| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Change the sequence :
gain_root();
sys_setgroups(ngroups, groups);
become_id(uid, gid);
to a function call :
set_unix_security_ctx(uid_t uid, gid_t gid, int ngroups, gid_t *groups)
James - should be safe for you to create a Darwin-specific
version of this function now.
Jeremy.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Doing this in two stages to make it very easy to
review. Context switching must look like :
gain_root();
sys_setgroups(ngroups, groups);
become_id(uid, gid);
Re-arrange order so these three calls are always
seen together.
Next will be to turn these into a function.
Jeremy.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
I found some checkins that apply almost seamlessly:
r19837, r19838, r19839
There is not much flesh to these. - Inteded do reduce
the diff for subsequent merges.
* reformat some long lines
* in regdb_store_keys(), delete value record too when deleting
old keys, otherwise the old values will pop up again when
re-creating the key.
Michael
|
|
|
|
|
|
|
|
|
| |
rpc_server/srv_pipe.c:api_pipe_bind_req.
This had the effect of not being able to set privileges via (e.g.) net rpc
rights.
Michael
|
|
|
|
| |
with non-GNU implementations of tr in autogen.sh
|
| |
|
| |
|
|
|
|
| |
Jeremy.
|
|
|
|
|
|
| |
say "locks chain and returned record", not
"and returns record"
Jeremy.
|
|
|
|
|
|
|
|
|
|
|
|
| |
travlocks.lock_rw for lock read/write types, it
was sometimes using it (tdb_next_lock) and
sometimes explicitly using F_WRLCK instead.
Change this to consistently use travlocks.lock_rw
only.
I'm pretty sure about this fix (else I woudn't
be checking this in :-) but tridge and Volker
please review.
Jeremy.
|
|
|
|
| |
the patch :-)
|
| |
|
|
|
|
|
|
|
|
|
|
| |
This fixes the build on a SuSE 6.1. :-)
I guess this had been merely forgotten.
But beware: The implementations of rep_pread and rep_pwrite are
not thread safe.
Michael
|
|
|
|
| |
this in your tree.
|
|
|
|
| |
Jeremy.
|
|
|
|
|
| |
expire a password if it's explicitly set as ACB_PWNOTREQ.
Jeremy.
|
|
|
|
|
| |
(multiplying tv_sec, not tv_usec).
Jeremy.
|
|
|
|
|
|
|
|
| |
shell escaping.
I hate this kind of bugs more than how Jeremy hates off by ones :(
Simo.
|
|
|
|
| |
Guenther
|
|
|
|
| |
Guenther
|
|
|
|
| |
never used.
|
|
|
|
|
|
| |
allow SIGTERM to cause nmbd to exit on awaiting
an interface to come up. Debian bug #168079
Jeremy.
|
|
|
|
|
| |
Herb).
Jeremy.
|
|
|
|
| |
Jeremy.
|
|
|
|
|
|
| |
in storing the access mask. I shouldn't have made this
mistake. Damn. Fixes bug #4673.
Jeremy
|
|
|
|
| |
Jeremy.
|
| |
|
| |
|
|
|
|
| |
Jeremy.
|
|
|
|
|
| |
are now identical, use the same version number (16) for both.
Jeremy.
|
|
|
|
| |
Michael
|
|
|
|
|
|
|
|
|
|
|
| |
fix a crash bug...I wonder why only HP-UX 11.00 ans 11.11 noticed
it via a SIGBUS...
I missed to remove the samba3 specifc code path to tdb_open_ex()
when I synced lib/tdb/ with samba4. The explicit cast in on tdb_open_ex()
dropped the compiler warning :-(
metze
|
|
|
|
|
|
|
|
|
|
| |
Send access to the trusted domain passwords through the pdb backend.
I did not yet find the time to implement the next step: trusted
domain passwords support in pdb_ldap. But at I wanted to have the
infrastructure available at least.
Michael
|
|
|
|
| |
Michael
|
|
|
|
|
|
| |
from logic of using @BUILD_INIPARSER@
metze
|
|
|
|
|
|
|
|
|
| |
For some systems it's needed to inject replace.h into
the iniparser source code, I do it in a way we can still have
a unmodified copy of iniparser in source/iniparser/
and have the wrapper stuff in source/iniparser_build/.
metze
|
|
|
|
|
|
|
| |
always include "winbind_client.h" as first header
as it brings in "replace.h" this will bring in "config.h"
metze
|
|
|
|
|
|
|
| |
don't typedef ber_tag_t when it's already done by openldap
headers on HP-UX (lber_types.h defines _LBER_TYPES_H).
metze
|
| |
|
|
|
|
|
|
|
|
| |
- added back the ldb groupdb backend
- enable switching between the tdb and ldb backends using
"groupdb:backend". This is a safety net only, it should go away in
future versions
|
| |
|
| |
|
| |
|
|\ |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
INIPARSER_OBJ from the bin/net target altogether. I re-add it
in the guise of @BUILD_INIPARSER@ (to NET_OBJ). This also
eliminates the need to have @BUILD_INIPARSER@ in the deps for
the bin/net target.
Same procedure for the pam_winbindd module.
Michael
|
| |
| |
| |
| | |
anyway.
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
- unify handling on @BUILD_INIPARSER@
btw: nsswitch/pam_winbind.c doesn't compile anymore on SuSE 10.2!
I think we should build pam modules by default to notice things
like this in the build-farm...
metze
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
the iniparser source code, I do it in a way we can still have
a unmodified copy of iniparser in source/iniparser/
and have the wrapper stuff in source/iniparser_build/.
If the build-farm is happy with this I'll merge it to 3_0_26
tomorrow...
metze
|
| |
| |
| |
| |
| |
| | |
we need to use tdb_wrap_open in both these backends to allow for
multiple opens. This is done for notify.tdb. Otherwise we die when a
2nd share with notify is setup
|
| | |
|