| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
| |
Karolin
(cherry picked from commit 7f1badf7bd86593e6ca3490eaf9afd4f790b12cc)
|
|
|
|
|
|
|
| |
open file.
(cherry picked from commit d27f5a277ef47c5ff94e402930680b37e8f4d592)
(cherry picked from commit a7224ca5e77aa3e7d3a460515b07aa5b6cb099ae)
|
|
|
|
|
|
|
|
|
|
|
| |
symlink target is outside of the share.
Missed passing ucf_flags instead of hard coded flags in findfirst call.
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Sat Oct 22 06:30:16 CEST 2011 on sn-devel-104
(cherry picked from commit f4593181876f7a9ef55ceee8d1a20369197a63ba)
(cherry picked from commit 73aee207497028b524f2f4d011ab28d954a598c7)
|
|
|
|
|
|
|
|
| |
symlink target is outside of the share.
The statcache has to do lstat instead of stat when returning cached
posix pathnames.
(cherry picked from commit 84ce5f1b96be650ad80fa1dc030539113a27c50d)
|
|
|
|
|
|
|
|
| |
outside of the share.
The key is to only allow the lookup to succeed if it's a UNIX level lookup or readlink,
but disallow all other operations.
(cherry picked from commit 9685fb343de057598752d8f43d43523cab5c4356)
|
|
|
|
|
|
|
| |
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Thu Jul 28 02:09:20 CEST 2011 on sn-devel-104
(cherry picked from commit d82256ca119eb8315cc69ba725ba71c386caa901)
(cherry picked from commit 6ae54263b77f7663df0c390c496a139bed443b27)
|
|
|
|
|
|
|
|
|
| |
This breaks the ABI.
Guenther
See bug #7465 for more details.
(cherry picked from commit 9378a904740ee456758e00acdd23e3016d4810ee)
|
|
|
|
|
|
|
|
|
|
|
|
| |
It sems like every not completely trivial sed expression should be tested with
Solaris' sed. Its regexp engine is way more limited than the one of GNU
sed. Thanks to Michael Pelletier for finding this! This fixes bug #8531
Autobuild-User: Björn Jacke <bj@sernet.de>
Autobuild-Date: Thu Oct 20 23:15:05 CEST 2011 on sn-devel-104
(cherry picked from commit 37be1df3d7534c2cc8e1e25614164c2178372b94)
(cherry picked from commit 763ad499aa4423c5e68a75f20f2ba8ee967e5984)
(cherry picked from commit 53b551d160a9e5b645aaa6582d7ffc82e5e52b59)
|
|
|
|
|
|
|
|
|
|
|
| |
deleting it via empty path (DELETE_PENDING until the last client)
Disallow "." in can_set_delete_on_close().
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Wed Oct 12 21:07:27 CEST 2011 on sn-devel-104
(cherry picked from commit bd260f03ab492d03c2890db47dc6fb4f1b824a1a)
(cherry picked from commit c6e2256e2ef024ecdbebb9cb04d919342daeb780)
|
|
|
|
|
|
|
| |
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Thu Sep 29 23:47:02 CEST 2011 on sn-devel-104
(cherry picked from commit d883cc664cac81633a60e5b04f99f23a3577ae65)
(cherry picked from commit 20ee0810ff4da3a16a8b7947d4aa0138a8d76577)
|
|
|
|
| |
(cherry picked from commit ff5b58d3038bed5a20511bc76405d8ebdae75a87)
|
|
|
|
|
|
|
| |
from a cifsfs create.
Don't manipulate the new_dos_attributes bits until we know it's not a POSIX open.
(cherry picked from commit 2bdf5042dd14283ae195d442d20385ed158367ae)
|
|
|
|
|
|
|
| |
permissions on incoming ACL change with no user specified.
Be smarter about setting default permissions when a ACL_USER_OBJ isn't given. Use the principle of least surprises for the user.
(cherry picked from commit abf0629535a8082229810c6905c356b20c482be9)
|
|
|
|
|
|
|
|
| |
permissions on incoming ACL change with no user specified.
create_default_mode() is not needed - it's taken care of by code
inside ensure_canon_entry_valid().
(cherry picked from commit 0dba9c975a8bfa9e6441c3a4726e1e68cbf364ca)
|
|
|
|
|
|
|
|
|
| |
(Invalid argument)
Don't call check_owning_objs() to convert ACL_USER->ACL_USER_OBJ and
AC_GROUP->ACL_GROUP_OBJ for default (directory) ACLs, we do this separately
inside ensure_canon_entry_valid().
(cherry picked from commit 06fd08dea1dde4b86546a8f87574d68dcac0e840)
|
|
|
|
|
|
|
|
| |
(Invalid argument)
Only map CREATOR_OWNER/CREATOR_GROUP to ACL_USER_OBJ/ACL_GROUP_OBJ in
a default(directory) ACL set.
(cherry picked from commit 36f60cef6d6ac5625a88a73ce53bdb2b0fe0f000)
|
|
|
|
|
|
|
|
| |
(Invalid argument)
Remove the code I added for bug "6878 - Cannot change ACL's inherit flag". It is incorrect
and causes the POSIX ACL ACL_USER_OBJ duplication.
(cherry picked from commit cd5d9a5c8fb0660835d60479fb783e4f7cae743f)
|
|
|
|
|
| |
Handle the SECINFO_LABEL flag in the same way as Win2k3.
(cherry picked from commit 4b26ffd1ea430b2cc612884c8ba194498a64932b)
|
|
|
|
|
|
|
|
|
|
| |
If a client sends a mangled name as part of a DFS path, use the
post-mangled name for the pathname walk, not the mangled name.
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Sat Oct 1 00:45:59 CEST 2011 on sn-devel-104
(cherry picked from commit 149875f887287dbbf016d2252962b023b0bae967)
(cherry picked from commit 1ed1b19b2eeda3217d03d66d4220abd871b03cb4)
|
|
|
|
|
|
|
|
| |
If kerberos_get_realm_from_hostname() or kerberos_get_default_realm_from_ccache() fails due to
a misconfigured krb5.conf, try the "realm =" from smb.conf as a fallcback before going back to
NTLMSSP (which we'll do anyway).
(cherry picked from commit ccab9efb653cfacdd357986f7a8a85c17df7abbb)
(cherry picked from commit f16e4cc11fd4f195da7c4f0de13d0bb23e5b79d1)
|
|
|
|
|
|
|
|
|
|
| |
through an smb.conf option.
Signed-off-by: Jeremy Allison <jra@samba.org>
Fix bug #8186 (Allows changing the maximum number of simultaneous clients in
winbindd through an smb.conf option).
(cherry picked from commit b6f691ede0a80aaf7226b6862120b5052e63668d)
|
|
|
|
|
| |
Guenther
(cherry picked from commit d7f0de06c119abad609f87121a8a4fb533e82747)
|
|
|
|
|
|
|
| |
Guenther
The last 2 patches address bug #8491 (fix some coverity issues).
(cherry picked from commit 702443500268ceb4dd3e0d3a1a130bca465be266)
|
|
|
|
| |
(cherry picked from commit 62b9ad45e27bb6a2af22aa9ee133ed6075abc62b)
|
|
|
|
|
| |
Guenther
(cherry picked from commit 52e5c8002f1ccd417eaf56f0c1c9abb9d13bb7d6)
|
|
|
|
|
|
|
| |
We force using a MEMORY ccache though in the wkssvc server.
Guenther
(cherry picked from commit 01f30f5c3e690956f1bd85006c88b6d79e63a1c7)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
If a child dies, the parent process right away closes the socket.
This is wrong, with tevent we still have events pending. This works
fine for epoll but does not for at least the FreeBSD select variant.
Tevent sticks a closed socket into the select masks. This then
returns an error EBADF. When this happens, the parent winbind dies
instead of forking a new child.
This moves the socket close from the SIGCHLD cleanup function to
the socket receiver. I could not reproduce the parent death anymore
and it did not create an obvious fd leak.
(cherry picked from commit da08c8ac7cf9e2833c39e7ef39caafa4ab34424d)
|
|
|
|
|
|
|
|
|
| |
metze
Fix bug #8452 (negprot reply needs to check vwv vector length).
The corresponding commit in master is 85332eb1c721d585e1a33101bddafdca4073e10f.
(cherry picked from commit c5bf8ac4ee60fe808a2593a5ece12e8bfad5695b)
|
|
|
|
|
| |
Fix bug #8420 (wb_group_members: non-resistance against garbage).
(cherry picked from commit 126d343580e7ba6465cfdf60ea60958cbe98b242)
|
|
|
|
|
|
| |
Missing assignment means this loop will never terminate. Need to be applied
to 3.5.x and 3.6.1.
(cherry picked from commit 4db250449dda30e3ffa05c8918e0cf39cbacc5d8)
|
|
|
|
|
| |
Fix bug #8370 (vfs_chown_fsp broken -- returns in the wrong directory).
(cherry picked from commit 0b1ce3f177b75e146fdae0b5531c54dedffada1d)
|
|
|
|
|
|
| |
OS/2 sends an unexpected write&x/read&x chain
(cherry picked from commit 2aca833308049d005c647aabcd9d894f59698ef4)
(cherry picked from commit b42573acbf7eee1580eaceb1b9c57ddbbe3a2532)
|
|
|
|
|
|
| |
The last 4 patches address bug #8338 (MAC Lion - smbclient "Open AndX
Request->STATUS_NOT_SUPPORTED).
(cherry picked from commit 8e9dfd04fac5353fb12270647209ac45d19a1ad2)
|
|
|
|
| |
(cherry picked from commit aa0c6eb76a6e16652a2ef46560eaffb881792cf6)
|
|
|
|
| |
(cherry picked from commit 612361bdcaf4256eb54913423e127d0628b35356)
|
|
|
|
| |
(cherry picked from commit 1fa4b369d2fabbf34cda576d91d8aa9baa4e8b68)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
SLES 9's glibc for example had weird macros where the use of strncat resulted
in the use of strcat which we don't allow.
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Autobuild-User: Björn Jacke <bj@sernet.de>
Autobuild-Date: Thu Aug 4 17:50:24 CEST 2011 on sn-devel-104
(cherry picked from commit d3b4d75364210e2d2a4a1cd806f28b0021f22909)
Fix bug #8362 (build issue on old glibc systems).
(cherry picked from commit 87fa72a5202fe3780d4a61289bf755027cd078f4)
(cherry picked from commit 552ccc6588b0744ae9b3731b1406749baea03d5a)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This is more portable, as we have a strtoll replacement
in lib/replace.
metze
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Sat Aug 6 11:55:45 CEST 2011 on sn-devel-104
(cherry picked from commit a6be0820d09b3f3eabfbb5f4356add303aa8a494)
Fix bug #8347 (CVE-2011-2522 regression for HP-UX, AIX and OSF).
(cherry picked from commit 34b8765d894f13490fab734ee91bd53e235d10e6)
|
|
|
|
|
| |
Karolin
(cherry picked from commit be1ba3365ad5369b4a72c4343e9237d7d69b1992)
|
|
|
|
|
|
|
| |
(cherry picked from commit 36e736871e28665ffcbbc4d0c87e1a2b60fcf0e0)
Fix bug #8322 (HAVE_FUNCTION_ATTRIBUTE_DESTRUCTOR is missing from 3.5.x).
(cherry picked from commit c69ab4252d9aea274f44f96b1e3f41ca57185987)
|
|
|
|
|
|
|
| |
metze
Part of a fix for bug #7841 (WINBINDD_LOOKUPRIDS asks the wrong domain).
(cherry picked from commit 12a4b5633d5c3488f48f3e7a5084402f6eeeb9c5)
|
|
|
|
|
|
|
|
| |
(bug #8276)
metze
(cherry picked from commit 75e9f2110876137a57632d223248ac51dbfc4569)
(cherry picked from commit 48355dae98885ca0d44dbf4206a0bdf16c64fced)
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
(bug #8276)
Fix bug #7949 (DoS in Winbind and smbd with many file descriptors open)
(commit feb3fcd0fa4bda0967b881315595d7702f4d1752) changed the bahavior,
so that we skipped some sockets.
This should work for v3-5-test.
metze
(cherry picked from commit 9d5738f779b803fb257537d6308a5f34625cb1b0)
|
|
|
|
|
| |
The last 5 patches address bug #8253 (winbindd panics if verify_idpool() fails).
(cherry picked from commit 1da14b93bc664948699f62cca2fc777c6f7523c9)
|
|
|
|
| |
(cherry picked from commit 6a3869da05b0d0e4d47db2502489de359d5e7e45)
|
|
|
|
| |
(cherry picked from commit df03f6c2c98f65bf9656d27e1cc9dc72cd587e31)
|
|
|
|
| |
(cherry picked from commit 70856a728a0be1c97e9e13382cd2d880450e07c4)
|
|
|
|
|
|
| |
ensure the event is canceled if the smbldap_state gets freed
this fixes a panic of winbindd if verify_idpool fails
(cherry picked from commit 3d78bea9ac27c3f6c98561e287add632a17ce747)
|
|
|
|
| |
(cherry picked from commit 1a8155d347e2a8de3432ce0fe99d598c25c2bafb)
|
|
|
|
|
|
|
|
|
| |
Move lp_acl_check_permissions() into can_delete_file_in_directory()
where it makes sense. Remove ACL check when requesting DELETE_ACCESS
when lp_acl_check_permissions is false.
Thanks to John Janosik @ IBM for noticing this.
(cherry picked from commit 83357ecf6adafe3d23ada705e79c3af25ad4e734)
|