summaryrefslogtreecommitdiff
path: root/docs-xml
Commit message (Collapse)AuthorAgeFilesLines
* docs-xml/smbdotconf: clarify the quoting for advanced "interfaces" optionsStefan Metzmacher2020-05-071-4/+16
| | | | | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Thu May 7 16:23:40 UTC 2020 on sn-devel-184
* CVE-2020-10704: libcli ldap_message: Add search size limits to ldap_decodeGary Lockyer2020-05-041-0/+18
| | | | | | | | | | | | | | | | Add search request size limits to ldap_decode calls. The ldap server uses the smb.conf variable "ldap max search request size" which defaults to 250Kb. For cldap the limit is hard coded as 4096. Credit to OSS-Fuzz REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20454 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14334 Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* CVE-2020-10704: smb.conf: Add max ldap request sizesGary Lockyer2020-05-042-0/+36
| | | | | | | | | | | | | | | | | Add two new smb.conf parameters to control the maximum permitted ldap request size. Adds: ldap max anonymous request size default 250Kb ldap max authenticated request size default 16Mb Credit to OSS-Fuzz REF: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20454 BUG: https://bugzilla.samba.org/show_bug.cgi?id=14334 Signed-off-by: Gary Lockyer <gary@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
* docs-xml: Fix usernames in pam_winbind manpagesAndreas Schneider2020-04-292-4/+4
| | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14358 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Wed Apr 29 09:44:55 UTC 2020 on sn-devel-184
* utils: Convert smbtree to use libsmbclientVolker Lendecke2020-04-181-8/+0
| | | | | | | | | | | | | We have the domain browsing functionality in libsmbclient, don't duplicate it in smbtree with special code. Not too much gain in lines of code, but the new code is much more regular and reuses functionality provided elsewhere. This removes the "-b" option from smbtree, libsmbclient always does that. Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* docs: Update smbclient manpage that four digit years are also allowedChristof Schmitt2020-04-161-1/+1
| | | | | | | | Signed-off-by: Christof Schmitt <cs@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> Autobuild-User(master): Christof Schmitt <cs@samba.org> Autobuild-Date(master): Thu Apr 16 19:06:32 UTC 2020 on sn-devel-184
* docs-xml: Add a vfs_widelinks manpage.Jeremy Allison2020-04-092-0/+91
| | | | | Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
* s3:modules: add vfs_io_uring moduleStefan Metzmacher2020-02-152-0/+108
| | | | | | | | | | | | | | | | | | | | | | The module makes use of the new io_uring infrastructure (intruduced in linux 5.1), see https://lwn.net/Articles/778411/ and http://git.kernel.dk/cgit/liburing/ Currently this only implements SMB_VFS_{PREAD,PWRITE,FSYNC}_SEND/RECV and avoids the overhead of our userspace threadpool. In future we'll hopefully make more use of more advanced io_uring features. For now we don't have automated tests as our test infrastructure doesn't use a recent kernel. At least we're able to do compile tests on fedora31. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Sat Feb 15 11:37:45 UTC 2020 on sn-devel-184
* smbd: Add close-denied-share messageVolker Lendecke2020-01-151-0/+10
| | | | | | | | This is like close-share, but kicks out only active users where share access controls are changed such that now access would be denied Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* samba-tool: implement user getgroups commandStefan Metzmacher2020-01-151-0/+5
| | | | | | | | | samba-tool user getgroups command to list a users group memberships. Pair-programmed-with: Björn Baumbach <bb@sernet.de> Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Björn Baumbach <bb@sernet.de> Reviewed-by: Andreas Schneider <asn@samba.org>
* samba-tool: implement user setprimary group command (set primaryGroupID)Björn Baumbach2020-01-151-0/+5
| | | | | | | | | Introduce an option to set the primaryGroupID attribute of a user account. Pair-programmed-with: Stefan Metzmacher <metze@samba.org> Signed-off-by: Björn Baumbach <bb@sernet.de> Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
* smbclient/tar: add verbose modeBjörn Jacke2020-01-141-4/+5
| | | | | | | | | | | | | | A verbose mode got lost with the introduction of libarchive support. The verbose mode is optional, default is quiet mode. The output format is close to the verbose output format of POSIX tar implementations and should be good parsable. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11642 Signed-off-by: Bjoern Jacke <bjacke@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* docs-xml: 'mangled names = illegal' is the new defaultAndreas Schneider2020-01-141-2/+2
| | | | | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Tue Jan 14 15:18:02 UTC 2020 on sn-devel-184
* docs-xml/winbindnssinfo: clarify interaction with idmap_ad etc.Björn Jacke2020-01-081-5/+4
| | | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=14122 RN: docs: clarify interaction between winbind nss info and idmap backend Signed-off-by: Bjoern Jacke <bjacke@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Autobuild-User(master): Ralph Böhme <slow@samba.org> Autobuild-Date(master): Wed Jan 8 15:37:46 UTC 2020 on sn-devel-184
* vfs_zfsacl: fix issue with ACL inheritance in zfsaclawalker2019-12-201-0/+19
| | | | | | | | | | | | | | | | | | Add parameter zfsacl:map_dacl_protected to address issue preventing Windows Clients from disabling inheritance on ACLs. FreeBSD does not currently expose the ACL_PROTECTED NFS4.1 flag, but it does expose ACE4_INHERITED_ACE. When the parameter is enabled, map the absence of ACE4_INHERITED_ACE to SEC_DESC_DACL_PROTECTED. See also the discussion at https://gitlab.com/samba-team/samba/merge_requests/719 Signed-off-by: Andrew Walker <awalker@ixsystems.com> Reviewed-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Fri Dec 20 23:24:54 UTC 2019 on sn-devel-184
* vfs_zfsacl: add manpage entry for zfsacl:denymissingspecialawalker2019-12-201-0/+15
| | | | | | Signed-off-by: Andrew Walker <awalker@ixsystems.com> Reviewed-by: Ralph Boehme <slow@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org>
* docs-xml/Samba-Developers-Guide/vfs.xml: Fix incorrect VFS func names.Richard Sharpe2019-12-081-4/+4
| | | | | | | | | | | | | Use SMB_VFS_P{READ,WRITE} since the others have been retired. Also, fix up the definitions. Signed-off-by: Richard Sharpe <realrichardsharpe@gmail.com> Reviewed-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Sun Dec 8 21:50:52 UTC 2019 on sn-devel-184
* docs-xml: remove explicit "constant"Ralph Boehme2019-11-2759-59/+0
| | | | | | | | | | | | | | | | | The constant mark applied to types "string" and "ustring". The previous patches in this patchset already markes all string options as either constant or substituted, but it's still possible to add options or change existing ones to be neither constant nor substituted. In order to enforce strings to be either constant or substitued, remove the explicit constant marker. Instead, any option that is not marked as substituted is implicitly made constant. This patch doesn't change behaviour and all generated files are the same before and after this change. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* docs-xml: remove SWAT specific flagsRalph Boehme2019-11-272-2/+0
| | | | | | | | Most of the SWAT stuff was removed in 4a6a010e78721624813a84bfefa7a1b80eaf0abb, somehow these two crept back in afterwards. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "usershare template share" with constant="1"Ralph Boehme2019-11-271-0/+1
| | | | | | | The code uses Globals.usershare_template_share directly anyway. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "rpc server dynamic port range" with constant="1"Ralph Boehme2019-11-271-0/+1
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "mangling method" with constant="1"Ralph Boehme2019-11-271-0/+1
| | | | | | | | | | | | | From the manpage: ... controls the algorithm used for the generating the mangled names. Can take two different values, "hash" and "hash2". ... No need for variable substitution support in this option, declare it const. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "ldap user suffix" with constant="1"Ralph Boehme2019-11-271-0/+1
| | | | | | | | | Due to the use of append_ldap_suffix() where Globals.ldap_suffix is returned directly, variable substitution isn't supported anyway, so we can just mark this const. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "ldap machine suffix" with constant="1"Ralph Boehme2019-11-271-0/+1
| | | | | | | | | Due to the use of append_ldap_suffix() where Globals.ldap_suffix is returned directly, variable substitution isn't supported anyway, so we can just mark this const. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "ldap idmap suffix" with constant="1"Ralph Boehme2019-11-271-0/+1
| | | | | | | | | Due to the use of append_ldap_suffix() where Globals.ldap_suffix is returned directly, variable substitution isn't supported anyway, so we can just mark this const. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "ldap group suffix" with constant="1"Ralph Boehme2019-11-271-0/+1
| | | | | | | | | Due to the use of append_ldap_suffix() where Globals.ldap_suffix is returned directly, variable substitution isn't supported anyway, so we can just mark this const. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "ldap suffix" with constant="1"Ralph Boehme2019-11-271-0/+1
| | | | | | | | | Due to the use of append_ldap_suffix() where Globals.ldap_suffix was used directly in the dependent options like "ldap group suffix", we can just mark this option as const thereby removing substitution from "ldap suffix". Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "ldap admin dn" with constant="1"Ralph Boehme2019-11-271-0/+1
| | | | | | | | | All the other LDAP related options like "ldap user suffix" don't support variable substitution, so I guess it's safe to remove support for it from this one as well. Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "wins hook" with substitution="1"Ralph Boehme2019-11-271-1/+2
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "usershare path" with substitution="1"Ralph Boehme2019-11-271-0/+1
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "username map script" with substitution="1"Ralph Boehme2019-11-271-0/+1
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "username map" with substitution="1"Ralph Boehme2019-11-271-0/+1
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "shutdown script" with substitution="1"Ralph Boehme2019-11-271-1/+2
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "set quota command" with substitution="1"Ralph Boehme2019-11-271-1/+2
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "set primary group script" with substitution="1"Ralph Boehme2019-11-271-1/+2
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "server string" with substitution="1"Ralph Boehme2019-11-271-0/+1
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "root directory" with substitution="1"Ralph Boehme2019-11-271-0/+1
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "rename user script" with substitution="1"Ralph Boehme2019-11-271-0/+1
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "remote browse sync" with substitution="1"Ralph Boehme2019-11-271-0/+1
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "remote announce" with substitution="1"Ralph Boehme2019-11-271-0/+1
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "perfcount module" with substitution="1"Ralph Boehme2019-11-271-0/+1
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "passwd program" with substitution="1"Ralph Boehme2019-11-271-0/+1
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "passwd chat" with substitution="1"Ralph Boehme2019-11-271-0/+1
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "panic action" with substitution="1"Ralph Boehme2019-11-271-0/+1
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "os2 driver map" with substitution="1"Ralph Boehme2019-11-271-0/+1
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "message command" with substitution="1"Ralph Boehme2019-11-271-0/+1
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "log nt token command" with substitution="1"Ralph Boehme2019-11-271-0/+1
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "log level" with substitution="1"Ralph Boehme2019-11-271-0/+1
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "logging" with substitution="1"Ralph Boehme2019-11-271-0/+1
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>
* smbdotconf: mark "logfile" with substitution="1"Ralph Boehme2019-11-271-0/+1
| | | | | Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org>