summaryrefslogtreecommitdiffstats
path: root/source/lib
Commit message (Collapse)AuthorAgeFilesLines
...
* r4731: Fix the buildVolker Lendecke2007-10-101-1/+2
|
* r4724: Add support for Windows privileges in Samba 3.0Gerald Carter2007-10-103-219/+526
| | | | | | | | | | | | | | | | | | | | | | | | | | | | (based on Simo's code in trunk). Rewritten with the following changes: * privilege set is based on a 32-bit mask instead of strings (plans are to extend this to a 64 or 128-bit mask before the next 3.0.11preX release). * Remove the privilege code from the passdb API (replication to come later) * Only support the minimum amount of privileges that make sense. * Rewrite the domain join checks to use the SeMachineAccountPrivilege instead of the 'is a member of "Domain Admins"?' check that started all this. Still todo: * Utilize the SePrintOperatorPrivilege in addition to the 'printer admin' parameter * Utilize the SeAddUserPrivilege for adding users and groups * Fix some of the hard coded _lsa_*() calls * Start work on enough of SAM replication to get privileges from one Samba DC to another. * Come up with some management tool for manipultaing privileges instead of user manager since it is buggy when run on a 2k client (haven't tried xp). Works ok on NT4.
* r4651: Add "refuse machine password change" policy field. This update will justJim McDonough2007-10-101-14/+52
| | | | | | | return the appropriate reg value. Enforcement to be added soon. Also, fix account policy tdb upgrade so it doesn't just wipe out everything that was in there from a a previous version.
* r4581: From Derrell.Lipman@UnwiredUniverse.com. Use nanosleep instead of selectJeremy Allison2007-10-101-1/+14
| | | | | when we have it in smb_msleep. Jeremy.
* r4545: Fix based on work by Derrell.Lipman@UnwiredUniverse.com :Jeremy Allison2007-10-101-4/+26
| | | | | | | | | * In an application with signals, it was possible for functions to block indefinitely while awaiting timeouts. This patch ensures that if a system call with a timeout is aborted and needs to be restarted, it is restarted with a timeout which is adjusted for the amount of time already waited. Jeremy.
* r4334: Fix for bugid #2186 - from Buck Huppmann <buckh@pobox.com>Jeremy Allison2007-10-101-0/+8
| | | | | to prevent uninitialized creds being freed. Jeremy.
* r4306: Couple more MALLOC fixes from albert chin (china@thewrittenword.com).Jeremy Allison2007-10-101-1/+1
| | | | Jeremy.
* r4305: Fix from Albert Chin (china@thewrittenword.com) to fix theJeremy Allison2007-10-102-6/+6
| | | | | earlier malloc changes. Jeremy.
* r4296: Patch from William Jojo <jojowil@hvcc.edu> to fix HPUX sendfile and addJeremy Allison2007-10-101-1/+57
| | | | | configure.in tests and code for sendfile on AIX. Jeremy.
* r4291: More *alloc fixes inspired by Albert Chin (china@thewrittenword.com).Jeremy Allison2007-10-103-35/+34
| | | | Jeremy
* r4289: Close LDAP-Connection before retrying to open a new connection in theGünther Deschner2007-10-101-0/+1
| | | | | | | | | | | | retry-loop. This fixes a deadlock-situation when ldapsam is used with the ldapi interface: getpeername won't fail while trying to detect dead connections on unix domain sockets. When the ldapi-connection was closed server-side (due to OpenLDAP's idletimeout) we *never* got a new LDAP connection. Guenther
* r4270: Add some const as a fix for bugzilla #2135.Tim Potter2007-10-101-1/+1
|
* r4256: Add a patch from kllin@it.su.se: New Parameter 'afs token lifetime' ↵Volker Lendecke2007-10-101-1/+5
| | | | | | | | | | tells the AFS client when to throw away a token. Thanks, Volker
* r4252: Comment clarification from Love Hörnquist Åstrand <lha@stacken.kth.se>.Volker Lendecke2007-10-101-3/+7
| | | | | | Thanks, Volker
* r4241: More *alloc fixes.Jeremy Allison2007-10-101-2/+7
| | | | Jeremy.
* r4236: More *alloc fixes.Jeremy Allison2007-10-101-6/+6
| | | | Jeremy.
* r4217: Fix open_any_socket_out.Volker Lendecke2007-10-101-13/+27
| | | | | | | | | This was a missing merge from HEAD or rather a commit to 3_0 from the wrong source. Fixed slightly over HEAD, HEAD merge will follow. Deal with connection refused according to the specs. Volker
* r4126: Fix from Björn Jacke <bjoern@j3e.de> for bugid #2040 - ensure the localeJeremy Allison2007-10-101-0/+9
| | | | | is reset to C to get ASCII-compatible toupper/lower functions. Jeremy.
* r4120: Never, ever, doubt valgrind :-). Fix order of evaluation bug that's ↵Jeremy Allison2007-10-102-12/+6
| | | | | | | been in the bitmap code for ever. Remove silly extra space in paranoid malloc. Jeremy.
* r4088: Get medieval on our ass about malloc.... :-). Take control of all our ↵Jeremy Allison2007-10-1036-192/+355
| | | | | | | | | allocation functions so we can funnel through some well known functions. Should help greatly with malloc checking. HEAD patch to follow. Jeremy.
* r4032: Fix bug #2110 - ensure we convert to ucs2 correctly.Jeremy Allison2007-10-102-12/+11
| | | | Jeremy.
* r4009: Fix from Timur Bakeyev <timur@com.bat.ru> for bugid #2100,Jeremy Allison2007-10-101-1/+4
| | | | | | | change the way we check for errors after a dlopen (which may set internal warnings which get picked up by mistake in dlsym). Jeremy
* r3946: Fix for bugid #2085 reported by Jason Mader <jason@ncac.gwu.edu>. Use ↵Jeremy Allison2007-10-101-1/+1
| | | | | | | consistent enum type for Protocol extern. Jeremy.
* r3944: Fix the problem we get on Linux where sendfile fails, but we've ↵Jeremy Allison2007-10-101-2/+26
| | | | | | | | | | | already sent the header using send(). As our implementation of sendfile can't return EINTR (it restarts in that case) use an errno of EINTR to signal the linux sendfile fail after header case. When that happens send the rest of the data and then turn off sendfile. Sendfile should be safe to enable on all systems now (even though it may not help in all performance cases). Jeremy.
* r3940: typo.Günther Deschner2007-10-101-1/+1
| | | | Guenther
* r3857: Shut up gcc about erroneous "used uninitialised" warning.Jeremy Allison2007-10-101-3/+3
| | | | Jeremy.
* r3843: If a connection to a DC is requested, open connections ↵Volker Lendecke2007-10-101-0/+136
| | | | | | | | simultaeneously to all DCs found. The first one to reply wins. Volker
* r3705: Nobody has commented, so I'll take this as an ack...Volker Lendecke2007-10-102-13/+93
| | | | | | | | | | | | | | | | | abartlet, I'd like to ask you to take a severe look at this! We have solved the problem to find the global groups a user is in twice: Once in auth_util.c and another time for the corresponding samr call. The attached patch unifies these and sends them through the passdb backend (new function pdb_enum_group_memberships). Thus it gives pdb_ldap.c the chance to further optimize the corresponding call if the samba and posix accounts are unified by issuing a specialized ldap query. The parameter to activate this ldapsam behaviour is ldapsam:trusted = yes Volker
* r3702: This is a getpwnam-cache. It is mainly to speed up Samba with slow nssVolker Lendecke2007-10-101-0/+43
| | | | | | backends such as nss_ldap. Volker
* r3693: Correctly detect errno for no acl/ea support.Jeremy Allison2007-10-101-0/+20
| | | | Jeremy
* r3650: Allow to call spoolss-server as "localhost".Günther Deschner2007-10-101-1/+6
| | | | Guenther
* r3642: Extend vfs to add seekdir/telldir/rewinddir. Yes I know I have toJeremy Allison2007-10-101-0/+65
| | | | | | fix the modules too... First step in fixing out large directories problem. Jeremy.
* r3563: During a typical logon a modern workstation makes a lot of anonymous ↵Volker Lendecke2007-10-101-0/+4
| | | | | | | | | | | session setups on its way to open a pipe. This gets rid of many round-trips to the LDAP server during logon by setting up the server_info_guest once and not asking the LDAP server and nss every time. Make sure that the ldap connection is reopened in the child. (I did not look at the sql backends.) Volker
* r3561: Since we have tdb_reopen_all() after all forks, the local_pid logic ↵Volker Lendecke2007-10-101-4/+1
| | | | | | | | | | | is not correct anymore. If we actually open the tdb before the fork, we end up opening the tdb twice. Jerry, jra, this also happens in the locking and printing subsystems. You might want to check it there (not that it actually happens right now, but this gave me some confusion lately...). Volker
* r3049: fixing some calls in the printing code to stanard_sub_basic(); fix ↵Gerald Carter2007-10-101-3/+5
| | | | standard_sub_snum() to use the current user's gid; add some (snum == -1) checks to standard_sub_advanced()
* r2978: Fix #1926 typo in debug. Found by Bill McGonigle ↵Jeremy Allison2007-10-101-1/+1
| | | | | | <bill+samba@bfccomputing.com>. Jeremy.
* r2868: Well, I'm not quite sure what I'm doing back in Samba 3.0, but anyway...Andrew Bartlett2007-10-102-12/+63
| | | | | | | | | | | | | | | | | | | I've been grumbling about under-efficient calls in SAMR, and finally got around to fixing some of them. We now call sys_getgroups() (which in turn calls initgroups(), until glibc 3.4 is released) to figure out a user's group membership. This is far, far more efficient than scanning all the groups looking for a match, and is still the 'posix way', just using an effiecient call. The seperate issue of 'who is in this group' remains, but this one has been biting some people. I need to talk to VL about how best to exersise nasty corner cases, but my initial tests hold strong. (The code is also much simpiler than before, which has to count for something :-) Andrew Bartlett
* r2824: restored the is_case_sensitive option to ms_fnmatch() in Samba3. It isAndrew Tridgell2007-10-102-11/+22
| | | | | very rarely used, but we sohuldn't be removing a feature in a minor release of this kind.
* r2813: Fix the build.Rafal Szczesniak2007-10-101-1/+1
| | | | | | | At least temporarily, since I've got the impression that _real_ fix is more complex... rafal
* r2778: merged the new samba4 ms_fnmatch code to Samba3. Thanks to RustyAndrew Tridgell2007-10-101-176/+131
| | | | Russel for some help in designing the new algorithm.
* r2768: BUG 1519: save the hostname used in the open_printer_ex() for later ↵Gerald Carter2007-10-101-7/+45
| | | | reuse when filling in the spolss replies (also gets rid of get_called_name()
* r2729: Fix ldapsam_compat homeDrive. Thanks to jason@env.leeds.ac.ukVolker Lendecke2007-10-101-1/+1
| | | | Volker
* r2651: Added 'stat' command to smbclient to exercise the UNIX_FILE_BASICJeremy Allison2007-10-101-0/+26
| | | | | | | | info level. Outputs data on the file in the same format the the stat command in Linux. Should be useful to people wanting to learn how to parse the UNIX extension output. Yes I will add the docs later :-). Jeremy.
* r2610: Even if we only use the fast-path (ascii only) thenJeremy Allison2007-10-101-0/+21
| | | | | we still need to set errno = E2BIG when we overflow. Jeremy.
* r2605: Fix stupid typo in back-port of Samba4 fix.Jeremy Allison2007-10-101-1/+1
| | | | Jeremy.
* r2599: avoid free()ing our static unalloceted memory that ends up in memory ↵Simo Sorce2007-10-101-1/+6
| | | | corruption.
* r2578: Pick up optimisation from Samba4 - thanks tridge !Jeremy Allison2007-10-101-0/+12
| | | | | | | | - I recently found out that charaters below 0x3F are guaranteed not to occur as secondary bytes in any multi-byte character set. This allows for a very simple optimisation in strchr_m() and strrchr_m(). It might be a good idea to pick this up for Samba3. Jeremy.
* r2444: Based on jmcd's patch, implement special lists for the ldap user ↵Volker Lendecke2007-10-101-0/+48
| | | | | | | | | | | | | attributes to delete. Richard, IMHO this is the better solution to the problem you currently have. Please review. Thanks, Volker
* r2392: Steal the nicer error message from Samba4 :-).Jeremy Allison2007-10-101-8/+12
| | | | Jeremy.
* r2361: Fix the appalling toktocliplist() fn. Bug found by Luis Benvenutto.Jeremy Allison2007-10-101-5/+8
| | | | Jeremy.
generated by cgit (git 2.34.1) at 2025-09-29 12:03:00 +0000