summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* VERSION: Bump version up to 3.6.22.v3-6-testKarolin Seeger2013-11-291-1/+1
| | | | Signed-off-by: Karolin Seeger <kseeger@samba.org>
* WHATSNEW: Add release notes for Samba 3.6.21.Karolin Seeger2013-11-281-2/+62
| | | | Signed-off-by: Karolin Seeger <kseeger@samba.org>
* spoolss: accept XPS_PASS datatype used by Windows 8Arvid Requate2013-11-221-1/+7
| | | | | | | | | | | | The new v4 driver model used in Windows 8 declares print jobs intended to bypass the XPS processing layer by setting datatype to "XPS_PASS" instead of "RAW". BUG: https://bugzilla.samba.org/show_bug.cgi?id=10267 Reviewed-by: David Disseldorp <ddiss@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> (cherry picked from commit b2815b4c8c3e436a79fb7f07be285a417fd6e8cb)
* xattr: fix listing EAs on *BSD for non-root usersJeremy Allison2013-11-131-0/+4
| | | | | | | | | | | Thanks to Stefan Rompf for reporting. This fixes bug #10247 Back-ported to 3.6.next from master commit 374b2cfde74e0c61f4b2da724b30d0e430596092 Signed-off-by: Bjoern Jacke <bj@sernet.de> Reviewed-by: Jeremy Allison <jra@samba.org>
* VERSION: Bump version up to 3.6.21.Karolin Seeger2013-11-111-1/+1
| | | | Signed-off-by: Karolin Seeger <kseeger@samba.org>
* WHATSNEW: Add release notes for Samba 3.6.20.Karolin Seeger2013-11-111-5/+26
| | | | | | | Bug 10235 - CVE-2013-4475: No access check verification on stream files. Signed-off-by: Karolin Seeger <kseeger@samba.org> (cherry picked from commit 12598a76c0330ea1067c4b11b295ab3473e93f15)
* Fix bug #10229 - No access check verification on stream files.Jeremy Allison2013-11-111-0/+61
| | | | | | | | | | | | | | | https://bugzilla.samba.org/show_bug.cgi?id=10229 We need to check if the requested access mask could be used to open the underlying file (if it existed), as we're passing in zero for the access mask to the base filename. Signed-off-by: Jeremy Allison <jra@samba.org> Fix Bug #10235 - CVE-2013-4475: No access check verification on stream files. https://bugzilla.samba.org/show_bug.cgi?id=10235 (cherry picked from commit 14d48130870579541c07f5a0f64638e635ddce95)
* Fix bug #10118 - Samba is chatty about being unable to open a printer.Korobkin2013-10-291-1/+1
|
* nsswitch: Fix short writes in winbind_write_sockVolker Lendecke2013-10-281-2/+2
| | | | | | | | | | | We set the socket to nonblocking and don't handle EAGAIN right. We do a poll anyway, so wait for writability, which should fix this. Bug: https://bugzilla.samba.org/show_bug.cgi?id=10195 Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> (cherry picked from commit c6909887c26d4e827633acd50b11cf08c6aee0f7) Signed-off-by: Andreas Schneider <asn@samba.org>
* s3-winbind: Send online/offline message of the domain to the parent.Andreas Schneider2013-10-141-0/+22
| | | | | | | | | | | | https://bugzilla.samba.org/show_bug.cgi?id=10194 Signed-off-by: Andreas Schneider <asn@cryptomilk.org> Reviewed-by: Volker Lendecke <vl@samba.org> Autobuild-User(master): Volker Lendecke <vl@samba.org> Autobuild-Date(master): Fri Oct 11 13:37:56 CEST 2013 on sn-devel-104 (cherry picked from commit 275f6586c4d4547978c6ff2f04670b0d8f89fd4b)
* s3-winbind: Register handlers for domain online/offline messages.Andreas Schneider2013-10-142-0/+11
| | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=10194 Signed-off-by: Andreas Schneider <asn@cryptomilk.org> Reviewed-by: Volker Lendecke <vl@samba.org> (cherry picked from commit fc5941622010843d823b5c245eccc68d1d3bce19)
* s3-winbind: Add functions for domain online/offline handling.Andreas Schneider2013-10-142-0/+50
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=10194 Signed-off-by: Andreas Schneider <asn@cryptomilk.org> Reviewed-by: Volker Lendecke <vl@samba.org> (cherry picked from commit 447ec17a6bec814a2ac5cadb74dbef5789f07c52)
* idl: Add a new message for winbind domain states.Andreas Schneider2013-10-141-0/+2
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=10194 Signed-off-by: Andreas Schneider <asn@cryptomilk.org> Reviewed-by: Volker Lendecke <vl@samba.org> (cherry picked from commit 1a884636542ba0e54c6d209662a5d1613d727a85)
* Fix bug #10187 - Missing talloc_free can leak stackframe in error path.Jeremy Allison2013-10-141-2/+3
| | | | | | | | | | Fix error path. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org> Autobuild-User(master): David Disseldorp <ddiss@samba.org> Autobuild-Date(master): Wed Oct 9 03:50:56 CEST 2013 on sn-devel-104
* Fix is_legal_name() to not emit character conversion error messages.Jeremy Allison2013-10-021-4/+5
| | | | | | | | | Using next_codepoint() does the same check, but without the conversion message. Signed-off-by: Jeremy Allison <jra@samba.org> Fix bug #10139 - valid utf8 filenames cause "invalid conversion error" messages.
* s3: smb2 server - fix bug 10167 smb2 breaks "smb encryption = mandatoryJeremy Allison2013-10-021-0/+9
| | | | | | | Refuse an SMB2 tcon on a share wher eencryption is required. SMB2 doesn't support this. Signed-off-by: Jeremy Allison <jra@samba.org>
* WHATSNEW: Start release notes for Samba 3.6.20.Karolin Seeger2013-10-021-2/+44
| | | | Signed-off-by: Karolin Seeger <kseeger@samba.org>
* VERSION: Bump version up to 3.6.20.Karolin Seeger2013-10-021-1/+1
| | | | Signed-off-by: Karolin Seeger <kseeger@samba.org>
* WHATSNEW: Prepare release notes for Samba 3.6.19.Karolin Seeger2013-09-181-4/+38
| | | | Signed-off-by: Karolin Seeger <kseeger@samba.org>
* s3:libnet increase timeout for machine password changeChristian Ambach2013-09-161-0/+9
| | | | | | | | | | | | | | DCs might run password filter modules that can delay the setting of the machine password for a significant amount of time use the same timeout as in the other paths of domain join (e.g. rpccli_netlogon_set_trust_password) Signed-off-by: Christian Ambach <ambi@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> (cherry picked from commit 9755541ed156d71df98607375ee3b925266c3c74) The last 2 patches address bug #8955 - NetrServerPasswordSet2 timeout is too short.
* s3: Give machine password changes 10 minutes of timeVolker Lendecke2013-09-161-0/+13
| | | | | | | | This is what we do at domain join time as well, see lib/netapi/joindomain.c:141 Signed-off-by: Stefan Metzmacher <metze@samba.org> (cherry picked from commit b9a15f1bfad30a824f9ec87bc9f7c65adf50dae0)
* s3-serverid: call serverid_init_readonly() from commandline tools.Günther Deschner2013-09-092-0/+10
| | | | | | | | | Guenther Signed-off-by: Günther Deschner <gd@samba.org> The last 4 patches are follow-up patches for bug #10127 - smbstatus stopped working as non-root user.
* s3-serverid: add a readonly variant of the serverid init code.Günther Deschner2013-09-092-4/+18
| | | | | | Guenther Signed-off-by: Günther Deschner <gd@samba.org>
* s3-serverid: restructure serverid initialization.Günther Deschner2013-09-091-13/+17
| | | | | | Guenther Signed-off-by: Günther Deschner <gd@samba.org>
* s3-sessionid: move sessionid init call to the only function where it is needed.Günther Deschner2013-09-091-5/+5
| | | | | | Guenther Signed-off-by: Günther Deschner <gd@samba.org>
* s3-sessionid: use sessionid_init_readonly() from cmdline tools.Günther Deschner2013-09-064-5/+16
| | | | | | | | | Guenther Signed-off-by: Günther Deschner <gd@samba.org> The last 3 patches address bug #10127 - smbstatus stopped working as non-root user.
* s3-sessionid: change session_db_ctx() to always return the session_id_ctx ↵Günther Deschner2013-09-061-6/+7
| | | | | | | | pointer. Guenther Signed-off-by: Günther Deschner <gd@samba.org>
* s3-sessionid: make sure to call sessionid_init() also from the cmdline tools.Günther Deschner2013-09-063-0/+17
| | | | | | Guenther Signed-off-by: Günther Deschner <gd@samba.org>
* Optimization. Don't do the retry logic if sitename_fetch() returned NULL, we ↵Jeremy Allison2013-09-061-1/+5
| | | | | | | | | | | | | | | already did a NULL query. Bug 5917 - Samba does not work on site with Read Only Domain Controller Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Sep 4 01:19:05 CEST 2013 on sn-devel-104 (cherry picked from commit bdab6f9431715fbfd28f8cc0dfb4dde2966f22f3)
* Move the retry logic when site_name is passed in a NULL or "" to the wrapper ↵Jeremy Allison2013-09-061-4/+21
| | | | | | | | | | | | function. Bug 5917 - Samba does not work on site with Read Only Domain Controller Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Richard Sharpe <rsharpe@samba.org> (cherry picked from commit 68e7b1c9446c7d1274b0fb85b59b90ac1a7f6041)
* Move the manipulation of site_name into the caller function dsgetdcname().Jeremy Allison2013-09-061-15/+19
| | | | | | | | | | | | Leave dsgetdcname_internal() only using const char *site_name. Bug 5917 - Samba does not work on site with Read Only Domain Controller Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Richard Sharpe <rsharpe@samba.org> (cherry picked from commit 181c11066bd53b07015a199f56eb71182e89ff71)
* Refactor dsgetdcname to be called via a wrapper function.Jeremy Allison2013-09-061-5/+26
| | | | | | | | | | Bug 5917 - Samba does not work on site with Read Only Domain Controller Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Richard Sharpe <rsharpe@samba.org> (cherry picked from commit 66006be7ef703b2935334633d27641050cee5f58)
* dsgetdcname_cache_fetch() doesn't use the site_name parameter so don't pass it.Jeremy Allison2013-09-061-2/+1
| | | | | | | | | | Bug 5917 - Samba does not work on site with Read Only Domain Controller Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Richard Sharpe <rsharpe@samba.org> (cherry picked from commit dd12bfbcbf359c1642cc2e968aec62ae904aad5d)
* smbd: Correctly return INFO_LENGTH_MISMATCH for smb1Volker Lendecke2013-09-061-0/+4
| | | | | | | | | | This is required if the client offered less buffer than the fixed portion of the info level data requires Bug: https://bugzilla.samba.org/show_bug.cgi?id=10106 Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 1b1935b876a14154ef74e447bf53eb7cd0a5dde9)
* smbd: Fix error return for STREAM_INFOVolker Lendecke2013-09-061-0/+4
| | | | | | | | | | The stream_info marshalling follows its own rules. This needs unifying eventually... Bug: https://bugzilla.samba.org/show_bug.cgi?id=10106 Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 5634f240fd4273cb7327111140ccbea0fd41e3fc)
* smbd: Revert a93f9c3Volker Lendecke2013-09-061-5/+0
| | | | | | | | | This was too broad and has been replaced by finer-grained error checks Bug: https://bugzilla.samba.org/show_bug.cgi?id=10106 Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit b37edda32930fec372d6467d442f67532c3fbd33)
* smbd: Correctly return BUFFER_OVERFLOW in smb2_getinfoVolker Lendecke2013-09-061-0/+10
| | | | | | | | | Also, don't overflow the client buffer Bug: https://bugzilla.samba.org/show_bug.cgi?id=10106 Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 40f60024ca19e33cbbe9825b42692f386a8f1dd9)
* smbd: Correctly return INFO_LENGTH_MISMATCH in smb2_getinfoVolker Lendecke2013-09-061-0/+12
| | | | | | | | | | We have to return this error if the client offered less than the fixed portion of the infolevel data requires Bug: https://bugzilla.samba.org/show_bug.cgi?id=10106 Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 91939614760837b2ac2c6bb8b5daac108a4f4670)
* smbd: qfsinfo has fixed/variable buffersVolker Lendecke2013-09-063-0/+13
| | | | | | | | | | The error message will have to change depending whether the buffer is too small for the fixed or variable buffers Bug: https://bugzilla.samba.org/show_bug.cgi?id=10106 Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit ac41df91a5a425633fc716ca02187e753879d795)
* smbd: qfilepathinfo has fixed/variable buffersVolker Lendecke2013-09-063-0/+25
| | | | | | | | | | The error message will have to change depending whether the buffer is too small for the fixed or variable buffers Bug: https://bugzilla.samba.org/show_bug.cgi?id=10106 Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> (cherry picked from commit 53123996033594f68a3fc9037474aada3aef0750)
* smbd: Use #defines in smb2_getinfo_sendVolker Lendecke2013-09-061-3/+3
| | | | | | | | | | Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: David Disseldorp <ddiss@samba.org> Autobuild-User(master): David Disseldorp <ddiss@samba.org> Autobuild-Date(master): Tue Aug 27 15:08:08 CEST 2013 on sn-devel-104 (cherry picked from commit 323cccd35d06c7327c19dc5cb891043507624d7d)
* s3:smbd: allow info class SMB_QUERY_FS_ATTRIBUTE_INFO to return partial dataRalph Wuerthner2013-09-061-0/+6
| | | | | | Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Volker Lendecke <Volker.Lendecke@SerNet.DE> (cherry picked from commit 270d29a743a030653037cb176f3764bec3c79b6c)
* s3:smbd: allow info class SMB_QUERY_FS_VOLUME_INFO to return partial dataRalph Wuerthner2013-09-061-0/+7
| | | | | | Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Volker Lendecke <Volker.Lendecke@SerNet.DE> (cherry picked from commit ec46f6b91941e38dd92f8e0fb0f278592e3157b6)
* s3:smbd: allow status code in smbd_do_qfsinfo() to be set by information ↵Ralph Wuerthner2013-09-061-1/+2
| | | | | | | | class handler Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Volker Lendecke <Volker.Lendecke@SerNet.DE> (cherry picked from commit 616777f029e462f53c5118d79de8c6405a5fb7c1)
* s3:smbd: allow GetInfo responses with STATUS_BUFFER_OVERFLOW to return ↵Ralph Wuerthner2013-09-061-3/+10
| | | | | | | | partial, but valid data Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Volker Lendecke <Volker.Lendecke@SerNet.DE> (cherry picked from commit a91d2b05bab329a8a9772c2c79a3b1e02933182e)
* s3:smbd: return NT_STATUS_INFO_LENGTH_MISMATCH for GetInfo in case ↵Ralph Wuerthner2013-09-061-0/+5
| | | | | | | | output_buffer_length is too small Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Volker Lendecke <Volker.Lendecke@SerNet.DE> (cherry picked from commit a93f9c3d33e442c84d0c9da7eb5d25ca4b54fc33)
* smbd: Simplify dropbox special case in unix_convertVolker Lendecke2013-08-301-6/+22
| | | | | | | | | | | | | | | | EACCESS needs special treatment: If we want to create a fresh file, return OBJECT_PATH_NOT_FOUND, so that the client will continue creating the file. If the client wants us to open a potentially existing file, we need to correctly return ACCESS_DENIED. This patch makes this behaviour hopefully a bit clearer than the code before did. Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> The last 2 patches address bug #10114 - Dropbox (write-only-directory) case isn't handled correctly in pathname lookup.
* smbd: Fix a profile problemVolker Lendecke2013-08-305-27/+34
| | | | | | | | | | | | | | | | | | | | | When trying to read a profile, under certain circumstances Windows tries to read with its machine account first. The profile previously written was stored with an ACL that only allows access for the user and not the machine. Windows should get an NT_STATUS_ACCESS_DENIED when using the machine account, making it retry with the user account (which would then succeed). Samba under these circumstances erroneously gives NT_STATUS_OBJECT_PATH_NOT_FOUND, which makes Windows give up and not retry. The reasons is the "dropbox" patch in unix_convert, turning EACCESS on the last path component to OBJECT_PATH_NOT_FOUND. This patch makes the dropbox behaviour only kick in when we are creating a file. I think this is an abstraction violation. unix_convert() should not have to know about the create_disposition, but given that we have pathname resolution separated from the core open code right now this is the best we can do. Signed-off-by: Volker Lendecke <Volker.Lendecke@SerNet.DE> Reviewed-by: Jeremy Allison <jra@samba.org>
* s3-winbindd: fix fallback to ncacn_np in cm_connect_lsat().Günther Deschner2013-08-201-2/+7
| | | | | | | | | | | | | | | | | | Fallback to lsa named-pipe connection when tcp connection has failed twice (it could be a trusted domain connection where we cannot setup a secure channel). Guenther BUG: https://bugzilla.samba.org/show_bug.cgi?id=9615 BUG: https://bugzilla.samba.org/show_bug.cgi?id=9899 Signed-off-by: Günther Deschner <gd@samba.org> Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> Tested-by: Christof Schmitt <christof.schmitt@us.ibm.com> Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Tue Aug 13 20:55:33 CEST 2013 on sn-devel-104
* Fix bug #10097 - MacOSX 10.9 will not follow path-based DFS referrals handed ↵Richard Sharpe2013-08-203-6/+19
| | | | | | | | | | | | | out by Samba. Windows overloads the EA Length field in the DIRECTORY INFO leves of FIND FIRST/FIND NEXT. This field indicates either the REPARSE_TAG if the file/folder has a reparse proint or the EA Length if it has EAs, and is the fundamental reason you cannot have both on a file or folder. Signed-off-by: Richard Sharpe <rsharpe@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
View Lorry Controller Status