| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
| |
* Guenther's BUILT group fix in security = ads (winbindd)
* access checks in registry and svcctl code (jerry)
* solaris build fixes for configure.in
* a few compile warning fixes
* winbindd on a PDC fix (wbinfo -t)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
libsmbsharemodes added (Jermey).
Linux core dump fix from (James Peach).
Linux quota fixes from (metze).
krb5 memory leaks from (gd).
Creds fix for winbindd and server (Jeremy).
winbindd recursion fix (Jeremy).
winbindd builtin fix (gd)
universal pw error fixes (novell).
dir logic fix (Jeremy).
hide dotfiles fix (Jeremy)
no write to read-only shares fix (?).
exclusive open fix (vl).
tdb reopen fix (tridge)
status display open files fix (Jeremy)
posix acl null pointer crash (?)
posix acl mem leak (?)
mount.cifs flag fix (sfrench)
smbspool error message fix (?)
libsmbclient comment fix (?).
64-bit error message fixes (Jeremy).
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
------------------------------------------------------------------------
r9278 | tpot | 2005-08-12 16:45:58 -0500 (Fri, 12 Aug 2005) | 2 lines
Remove unused variable. Bugzilla #2983.
------------------------------------------------------------------------
r9281 | jra | 2005-08-12 17:58:47 -0500 (Fri, 12 Aug 2005) | 4 lines
Fixes from Luke Mewburn <lukem@NetBSD.org> for misuses of
AC_CHECK_HEADERS.
Jeremy.
------------------------------------------------------------------------
r9486 | jerry | 2005-08-22 14:47:56 -0500 (Mon, 22 Aug 2005) | 1 line
ensure that the registry hash records are sorted by original subkey name and not the 4 character hash key
------------------------------------------------------------------------
r9619 | vlendec | 2005-08-25 12:46:13 -0500 (Thu, 25 Aug 2005) | 14 lines
Fix messages_pending_for_pid actually do what it's meant to do. This might be
a big relief on messages.tdb contention as ignoring processes with >1000
messages in printing/notify.c should work correctly now.
Jeremy, Jerry told me to ask you about printer scalability torture tests, this
might be a reason why you implemented the message_send_pid_with_timeout
using the signal (shudder) in the first place. :-)
While looking at that... Wouldn't it be better to not use the signal but have
an overall timeout for print_notify_send_messages using GetTimeOfDay & friends
and not use the alarm signal deep inside tdb.c?
Volker
------------------------------------------------------------------------
r9709 | vlendec | 2005-08-28 04:19:10 -0500 (Sun, 28 Aug 2005) | 11 lines
Fix two bugs found by Brian Moran: Any request sent to winbind while the child
in question is still initializing overwrites domain->dcname. Only overwrite if
the parent actually has sent a dcname and thus really knows it. Second,
ntlm_auth needs the error code, not just the fact it failed.
Jerry, the 3_0 part might qualify as a "recommended patch".
Thanks,
Volker
------------------------------------------------------------------------
r9790 | jerry | 2005-08-30 06:41:45 -0500 (Tue, 30 Aug 2005) | 1 line
remove 'set but not used' variables (reported by Jason Mader)
------------------------------------------------------------------------
r9893 | jerry | 2005-09-01 08:57:10 -0500 (Thu, 01 Sep 2005) | 13 lines
fix REG_CREATE_KEY_EX parsing error caused by WinXP clients
looking for an not finding a 'Terminal Server' key.
Claims to make problems with usrmgr.exe support as well
according the Samba ml.
Posted on samba@samba.org for review. Reviewed by
Thomas Bork (comments integrated into the reg_db.c patch
coming up next).
------------------------------------------------------------------------
r9913 | jerry | 2005-09-01 14:31:08 -0500 (Thu, 01 Sep 2005) | 1 line
fix some build breakage on solaris with --enable-socket-wrapper
------------------------------------------------------------------------
r9945 | gd | 2005-09-02 04:10:42 -0500 (Fri, 02 Sep 2005) | 4 lines
fix typos.
Guenther
------------------------------------------------------------------------
r10064 | jerry | 2005-09-07 10:12:54 -0500 (Wed, 07 Sep 2005) | 1 line
BUG 3052: adding OpenBSD timespec patch from Steve Williams <steve@celineandsteve.com>
------------------------------------------------------------------------
r10133 | jra | 2005-09-09 16:49:16 -0500 (Fri, 09 Sep 2005) | 3 lines
Fix bug #3044. open-exec is read-only.
Jeremy.
------------------------------------------------------------------------
r10136 | jra | 2005-09-09 19:47:31 -0500 (Fri, 09 Sep 2005) | 4 lines
Fix for bug #3060 from Leo Weppelman <leo@wau.mis.ah.nl>.
Ensure SMBcreate truncates the file if it exists.
Jeremy.
------------------------------------------------------------------------
r10170 | gd | 2005-09-12 06:56:36 -0500 (Mon, 12 Sep 2005) | 7 lines
Fix for #3056:
Allow to include BUILTIN to the mapping table also when
"allow trusted domains" is disabled.
Guenther
------------------------------------------------------------------------
|
|
|
|
| |
* adding patches from www.samba.org/samba/patches
|
|
|
|
| |
caused by users with no supplementary groups.
|
| |
|
|
|
|
|
| |
pointer in get_cache() by requiring that all domain structure be
initialized with the set_dc_type_and_flags().
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
cherry picking fixes for 3.0.20
svn merge -r9200:9201 $SVNURL/branches/SAMBA_3_0
svn merge -r9201:9203 $SVNURL/branches/SAMBA_3_0
svn merge -r9203:9225 $SVNURL/branches/SAMBA_3_0
svn merge -r9225:9229 $SVNURL/branches/SAMBA_3_0
svn merge -r9229:9242 $SVNURL/branches/SAMBA_3_0
svn merge -r9242:9244 $SVNURL/branches/SAMBA_3_0
svn merge -r9244:9246 $SVNURL/branches/SAMBA_3_0
svn merge -r9246:9232 $SVNURL/branches/SAMBA_3_0
svn merge -r9246:9252 $SVNURL/branches/SAMBA_3_0
svn merge -r9252:9253 $SVNURL/branches/SAMBA_3_0
svn merge -r9253:9266 $SVNURL/branches/SAMBA_3_0
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
upcoming changes for "unixinfo"-pipe.
Therefor (after speaking with Volker) replace "winbind sfu support" with
the list-parameter "winbind nss info" which defaults to "template". For
SFU-support set it to "winbind nss info = template sfu".
Note that nss_info_use() is just a dummy function at the moment.
Guenther
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
POSIX
homedirectory and the loginshell from Active Directory's "Services for Unix".
Enable it with:
winbind sfu support = yes
User-Accounts without SFU-Unix-Attributes will be assigned template-based
Shells and Homedirs as before.
Note that it doesn't matter which version of Services for Unix you use (2.0,
2.2, 3.0 or 3.5). Samba should detect the correct attributes (msSFULoginShell,
msSFU30LoginShell, etc.) automatically.
If you also want to share the same uid/gid-space as SFU then also use PADL's
ad-idmap-Plugin:
idmap backend = ad
When using the idmap-plugin only those accounts will appear in Name Service
Switch that have those UNIX-attributes which avoids potential uid/gid-space
clashes between SFU-ids and automatically assigned idmap-ids.
Guenther
|
|
|
|
| |
Jeremy
|
| |
|
|
|
|
|
|
| |
safe for using our headers and linking with C++ modules. Stops us
from using C++ reserved keywords in our code.
Jeremy
|
|
|
|
| |
Volker
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
of the
parent winbind not to return winbindd_result. This is to hopefully fix all the
problems where a result has been scheduled for write twice.
The problematic ones have been the functions that might have been delayed as
well as under other circumstances immediately gets answered from the cache.
Now a request needs to be explicitly replied to with a request_error() or
request_ok().
Volker
|
|
|
|
|
|
|
| |
* make sure to use our domain as the account name in the net_req_auth2()
request when running on a Samba DC
* make sure to lookup the correct domain (not default to ours) when getting an async
getpwnam() call
|
|
|
|
|
|
| |
printmig.exe work
* merge the sys_select_signal(char c) change from trunk
in order to keeo the winbind code in sync
|
| |
|
| |
|
|
|
|
| |
Volker
|
|
|
|
|
|
|
| |
winbind idle connection closing logic is getting invoked under high loads for
clients which may already have commands in the pipe. This race condition
causes clients to fail with NSS_STATUS_UNAVAIL sometimes. We now retry several
times hoping (still not guaranteed, though) it will work.
|
|
|
|
|
|
|
| |
This is just cosmetic but prevents people from thinking that the
pam_winbind "require_membership_of"-option is not yet implemented :)
Guenther
|
|
|
|
| |
version to 3.0.20pre1
|
| |
|
| |
|
|
|
|
| |
getting the SID for a domain
|
| |
|
| |
|
|
|
|
|
|
|
|
|
| |
* ensure that we set full access on the handle
returned from _samr_create_dom_alias() so that
future set_alias commands succeed
* fix bug when looking for internal domains in winbindd
(caused winbindd_getgrgid() for local groups to fail).
|
|
|
|
|
|
|
| |
* add synonym for idmap_rid in better lining with
other idmap backend names
* remove old debug messages when idmap {uid|gid} options
are not defined
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
pieces that
can be taken out of it, so I decided to commit this in one lump. It changes
the passdb enumerating functions to use ldap paged results where possible. In
particular the samr calls querydispinfo, enumdomusers and friends have
undergone significant internal changes. I have tested this extensively with
rpcclient and a bit with usrmgr.exe. More tests and the merge to trunk will
follow later.
The code is based on a first implementation by Günther Deschner, but has
evolved quite a bit since then.
Volker
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
initializable
statically.
Volker
|
| |
|
|
|
|
|
|
|
|
|
| |
fixes the
expansion of domain local groups in case the netsamlogon_cache is valid. The
non-samlogon-cache side needs more work, as well as the samlogon cache itself.
Volker
|
|
|
|
|
|
|
|
| |
really use
domain local groups ...
Volker
|
| |
|
|
|
|
|
|
|
|
| |
Can't do LsaOpenPolicy() over schannel anymore.
This is an interesting find as it could imply that there are
other changes we haven't seen yet in sp1.
Volker, You might want to look at this for trunk.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
1. using smbc_getxattr() et al, one may now request all access control
entities in the ACL without getting all other NT attributes.
2. added the ability to exclude specified attributes from the result set
provided by smbc_getxattr() et al, when requesting all attributes,
all NT attributes, or all DOS attributes.
3. eliminated all compiler warnings, including when --enable-developer
compiler flags are in use. removed -Wcast-qual flag from list, as that
is specifically to force warnings in the case of casting away qualifiers.
Note: In the process of eliminating compiler warnings, a few nasties were
discovered. In the file libads/sasl.c, PRIVATE kerberos interfaces
are being used; and in libsmb/clikrb5.c, both PRIAVE and DEPRECATED
kerberos interfaces are being used. Someone who knows kerberos
should look at these and determine if there is an alternate method
of accomplishing the task.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
"qualifiers". The
whole of samba comiles warning-free with the default compiler flags.
Temporarily defined -Wall to locate other potential problems. Found an
unused static function (#ifdefed out rather than deleted, in case it's
needed for something in progress).
There are also a number of uses of undeclared functions, mostly krb5_*.
Files with these problems need to have appropriate header files included,
but they are not fixed in this update.
oplock_linux.c.c has undefined functions capget() and capset(), which need
to have "#undef _POSIX_SOURCE" specified before including <sys/capability.h>,
but that could potentially have other side effects, so that remains uncorrected
as well.
The flag -Wall should be added permanently to CFLAGS, and all warnings then
generated should be eliminated.
|
|
|
|
|
|
|
|
| |
is the
change in pdb_enum_alias_memberships to match samr.idl a bit closer.
Volker
|
| |
|
|
|
|
| |
initialized whenenumerating users and groups
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
| |
TODO: This needs to be merged to trunk separately, it has changed a little,
but it's friday evening here.
Volker
|