summaryrefslogtreecommitdiffstats
path: root/source3
Commit message (Collapse)AuthorAgeFilesLines
...
* s3:registry: add regdb_trans_do(): a transaction wrapper that will check the ↵Michael Adam2011-09-011-0/+42
| | | | | | | regdb version If the version has changed since initialization, the write will fail with ACCESS_DENIED.
* s3:registry: drop log level of unknown regdb version message in regdb_init() ↵Michael Adam2011-09-011-1/+1
| | | | to 0
* s3-rpc_server: Add missing rng_fault_state in epmapper.Andreas Schneider2011-09-011-0/+2
| | | | | | | | | We need to raise an exception so we need to set the rng_fault_state for epm_Insert and epm_Delete if someone connects over a transport other than NCALRPC. Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Thu Sep 1 15:59:50 CEST 2011 on sn-devel-104
* s3-rpc_server: Handle services with multiple pipe names.Andreas Schneider2011-09-011-2/+10
| | | | | The configuration should only use the default pipe name to configure all of them correctly.
* Fix bug 8429 - Compound SMB2 requests on an IPC connection can corrupt the ↵Jeremy Allison2011-08-311-12/+17
| | | | | | | reply stream. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Aug 31 21:18:11 CEST 2011 on sn-devel-104
* Based on metze's fix for Bug 8407 - SMB2 server can return requests ↵Jeremy Allison2011-08-312-2/+39
| | | | out-of-order when processing a compound request. (cherry picked from commit 19db1c98c6ba3cb5e883e16e865c44900ce17444)
* s3:smb2_server: keep compound_related on struct smbd_smb2_requestStefan Metzmacher2011-08-312-4/+4
| | | | | metze (cherry picked from commit cda93f04eb4e7e975b192a5fd33275ec638140ac)
* s3-waf: fix unresolved symbols in the group policy client side extensions ↵Günther Deschner2011-08-311-1/+1
| | | | | | | | | subsystem. Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Aug 31 19:48:39 CEST 2011 on sn-devel-104
* s3-waf: convert libgpo into a private library.Günther Deschner2011-08-311-5/+6
| | | | Guenther
* s3-waf: allow undefined symbols in idmap_rid module.Günther Deschner2011-08-311-0/+1
| | | | Guenther
* s3: Fix bug 8334, do not fork the echo handler for smb2Volker Lendecke2011-08-311-1/+2
| | | | | | | | | | | | | | | | | | | If a smb1 negprot negotiated smb2 we forked the echo responder. This will eventually lead to a panic from [2011/08/30 10:33:29.212578, 0, pid=3846917] smbd/smb2_server.c:243(smbd_smb2_request_create) Invalid SMB packet: first request: 0x0009 because from the echo responder we always read using the normal smb1 protocol handling routine. If that is a bit down the smb2 stream, we get a non-negprot packet and panic. BTW, the echo responder is not required for smb2 anyway, Microsoft confirmed that it probes the server liveness using TCP keepalives and not smb2 echo requests. Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Wed Aug 31 17:58:48 CEST 2011 on sn-devel-104
* s3-rpc_server: Disable epmapper by default.Andreas Schneider2011-08-311-2/+2
| | | | | | | | | | | | | We need more testing in the real world. We need to be sure that if a Windows client can access port 135 it doesn't require that a service is available via ncacn_ip_tcp. If possible please enable it using the following smb.conf options for testing: rpc_daemon:epmd = fork rpc_server:epmapper = external Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Wed Aug 31 16:29:20 CEST 2011 on sn-devel-104
* s3-waf: allow unresolved symbols in some idmap and nss_info modules.Günther Deschner2011-08-311-0/+7
| | | | | | | Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Aug 31 14:27:31 CEST 2011 on sn-devel-104
* s3-waf: add missing tdb dependency to idmap_tdb2 module.Günther Deschner2011-08-311-1/+1
| | | | Guenther
* s3-waf: convert nss_info subsystem into a private library.Günther Deschner2011-08-311-4/+5
| | | | Guenther
* s3-lsa: Add _lsa_SetInformationTrustedDomain() and related callsSumit Bose2011-08-311-21/+312
| | | | | | | | | The following LSA calls are added: - _lsa_SetInformationTrustedDomain() - _lsa_SetTrustedDomainInfo() -_lsa_SetTrustedDomainInfoByName() Signed-off-by: Günther Deschner <gd@samba.org>
* s3-lsa: Update _lsa_QueryTrustedDomainInfo()Sumit Bose2011-08-311-8/+63
| | | | Signed-off-by: Günther Deschner <gd@samba.org>
* s3-pdb_ipa: Add supprted encryption types to struct pdb_trusted_domainSumit Bose2011-08-312-0/+24
| | | | Signed-off-by: Günther Deschner <gd@samba.org>
* s3-pdb_ipa: Add posix offset to struct pdb_trusted_domainSumit Bose2011-08-312-0/+23
| | | | Signed-off-by: Günther Deschner <gd@samba.org>
* s3-lsa: Fix access mapping in_lsa_OpenTrustedDomain_base()Sumit Bose2011-08-311-1/+1
| | | | Signed-off-by: Günther Deschner <gd@samba.org>
* s3-lsa: Fix typo and use right pdb interfaceSumit Bose2011-08-311-1/+1
| | | | Signed-off-by: Günther Deschner <gd@samba.org>
* s3-pdb_ipa: Derive domain GUID from SIDSumit Bose2011-08-311-2/+23
| | | | Signed-off-by: Günther Deschner <gd@samba.org>
* s3:modules make perfcount_test loadable againChristian Ambach2011-08-311-1/+1
| | | | | | | use expected 'init_samba_module' name for initializer function Autobuild-User: Christian Ambach <ambi@samba.org> Autobuild-Date: Wed Aug 31 11:22:26 CEST 2011 on sn-devel-104
* s3:lib S-1-5-9 is "Enterprise Domain Controllers"Christian Ambach2011-08-311-1/+1
| | | | and not ServerLogon
* s3:lib remove duplicate entry for "Anonymous Logon"Christian Ambach2011-08-311-1/+0
|
* s3:lib add S-1-5-17 to well-known SID listChristian Ambach2011-08-311-0/+1
| | | | | | | | http://support.microsoft.com/kb/243330/en-us says the name is "This organization", but Windows 2008 says IUSR Picking the Windows 2008 variant as 'This Organization' would be duplicate to S-1-5-15
* s3:lib add some more well-known sidsChristian Ambach2011-08-311-0/+3
| | | | | add S-1-3-2/Creator Owner Server, S-1-3-3/Creator Group Server and S-1-3-4/Owner Rights to the well-known SID list
* s3:lib add new well-known SIDs for BUILTINChristian Ambach2011-08-311-0/+8
| | | | | | Distributed COM Users, Cryptographic Operators, Event Log Readers and Certificate Service DCOM Access were missing from the BUILTIN well-known SID list
* tdb2: fix build with --enable-tdb2Rusty Russell2011-08-311-3/+2
| | | | | | | | tdb2 doesn't expost tdb_jenkins_hash; go straight to the source in ccan/hash. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
* s3:include: add CAP_LWIO and CAP_DYNAMIC_REAUTH definesStefan Metzmacher2011-08-301-0/+2
| | | | metze
* s3-build: move libsmb/clisigning.c to LIBSMB_SRCStefan Metzmacher2011-08-302-4/+5
| | | | | | It's only needed in the client library. metze
* s3:smb2 fix Bug 8428 - wrong reply to DHnC (durable handle reconnect)Christian Ambach2011-08-301-6/+6
| | | | | | | | | | | | | | | | | | According to [MS-SMB2] 3.3.5.9.7 (http://msdn.microsoft.com/en-us/library/cc246784%28v=PROT.13%29.aspx), smbd must reply with NT_STATUS_OBJECT_NAME_NOT_FOUND as it does not support durable file-handles yet. I have seen w2k8r2 running xcopy /C ending up in an endless loop trying to get back the original file handle from smbd sending the same requests over and over. Metze, Jeremy, please check! Signed-off-by: Jeremy Allison <jra@samba.org> Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Tue Aug 30 22:20:36 CEST 2011 on sn-devel-104
* s3-rpc_server: Make sure we switch always the connecting user.Andreas Schneider2011-08-301-13/+11
| | | | | | | | | | We always have a valid session info and if it is a anonymous connection we have a session info of the guest user. This means we should always call become_authenticated_pipe_user() else and anonymous user could do things as root. Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Tue Aug 30 20:50:54 CEST 2011 on sn-devel-104
* s3: Silence some warningsVolker Lendecke2011-08-303-0/+56
| | | | | | | | | | | Rusty, please suggest a proper fix for this. Thanks, Volker Lendecke Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Aug 30 19:16:14 CEST 2011 on sn-devel-104
* Fix bug 8412 - Microsoft Office 2007 (Microsoft Word) fails to save as on a ↵Jeremy Allison2011-08-292-6/+46
| | | | Samba share with SMB2.
* Fix bug Bug 8422 - Infinite loop in ACL module code.Jeremy Allison2011-08-291-1/+1
| | | | | Missing assignment means this loop will never terminate. Need to be applied to 3.5.x and 3.6.1.
* s3: Fix getent group if trusted domains are not reachableVolker Lendecke2011-08-291-2/+7
|
* s3:rpc_server: fix two debug messages in svcctl_add_service()Michael Adam2011-08-291-2/+2
| | | | | | | (copy and paste from eventlog?) Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Mon Aug 29 15:30:33 CEST 2011 on sn-devel-104
* s3-lib: If we create a pipe socket, don't start to listen.Andreas Schneider2011-08-294-6/+31
| | | | | | | | | The create_pipe_sock() function should only create the socket as the name states and not start to listen on it too. We should start to listen on in the individual places as we need different backlog values. Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Mon Aug 29 13:21:43 CEST 2011 on sn-devel-104
* s3:libsmb: make cli_session_request_send/recv() staticStefan Metzmacher2011-08-282-13/+6
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sun Aug 28 20:29:01 CEST 2011 on sn-devel-104
* s3:libsmb: move cli_session_request*() to smbsock_connect.cStefan Metzmacher2011-08-282-127/+129
| | | | metze
* s3:libsmb: move cli_smb_oplock_break_waiter*() to clioplock.cStefan Metzmacher2011-08-284-86/+86
| | | | metze
* s3:libsmb: use cli_smb_req_set_mid() in cli_smb_oplock_break_waiter_send()Stefan Metzmacher2011-08-281-3/+1
| | | | metze
* s3:libsmb: let cli_smb_req_mid() return the mid set by cli_smb_req_set_mid()Stefan Metzmacher2011-08-281-0/+5
| | | | metze
* s3: Fix a winbind race leading to 100% CPUVolker Lendecke2011-08-261-2/+3
| | | | | | | | | | | | | | | | | | | | | | | This fixes a race condition that leads to the winbindd_children list becoming corrupted. It happens when on a busy winbind SIGCHLD is a bit late. Imagine a winbind with multiple requests in the queue for a single child. Child dies, and before the SIGCHLD handler is called we find the socket to be dead. wb_child_request_done is called, receiving an error from wb_simple_trans_recv. It closes the socket. Then immediately the wb_child_request_trigger will do another fork_domain_child before the signal handler is called. This means that we do another fork_domain_child, we have child->sock==-1 at this point. fork_domain_child will do a DLIST_ADD(winbindd_children, child) a second time where the child is already part of that list. This corrupts the list. Then the signal handler kicks in, spinning in for (child = winbindd_children; child != NULL; child = child->next) { forever. Not good. This patch makes sure that both conditions (sock==-1 and not part of the list) for a winbindd_child struct match up. Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Fri Aug 26 18:51:24 CEST 2011 on sn-devel-104
* s3: Fix two int/enum mixupsVolker Lendecke2011-08-261-2/+2
|
* s3-passdb: Allocate talloc stackframe before calling pdb_get_group_sid()Amitay Isaacs2011-08-261-5/+6
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s3-param: Allocate talloc stackframe before calling s3 param routinesAmitay Isaacs2011-08-261-2/+26
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s3: Use sys_write in fork_domain_childVolker Lendecke2011-08-261-1/+1
| | | | | | | Counterpart for last checkin. A lot less likely, but not impossible in a child. Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Fri Aug 26 13:14:27 CEST 2011 on sn-devel-104
* s3: Use sys_read in fork_domain_childVolker Lendecke2011-08-261-1/+1
| | | | | | | | | I've seen [2011/08/26 01:44:10.872057, 1] winbindd/winbindd_dual.c:1336(fork_domain_child) fork_domain_child: Could not read child status: nread=-1, error=Interrupted system call on a customer box. Not good.