summaryrefslogtreecommitdiffstats
path: root/source
Commit message (Collapse)AuthorAgeFilesLines
* Fix bug #7072 - Accounts can't be unlocked from ldap.Jeremy Allison2010-02-241-8/+17
| | | | | | | | | | | | | | | | Fix suggested by Andy Hanton <andyhanton@gmail.com>. The LOGIN_CACHE struct contains two time_t entries, but was being written to and read from via tdb_pack/tdb_unpack functions using explicit 32-bit int specifiers. This would break on machines with a 64-bit time_t. Use correct int sizes for tdb_pack/tdb_unpack. We have to fix this properly before 2037 :-). Contains fixes from master 627fb85092f728065b6d772c41aeb75018154e86 and 69fd8461b8792f4fee1b61db03953044565492c6. Jeremy. (cherry picked from commit 0b36486fa7d2689635018c2fc883860251dc8066)
* Fix bug #7067 - Linux asynchronous IO (aio) can cause smbd to fail to ↵Jeremy Allison2010-02-243-5/+71
| | | | | | | | | | | | respond to a read or write. Only works on Linux kernels 2.6.26 and above. Grants CAP_KILL capability to allow Linux threads under different euids to send signals to each other. Same as mater commit 899bd0005f56dcc1e95c3988d41ab3f628bb15db. Jeremy. (cherry picked from commit cbf09baa90f5c4cfa8a0019ccc79211d72d13629)
* VERSION: Raise version up to 3.3.11.Karolin Seeger2010-02-241-1/+1
| | | | | Karolin (cherry picked from commit 7242d5ac288b88e151b368ae7d6fc623f60968da)
* s3: Fix a crash in libsmbclient used against the OpenSolaris CIFS serverVolker Lendecke2010-02-241-1/+1
| | | | | | | | | A user has sent me a sniff where the OpenSolaris CIFS server returns "32" in totalentries, but the array in ctr only contains 15 entries. Look at the right delimiter for walking the array. Fix bug #7046 (libsmbclient crash against OpenSolaris CIFS server). (cherry picked from commit 1d611028433db18e96d946b206a8eed1048f9b26)
* Fix bug 7045 - Bad (non memory copying) interfaces in smbc_setXXXX calls.Jeremy Allison2010-02-242-10/+31
| | | | | | | | | | | | | | | In smbc_free_context libsmbclient just called free() on the string options so it assumes the callers have malloced them before setting them via smbc_set calls. Change to correctly malloc/free string options to the library. Protect against SMB_STRDUP of null. Contains 2d41b1ab78639abe4ae030ff482573f464564dd7 and f85b6ee90b88c7f7b2a92c8a5f3e2ebe59c1087b from master. Jeremy (cherry picked from commit edc44312f76e14e94c56e70cf7bb49139f9f081e)
* s3-libsmbclient: Fix crash bug in SMBC_parse_path().Günther Deschner2010-02-241-1/+1
| | | | | | | | | | | | Patch from Tim Waugh <twaugh@redhat.com>. This resolves https://bugzilla.redhat.com/show_bug.cgi?id=552658 LIBSMBCLIENT-OPENDIR torture test checks this as well. Guenther Fix bug #7043 (SIGSEGV in "SMBC_parse_path"). (cherry picked from commit 07263901632bb98851d86dc0ba1d2dc22735c020)
* Fix bug #7036 - net rpc getsid fails in hardened windows environments.Jeremy Allison2010-02-241-1/+7
| | | | | Fix suggested by Dave.Daugherty@Centrify.com. (cherry picked from commit a92d42cf8ae37fe579061f762af601dc49ed71af)
* s3:configure: only check for gpfs_gpl.hStefan Metzmacher2010-01-141-25/+5
| | | | | | | | | | | | | The header is everything we need in order to build vfs_gpfs. metze Signed-off-by: Michael Adam <obnox@samba.org> (cherry picked from commit ee13e9c0becc2b4a4d3b233613d5e3e9bfb54938) Fix bug #6856. (cherry picked from commit b71f0e5f6f715d7c061d3a845f1e983e2472c1b0) (cherry picked from commit 3f0de150f64f93c7874290160359a89b518864b5)
* s3:pdb_ldap: restore Samba 3.0.x behavior and use the first "uid" value.Stefan Metzmacher2010-01-131-1/+1
| | | | | | | | | See bug #6157 for more details. metze Signed-off-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit 25806f43ddee7e2653e907eea2c6fcc075960fa1)
* s3:smbldap: add smbldap_talloc_first_attribute()Stefan Metzmacher2010-01-132-0/+37
| | | | | | | metze Signed-off-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit c992127f8a96c37940a6d298c7c6859c47f83d9b)
* smbd: Fix opening the quota magic fileStefan Metzmacher2010-01-131-5/+10
| | | | | | | This fixes bug #6642 and bug #6919. metze (cherry picked from commit c30bd2f2ac1c79a4c3893b2c28e0ba7997685c01)
* s3:smbd: Fix bug 6696Timothy Miller2010-01-131-1/+1
| | | | | smbd crashes when using mdns (not avahi) support (cherry picked from commit b6ce8928e88d92c5a5d703b52e6dc95a5c79d732)
* Second part of fix for bug 6696 - smbd 3.3.7 crashes (signal 11) in ↵Jeremy Allison2010-01-131-0/+6
| | | | | | dns_register_smbd_reply. Restore the code from 3.2 that actually initializes the struct dns_reg_state handle. Jeremy. (cherry picked from commit b87c794f99d7909e907b1d115c317bebd55984ed)
* Re-fix bug 5202 - cannot change ACLs on writable file with "dos filemode=yes"Jeremy Allison2010-01-131-0/+3
| | | | | | | | | | | | | | | | This bug re-occurred for 3.3.x and above. The reason is that to change a NT ACL we now have to open the file requesting WRITE_DAC and WRITE_OWNER access. The mapping from POSIX "w" to NT permissions in posix_acls doesn't add these bits when "dos filemode = yes", so even though the permission or owner change would be allowed by the POSIX ACL code, the NTCreateX call fails with ACCESS_DENIED now we always check NT permissions first. Added in the mapping from "w" to WRITE_DAC and WRITE_OWNER access. Jeremy. (cherry picked from commit 9bd957580360ed7a0f98b02d1e03d7fcaf8a878e)
* Prevent NULL dereference if group has no membersJim McDonough2010-01-131-4/+4
| | | | | Fix bug #7014 (domain mode winbind crashes retriveing empty group members). (cherry picked from commit 5fd32614f147a045aaee30ed9cf62e42ac6e30d8)
* Fix bug 7005 - mangle method = hash truncates files with dot '. ' characterJeremy Allison2010-01-131-0/+9
| | | | | | | | Don't change the contents of a const string via a pointer alias (or if you do, change it back.....). Jeremy. (cherry picked from commit e3be5ddae764fae7ff4a3ef502e8461d0535bdc5)
* Fix bug #6939 - mangling method = hash breaks long filenames.Jeremy Allison2010-01-131-1/+4
| | | | | | | | We were returning the wrong sense of the bool. must_mangle() has to return !NT_STATUS_IS_OK, not NT_STATUS_IS_OK. Jeremy. (cherry picked from commit f249d2d5893a3f8494e43fd1a805c78cee8eeec5)
* Second part of fix for 6875 - trans2 FIND_FIRST2 response --> FIND_FIRST2 ↵Jeremy Allison2010-01-132-18/+25
| | | | | | | | | Data -> Fille Attributes are returned as 0x220 for LANMAN2.1 dial Ensure dos_mode can return FILE_ATTRIBUTE_NORMAL, then filter the returned attributes by protocol level. This makes us consistant in returning DOS attrs across all replies. Tested on OS/2 by Günter Kukkukk. Jeremy. (cherry picked from commit b53ee9ffe9d265e254a2c0b11bfcd7e6314ab13f)
* s3 aclocal.m4: Fix iconv checks, clean up m4 codeKai Blin2010-01-131-27/+30
| | | | | | | | | | | | | | | | | The check for iconv requiring giconv.h and libgiconv as well as the check for iconv requiring biconv.h and libbiconv were using the wrong variable to check for previous successful test results. This caused the checks to always fall back to libbiconv on systems where that library was available. In the course of fixing this, I had to clean up the indentation in that piece of code, and I also rewrote/added some comments. Many thanks to Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp> for the initial patch and diagnosis. (cherry picked from commit f5aff324cb9d965bbc75634596c3c40ffc588183) Fix bug #4832 (iconv library is not used). (cherry picked from commit a706038680ffcc3124b5e476810bffb1f7578c06)
* s3: Fix a segfault in "net" version 3.3Volker Lendecke2010-01-131-1/+1
| | | | | | | | | | When neither LOGNAME nor -U is set, "net" and probably other client utils segfault. Reported by "vinnix" on irc. Volker Fix bug #6973 (segfault in client tools). (cherry picked from commit 6aa17a7b82333de674274045f574bf6c0ce72638)
* s3-kerberos: fix the build on Mac OS X 10.6.2.Günther Deschner2010-01-131-1/+1
| | | | | | Guenther (cherry picked from commit 51328a7056918bc75a7c1c442f47cf0271075542) (cherry picked from commit 0a165844459eb0e04fa14a33f338c80669e3a92c)
* s3-kerberos: add a missing reference to authdata headers.Günther Deschner2010-01-131-0/+1
| | | | | | Guenther (cherry picked from commit da79cbb0800dd647be864e8bbb5fe1132708174b) (cherry picked from commit 9acd2394edf2504df23d0ce93f4bafc88c83323b)
* s3-kerberos: do not include authdata headers before including krb5 headers.Günther Deschner2010-01-132-1/+1
| | | | | Guenther (cherry picked from commit 9329564e44a1432251acb7f0afaf1bd04b8cb957)
* s3-kerberos: only use krb5 headers where required.Günther Deschner2010-01-1320-203/+245
| | | | | | | | This seems to be the only way to deal with mixed heimdal/MIT setups during merged build. Guenther (cherry picked from commit 60262369fc2ae19f6d9263e35b5db9b09b603a1b)
* s3-kerberos: Fix Bug #6929: build with recent heimdal.Günther Deschner2010-01-132-1/+20
| | | | | | | | | Heimdal changed the KRB5_DEPRECATED define (which now may not take an identifier for activation) in new releases (like 1.3.1). Guenther (cherry picked from commit 1a8f8382740e352a83133b8c49aaedd4716210cd) (cherry picked from commit a6572bb03fcd323ce03b22ccd713181235f3b0e6)
* s3-kerberos: next step to resolve Bug #6929: build with recent heimdal.Günther Deschner2010-01-132-4/+8
| | | | | | | | | | Based on patch from Allan <allan@archlinux.org>. Also should fix the FreeBSD build on the buildfarm. Guenther (cherry picked from commit 5b3a32be97a37c119e837bdee8f049684565458c) (cherry picked from commit d89231e76c618c5d10244ed4bec68dac8fa9cb3c)
* s3-kerberos: add check for prerequisite krb5/krb5.h header while checking ↵Günther Deschner2010-01-131-2/+7
| | | | | | | | | | for krb5/locate_plugin.h. (Needed for new Heimdal versions). Guenther (cherry picked from commit c438b2b3923db66672ec82e795eef543de5fcb8a) (cherry picked from commit e5592560bb8f90446bd8cbe8019663cbf00e22ab)
* nsswitch: fix compile of winbind_krb5_locator with recent Heimdal versions.Günther Deschner2010-01-131-0/+1
| | | | | | Guenther (cherry picked from commit 51864219cc12ceb66c281355f3e1191d5e32842d) (cherry picked from commit dff3d01119c91fbdac613508c64f3f8fc0b8a413)
* cifs.upcall: 2nd part of fix for Bug #6868: support building with Heimdal we ↵Günther Deschner2010-01-131-0/+2
| | | | | | | | well as with MIT. Guenther (cherry picked from commit 660ee2e74523194e5f6b2b6428d76628beb74717) (cherry picked from commit 1d5af511dd6f88d211b6c63b1e2d9d7ec97b03ad)
* s3-build: really fix build of winbind_krb5_locator.Günther Deschner2010-01-131-1/+1
| | | | | | Guenther (cherry picked from commit fc9f199f2619635f73e8ee7f3b5359521d63f325) (cherry picked from commit 3aaec6a346a88b732e66796514bc21e47c23e850)
* nsswitch: fix the build of the winbind krb5 locator plugin.Günther Deschner2010-01-131-1/+1
| | | | | | Guenther (cherry picked from commit b9d9353b548d9b2ab684aa171f511174e6414762) (cherry picked from commit 087c41e390b8be513016ca29a96d1702b0d03587)
* cifs.upcall: Fix Bug #6868: support building with Heimdal we well as with MIT.Günther Deschner2010-01-131-18/+16
| | | | | | Guenther (cherry picked from commit b29eed492f1c056adb0b53510be10e738276ca11) (cherry picked from commit cca1f7a80317e09208a9e56ff2744b113e0dfbc5)
* s3-kerberos: add smb_krb5_principal_get_realm().Günther Deschner2010-01-132-1/+27
| | | | | Guenther (cherry picked from commit bddafc6de8e37e014d7f074b6107dda6f76ebdc5)
* s3-kerberos: fix some build warnings when building against heimdal.Günther Deschner2010-01-131-2/+2
| | | | | Guenther (cherry picked from commit 6664d015c986946c509f4f8d3524f84fb2f34ff1)
* kerberos: fix some heimdal build warnings.Günther Deschner2010-01-131-4/+4
| | | | | Guenther (cherry picked from commit ce1bea7d692dcf09faafa0941c15313d0d75a9c8)
* s3: Fix shadow copy display on Windows 7Volker Lendecke2010-01-131-1/+1
| | | | | | | | Windows 7 is a bit more picky on our NT_STATUS_BUFFER_TOO_SMALL. Announce the right buffer size, the same amount we later check for. Fix bug #6850 (Shadow Copy Support for VISTA / Windows 7). (cherry picked from commit dc3d1f2f073f135bf48a08163010465ba88b9d37)
* s3: Fix bug 6338 -- net rpc trustdom list always display "none"Volker Lendecke2010-01-131-8/+20
| | | | (cherry picked from commit ff9d20909cdce671d92f1d5cee1249db465efa9b)
* clikrb5: Prefer krb5_free_keytab_entry_contents to krb5_kt_free_entry.Jelmer Vernooij2010-01-131-3/+8
| | | | | | | | Both functions exist in MIT Kerberos >= 1.7, but only krb5_free_keytab_entry_contents has a prototype. Part of a fix for bug #6918 (Build breaks with krb5-client-1.7-6.1.i586). (cherry picked from commit f7f183aba2c53426620bab7e934ce79b516dc4fc)
* s3:idmap_ldap: trim the " chars from the location string in idmap_ldap_db_initMichael Adam2010-01-131-0/+2
| | | | | | | | | | | | | Fix bug #6910 (idmap_ldap stumbles over idmap backend = ldap:"ldap://ldap1 ldap://ldap2"=. When idmap backend is specified as idmap backend = ldap:"ldap://server1 ldap://server2" then currently "ldap://server1 ldap://server2" was passed to ldap_initialize including the quotes, leading to an ldap error. Michael (cherry picked from commit 67f1d0ac6edecec4efb100ae61bc23bd321f518f)
* s3: fixed krb5 build problem on ubuntu karmicAndrew Tridgell2010-01-132-0/+13
| | | | | | | | | | | Karmic has MIT krb5 1.7-beta3, which has the symbol krb5_auth_con_set_req_cksumtype but no prototype for it. See also http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=531635 (cherry picked from commit a6e4cb500b4162cae1d906a1762507370b4ee89e) Part of a fix for bug #6918. (cherry picked from commit fbaed41c8f583f633673aca2f600c517744d28b5)
* s3-rpc_client: make sure cli_rpc_pipe_open_schannel() does not always return ↵Günther Deschner2010-01-131-1/+3
| | | | | | | | | | NT_STATUS_OK. Guenther Part of a fix for bug #6697. And hopefully a fix for bug #6889. (cherry picked from commit b6f1eced1f88b747c4cc8077ebf6bf4370100e09)
* s3-rpc_client: protect rpc_pipe_np_smb_conn against a NULL struct ↵Günther Deschner2010-01-131-0/+3
| | | | | | | | | rpc_pipe_client. Guenther Part of a fix for bug #6697. (cherry picked from commit 1fe281e25708b999a3e9ef1d5808a79995fbb438)
* Second part of the fix for bug 6828 - infinite timeout occurs when byte lock ↵Jeremy Allison2010-01-131-8/+1
| | | | | | held outside of samba. Fixes case where a connection with a pending lock can me marked "idle", and ensures that the lock queue timeout is always recalculated. Jeremy. (cherry picked from commit 31bb625273aac6e3e19f95465580b3bcb1885549)
* Fix bug 6875 - trans2 FIND_FIRST2 response --> FIND_FIRST2 Data -> Fille ↵Jeremy Allison2010-01-131-0/+14
| | | | | | Attributes are returned as 0x220 for LANMAN2.1 dialect Jeremy. (cherry picked from commit f871ff6367b7bd1b49e8aab649f614fd511bfa6a)
* Fix bug 6880 - cannot list workgroup servers reported by Alban Browaeys ↵Jeremy Allison2010-01-131-5/+14
| | | | | | <prahal@yahoo.com> with fix. Revert 2e989bab0764c298a2530a2d4c8690258eba210c with extra comments - this broke workgroup enumeration. Jeremy. (cherry picked from commit ed99189208b65bcc1a108c4f1a60c0535e75022c)
* Fix bug 6867 - trans2findnext returns reply_nterror(req, ntstatus) In a ↵Jeremy Allison2010-01-131-12/+16
| | | | | | directory with a lot of files. Jeremy. (cherry picked from commit 92c618cf167b3e9b18db986b05b2c4188b57f882)
* s3: Fix crash in pam_winbind, another reference to freed memory.Bo Yang2010-01-131-3/+7
| | | | | | | Fix bug #6840. Signed-off-by: Bo Yang <boyang@samba.org> (cherry picked from commit 1791b1cc43ce744c73b473aff0e311acbdf0ee4e)
* Fix bug 6829 - smbclient does not show special characters properly. All ↵Jeremy Allison2010-01-132-0/+5
| | | | | | successful calls to cli_session_setup() *must* be followed by calls to cli_init_creds() to stash the credentials we successfully connected with. There were 2 codepaths where this was missing. This caused smbclient to be unable to open the \srvsvc pipe to do an RPC netserverenum, and cause it to fall back to a RAP netserverenum, which uses DOS codepage conversion rather than the full UCS2 of RPC, so the returned characters were not correct (unless the DOS codepage was set correctly). Phew. That was fun to track down :-). Includes logic simplification in libsmb_server.c Jeremy. (cherry picked from commit bbeda1398687b79596769a5d046e1e0f249bd382)
* Fix bug 6828 - infinite timeout occurs when byte lock held outside of samba ↵Jeremy Allison2010-01-131-8/+18
| | | | | | Jeremy. (cherry picked from commit 4fce98ce2578f4bc5063a766fdacbdd5f840e446)
* s3: Don't fail authentication when one or some group of ↵Bo Yang2010-01-131-2/+23
| | | | | | | | | require-membership-of is invalid. Signed-off-by: Bo Yang <boyang@samba.org> Fix bug #6826. (cherry picked from commit 74b861908edc427d57928a7af0aa7ffd5fdb8d5a)