Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Added parenthesis around definition of PRINTER_ACE_PRINT. | Tim Potter | 2000-06-23 | 1 | -1/+1 | |
| | ||||||
* | Added return for become_authenticated_pipe_user() function. | Tim Potter | 2000-06-23 | 1 | -0/+2 | |
| | ||||||
* | Tests for new security context stuff. | Tim Potter | 2000-06-23 | 12 | -0/+869 | |
| | ||||||
* | make proto | Tim Potter | 2000-06-23 | 1 | -386/+393 | |
| | ||||||
* | Added MAX_SEC_CTX_DEPTH | Tim Potter | 2000-06-23 | 1 | -0/+2 | |
| | ||||||
* | Delete OriginalDir stuff. | Tim Potter | 2000-06-23 | 3 | -16/+20 | |
| | ||||||
* | Moved some static functions to sec_ctx.c | Tim Potter | 2000-06-23 | 1 | -222/+30 | |
| | | | | | Implemented become_root() and friends in terms of push/pop/set security contexts. | |||||
* | Added smbd/sec_ctx.o to smbd objects. | Tim Potter | 2000-06-23 | 1 | -1/+2 | |
| | ||||||
* | Call init_sec_ctx() instead of init_uid(). | Tim Potter | 2000-06-23 | 1 | -9/+1 | |
| | | | | Delete OriginalDir stuff. | |||||
* | Removed save directory argument to become_root() calls. Probably most of | Tim Potter | 2000-06-23 | 6 | -42/+42 | |
| | | | | this stuff doesn't need to be done as root anyway. | |||||
* | I've been working on refactoring some of the mess that is the become_user() | Tim Potter | 2000-06-23 | 1 | -0/+295 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | code. This code is now implemented as a stack of security contexts, where a security context is defined as a set of effective user, group and supplementary group ids. The following functions are implemented: BOOL push_sec_ctx(void); Create a new security context on the stack which is the same as the current security context. void set_sec_ctx(uid_t uid, gid_t gid, int ngroups, gid_t *groups); Set the current security context to a given set of user and group ids. void set_root_sec_ctx(void); Set to uid = gid = 0. No supplementary groups are set. BOOL pop_sec_ctx(void); Pop a security context from the stack and restore the user and group permissions of the previous context. void init_sec_ctx(void); Initialise the security context stack. This must be called before any of the other operations are used or weird things may happen. The idea is that there is a base security context which is either root or some authenticated unix user. Other security contexts can be pushed and popped as needed for things like changing passwords, or rpc pipe operations where the rpc pipe user is different from the smb user. | |||||
* | just enough to get rpcclient to compile. Look for #if 0 | Gerald Carter | 2000-06-23 | 5 | -4/+15 | |
| | | | | | | | | blocks around a few unimplemented functions. Also had to add cli_reg.c to Makefile.in --jerry | |||||
* | Changed enumports to show printernames as ports. In line with 'the grand ↵ | Jeremy Allison | 2000-06-22 | 3 | -16/+67 | |
| | | | | | | | plan' :-) Gerald & I discussed with HP. More changes to follow. Jeremy. | |||||
* | lib/util_unistr.c: Removed ascii_to_unistr() as it does no codepage. | Jeremy Allison | 2000-06-22 | 4 | -499/+428 | |
| | | | | | | | | | Removed unistr_to_ascii() as it was never used. printing/nt_printing.c: Removed "DUMMY.XX" files. rpc_server/srv_spoolss_nt.c: Use dos_PutUniCode() instead of ascii_to_unistr(). Attempted to fix the "return value" size code based on J.F's comments. This needs looking at. Jeremy. | |||||
* | fixed two minor bugs in new sys_select() | Andrew Tridgell | 2000-06-21 | 1 | -5/+5 | |
| | ||||||
* | A neater way of solving the S_ISSOCK, S_ISFIFO problem. | Tim Potter | 2000-06-21 | 2 | -47/+54 | |
| | | | | Moved the S_* macros from smb.h to includes.h | |||||
* | Changed default printer driver to "" from NULL. | Jeremy Allison | 2000-06-21 | 1 | -1/+1 | |
| | | | | Jeremy. | |||||
* | Fixes for Win2k "add printer driver" INFO_LEVEL_6 was wrong, also some | Jeremy Allison | 2000-06-20 | 5 | -31/+36 | |
| | | | | | memory fixes. Jeremy. | |||||
* | Fixes for IRIX kernel oplocks and systems that don't have nss.h | Jeremy Allison | 2000-06-20 | 5 | -3/+16 | |
| | | | | Jeremy. | |||||
* | Paranoia changes to ensure that anything touched by a signal handler | Jeremy Allison | 2000-06-19 | 3 | -18/+19 | |
| | | | | | and the main code is declared as VOLATILE SIG_ATOMIC_T. Jeremy. | |||||
* | reverted lukes changes in param/ | Andrew Tridgell | 2000-06-16 | 2 | -0/+139 | |
| | | | | | | apparently they were not deliberate, they were probably a result of Luke accidentally copying a CVS directory from one spot to another in error | |||||
* | more update. | Luke Leighton | 2000-06-16 | 2 | -139/+0 | |
| | ||||||
* | Forgot pipes_struct conversion for api_samr_enum_dom_aliases() | Tim Potter | 2000-06-16 | 1 | -1/+3 | |
| | ||||||
* | Whoops - dodgy make proto. | Tim Potter | 2000-06-16 | 1 | -1/+1 | |
| | ||||||
* | make proto | Tim Potter | 2000-06-16 | 1 | -403/+416 | |
| | ||||||
* | Pass the vuid from the connection_struct to the printing back end functions. | Tim Potter | 2000-06-16 | 1 | -1/+1 | |
| | ||||||
* | Changed function prototype for pipe api functions to take a pipes_struct | Tim Potter | 2000-06-16 | 1 | -1/+1 | |
| | | | | instead of two prs_data pointers. | |||||
* | Added some permission constants that are set for NT printer security | Tim Potter | 2000-06-16 | 1 | -0/+7 | |
| | | | | | descriptors. These seem to be made up of the standard and generic access rights rather than object specific access rights. | |||||
* | Call print_access_check() function from printing back end. | Tim Potter | 2000-06-16 | 1 | -15/+45 | |
| | ||||||
* | Added print_access_check() function for checking printer security | Tim Potter | 2000-06-16 | 1 | -0/+71 | |
| | | | | | descriptors. Currently returns True (plus debug output) which should not affect the behaviour of nt or lanman printing. | |||||
* | Pass the vuid from the connection_struct to the printing back end functions. | Tim Potter | 2000-06-16 | 1 | -6/+6 | |
| | ||||||
* | Simplified server pipe implementation by changing arguments passed down | Tim Potter | 2000-06-16 | 1 | -14/+17 | |
| | | | | | | | | | | | | | through to the individual pipe api calls. Instead of passing two prs_struct pointers, we now pass the pipes_struct pointer which contains the former information as well as other useful stuff like the vuid. Pass the vuid from the pipes_struct down to the lower level spoolss functions to perform security checks. ZERO_STRUCTP the info_2 structure before filling it. Free the device mode field before freeing the info_2 to avoid a memory leak. Fixed uninitialised pointer bug in fill_job_info_2(). | |||||
* | Simplified server pipe implementation by changing arguments passed down | Tim Potter | 2000-06-16 | 1 | -40/+108 | |
| | | | | | | | | | through to the individual pipe api calls. Instead of passing two prs_struct pointers, we now pass the pipes_struct pointer which contains the former information as well as other useful stuff like the vuid. Pass the vuid from the pipes_struct down to the lower level spoolss functions to perform security checks. | |||||
* | Simplified server pipe implementation by changing arguments passed down | Tim Potter | 2000-06-16 | 1 | -18/+29 | |
| | | | | | | | | | through to the individual pipe api calls. Instead of passing two prs_struct pointers, we now pass the pipes_struct pointer which contains the former information as well as other useful stuff like the vuid. Removed dependency on extern current_user and fetch the vuid from the pipes_struct. | |||||
* | Simplified server pipe implementation by changing arguments passed down | Tim Potter | 2000-06-16 | 7 | -170/+259 | |
| | | | | | | through to the individual pipe api calls. Instead of passing two prs_struct pointers, we now pass the pipes_struct pointer which contains the former information as well as other useful stuff like the vuid. | |||||
* | support both read and write locks inside the tdb | Andrew Tridgell | 2000-06-15 | 1 | -1/+6 | |
| | ||||||
* | - use read locks when possible | Andrew Tridgell | 2000-06-15 | 1 | -42/+44 | |
| | | | | - don't use as many locks on a store | |||||
* | use the right MMAP flag | Andrew Tridgell | 2000-06-15 | 1 | -1/+1 | |
| | ||||||
* | open files with O_NONBLOCK when available. This is necessary to | Andrew Tridgell | 2000-06-15 | 1 | -1/+6 | |
| | | | | | | | prevent possible deadlocks with kernel leases and harmless when kernel leases are not used. basically we don't ever want smbd to block | |||||
* | added support for kernel level share modes. These are a (small) hack, | Andrew Tridgell | 2000-06-15 | 6 | -132/+233 | |
| | | | | | I suspect we will either get rid of them or do them properly at some stage. | |||||
* | add -d debuglevel option | Andrew Tridgell | 2000-06-15 | 1 | -1/+5 | |
| | ||||||
* | Removed some debugs. | Tim Potter | 2000-06-15 | 1 | -12/+0 | |
| | ||||||
* | Added nsswitch/common.o to SMBD_OBJ1 | Tim Potter | 2000-06-14 | 1 | -1/+1 | |
| | ||||||
* | Changed server side lsa_lookup_sids function to look up SIDs that we are | Tim Potter | 2000-06-14 | 1 | -28/+74 | |
| | | | | not authoritative for using winbindd. | |||||
* | #include nsswitch/winbind_nss.h | Tim Potter | 2000-06-14 | 1 | -0/+2 | |
| | ||||||
* | Merge from TNG. | Tim Potter | 2000-06-14 | 2 | -55/+157 | |
| | ||||||
* | Merged parse_domain_user() from TNG. | Tim Potter | 2000-06-14 | 1 | -0/+20 | |
| | ||||||
* | allow the notify implementation to choose the select timeout change | Andrew Tridgell | 2000-06-14 | 7 | -17/+21 | |
| | ||||||
* | fixed autoconf test for kernel change notify support | Andrew Tridgell | 2000-06-14 | 3 | -131/+203 | |
| | ||||||
* | ZERO_STRUCT() of info3 structure before using it. | Tim Potter | 2000-06-14 | 1 | -0/+2 | |
| |