summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* nsswitch: Link stress-nss-libwbclient against pthreadIsaac Boukris2019-10-161-1/+1
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14140 Signed-off-by: Isaac Boukris <iboukris@gmail.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org>
* s3: VFS: Complete the removal of SMB_VFS_CHOWN()Jeremy Allison2019-10-158-70/+1
| | | | | | | | | | No longer used anywhere. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Böhme <slow@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Oct 15 20:07:51 UTC 2019 on sn-devel-184
* s3: VFS: vfs_full_audit: Remove chown_fn(). No longer used.Jeremy Allison2019-10-151-18/+0
| | | | | | | | NB, this will now fail smb_vfs_assert_all_fns() until we remove the chown_fn() from the VFS definitions. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Böhme <slow@samba.org>
* s3: VFS: vfs_time_audit: Remove chown_fn(). No longer used.Jeremy Allison2019-10-151-24/+0
| | | | | | | | NB, this will now fail smb_vfs_assert_all_fns() until we remove the chown_fn() from the VFS definitions. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Böhme <slow@samba.org>
* s3: VFS: vfs_cap: Remove chown_fn().Jeremy Allison2019-10-151-30/+0
| | | | | | | No longer used. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Böhme <slow@samba.org>
* s3: VFS: vfs_snapper: Remove chown_fn().Jeremy Allison2019-10-151-22/+0
| | | | | | | No longer used. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Böhme <slow@samba.org>
* s3: VFS: vfs_shadow_copy2: Remove chown_fn().Jeremy Allison2019-10-151-22/+0
| | | | | | | No longer used. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Böhme <slow@samba.org>
* s3: VFS: vfs_media_harmony: Remove chown_fn().Jeremy Allison2019-10-151-35/+0
| | | | | | | No longer used. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Böhme <slow@samba.org>
* s3: VFS: vfs_glusterfs: Remove chown_fn().Jeremy Allison2019-10-151-15/+0
| | | | | | | No longer used. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Böhme <slow@samba.org>
* s3: VFS: vfs_fruit: Remove chown_fn().Jeremy Allison2019-10-151-47/+0
| | | | | | | No longer used. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Böhme <slow@samba.org>
* s3: VFS: vfs_fake_acls: Remove chown_fn().Jeremy Allison2019-10-151-41/+0
| | | | | | | No longer used. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Böhme <slow@samba.org>
* s3: VFS: vfs_ceph_snapshots: Remove chown_fn().Jeremy Allison2019-10-151-23/+0
| | | | | | | No longer used. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Böhme <slow@samba.org>
* s3: VFS: vfs_ceph: Remove chown_fn().Jeremy Allison2019-10-151-13/+0
| | | | | | | No longer used. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Böhme <slow@samba.org>
* s3: VFS: vfs_catia: Remove chown_fn().Jeremy Allison2019-10-151-39/+0
| | | | | | | No longer used. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Böhme <slow@samba.org>
* s3: VFS: vfs_cap: Remove chown_fn().Jeremy Allison2019-10-151-35/+0
| | | | | | | No longer used. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Böhme <slow@samba.org>
* s3: torture: Remove cmd_chown() - can be replicated by cmd_open()->cmd_fchown().Jeremy Allison2019-10-151-33/+0
| | | | | | | Last user of SMB_VFS_CHOWN() in the codebase. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Böhme <slow@samba.org>
* s3: pysmbd: Change py_smbd_chown() to use SMB_VFS_FCHOWN() internally.Jeremy Allison2019-10-151-13/+33
| | | | | Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Böhme <slow@samba.org>
* s3: smbd: Remove vfs_chown_fsp().Jeremy Allison2019-10-152-122/+0
| | | | | | | | | No longer used. This gets rid of another case where we were playing directory changing games that are eliminated by just using a file handle. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Böhme <slow@samba.org>
* s3: smbd: set_nt_acl(). Now we know we always have a valid file handle, ↵Jeremy Allison2019-10-151-5/+14
| | | | | | | always use VFS_FCHOWN. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Böhme <slow@samba.org>
* audit_logging: Don't spam the logs if dsdb_event is not foundAndreas Schneider2019-10-141-5/+4
| | | | | | | | | | This gets only registered by our tests. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Gary Lockyer <gary@catalyst.net.nz> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Mon Oct 14 07:41:52 UTC 2019 on sn-devel-184
* s3:libads: Do not turn on canonicalization flag for MIT KerberosAndreas Schneider2019-10-122-1/+15
| | | | | | | | | | | | | | | This partially reverts 303b7e59a286896888ee2473995fc50bb2b5ce5e. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14155 Pair-Programmed-With: Isaac Boukris <iboukris@redhat.com> Signed-off-by: Andreas Schneider <asn@samba.org> Signed-off-by: Isaac Boukris <iboukris@redhat.com> Reviewed-by: Stefan Metzmacher <metze@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Sat Oct 12 17:39:13 UTC 2019 on sn-devel-184
* testprogs: Add test for kinit with canonicalizationAndreas Schneider2019-10-122-0/+14
| | | | | | | | Pair-Programmed-With: Isaac Boukris <iboukris@redhat.com> Signed-off-by: Andreas Schneider <asn@samba.org> Signed-off-by: Isaac Boukris <iboukris@redhat.com> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* s4:selftest: Do not print the target env twiceAndreas Schneider2019-10-121-16/+16
| | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* gitlab-ci: Run several AD tests with MIT KDCAndreas Schneider2019-10-123-18/+57
| | | | | | | This will avoid introducing regressions in either client or server code. Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* s4:selftest: Do not print the target env twiceAndreas Schneider2019-10-121-1/+1
| | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* lib:krb5_wrap: Do not create a temporary file for MEMORY keytabsAndreas Schneider2019-10-121-11/+8
| | | | | | | | | | | | | The autobuild cleanup script fails with: The tree has 3 new uncommitted files!!! git clean -n Would remove MEMORY:tmp_smb_creds_SK98Lv Would remove MEMORY:tmp_smb_creds_kornU6 Would remove MEMORY:tmp_smb_creds_ljR828 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* spnego: fix server handling of no optimistic exchangeIsaac Boukris2019-10-124-4/+13
| | | | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14106 Signed-off-by: Isaac Boukris <iboukris@redhat.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Sat Oct 12 15:51:42 UTC 2019 on sn-devel-184
* python/tests/gensec: add spnego downgrade python testsIsaac Boukris2019-10-122-1/+25
| | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14106 Pair-Programmed-With: Andreas Schneider <asn@samba.org> Signed-off-by: Isaac Boukris <iboukris@gmail.com> Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* python/tests/gensec: make it possible to add knownfail tests for gensec.update()Stefan Metzmacher2019-10-121-2/+8
| | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14106 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* selftest: add tests for no optimistic spnego exchangeIsaac Boukris2019-10-122-0/+5
| | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14106 Signed-off-by: Isaac Boukris <iboukris@redhat.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* spnego: add client option to omit sending an optimistic tokenIsaac Boukris2019-10-121-0/+11
| | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14106 Signed-off-by: Isaac Boukris <iboukris@redhat.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* selftest: s3: add a test for spnego downgrade from krb5 to ntlmIsaac Boukris2019-10-124-0/+60
| | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14106 Signed-off-by: Isaac Boukris <iboukris@redhat.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* s3:libsmb: Do not check the SPNEGO neg token for KRB5Andreas Schneider2019-10-121-50/+0
| | | | | | | | | | | | | The list is not protected and this could be a downgrade attack. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14106 Pair-Programmed-With: Isaac Boukris <iboukris@redhat.com> Reviewed-by: Andreas Schneider <asn@samba.org> Signed-off-by: Andreas Schneider <asn@samba.org> Signed-off-by: Isaac Boukris <iboukris@redhat.com> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* spnego: ignore server mech_types listIsaac Boukris2019-10-121-5/+26
| | | | | | | | | | | | | We should not use the mech list sent by the server in the last 'negotiate' packet in CIFS protocol, as it is not protected and may be subject to downgrade attacks. BUG: https://bugzilla.samba.org/show_bug.cgi?id=14106 Signed-off-by: Isaac Boukris <iboukris@redhat.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* wscript: split function check to one per line and sort alphabeticallyRalph Boehme2019-10-101-15/+62
| | | | | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Thu Oct 10 20:13:25 UTC 2019 on sn-devel-184
* wscript: remove all checks for _FUNC and __FUNCRalph Boehme2019-10-101-21/+18
| | | | | | | Those where historic artifacts not needed anymore. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* WHATSNEW: Mention performance improvements for SMB3 encryptionAndreas Schneider2019-10-101-0/+4
| | | | | | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Autobuild-User(master): Ralph Böhme <slow@samba.org> Autobuild-Date(master): Thu Oct 10 09:41:26 UTC 2019 on sn-devel-184
* librpc: Remove server build of oxidresolver.idlAndrew Bartlett2019-10-101-2/+2
| | | | | | | | We do not have a server for this DCOM component so do not generate the code for it. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
* librpc: Remove client and server build of w32time.idlAndrew Bartlett2019-10-102-6/+2
| | | | | | | | We do not have a server for the Win32 Time Server so do not generate the code for it. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
* librpc: Remove client and server build of rot.idlAndrew Bartlett2019-10-103-7/+2
| | | | | | | | We do not have a client or server for this DCOM component so do not generate the code for it. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
* librpc: Remove s4 server build of dfsAndrew Bartlett2019-10-101-2/+2
| | | | | | | | | | | We do not have a source4 varient of the dfs server, so do not generate the code for it. DFS is very closely tied to SMB so we use the DFS server in smbd. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
* librpc: Remove s3 server build of unixinfoAndrew Bartlett2019-10-101-1/+6
| | | | | | | | We do not have a source3 varient of the unixinfo server, so do not generate the code for it. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
* librpc: Add commnets on the split out of IDL filesAndrew Bartlett2019-10-101-0/+3
| | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
* librpc: Remove server build of remact.idlAndrew Bartlett2019-10-101-1/+6
| | | | | | | | We do not have a server for the DCOM Remote activation service, so do not generate the code for it. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
* librpc: Remove s4 server build of ntsvcsAndrew Bartlett2019-10-101-2/+2
| | | | | | | | We do not have a source4 varient of the ntsvcs server, so do not generate the code for it. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
* librpc: Remove s4 server build of initshutdownAndrew Bartlett2019-10-101-1/+6
| | | | | | | | We do not have a source4 varient of the initshutdown server, so do not generate the code for it. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
* librpc: Remove unused build of atsvc serverAndrew Bartlett2019-10-101-1/+6
| | | | | | | | This avoids building server-side code we do not use and so makes the build smaller and code auditing easier. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
* s3: VFS: Complete the removal of SMB_VFS_RMDIR()Jeremy Allison2019-10-108-54/+2
| | | | | | | | | | All users now use SMB_VFS_UNLINKAT(..., AT_REMOVEDIR). Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Autobuild-User(master): Ralph Böhme <slow@samba.org> Autobuild-Date(master): Thu Oct 10 07:26:43 UTC 2019 on sn-devel-184
* s3: VFS: vfs_time_audit: Remove rmdir_fn(). No longer used.Jeremy Allison2019-10-101-19/+0
| | | | | | | | NB, this will now fail smb_vfs_assert_all_fns() until we remove the rmdir_fn() from the VFS definitions. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
* s3: VFS: vfs_time_audit: Remove rmdir_fn(). No longer used.Jeremy Allison2019-10-101-22/+0
| | | | | Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>