| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
|
| |
|
|
|
|
|
|
|
| |
This is not 100% the same as what SuSE shipped in their Samba, there is
a crash bug fix, a race condition fix, and a few logic changes I'd like to
discuss with Andreas. Added Andreas to (C) notices for posix_acls.c
Jeremy.
|
|
|
|
|
|
|
| |
with filenames with spaces in mangle_hash.c but the real problem is
that mangle_hash.c assumes that the set of valid characters for 8.3
names is the same as the set of valid characters for long names. Thats
an invalid assumption, with space being the obvious example.
|
| |
|
| |
|
|
|
|
|
|
| |
directly...
Andrew Bartlett
|
| |
|
|
|
|
|
|
| |
<agruen@suse.de>.
Jeremy.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The actual design change is relitivly small however:
It all goes back to jerry's 'BOOL store', added to many of the elements in a
SAM_ACCOUNT. This ensured that smb.conf defaults did not get 'fixed' into
ldap. This was a great win for admins, and this patch follows in the same way.
This patch extends the concept - we don't store values back into LDAP unless
they have been changed. So if we read a value, but don't update it, or we
read a value, find it's not there and use a default, we will not update
ldap with that value. This reduced clutter in our LDAP DB, and makes it
easier to change defaults later on.
Metze's particular problem was that when we 'write back' an unchanged value,
we would clear any muliple values in that feild. Now he can still have his
mulitivalued 'uid' feild, without Samba changing it for *every* other
operation.
This also applies to many other attributes, and helps to eliminate a nasty
race condition. (Time between get and set)
This patch is big, and needs more testing, but metze has tested usrmgr, and
I've fixed some pdbedit bugs, and tested domain joins, so it isn't compleatly
flawed ;-).
The same system will be introduced into the SAM code shortly, but this fixes
bugs that people were coming across in production uses of Samba 3.0/HEAD, hence
it's inclusion here.
Andrew Bartlett
|
|
|
|
|
|
| |
also try to uniform names to a clean scheme.
first part.
|
|
|
|
| |
the ones for debuglevel and configuration file in pdbedit
|
|
|
|
|
| |
MAX_PRINT_JOBS in a queue.
Jeremy.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
Debian patchset.
The idea is to still allow DNS domains to be specified in 'hosts allow' and
'hosts deny' without making the admin set 'hostname lookups' in their smb.conf.
His concern is about upgrades.
This has been designed not to change the value of %M.
Andrew Bartlett
|
|
|
|
| |
Jeremy.
|
|
|
|
| |
Jeremy.
|
|
|
|
|
|
| |
<belanger@yahoo.com>.
Jeremy.
|
|
|
|
|
|
| |
belanger@pobox.com
Jeremy.
|
|
|
|
|
| |
System sid. This avoids comparing with ACEs that we don't yet support in the
ADS Domain security descriptor.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
In order to reduce complexity, this patch removes the upper layer of the SAM
API. Also, we remove the function pointers on the sam context - there really
is no point making these replaceable - that's for the modules.
Move a number of functions in include/interface.c around to allow for use of
'static' and to keep the external API in one chunk, at the bottem. All these
functions were renamed to remove the context_sam -> sam
Consequential changes in the samtest module, and back out metze's change for
ACB filtering, becouse I think it belongs in the SAM backeds. (But I will take
debate on this one).
Changes to the lib/util_sid.c code to create a 'system' token, and make it a
SAM_ASSERT() enforced requirement to have a token on those calls that specify
it. samtest now uses this.
We should have a samtest call to set your own token.
We also need to extend our se_access code to cover the things that Win2k is
returning in it's access tokens. Currently our system token doesn't pass, due
to unexpected flags. (When running sam_ads against Win2k)
Andrew Bartlett
|
| |
|
| |
|
|
|
|
|
|
| |
off his laptop :-)
Andrew Bartlett
|
|
|
|
|
|
| |
sane prototype for the push_utf8_allocate code.
Andrew Bartlett
|
|
|
|
|
|
|
|
|
|
|
|
| |
better job of working with usrmgr. Previously we were blanking out entires,
and all sort of mischif.
The new patch (which I've now had a chance to test/modify) also takes care not
to expand % values (ie we go \\%L\%U -> \\server\user, we don't want to store
\\server\user back) and to correctly notice 'not set' compared to 'null string'
etc.
Andrew Bartlett
|
|
|
|
|
|
|
|
| |
that just don't apply any more - now that we always keep username and domain
seperate. Also, the policy it was trying to permit is now implemented by the
auth code.
Andrew Bartlett
|
|
|
|
| |
Jeremy.
|
|
|
|
| |
Jeremy.
|
|
|
|
| |
Jeremy.
|
|
|
|
|
|
|
| |
be traversals being attempted. Yes, this was from bitter experience (and
an out of control server :-). Also allow callers to break out of a tdb_chainlock
with sigalarm if desired.
Jeremy.
|
|
|
|
| |
Jeremy.
|
|
|
|
| |
Jeremy.
|
|
|
|
| |
(Double checked)
|
|
|
|
| |
Jeremy.
|
|
|
|
|
| |
then return ENOSYS and let the upper layer handle it.
Jeremy
|
|
|
|
|
| |
configure tests...
Jeremy.
|
|
|
|
| |
Jeremy.
|
|
|
|
|
| |
fiddly.... :-(.
Jeremy.
|
|
|
|
|
|
|
|
| |
and doesn't actually call sendfile. Needs to be vectored through the
VFS and tested on all supported platforms (Solaris/HPUX/FreeBSD/Linux).
Linux doesn't actually work (2.4.19 kernel) at the moment because it
doesn't have a 64-bit clean sendfile.
Jeremy.
|
| |
|
| |
|
|
|
|
|
|
|
| |
reflect the new example/VFS/ directory organization
lib/substitue.c:
added helper functions needed by recycle bin
|
|
|
|
|
|
|
|
| |
#ifdef mess...) in readline.c, we don't need or use them in the rest of Samba.
(This OK was of course conditional on 'if you break it, you better fix it...')
Andrew Bartlett
|
| |
|
|
|
|
|
|
| |
sending broadcast messages. Also initial cut-down of printing notify
messages (not yet finished).
Jeremy.
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
'DEBUGADD', so we don't repeat headers. (Makes them much easier to read).
(Based on patch by kai)
Andrew Bartlett
|
|
|
|
|
| |
on the IRIX compiler. could whoever put the FIXME message take a look and
see if it is still broken.
|