set privilegesGerald Carter2005-01-141-0/+25
|
* r4738: Fix for bug #2238 - memory leak in shadow copy vfs.Jeremy Allison2005-01-141-0/+1
| | | | Jeremy.
* r4736: small set of merges from rtunk to minimize the diffsGerald Carter2005-01-1410-24/+112
|
* r4732: Even if we have 'password server' set, we need to look up the native ↵Volker Lendecke2005-01-141-0/+6
| | | | | | | | DC name via netbios, as the user might have set an IP address or a fqdn. Volker
* r4731: Fix the buildVolker Lendecke2005-01-141-1/+2
|
* r4724: Add support for Windows privileges in Samba 3.0Gerald Carter2005-01-1318-825/+937
| | | | | | | | | | | | | | | | | | | | | | | | | | | | (based on Simo's code in trunk). Rewritten with the following changes: * privilege set is based on a 32-bit mask instead of strings (plans are to extend this to a 64 or 128-bit mask before the next 3.0.11preX release). * Remove the privilege code from the passdb API (replication to come later) * Only support the minimum amount of privileges that make sense. * Rewrite the domain join checks to use the SeMachineAccountPrivilege instead of the 'is a member of "Domain Admins"?' check that started all this. Still todo: * Utilize the SePrintOperatorPrivilege in addition to the 'printer admin' parameter * Utilize the SeAddUserPrivilege for adding users and groups * Fix some of the hard coded _lsa_*() calls * Start work on enough of SAM replication to get privileges from one Samba DC to another. * Come up with some management tool for manipultaing privileges instead of user manager since it is buggy when run on a 2k client (haven't tried xp). Works ok on NT4.
* r4704: Fix encoding while receiving of a message which was actually sent ↵Alexander Bokovoy2005-01-121-4/+4
| | | | using STR_ASCII. Patch from Grigory Batalov <bga@altlinux.org>
* r4697: Fix for bug #2231 inspired by brad.ellis@its.monash.edu.au.Jeremy Allison2005-01-121-3/+3
| | | | | Remove double "\\" from findfirst. Jeremy.
* r4668: allow the caller to invoke init_unistr2() with a NULL buffer to match ↵Gerald Carter2005-01-111-0/+8
| | | | previous behavior; more checks to come tomorrow
* r4665: Fix inspired by posting from Joe Meadows <jameadows@webopolis.com>.Jeremy Allison2005-01-112-13/+10
| | | | | Make all LDAP timeouts consistent. Jeremy.
* r4662: Fix from "Jerome Borsboom" <j.borsboom@erasmusmc.nl> to fixJeremy Allison2005-01-111-0/+1
| | | | | missing release reference for printer tdb. Jeremy.
* r4656: Convert the winreg pipe to use WERROR returns (as it should).Jeremy Allison2005-01-106-99/+99
| | | | | | Also fix return of NT_STATUS_NO_MORE_ENTRIES should be ERROR_NO_MORE_ITEMS reported by "Marcin Porwit" <mporwit@centeris.com>. Jeremy.
* r4653: Output file of "test" pdb backend should be called test.soJelmer Vernooij2005-01-103-2/+2
|
* r4651: Add "refuse machine password change" policy field. This update will justJim McDonough2005-01-103-16/+65
| | | | | | | return the appropriate reg value. Enforcement to be added soon. Also, fix account policy tdb upgrade so it doesn't just wipe out everything that was in there from a a previous version.
* r4646: Allow Account Lockout with Lockout Duration "forever" (until adminGünther Deschner2005-01-101-3/+9
| | | | | | unlocks) to be set and displayed in User Manager. Guenther
* r4645: patch from Rob to fix the build breakage in vfstest after the ↵Gerald Carter2005-01-102-3/+6
| | | | reload_printers() cleanup
* r4633: Finally give rpcclient a port-command.Günther Deschner2005-01-101-1/+3
| | | | Guenther
* r4604: Attempt to fix the buildfarm build.Volker Lendecke2005-01-081-1/+1
| | | | | | | | | vfstest refers to reload_printers, only defined in smbd/server.c. Jerry, could you take a look at that? Thanks, Volker
* r4601: Removed any use of the MAX_XXX_STR style definitions. A little largerJeremy Allison2005-01-083-84/+72
| | | | | change than I'd hoped for due to formating changes to tidy up code. Jeremy.
* r4581: From Derrell.Lipman@UnwiredUniverse.com. Use nanosleep instead of selectJeremy Allison2005-01-062-1/+15
| | | | | when we have it in smb_msleep. Jeremy.
* r4579: small changes to allow the members og the Domain Admins group on the ↵Gerald Carter2005-01-062-64/+163
| | | | Samba DC to join clients to the domain -- needs more testing and security review but does work with initial testing
* r4577: Fix from William Jojo <jojowil@hvcc.edu> for AIX 5.3 compile.Jeremy Allison2005-01-061-2/+2
| | | | Jeremy.
* r4575: adding extra debug to cm_prepare_connection()Gerald Carter2005-01-061-0/+3
|
* r4573: merge -r 4572 from SAMBA_4_0:Stefan Metzmacher2005-01-061-0/+1
| | | | | | | | | | remove configure and include/config.h* before running autoheader && autoconf this fixes bug where configure didn't get correctly updated (I assume autoconf uses some caching...) metze
* r4570: Replace cli->nt_pipe_fnum with an array of NT file numbers, one for eachVolker Lendecke2005-01-068-46/+58
| | | | | | | | | | | | supported pipe. Netlogon is still special, as we open that twice, one to do the auth2, the other one with schannel. The client interface is completely unchanged for those who only use a single pie. cli->pipe_idx is used as the index for everything except the "real" client rpc calls, which have been explicitly converted in my last commit. Next step is to get winbind to just use a single smb connection for multiple pipes. Volker
* r4561: This looks a lot larger than it is, this is to reduce the clutter on ↵Volker Lendecke2005-01-0613-145/+145
| | | | | | | | | | | | future patches. Pass down the pipe_idx down to all functions in cli_pipe where nt_pipe_fnum is referenced. First step towards having multiple pipes on a cli_struct. The idea is to not have a single nt_pipe_fnum but an array for the pipes we support. Volker
* r4545: Fix based on work by Derrell.Lipman@UnwiredUniverse.com :Jeremy Allison2005-01-061-4/+26
| | | | | | | | | * In an application with signals, it was possible for functions to block indefinitely while awaiting timeouts. This patch ensures that if a system call with a timeout is aborted and needs to be restarted, it is restarted with a timeout which is adjusted for the amount of time already waited. Jeremy.
* r4539: patch from Rob -- adding real printcap name cache function to speed ↵Gerald Carter2005-01-0512-566/+385
| | | | up printcap reloads
* r4538: Fix bugzilla 2198, accounts which have password last set to 0 are gettingJim McDonough2005-01-051-0/+3
| | | | no passwords after vampire. Set password last set field to now.
* r4525: fix Fedora specfile to include pam_winbind(8) man pageGerald Carter2005-01-051-0/+1
|
* r4514: Fix for bugzilla 1770. Remove READ_ATTRIBUTES from GENERIC_EXECUTE, ↵Jim McDonough2005-01-041-1/+1
| | | | | | | | otherwise modification of an ACL that contains an ACE with execute only will cause that to be upgraded to read/execute. Side effect is that dirs/files with execute only show up as special permissions, which is still correct.
generated by cgit (git 2.34.1) at 2025-09-28 04:00:38 +0000