summaryrefslogtreecommitdiffstats
path: root/source/include
Commit message (Collapse)AuthorAgeFilesLines
* Revert "Fix bug #7067 - Linux asynchronous IO (aio) can cause smbd to fail ↵samba-3.3.12Karolin Seeger2010-03-081-2/+1
| | | | | | | | to respond to a read or write." This reverts commit 153357b9bb4d70a168c81cb9ff2da437eae823fc. This fixes bug #7222 (All users have full rigths on all shares) (CVE-2010-0728).
* Fixes issue with preexec scripts creating a share directory, and problems if ↵Jeremy Allison2010-02-241-0/+1
| | | | | | | | | | | | | | | | | | a smb.conf reload turns wide links back on after a connection is establised. Includes git refs : cd18695fc2e4d09ab75e9eab2f0c43dcc15adf0b 94865e4dbd3d721c9855aada8c55e02be8b3881e 5d92d969dda450cc3564dd2265d2b042d832c542 02a5078f1fe6285e4a0b6ad95a3aea1c5bb3e8cf a6f402ad87ff0ae14d57d97278d67d0ceaaa1d82 from master. Jeremy. Fix bug #7104 ("wide links" and "unix extensions" are incompatible.) (cherry picked from commit ce04bf60499104c166657df959e4033573b5be5c)
* Fix bug #7067 - Linux asynchronous IO (aio) can cause smbd to fail to ↵Jeremy Allison2010-02-241-1/+2
| | | | | | | | | | | | respond to a read or write. Only works on Linux kernels 2.6.26 and above. Grants CAP_KILL capability to allow Linux threads under different euids to send signals to each other. Same as mater commit 899bd0005f56dcc1e95c3988d41ab3f628bb15db. Jeremy. (cherry picked from commit cbf09baa90f5c4cfa8a0019ccc79211d72d13629)
* s3:smbldap: add smbldap_talloc_first_attribute()Stefan Metzmacher2010-01-131-0/+3
| | | | | | | metze Signed-off-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit c992127f8a96c37940a6d298c7c6859c47f83d9b)
* s3-kerberos: do not include authdata headers before including krb5 headers.Günther Deschner2010-01-131-1/+0
| | | | | Guenther (cherry picked from commit 9329564e44a1432251acb7f0afaf1bd04b8cb957)
* s3-kerberos: only use krb5 headers where required.Günther Deschner2010-01-134-196/+225
| | | | | | | | This seems to be the only way to deal with mixed heimdal/MIT setups during merged build. Guenther (cherry picked from commit 60262369fc2ae19f6d9263e35b5db9b09b603a1b)
* s3-kerberos: add smb_krb5_principal_get_realm().Günther Deschner2010-01-131-1/+2
| | | | | Guenther (cherry picked from commit bddafc6de8e37e014d7f074b6107dda6f76ebdc5)
* s3-rpc_client: add rpccli_lsa_lookup_sids3 wrapper.Günther Deschner2009-10-081-0/+8
| | | | | | Guenther (cherry picked from commit 2f9adf04e4b3e16c046cb371a428a8a70d5de041) (cherry picked from commit 18ba75b763a2fec8f7b05af0444212990753fe1b)
* s3-rpc_client: add rpccli_lsa_lookup_names4 wrapper.Günther Deschner2009-10-081-0/+9
| | | | | | Guenther (cherry picked from commit ff968712bab6c2635ef74723c6f52b0fdac4b424) (cherry picked from commit 0d4d3c8e1e5312a820fcaede65471566e75e272c)
* s3-rpc_client: add dcerpc_transport_t to cli_rpc_pipe_open_schannel().Günther Deschner2009-10-081-0/+3
| | | | | | Guenther (cherry picked from commit bea8e5fa6038d5abd2ec1e12f9005c4a04abb79f) (cherry picked from commit 864c0b58aec55e37cf304b28c762a5259fc0ec67)
* s3-rpc_client: add dcerpc_transport_t to cli_rpc_pipe_open_spnego_ntlmssp ↵Günther Deschner2009-10-081-0/+2
| | | | | | | and cli_rpc_pipe_open_ntlmssp. Guenther (cherry picked from commit 41158d10cdad5b923d0bfa608f73c0daf8ccd352)
* s3-rpc_client: add cli_rpc_pipe_open_noauth_transport.Günther Deschner2009-10-081-0/+4
| | | | | | Guenther (cherry picked from commit 87f61a144b8d25c90b847940ca03ced1f77b036c) (cherry picked from commit c968714f7910ba90c2e989e46d18c265d9f9b549)
* s3-schannel: Fix Bug #6697. Interdomain trusts with Windows 2008 R2 DCs.Günther Deschner2009-10-071-1/+1
| | | | | | | | | The Schannel verifier (aka NL_AUTH_SIGNATURE) structure (32 byte) sent from a W2k8r2 DC is passed in a buffer with the size of a NL_AUTH_SHA2_SIGNATURE (56 byte). We should just ignore the remaining 12 zeroed bytes and proceed. Guenther (cherry picked from commit e7e1e1887e79e4dcbd8836b775e387751c44f318)
* Fix for CVE-2009-2906.samba-3.3.8Jeremy Allison2009-09-301-0/+1
| | | | | | | | Summary: Specially crafted SMB requests on authenticated SMB connections can send smbd into a 100% CPU loop, causing a DoS on the Samba server.
* Fix bug 6157Volker Lendecke2009-06-101-0/+3
| | | | | | This patch picks the alphabetically smallest one of the multi-value attribute "uid". This fixes a regression against 3.0 and also becomes deterministic. (cherry picked from commit 47333fc8785457239a499a298536664f152b681d)
* s3-auth: use full 16byte session key in make_user_info_netlogon_interactive().Jeremy Allison2009-06-101-1/+1
| | | | | | | | | | | | | | | | | | | Patch from Jeremy. With this patch, I was able to join Windows 7 RC to a Samba3 DC, and login into a Samba 3 Domain. There are still two registry settings required: HKLM\System\CCS\Services\LanmanWorkstation\Parameters DWORD DomainCompatibilityMode = 1 DWORD DNSNameResolutionRequired = 0 Do *not* modify the other netlogon registry parameters that were passed around, they weaken security. Guenther / Jeremy. (cherry picked from commit 0da133101ab149b074ab369d819fc48b7c95bf71)
* error-codes: add some service related error codes.Günther Deschner2009-04-171-0/+3
| | | | | Guenther (cherry picked from commit a46f334c73683276984727a7306b18d2d2a8e222)
* s3-samr: try to to fix password_expired flag handling.Günther Deschner2009-04-171-0/+6
| | | | | Guenther (cherry picked from commit 3420ce3f2a9c75b3e339d2ab439f6c8df326ab47)
* Fix bug #6195 - Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb ↵Jeremy Allison2009-03-311-0/+2
| | | | | | | | | | | correctly. For the clustering case. Clustered setups should have only ever used the unsigned version of TDB_DATA in the first place so they can't be in this mess :-). Just do the normal upgrade in the clustered case. Jeremy. (cherry picked from commit 58d3ec1cb81d6086d65cd12acd16cd591cf0c71f)
* Use avahi to register _smb._tcp in smbdVolker Lendecke2009-03-271-0/+5
| | | | (cherry picked from commit b0ad52693d4ee548a2d3870e28f6499f827bed31)
* Add event avahi bindingVolker Lendecke2009-03-271-0/+5
| | | | (cherry picked from commit cb18c1686b3cd20f0535458f8cee24a772560350)
* s3:registry: add a delete_subkey method to the backend ops.Michael Adam2009-03-272-0/+2
| | | | | | | | | This is to provide a more atomic means of deleting a subkey of a key. Michael Signed-off-by: Michael Adam <obnox@samba.org> (cherry picked from commit eced96cf26b08b1fd606381eeced5abec9fac3c4)
* s3:registry: add a create_subkey method to the backend ops.Michael Adam2009-03-272-0/+2
| | | | | | | | | This is to provide a more atomic means of adding a subkey of a key. Michael Signed-off-by: Michael Adam <obnox@samba.org> (cherry picked from commit 453c7e1503f814034765ebc6aac06dd11f89b381)
* source/include/nt_status.h: add macro W_ERROR_NOT_OK_GOTO(x, y)Michael Adam2009-03-271-0/+6
| | | | | | | | | a goto destination can be specified as a second parameter. Michael Signed-off-by: Michael Adam <obnox@samba.org> (cherry picked from commit d316cab3cb5037909121494d57cc2173e4c66a23)
* s3: move definition of W_ERROR_NOT_OK_GOTO_DONE down to nt_status.hMichael Adam2009-03-271-0/+6
| | | | | | | | | where all the other W_ERROR_xyz macros are found as well. Michael Signed-off-by: Michael Adam <obnox@samba.org> (cherry picked from commit 76a460aecab6d5a03af9b8b5d97cba15d364cfde)
* s3:registry: hash the list of subkeys in the regsubkey_ctrMichael Adam2009-03-271-1/+1
| | | | | | | | | | | | | This removes many loops over all the arrays (from regsubkey_ctr_key_exists) and thus reduces "net conf drop" from 1m55 to 48seconds and "net conf import" from 1m55 to 58 seconds for 2000 shares on my box. Michael Signed-off-by: Michael Adam <obnox@samba.org> (cherry picked from commit 1eaff4f96768912b31795c1c8b6a4741e2e746e1)
* s3:registry: remove definition of regsubkey_ctr from the surface.Michael Adam2009-03-271-5/+1
| | | | | | | | | | All access is now through accessor functions in reg_objects.c This allows for performance tuning under the hood in the next step. Michael Signed-off-by: Michael Adam <obnox@samba.org> (cherry picked from commit ed8e84dbda344b19f1c6037a630e60885f722f13)
* s3:registry: add regsubkey_ctr_get_seqnum() to hide implementationMichael Adam2009-03-271-0/+1
| | | | | | | Michael Signed-off-by: Michael Adam <obnox@samba.org> (cherry picked from commit 811b3fefab29c109c6c134339a438c7e4ffb13fe)
* s3:registry: add regsubkey_ctr_set_seqnum to hide implementation from caller.Michael Adam2009-03-271-0/+1
| | | | | | | Michael Signed-off-by: Michael Adam <obnox@samba.org> (cherry picked from commit d119cd129c6acd2f0eb16fcf3281744d717cd291)
* s3:registry: add a regsubkey_ctr_init function for allocating a regsubkey_ctrMichael Adam2009-03-271-0/+1
| | | | | | | Michael Signed-off-by: Michael Adam <obnox@samba.org> (cherry picked from commit b26f384649b4285748bf0fb78d826651882208e7)
* s3:registry: replace typedef "REGSUBKEY_CTR" by "struct regsubkey_ctr"Michael Adam2009-03-273-18/+18
| | | | | | | | | | This paves the way for hiding the typedef and the implementation from the surface. Michael Signed-off-by: Michael Adam <obnox@samba.org> (cherry picked from commit 9ca48a86fb6cf5fa30b622162877859b0c335f7e)
* s3:registry: provide transaction_start|commit|cancel fns for the registry tdbMichael Adam2009-03-271-0/+3
| | | | | | | Michael Signed-off-by: Michael Adam <obnox@samba.org> (cherry picked from commit 0509eee47ac2da1042bd1bb0d98695abc8ee44a3)
* Add sorted subkey cacheVolker Lendecke2009-03-271-0/+1
| | | | | | | On my box this gets net conf list for 1000 records down to .1 seconds Signed-off-by: Michael Adam <obnox@samba.org> (cherry picked from commit 32524d865158080421867b36f9b64bdc98ff07c9)
* Add dbwrap->parse_recordVolker Lendecke2009-03-271-0/+4
| | | | | Signed-off-by: Michael Adam <obnox@samba.org> (cherry picked from commit 68d4e25aad23b670e4ff735377de59ba396940cd)
* s3:libsmbconf: remove the init headers from smbconf.hMichael Adam2009-03-271-0/+3
| | | | | | | | | | | | | give the smbconf_init() dispatcher and the backends (smbconf_reg and smbconf_txt) a header of their own each. This allows to use the basic infrastructure and single backends individually. Michael Signed-off-by: Michael Adam <obnox@samba.org> (cherry picked from commit defb4430114091474dfef0114ebb176bfb5026ea)
* s3:signing: the seqnum should only be decremented by 1 for ntcancel requestsStefan Metzmacher2009-03-111-1/+1
| | | | | | | | | | [MS-SMB] 3.3.5.1 Receiving Any Message says that the seqnum is incremented by only for ntcancel requests for any other request it's by incremented by 2, even if it doesn't expect a response. metze (cherry picked from commit 0999366b6b36f3084870af0375d686b0cbaae698)
* Last part of fix for #6154 - zfs does not honor admin users.Jeremy Allison2009-03-061-3/+3
| | | | | Jeremy. (cherry picked from commit ddaa1bae7567c81fb8e478c439bb970edab2f9c3)
* Fix bug #6155 - "force group" is no longer working as expected.Jeremy Allison2009-03-061-0/+6
| | | | | | | | We need to store the "force group" uid separately from the conn->server_info token as we need to apply it separately also. Volker PLEASE CHECK ! Jeremy. (cherry picked from commit da340c674d52d79cd4c45ab961a8fd7a204f7a67)
* Make us pass the RAW-RENAME torture test I just added.Jeremy Allison2009-03-061-0/+1
| | | | | | | | Inside a directory, keep a file open and then renaming the directory should fail with ACCESS_DENIED. Jeremy. (cherry picked from commit eb02b1e7fe98f826606d0129b1ba172b8645207a)
* Make char* parameters constDerrell Lipman2009-03-061-4/+4
| | | | | | | | | | | | - Use const in function signatures whenever appropriate, to help prevent errant scribbling on users' buffers. smbc_set_credentials() always acted as if its formal parameters were const char *, and changing the formal declaration to specify that should not cause any change to the ABI. It is still allowable to pass a writable buffer to a function which specifies that it will not write to the buffer. Derrell (cherry picked from commit 53fea3a7aef481151c3a15d01481cb0f11ae2e8b)
* prefer gssapi header files from subdirectoryBjörn Jacke2009-03-061-3/+3
| | | | | this fixes some compile time noise on FreeBSD 7 (cherry picked from commit 1bfdbb093f7c5e434ea3e653d389e1ccec578af6)
* More warning fixes for Solaris.Jeremy Allison2009-02-241-1/+1
| | | | | Jeremy. (cherry picked from commit aea38950ff4865f1d791cd19619fadcd59eaf480)
* Quieten down a boatload of shadowed variable warnings on Solaris.Jeremy Allison2009-02-241-1/+1
| | | | | | Makes real problems easier to spot. Jeremy. (cherry picked from commit d32b6d5afd6437544c0fc42681351552d89907dc)
* Change smbc_set_credentials_with_fallback() (unreleased) to useJeremy Allison2009-02-231-3/+3
| | | | | | const approptiately. Jeremy. (cherry picked from commit 07c7085f25718915cda07e38a87a008a72abbf4f)
* Make libsmbclient work with DFSBo Yang2009-02-231-0/+12
| | | | | Signed-off-by: Derrell Lipman <derrell.lipman@unwireduniverse.com> (cherry picked from commit 8457e7bba4ef2ba479340829bb89a3a8772f958b)
* Backport the semantics of when to delete alternate data streams on a file ↵Jeremy Allison2009-02-201-0/+1
| | | | | | | | truncate. Needed to fully support stream semantics. Jeremy. (cherry picked from commit 5a68f1e2c1fd16d315b1e303a90eb6475bbe7b15)
* s3: remove duplicate prototypes for generated rpc server functions.Günther Deschner2009-02-182-758/+7
| | | | | Guenther (cherry picked from commit 6934180fd37417f7bf9b8b107d9cecea1b683720)
* fix proto.h after idl changesStefan Metzmacher2009-02-181-3/+3
| | | | | metze (cherry picked from commit 9d56f847b6fb88ab0529fdc6318dff5389c9d3db)
* s3-accessmask: re-run make samba3-idl and remove duplicate copies.Günther Deschner2009-02-171-15/+0
| | | | | Guenther (cherry picked from commit 1cbfcd7dcb90c117fa623246d6924e157ec5be3f)
* Remove compiler warnings about unknown structure pointerDerrell Lipman2009-02-161-0/+1
| | | | (cherry picked from commit f11d4d088c17db77ba259972c05de72da0d3ac93)