Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| * | r21642: Fix bug 4365. Please note that this was only tested with Vista so ↵ | Volker Lendecke | 2007-03-01 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | | | | | | | | | far, it needs testing with other clients as well. I'm afraid I'm visiting a conference tomorrow and saturday, so I'd be happy to get support in this. Thanks, Volker | |||||
| * | r21641: Add test code for POSIX pathname calls into smbclient. | Jeremy Allison | 2007-03-01 | 1 | -0/+147 | |
| | | | | | | | | Jeremy. | |||||
| * | r21640: Fix the build for broken platoforms without O_DIRECT or O_DIRECTORY. | Jeremy Allison | 2007-03-01 | 1 | -0/+9 | |
| | | | | | | | | Jeremy. | |||||
| * | r21639: Add in implementations of POSIX open/mkdir/unlink/rmdir. | Jeremy Allison | 2007-03-01 | 1 | -0/+176 | |
| | | | | | | | | Jeremy. | |||||
| * | r21638: Change POSIX_UNLINK to allow clients to differentiate | Jeremy Allison | 2007-03-01 | 2 | -2/+22 | |
| | | | | | | | | | | between unlink/rmdir calls. Jeremy. | |||||
| * | r21637: Get "password never expires" account policy working. | Jim McDonough | 2007-03-01 | 1 | -3/+9 | |
| | | | | | | | | | | 0x8000000000000000LL is "infinity" to NT and should not be converted numerically to time_t. | |||||
| * | r21636: Was almost right before. We have to specify the short domain name ↵ | Gerald Carter | 2007-03-01 | 1 | -1/+1 | |
| | | | | | | | | | | | | to get the Krb5 config stuff to work in the server affinity settings. | |||||
| * | r21635: Don't free talloc()'d memory. I wish people would check the callers | Gerald Carter | 2007-03-01 | 1 | -1/+1 | |
| | | | | | | | | when changing how memory is allocated. | |||||
| * | r21633: First real fix from me found during the bug hunt. | Gerald Carter | 2007-03-01 | 1 | -0/+8 | |
| | | | | | | | | | | | | | | | | | | ads_cached_connection() does not call get_dc_name() before ads_connect() and therefore does not setup the environment to look at krb5.conf.DOMAIN file before sending the TGT request. The failure I'm seeing occurs ni a multi-DC domain where we get back preuath failed after we just joined the domain. | |||||
| * | r21632: Remove ununsed variable | Gerald Carter | 2007-03-01 | 1 | -1/+0 | |
| | | ||||||
| * | r21626: Fix memory leak on error path noticed by | Gerald Carter | 2007-03-01 | 1 | -0/+1 | |
| | | | | | | | | SATOH Fumiyasu <fumiya@samba.gr.jp> | |||||
| * | r21623: Fix copy/paste error | Simo Sorce | 2007-03-01 | 1 | -2/+2 | |
| | | ||||||
| * | r21622: Fix bad merge caught by James. | Gerald Carter | 2007-03-01 | 1 | -7/+0 | |
| | | ||||||
| * | r21616: Delay initialization of idmap and nss_info backends until necessary | Gerald Carter | 2007-03-01 | 6 | -33/+193 | |
| | | | | | | | | so they can honor the offline logon state. | |||||
| * | r21615: don't wait until the last second to try to renew a Krb5 ticket as it ↵ | Gerald Carter | 2007-03-01 | 1 | -2/+4 | |
| | | | | | | | | is took late | |||||
| * | r21614: The memset() called on aligned memory was causing crashes | Gerald Carter | 2007-03-01 | 1 | -0/+11 | |
| | | | | | | | | | | on x86_64 Linux boxes. Since it is not needed, just use malloc() on Linux. | |||||
| * | r21613: perform variable subsitution on home directories and shells provided ↵ | Gerald Carter | 2007-03-01 | 1 | -12/+13 | |
| | | | | | | | | by the nss_info backend | |||||
| * | r21612: Make pam_winbind do the same username fixup on AIX as the WINBINDD | Gerald Carter | 2007-03-01 | 1 | -2/+32 | |
| | | | | | | | | | | | | LAM module does to work around a system that does not support >8 character usernames. Without the change, pam_winbind tries to authenticate _#uid in the domain. | |||||
| * | r21611: I'm not entirely sure about this patch but it is working. | Gerald Carter | 2007-03-01 | 1 | -13/+66 | |
| | | | | | | | | | | | | su - DOM\user was unable to set the process crendentials without listing the "id" and other attributes in the attrlist[]. More fixes to come, but I didn't want this to get lost. | |||||
| * | r21610: put libraries preceeding the @SONAMEFLAG@ variable as on AIX this ↵ | Gerald Carter | 2007-03-01 | 1 | -2/+2 | |
| | | | | | | | | ends up commenting out the remainder of the line and we have missing libraries in the link | |||||
| * | r21609: Fix memory leaks in error code paths (and one in winbindd_group.c). | Jeremy Allison | 2007-03-01 | 11 | -7/+56 | |
| | | | | | | | | | | Patch from Zack Kirsch <zack.kirsch@isilon.com>. Jeremy. | |||||
| * | r21608: Fix a couple of memleaks in error code paths before | Jeremy Allison | 2007-03-01 | 3 | -2/+13 | |
| | | | | | | | | | | Coverity finds them :-) Jeremy. | |||||
| * | r21607: While committing I saw I had not newline terminated this string ... | Simo Sorce | 2007-03-01 | 1 | -1/+1 | |
| | | ||||||
| * | r21606: Implement escaping function for ldap RDN values | Simo Sorce | 2007-03-01 | 9 | -30/+198 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix escaping of DN components and filters around the code Add some notes to commandline help messages about how to pass DNs revert jra's "concistency" commit to nsswitch/winbindd_ads.c, as it was incorrect. The 2 functions use DNs in different ways. - lookup_usergroups_member() uses the DN in a search filter, and must use the filter escaping function to escape it Escaping filters that include escaped DNs ("\," becomes "\5c,") is the correct way to do it (tested against W2k3). - lookup_usergroups_memberof() instead uses the DN ultimately as a base dn. Both functions do NOT need any DN escaping function as DNs can't be reliably escaped when in a string form, intead each single RDN value must be escaped separately. DNs coming from other ldap calls (like ads_get_dn()), do not need escaping as they come already escaped on the wire and passed as is by the ldap libraries DN filtering has been tested. For example now it is possible to do something like: 'net ads add user joe#5' as now the '#' character is correctly escaped when building the DN, previously such a call failed with Invalid DN Syntax. Simo. | |||||
| * | r21605: Fix small typo noticed by Raúl Sánchez Siles <rss@barracuda.es>. | Jeremy Allison | 2007-03-01 | 1 | -1/+1 | |
| | | | | | | | | Jeremy. | |||||
| * | r21604: I got this wrong also in libsmb :-(. | Jeremy Allison | 2007-02-28 | 1 | -0/+2 | |
| | | | | | | | | Jeremy. | |||||
| * | r21603: Horrible backwards compatibility hack as an old server bug | Jeremy Allison | 2007-02-28 | 1 | -1/+11 | |
| | | | | | | | | | | | | allowed a CIFS client bug to remain unnoticed :-(. I suck. Jeremy. | |||||
| * | r21581: Add an error code I just got | Volker Lendecke | 2007-02-28 | 2 | -0/+2 | |
| | | ||||||
| * | r21577: Remove unneeded #define (part of earlier patch that was | Jeremy Allison | 2007-02-28 | 1 | -2/+0 | |
| | | | | | | | | | | removed). Jeremy. | |||||
| * | r21576: Patch based on work from Todd Stecher <todd.stecher@isilon.com> | Jeremy Allison | 2007-02-28 | 2 | -16/+83 | |
| | | | | | | | | | | | | to allow client to fragment large SPNEGO blobs (large krb5 tickets). Tested against W2K3R2. Should fix bug #4400. Jeremy. | |||||
| * | r21569: Fix bug reported by Martin Zielinski <mz@seh.de> | Jeremy Allison | 2007-02-27 | 1 | -1/+1 | |
| | | | | | | | | | | where return value was incorrectly initialized. Jeremy. | |||||
| * | r21566: If we're going to be broken, at least be *consistently* | Jeremy Allison | 2007-02-27 | 1 | -1/+9 | |
| | | | | | | | | | | | | broken :-). This will do until Simo fixes the escape calls properly. Jeremy. | |||||
| * | r21565: Import ndrdump (doesn't compile yet, needs table support functions). | Jelmer Vernooij | 2007-02-27 | 5 | -5/+579 | |
| | | ||||||
| * | r21563: Fix a memleak: We only need dispinfo structs for "our" and for the ↵ | Volker Lendecke | 2007-02-27 | 1 | -40/+41 | |
| | | | | | | | | | | | | | | | | | | builtin domain. Without this patch we leaked a DISPINFO for the (NULL) domain per samr_connect*() call. Volker | |||||
| * | r21562: Regenerate gen_ndr after pidl changes. | Jelmer Vernooij | 2007-02-27 | 19 | -146/+183 | |
| | | ||||||
| * | r21561: It makes absolutely no sense to call krb5_kt_resolve() two times | Günther Deschner | 2007-02-27 | 1 | -6/+1 | |
| | | | | | | | | | | | | directly after another. Guenther | |||||
| * | r21560: Convert name_to_fqdn to BOOL. | Günther Deschner | 2007-02-27 | 1 | -3/+6 | |
| | | | | | | | | Guenther | |||||
| * | r21558: Safe more indent, again no code changes. | Günther Deschner | 2007-02-27 | 1 | -37/+37 | |
| | | | | | | | | Guenther | |||||
| * | r21557: indent only fix. No code change. | Günther Deschner | 2007-02-27 | 1 | -49/+49 | |
| | | | | | | | | Guenther | |||||
| * | r21556: Remove superfluos return check in ads_keytab_verify_ticket(). | Günther Deschner | 2007-02-27 | 1 | -2/+0 | |
| | | | | | | | | Guenther | |||||
| * | r21552: Ensure to check for proto_exists before linking any binary. No make | Lars Müller | 2007-02-26 | 1 | -108/+108 | |
| | | | | | | | | | | | | proto should be required before creating any binary from now on. Remove proto_exists from the all, pam_smbpass, and pam_bindind rule. | |||||
| * | r21551: Ok, this is more subtle. More tomorrow :-) | Volker Lendecke | 2007-02-26 | 1 | -65/+37 | |
| | | ||||||
| * | r21550: make disp_info_list static to get_samr_dispinfo_by_sid(), add a ↵ | Volker Lendecke | 2007-02-26 | 1 | -2/+18 | |
| | | | | | | | | comment :-) | |||||
| * | r21549: Only create DISP_INFO structs for domain handles, the others don't need | Volker Lendecke | 2007-02-26 | 1 | -35/+47 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | them. It just does not make sense to do a querydispinfo on an alias handle... This fixes a memleak: Every samr_connect*() call leaked a DISP_INFO for the (NULL) sid. More cleanup pending: Essentially, we only need the DISP_INFO cache for the get_global_sam_sid() domain. BUILTIN is fixed and small enough, and there are no other domains around where enumerations could happen. This also removes the explicit builtin_domain flags. I don't think this is worth it. If this makes a significant difference, then we have a *VERY* tuned RPC layer... Jeremy, please check this. If it's ok, we might want to merge it across. Volker | |||||
| * | r21548: prevent segv (reference to -1 element of array) | Herb Lewis | 2007-02-26 | 1 | -1/+2 | |
| | | ||||||
| * | r21547: Fix from Michael Adam <ma@sernet.de>: Refuse registry shares without ↵ | Volker Lendecke | 2007-02-26 | 2 | -3/+10 | |
| | | | | | | | | | | | | | | | | path. Thanks, Volker | |||||
| * | r21546: remove duplicate lines | Herb Lewis | 2007-02-26 | 1 | -3/+0 | |
| | | ||||||
| * | r21543: Fix 64bit build warning. | Günther Deschner | 2007-02-26 | 1 | -1/+1 | |
| | | | | | | | | Guenther | |||||
| * | r21540: Fix Bug #3713 and readd reporting what the profiles tool does (when | Günther Deschner | 2007-02-26 | 1 | -4/+56 | |
| | | | | | | | | | | | | | | | | called with the -v option). Patch from William Jojo <jojowil@hvcc.edu>. Guenther | |||||
| * | r21537: Avoid to trigger the confusing "cached entry differs." warning when | Günther Deschner | 2007-02-26 | 2 | -2/+20 | |
| | | | | | | | | | | | | there is just no cache around for a user. Guenther |