Karolin Seeger [Fri, 19 Jun 2009 09:02:07 +0000 (11:02 +0200)]
WHATSNEW: Update changes.
Karolin
(cherry picked from commit
58e847f998087a33f0c80c2705ac2ce5b2807e75)
Jeremy Allison [Fri, 19 Jun 2009 09:00:41 +0000 (11:00 +0200)]
Bug 6488: acl_group_override() call in posix acls references an uninitialized
variable.
(cherry picked from commit
2c2894b4646567e3d92b9044a5059021def338f9)
Karolin Seeger [Fri, 19 Jun 2009 08:31:53 +0000 (10:31 +0200)]
WHATSNEW: Update changes since 3.4.0pre2.
Karolin
(cherry picked from commit
209452c60930542bf383a9fba8626da73e0e0861)
Volker Lendecke [Thu, 18 Jun 2009 09:45:57 +0000 (11:45 +0200)]
Fix bug 4699: Remove pidfile on clean shutdown
(cherry picked from commit
5a9ca3db032af5938e9709f3355a1f45b1e08d27)
(cherry picked from commit
9424e91ecdcf2e5dbdd06e9d97693dd193608324)
Jeremy Allison [Fri, 19 Jun 2009 08:10:13 +0000 (10:10 +0200)]
Fix bug #6487: Missing DFS call in trans2 mkdir call.
(cherry picked from commit
1a0005e1c508cf3b170d1c7e43b94a47b2820506)
Karolin Seeger [Fri, 19 Jun 2009 06:57:02 +0000 (08:57 +0200)]
WHATSNEW: Update changes since 3.4.0pre2.
Karolin
(cherry picked from commit
cfd94239b89139b3c3ec4e2815f3e05217f0419a)
Günther Deschner [Thu, 18 Jun 2009 23:52:11 +0000 (01:52 +0200)]
s3-pam_winbind: Fix Bug 6253: Use correct value for password expiry calculation.
Based on patch from Blindauer Emmanuel <samba@mooby.net>.
Guenther
(cherry picked from commit
e77355fec0f3b30cadcefc106c4f7957bf763c6b)
Kai Blin [Wed, 10 Jun 2009 11:08:40 +0000 (13:08 +0200)]
Revert "net: Use samba default command line arguments."
This reverts commit
c039bc15ba597d955d0ccbf5642388b0a03ba40b and dependent
commits
33c6ba805756739b7b4395bedb66ae00797cbcb1 and
ce18ba7e24b5578672d2f2ffaab97ef708421067.
While it certainly would be a nice to have feature, this has caused more
hassle than reasonable, e.g. in net commands that need to use the machine
account like net (ads|rpc) testjoin.
This un-fixes bug #6305.
(cherry picked from commit
eadbd85b2797683b3a17a1919c4aea28d6519a01)
Jeremy Allison [Wed, 17 Jun 2009 20:56:21 +0000 (13:56 -0700)]
Fix bug #6476 - more then 3000 smbd-zombies in memory
We weren't reaping children in the [x]inetd case.
Jeremy.
(cherry picked from commit
7d20e8f7f4d3d1a17b3817cea370304f2f437809)
(cherry picked from commit
ec18e0f11eda8d25feb14c92cf7d90bda8d79269)
Karolin Seeger [Thu, 18 Jun 2009 07:32:10 +0000 (09:32 +0200)]
s3/docs: Add documentation for 'net sam rights'.
This is part of a fix for bug #6328.
Karolin
(cherry picked from commit
e912764a5e0c1f05f921667eb56ef58552de454b)
(cherry picked from commit
a291e88019771bb2703bf9854483404a6ee8d622)
David Markey [Wed, 17 Jun 2009 16:29:20 +0000 (18:29 +0200)]
s3-net: Fix Bug #6328: support "net sam rights grant/revoke" with multiple rights.
David
Signed-off-by: Günther Deschner <gd@samba.org>
(cherry picked from commit
4d189ed0be01d71689731d315b53d8ba1d158be3)
Karolin Seeger [Wed, 17 Jun 2009 13:41:32 +0000 (15:41 +0200)]
WHATSNEW: Update changes since 3.4.0pre2.
Karolin
(cherry picked from commit
86adaae8ea12a88e6f7e84de4c645f237730da1c)
Karolin Seeger [Wed, 17 Jun 2009 13:19:20 +0000 (15:19 +0200)]
s3/packaging: pam_winbind has been moved to section 8.
Karolin
(cherry picked from commit
13494c0f8f9459c51b520a7cf60790e9e2f475b4)
Karolin Seeger [Wed, 17 Jun 2009 13:18:16 +0000 (15:18 +0200)]
s3/packaging: source -> source3
Karolin
(cherry picked from commit
6098be34ba62b96908e6dfe7a9d63519cee6a5af)
Jelmer Vernooij [Fri, 12 Jun 2009 00:55:26 +0000 (02:55 +0200)]
packaging/Debian: Remove outdated Debian package sources and instead refer to
Debian.org and SerNet packages.
(cherry picked from commit
ba4a047b360c14587430d9bca6c7bf3a88445d6a)
(cherry picked from commit
6400b0c36df259fe43a93cec9521e21114a02fc9)
Karolin Seeger [Wed, 17 Jun 2009 12:37:28 +0000 (14:37 +0200)]
s3/i18n: Add Russian to the list.
Karolin
(cherry picked from commit
c5580cafcb19853e06e06844c7ce36daa8cb4298)
(cherry picked from commit
f86948bcbfffea7ad5bee9bdfd8e1ac3bd0ac98d)
Karolin Seeger [Wed, 17 Jun 2009 12:31:29 +0000 (14:31 +0200)]
s3/i18n: Add Russian translation for SWAT messages.
Thanks to Yuri Kozlov <kozlov.y [at] gmail.com>!
This is part of a fix for bug #4755.
(cherry picked from commit
e26de2dadcb7b3b9d39e066867e04fe1d5553261)
(cherry picked from commit
8057dbd51d3e4d67042a1751359bc71cea0a0d77)
Günther Deschner [Wed, 13 May 2009 21:57:26 +0000 (23:57 +0200)]
s3-netapi: Fix Bug #6305. Correctly prompt for a password when a username was given.
When no callback or wrapping has managed to get a password, prompt in the
netapi connection manager for a password.
Guenther
(cherry picked from commit
33be1f56f778116a5657b257ffb0f1eb7196658a)
(cherry picked from commit
601520bf618555d7ef04f5586956b53a37594bff)
Karolin Seeger [Wed, 17 Jun 2009 10:15:59 +0000 (12:15 +0200)]
s3/i18n: Update German SWAT translations.
This is part of a fix for bug #4755.
Patch was provided (mainly) by Helge Kreutzmann <debian [at] helgefjell.de>.
Thanks!
Karolin
(cherry picked from commit
f0930cef837cb4bdbbc98b01abde41303bef6d88)
(cherry picked from commit
39b97a9826847e4336c35d8a2d02be2d64334e76)
Günther Deschner [Tue, 16 Jun 2009 13:00:20 +0000 (15:00 +0200)]
s3-netapi: Fix Bug #6451: net/libnetapi user rename using wrong access bits.
Guenther
(cherry picked from commit
29b8e08b83eeb0ab7d33bf46981cdbad8c35dc9b)
(cherry picked from commit
dc4b6a14b64c9ab38490527fa6b248ba29ec4a73)
Karolin Seeger [Wed, 17 Jun 2009 08:23:21 +0000 (10:23 +0200)]
s3/libsmb: Fix typo in error message.
Thanks to Herb Lewis <hlewis [at] panasas.com> for noticing!
Karolin
(cherry picked from commit
095f66b0ed74d4b5c7561ca05bbfdf33f60d0600)
(cherry picked from commit
04b45fbbec832bb35adebe03583b9b622954a9dc)
Karolin Seeger [Mon, 15 Jun 2009 11:29:15 +0000 (13:29 +0200)]
s3/docs: Correct version number.
Karolin
(cherry picked from commit
c2010f134b6a888e1dcd17b1f5e2c1b2656419a4)
Andreas Schneider [Mon, 15 Jun 2009 10:22:58 +0000 (12:22 +0200)]
Fix the section of the pam_winbind manpage.
Signed-off-by: Andreas Schneider <mail@cynapses.org>
(cherry picked from commit
9b3d5fc7de1103a634b86ff4d18ceb146ca6b027)
Andreas Schneider [Mon, 15 Jun 2009 10:21:07 +0000 (12:21 +0200)]
Move pam_winbind to the right manpage section (8).
Signed-off-by: Andreas Schneider <mail@cynapses.org>
(cherry picked from commit
59ab1574e41993d24733affbca07d3f7da245fc7)
(cherry picked from commit
d547aab1511c72e1cab034e2945f6ad63bda6659)
Andreas Schneider [Mon, 15 Jun 2009 10:16:49 +0000 (12:16 +0200)]
Dcoument the PAM data exports in the pam_winbind manpage.
Signed-off-by: Andreas Schneider <mail@cynapses.org>
(cherry picked from commit
1809ff4b2339bd3066532abccea0944da45edf64)
(cherry picked from commit
5d2dfba6d1699c6e417cc21233a1cc871f3c0ad1)
Andreas Schneider [Mon, 15 Jun 2009 10:16:15 +0000 (12:16 +0200)]
Document the try_first_pass option in the pam_winbind manpage.
Signed-off-by: Andreas Schneider <mail@cynapses.org>
(cherry picked from commit
779eea49de3f53040fe792de4b74b73a0c51ecb3)
(cherry picked from commit
24d6f697844bc85a03c047e5470abcfdd53735a2)
Andreas Schneider [Mon, 15 Jun 2009 10:15:26 +0000 (12:15 +0200)]
Add a synopsis section to the pam_winbind manpage.
Signed-off-by: Andreas Schneider <mail@cynapses.org>
(cherry picked from commit
24f9f32fedb92f881658db856db15173e57af0bd)
(cherry picked from commit
55df96313c5b966f41b0b5c426cf6a420cafa855)
Karolin Seeger [Mon, 15 Jun 2009 06:33:22 +0000 (08:33 +0200)]
s3/libsmb: Fix debug message.
This fixes bug #6472.
Karolin
Signed-off-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit
f92269a6ce220e12b9b80c15ed3fa2e9e6b4a6dc)
(cherry picked from commit
e24c2401750212d7212952f574ed9765fb1f2e8e)
Jeremy Allison [Fri, 12 Jun 2009 13:41:20 +0000 (15:41 +0200)]
Fix bug #6297 - owner of sticky directory cannot delete files created by
others.
The reason we couldn't delete was we were erroring out early
if requestor was not the owner of the file we wanted to delete,
instead of checking if the requestor owned the directory as well.
If either of these is true, we must go on and check the ACL.
Karolin, this is a must for 3.4.0 and also 3.3.next. I'll update
the bug report with patches for 3.4.0 and 3.3.next and ask vl
to review.
Jeremy.
(cherry picked from commit
cea3a63a86a733a16c3e91f5a78e972be802eb5c)
Günther Deschner [Sun, 7 Jun 2009 09:23:09 +0000 (11:23 +0200)]
s3-groupdb: fix enum_aliasmem in ldb branch.
It is totally valid to have an alias with no members.
This fixes bug #6465.
Tridge, please check.
Found by RPC-SAMR torture test.
Guenther
(cherry picked from commit
08bb869d03520479989052b1fd9ef3f788d95589)
Günther Deschner [Thu, 11 Jun 2009 22:46:38 +0000 (00:46 +0200)]
s3-docs: Fix Bug #4280. Shutdown scripts are called as root for privileged users.
GUenther
(cherry picked from commit
3938d1e5fa1996f64e92d33d6893bab620d16b23)
(cherry picked from commit
0491f038403036814acf6eacc7bb742345bbe27b)
Karolin Seeger [Thu, 11 Jun 2009 07:58:57 +0000 (09:58 +0200)]
WHATSNEW: Update changes since 3.4.0pre2.
Karolin
(cherry picked from commit
524b090b12c51ad2748e2b635144c9d0fa89c350)
Karolin Seeger [Thu, 11 Jun 2009 07:35:48 +0000 (09:35 +0200)]
VERSION: Raise version number up to 3.4.0rc1.
Karolin
(cherry picked from commit
0f68bd945ff797ffaa3fcc3a5722a4bc17639276)
Günther Deschner [Tue, 9 Jun 2009 13:41:44 +0000 (15:41 +0200)]
s3-net: fix "net ads testjoin".
This always needs to use machine account credentials.
Fixes bug #6456.
Kai, please check.
Guenther
Signed-off-by: Kai Blin <kai@samba.org>
(cherry picked from commit
f1d8ffab15d339f485b4cb2062167db026537b1f)
Karolin Seeger [Wed, 10 Jun 2009 06:39:35 +0000 (08:39 +0200)]
s3/docs: Fix typos.
Fix typos reported by OPC oota <t-oota [at] dh.jp.nec.com>.
Thanks!
Karolin
(cherry picked from commit
ad0d8032068fc9b920e205d3f5f923174101d777)
(cherry picked from commit
b7d54f443ade79d3f2b71aa138fd5254754bb750)
Günther Deschner [Fri, 29 May 2009 16:08:02 +0000 (18:08 +0200)]
s3-passdb: fix uninitialized variable in local_password_change().
Guenther
(cherry picked from commit
ac1ee43a2a4efa54d3d236aad8b8d21e6aaf632c)
Volker Lendecke [Mon, 8 Jun 2009 08:05:11 +0000 (10:05 +0200)]
Further fix for 6449
Thanks to TAKAHASHI Motonobu <monyo@samba.gr.jp> for reporting!
(cherry picked from commit
4368df8c839612236951b4f16367ab178c91d42e)
Volker Lendecke [Mon, 8 Jun 2009 07:45:21 +0000 (09:45 +0200)]
Fix bug 6449
Thanks to TAKAHASHI Motonobu <monyo@samba.gr.jp> for reporting!
(cherry picked from commit
022563dc7efb132293bff4ae9c5e21dcb3e1effc)
Karolin Seeger [Sat, 6 Jun 2009 13:56:47 +0000 (15:56 +0200)]
s3/docs: Fix example.
The 'ldap suffix' is not added automatically to the 'ldap admin dn'.
This fixes bug #5584.
Thanks to Stefan Bauer <stefan.bauer [at] plzk.de> for reporting!
Karolin
(cherry picked from commit
0fee798552038b730b0107540d6cfeb475803555)
(cherry picked from commit
629e7aa91a33a5428676d8f6eeac19ea9fec14d6)
Karolin Seeger [Sat, 6 Jun 2009 13:10:08 +0000 (15:10 +0200)]
s3/passdb: Fix debug message: 'net setmaxrid' does not exist.
This is aiming bug #6351.
Karolin
(cherry picked from commit
c94d1cd7b1dc3ff99ae5a1eb9058ed6015fb9749)
(cherry picked from commit
c72f75afce0f0ba300ba12ccca61a650a6c1e73b)
Karolin Seeger [Fri, 5 Jun 2009 13:35:05 +0000 (15:35 +0200)]
s3/docs: Fix typo.
Karolin
(cherry picked from commit
613c8acbdd93210b40ec6fa48cbbf297a061b3cc)
(cherry picked from commit
c84f1c7ac9da7e26f28cb233efe45614f0cedea3)
Björn Jacke [Wed, 3 Jun 2009 15:39:50 +0000 (17:39 +0200)]
s3:torture: fix password timestamp checks on NetBSD
The Open Group says:
"The useconds argument [of usleep] must be less than 1,000,000."
NetBSD takes this seriously. usleep of more than 999999 are effectless.
(cherry picked from commit
b3491df2f9db2c550845243975ddbf0a2f9658e6)
(cherry picked from commit
50f362e294d5a507d03fd54d1d976f40a935288f)
Björn Jacke [Wed, 3 Jun 2009 16:03:36 +0000 (18:03 +0200)]
s3: correct check for usleep value boundaries
(cherry picked from commit
7cdad30b9640cc876e8ca59cd67455039107a5df)
(cherry picked from commit
2e14ccc5c6be9dd7e7b98dc60c89d54ba3772344)
Simo Sorce [Sat, 30 May 2009 14:16:31 +0000 (10:16 -0400)]
Make it possible to change machine account sids
Fixes bug #6081
(cherry picked from commit
9fc13f6a2d02c22f639a1a819e09ebb648faaff7)
(cherry picked from commit
747068ff4688000287ace009f3dc58e12eefa615)
Simo Sorce [Sat, 16 May 2009 22:10:39 +0000 (18:10 -0400)]
Consolidate user create/delete paths in smbpasswd
This patch changes the way smbpasswd behaves when adding/deleting users.
smbpasswd now calls pdb_create_user/pdb_delete_user, this means that if
add/delete user scripts are configured then they are used to create or
delete unix users as well. If the scripts are not defined the behavioris
unchanged.
This also allow to use smbpasswd -a/-x with ldapsam:editposix to allow
automatic creation/deletion of users.
Part 2/2 for bug #6333.
Signed-off-by: Günther Deschner <gd@samba.org>
(cherry picked from commit
64d1b5c4e1efd734176c1ea6e5e564e626128b4f)
(cherry picked from commit
7086d3164cb897adb23e753294ca78bdfe01d4a5)
Michael Adam [Fri, 29 May 2009 21:48:26 +0000 (23:48 +0200)]
s3:pdbedit: fix "format not a string literal and no format arguments" warnings
Michael
(cherry picked from commit
2b68fb7cb4ab5b76028c54ef163badd2952fe0c0)
(cherry picked from commit
138b037c437ad27466646beb33e1922b6d18ef8c)
Simo Sorce [Sun, 17 May 2009 00:36:28 +0000 (20:36 -0400)]
Consolidate create/delete account paths in pdbedit
Use common paths like for smbpasswd, so that all utilities
behave the same way. As for smbpasswd this changes the behavior
of pdbedit to create/delete unix users is the add/delete user
scripts are provided, or ldapsam:editposix is configured.
Part 1/2 for bug #6333.
Signed-off-by: Günther Deschner <gd@samba.org>
(cherry picked from commit
f48e39540c9767e9077e7534a6d410b4ce597c86)
(cherry picked from commit
8191fe96c6a5ba57ffc94d7cc54693d6eb2967f5)
Volker Lendecke [Sun, 5 Apr 2009 15:01:57 +0000 (17:01 +0200)]
Remove a silly check
This does not increase security, and if later error messages suck, we have to
fix those.
(cherry picked from commit
e5c7df34f2d461b0f348fc1b40275a97d918ed9e)
(cherry picked from commit
291a3e79ba26b1c0e00bf929337d6251c8929e05)
Karolin Seeger [Tue, 2 Jun 2009 07:28:49 +0000 (09:28 +0200)]
s3/WHATSNEW: Update changes since 3.4.0pre1.
Karolin
(cherry picked from commit
36b8bbb0328bbcccdc6e9fe99ae4933c916885da)
Kumar Thangavelu [Fri, 29 May 2009 09:27:38 +0000 (11:27 +0200)]
s3/getdcname: Fix 'net' crash.
'net' command crashed when attempting to join a
domain. This occurred in a very specific case where
the DC had multiple IPs and one of the IPs was invalid.
Signed-off-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit
795692bd9546b91647ea96cc43ebb5c8efc0aaf2)
(cherry picked from commit
1b401a1b5374d037757954bb023287fa57b1c9b9)
Günther Deschner [Thu, 28 May 2009 09:51:46 +0000 (11:51 +0200)]
nss_wrapper: fix nss_wrapper build for solaris.
Guenther
(cherry picked from commit
136b2a3eb21eda28e7a18547751ee20f097e7492)
(cherry picked from commit
0677a068dce0bd1cc76fc3ea13322e57b1d1c3af)
Günther Deschner [Thu, 28 May 2009 08:53:53 +0000 (10:53 +0200)]
nss_wrapper: remove re-structuring leftovers (unused variables).
Guenther
(cherry picked from commit
37e4c92b383397a2c77db7e5d8adf2fa4a24d398)
(cherry picked from commit
db2fa7179db37d5cb6475006b88ff648636ac602)
Günther Deschner [Thu, 28 May 2009 08:40:22 +0000 (10:40 +0200)]
s3-selftest: use nss_wrapper.pl as "add user to group" and "delete user from group" script.
Guenther
(cherry picked from commit
7a5475f098c6a20f867adc081ca455e6c393755b)
(cherry picked from commit
1a129e79baac7c7ebbc63c9e077ede4b123cf390)
Günther Deschner [Thu, 28 May 2009 08:39:37 +0000 (10:39 +0200)]
nss_wrapper: support member add and delete for groups in nss_wrapper.pl.
Guenther
(cherry picked from commit
ebf8df35c9583619a012e85964f2ad5187a199fe)
(cherry picked from commit
0f93abf8222672e5f7c09fd0b55337de82e9569f)
Günther Deschner [Wed, 27 May 2009 20:35:14 +0000 (22:35 +0200)]
nss_wrapper: split out passwd and group paths in nss_wrapper.pl.
Guenther
(cherry picked from commit
7bb9e08d7e75be88a9788563f053794554f680a8)
(cherry picked from commit
8bda8295ffc6fa9a9776f821b11075b6bac7a80d)
Günther Deschner [Wed, 27 May 2009 16:38:10 +0000 (18:38 +0200)]
nss_wrapper: restructure nwrap calls.
Guenther
(cherry picked from commit
ec9a0917055d731aa95e2fea2045445f9945b74d)
(cherry picked from commit
bf255ec2a81f2f44a9ef0379beaec0a51bbfb000)
Karolin Seeger [Tue, 2 Jun 2009 06:21:04 +0000 (08:21 +0200)]
s3/WHATSNEW: Mention new passdb backend default.
Karolin
(cherry picked from commit
b1f7b6ebb9ea1ac53a83eca734e271e0a7137d0b)
Jeremy Allison [Mon, 1 Jun 2009 21:36:34 +0000 (14:36 -0700)]
Fix bug #6419 - smbclient -L 127.0.0.1" displays "netbios name" instead of "workgroup"
Unify the handling of the sessionsetup parsing so we don't get different
results when parsing a guest reply than an ntlmssp reply.
Jeremy.
(cherry picked from commit
736c4dddef28d53b55e58a6f62784f068e88dc01)
Björn Jacke [Wed, 27 May 2009 10:01:21 +0000 (12:01 +0200)]
s3: update manpage as to the new passdb backend default
(cherry picked from commit
83613fd2fa6d4c6e7d9eb9bdb60aac31a37bbcaf)
Björn Jacke [Mon, 25 May 2009 12:55:04 +0000 (14:55 +0200)]
s3: make passdb backend defaults to tdbsam
(cherry picked from commit
f15af8bf2def12eedd967b6e0e411f690be2f804)
Jeremy Allison [Sat, 30 May 2009 20:28:03 +0000 (13:28 -0700)]
Fix bug #6421 - POSIX read-only open fails on read-only shares.
The change to smbd/trans2.c opens up
SETFILEINFO calls to POSIX_OPEN only. The change to first smbd/open.c closes 2
holes that would have been exposed by allowing POSIX_OPENS on readonly shares,
and their ability to set arbitrary flags permutations. The O_CREAT ->
O_CREAT|O_EXCL change removes an illegal combination (O_EXCL without O_CREAT)
that previously was being passed down to the open syscall.
Jeremy.
(cherry picked from commit
d49ae9c87d182f32702a0b6a1cc2a2038f31d81d)
Jeremy Allison [Sat, 30 May 2009 09:30:16 +0000 (11:30 +0200)]
Simplify the dropbox patch
(cherry picked from commit
0d32230c17dbfa5e790d2023ba655f109938ef28)
Volker Lendecke [Wed, 13 May 2009 13:46:35 +0000 (15:46 +0200)]
Re-Add the "dropbox" functionality with -wx rights on a directory
(cherry picked from commit
78aecba62195822f3edb6134548657cf7ba9037c)
Günther Deschner [Fri, 29 May 2009 11:15:27 +0000 (13:15 +0200)]
s3-netlogon: Fix _netr_LogonSamLogon{Ex} with validation level != 3.
Guenther
(cherry picked from commit
90b38906541de554e3964d96ed83a7c71b5ea05c)
(cherry picked from commit
a8868d7fbf51e4706a7d2ee44a9066a8e1efcb4a)
Günther Deschner [Fri, 29 May 2009 10:42:15 +0000 (12:42 +0200)]
s3-netlogon: return proper error code for unsupported validation class.
Guenther
(cherry picked from commit
65f86a644a8171a99c63b6cb32e01e22897174f6)
(cherry picked from commit
745f8d37fffe9d2ac2938101b08ff39ebf50c94c)
Günther Deschner [Fri, 29 May 2009 10:41:41 +0000 (12:41 +0200)]
s3-rpc_server: increase max number of open policy handles per pipe to 2048.
Guenther
(cherry picked from commit
9bd8b0a15773d3d5c0649bfb49bb16acfb4bb5f1)
(cherry picked from commit
aebc22c407c60588eabae324eb9cc06e73538dd4)
Karolin Seeger [Fri, 29 May 2009 12:42:03 +0000 (14:42 +0200)]
WHATSNEW: Update changes since 3.4.0pre1.
Karolin
(cherry picked from commit
7021008d5ed401d60b3b2d5f7fe6c78d63c3495b)
Karolin Seeger [Fri, 29 May 2009 08:57:48 +0000 (10:57 +0200)]
s3/VERSION: Raise version number up to 3.4.0pre2.
Karolin
(cherry picked from commit
51610de47bb709739ba84075395f5409be5ebc5c)
Karolin Seeger [Wed, 27 May 2009 16:13:09 +0000 (18:13 +0200)]
s3/docs: Correct version number.
Karolin
(cherry picked from commit
136b885461b730cf226999b07d2198de8441ebc9)
Karolin Seeger [Fri, 29 May 2009 07:49:49 +0000 (09:49 +0200)]
s3/docs: Fix typo.
This fixes bug #4341.
Thanks to Michael Cartmell <michael.cartmell [at] thomson.com> for reporting!
Karolin
(cherry picked from commit
2228cc6a0f942b774bef7fb0b99009897fa4dff4)
(cherry picked from commit
e1b1f14e0260395a8d452ea0a129bcc9bb3f98cc)
Jeremy Allison [Thu, 28 May 2009 20:33:06 +0000 (13:33 -0700)]
Fix uninitialized variable use caught by valgrind.
Jeremy.
(cherry picked from commit
62d767d57fafd869ec956cbcc84e8c866c6d665b)
Steven Danneman [Thu, 28 May 2009 00:14:49 +0000 (17:14 -0700)]
s3/auth map NULL domains to our global sam name
This is an addendum to
d8c54fdd, which made make_user_info_map() match
Windows behavior by mapping untrusted domains given to smbd on the wire
with the users credentials to smbd's global sam name.
This fix was being circumvented in the case where the client passed
a NULL domain. Vista clients do this. In that case smbd was always
remapping the name to the machine workgroup. The NULL domain case
should also be mapped to the global sam name.
Removing the code in this patch, causes us to fall down to the logic
added in
d8c54fdd and properly map the domain.
(cherry picked from commit
fbca26923915a70031f561b198cfe2cc0d9c3aa6)
(cherry picked from commit
22b9d9d28d9acd68a9bc492530fcd0a565ff0aa3)
Michael Adam [Wed, 27 May 2009 17:25:44 +0000 (19:25 +0200)]
s3:idmap_ldap: filter out of range mappings in default idmap config
This fixes bug #6417
Michael
(cherry picked from commit
e381c13b023f2b512b3f6aec133db9f323bc8132)
(cherry picked from commit
4ca03e3bb96518665c296ba2cf5aa1d91916897e)
Michael Adam [Wed, 27 May 2009 17:26:32 +0000 (19:26 +0200)]
s3:idmap: fix a comment typo
Michael
(cherry picked from commit
3fe9859342c28fe9da7011fb18a5fb5de8b29fa6)
(cherry picked from commit
df4a0fabff06ea31149aac45d6477564cf96179b)
Michael Adam [Wed, 27 May 2009 17:24:03 +0000 (19:24 +0200)]
s3:idmap_tdb2: filter out of range mappings in default idmap config
This fixes bug #6416
Michael
(cherry picked from commit
e12670a1053edf57af137026bd3fdb9fc7dfb0b2)
(cherry picked from commit
b369902cddd55fab74ca6e0743e15e0f8cbfc4cc)
Michael Adam [Wed, 27 May 2009 17:12:28 +0000 (19:12 +0200)]
s3:idmap_tdb: filter out of range mappings in default idmap config
This fixes bug #6415
Michael
(cherry picked from commit
3d3f39838261ddc401053dadcc5bd8e6317a3a8e)
(cherry picked from commit
34500d59b6f35de2c3d273d3523708ec22df59ce)
Marc VanHeyningen [Tue, 5 May 2009 21:18:50 +0000 (21:18 +0000)]
s3: Allow child processes to exit gracefully if we are out of fds
When we run out of file descriptors for some reason, every new
connection forks a child that immediately panics causing smbd to
coredump. This seems unnecessarily harsh; with this code change we
now catch that error and merely log a message about it and exit
without the core dump.
Signed-off-by: Tim Prouty <tprouty@samba.org>
(cherry picked from commit
1c8f9892010ce8cc754089b25313c6bc8e622165)
Marc VanHeyningen [Tue, 5 May 2009 22:07:40 +0000 (22:07 +0000)]
s3: zero an uninitialized array
Invalid pointers were being dereferenced in lookup_sids causing
occasional seg faults.
Signed-off-by: Tim Prouty <tprouty@samba.org>
(cherry picked from commit
5afacc0a65e52e73e3887545c4e5e1ad44264b66)
Karolin Seeger [Tue, 26 May 2009 12:16:10 +0000 (14:16 +0200)]
s3/docs: Fix typo in man idmap_rid.
Karolin
(cherry picked from commit
73eaff7a395c9a7a0042f2c50f8817499b6cfdcd)
(cherry picked from commit
b85c2cbcc57291ff88d8d490f548faa675b689be)
Steven Danneman [Fri, 22 May 2009 23:57:52 +0000 (16:57 -0700)]
s3/docs Add manpage for "map untrusted to domain" parameter
This fixes bug 6352.
(cherry picked from commit
bf5fb8b58cb1813fdadabe8f96ef8af305d4d582)
Michael Adam [Mon, 25 May 2009 22:47:15 +0000 (00:47 +0200)]
s3:dbwrap_tool: add listkeys operation
Michael
(cherry picked from commit
714acfac013a46c3677c3eb72ad57db6d97c7d61)
(cherry picked from commit
816776d2f81c1ae90e52612af76aaafeaeb04598)
Michael Adam [Mon, 25 May 2009 22:26:39 +0000 (00:26 +0200)]
s3:dbwrap_tool: remove superfluous command mapping
Michael
(cherry picked from commit
11f07599006cf2ce6760095d07bfe22680c3744e)
(cherry picked from commit
53dfa79e07b22325c0f290b05d4b87dde0cbf3cb)
Michael Adam [Mon, 25 May 2009 21:27:28 +0000 (23:27 +0200)]
s3:dbwrap_tool: add "erase" opearation
Michael
(cherry picked from commit
dfe06d21bdc4c715e02c9f80c4bc7144a0d9ee59)
(cherry picked from commit
2e051ece16e7b18e9e82ef36f7d7e8e39d00e66d)
Björn Jacke [Tue, 26 May 2009 13:40:21 +0000 (15:40 +0200)]
s3:pam_smbpass: don't call openlog() or closelog() from pam_smbpass
Patch from Steve Langasek with tiny fixes by me to make it apply to master.
Also see Debian bug #434372 and bugzilla #4831.
Calling openlog() or closelog() inside a pam module is not good as these
functions are not stackable and no program won't re-do openlog() just because a
pam module might have called closelog().
(cherry picked from commit
5c34ea94bdf9e3efb6743e52dd3c0c0088cff7d8)
Karolin Seeger [Tue, 26 May 2009 07:48:37 +0000 (09:48 +0200)]
WHATSNEW: Unify spelling.
Karolin
(cherry picked from commit
41644f222542442f2df6f989989aea1c38735d8d)
Karolin Seeger [Tue, 26 May 2009 07:44:39 +0000 (09:44 +0200)]
WHATSNEW: Start release notes for 3.4.0pre2.
Karolin
(cherry picked from commit
635127a87b8473a01e20338206c2e5b546de5865)
Kai Blin [Tue, 26 May 2009 07:29:35 +0000 (09:29 +0200)]
WHATSNEW: Add net command changes
(cherry picked from commit
ce18ba7e24b5578672d2f2ffaab97ef708421067)
Kai Blin [Thu, 14 May 2009 09:39:01 +0000 (11:39 +0200)]
net: Use samba default command line arguments.
Attention:
The meaning of the -N flag changed.
To get the old meaning for net groupmap set, use the long option --ntname
The long option for using kerberos changed from --kerberos to --use-kerberos
net rpc commands will now prompt for a password if none is given.
As a benefit, net will now accept an authentication file like other samba
command line tools. So no need to specify the password on the command line in
scripts anymore.
This should fix bug #6357
Signed-off-by: Kai Blin <kai@samba.org>
(cherry picked from commit
fb262f79fab00374023e59476e8d05a1015a7041)
(cherry picked from commit
c039bc15ba597d955d0ccbf5642388b0a03ba40b)
Slava Semushin [Fri, 22 May 2009 18:10:05 +0000 (01:10 +0700)]
source3/utils/log2pcaphex.c(main): fixed file descriptors leak.
One of leaks found by cppcheck:
[./source3/utils/log2pcaphex.c:367]: (error) Resource leak: out
(cherry picked from commit
8987ca29062db53db117d6c9d9ce2ad01ed17d22)
Slava Semushin [Sat, 23 May 2009 13:51:53 +0000 (20:51 +0700)]
source{3,4}/torture/smbiconv.c(main): fixed file descriptor leak.
File descriptor leaks only when we use file instead of stdout.
Found by cppcheck:
[./source3/torture/smbiconv.c:219]: (error) Resource leak: out
[./source4/torture/smbiconv.c:211]: (error) Resource leak: out
(cherry picked from commit
61cca8aa5f5e3ad665c3b1acfab20802dd0f3f3a)
Slava Semushin [Sat, 23 May 2009 14:02:40 +0000 (21:02 +0700)]
nsswitch/winbind_nss_aix.c(fill_grent): fixed memory leak.
Found by cppcheck:
[./nsswitch/winbind_nss_aix.c:241]: (error) Memory leak: result
(cherry picked from commit
bfe6186c600470916d73c3d3b17b6dfc27c299bd)
Günther Deschner [Mon, 25 May 2009 13:55:26 +0000 (15:55 +0200)]
s3-selftest: fix typo.
Guenther
(cherry picked from commit
4258750e4f112040b3537c2c479f62b6e59b32e3)
(cherry picked from commit
b9344264c0d2108fbbb6ed9b19da9a56b6444211)
Michael Adam [Mon, 25 May 2009 09:54:43 +0000 (11:54 +0200)]
s3:winbind:idmap_ldap: warn about duplicate SID->XID mappings (bug #6387)
With the current infrastructure, we should not return error on
duplicate mappings but just warn instead (because an error would
trigger the attempt to create yet another mapping).
Michael
(cherry picked from commit
3111d78001f458cfcaf81123a1d1c23d5927a6c2)
(cherry picked from commit
5328f600bbc6535d8880b1b0c74bcfbd9b7a162a)
Michael Adam [Mon, 25 May 2009 09:29:14 +0000 (11:29 +0200)]
s3:winbind:idmap_ldap: warn about duplicate XID->SID mappings (bug #6387)
With the current infrastructure, we should not return error on
duplicate mappings but just warn instead (because an error would
trigger the attempt to create yet another mapping).
Michael
(cherry picked from commit
35c3f4162d15f9846a645444e623178b78c52994)
(cherry picked from commit
751b6b07c5ea25809b1766a01fc859d580304ae9)
Günther Deschner [Mon, 25 May 2009 12:05:18 +0000 (14:05 +0200)]
s3-samr: Fix Bug #6372, usermanager only displaying 1024 groups and aliases.
This is now also verified with the RPC-SAMR-LARGE-DC test.
Guenther
(cherry picked from commit
fca7dce1a908570e463ddcbd663955fcafd1d843)
(cherry picked from commit
69907810fee3253096958bf174a052d3cb3b385c)
Günther Deschner [Mon, 25 May 2009 12:03:16 +0000 (14:03 +0200)]
s3-selftest: enable RPC-SAMR-LARGE-DC against Samba3.
This will fail for alias creation as nss_wrapper does not yet wrap around
libnss_winbind.
Guenther
(cherry picked from commit
f0139e3b69a866a6154d0b349410fc0b3bfc30af)
(cherry picked from commit
e9ed9e7f90c39d38dd40871bb915adda2e9951ff)
Günther Deschner [Mon, 25 May 2009 11:08:58 +0000 (13:08 +0200)]
s4-smbtorture: add RPC-SAMR-LARGE-DC test.
This rather simple test creates 4500 objects on a domain controller and checks
the enum calls for the correct number of results.
Guenther
(cherry picked from commit
eb5e8dc82efae20c95a391a15c1264f2267e5a74)
(cherry picked from commit
c1dca5a5f0becdd5f7041e91245cf9d9ae0dfd13)
Günther Deschner [Fri, 22 May 2009 17:04:25 +0000 (19:04 +0200)]
s4-smbtorture: rename test_EnumDomain{Users,Groups,Aliases} in RPC-SAMR.
Guenther
(cherry picked from commit
a75698bdf3b62d43e4909e5bfded70f6675b2058)
(cherry picked from commit
b4817feb9ec5e9ac9e610fdda31dfa64295c6822)
Günther Deschner [Thu, 21 May 2009 16:12:29 +0000 (18:12 +0200)]
s4-smbtorture: re-work test_Create{User,Group,Alias} a little.
Guenther
(cherry picked from commit
05e6ebb7f812eed95b8407e65cf438e04d6e3789)
(cherry picked from commit
5e726f1843cd8ecb29588f6a00196354c6bc6708)
Günther Deschner [Fri, 22 May 2009 15:56:37 +0000 (17:56 +0200)]
s3-pamsmbpass: copy _pam_get_item and _pam_get_data from pam_winbind.
Guenther
(cherry picked from commit
1950e180caf707346300b83021624d586cc3776d)
(cherry picked from commit
7e41fce5aa9b97eb4cf3c29bf6542b05051e1f27)