summaryrefslogtreecommitdiffstats
path: root/source3/param
Commit message (Collapse)AuthorAgeFilesLines
* Change default protocol to SMB2_02.Jeremy Allison2012-03-071-1/+1
| | | | | Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Mar 7 22:41:21 CET 2012 on sn-devel-104
* s3-auth: Remove security=share (depricated since 3.6).Andrew Bartlett2012-03-041-15/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch removes security=share, which Samba implemented by matching the per-share password provided by the client in the Tree Connect with a selection of usernames supplied by the client, the smb.conf or guessed from the environment. The rationale for the removal is that for the bulk of security=share users, we just we need a very simple way to run a 'trust the network' Samba server, where users mark shares as guest ok. This is still supported, and the smb.conf options are documented at https://wiki.samba.org/index.php/Public_Samba_Server At the same time, this closes the door on one of the most arcane areas of Samba authentication. Naturally, full user-name/password authentication remain available in security=user and above. This includes documentation updates for username and only user, which now only do a small amount of what they used to do. Andrew Bartlett -------------- / \ / REST \ / IN \ / PEACE \ / \ | SEC_SHARE | | security=share | | | | | | 5 March | | | | 2012 | *| * * * | * _________)/\\_//(\/(/\)/\//\/\///|_)_______
* s3-param: Align lp_{max,min}protocol with lib/param namesAndrew Bartlett2012-02-272-10/+31
| | | | | | | | | | This adds an alisas to ensure that both our loadparm systems know all the names. I would like to move to the 'server ..' name as canonical, and this will be raised on the list. Andrew Bartlett
* s3-param Remove off-by-default and unused "send spnego principal"Andrew Bartlett2012-02-161-10/+0
| | | | | | | | | | | | This is not honoured by the common SPNEGO code. This matches mondern windows versions which do not send this value, as it would be insecure for a client to rely on it. (See also the depricated client use spnego principal directive). Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-param: Remove unused share_defined()Andrew Bartlett2012-02-101-5/+0
| | | | | | Found by callcatcher: http://www.skynet.ie/~caolan/Packages/callcatcher.html Andrew Bartlett
* s3-libsmb: Use gensec_spnego in smb seal clientAndrew Bartlett2012-01-311-0/+1
| | | | | | | | | This is intead of the inline, manual spnego code currently in use. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3: Fix bug 8695Volker Lendecke2012-01-171-0/+1
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Jan 17 18:55:01 CET 2012 on sn-devel-104
* s3: Avoid a potential alignment requirement issueVolker Lendecke2012-01-061-3/+2
|
* s3-loadparm: mark a few parameters as having P_BYTES typeAndrew Tridgell2011-12-221-12/+12
| | | | | | | | | this fixes a problem with "max xmit = 32K" resulting in a maximum SMB transmit size of 32 bytes, which makes for some very interesting network traces! This is what was causing smbtorture to consume gigabytes of memory in the rpc.schannel test
* s4 dns: Allow updates based on smb.conf settingKai Blin2011-12-171-0/+1
| | | | | Autobuild-User: Kai Blin <kai@samba.org> Autobuild-Date: Sat Dec 17 04:19:40 CET 2011 on sn-devel-104
* s3:param: don't reference conn_snum_used directly in load_usershare_shares()Stefan Metzmacher2011-12-131-2/+3
| | | | | | This uses the same logic as lp_killunused(). metze
* s3-param: loadparm has no dependency to smbldap.Günther Deschner2011-11-171-1/+0
| | | | Guenther
* param: Connect lp_security to the lib/param code to allow testsAndrew Bartlett2011-11-171-0/+1
| | | | Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
* param: Move enum values into a common (included) .c fileAndrew Bartlett2011-11-171-83/+1
| | | | | | | | | This #include hack is required as it is not possible to declare a compile-time sized array in a header file. Andrew Bartlett Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
* param: move server role helpers into loadparm.hAndrew Bartlett2011-11-171-1/+0
| | | | Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
* param: calculate server role from security, and security from server roleAndrew Bartlett2011-11-173-110/+9
| | | | | | | | | | | | | This allows smb.conf files from either the samba3 or samba4 tradition to come to the same value of server role, using the information in the smb.conf file. This is important so that tools like 'net getlocalsid' work against a Samba4 AD installation (yes, users have tried this). Andrew Bartlett Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
* s3-param remove lp_domain_logons(), always use IS_DCAndrew Bartlett2011-11-172-2/+1
| | | | | | | | This makes the code internally consistant. Andrew Bartlett Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
* param: make server role list common and include auto (for the new default)Andrew Bartlett2011-11-171-3/+8
| | | | Pair-Programmed-With: Amitay Isaacs <amitay@samba.org>
* s3-param: Add "server role" as global parameterAmitay Isaacs2011-11-172-10/+30
| | | | | This will help extracting server role processing code in common library.
* param: Add "domain logons" and "domain master" parametersAmitay Isaacs2011-11-171-0/+2
| | | | | This makes parsing of config files with s3 loadparm code and s4 loadparm code consistent.
* s3:param: change default of "* signing" to "default"Stefan Metzmacher2011-11-031-2/+2
| | | | | | | | | This should not change the bahavior. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Nov 3 18:33:34 CET 2011 on sn-devel-104
* s3:param: make use of SMB_SIGNING_* constantsStefan Metzmacher2011-11-031-18/+20
| | | | metze
* s3:param: the behavior of "client/server signing = auto" is the same as "true"Stefan Metzmacher2011-11-031-2/+2
| | | | | | So remove the special case for 'Auto'. metze
* libcli/smb: move smb_signing.[ch] to the toplevelStefan Metzmacher2011-10-251-1/+1
| | | | metze
* Deprecate "acl check permissions".Jeremy Allison2011-10-211-1/+1
| | | | | Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Oct 21 21:51:18 CEST 2011 on sn-devel-104
* lib/param Add 'use mmap' parameter to control tdb use of mmapAndrew Bartlett2011-10-131-0/+3
|
* s3:dbwrap: convert dbwrap_fetch(), dbwrap_fetch_bystring() and ↵Michael Adam2011-10-111-5/+16
| | | | dbwrap_fetch_bystring_upper() to NTSTATUS
* s3:dbwrap: move the db_open_rbt() prototype to a new header dbwrap_rbt.hMichael Adam2011-10-111-0/+1
|
* lib/param move source4 param code to the top levelAndrew Bartlett2011-10-111-1/+1
| | | | | | | | | | | | This is done so that the lpcfg_ functions are available across the whole build, either with the struct loadparm_context loaded from an smb.conf directly or as a wrapper around the source3 param code. This is not the final, merged loadparm, but simply one step to make it easier to solve other problems while we make our slow progress on this difficult problem. Andrew Bartlett
* s3:param: add lp_host_msdfs to loadparm_s3_contextStefan Metzmacher2011-10-081-1/+3
| | | | metze
* s3-param Remove odd formatting to allow code mergeAndrew Bartlett2011-10-071-18/+18
| | | | | | | | This code is very old, and has some code styles that we have not used in Samba for a very long time. This fixes up a the extra braces around return values. Andrew Bartlett
* s3-param: inline octal_string into caller to allow code mergeAndrew Bartlett2011-10-071-3/+6
|
* s3-param use Auto define for lm_announce defaultAndrew Bartlett2011-10-071-1/+1
|
* s3:param: use ROLE_DOMAIN_CONTROLLER for an AD domain controllerStefan Metzmacher2011-10-041-1/+1
| | | | metze
* Fix bug #8229 - git patch attached against 3.6.0-rc2 to fix 'widelinks' ↵Jeremy Allison2011-09-141-1/+21
| | | | | | | | | | | | regression intro'd in 3.2 Add "allow insecure widelinks" to re-enable the ability (requested by some sites) to have "widelinks = yes" and "unix extensions = yes". Based on an original patch by Linda Walsh <samba@tlinx.org> Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Sep 14 03:55:45 CEST 2011 on sn-devel-104
* s3-loadparm: fixed re-application of cmdline parametric optionsAndrew Tridgell2011-09-081-1/+4
| | | | | | | this ensures that cmdline parametric options are re-applied when we reload smb.conf Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s3-loadparm: fixed a memory leak in parametric optionsAndrew Tridgell2011-09-081-1/+2
| | | | | | | before we memset the Globals structure we need to free any global parametrics Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s3:smb2_server: add basic support for SMB 2.1Stefan Metzmacher2011-09-051-1/+2
| | | | | | | | | | | | | | This adds support for the 2 stage negprot, from SMB 1 to SMB 2.1. Support for this of for now and "max protocol = SMB2" still maps to "max protocol = SMB2_02" PROTOCOL_SMB2_02. In order to activate smb2.1, you need to use "max protocol = SMB2_10". metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Sep 5 19:30:58 CEST 2011 on sn-devel-104
* s3-param: Allocate talloc stackframe before calling s3 param routinesAmitay Isaacs2011-08-261-2/+26
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s3-param: Add a dump() method to output parametersAmitay Isaacs2011-08-261-0/+1
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-provision set passdb backend to 'samba4' in template smb.conf filesAndrew Bartlett2011-08-221-1/+3
| | | | | | | This will allow smbpasswd, net sam and pdbedit to 'just work' against the newly created databases. Andrew Bartlett
* s3: Use ZERO_STRUCT where appropriateVolker Lendecke2011-08-161-1/+1
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Aug 16 13:59:55 CEST 2011 on sn-devel-104
* s3-param: Add python wrapper for s3 parametersAmitay Isaacs2011-08-131-0/+87
| | | | | | This provids a get_context() method to return s3 context as s4 context type. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s3-param: Make sure we have talloc stack frame before calling in s3 codeAmitay Isaacs2011-08-131-1/+8
| | | | | When loading parameters as s4 context in s3 code, ensure we have a talloc stack frame. This is required for python wrapping s3 params.
* param: Add smb.conf loading support to s3/s4 loadparm bridgeAndrew Bartlett2011-08-131-0/+6
|
* s3:dbwrap: move all .c and .h files of dbwrap to lib/dbwrap/Michael Adam2011-07-291-1/+1
| | | | | Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Fri Jul 29 13:34:22 CEST 2011 on sn-devel-104
* s3:loadparm: make lp_set_in_client() static - only used in wrappers in ↵Michael Adam2011-07-281-1/+1
| | | | loadparm now.
* s3:loadparm: add wrapper lp_load_client_no_reinit()Michael Adam2011-07-281-0/+10
|
* s3:loadparm: add wrapper lp_load_globals_no_reinit()Michael Adam2011-07-281-0/+16
|
* s3:smbspool: use lp_load_client()Michael Adam2011-07-281-1/+1
|