summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Move set_thread_credentials_permanently() to set_thread_credentials()Jeremy Allison2012-07-112-16/+16
| | | | | | | | | | as we need to keep the saved set uid/gid otherwise there is an interaction with open[at]() and NO_ATIME returning EPERM. As this is meant for threaded code inside the process we don't need to do an irreverisble change anyway. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Wed Jul 11 03:54:00 CEST 2012 on sn-devel-104
* Fix typo we've had for a long time in set_re_uid() in the USE_SETRESUID case.Jeremy Allison2012-07-101-1/+1
| | | | | | | | | We only set the real euid, not the effective one. This is not a security issue as this is *only* used in the quota code, and only between code that brackets it with save_re_uid()/restore_re_uid(), Also this is not used on most platforms (we use USE_SETREUID by preference) but it's better to have this right. Bug to follow to get this fixed in 3.6.next and 3.5.next.
* Cope with a (non-security) open race we've had for ever as NTCreateX isn't ↵Jeremy Allison2012-07-101-0/+25
| | | | | | | | | | | | | | | | atomic on POSIX. On open without create, the file did exist, but some other (local or NFS) process either renamed/unlinked and re-created the file with different dev/ino after we walked the path, but before we did the open. We could retry the open but it's a rare enough case it's easier to just fail the open to prevent creating any problems in the open file db having the wrong dev/ino key. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Jul 10 21:57:33 CEST 2012 on sn-devel-104
* Now we have a guaranteed indication of a file being created, use it to set ↵Jeremy Allison2012-07-101-12/+8
| | | | the create disposition correctly.
* Add function fd_open_atomic() which uses O_CREAT|O_EXCL to return a ↵Jeremy Allison2012-07-101-4/+107
| | | | guaranteed indication of creation of a new file.
* Simplify the logic in open_file() some more.Jeremy Allison2012-07-101-48/+36
| | | | | | | | | | Move the inheritance work into the if block where we created the file. We can never have created the file (and thus need no inheritance) for a stat-open. Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Jul 10 03:30:22 CEST 2012 on sn-devel-104
* Simplify the logic in open_file().Jeremy Allison2012-07-091-22/+15
| | | | | | Move the fstat call into the block which opens a file descriptor. Remove the stat() call in the stat-open case. We already failed the open if !file_existed.
* Use new common function.Jeremy Allison2012-07-091-1/+1
|
* Make check_same_stat() and check_same_dev_ino() common functions.Jeremy Allison2012-07-094-31/+33
|
* Factor out check_same_dev_ino() from check_same_stat() so it can be called ↵Jeremy Allison2012-07-091-2/+15
| | | | separately.
* lib/ldb: Bump ldb release due to pyldb changesAndrew Bartlett2012-07-093-1/+261
| | | | | | | | | | We strictly need these changes to pass make test, and the concat change is backwards incompatible, so we really want to use the right version. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Mon Jul 9 04:34:06 CEST 2012 on sn-devel-104
* s4-torture: add ntprinting ndr operations testsuite.Günther Deschner2012-07-063-1/+442
| | | | | | | Guenther Autobuild-User(master): Günther Deschner <gd@samba.org> Autobuild-Date(master): Fri Jul 6 20:55:26 CEST 2012 on sn-devel-104
* ntprinting: mark the final 4 byte null pointer for printer data in ↵Günther Deschner2012-07-061-0/+1
| | | | | | ndr_pull_ntprinting_printer as read. Guenther
* ndr: fix push/pull DATA_BLOB with NDR_NOALIGNDavid Disseldorp2012-07-061-12/+22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This change addresses bug 9026. There are 3 use cases for DATA_BLOB marshalling/unmarshalling: 1) ndr_push_DATA_BLOB and ndr_pull_DATA_BLOB when called with LIBNDR_FLAG_ALIGN* alignment flags set, are used to push/pull padding bytes _only_. The length is determined by the alignment required and the current ndr offset. e.g. dcerpc.idl: typedef struct { ... [flag(NDR_ALIGN8)] DATA_BLOB _pad; } dcerpc_request; 2) When called with the LIBNDR_FLAG_REMAINING flag, all remaining bytes in the ndr buffer are pushed/pulled. e.g. dcerpc.idl: typedef struct { ... [flag(NDR_REMAINING)] DATA_BLOB stub_and_verifier; } dcerpc_request; 3) When called without alignment flags, push/pull a uint32 length _and_ a corresponding byte array to/from the ndr buffer. e.g. drsblobs.idl typedef [public] struct { ... DATA_BLOB data; } DsCompressedChunk; The fix for bug 8373 changed the definition of "alignment flags", such that when called with LIBNDR_FLAG_NOALIGN ndr_push/pull_DATA_BLOB behaves as (1: padding bytes) rather than (3: uint32 length + byte array). This breaks marshalling/unmarshalling for the following structures. eventlog.idl: typedef [flag(NDR_NOALIGN|NDR_PAHEX),public] struct { ... DATA_BLOB sid; ... } eventlog_Record_tdb; ntprinting.idl: typedef [flag(NDR_NOALIGN),public] struct { ... DATA_BLOB *nt_dev_private; } ntprinting_devicemode; typedef [flag(NDR_NOALIGN),public] struct { ... DATA_BLOB data; } ntprinting_printer_data; Signed-off-by: Günther Deschner <gd@samba.org>
* ntprinting: make decode_ntprinting helpers public in idl.Günther Deschner2012-07-061-3/+3
| | | | Guenther
* s3: Fix Coverity ID 709470 Uninitialized scalar variableVolker Lendecke2012-07-061-1/+1
| | | | | | | Signed-off-by: Michael Adam <obnox@samba.org> Autobuild-User(master): Michael Adam <obnox@samba.org> Autobuild-Date(master): Fri Jul 6 18:46:06 CEST 2012 on sn-devel-104
* s4-selftest: do a dbcheck on our two vampire DCsAndrew Bartlett2012-07-062-1/+2
| | | | | | | | | | | However, due to using --domain-critical-only we have to knownfail the vampire DC here, as we do not fill in the backlinks on non-critical objects correctly. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri Jul 6 16:54:10 CEST 2012 on sn-devel-104
* s4-dbcheck: Check for an object without a parentAndrew Bartlett2012-07-061-0/+44
| | | | | | | Such objects are then moved to the appropriate LostAndFound container, just as they would be if replicated. Andrew Bartlett
* s4-dsdb: Remove unused variables in py_dsdb_get_partitions_dnAndrew Bartlett2012-07-061-3/+0
|
* pydsdb: Add bindings for dsdb_wellknown_dn()Andrew Bartlett2012-07-062-0/+38
|
* pyldb: Add bindings for ldb_dn_remove_base_componentsAndrew Bartlett2012-07-062-0/+20
|
* s4-pydsdb: Add bindings for dsdb_find_nc_root()Andrew Bartlett2012-07-062-0/+26
|
* s4-pydsdb: Improve PyErr_LDB_{DN,}_OR_RAISE to use py_check_dcerpc_typeAndrew Bartlett2012-07-061-2/+9
| | | | | | This checks the type rather than just dereferencing the pointer. Andrew Bartlett
* pyldb: Fix dn concat operation to be the other way aroundAndrew Bartlett2012-07-062-2/+2
| | | | | | This now concatonates Dn(ldb, "cn=config") + Dn(ldb, "dc=samba,dc=org") as "cn=config,dc=samba,dc=org" Andrew Bartlett
* auth: Common function for retrieving PAC_LOGIN_INFO from PACChristof Schmitt2012-07-067-123/+54
| | | | | | | | Several functions use the same logic as kerberos_pac_logon_info. Move kerberos_pac_logon_info to common code and reuse it to remove the code duplication. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-lsarpc: DCERPC_FAULT_ACCESS_DENIED for tcpAndreas Schneider2012-07-061-0/+10
| | | | | Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Fri Jul 6 11:50:40 CEST 2012 on sn-devel-104
* s4-lsarpc: DCERPC_FAULT_ACCESS_DENIED for npAndreas Schneider2012-07-063-0/+45
|
* s4-lsarpc: Restrict LookupSids3 to crypto connections only.Andreas Schneider2012-07-061-0/+10
|
* s4-lsarpc: Restrict LookupNames4 to crypto connections only.Andreas Schneider2012-07-061-0/+10
|
* s4-lsarpc: Don't call lsa_OpenPolicy2 in lsa_LookupSids3.Andreas Schneider2012-07-061-46/+48
|
* s4-lsaprc: Don't call lsa_OpenPolicy2 in lsa_LookupNames4.Andreas Schneider2012-07-061-49/+53
|
* selftest: Update knownfail list for samba4.rpc.lsalookup.Andreas Schneider2012-07-061-1/+5
|
* s4-selftest: Don't run lsarpc requiring a named pipe over tcpip.Andreas Schneider2012-07-061-1/+1
|
* s4-selftest: Don't plan lsa.secrets tests over tcpip.Andreas Schneider2012-07-061-4/+4
| | | | These will only work over a named pipe or ncalrpc.
* s4-libnet: Skip calling lsarpc functions over a wrong pipe.Andreas Schneider2012-07-061-0/+9
|
* s4-torture: Call lsarpc tests over the correct pipe.Andreas Schneider2012-07-061-0/+6
|
* s4-torture: Don't consider NONE_MAPPED an error in LookupSids3.Andreas Schneider2012-07-061-3/+19
|
* s4-torture: Don't consider NONE_MAPPED an error in LookupNames4.Andreas Schneider2012-07-061-3/+15
|
* s4-torture: Add a lsarpc test_GetUserName_fail function.Andreas Schneider2012-07-061-0/+59
|
* s4-torture: Add a lsarpc test_OpenPolicy2_fail function.Andreas Schneider2012-07-062-21/+74
|
* s4-torture: Add a lsarpc test_OpenPolicy_fail function.Andreas Schneider2012-07-061-17/+74
|
* s4-torture: Add a lsarpc test_LookupNames4_fail function.Andreas Schneider2012-07-061-23/+74
|
* s4-torture: Add a lsarpc test_LookupSids3_fail function.Andreas Schneider2012-07-061-15/+68
|
* s3-lsarpc: Enforce a secure connection for LookupSids3 and LookupNames4.Andreas Schneider2012-07-061-8/+14
| | | | http://thread.gmane.org/gmane.network.protocol.cifs.general/291
* s3-lsarpc: Restrict lsa_LookupNames4 to ncacn_ip_tcp connections.Andreas Schneider2012-07-061-12/+23
| | | | See MS-LAT, Section 2.1 Transport.
* s3-lsarpc: Restrict lsa_LookupSids3 to ncacn_ip_tcp connections.Andreas Schneider2012-07-061-12/+23
| | | | See MS-LAT, Section 2.1 Transport.
* s3-lsarpc: Restrict the transport for ncacn_np functions.Andreas Schneider2012-07-061-0/+42
| | | | See MS-LAT, section 2.1 Transport.
* s3-rpc: Return the correct ntstatus depending on the transport.Andreas Schneider2012-07-061-3/+15
|
* s3-rpc_server: Make it possible to use more rpc exceptions.Andreas Schneider2012-07-0619-377/+349
|
* s3-selftest: Run lsa tests over np and tcpip.Andreas Schneider2012-07-061-0/+5
|
generated by cgit (git 2.34.1) at 2025-09-27 12:19:03 +0000