summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Mark as release versionsamba-4.0.0alpha8Andrew Bartlett2009-06-191-1/+1
|
* Partially revert restriction of socket_wrapper to 1500 byte writesAndrew Bartlett2009-06-191-10/+32
| | | | | | | | | | | This keeps the restriction for stream sockets (where the caller will retry), without creating problems on datagram sockets (CLDAP is not defined, as far as I know, across multiple UDP packets). The commit adding this restriction was 47b106c0ae8b91c9cccfc21bf8e4e416b1abfd5d Andrew Bartlett
* s4:ldapsrv Place the 'privilaged' ldapi socket under an #ifdefAndrew Bartlett2009-06-191-1/+11
| | | | | | | | This makes it clear to our users that this particular implementation isn't final (all parties are agreed that an EXTERNAL bind is the right way to do this, but it has not been implemented yet). Andrew Bartlett
* s4:ldb Add test for integer normalisation behaviourAndrew Bartlett2009-06-191-0/+17
| | | | | | | This uses groupType as the example, but this actually applies to all integer types in AD. Andrew Bartlett
* A fix in the ACL code used by both SAMBA 3 and 4Matthias Dieter Wallnöfer2009-06-191-1/+1
| | | | | This fixes an uninitialised structure. It has been found through valgrind in the RAW-ACLs test suite (Bug #6397).
* Fixed some uninitialised variablesMatthias Dieter Wallnöfer2009-06-195-18/+20
| | | | I tried hard to not change the program logic. Should fix bug #6439.
* Correct handling of 32-bit integer attributes in SAMBA 4Matthias Dieter Wallnöfer2009-06-195-42/+88
| | | | | | | | | | - LDB handles now all 32-bit integer attributes correctly (also with overflows) according to the schema - LDAP backends handle the attributes "groupType", "userAccountControl" and "sAMAccountType" correctly. This handling doesn't yet use the schema but the conversion file "simple_ldap.map.c" which contains them hardcoded. Did also a refactoring of the conversion function there. - Bug #6136 should be gone
* s3-pam_winbind: Fix Bug 6253: Use correct value for password expiry calculation.Günther Deschner2009-06-191-1/+2
| | | | | | Based on patch from Blindauer Emmanuel <samba@mooby.net>. Guenther
* Fix bug 4699: Remove pidfile on clean shutdownVolker Lendecke2009-06-185-8/+28
|
* acl_group_override() doesn't need to call stat. Pass thisJeremy Allison2009-06-181-28/+17
| | | | | down from above (as const). Jeremy.
* Add some const to the stat struct in the dosmode calls.Jeremy Allison2009-06-188-102/+72
| | | | | | | | Fix a couple more unix_convert uses to filename_convert. Fix bug in acl_group_override() where an uninitialized struct could be used. Move unix_convert with wildcard use in SMBsearch reply to boilerplate code. Jeremy.
* Replace the boilerplate calls to :Jeremy Allison2009-06-186-270/+154
| | | | | | | | | | | | resolve_dfspath() -> unix_convert() -> get_full_smb_filename() -> check_name() with a new function filename_convert(). This restores the check_name() calls that had gone missing since the default create_file was changed. All "standard" pathname processing now goes through filename_convert(). I'll take a look at the non-standard pathname processing next. As a benefit, fixed a missing resolve_dfspath() in the trans2 mkdir call. Jeremy.
* libwbclient: fix returned LogonInfo in wbc_LogonUser().Günther Deschner2009-06-181-2/+4
| | | | | | | That function could return emtpy blobs for username and ccache for e.g. cached logins. Guenther
* wbinfo: use wbcLogonUser for wbinfo -K.Günther Deschner2009-06-181-35/+76
| | | | Guenther
* Revert "For tevent to install tevent_util.h"Simo Sorce2009-06-181-1/+0
| | | | | | This reverts commit b112cc5503350b248949bdbcce8072f5523ce877. tevent_util.h is a private header. Must not be installed.
* s3/docs: Add documentation for 'net sam rights'.Karolin Seeger2009-06-181-0/+27
| | | | | | This is part of a fix for bug #6328. Karolin
* s3:netlogon Cope with recent rename in netlogon.idlAndrew Bartlett2009-06-181-1/+1
|
* Remove unused variableAndrew Bartlett2009-06-181-3/+0
|
* Bump the ldb version and the version Samba4 requires.Andrew Bartlett2009-06-182-2/+2
| | | | | | | | We have made a lot of useful changes to LDB since the last realese, that Samba4 now relies on. This ensures that a build against a system LDB will only succeed against the right version. Andrew Bartlett
* s4: Add tests and 'must change password' flags in setpassword and newuserAndrew Bartlett2009-06-185-12/+146
| | | | | | | In particular, ensure that we can acutally change the password under these circumstances. Andrew Bartlett
* s4:testprogs Don't specify a username/password when checking the ccacheAndrew Bartlett2009-06-181-1/+1
| | | | | | | | The purpose of this test is to ensure that the Kerberos credentials cache is valid. If the username and password is specified, this overrides the very thing we are trying to test. Andrew Bartlett
* s4:libnet Allow 'net password change' to work on expired passwordsAndrew Bartlett2009-06-1811-9/+41
| | | | | | | | | We need to pass down flags to the DCE/RPC layer to allow fallback to anonymous connections, as we can't log in with an expired password. The anonymous connection can then change the password with SAMR. Andrew Bartlett
* s4:kdc Allow a password change when the password is expiredAndrew Bartlett2009-06-1812-70/+98
| | | | | | | | | | | | | | This requires a rework on Heimdal's windc plugin layer, as we want full control over what tickets Heimdal will issue. (In particular, in case our requirements become more complex in future). The original problem was that Heimdal's check would permit the ticket, but Samba would then deny it, not knowing it was for kadmin/changepw Also (in hdb-samba4) be a bit more careful on what entries we will make the 'change_pw' service mark that this depends on. Andrew Bartlett
* s4:setup Add an option to 'setpassword' to force password change at next loginAndrew Bartlett2009-06-183-3/+17
|
* s4:gensec Print GSSAPI error message when unable to find PACAndrew Bartlett2009-06-181-1/+3
|
* Require the new tdb 1.1.5 (for performance reasons)Andrew Bartlett2009-06-182-2/+2
| | | | | | | | While tdb has not changed ABI in a way that requires this, we don't want Samba4 somehow built against the old version with performance problems on large, growing databases. Andrew Bartlett
* Fixes for the "cldap" testsMatthias Dieter Wallnöfer2009-06-182-6/+19
| | | | | | | - Insert a check after the "tsocket" library call to make sure that the call terminated correctly - Add a comment to explain why on further calls of "cldap_socket_init" the destination address hasn't to be specified
* source4/client/client.c: Possible memory leaksSlava Semushin2009-06-181-2/+5
| | | | | | | | | | | Patch for bug #6446 cppcheck found 2 possible memory leaks: [./source4/client/client.c:3305]: (error) Memory leak: base_directory [./source4/client/client.c:3305]: (error) Memory leak: desthost Patch in attach.
* Fix resource leak in lib/ldb/tools/ldbmodify.cSlava Semushin2009-06-182-0/+2
| | | | Patch for bug #6389
* Fix syntax error in lib/ldb/ldb_sqlite3/base160.cSlava Semushin2009-06-182-2/+2
| | | | Patch for bug #6388
* For tevent to install tevent_util.hEric Sandall2009-06-181-0/+1
| | | | | | | Patch for bug #6270 This patch is for the future when samba4 builds using external libraries. With this patch, tevent now installs tevent_util.h which is required by samba4.
* LDB: Link against both tevent and tallocEric Sandall2009-06-181-1/+1
| | | | | | | Patch for bug #6269 When linking against tevent you also need to link against talloc. This patch fixes external/libevent.m4 to do so.
* s4: Call va_end() after all va_start()/va_copy() calls.Andrew Kroeger2009-06-184-5/+16
| | | | | | | | This corrects the issues reaised in bug #6129, and some others that were not originally identified. It also accounts for some code that was in the original bug report but appears to have since been made common between S3 and S4. Thanks to Erik Hovland <erik@hovland.org> for the original bug report.
* NETLOGON pipe improvementsMatthias Dieter Wallnöfer2009-06-189-65/+184
| | | | | | | | | | | | | | | Patch for bug #4939 This refactors the NETLOGON code related to this bug: - Introduces a new "SYNCSTATE" enum required by the "DatabaseSync2" call (acc. to WSPP) - Make "DatabaseSync" dependant from "DatabaseSync2" (acc. to WSPP) - Let "DatabaseSync2" return NT_STATUS_NOT_IMPLEMENTED (I'm not sure if this is also true when a domain is running in mixed mode) - Make "LogonControl" and "LogonControl2" dependant form "LogonControl2Ex" (acc. to WSPP) - Let "LogonControl2Ex" return WERR_NOT_SUPPORTED for now
* Add const to cast, to fix warningAndrew Bartlett2009-06-181-2/+2
|
* s3 onefs: Remove dfs resolution from create_file() now that it's being done ↵Tim Prouty2009-06-171-22/+1
| | | | at a higher level
* s3: Change SMB_VFS_OPEN to take an smb_filename structTim Prouty2009-06-1725-131/+398
| | | | | | | | | | | | This was a little messy because of all of the vfs modules I had to touch. Most of them were pretty straight forward, but the streams modules required a little attention to handle smb_filename. Since the use of smb_filename enables the vfs modules to access the raw, over-the-wire stream, a little bit of the handling that was being done by split_ntfs_stream_name has now been shifted into the individual stream modules. It may be a little more code, but overall it gives more flexibility to the streams modules, while also allowing correct stream handling.
* s3: Plumb smb_filename from create_file all of the way down to fd_openTim Prouty2009-06-175-206/+282
| | | | | | | | | | | | I used the smb_filename struct everywhere that was feasible for the first pass. There are still some places in this path that need to be changed to use smb_filename, but this is a good start. I also: - Removed fname/path arguments from a few functions that weren't really using them. - Added a utility function for detecting whether an smb_filename is a stream.
* Use system Python LDB bindings, if present.Jelmer Vernooij2009-06-181-1/+9
|
* Use system LDB by default if the right version was found.Jelmer Vernooij2009-06-181-2/+2
|
* dsdb: Fix build against system ldb.Jelmer Vernooij2009-06-183-3/+3
|
* selftest: Use common function when skipping testsuites based on run-timeJelmer Vernooij2009-06-181-11/+32
| | | | conditions.
* smb_build: Always build modules for system-libraries as shared libraries,Jelmer Vernooij2009-06-181-2/+3
| | | | since they can't be included in the static library.
* Fix build with system LDB.Jelmer Vernooij2009-06-184-4/+4
|
* configure: Use Python tdb bindings from the system, if found.Jelmer Vernooij2009-06-181-3/+10
|
* Remove outdated Python status file.Jelmer Vernooij2009-06-182-16/+2
|
* Fix bug #6476 - more then 3000 smbd-zombies in memoryJeremy Allison2009-06-171-0/+12
| | | | | We weren't reaping children in the [x]inetd case. Jeremy.
* selftest: report time after testsuite, gives nicer output on theJelmer Vernooij2009-06-171-1/+1
| | | | buildfarm.
* tdb: Fix help string in configure flag to enable Python bindings.Jelmer Vernooij2009-06-171-1/+1
|
* Only install an explicit set of scripts during "make install", rather thanJelmer Vernooij2009-06-171-1/+8
| | | | whatever happens to be in the source tree.
View Lorry Controller Status