| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
| |
This reverts commit ad450870eacb114b3f15941a4478ba25701e035a.
Signed-off-by: Günther Deschner <gd@samba.org>
(cherry picked from commit ee094b53d7fd9c46bca57b9815993282c63af00c)
|
|
|
|
|
|
|
| |
This reverts commit 36ea03bbe28122ce03de4969e254dd276cfe5a79.
Signed-off-by: Günther Deschner <gd@samba.org>
(cherry picked from commit 3e1969d229dff2921b43189969dfbe522b167cc2)
|
|
|
|
| |
(cherry picked from commit 023aa6f4aae29ba22b3d42c815027ba6a66f8ee2)
|
|
|
|
| |
(cherry picked from commit 198b6d673787ee40c0ac389ece99cee1844dd585)
|
|
|
|
|
|
|
| |
This connects to 445 and after 5 milliseconds also to 139. It treats a netbios
session setup failure as equivalent as a TCP connect failure. So if 139 is
faster but fails the nb session setup, the 445 still has the chance to succeed.
(cherry picked from commit 35bbc2231760badaf0debc9f8f39ebdf00cfe8ad)
|
|
|
|
| |
(cherry picked from commit 9b79de1553cfa57d24d1ac0316b814933ef3d33d)
|
|
|
|
|
| |
This does not do the redirects, but I think that might be obsolete anyway
(cherry picked from commit e2296e23a8546e249d1b26f4da6277792923bef4)
|
|
|
|
| |
(cherry picked from commit 56c760ab41b9b4cb9680d873b8f9955be21434f4)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit e3bdff3d67b46277ee59685218bd90f3788b487d)
(cherry picked from commit 69e1fc797dc34be03d771ec017ef27c6aa87a155)
|
|
|
|
|
|
|
|
| |
libsmbclient.h.
Fix bug #7345.
(cherry picked from commit ce565b0498608714e2c4f7c9f9373dddcbfba568)
(cherry picked from commit 8dd1f920fb74d62a8f841a81f38feb0b0d689cc8)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Based on a patch from Michael Karcher <samba@mkarcher.dialup.fu-berlin.de>.
I think this is the correct fix. It causes cups_job_submit to use
print_parse_jobid(), which I've moved into printing/lpq_parse.c (to allow the
link to work).
It turns out the old print_parse_jobid() was *broken*, in that the pjob
filename was set as an absolute path - not relative to the sharename (due to it
not going through the VFS calls).
This meant that the original code doing a strncmp on the first part of the
filename would always fail - it starts with a "/", not the relative pathname of
PRINT_SPOOL_PREFIX ("smbprn.").
This fix could fix some other mysterious printing bugs - probably the ones
Guenther noticed where job control fails on non-cups backends.
Contains c79ca41baf15b4ef7eb287d343b17a53ba41e852 and
92332fb2368c641db1552d1f2a2f7b3deaa11519 from master.
Jeremy.
(cherry picked from commit 12936bfeb36ae867b52fe48d0f6d3d17d5c8b110)
(cherry picked from commit 302e9b1c027ff3bddbdeb16f97aa6159311e439d)
|
|
|
|
|
|
|
|
|
| |
metze
(cherry picked from commit 99664ad15460530b6fb44957b6c57823f09884bf)
(cherry picked from commit 89164eb8363ffc0b951256578be48d37ddba46b1)
Signed-off-by: Stefan Metzmacher <metze@samba.org>
(cherry picked from commit b462bc1724b3bdf9052566e683f9748ea6730169)
|
|
|
|
|
|
|
|
|
| |
metze
(cherry picked from commit 4f41b53487ac9bc96c7960e8edab464558656373)
(similar to commit 958b49323968740e2cbf69dc2a0a5dd57d5bcf87)
Signed-off-by: Stefan Metzmacher <metze@samba.org>
(cherry picked from commit a8a1a6c77a2148a729f6b285f3f945ffd5501256)
|
|
|
|
|
|
|
|
|
| |
metze
(cherry picked from commit d7bf30ef92031ffddcde3680b38e602510bcae24)
(cherry picked from commit 589f73924273e8a9b54669f42a92381661dcb33f)
Signed-off-by: Stefan Metzmacher <metze@samba.org>
(cherry picked from commit 5a4bdb706b97857da67c791b81039b4bc4031c76)
|
|
|
|
|
| |
Guenther
(cherry picked from commit 345eba78f7fc72f067cd3d95a7698081e09be85f)
|
|
|
|
|
|
|
|
| |
to respond to a read or write."
This reverts commit c81c109a6ce83741bb5149a51ceb4ab30855e9f9.
This fixes bug #7222 (All users have full rigths on all shares)(CVE-2010-0728).
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
a smb.conf reload turns wide links back on after a connection is establised.
Includes git refs :
cd18695fc2e4d09ab75e9eab2f0c43dcc15adf0b
94865e4dbd3d721c9855aada8c55e02be8b3881e
5d92d969dda450cc3564dd2265d2b042d832c542
02a5078f1fe6285e4a0b6ad95a3aea1c5bb3e8cf
a6f402ad87ff0ae14d57d97278d67d0ceaaa1d82
from master.
Jeremy.
Fix bug #7104 ("wide links" and "unix extensions" are incompatible.)
(cherry picked from commit 16e73d88944ce644cccfa19a99338f5903c061f0)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
ldapsam_alias_memberships() does the same LDAP search twice, triggered
via add_aliases() from create_local_nt_token().
This happens when no domain aliases are used.
metze
(cherry picked from commit 49ace81e19de231825216cbf07c7422687131bb6)
(cherry picked from commit cb31c1df92b195b3fb80b6e21bfba83b8cd867fd)
Signed-off-by: Stefan Metzmacher <metze@samba.org>
(cherry picked from commit 8f1c7c117b3bca058024daa34f777efa5ece88f8)
|
|
|
|
|
|
|
|
|
|
|
| |
respond to a read or write.
Only works on Linux kernels 2.6.26 and above. Grants CAP_KILL capability
to allow Linux threads under different euids to send signals to each other.
Jeremy.
(cherry picked from commit 899bd0005f56dcc1e95c3988d41ab3f628bb15db)
(cherry picked from commit 246eba3b807e5ce50ee838c51823a9eb44f6b690)
|
|
|
|
|
|
|
|
|
| |
metze
Signed-off-by: Stefan Metzmacher <metze@samba.org>
(cherry picked from commit c992127f8a96c37940a6d298c7c6859c47f83d9b)
(cherry picked from commit 915b7552b71904baf6a452bdc1649e76d8286a14)
(cherry picked from commit 6402321d5bbbb28b335787856b16c3d8556e8e0a)
|
|
|
|
|
|
|
| |
Win7 needs the Windows server open file handle number of 16384 handles.
Jeremy.
(cherry picked from commit bbdc2c017ca5abb35897ab61717b806133e0af0b)
|
|
|
|
|
|
|
| |
Guenther
Part of a fix for bug #6929.
(cherry picked from commit 579ac85a8e8f640790878cef5a35debec999dd0e)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit f8016cfee922cba97b70f56c752827e4584da6c6)
(cherry picked from commit 560b7a45ff8257b7d9994199218edfa3ea4e8dae)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit fcee9d2c97a673347baf58f749f35785a896e468)
(cherry picked from commit 20b43200885d7e4cef5e26ad249c9a4c6529dca5)
|
|
|
|
|
|
|
|
| |
This seems to be the only way to deal with mixed heimdal/MIT setups during
merged build.
Guenther
(cherry picked from commit 41fb263aacc5dce50d3554598d08cb497ffd929f)
|
|
|
|
|
| |
Guenther
(cherry picked from commit 80d2ad88d8deac953346d1ce98fb519d7f2bf3de)
|
|
|
|
|
| |
Guenther
(cherry picked from commit a830aa269f44e28a2390e162adbb2e26092f179b)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit 2f9adf04e4b3e16c046cb371a428a8a70d5de041)
(cherry picked from commit e867d3d9bb6494cde621f8f951f7aece5798f5fe)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit ff968712bab6c2635ef74723c6f52b0fdac4b424)
(cherry picked from commit 99627d8e38a28759095b6704e8314c931ca638a0)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit bea8e5fa6038d5abd2ec1e12f9005c4a04abb79f)
(cherry picked from commit 5b44f54a18b60fe3814623f351025335a0273916)
|
|
|
|
|
|
|
|
| |
and cli_rpc_pipe_open_ntlmssp.
Guenther
(cherry picked from commit 032e01e7c13724d057b5744d7d79613449c2f24f)
(cherry picked from commit cd8874214dba810e60faca155611dbcf2f1351f7)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit 87f61a144b8d25c90b847940ca03ced1f77b036c)
(cherry picked from commit 18b8928c8cb12d2f56efcc61df5b74db3caec29c)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit 393a1f594d5f03a51448cdc465f92c599a93904c)
(cherry picked from commit ef11ccb47db899603a100e67c3ca9ecd3298e347)
|
|
|
|
|
| |
(cherry picked from commit a28596964b44f20d794999541d38fe4bae64b56b)
(cherry picked from commit 47c2dc4eee5f7644601db0c24dca0ca30b482940)
|
|
|
|
| |
(cherry picked from commit e971428f137dcb42e8b735386d79f1b3a6effe34)
|
|
|
|
|
|
|
|
| |
Summary:
Specially crafted SMB requests on
authenticated SMB connections can send smbd
into a 100% CPU loop, causing a DoS on the
Samba server.
|
|
|
|
|
|
| |
A server returns a byte of consumed path in UCS2, not UNIX charset.
(cherry picked from commit ee70079d08acf23cf7c342f09a7db4f5fc7ca95e)
|
|
|
|
|
|
| |
Revert change from 3.3 -> 3.4 with read_socket_with_timeout changed from sys_read() to sys_recv(). read_socket_with_timeout() is called with non-fd's (with a pty in chgpasswd.c and with a disk file in lib/dbwrap_file.c via read_data()). recv works for the disk file, but not the pty. Change the name of read_socket_with_timeout() to read_fd_with_timeout() to make this clear (and add comments). Jeremy.
(cherry picked from commit 91a5b8561e2f13f77fa5648f7cc373aff1701954)
|
|
|
|
|
|
|
|
|
| |
The Schannel verifier (aka NL_AUTH_SIGNATURE) structure (32 byte) sent from a
W2k8r2 DC is passed in a buffer with the size of a NL_AUTH_SHA2_SIGNATURE (56
byte). We should just ignore the remaining 12 zeroed bytes and proceed.
Guenther
(cherry picked from commit ebd5019ef422a85119a7ea25025ff22d5a3bd757)
|
|
|
|
|
|
|
|
| |
construct_reply() references the request after chain_reply has freed it.
(cherry picked from commit 5135ebd6f099518f0a0b5796e8057210be824740)
Addresses bug #6611.
(cherry picked from commit 5c6aa5ce9fb0cc5d63d04b0777d296c82e61c0a5)
|
|
|
|
|
| |
(cherry picked from commit 5a9ca3db032af5938e9709f3355a1f45b1e08d27)
(cherry picked from commit 9424e91ecdcf2e5dbdd06e9d97693dd193608324)
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Use common paths like for smbpasswd, so that all utilities
behave the same way. As for smbpasswd this changes the behavior
of pdbedit to create/delete unix users is the add/delete user
scripts are provided, or ldapsam:editposix is configured.
Part 1/2 for bug #6333.
Signed-off-by: Günther Deschner <gd@samba.org>
(cherry picked from commit f48e39540c9767e9077e7534a6d410b4ce597c86)
(cherry picked from commit 8191fe96c6a5ba57ffc94d7cc54693d6eb2967f5)
|
|
|
|
|
|
|
|
|
|
|
| |
When we run out of file descriptors for some reason, every new
connection forks a child that immediately panics causing smbd to
coredump. This seems unnecessarily harsh; with this code change we
now catch that error and merely log a message about it and exit
without the core dump.
Signed-off-by: Tim Prouty <tprouty@samba.org>
(cherry picked from commit 1c8f9892010ce8cc754089b25313c6bc8e622165)
|
|
|
|
|
|
|
|
|
| |
This is a follow up to 69d61453df6019caef4e7960fa78c6a3c51f3d2a to
adjust the API to allow the lower layers allocate memory. Now the
memory can explicitly be freed rather than relying on talloc_tos().
Signed-off-by: Tim Prouty <tprouty@samba.org>
(cherry picked from commit bfe7383d7f0349fec796d04772d42d566f7f083b)
|
|
|
|
|
|
|
|
| |
Make map_max_allowed_access global. Change lsa_get_generic_sd
to add Everyone:LSA_POLICY_READ|LSA_POLICY_EXECUTE, not just
LSA_POLICY_EXECUTE.
Jeremy.
(cherry picked from commit 86e10fee0284bc1b9e68c0fc9720b80df3580517)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit dccecdf33850ec4d763b8b0e7ba7be7a8eb873de)
(cherry picked from commit e3be289df092f3b16bdd06904cd543920e3da307)
|
|
|
|
|
|
|
|
|
|
|
| |
Jeremy as far as I can see there is no real technical reason to limit the
number of interfaces. If you like this patch, can you please merge it to 3.4?
If you don't please tell me :-)
Thanks,
Volker
(cherry picked from commit 71e835942522992c08267da74d480ad6552c6508)
|
|
|
|
| |
(cherry picked from commit 413a76cef78de56087574a875a1c478603d5d090)
|
|
|
|
|
|
|
|
| |
This fixes bug #4271: testparm should not print includes.
Michael
(cherry picked from commit 00297b74ac6320a23ba444647718680ddee37453)
(cherry picked from commit 44746461dcead5b42cc2177346c26aee79151c86)
|
|
|
|
|
|
| |
Guenther
(cherry picked from commit 652251701df7dec1401eab9b1dbc7e3ac5c7e7ad)
(cherry picked from commit e6b6027218b96bf3357837d051ca5d2df0d88561)
|