summaryrefslogtreecommitdiffstats
path: root/source
Commit message (Collapse)AuthorAgeFilesLines
...
* Handle arbitrary new PAC typesAndrew Tridgell2008-09-081-1/+1
| | | | | | | | When MS introduces a new PAC type, we should just ignore it, not generate a parse error. New PAC info structures are supposed to be backwards compatible with old ones (cherry picked from commit 2971b926c835412b02c93ad1e30f1471bc0a3612) (cherry picked from commit 843e9ebbf63f84270f8638a8e79538523b2148a8)
* re-run make idl after Jelmer's "poperly cast array lengths" pidl change.Michael Adam2008-09-0816-124/+124
| | | | | | | (f321240fa91fa19c1131f119c42f64897d220682) Michael (cherry picked from commit cd3f4ee593e606e48cd104df222f8bda8e370a58)
* fixed an errno handling bug that could lead to an infinite loopAndrew Tridgell2008-09-081-2/+2
| | | | | (cherry picked from commit 5ccdc58ce91ee40ca7171dd040191291aeb7fe02) (cherry picked from commit 1361caecb355047001f8a351ec2e6f10d7f0e741)
* fixed tsmsm_sendfile(). The logic was totally broken.Andrew Tridgell2008-09-081-4/+7
| | | | | (cherry picked from commit 794e48b809036871287df8416a2c669b7e26f216) (cherry picked from commit 3ce3f7f58402b98ce386bab1c40988e5ccd40d15)
* configure: fix typo in GNU ld version-script test.Michael Adam2008-09-081-1/+1
| | | | | | Michael (cherry picked from commit 0d9f3dfc4c139938ee57b6cf60c29cf4ce404be7) (cherry picked from commit 2381ec3b3f6a4798c15f4d3f3aee8caea8f48941)
* Fix winbindd crash bug with trusted domains. Bug #5736James Ding2008-09-081-0/+2
| | | | (cherry picked from commit 2d84b9a1024f68657f75aa7e0c4091b8c7afd194)
* get rid of unneeded argument for get_alloc_methods as wellHerb Lewis2008-09-081-9/+5
| | | | (cherry picked from commit 59415cb8b3ce7981dbf576086e13675f343581a4)
* get rid of unneeded argument for get_methodsHerb Lewis2008-09-081-14/+10
| | | | (cherry picked from commit 2a085d5343ab954e1bd60c11033506dc7c9040e3)
* Cleanup of DC enumeration in get_dcs()Steven Danneman2008-09-082-29/+90
| | | | | | | | | | | | This is a fix for a few small inefficiencies/bugs in the get_dcs() path. * because the third add_one_dc_unique() loop was outside the ADS check all DCs returned from the non-sitename lookup were being tacked onto the dc_name_ip list twice. * add_one_dc_unique() now checks if the given IP address already exists before adding it to the list, making the returned list actually unique * added more thorough doxygen comment headers (cherry picked from commit edd234e7a22dab105256f90df36d86f168dcea4c)
* kerberos: fix indent of enc type lines in generated krb5.conf files.Günther Deschner2008-09-081-3/+3
| | | | | | Guenther (cherry picked from commit 18a26f08b6fab4119a1421a7ca59c32dde8bb8cb) (cherry picked from commit 8d6220a94667c5906ead5fa80b6afabc82159b53)
* Fix bug #5729. Explicitly allow "-valid".Jeremy Allison2008-09-081-1/+1
| | | | | Jeremy (cherry picked from commit 96b5e691149c449253e4875a743c8603b3298c2b)
* The msync manpage reports that msync *must* be called before munmap. Failure ↵Simo Sorce2008-09-082-2/+8
| | | | | | to do so may result in lost data. Fix an ifdef check, I really think we meant to check HAVE_MMAP here. (cherry picked from commit bfced01a92ae1a4913c0c9aba27e7b43e06f9032)
* Fix Coverity ID 587Volker Lendecke2008-09-081-1/+1
| | | | | | | | | | | | | | | | | | | | | The following test program prints "8" on 64-bit :-) static void print_size(const char lenbuf[4]) { printf("sizeof(lenbuf) = %d\n", (int)sizeof(lenbuf)); } int main(void) { const char lenbuf[4]; print_size(lenbuf); return 0; } Jeremy, please check :-) Volker (cherry picked from commit 9daea0ccfdda58450be3c9a9a94c016f5900c319) (cherry picked from commit 11fdeeeb551ac3287b75e114b15bc4f76cf2d337)
* Deal with systems that don't initialize birthtime correctly.Jeremy Allison2008-09-011-4/+10
| | | | | | Pointed out by SATOH Fumiyasu <fumiyas@osstech.jp>. Jeremy. (cherry picked from commit 4876e4ffe9f5142bf90dc14b105436eaca35d3f4)
* Add st_birthtime and friends for accurate create times on systems that ↵Jeremy Allison2008-09-013-13/+124
| | | | | | | | support it (*BSD and MacOSX). This really needs to be in 3.2.x. Should have done this ages ago, sorry. Jeremy. (cherry picked from commit 0cba30073410ba499834ac26dee3f81a75c8de4f)
* winbindd: fix invalid sid copy (hit when enumerating sibling domains).Günther Deschner2008-08-281-1/+1
| | | | | | Guenther (cherry picked from commit 5eee7423351ffd05486e33ff8eb905babcbc9422) (cherry picked from commit 9f0bc4ff17b5a11dc412d0b5bc136476f3209a0c)
* Fix the wcache_invalidate_samlogon calls.Jeremy Allison2008-08-282-3/+24
| | | | | Jeremy. (cherry picked from commit 0a0795fd0310cc44dac0df312325df6d08e38cdb)
* Correct the netsamlogon_clear_cached_user function.Ephi Dror2008-08-281-36/+18
| | | | (cherry picked from commit 85dd9c64ca2ffa31d02ee10a3745fd596e80786e)
* Be explicit about setting perms for the ldb. Helps others who may use this api.Jeremy Allison2008-08-281-0/+3
| | | | | Jeremy. (cherry picked from commit 9f1bb27bf566069dab48eea125c22a5e20849774)
* mount.cifs: unclear error message with "credentials"Steve French2008-08-281-2/+3
| | | | | Thanks to Christophe Curis for the suggestion (cherry picked from commit a122df5dc01ed9767c53d77a73aabd44f7c8a7ca)
* become root for AIO operationsAndrew Tridgell2008-08-281-1/+7
| | | | | | | We need to become root for AIO read and write to allow the AIO thread to send a completion signal to the parent process when the IO completes (cherry picked from commit 27b1ae601542ebe2e23ab4ff81eb14f8e03a3caf)
* EINVAL is also a valid error return, meaning "this filesystemAndrew Tridgell2008-08-281-2/+3
| | | | | cannot do sendfile for this file" (cherry picked from commit dc04b5adf7569b3501cb95f86d01e00276b41c23)
* Avoid a race condition in glibc between AIO and setresuid().Andrew Tridgell2008-08-281-11/+13
| | | | | | | | | | | | | | See this test: http://samba.org/~tridge/junkcode/aio_uid.c The problem is that setresuid() tries to be clever about threads, and tries to change the euid of any threads that are running. If a AIO read or write completes while this is going on then the signal from the thread where the IO completed is lost, as it gets -1/EPERM from rt_sigqueueinfo() The simplest fix is to try to use setreuid() instead of setresuid(), as setreuid() doesn't try to be clever. Unfortunately this also means we must use become_root()/unbecome_root() in the aio code. (cherry picked from commit 319cea52d259e347061658cfbae56ab350b09671)
* Fix bug 4516, no IPv6 on Solaris 2.6.David Leonard2008-08-281-3/+22
| | | | (cherry picked from commit ec178599d37d6633697650c54c3588afedea9b7e)
* cifs.upcall: bump SPNEGO msg version number and don't reject old versionsJeff Layton2008-08-282-3/+3
| | | | | | | | | | | | | When we added the ability for the kernel to send sec=mskrb5 to the upcall, we subtly broke old cifs.upcall versions that don't understand it. Bump the spnego message version to 2 to make this clear. Also, change cifs.upcall to not reject requests with a version that's lower than the current one, and to send the reply with the same version that the request sent. The idea is to try and keep cifs.upcall backward compatible with old kernels. Signed-off-by: Jeff Layton <jlayton@redhat.com> (cherry picked from commit 2744bcbf3f22102911b5a3c4676e7d2f970a86eb)
* Don't re-initialize a token when we already have one. This fixes the build ↵Jeremy Allison2008-08-282-10/+16
| | | | | | | | farm failures when winbindd connects as guest. This one took a *lot* of tracking down :-). Jeremy. (cherry picked from commit f845c95dcfa0b1630a0057c62941bb8a72ebdd83)
* winbindd: Fix crash in cm_connect_sam()Gerald (Jerry) Carter2008-08-281-2/+7
| | | | | | | | | | | | | | Fix segv when talking to parent DC (joined to child domain). The root cause was (a) storing the parent domain in the cli_state struct caused the NTLMSSP pipe bind to fail which made us fallover to the schannel code path (b) the dcinfo pointer in cm_get_schannel_dcinfo() was returning NULL even though the function indicated success. (cherry picked from commit 5ce4a2ae6697970ea37d0078a506615b4b7a9a9c) (cherry picked from commit 72d138adc200ab36e324721900af1a06d0879318)
* cifs.upcall: fix build warningJeff Layton2008-08-281-1/+2
| | | | | Signed-off-by: Jeff Layton <jlayton@redhat.com> (cherry picked from commit dffb2d8eea03bb75224c3d8b4d0ab210993c645a)
* Fix Bug #5710 and make machine account password changing work again.Günther Deschner2008-08-281-23/+52
| | | | | | | | | | When we negotiated NETLOGON_NEG_PASSWORD_SET2 we need to use NetrServerPasswordSet2 to change the machine password. Tested with NT4, W2k, W2k3 and W2k8. Guenther (cherry picked from commit 8ae7040a5e64f1a1d2088aeca1dab90470455d8a)
* re-run make idl.Günther Deschner2008-08-284-14/+40
| | | | | | Guenther (cherry picked from commit f24cef9fa7be45212744d39b7c66804e64147afd) (cherry picked from commit 059979f8e7d7d0459f83184ad5b06a8e6281f558)
* IDL: fix IDL for netr_ServerPasswordSet2().Günther Deschner2008-08-281-3/+3
| | | | | | Guenther (cherry picked from commit 7b312a0abc6de5a51555ccfbde7f8f78fc11d043) (cherry picked from commit d9fa27a079dde0ebd9c2d6dc1c1bff3ae570f9e8)
* Fix bug 5698 - mixup of TALLOC/malloc. Spotted by Douglas Wegscheid ↵Jeremy Allison2008-08-281-2/+3
| | | | | | | <Douglas_E_Wegscheid@whirlpool.com>. Jeremy. (cherry picked from commit 02e260ab5254c9691846f7009f685e1b11032f80)
* build: fix bug #5590 by not linking in the static libs but the objects.Michael Adam2008-08-281-1/+1
| | | | | | Michael (cherry picked from commit 6ad2090391a92ebe822b2d7b80e180c251dc8e7a) (cherry picked from commit 24459c7eda080a4fed2d4f2a576c97f878f905f9)
* build: fall down to the same place when using an internal lib statically.Michael Adam2008-08-281-1/+1
| | | | | | Michael (cherry picked from commit 702c0bc04668117e3521d687b9b5a87fd7e0f1b1) (cherry picked from commit f3ad03d0f909ff862411511d9f63e77047034c01)
* build: rename LIBNETAPI_OBJ1 to LIBNETAPI_OBJ0 for consistency.Michael Adam2008-08-281-4/+4
| | | | | | Michael (cherry picked from commit ead9b9d7167d999d73cf4111f3b321236aac2a15) (cherry picked from commit 8dd57f31b2ba621654f989e1ed58bd2dd80b7849)
* fix build warning.Günther Deschner2008-08-281-1/+1
| | | | | | Guenther (cherry picked from commit a75055be5ff7ebe3476cfac86c6597a56a843c23) (cherry picked from commit d0a4b9f69984ca5da0007af91013f1bc78dcbf2b)
* fix another build warning.Günther Deschner2008-08-281-2/+2
| | | | | | Guenther (cherry picked from commit 43693ce6c678b961fa516bbf502af92f87cd5346) (cherry picked from commit 2a5ae59f77c05c41c97747dee9bc8c196dfe6b89)
* nss_winbind: When returning NSS_UNAVAIL, squash errno to ENOENTGerald (Jerry) Carter2008-08-281-2/+18
| | | | | | | | | | | | According to the GNU libc nss guide, we should always set errno to ENOENT when returning NSS_UNAVAIL. http://www.gnu.org/software/libtool/manual/libc/NSS-Modules-Interface.html#NSS-Modules-Interface At least the MQ Series message queing service that runs on WebSphere will fail if you return any other errno in this case. (cherry picked from commit ee26664602445fa7798e2061f6bcbef0756d6528) (cherry picked from commit 29b39723b82f363d32dc4678d6b71a78485c65ce)
* smbd: fix the handling of create_options to pass RAW-OPENStefan Metzmacher2008-08-283-4/+28
| | | | | | | | | | Some of the bits generate INVALID_PARAMETER and some bits are ignored when they come from a client, that's why we need to use bits from the ignored range for our internal usage. metze (cherry picked from commit 7b4c8a4e39f310eb450918fa841b0ea1b4af19f7) (cherry picked from commit 3366ac2857820d87fb36a1357786a3564d258da5)
* cifs.upcall: handle MSKRB5 OID properlyJeff Layton2008-08-281-5/+13
| | | | | | | | | | | When the kernel sends the upcall a sec=mskrb5 parameter, that means the the MSKRB5 OID is preferred by the server. This patch fixes the upcall to use that OID in place of the "normal" krb5 OID when it gets a sec=mskrb5 parameter. Signed-off-by: Jeff Layton <jlayton@redhat.com> Acked-by: Steve French <smfrench@gmail.com> (cherry picked from commit 3d96409c115b3ad4ef29ff75e40b39a26e316afe)
* Fix bug 5697 nmbd spins in reload_interfaces when only loopback has an IPv4 ↵Jeremy Allison2008-08-283-9/+13
| | | | | | | | address reported by Ted Percival <ted@midg3t.net>. Jeremy. (cherry picked from commit 4ac537d1b78c915fe25c219958312cf22f3cba80)
* build: fix linking cifs.upcall when nscd_flush_cache() is found.Michael Adam2008-08-281-1/+1
| | | | | | Michael (cherry picked from commit 661b7fdffda40a9ca7cb36627dbaf91cb4357cd0) (cherry picked from commit 7401c6a5b74c9c82c02923e6eafa6072a5d5678f)
* VERSION: Raise version number up tp 3.2.4.Karolin Seeger2008-08-281-1/+1
| | | | Karolin
* ldb: Fix permissions of new ldg files.samba-3.2.3Karolin Seeger2008-08-271-1/+1
| | | | | | | | This one fixes together with 2eaf4ed62 bug #5715 and CVE-2008-3789. Thanks to Steve Langasek <vorlon@debian.org> for reporting! Karolin
* ldb: Fix permissions of group_mapping.ldb.Andrew Tridgell2008-08-271-1/+7
| | | | This one fixes bug #5715 and CVE-2008-3789.
* Revert "build: fix linking cifs.upcall when nscd_flush_cache() is found."Karolin Seeger2008-08-271-1/+1
| | | | This reverts commit a7058ed1ef2622abdb75fe997ce4a5c570898929.
* Revert "Fix bug 5697 nmbd spins in reload_interfaces when only loopback has ↵Karolin Seeger2008-08-273-13/+9
| | | | | | an IPv4 address" This reverts commit 435c10268bb6987ab7e8206cd6c45bd9961c5632.
* Revert "cifs.upcall: handle MSKRB5 OID properly"Karolin Seeger2008-08-271-13/+5
| | | | This reverts commit 64ebfe4b2e5b7e3e07a0af424b35000693148e48.
* Revert "smbd: fix the handling of create_options to pass RAW-OPEN"Karolin Seeger2008-08-273-28/+4
| | | | This reverts commit ebd1f8f9297b31353d094ddccc320a83f02877ce.
* Revert "nss_winbind: When returning NSS_UNAVAIL, squash errno to ENOENT"Karolin Seeger2008-08-271-18/+2
| | | | This reverts commit 15e8e23466ae959bd0efc540c287338dbcd0b7a6.