summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* s3:winbind: WINBIND_USERINFO -> wbint_userinfoVolker Lendecke2009-08-1612-87/+49
|
* s3:winbind: Simplify _wbint_[GU]id2SidVolker Lendecke2009-08-161-16/+4
|
* tevent: add some more doxygen comments for tevent_req functionsStefan Metzmacher2009-08-151-0/+38
| | | | metze
* s3:Makefile: build ../libcli/smb/smb2_create_blob.o as part of smbdStefan Metzmacher2009-08-151-0/+1
| | | | metze
* libcli/smb: add smb2_create_blob_find()Stefan Metzmacher2009-08-152-0/+23
| | | | metze
* Use defined names rather than numeric constants to make codeJeremy Allison2009-08-141-2/+2
| | | | | clearer. Jeremy.
* gpfs.so: map the file_inherit and dir_inherit flags away for filesMichael Adam2009-08-141-1/+15
| | | | | | | | | | | GPFS sets inherits dir_inhert and file_inherit flags to files, too, which confuses windows, and seems to be wrong anyways. So when mapping a nfs4 acl to a windows acl, we map these flags away for files. Michael
* cifs.upcall: fix IPv6 addrs sent to upcall to have colon delimitersJeff Layton2009-08-141-4/+29
| | | | | | | Current kernels don't send IPv6 addresses with the colon delimiters, add a routine to add them when they're not present. Signed-off-by: Jeff Layton <jlayton@redhat.com>
* cifs.upcall: use ip address passed by kernel to get server's hostnameJeff Layton2009-08-141-12/+56
| | | | | | | | Instead of using the hostname given by the upcall to get the server's principal, take the IP address given in the upcall and reverse resolve it to a hostname. Signed-off-by: Jeff Layton <jlayton@redhat.com>
* cifs.upcall: clean up flag handlingJeff Layton2009-08-141-10/+10
| | | | | | | | | | Add a new stack var to hold the flags returned by the decoder routine so that we don't need to worry so much about preserving "rc". With this, we can drop privs before trying to find the location of the credcache. Signed-off-by: Jeff Layton <jlayton@redhat.com>
* cifs.upcall: try getting a "cifs/" principal and fall back to "host/"Jeff Layton2009-08-142-14/+18
| | | | | | | | | | | | | cifs.upcall takes a "-c" flag that tells the upcall to get a principal in the form of "cifs/hostname.example.com@REALM" instead of "host/hostname.example.com@REALM". This has turned out to be a source of great confusion for users. Instead of requiring this flag, have the upcall try to get a "cifs/" principal first. If that fails, fall back to getting a "host/" principal. Signed-off-by: Jeff Layton <jlayton@redhat.com>
* cifs.upcall: declare a structure for holding decoded argsJeff Layton2009-08-141-30/+33
| | | | | | | | The argument list for the decoder is becoming rather long. Declare an args structure and use that for holding the args. This also simplifies pointer handling a bit. Signed-off-by: Jeff Layton <jlayton@redhat.com>
* cifs.upcall: formatting cleanupJeff Layton2009-08-141-47/+37
| | | | | | Clean up some unneeded curly braces, and fix some indentation. Signed-off-by: Jeff Layton <jlayton@redhat.com>
* cifs.upcall: clean up logging and add debug messagesJeff Layton2009-08-141-32/+47
| | | | | | | | | | | | Change the log levels to be more appropriate to the messages being logged. Error messages should be LOG_ERR and not LOG_WARNING, for instance. Add some LOG_DEBUG messages that we can use to diagnose problems with krb5 upcalls. With these, someone can set up syslog to log daemon.debug and should be able to get more info when things aren't working. Signed-off-by: Jeff Layton <jlayton@redhat.com>
* s3:smbd: allow SMB2 Cancel to have the async flag setStefan Metzmacher2009-08-141-6/+8
| | | | metze
* s3:smbd: fix parsing of the SMB2 bodyStefan Metzmacher2009-08-141-5/+7
| | | | | | Maybe there's no dynamic part on the wire. metze
* s4:samdb python bindings - we don't need the attributes hereMatthias Dieter Wallnöfer2009-08-141-2/+1
|
* s4:ldb - Free the asynchronous resultMatthias Dieter Wallnöfer2009-08-141-0/+2
|
* s4: Correct the parameter logic of the "setpassword" scriptMatthias Dieter Wallnöfer2009-08-141-7/+4
| | | | | Either the username or the filter are allowed. If both are given the filter is going to be used due to a higher precedence.
* s4: Better way to call "dom_sid_to_rid" from ldap.pyMatthias Dieter Wallnöfer2009-08-142-4/+12
|
* s4: Remove obsolete "samdb_password_quality_ok" function (it's just a ↵Matthias Dieter Wallnöfer2009-08-141-10/+1
| | | | one-line wrapper)
* s4: cracknames.c: Change the handling of the NT_STATUS_NO_MEMORY status resultsMatthias Dieter Wallnöfer2009-08-141-4/+6
| | | | | With the previous check I got random failures when trying to connect to the LDAP server.
* s4:ldap_server Correct removal of talloc_steal()Andrew Bartlett2009-08-141-1/+0
| | | | | | | | This corrects commit 7a82aed71b74af8bc2a8a4381541adbb22452d20. The steal did not set ent->attributes, so it was incorrect to assign to ent->attributes. Andrew Bartlett
* fixed TESTS= in make test to allow multiple testsAndrew Tridgell2009-08-141-2/+16
| | | | | | Now you can do: make test TESTS="test1 test2" and it will run those two tests, each matching tests using a case insensitive substring match
* s4:ldap_server Remove another talloc_steal (with references)Andrew Bartlett2009-08-141-1/+1
| | | | | | | | This talloc_steal also conflicts with the ldb_map code, and like the previous commit, is rudundent given the talloc_steal of the whole msg above. Andrew Bartlett
* s4:ldap_server Don't talloc_steal (with references) in ldap_backendAndrew Bartlett2009-08-141-1/+1
| | | | | | | | There may or may not be a need to take a reference to the 'name' in the ldb_map code, but given we seal the whole msg just above here, it makes no senst to steal the name, but not the values. Andrew Bartlett
* Fix EVERY SINGLE build on the buildfarm that doesn't haveJeremy Allison2009-08-122-0/+5
| | | | | | bindtextdomain or textdomain. C'mon, this is what configure.in is *FOR*. Jeremy.
* Move build over to storing DOS attributes in EA's.Jeremy Allison2009-08-121-2/+4
| | | | | | | Turn off "map to" directives. I've now fixed the issues with the build tests running this way. I think this is how most people run these days - please raise this on the list (or revert) if you disagree.
* When mapping EA's into a TDB, don't remove the EAJeremy Allison2009-08-121-0/+9
| | | | | | until the last link to the file is gone (fixes the build farm RAW-RENAME test with xattr's in tdb's). Jeremy.
* Fix BASE-DELAYWRITE test by removing const from struct smb_filenameJeremy Allison2009-08-123-21/+21
| | | | | | | | in smbd_do_qfilepathinfo(). update_stat_ex_mtime() modifies the stat struct inside the smb_fname so don't make a copy of that stat struct, use it directly - it's meant to be updated and represent the state of the file we're returning. Jeremy.
* Documentation for "store create time".Jeremy Allison2009-08-121-0/+15
| | | | Jeremy.
* Add "store create time" parameter (docs to follow)Jeremy Allison2009-08-1210-15/+140
| | | | | that stores the create time in the user.DosTimestamps EA. Jeremy.
* Fix some warnings in the AIX ACL code.Jeremy Allison2009-08-121-4/+3
| | | | Jeremy.
* libcli/smb: move smb2_create_blob code to libcli/smb/Stefan Metzmacher2009-08-128-165/+252
| | | | | | I want to use this in source3/smbd/ metze
* libcli: move some common SMB and SMB2 stuff into libcli/smb/Stefan Metzmacher2009-08-1223-21/+47
| | | | | | This will hold code that's shared between source3 and source4. metze
* librpc: rerun "make idl_full"Kai Blin2009-08-1215-414/+414
|
* s3:smbd: as check_path_syntax() changes the string, we need to copy the ↵Stefan Metzmacher2009-08-121-2/+8
| | | | | | string before metze
* s3:smbd: avoid 'goto out' in smbd_smb2_create_send()Stefan Metzmacher2009-08-121-20/+15
| | | | metze
* s3:smbd: make sure we don't call conn_free() with a NULL pointer for SMB2Stefan Metzmacher2009-08-121-1/+3
| | | | metze
* s3:smbd: correctly invalidate vuids when SMB2 is usedStefan Metzmacher2009-08-122-0/+5
| | | | metze
* s3:lib: map ECONNRESET to NT_STATUS_CONNECTION_RESETStefan Metzmacher2009-08-121-0/+3
| | | | metze
* libreplace: undef AI_ADDRCONFIG on QNX 6.3.0 (fix bug #6630)Matt Kraai2009-08-121-0/+14
| | | | | | | | | | | Some of the functions in source3/lib/util_sock.c use AI_ADDRCONFIG. On QNX 6.3.0, this macro is defined but, if it's used, getaddrinfo will fail. This prevents smbd from opening any sockets. If I undefine AI_ADDRCONFIG on such systems and allow lib/replace/system/network.h to define it to be 0, this works around the issue. Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4:operational - Remove some outdated commentsMatthias Dieter Wallnöfer2009-08-111-12/+0
|
* ldb: Don't break the standalone LDB build (operational module removed)Matthias Dieter Wallnöfer2009-08-111-2/+2
|
* s4:test for "primaryGroupToken"Matthias Dieter Wallnöfer2009-08-112-10/+81
| | | | | | | | Tests for the right behaviour of this introduced constructed attribute. Since we don't support the read-only-ness of those attributes yet, I commented some lines out. Also I had to add a function for python which converts domain SIDs in RIDs. And a small fix for the "groupType" test.
* s4:samldb module - Remove duplicate lineMatthias Dieter Wallnöfer2009-08-111-1/+0
|
* s4:operational module - move and enhancementsMatthias Dieter Wallnöfer2009-08-113-27/+59
| | | | | | This moves the "operational" LDB module to the right place under "dsdb/samdb/ldb_modules" (suggested by abartlet) and enhances it for supporting dynamic generated "primaryGroupToken" for AD groups. This should fix bug #6466.
* s4:pwsettings script - Fix a small glitchMatthias Dieter Wallnöfer2009-08-111-5/+10
| | | | | | This fixes the problem with the setting and getting of the "minPwdAge" and "maxPwdAge" attributes. I wanted to handle them in days but forgot to add conversions (from "ticks" (tenth of microsecond) -> "days" and backwards).
* Rename ASN1_BITFIELD to ASN1_BIT_STRING.Kouhei Sutou2009-08-112-2/+2
| | | | X.690 uses "BIT STRING" not "BIT FIELD".
* torture/basic: in run_derefopen() the file could have been deleted before ↵Matthias Dieter Wallnöfer2009-08-111-2/+6
| | | | | | | | | the last unlink Through a suggestion pointed out in bug #6622 the test file sometimes doesn't exist on the last turn anymore. So we haven't to fail here since it could have been deleted by a concurrent process (e.g. when the same test runs multiple times). Therefore also NT_STATUS_OBJECT_NAME_NOT_FOUND is an acceptable result.