Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | s4:libcli/wrepl: move wrepl_request_send/recv => ↵ | Stefan Metzmacher | 2010-03-07 | 1 | -6/+20 | |
| | | | | | | wrepl_request_internal_send/recv metze | |||||
* | s4:libcli/wrepl: add my copyright | Stefan Metzmacher | 2010-03-07 | 2 | -0/+2 | |
| | | | | metze | |||||
* | s4:libcli/wrepl: convert wrepl_associate_stop_send to tevent_req | Stefan Metzmacher | 2010-03-05 | 1 | -28/+83 | |
| | | | | metze | |||||
* | s4:libcli/wrepl: convert wrepl_connect_send to tevent_req | Stefan Metzmacher | 2010-03-05 | 1 | -65/+95 | |
| | | | | metze | |||||
* | s4:libcli/wrepl: convert wrepl_associate_send to tevent_req | Stefan Metzmacher | 2010-03-05 | 1 | -36/+98 | |
| | | | | metze | |||||
* | s4:libcli/wrepl: convert wrepl_pull_table_send to tevent_req | Stefan Metzmacher | 2010-03-05 | 1 | -39/+98 | |
| | | | | metze | |||||
* | s4:libcli/wrepl: convert wrepl_pull_names_send to tevent_req | Stefan Metzmacher | 2010-03-05 | 1 | -63/+142 | |
| | | | | metze | |||||
* | s4:libcli/wrepl: use UTIL_TEVENT | Stefan Metzmacher | 2010-03-05 | 2 | -1/+2 | |
| | | | | metze | |||||
* | s4:libcli/wrepl: avoid neested named structures | Stefan Metzmacher | 2010-03-05 | 1 | -15/+19 | |
| | | | | metze | |||||
* | s4-pvfs: move the private ntcreatex flags to private_flags | Andrew Tridgell | 2010-03-05 | 2 | -8/+7 | |
| | | | | | | | | Re-using two of the create_options bits was bound to eventually cause problems, and indeed, Windows7 now uses one of those bits when opening text files. Fixes bug 7189 | |||||
* | s4-dns-ex: use autoclose on the dns child pipe | Andrew Tridgell | 2010-03-05 | 1 | -2/+1 | |
| | | | | | | | I'm hoping this will fix an occasional segfault I've noticed where epoll still calls events on a closed fde Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
* | s4:move the sddl code down to the top level | Michael Adam | 2010-03-03 | 3 | -627/+2 | |
| | | | | Michael | |||||
* | s4-libcli: Added NULL handlers for DSDB_CONTROL_DN_STORAGE_FORMAT_OID and ↵ | Endi S. Dewata | 2010-03-02 | 1 | -0/+4 | |
| | | | | | | LDB_CONTROL_AS_SYSTEM_OID Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
* | s4-krb5: propogate errors from a lot more kerberos functions | Andrew Tridgell | 2010-02-26 | 1 | -0/+5 | |
| | | | | | | | | We need to be able to give sensible error messages when a kerberos calls fails. This propogates the kerberos error up the stack to the caller. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
* | s4/ldap: Refactor the fix for ldap nested searches | Kamen Mazdrashki | 2010-02-17 | 1 | -4/+0 | |
| | | | | | | | | | | | Current implementation synchronizes processing for all types of LDAP request, not only LDAP_Search ones. Synchronization for ldap replies processing is done locally in ldb_ildap module as this concerns only ildb_callback() function. Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com> | |||||
* | s4: Switch to S3-style id mapping data types. | Kai Blin | 2010-02-11 | 2 | -9/+9 | |
| | ||||||
* | s4-torture: allow host-only in unc lists in smbtorture | Andrew Tridgell | 2010-02-09 | 1 | -2/+2 | |
| | | | | | | | | | | Allow UNC lists like this: 192.168.2.1 192.168.2.2 192.168.2.3 the share name will be taken from the command line | |||||
* | Change uint_t to unsigned int in source4 | Matt Kraai | 2010-02-02 | 16 | -90/+90 | |
| | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org> | |||||
* | s4/ldap: Fix nested searches SEGFAULT bug | Kamen Mazdrashki | 2010-01-29 | 1 | -0/+4 | |
| | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org> | |||||
* | s4:libcli: remove unneeded talloc_reference() usage | Stefan Metzmacher | 2010-01-29 | 1 | -4/+1 | |
| | | | | metze | |||||
* | s4-libcli: Fixed a talloc_reference error. | Andreas Schneider | 2010-01-26 | 1 | -0/+1 | |
| | | | | | Signed-off-by: Andreas Schneider <asn@redhat.com> Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de> | |||||
* | libcli/util: add tstream_read_pdu_blob_send/recv | Stefan Metzmacher | 2010-01-08 | 1 | -0/+5 | |
| | | | | | | | This will take the some full_request callback function as the Samba4 packet code. metze | |||||
* | s4: Fix result check for getaddrinfo() | Kamen Mazdrashki | 2010-01-06 | 1 | -6/+11 | |
| | | | | | | | | | I think this completes commit 50feca550eed7828198b7c0fc5f0e5ddc863313d. Now result should be handled correctly both for systems that support EAI_NODATA but returns EAI_NONAME (as my Ubuntu 9.x) and systems that doesn't support EAI_NODATA at all. Signed-off-by: Stefan Metzmacher <metze@samba.org> | |||||
* | s4-sddl: DRS replication needs REVISION_ADS for SDs | Andrew Tridgell | 2010-01-02 | 1 | -1/+1 | |
| | | | | | DRS replication with w2k8-r2 fails with a schema mismatch error if we set the revision to NT4 | |||||
* | s4-net: fixed finddcs to use empty SID instead of NULL sid (NDR error) | Andrew Tridgell | 2009-12-31 | 1 | -0/+3 | |
| | ||||||
* | py/security: Add test for dom_sid.split. | Jelmer Vernooij | 2009-12-31 | 1 | -3/+8 | |
| | | | | Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
* | Fixed incorrect checking of PRINCIPAL_SELF permissions. | Nadezhda Ivanova | 2009-12-17 | 1 | -3/+12 | |
| | | | | | | If an ace has the PRINCIPAL_SELF as trustee, this sid has to be replaced with the onjectSid of the object being checked. PRINCIPAL_SELF is the way to grant rights to an account over itself. | |||||
* | s4-libcli: GUID_from_ndr_blob() is strict about the blob size | Andrew Tridgell | 2009-12-10 | 1 | -2/+4 | |
| | | | | We need to create a blob of the right length | |||||
* | s4-libcli: use GUID_to_ndr_blob() | Andrew Tridgell | 2009-12-10 | 2 | -11/+9 | |
| | ||||||
* | s4-libcli: use new GUID functions in libcli | Andrew Tridgell | 2009-12-10 | 3 | -18/+9 | |
| | ||||||
* | s4 torure: Add SMB2 utility functions | Zack Kirsch | 2009-12-07 | 1 | -0/+1 | |
| | | | | | - Add a torture_setup_dir() equivalent in SMB2, called smb2_util_setup_dir(). - Add verify_sd() and verify_attrib() helper functions for SMB2. | |||||
* | s4/libcli: add define for exclusive lock mode | Steven Danneman | 2009-12-07 | 1 | -0/+1 | |
| | ||||||
* | s4 torture: Add lockread_supported based off of CAP_LOCK_AND_READ | Zachary Loafman | 2009-12-03 | 2 | -0/+4 | |
| | | | | Signed-off-by: Tim Prouty <tprouty@samba.org> | |||||
* | s4: fix SD update and password change in upgrade script | Matthieu Patou | 2009-11-28 | 1 | -0/+20 | |
| | | | | | | | | | - reserve a new Samba OID for recalculate SD control - fix the update SD function - fix handling of kvno in the update_machine_account_password function - fix handling of handles in RPC winreg server Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
* | s4:security/sddl - rework of the security descriptor abbreviations | Matthias Dieter Wallnöfer | 2009-11-27 | 1 | -28/+33 | |
| | | | | | - Reoder them - Add some new ones (needed for the security descriptor in the provision script) | |||||
* | s4/libcli: rename previously reserved field in SMB2 LOCK struct | Steven Danneman | 2009-11-25 | 2 | -2/+2 | |
| | | | | | The lock.in.reserved field has been renamed lock_sequence in the SMB 2.1 dialect. See MS-SMB 2.2.26. | |||||
* | s4/libcli: Initialize client PID for SMB2 connections | Steven Danneman | 2009-11-25 | 3 | -0/+6 | |
| | | | | Set the SMB pid to the Unix pid of the client process. | |||||
* | s4:ldbcli - Added encoder/decoder for relax control. | Endi S. Dewata | 2009-11-19 | 1 | -2/+20 | |
| | ||||||
* | s4/libcli: add a FILE_NOTIFY_CHANGE_ALL macro | Aravind Srinivasan | 2009-11-17 | 1 | -0/+8 | |
| | | | | | This macro encompasses all possible file notifications that can be raised. | |||||
* | Fixed incorrect SID for RAS Servers. | Nadezhda Ivanova | 2009-11-17 | 2 | -1/+2 | |
| | ||||||
* | Fixed some major bugs in inheritance and access checks. | Nadezhda Ivanova | 2009-11-15 | 1 | -13/+16 | |
| | | | | | | | | Fixed sd creation not working on LDAP modify. Fixed incorrect replacement of CO and CG. Fixed incorrect access check on modify for SD modification. Fixed failing sec_descriptor test and enabled it. Fixed failing sd add test in ldap.python | |||||
* | s4:libcli/ldap Add 'relax' OID to known network representations | Andrew Bartlett | 2009-11-12 | 1 | -0/+2 | |
| | | | | | | | | This patch, inspired by a patche by Endi S. Dewata <edewata@redhat.com>, allows this control to be passed to the LDAP backend. Andrew Bartlett | |||||
* | Version 1.0 of the directory service acls module. | Nadezhda Ivanova | 2009-11-05 | 2 | -47/+60 | |
| | | | | | | | At this point, support for checks on LDAP add, delete, rename and modify. Old kludge_acl is still there to handle the searches. This module is synchronous as the async version was impossible to debug, will be converted to async after some user testing. | |||||
* | Fixed some missing flags and bugs in the security creation. | Nadezhda Ivanova | 2009-11-03 | 1 | -11/+47 | |
| | | | | | Also, added some logging. It needs improvement, possibly ability to turn in on and off via configuration file. | |||||
* | Fixed a bug in object specific access checks. | Nadezhda Ivanova | 2009-11-03 | 1 | -2/+4 | |
| | ||||||
* | s4:libcli/security/access_check - Add "const" in front of "type" | Matthias Dieter Wallnöfer | 2009-10-22 | 1 | -1/+1 | |
| | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
* | s4-acl: SEC_FLAG_MAXIMUM_ALLOWED doesn't auto-apply privilege access masks | Andrew Tridgell | 2009-10-17 | 1 | -6/+2 | |
| | ||||||
* | s4-security: honor more of the privilege access bits | Andrew Tridgell | 2009-10-17 | 1 | -4/+12 | |
| | ||||||
* | s4-libcli: fixed structure element bug in ntcreatexreadx | Andrew Tridgell | 2009-10-15 | 1 | -1/+1 | |
| | | | | | This one didn't matter until the root_fid changed the alignment of the two structures. | |||||
* | s4-smb: declare root_fid as a file handle | Andrew Tridgell | 2009-10-15 | 4 | -7/+7 | |
| | | | | | | In order to implement root_fid in the s4 SMB server we need to declare it as a handle type, just as for other fnum values in SMB. This required some extensive (but simple) changes in many bits of code. |