summaryrefslogtreecommitdiffstats
path: root/source/include
Commit message (Collapse)AuthorAgeFilesLines
* Revert "Fix bug #7067 - Linux asynchronous IO (aio) can cause smbd to fail ↵Karolin Seeger2010-03-091-2/+1
| | | | | | | | | to respond to a read or write." This reverts commit 153357b9bb4d70a168c81cb9ff2da437eae823fc. This fixes bug #7222 (All users have full rigths on all shares) (CVE-2010-0728). (cherry picked from commit 007f9c90e952aeea2d8f73cff3ccd0f747a9c06e)
* Fixes issue with preexec scripts creating a share directory, and problems if ↵Jeremy Allison2010-02-151-0/+1
| | | | | | | | | | | | | | | | | a smb.conf reload turns wide links back on after a connection is establised. Includes git refs : cd18695fc2e4d09ab75e9eab2f0c43dcc15adf0b 94865e4dbd3d721c9855aada8c55e02be8b3881e 5d92d969dda450cc3564dd2265d2b042d832c542 02a5078f1fe6285e4a0b6ad95a3aea1c5bb3e8cf a6f402ad87ff0ae14d57d97278d67d0ceaaa1d82 from master. Jeremy. Fix bug #7104 ("wide links" and "unix extensions" are incompatible.)
* Fix bug #7067 - Linux asynchronous IO (aio) can cause smbd to fail to ↵Jeremy Allison2010-02-041-1/+2
| | | | | | | | | | | respond to a read or write. Only works on Linux kernels 2.6.26 and above. Grants CAP_KILL capability to allow Linux threads under different euids to send signals to each other. Same as mater commit 899bd0005f56dcc1e95c3988d41ab3f628bb15db. Jeremy.
* s3:smbldap: add smbldap_talloc_first_attribute()Stefan Metzmacher2010-01-131-0/+3
| | | | | | metze Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-kerberos: do not include authdata headers before including krb5 headers.Günther Deschner2009-12-021-1/+0
| | | | Guenther
* s3-kerberos: only use krb5 headers where required.Günther Deschner2009-12-024-196/+225
| | | | | | | This seems to be the only way to deal with mixed heimdal/MIT setups during merged build. Guenther
* s3-kerberos: add smb_krb5_principal_get_realm().Günther Deschner2009-12-021-1/+2
| | | | Guenther
* s3-rpc_client: add rpccli_lsa_lookup_sids3 wrapper.Günther Deschner2009-10-081-0/+8
| | | | | Guenther (cherry picked from commit 2f9adf04e4b3e16c046cb371a428a8a70d5de041)
* s3-rpc_client: add rpccli_lsa_lookup_names4 wrapper.Günther Deschner2009-10-081-0/+9
| | | | | Guenther (cherry picked from commit ff968712bab6c2635ef74723c6f52b0fdac4b424)
* s3-rpc_client: add dcerpc_transport_t to cli_rpc_pipe_open_schannel().Günther Deschner2009-10-081-0/+3
| | | | | Guenther (cherry picked from commit bea8e5fa6038d5abd2ec1e12f9005c4a04abb79f)
* s3-rpc_client: add dcerpc_transport_t to cli_rpc_pipe_open_spnego_ntlmssp ↵Günther Deschner2009-10-081-0/+2
| | | | | | and cli_rpc_pipe_open_ntlmssp. Guenther
* s3-rpc_client: add cli_rpc_pipe_open_noauth_transport.Günther Deschner2009-10-081-0/+4
| | | | | Guenther (cherry picked from commit 87f61a144b8d25c90b847940ca03ced1f77b036c)
* Fix for CVE-2009-2906.Jeremy Allison2009-10-011-0/+1
| | | | | | | | | Summary: Specially crafted SMB requests on authenticated SMB connections can send smbd into a 100% CPU loop, causing a DoS on the Samba server. (cherry picked from commit 5f1f1c47623f846909481073d56bc909d13e5e37)
* s3-schannel: Fix Bug #6697. Interdomain trusts with Windows 2008 R2 DCs.Günther Deschner2009-09-081-1/+1
| | | | | | | | The Schannel verifier (aka NL_AUTH_SIGNATURE) structure (32 byte) sent from a W2k8r2 DC is passed in a buffer with the size of a NL_AUTH_SHA2_SIGNATURE (56 byte). We should just ignore the remaining 12 zeroed bytes and proceed. Guenther
* Fix bug 6157Volker Lendecke2009-06-061-0/+3
| | | | | This patch picks the alphabetically smallest one of the multi-value attribute "uid". This fixes a regression against 3.0 and also becomes deterministic.
* s3-auth: use full 16byte session key in make_user_info_netlogon_interactive().Jeremy Allison2009-05-191-1/+1
| | | | | | | | | | | | | | | | | | Patch from Jeremy. With this patch, I was able to join Windows 7 RC to a Samba3 DC, and login into a Samba 3 Domain. There are still two registry settings required: HKLM\System\CCS\Services\LanmanWorkstation\Parameters DWORD DomainCompatibilityMode = 1 DWORD DNSNameResolutionRequired = 0 Do *not* modify the other netlogon registry parameters that were passed around, they weaken security. Guenther / Jeremy.
* error-codes: add some service related error codes.Günther Deschner2009-04-081-0/+3
| | | | Guenther
* s3-samr: try to to fix password_expired flag handling.Günther Deschner2009-04-031-0/+6
| | | | Guenther
* Fix bug #6195 - Migrating from 3.0.x to 3.3.x can fail to update passdb.tdb ↵Jeremy Allison2009-03-271-0/+2
| | | | | | | | | | correctly. For the clustering case. Clustered setups should have only ever used the unsigned version of TDB_DATA in the first place so they can't be in this mess :-). Just do the normal upgrade in the clustered case. Jeremy.
* Use avahi to register _smb._tcp in smbdVolker Lendecke2009-03-231-0/+5
|
* Add event avahi bindingVolker Lendecke2009-03-231-0/+5
|
* s3:registry: add a delete_subkey method to the backend ops.Michael Adam2009-03-192-0/+2
| | | | | | | | This is to provide a more atomic means of deleting a subkey of a key. Michael Signed-off-by: Michael Adam <obnox@samba.org>
* s3:registry: add a create_subkey method to the backend ops.Michael Adam2009-03-192-0/+2
| | | | | | | | This is to provide a more atomic means of adding a subkey of a key. Michael Signed-off-by: Michael Adam <obnox@samba.org>
* source/include/nt_status.h: add macro W_ERROR_NOT_OK_GOTO(x, y)Michael Adam2009-03-191-0/+6
| | | | | | | | a goto destination can be specified as a second parameter. Michael Signed-off-by: Michael Adam <obnox@samba.org>
* s3: move definition of W_ERROR_NOT_OK_GOTO_DONE down to nt_status.hMichael Adam2009-03-191-0/+6
| | | | | | | | where all the other W_ERROR_xyz macros are found as well. Michael Signed-off-by: Michael Adam <obnox@samba.org>
* s3:registry: hash the list of subkeys in the regsubkey_ctrMichael Adam2009-03-191-1/+1
| | | | | | | | | | | | This removes many loops over all the arrays (from regsubkey_ctr_key_exists) and thus reduces "net conf drop" from 1m55 to 48seconds and "net conf import" from 1m55 to 58 seconds for 2000 shares on my box. Michael Signed-off-by: Michael Adam <obnox@samba.org>
* s3:registry: remove definition of regsubkey_ctr from the surface.Michael Adam2009-03-191-5/+1
| | | | | | | | | All access is now through accessor functions in reg_objects.c This allows for performance tuning under the hood in the next step. Michael Signed-off-by: Michael Adam <obnox@samba.org>
* s3:registry: add regsubkey_ctr_get_seqnum() to hide implementationMichael Adam2009-03-191-0/+1
| | | | | | Michael Signed-off-by: Michael Adam <obnox@samba.org>
* s3:registry: add regsubkey_ctr_set_seqnum to hide implementation from caller.Michael Adam2009-03-191-0/+1
| | | | | | Michael Signed-off-by: Michael Adam <obnox@samba.org>
* s3:registry: add a regsubkey_ctr_init function for allocating a regsubkey_ctrMichael Adam2009-03-191-0/+1
| | | | | | Michael Signed-off-by: Michael Adam <obnox@samba.org>
* s3:registry: replace typedef "REGSUBKEY_CTR" by "struct regsubkey_ctr"Michael Adam2009-03-193-18/+18
| | | | | | | | | This paves the way for hiding the typedef and the implementation from the surface. Michael Signed-off-by: Michael Adam <obnox@samba.org>
* s3:registry: provide transaction_start|commit|cancel fns for the registry tdbMichael Adam2009-03-191-0/+3
| | | | | | Michael Signed-off-by: Michael Adam <obnox@samba.org>
* Add sorted subkey cacheVolker Lendecke2009-03-191-0/+1
| | | | | | On my box this gets net conf list for 1000 records down to .1 seconds Signed-off-by: Michael Adam <obnox@samba.org>
* Add dbwrap->parse_recordVolker Lendecke2009-03-191-0/+4
| | | | Signed-off-by: Michael Adam <obnox@samba.org>
* s3:libsmbconf: remove the init headers from smbconf.hMichael Adam2009-03-191-0/+3
| | | | | | | | | | | | give the smbconf_init() dispatcher and the backends (smbconf_reg and smbconf_txt) a header of their own each. This allows to use the basic infrastructure and single backends individually. Michael Signed-off-by: Michael Adam <obnox@samba.org>
* s3:signing: the seqnum should only be decremented by 1 for ntcancel requestsStefan Metzmacher2009-03-101-1/+1
| | | | | | | | | [MS-SMB] 3.3.5.1 Receiving Any Message says that the seqnum is incremented by only for ntcancel requests for any other request it's by incremented by 2, even if it doesn't expect a response. metze
* Last part of fix for #6154 - zfs does not honor admin users.Jeremy Allison2009-03-051-3/+3
| | | | Jeremy.
* Fix bug #6155 - "force group" is no longer working as expected.Jeremy Allison2009-03-031-0/+6
| | | | | | | We need to store the "force group" uid separately from the conn->server_info token as we need to apply it separately also. Volker PLEASE CHECK ! Jeremy.
* Make us pass the RAW-RENAME torture test I just added.Jeremy Allison2009-02-261-0/+1
| | | | | | | Inside a directory, keep a file open and then renaming the directory should fail with ACCESS_DENIED. Jeremy.
* Make char* parameters constDerrell Lipman2009-02-241-4/+4
| | | | | | | | | | | - Use const in function signatures whenever appropriate, to help prevent errant scribbling on users' buffers. smbc_set_credentials() always acted as if its formal parameters were const char *, and changing the formal declaration to specify that should not cause any change to the ABI. It is still allowable to pass a writable buffer to a function which specifies that it will not write to the buffer. Derrell
* prefer gssapi header files from subdirectoryBjörn Jacke2009-02-241-3/+3
| | | | this fixes some compile time noise on FreeBSD 7
* More warning fixes for Solaris.Jeremy Allison2009-02-231-1/+1
| | | | Jeremy.
* Quieten down a boatload of shadowed variable warnings on Solaris.Jeremy Allison2009-02-231-1/+1
| | | | | Makes real problems easier to spot. Jeremy.
* Change smbc_set_credentials_with_fallback() (unreleased) to useJeremy Allison2009-02-201-3/+3
| | | | | const approptiately. Jeremy.
* Make libsmbclient work with DFSBo Yang2009-02-201-0/+12
| | | | Signed-off-by: Derrell Lipman <derrell.lipman@unwireduniverse.com>
* Backport the semantics of when to delete alternate data streams on a file ↵Jeremy Allison2009-02-191-0/+1
| | | | | | | truncate. Needed to fully support stream semantics. Jeremy.
* s3: remove duplicate prototypes for generated rpc server functions.Günther Deschner2009-02-172-758/+7
| | | | Guenther
* fix proto.h after idl changesStefan Metzmacher2009-02-171-3/+3
| | | | metze
* s3-accessmask: re-run make samba3-idl and remove duplicate copies.Günther Deschner2009-02-171-15/+0
| | | | Guenther
* Remove compiler warnings about unknown structure pointerDerrell Lipman2009-02-151-0/+1
|