| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
===========================================================
== Subject: Misconfigured /etc/passwd file may share folders unexpectedly
==
== CVE ID#: CVE-2009-2813
==
== Versions: All versions of Samba later than 3.0.11
==
== Summary: If a user in /etc/passwd is misconfigured to have
== an empty home directory then connecting to the home
== share of this user will use the root of the filesystem
== as the home directory.
===========================================================
(cherry picked from commit 6fd272875d27c6974a194d0cb2cde39a98ca4af2)
|
| |
|
|
|
|
|
|
|
| |
This used to be commit 44588095 in master.
Karolin
(cherry picked from commit 7648c51afaf844e576935dadc0d66a94e2cad28b)
|
|
|
|
| |
Jeremy.
|
|
|
|
| |
-1 or domain->last_status is not ok.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
LDAP_SSL_ON is not defined at all. That's why the actual default value
was "" for a long time. Set a more sensible default value without chnging the
default behaviour.
-----8<------------------snip--------------8<--------------
user@host:/data/git/samba/v3-0-test/source> git grep LDAP_SSL_ON | cat
include/smb.h:enum ldap_ssl_types {LDAP_SSL_ON, LDAP_SSL_OFF,
LDAP_SSL_START_TLS};
param/loadparm.c: Globals.ldap_ssl = LDAP_SSL_ON;
----->8------------------snap-------------->8--------------
It's the same in 3.2 and 3.3 series.
Karolin
(cherry picked from commit e6d883e003d4560c55259ae1cfdf7319602f76e3)
|
| |
|
|
|
|
| |
Jeremy.
|
|
|
|
| |
Jeremy
|
|
|
|
|
|
|
|
|
| |
Here is a patch to allow many subsystems to be re-initialized. The only
functional change I made was to remove the null context tracking, as the memory
allocated here is designed to be left for the complete lifetime of the program.
Freeing this early (when all smb contexts are destroyed) could crash other
users of talloc.
Jeremy.
|
|
|
|
| |
Jeremy
|
|
|
|
|
|
|
|
|
|
|
|
| |
This fixes the case where "include = registry" is set in the smb.conf text file
and *only* shares (no [global] settings) are present in the registry.
Michael, please check!
Thanks,
Volker
(cherry picked from commit 6c80362e291d8c5e748b987a583e8e32acc36354)
|
|
|
|
|
|
|
|
| |
This fixes testparm printing "Error loading services." when there is only
the global section in registry and no other service definition.
Michael
(cherry picked from commit 28d197220038b9a47af177b88a8587f865e45de5)
|
|
|
|
|
|
|
|
|
|
|
| |
Set the iServiceIndex to "-1" for starup with either config
backend (originally only for text backend). Otherwise,
process_registry_shares() will fail.
Currently, the only user of lp_load_with_registry_shares() is testparm.
Michael
(cherry picked from commit 5e2b925367241c41793b2eb7a628e9fc9f3ac8ff)
|
|
|
|
|
|
|
|
|
| |
This is like lp_load(), except that it will load the
registry shares into the services aarray when registry
shares are activated.
Michael
(cherry picked from commit b387c614ba8d1d3960f6917f03f0fd433cf2b2ee)
|
|
|
|
|
| |
Michael
(cherry picked from commit e1b76cd5d646bb9083cfca0d15a84183cad72882)
|
|
|
|
|
|
|
|
| |
This allows for registry shares to be activated, i.e. loaded into
the services array at lp_load() time.
Michael
(cherry picked from commit b3233ecefd5df745ba7e10511f9ab36064036b10)
|
|
|
|
|
|
|
| |
This loads the shares defined in registry into the services array.
Michael
(cherry picked from commit b3a90b72517c2e25d972796908aec4d2b85a030e)
|
|
|
|
|
|
|
| |
into new function process_registry_service().
Michael
(cherry picked from commit 2986e5174e69527465ae7ef8e108110416752b56)
|
|
|
|
|
| |
Michael
(cherry picked from commit 83cd9f74d57c462ad5c8956b3ce3c81bea429b67)
|
|
|
|
|
|
|
| |
"acl group control"
parameter and make it only apply to owning group. Also added man page fix.
Jeremy.
|
|
|
|
|
|
| |
controlled via the ldap connection timeout parameter. This fixes fallbacks to secondary LDAP servers in multi LDAP server setups like in #4544
(cherry picked from commit 8e59a2fedc940b081222b0e8f90fe0c5a0981c06)
|
|
|
|
|
|
|
|
|
| |
This completes bba04a8fba6fd5cf62578733cfdabea590e8ff51:
The reverted logic has to be put into the callers
lp_load() and lp_load_initial_only() of lp_load_ex(), too.
Silly bug.
Michael
|
|
|
|
|
| |
(cherry picked from parts of cbdb79b7a1044945e515a294f487e4c1a9c91be5)
(cherry picked from commit 49be6c8dac6ddb90cd3ea2324d2dbc5d7cc503dd)
|
|
|
|
| |
This reverts commit cbdb79b7a1044945e515a294f487e4c1a9c91be5.
|
|
|
|
|
|
| |
instead of lists of strings and counters directly...
Michael
|
|
|
|
| |
Michael
|
|
|
|
|
|
| |
This is what that variable controls now...
Michael
|
|
|
|
|
|
|
|
|
|
|
| |
This is only to be able to set everything properly for registry
before reading registry includes.
This fixes "make test" as non-root user in a directory, where
root-daemons have already created a messaging.tdb in the compiled
in lockdir...
Michael
|
|
|
|
|
|
| |
"include =" statements
metze
|
|
|
|
|
|
| |
This includes the configuration stored in HKLM/Software/Samba/smbconf .
Michael
|
|
|
|
|
|
| |
Use do_parameter() directly.
Michael
|
|
|
|
| |
Michael
|
| |
|
|
|
|
|
|
| |
we don't want to see this all the times in tests.
Michael
|
|
|
|
|
|
|
| |
The userdata is currently unused. It can be used in the future for
passing a context like in samba4 code.
Michael
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This is passed to the module init routines.
In case of the registry, this is the path of the
basekey in registry, that is to be used, defaulting
to KEY_SMBCONF (HKLM\software\samba\smbconf), when
NULL is given. This is the only case currently used.
In order to support other keys, registry initialization
for smbconf has to be changed to support different keys.
Michael
|
|
|
|
|
|
|
| |
Hide generic init function taking smbconf_ops argument
from public api.
Michael
|
|
|
|
|
|
| |
That's more appropriate.
Michael
|
|
|
|
|
|
|
| |
..for consistency. Exception: the open/init function, where the smbconf_ctx
is created from the given talloc context.
Michael
|
|
|
|
|
|
|
|
| |
The former seqnum is hidden inside a struct smbconf_csn.
And the get_seqnum is united with a changed function that
stores the seqnum inside the given csn.
Michael
|
|
|
|
|
|
| |
This is necessary now that includes (to files) are enabled from registry.
Michael
|
|
|
|
|
|
| |
libnet.h unneeded after separation of libsmbconf from libnet.
Michael
|
|
|
|
| |
Michael
|
|
|
|
| |
Michael
|
|
|
|
|
|
| |
backend registry.
Michael
|
|
|
|
| |
Michael
|
|
|
|
| |
Michael
|
|
|
|
| |
Michael
|
|
|
|
| |
Michael
|