| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
Guenther
|
|
|
|
|
| |
fix some trusted/trusting mixups, make documentation more precise
and man page more verbose.
|
|
|
|
| |
Guenther
|
| |
|
|
|
|
| |
Karolin
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Igor Mammedov pointed out that reverse resolving an IP address to get
the hostname portion of a principal could open a possible attack
vector. If an attacker were to gain control of DNS, then he could
redirect the mount to a server of his choosing, and fix the reverse
resolution to point to a hostname of his choosing (one where he has
the key for the corresponding cifs/ or host/ principal).
That said, we often trust DNS for other reasons and it can be useful
to do so. Make the code that allows trusting DNS to be enabled by
adding --trust-dns to the cifs.upcall invocation.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
cifs.upcall takes a "-c" flag that tells the upcall to get a principal
in the form of "cifs/hostname.example.com@REALM" instead of
"host/hostname.example.com@REALM". This has turned out to be a source of
great confusion for users.
Instead of requiring this flag, have the upcall try to get a "cifs/"
principal first. If that fails, fall back to getting a "host/"
principal.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
|
|
|
|
|
|
| |
Noted by Oota Toshiya <t-oota@dh.jp.nec.com> .
Michael
|
|
|
|
|
| |
Signed-off-by: Shirish Pargaonkar <shirishpargaonkar@gmail.com>
Signed-off-by: Jeff Layton <jlayton@redhat.com>
|
|
|
|
|
| |
Signed-off-by: Shirish Pargaonkar <shirishpargaonkar@gmail.com>
Signed-off-by: Jeff Layton <jlayton@redhat.com>
|
|
|
|
|
|
|
|
| |
For some users who are used to smbclient, it is not clear that
mount.cifs never uses smb.conf for configuring client specific
parameters. So, let's add this information to mount.cifs man page.
Signed-off-by: Suresh Jayaraman <sjayaraman@suse.de>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Before 3.3, an smbcontrol debug message sent to the target "smbd" would
actually be sent to all running processes including nmbd and winbindd.
This behavior was changed in 3.3 so that the "smbd" target would only
send a message to the process found in smbd.pid, while the "all" target
would send a message to all processes.
The ability to set the debug level of all processes within a single
daemon, without specifying each pid is quite useful. This was implemented
in winbindd in 065760ed. This patch does the same thing for smbd.
Upon receiving a MSG_DEBUG the parent smbd will rebroadcast it to all of
its children.
The printing process has been added to the list of smbd child processes,
and we now always track the number of smbd children regardless of the
"max smbd processes" setting.
|
|
|
|
|
|
| |
This is part of a fix for bug #6328.
Karolin
|
|
|
|
| |
Guenther
|
|
|
|
| |
Signed-off-by: Andreas Schneider <mail@cynapses.org>
|
|
|
|
| |
Signed-off-by: Andreas Schneider <mail@cynapses.org>
|
|
|
|
| |
Signed-off-by: Andreas Schneider <mail@cynapses.org>
|
|
|
|
| |
Signed-off-by: Andreas Schneider <mail@cynapses.org>
|
|
|
|
| |
Signed-off-by: Andreas Schneider <mail@cynapses.org>
|
|
|
|
|
|
|
|
|
|
|
|
| |
Add a new section entitled FILE AND DIRECTORY OWNERSHIP AND PERMISSIONS
that attempts to cover information about this topic. Change the uid=
and gid= options to refer to that section. Add new varlistentries for
forceuid, forcegid and dynperm.
Also update the information about how the program behaves when installed
as a setuid binary.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
|
|
|
|
|
| |
Removed code and docs.
Jeremy.
|
|
|
|
| |
Jeremy.
|
|
|
|
| |
Karolin
|
|
|
|
| |
Guenther
|
|
|
|
| |
Karolin
|
|
|
|
| |
Guenther
|
|
|
|
| |
Guenther
|
|
|
|
| |
Guenther
|
|
|
|
| |
metze
|
|
|
|
|
|
| |
Andreas, please check.
Guenther
|
|
|
|
| |
Karolin
|
|
|
|
| |
Karolin
|
| |
|
|
|
|
| |
Signed-off-by: Michael Adam <obnox@samba.org>
|
| |
|
|
|
|
|
|
| |
Thanks to Tobias Stoeckmann for reporting!
Karolin
|
| |
|
|
|
|
| |
Karolin
|
|
|
|
| |
Karolin
|
|
|
|
| |
Karolin
|
|
|
|
| |
Michael
|
|
|
|
| |
Michael
|
|
|
|
| |
names to the one given by anonymize_prefix, without generating a hash number. This setting is optional and is compatible with the module configuration format of Samba 3.3.
|
|
|
|
| |
Karolin
|
|
|
|
| |
Michael
|
|
|
|
| |
Guenther
|
|
|
|
|
|
|
|
| |
This fixes bug #5346.
Thanks to the Debian Samba package maintainers for reporting and providing a
patch!
Karolin
|
|
|
|
| |
Guenther
|
|
|
|
| |
Karolin
|
|
|
|
| |
Karolin
|