summaryrefslogtreecommitdiffstats
path: root/source
Commit message (Collapse)AuthorAgeFilesLines
...
| * r21952: Fix critical (!) error found by IBM checker.Jeremy Allison2007-03-231-22/+28
| | | | | | | | | | | | | | Missing break statements meant that no info levels would ever be returned correctly from POSIX open/mkdir. Jeremy.
| * r21950: After discussion with the Apple and Linux client maintainers,James Peach2007-03-234-3/+17
| | | | | | | | | | | | | | | | | | | | | | | | changing the FindFirst response for the UNIX_INFO2 level to include a length field before the name. The name is not required to be null terminated. The length field does not count any null. Also add call to chflags(2) in the default VFS module so that this will work be default on BSD-derived platform. Add UNIX-INFO2 test to the build farm to get some non-BSD coverage. Jeremy and Jerry, please review for inclusion in 3.0.25.
| * r21948: Fix valgrind error in build farm samba3 smbtorture. We wereJeremy Allison2007-03-231-0/+2
| | | | | | | | | | using an uninitialized buffer for read/write tests. Jeremy.
| * r21947: Fix the equivalent of memcpy(x, x, 16). FoundJeremy Allison2007-03-231-1/+3
| | | | | | | | | | by valgrind on the build farm. Jeremy.
| * r21944: move acl header checks to the correct place onlyStefan Metzmacher2007-03-232-2/+2
| | | | | | | | | | | | jeremy: please merge this to 3.0.25:-) metze
| * r21942: Hoist by our own petard :-). Older smbclient binariesJeremy Allison2007-03-221-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | were not able to connect to the rewritten dfs code as they set the dfs flag bit but then send local paths. Now that our dfs code is a *lot* more robust in detecting this sort of braindamage we can just call into it directly on getting a DFS flag and let the parser sort it out without having to check it's actually connecting to a dfs enabled share (I'm proud of this code :-). Jeremy.
| * r21941: Attempt to fix bug 4460Volker Lendecke2007-03-221-1/+1
| |
| * r21940: Sorry Volker, I have to revert your revert in r21935.Gerald Carter2007-03-224-11/+48
| | | | | | | | | | We can talk about this later if you still feel that strongly but I need to fix the build for now.
| * r21939: Fix missing initialization thatJeremy Allison2007-03-221-1/+1
| | | | | | | | | | | | broke the build farm. Thanks to Metze for the heads up. Jeremy.
| * r21935: Revert obviously not sufficiently tested code -- sorry for the pain. ↵Volker Lendecke2007-03-224-48/+11
| | | | | | | | I am afraid I was basically off the net for the day
| * r21934: fix the build sorryStefan Metzmacher2007-03-221-1/+1
| | | | | | | | metze
| * r21933: Change the write_sock() call in pam_winbind_request()Gerald Carter2007-03-221-1/+1
| | | | | | | | | | | | | | | | | | to not request a privileged pipe operation for everything as this cannot be done from a process running under the context of a user (e.g. screensaver). Thanks to Danilo Almeida <dalmeida@centeris.com> for the help in pointing out the change to write_sock().
| * r21932: fix compiler warning.Stefan Metzmacher2007-03-221-1/+1
| | | | | | | | | | | | maybe also for 3.0.25 metze
| * r21931: include acl/libacl.h is presentStefan Metzmacher2007-03-222-1/+6
| | | | | | | | | | | | | | I'm not sure if this should go into 3.0.25... it fixes a compiler warning about a missing acl_get_perm() prototype metze
| * r21927: Removed unused variable.Jeremy Allison2007-03-221-1/+0
| | | | | | | | Jeremy.
| * r21926: Fix missing enum specifier pointed out by Don McCall @ HP.Jeremy Allison2007-03-224-17/+17
| | | | | | | | | | Thanks Don ! Jeremy.
| * r21925: Start to code up the gss acquire creds calls.Jeremy Allison2007-03-221-6/+32
| | | | | | | | Jeremy.
| * r21923: Add in the gss decrypt.Jeremy Allison2007-03-221-3/+45
| | | | | | | | Jeremy.
| * r21922: Fixed the build by rather horrid means. I really needJeremy Allison2007-03-217-100/+81
| | | | | | | | | | | | | | to restructure libsmb/smb_signing.c so it isn't in the base libs path but lives in libsmb instead (like smb_seal.c does). Jeremy.
| * r21919: now that the local passdb abd BUILTIN have been blacklisted and they ↵Simo Sorce2007-03-211-15/+0
| | | | | | | | | | | | | | | | | | always point to the passdb module, remove this comment and move the explanation in the dimap_ad man page. Simo.
| * r21918: Reverting this change as it is now causing aborts() in Gerald Carter2007-03-211-6/+1
| | | | | | | | | | find_builtin_domain(). This all needs more testing before anyone starts changing these lookup routines again.
| * r21917: Start to do the gss versions of sign+seal.Jeremy Allison2007-03-214-28/+85
| | | | | | | | Jeremy.
| * r21916: Fix couple of "return" calls on void functions.Jeremy Allison2007-03-211-2/+10
| | | | | | | | | | | | Ensure we ignore reqests to free keepalive buffers as we only copied these. Jeremy.
| * r21913: fix one bug in build 717: correctly check the return from ↵Gerald Carter2007-03-211-1/+1
| | | | | | | | sid_peek_check_rid() when trying to find a matching domain
| * r21912: There's no point checksumming the packet lengthJeremy Allison2007-03-211-4/+4
| | | | | | | | | | | | | | this already has to be right. This makes the signed+sealed area the same as it will be with gss calls. Now to go implement them. Jeremy.
| * r21905: RenameGerald Carter2007-03-212-11/+11
| | | | | | | | | | idmap expire time -> idmap cache time idmap negative time -> idmap negative cache time
| * r21904: Fix HP build -- thanks, DonVolker Lendecke2007-03-211-1/+1
| |
| * r21903: Get the length calculations right (I always forgetJeremy Allison2007-03-211-16/+18
| | | | | | | | | | | | | | the 4 byte length isn't included in the length :-). We now have working NTLMSSP transport encryption with sign+seal. W00t! Jeremy.
| * r21902: Don't free the thing you're trying to set in the cli state.Jeremy Allison2007-03-211-0/+1
| | | | | | | | Jeremy.
| * r21901: Don't use fstrcat when you mean fstrcpy. Doh !Jeremy Allison2007-03-211-3/+4
| | | | | | | | Jeremy.
| * r21900: Token exchange now seems to work, now why does theJeremy Allison2007-03-211-1/+1
| | | | | | | | | | client encrypt fail ? Jeremy.
| * r21899: At least we're getting to stage 2 of the blobJeremy Allison2007-03-211-4/+10
| | | | | | | | | | exchange. Still not working but closer. Jeremy.
| * r21898: Added test command, fixed first valgrind bugs.Jeremy Allison2007-03-213-5/+49
| | | | | | | | | | Now to investigate why it doesn't work :-). Jeremy.
| * r21897: Add in a basic raw NTLM encrypt request. NowJeremy Allison2007-03-217-20/+200
| | | | | | | | | | for testing. Jeremy.
| * r21894: Some refactoring of server side encryption context. SupportJeremy Allison2007-03-203-29/+149
| | | | | | | | | | "raw" NTLM auth (no spnego). Jeremy.
| * r21893: Update comments so they actually reflect reality...Rafal Szczesniak2007-03-201-3/+3
| | | | | | | | rafal
| * r21892: Mini-Patch from MichaelVolker Lendecke2007-03-201-2/+0
| |
| * r21891: Finish server-side NTLM-SPNEGO negotiation support.Jeremy Allison2007-03-201-33/+75
| | | | | | | | | | Now for the client part, and testing. Jeremy.
| * r21888: Add the osname and osver options to 'net ads join' as discussed Gerald Carter2007-03-201-1/+94
| | | | | | | | | | | | | | | | on the samba-technical ml. I'll add a 'net ads set attribute=value' utility later rather than the original 'net ads setmachineupn' patch that was also posted to the tech ml.
| * r21887: Fix annoying bug where in a pam_close_session (or a pam_setcred with theGünther Deschner2007-03-201-1/+29
| | | | | | | | | | | | | | | | | | PAM_DELETE_CREDS flag set) any user could delete krb5 credential caches. Make sure that only root can do this. Jerry, Jeremy, please check. Guenther
| * r21885: Chown logic should be activated only if nfs4:chown=yesAlexander Bokovoy2007-03-201-24/+26
| |
| * r21884: * Blacklist BUILTIN and MACHINE domains from theGerald Carter2007-03-202-18/+31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | idmap domains as these should only be handled by the winbindd_passdb.c backend * Allow the alloc init to fail for backwards compatible configurations like idmap backend = ad idmap uid = 1000-100000 .... * Remove the deprecated flags from idmap backend, et. al. These are mutually exclusive with the new configuration options (idmap domains). Logging annoying messages about deprecated parameters is confusing. So we'll try this apprpach for now.
| * r21883: Try and fix the build by removing the prototypes forJeremy Allison2007-03-202-2/+10
| | | | | | | | | | functions that take a gss context handle in includes.h Jeremy.
| * r21882: The server part of the code has to use an AUTH_NTLMSSP struct,Jeremy Allison2007-03-207-80/+327
| | | | | | | | | | | | | | | | not just an NTLMSSP - grr. This complicates the re-use of common client and server code but I think I've got it right. Not turned on of valgrinded yet, but you can see it start to take shape ! Jeremy.
| * r21881: Make sure we are very specific when testing whether a backand can ↵James Peach2007-03-202-2/+9
| | | | | | | | | | | | | | | | | | handle a particular SID. Make sure that the passdb backend will accept the same set range of local SIDs that the idmap system sends it. Simo, Jerry - this is a 3_0_25 candidate. Can you please review?
| * r21880: Make client and server calls into encryption code symetrical,Jeremy Allison2007-03-194-93/+224
| | | | | | | | | | depending on encryption context pointer. Jeremy.
| * r21879: Move process_blocking_lock_queue to a timed event.Volker Lendecke2007-03-192-52/+72
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The idea is that we have blocking.c:brl_timeout as a timed event that is present whenever we do have a blocking lock pending. It fires brl_timeout_fn() which calls process_blocking_lock_queue(). Whenever we make changes to blocking_lock_queue, we trigger a recalc_brl_timeout() which sets a new brl_timout event if necessary. This makes the call to blocking_locks_timeout_ms() in setup_select_timeout() unnecessary, this is implicitly done in event_add_to_select_args() from the timed events. Volker
| * r21878: Fix a bug with smbd serving a windows terminal server: If winbind ↵Volker Lendecke2007-03-195-12/+49
| | | | | | | | | | | | | | | | | | | | | | | | | | | | decides smbd to be idle it might happen that smbd needs to do a winbind operation (for example sid2name) as non-root. This then fails to get the privileged pipe. When later on on the same connection another authentication request comes in, we try to do the CRAP auth via the non-privileged pipe. This adds a winbindd_priv_request_response() request that kills the existing winbind pipe connection if it's not privileged. Volker
| * r21877: Missed one line.Jeremy Allison2007-03-191-0/+1
| | | | | | | | Jeremy.
| * r21876: Start adding in the seal implementation - prototype codeJeremy Allison2007-03-193-7/+198
| | | | | | | | | | | | | | | | for the server side enc. (doesn't break anything). I'll keep updating this until I've got NTLM seal working on both client and server, then add in the gss level seal. Jeremy.
generated by cgit (git 2.34.1) at 2025-09-28 12:51:52 +0000