summaryrefslogtreecommitdiffstats
path: root/source3
Commit message (Collapse)AuthorAgeFilesLines
* s3-selftest: Add a seperate test for ACL tests using vfstestAndrew Bartlett2012-08-164-11/+94
| | | | | | | | | | | This does not check for consistency or correctness yet, that will be done with python unit tests. The purpose of this test is to ensure that the vfstest wrapper doesn't crash. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Thu Aug 16 09:32:25 CEST 2012 on sn-devel-104
* s3-torture: Add ACL commands to vfstestAndrew Bartlett2012-08-161-0/+311
| | | | | | This will allow easier investigation of our ACL layer. Andrew Bartlett
* s3-torture: Use talloc more in vfstestAndrew Bartlett2012-08-162-29/+25
| | | | | | This matches the rest of Samba, which allocates many of these structures with talloc. Andrew Bartlett
* s3-torture: Initialise fsp fully in vfstest openAndrew Bartlett2012-08-161-0/+34
|
* s3-smbd: Do not check no_acl_syscall_error(errno) after sys_acl_init()Andrew Bartlett2012-08-161-11/+2
| | | | | | This is no longer a VFS call, so will no longer fail in this way. Andrew Bartlett
* selftest: Extend xattr-tdb-1 vfstest to call statAndrew Bartlett2012-08-161-0/+1
|
* s3-vfs: Continue to make vfs_xattr_tdb non-recursiveAndrew Bartlett2012-08-161-24/+50
| | | | | | We now always use _NEXT_ VFS calls, even to build the file id. Andrew Bartlett
* s3-vfs: Add new VFS module to fake setting an ACLAndrew Bartlett2012-08-162-0/+378
| | | | | | | The purpose of this module is to remove the relience on the system having ACL support to test NT ACLs. Andrew Bartlett
* s3-selftest: convert xattr-tdb-1 vfstest driver into a subunit testAndrew Bartlett2012-08-163-10/+52
| | | | | | | | | | | We don't use the simple smb.conf because we need to override all the paths for this to work as non-root without a panic, so we use the s3dc environment, which already loads this module. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Thu Aug 16 02:55:19 CEST 2012 on sn-devel-104
* s3-selftest: convert stream_depot vfstest driver into a subunit testAndrew Bartlett2012-08-163-10/+35
| | | | | | | | | | This gives us our first automated coverage of the vfstest binary. We don't use the simple smb.conf because we need to override all the paths for this to work as non-root without a panic, so we use the s3dc environment, which already loads this module. Andrew Bartlett
* fix printf warning in net connectionsAndrew Bartlett2012-08-161-2/+2
|
* s3:utils: remove standalone cclean toolGregor Beck2012-08-163-328/+1
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s3:net add command "connections cleanup"Gregor Beck2012-08-165-2/+286
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s3-vfs: Set errno in xattr emulationAndrew Bartlett2012-08-152-0/+7
| | | | | | | | | The caller may check this errno. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Aug 15 18:05:33 CEST 2012 on sn-devel-104
* s3-vfs: Avoid loops in VFS modules: call _NEXT functions in xattr emulationAndrew Bartlett2012-08-152-8/+8
| | | | | | | | We need to call the next module in the stack otherwise we will loop if the stat call is in turn implemented in terms of extended attribute lookup. Andrew Bartlett
* s3-vfs: ensure we strictly free the talloc_stackframeAndrew Bartlett2012-08-151-1/+1
| | | | | | | We must do this when leaving the function or else in development, we will panic. Andrew Bartlett
* librpc/idl: Make smb_acl_t public so we can pull/push it as a blobAndrew Bartlett2012-08-151-0/+9
|
* s3:smb2_server: do calculations based on SMBD_SMB2_NUM_IOV_PER_REQ in ↵Stefan Metzmacher2012-08-151-3/+3
| | | | | | smbd_smb2_request_validate() metze
* s3-sysacls: Remove sys_acl_free_qualifier() as it is a no-opAndrew Bartlett2012-08-154-10/+0
| | | | | Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Aug 15 05:23:18 CEST 2012 on sn-devel-104
* s3-sysacls: Remove sys_acl_free_acl() and replace with TALLOC_FREE()Andrew Bartlett2012-08-155-48/+41
|
* s3-smbd: Remove sys_acl_*() VFS wrapper functionsAndrew Bartlett2012-08-156-1033/+1
| | | | | | | | | | | | | | | | | | | | | | | We no longer do struct smb_acl_t manipuations via the VFS layer, which is now reduced to handling the get/set functions. The only backend that implemented these functions (aside from audit) was the vfs_default module calling the sys_acl code. The various ACL implementation modules either worked on the fully initilaised smb_acl_t object or on NT ACLs. This not only makes the operation of the posix ACL code more efficient (as allocation and free is not put via the VFS), it makes it easier to test and removes the fantasy that a module could safely redefine this structure or the behaviour here. The smb_acls.idl now defines the structure, and it is now allocated with talloc. These operations were originally added to the VFS in commit 3bb219161a270f12c27c3bc7e1220829c6e9f284. Andrew Bartlett
* s3-smbd: Remove unused conn argument from convert_permset_to_mode_t()Andrew Bartlett2012-08-151-3/+3
|
* s3-smbd: Call sys_acl_set_permset() directly rather than via the VFSAndrew Bartlett2012-08-151-7/+7
| | | | | | | This will allow us to remove the struct smb_acl_t manipuations from the VFS layer, which will be reduced to handling the get/set functions. Andrew Bartlett
* s3-smbd: Call sys_acl_set_qualifier() directly rather than via the VFSAndrew Bartlett2012-08-151-3/+3
| | | | | | | This will allow us to remove the struct smb_acl_t manipuations from the VFS layer, which will be reduced to handling the get/set functions. Andrew Bartlett
* s3-smbd: Call sys_acl_set_tag_type() directly rather than via the VFSAndrew Bartlett2012-08-151-6/+6
| | | | | | | This will allow us to remove the struct smb_acl_t manipuations from the VFS layer, which will be reduced to handling the get/set functions. Andrew Bartlett
* s3-smbd: Call sys_acl_create_entry() directly rather than via the VFSAndrew Bartlett2012-08-151-6/+6
| | | | | | | This will allow us to remove the struct smb_acl_t manipuations from the VFS layer, which will be reduced to handling the get/set functions. Andrew Bartlett
* s3-smbd: Call sys_acl_add_perm() directly rather than via the VFSAndrew Bartlett2012-08-151-6/+6
| | | | | | | This will allow us to remove the struct smb_acl_t manipuations from the VFS layer, which will be reduced to handling the get/set functions. Andrew Bartlett
* s3-smbd: Call sys_acl_clear_perms() directly rather than via the VFSAndrew Bartlett2012-08-151-2/+2
| | | | | | | This will allow us to remove the struct smb_acl_t manipuations from the VFS layer, which will be reduced to handling the get/set functions. Andrew Bartlett
* s3-smbd: Call sys_acl_init() directly rather than via the VFSAndrew Bartlett2012-08-151-3/+3
| | | | | | | This will allow us to remove the struct smb_acl_t manipuations from the VFS layer, which will be reduced to handling the get/set functions. Andrew Bartlett
* s3-smbd: Call sys_acl_free_acl() directly rather than via the VFSAndrew Bartlett2012-08-152-24/+24
| | | | | | | This will allow us to remove the struct smb_acl_t manipuations from the VFS layer, which will be reduced to handling the get/set functions. Andrew Bartlett
* s3-smbd: Call sys_acl_free_qualifier() directly rather than via the VFSAndrew Bartlett2012-08-151-2/+2
| | | | | | | This will allow us to remove the struct smb_acl_t manipuations from the VFS layer, which will be reduced to handling the get/set functions. Andrew Bartlett
* s3-smbd: Call sys_acl_get_entry() directly rather than via the VFSAndrew Bartlett2012-08-152-8/+8
| | | | | | | This will allow us to remove the struct smb_acl_t manipuations from the VFS layer, which will be reduced to handling the get/set functions. Andrew Bartlett
* s3-smbd: Call sys_acl_free_qualifier() directly rather than via the VFSAndrew Bartlett2012-08-151-2/+2
| | | | | | | This will allow us to remove the struct smb_acl_t manipuations from the VFS layer, which will be reduced to handling the get/set functions. Andrew Bartlett
* s3-smbd: Call sys_acl_get_qualifier() directly rather than via the VFSAndrew Bartlett2012-08-152-4/+4
| | | | | | | This will allow us to remove the struct smb_acl_t manipuations from the VFS layer, which will be reduced to handling the get/set functions. Andrew Bartlett
* s3-smbd: Call sys_acl_get_tagtype() directly rather than via the VFSAndrew Bartlett2012-08-152-5/+5
| | | | | | | This will allow us to remove the struct smb_acl_t manipuations from the VFS layer, which will be reduced to handling the get/set functions. Andrew Bartlett
* s3-smbd: Call sys_acl_get_permset() directly rather than via the VFSAndrew Bartlett2012-08-152-8/+8
| | | | | | | This will allow us to remove the struct smb_acl_t manipuations from the VFS layer, which will be reduced to handling the get/set functions. Andrew Bartlett
* s3-smbd: Call sys_acl_get_perm() directly rather than via the VFSAndrew Bartlett2012-08-152-9/+9
| | | | | | | This will allow us to remove the struct smb_acl_t manipuations from the VFS layer, which will be reduced to handling the get/set functions. Andrew Bartlett
* s3-smbd: Move smb_acl_t declaration to smb_acl.idlAndrew Bartlett2012-08-152-34/+4
| | | | | | | | This will allow us to marshall this into and from an NDR blob on disk, which will allow us to fake up ACL support during make test, and to test the NT ACL emulation using python bindings via the VFS. Andrew Bartlett
* s3-smbd: Change allocation of smb_acl_t to talloc()Andrew Bartlett2012-08-159-64/+49
| | | | | | | | | The acl element is changed to be a talloc child, and is no longer one element longer than requested by virtue of the acl[1] base pointer. This also avoids one of the few remaining cases of over-allocation of a structure. Andrew Bartlett
* s3-winbind: Return the DC name from DC_PINGChristof Schmitt2012-08-153-1/+14
| | | | | | | The DC that was attempted to ping is useful for troubleshooting. Return the DC name in the response to the wbclient. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s3-winbind: Pass ping-dc result to clientChristof Schmitt2012-08-151-1/+9
| | | | | | | The client checks for an error code in response.data.auth.nt_status, make sure the result is stored there. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s3-passdb: Silence scary DEBUG(0) message on first use of secrets.tdb databasesAndrew Bartlett2012-08-141-5/+10
| | | | | | When pdb_samba4 first opens this databse, this message is printed. Andrew Bartlett
* s3-vfs: Put vfs_aixacl_util.c helper functions into a header fileAndrew Bartlett2012-08-143-3/+24
| | | | | Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Tue Aug 14 02:16:11 CEST 2012 on sn-devel-104
* s3-selftest: Add smbclient tarmode testSalvador I. Gonzalez2012-08-142-1/+185
| | | | | | (With small changes to have test complete by Andrew Bartlett) Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s3-selftest: Fix copy/paste error in test usage stringSalvador I. Gonzalez2012-08-141-1/+1
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* Fix smbclient/tarmode panic on connecting to Windows 2000 clients.Salvador I. Gonzalez2012-08-131-8/+19
| | | | | | | | | | | 'Freed frame ../source3/libsmb/clilist.c:934, expected ../source3/client/clitar.c:821' Cause: (strequal(finfo->name,"..") || strequal(finfo->name,".")) evaluates to true, do_tar returns without freeing ctx Signed-off-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Mon Aug 13 23:12:50 CEST 2012 on sn-devel-104
* Ensure we update last_access on the winbindd child struct on each request.Jeremy Allison2012-08-131-0/+1
|
* s3: skip loading vfs modules for printer connectionsBjörn Jacke2012-08-121-0/+6
| | | | | Autobuild-User(master): Björn Jacke <bj@sernet.de> Autobuild-Date(master): Sun Aug 12 23:40:23 CEST 2012 on sn-devel-104
* s3-nfs4acls: Remove lookup_sid and sidmap from NFSv4 ACL mapping and check ↵Andrew Bartlett2012-08-111-115/+13
| | | | | | | | | | | | | | | | | | gid first By checking just the IDMAP, and by removing the sidmap and lookup_sid calls, we support IDMAP_BOTH. This is because by checking for a mapping to a GID first, we can rely on the fact that IDMAP_BOTH will resolve to a GID. If the sidmap idea is valued - it allows multiple SIDs to map to a single unix ID, this should be done in the IDMAP layer. Andrew Bartlett Signed-off-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Sat Aug 11 01:17:36 CEST 2012 on sn-devel-104
* s3-smbd: Merge ACE entries based on mapped UID/GID not SIDAndrew Bartlett2012-08-101-4/+4
| | | | | | | | | | | | As the test for a valid posix ACL is based on the unix uid/gid only appearing once in the ACL the merge process also needs to be UID/GID based. This is a problem when we have multiple builtin groups mapped to the same POSIX group as happens in a Samba4 provision. Andrew Bartlett Signed-off-by: Jeremy Allison <jra@samba.org>