Karolin Seeger [Tue, 16 Dec 2008 08:04:32 +0000 (09:04 +0100)]
docs: Fix typo in the idmap_ad manpage.
Karolin
(cherry picked from commit
b876e1336bed52e0823e0e88381d223bd6aa95e4)
(cherry picked from commit
611ac35a694930693d2f773d15e59be138261a8e)
(cherry picked from commit
d54a1e49d5fe567bcda7c4c02f6ace2d03e189e9)
Karolin Seeger [Fri, 12 Dec 2008 13:30:01 +0000 (14:30 +0100)]
docs: Add hint that "socket address" usually don't need to be set.
This fixes bug #5950.
Thanks to the Debian Samba package maintainers for reporting!
Karolin
(cherry picked from commit
19beef0dd9354296ae79d32077c58fbacf570c85)
(cherry picked from commit
0d035d36bd3707ccb9f77f0b2730869dc78719d4)
(cherry picked from commit
6be19f94802d545cc43286aa242b0ca2e5b79721)
(cherry picked from commit
879a4fbe99739b67d877caac2d7a2f763c69d41f)
Karolin Seeger [Thu, 11 Dec 2008 17:08:29 +0000 (18:08 +0100)]
Samba3-HOWTO: Fix usage of 'net idmap restore'.
This fixes bug #5883.
Karolin
(cherry picked from commit
b4a4e635246b88277b235fa343eda48bd4bb4ce3)
(cherry picked from commit
5744177740120524740db884564142df19358ae7)
(cherry picked from commit
7584fe4e8bcbaf73f509d6981a70ff9dde92db1c)
(cherry picked from commit
fda3f00246c3ecb664d2bf387ecd0e28dec16e34)
Jeremy Allison [Thu, 4 Dec 2008 23:35:07 +0000 (15:35 -0800)]
Fix bug #5937 - filenames with "*" char hide other files
Jeremy.
Jeremy Allison [Thu, 4 Dec 2008 19:07:53 +0000 (11:07 -0800)]
Fix bug #1254 - write list not working under share-level security
(mtab.c, fix build).
Jeremy.
Karolin Seeger [Tue, 2 Dec 2008 19:50:02 +0000 (20:50 +0100)]
docs: Add default value for "writeable" to man smb.conf.
Karolin
(cherry picked from commit
c09e04ac83365333605b7b1db3d07ccfd451a667)
(cherry picked from commit
70c581586ea02fbff4c5dde0ec002b22d472dfc5)
(cherry picked from commit
1ba197a3054c6d997ceca6f124039d3cabf00289)
Karolin Seeger [Tue, 18 Nov 2008 15:33:23 +0000 (16:33 +0100)]
WHATSNEW: Update WHATSNEW for 3.0.33.
Karolin
Volker Lendecke [Sat, 8 Nov 2008 16:14:06 +0000 (17:14 +0100)]
Fix the offset checks in the trans routines
This fixes a potential crash bug, a client can make us read memory we
should not read. Luckily I got the disp checks right...
Volker
Andreas Schneider [Wed, 29 Oct 2008 13:12:04 +0000 (14:12 +0100)]
Fix circular dependency error with autoconf 2.6.3.
Signed-off-by: Andreas Schneider <anschneider@suse.de>
Jeremy Allison [Tue, 25 Nov 2008 23:57:18 +0000 (15:57 -0800)]
Fix bug #5914 - Build failure: redefinition of struct name_list
Jeremy.
Jeremy Allison [Mon, 24 Nov 2008 23:40:50 +0000 (15:40 -0800)]
Fix bug #5873 - ACL inheritance cannot be broken. This regresses #4308, but that will have to
be fixed another way.
Jeremy.
Jeremy Allison [Mon, 24 Nov 2008 23:35:12 +0000 (15:35 -0800)]
Merge branch 'v3-0-test' of ssh://jra@git.samba.org/data/git/samba into v3-0-test
Stefan Metzmacher [Mon, 24 Nov 2008 14:26:21 +0000 (15:26 +0100)]
libads/ldap.c: return an error instead of crashing when no realm is given
The bug was triggered by "net ads info -S 127.8.7.6" (where 127.8.7.6 doesn't ex
and "disable netbios = yes".
metze
Signed-off-by: Michael Adam <obnox@samba.org>
Michael Adam [Fri, 21 Nov 2008 23:43:43 +0000 (00:43 +0100)]
winbindd: make all winbind rpc-methods static.
Now that the methods are no longer needed in winbindd_ads,
we can make them static again.
Michael
Michael Adam [Fri, 21 Nov 2008 23:42:54 +0000 (00:42 +0100)]
winbindd_ads: use the reconnect methods instead of the rpc methods directly
Some of the ads methods just point to the rpc methods.
This makes winbindd_ads use the reconnect methods instead of
calling the rpc methods directly in order to prevent
negative cache entries for e.g. name_to_sid, when the dc
has closed the connection without sending a reset.
Michael
Yasuma Takeda [Thu, 20 Nov 2008 19:41:47 +0000 (11:41 -0800)]
Fix bug #5909 - MS-DFS does not work on Vista, if link name includes multibyte character.
Dina Fine [Tue, 18 Nov 2008 20:43:26 +0000 (12:43 -0800)]
Fix bug #5908 - Samba 3.0.32 - internal change notify on share directory fails"
Carsten Dumke [Thu, 13 Nov 2008 18:05:00 +0000 (12:05 -0600)]
net: Fix documentation of net rap printq info (bug #5892)
The man-page (see net(8)) and the usage-info (call "net help rap printq") of
'net rap printq' do contain an option "list" but in net_rap.c
the option is named "info".
Rename the option "list" in the documentation (man-pages + usage) to "info" to
match the code.
Signed-off-by: Kai Blin <kai@samba.org>
Jeremy Allison [Wed, 12 Nov 2008 22:09:22 +0000 (14:09 -0800)]
Fix memory leak in error path, spotted by Martin Zielinski <mz@seh.de>.
Jeremy.
Kai Blin [Fri, 7 Nov 2008 08:43:46 +0000 (09:43 +0100)]
ntlm_auth: Put huge NTLMv2 blobs into extra_data on CRAP auth
This fixes bug #5865
Kai Blin [Fri, 7 Nov 2008 08:40:35 +0000 (09:40 +0100)]
winbindd: Reformat the WBFLAGS defines to prepare for adding a new flag.
Jeff Layton [Thu, 6 Nov 2008 20:20:55 +0000 (15:20 -0500)]
mount.cifs: use lock/unlock_mtab scheme from util-linux-ng mount prog
The util-linux-ng sources have a good, but rather complex scheme for
locking the mtab before updating it. Mount helpers need to follow the
same scheme. Advisory locking only works if everyone is using the same
locking scheme.
Copy the routines we need from util-linux-ng into a separate source file
and then have mount.cifs and umount.cifs link in this object.
The long term goal is to have these routines in a separate helper
library (libmount). Mount helpers can then dynamically link in that lib.
Until that happens, this should serve as a suitable stopgap solution.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Jeremy Allison [Thu, 6 Nov 2008 03:12:10 +0000 (19:12 -0800)]
Add reference to bug #4308 to remind me to add regression test to smbtorture.
Jeremy.
Volker Lendecke [Mon, 3 Nov 2008 16:14:35 +0000 (17:14 +0100)]
Fix bug triggered by the RAW-SAMBA3OPLOCKLOGOFF test
Günther Deschner [Mon, 25 Aug 2008 09:36:56 +0000 (11:36 +0200)]
auth: Fix build warning.
Guenther
(cherry picked from commit
4661ef625a6522d6f859b83e3e3702f01d0b952f)
(cherry picked from commit
60649a74cdf2594bc89c301025f86d23caba91c2)
Stefan Metzmacher [Mon, 27 Oct 2008 18:40:23 +0000 (19:40 +0100)]
utils/net_ads.c: call saf_join_store() after a the join.
metze
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Mon, 27 Oct 2008 18:39:30 +0000 (19:39 +0100)]
libads/ldap.c: store the dc name in the saf cache as in all other places
metze
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Mon, 27 Oct 2008 18:38:15 +0000 (19:38 +0100)]
libads/ldap.c: if the client belongs to no site at all any dc is the closest
metze
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Mon, 27 Oct 2008 18:36:25 +0000 (19:36 +0100)]
libads/ldap.c: pass the real workgroup name to get_dc_name()
metze
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Mon, 27 Oct 2008 18:31:30 +0000 (19:31 +0100)]
libsmb/namequery.c: add saf_join_store() function
saf_join_store() should be called after a successful
domain join, the affinity to the dc used at join time
has a larger ttl, to avoid problems with delayed replication.
metze
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Mon, 27 Oct 2008 08:40:25 +0000 (09:40 +0100)]
libsmb/namequery: fallback to returning all dcs, when none is available in the requested site
It could happen that all dcs in a site are unavailable
(some sites have only one dc) and then we need to fallback
to get all dcs.
metze
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Wed, 22 Oct 2008 09:14:10 +0000 (11:14 +0200)]
s3: libads: use get_dc_name() instead of get_sorted_dc_list() in the LDAP case
We use get_dc_name() for LDAP because it generates the selfwritten
krb5.conf with the correct kdc addresses and sets KRB5_CONFIG.
For CLDAP we need to use get_sorted_dc_list() to avoid recursion.
metze
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Wed, 22 Oct 2008 08:36:21 +0000 (10:36 +0200)]
s3: correctly detect if the current dc is the closest one
ads->config.tried_closest_dc was never set.
metze
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Günther Deschner <gd@samba.org>
Michael Adam [Mon, 27 Oct 2008 13:28:44 +0000 (14:28 +0100)]
winbind: fix smbd hanging on Solaris when winbindd closes socket.
On some versions of Solaris, we observed a strange effect of close(2)
on a socket: After the server (here winbindd) called close, the client fd
was not marked as readable for select. And a write call to the fd did
not produce an error EPIPE but just returned as if successful.
So while winbindd had called remove_client(), the corresponding smbd
still thought that it was connected, but failed to retrieve answers
for its queries.
This patch works around the problem by forcing the client fd to
the readable state: Just write one byte into the socket before
closing.
Michael
Andreas Schneider [Fri, 24 Oct 2008 10:01:24 +0000 (12:01 +0200)]
Fix the build of pam_winbind.
Andreas Schneider [Mon, 20 Oct 2008 15:39:35 +0000 (17:39 +0200)]
Delete the krb5 ccname variable from the PAM environment if set.
If winbind sets the KRB5CCNAME variable it should unset it when
the cache gets destroyed.
Jeremy Allison [Fri, 17 Oct 2008 04:01:56 +0000 (21:01 -0700)]
Cope with bad trans2mkdir requests from System i QNTC IBM SMB client.
If total_data == 4 Windows doesn't care what values
are placed in that field, it just ignores them.
The System i QNTC IBM SMB client puts bad values here,
so ignore them.
Jeremy.
Jeff Layton [Thu, 9 Oct 2008 14:51:33 +0000 (10:51 -0400)]
mount.cifs: make return codes match the return codes for /bin/mount (try #3)
The manpage for /bin/mount specifies that the return code should be a
positive integer (actually, it's a bitfield). Clean up the return
codes from mount.cifs to make them match the expected return values
from /bin/mount. This necessary for proper integration with autofs.
This is the third attempt at this patch. The changes here are minor,
just changing some return's from main() into exit() calls for
consistency's sake.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Jeff Layton [Thu, 9 Oct 2008 14:47:45 +0000 (10:47 -0400)]
mount.cifs: have uppercase_string return success on NULL pointer
We currently don't attempt to uppercase the device portion of the mount
string if there isn't a prefixpath. Fix that by making uppercase_string
return success without doing anything on a NULL pointer.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Jeremy Allison [Wed, 8 Oct 2008 18:37:43 +0000 (11:37 -0700)]
Fix bug #5814 - Winbindd dumping core in a strange manner while doing "rescan_trusted_domain".
From analysis by hargagan <shargagan@novell.com> :
"The winbindd_child_died() is also getting called from process_loop() in case of
SIGCHLD signal. In this case it doesn't make the timeout_handler to NULL for
the first request. It then initiate a new request using
schedule_async_request() which installs a new timeout handler for the same
request. In such a case, for a badly unresponsive system both the timeout
handler can be called. For the first call the "private_data" will be cleared
and for another call the timeout handler will be detecting the double free. So,
for such a case as well, the winbindd_child_died() should make the
timeout_handler to NULL."
Jeremy.
Jeremy Allison [Wed, 1 Oct 2008 20:23:36 +0000 (13:23 -0700)]
Fix use of DLIST_REMOVE as spotted by Constantine Vetoshev <gepardcv@gmail.com>.
This API is unusual in that if used to remove a non-list head it nulls out
the next and prev pointers. This is what you want for debugging (don't want
an entry removed from the list to be still virtually linked into it) but
means there is no consistent idiom for use as the next and prev pointers
get trashed on removal from the list, meaning you must save them yourself.
You can use it one way when deleting everything via the head pointer, as
this preserves the next pointer, but you *must* use it another way when not
deleting everything via the head pointer. Fix all known uses of this (the main
one is in conn_free_internal() and would not free all the private data entries
for vfs modules. The other changes in web/statuspage.c and winbindd_util.c
are not strictly neccessary, as the head pointer is being used, but I've done
them for consistency. Long term we must revisit this as this API is too hard
to use correctly.
Jeremy.
Jeremy Allison [Tue, 30 Sep 2008 20:37:54 +0000 (13:37 -0700)]
Ensure we emit the notify message before renaming the open files.
Jeremy.
Jeremy Allison [Sat, 27 Sep 2008 01:41:05 +0000 (18:41 -0700)]
Fix for bug #5790 - samba returns STATUS_OBJECT_NAME_NOT_FOUND on set file disposition call.
This was my fault. I use a singleton cache (positive and negative) to speed up pathname based
qfileinfo/setfileinfo lookups for alternate fsp's open on the same path. I only invalidated the
negative cache on adding a new file fsp, as I incorrectly imagined the new fsp was put at the *end* of
the open files list. DLIST_ADD puts it at the start, meaning any subsequent open wasn't seen once the
cache was set. Doh !
Jeremy.
Jeremy Allison [Tue, 23 Sep 2008 23:47:21 +0000 (16:47 -0700)]
Fix winbindd crash in an unusual failure mode. Bug #5737. Based on original patch from shargagan@novell.com
Jeremy.
Günther Deschner [Thu, 18 Sep 2008 12:09:27 +0000 (14:09 +0200)]
fix net_io_q_srv_pwset2.
yes, we all love hand-marshalled rpc...
Guenther
Jeff Layton [Sun, 14 Sep 2008 12:37:58 +0000 (08:37 -0400)]
mount.cifs: make local versions of strlcat and strlcpy static
...to silence -Wmissing-prototypes
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Jeff Layton [Sun, 14 Sep 2008 12:37:57 +0000 (08:37 -0400)]
cifs.upcall: make most functions static and silence compiler warnings
...to silence -Wmissing-prototypes and some uninit'ed variable
warnings. Thanks to GD for the extra-paranoid compiler flags.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Jeff Layton [Fri, 12 Sep 2008 20:58:00 +0000 (16:58 -0400)]
mount.cifs: don't prompt for password on krb5 mounts
krb5 mounts require that the user already have a valid krb5 ticket.
Since we can't currently use the password entered, don't prompt for it.
Also, switch to using strncmp instead of strcmp here.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Jeff Layton [Fri, 12 Sep 2008 20:58:00 +0000 (16:58 -0400)]
mount.cifs: fix several problems when mounting subdirectories of shares (try 2)
This patch is the second patch to attempt to fix up some of the problems
with mounting subdirectories of shares. The earlier patch didn't handle
this correctly when POSIX extensions were enabled. This one does.
This is a bit of a confusing area since the different components of
a service string have different rules:
1) hostname: no '/' (slash) or '\' (backslash) is allowed to be
embedded within the string
2) sharename: same rules as hostname
3) prefixpath: '\' *is* allowed to be embedded in a path component,
iff POSIX extensions are enabled. Otherwise, neither
character is allowed.
The idea here is to allow either character to act as a delimiter when we
know that the character can't be anything but a delimiter (namely
everywhere up to the start of the prefixpath). The patch will convert
any '\' unconditionally to '/' in the UNC portion of the string.
However, inside the prefixpath, we can't make assumptions about what
constitutes a delimiter because POSIX allows for embedded '\'
characters. So there we don't attempt to do any conversion, and pass the
prefixpath to the kernel as is. Once the kernel determines whether POSIX
extensions are enabled, it can then convert the path if needed and it's
able to do so. A patch to handle this has already been committed to the
cifs-2.6 git tree.
This patch also fixes an annoyance. When you mount a subdir of a share,
mount.cifs munges the device string so that you can't tell what the
prefixpath is. So if I mount:
//server/share/p1/p2/p3
..then /proc/mounts and mtab will show only:
//server/share
Finally, it also tries to apply some consistent rules to the uppercasing
of strings.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Jeff Layton [Fri, 12 Sep 2008 20:58:00 +0000 (16:58 -0400)]
Introduce const DATA_BLOB data_blob_null = { NULL, 0, NULL };
Cherry picked from commit
3d3d61687ef00181f4f04e001d42181d93ac931e
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Jeff Layton [Fri, 12 Sep 2008 20:57:59 +0000 (16:57 -0400)]
cifs.upcall: bump SPNEGO msg version number and don't reject old versions
When we added the ability for the kernel to send sec=mskrb5 to the
upcall, we subtly broke old cifs.upcall versions that don't understand
it. Bump the spnego message version to 2 to make this clear. Also,
change cifs.upcall to not reject requests with a version that's lower
than the current one, and to send the reply with the same version that
the request sent. The idea is to try and keep cifs.upcall backward
compatible with old kernels.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Jeff Layton [Fri, 12 Sep 2008 20:57:59 +0000 (16:57 -0400)]
cifs.upcall: fix build warning
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Jeff Layton [Fri, 12 Sep 2008 20:57:59 +0000 (16:57 -0400)]
cifs.upcall: handle MSKRB5 OID properly
When the kernel sends the upcall a sec=mskrb5 parameter, that means
the the MSKRB5 OID is preferred by the server. This patch fixes the
upcall to use that OID in place of the "normal" krb5 OID when it
gets a sec=mskrb5 parameter.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Acked-by: Steve French <smfrench@gmail.com>
Jeff Layton [Fri, 12 Sep 2008 20:57:59 +0000 (16:57 -0400)]
cifs.upcall: negatively instantiate keys on error
When a request-key upcall exits without instantiating a key, the kernel
will negatively instantiate the key with a 60s timeout. Older kernels,
however seem to also link that key into the session keyring. This
behavior can interefere with subsequent mount attempts until the
key times out. The next request_key() call will get this negative key
even if the upcall would have worked the second time.
Fix this by having cifs.upcall negatively instantiate the key itself
with a 1s timeout and don't attach it to the session keyring.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Steve French [Fri, 12 Sep 2008 20:57:59 +0000 (16:57 -0400)]
Building cifs.upcall is giving this build warning:
client/cifs.upcall.c:205: warning: function declaration isn’t a prototype
This patch fixes this by properly declaring usage() args as void.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Signed-off-by: Steve French <sfrench@samba.org>
Steve French [Fri, 12 Sep 2008 20:57:59 +0000 (16:57 -0400)]
cifs.upcall: fix manpage and comments
The "cifs.resolver" key type has been changed to "dns_resolver". Fix
the comments at the top of cifs.upcall and the manpage accordingly.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Signed-off-by: Steve French <sfrench@samba.org>
---
docs-xml/manpages-3/cifs.upcall.8.xml | 4 ++--
source/client/cifs.upcall.c | 8 ++++----
2 files changed, 6 insertions(+), 6 deletions(-)
Steve French [Fri, 12 Sep 2008 20:57:59 +0000 (16:57 -0400)]
cifs.upcall was not recognizing the newer name "dns_resolver" key type
(as a synonym for the older "cifs.resolver" name) when resolving host
names to ip addresses for the kernel.
Acked-by: Jeff Layton
Steve French [Fri, 12 Sep 2008 20:57:59 +0000 (16:57 -0400)]
cifs.upcall: fix compile warning
Steve French noticed these warnings when building cifs.upcall:
Compiling client/cifs.upcall.c
client/cifs.upcall.c: In function 'usage':
client/cifs.upcall.c:204: warning: declaration of 'prog' shadows a global declaration
client/cifs.upcall.c:33: warning: shadowed declaration is here
Change the usage function to not take and arg and have it just use the global
"prog" variable. Fix a typo in the log message generated when an unknown
option is specified. Also getopt() always returns '?' when it sees an unknown
option so there's no point in printing it out.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Michael Adam [Fri, 12 Sep 2008 20:57:59 +0000 (16:57 -0400)]
build: fix linking cifs.upcall when nscd_flush_cache() is found.
Michael
Jeff Layton [Fri, 12 Sep 2008 20:57:58 +0000 (16:57 -0400)]
cifs.upcall: move default install location to EPREFIX/sbin
cifs.upcall links to libraries that live under /usr, so installing it
in /sbin doesn't seem appropriate. Move it to EPREFIX/sbin instead
(i.e. /usr/sbin).
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Jeff Layton [Fri, 12 Sep 2008 20:57:58 +0000 (16:57 -0400)]
cifs.upcall: enable building by default on linux
When building on linux, default to building cifs.upcall. Throw a
warning if ADS support is disabled or keyutils isn't installed.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Jeremy Allison [Fri, 12 Sep 2008 20:57:58 +0000 (16:57 -0400)]
This patchset comprises a number of cleanups for the cifs upcall
binary. The biggest change is that it renames it from cifs.spnego
to cifs.upcall since the cifs.spnego name really isn't applicable
anymore.
It also fixes a segfault when the program is run without any args
and adds a manpage. Comments and/or suggestions appreciated.
This set should apply cleanly to the 3.3 test branch.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Jeremy.
Igor Mammedov [Fri, 12 Sep 2008 20:57:58 +0000 (16:57 -0400)]
Adds support for cifs.resolver upcall.
Here is a patch for userspace cifs.spnego handler that adds support for cifs.resolver
upcall used in DFS code.
Any comments are appreciated.
#############################
Cifs upcall with key type cifs.resolver is used for resolving
server names in handling DFS refferals.
Signed-off-by: Igor Mammedov <niallain@gmail.com>
Simo Sorce [Fri, 12 Sep 2008 20:57:58 +0000 (16:57 -0400)]
Fix warning
Igor Mammedov [Fri, 12 Sep 2008 20:57:58 +0000 (16:57 -0400)]
* helper source for handling cifs kernel module upcall for kerberos
authorization
* Added -c option to set service prefix to "cifs" in service principal by
default service prefix "host" is used
* replaced malloc/free/srtncpy with replacements from samba project
Signed-off-by: Igor Mammedov <niallain@gmail.com>
Igor Mammedov [Fri, 12 Sep 2008 20:57:58 +0000 (16:57 -0400)]
* Adds support for cifs.spnego helper into configure and Makefile.in
* Added checks for spnego prereq keyutils.h and kerberos in configure.in
Signed-off-by: Igor Mammedov <niallain@gmail.com>
Jeremy Allison [Fri, 12 Sep 2008 18:16:03 +0000 (11:16 -0700)]
Backport of bugfix for #5751, smbclient: cannot show ACLs on DFS, done by
SATOH Fumiyasu <fumiyas@osstech.co.jp>.
Jeremy.
Jeremy Allison [Thu, 11 Sep 2008 19:16:31 +0000 (12:16 -0700)]
Here's the fix for bug #5750. Note this bug does *NOT* affect
3.2.x (code is different there).
Jeremy.
Jeremy Allison [Wed, 10 Sep 2008 23:23:54 +0000 (16:23 -0700)]
Fix bug #5052 - not work cancel inheritance on share. We were
using the parent security descriptor type and flags instead
of using the passed in SD.
Jeremy.
Jeremy Allison [Fri, 5 Sep 2008 22:36:59 +0000 (15:36 -0700)]
Remove unecessary msync.
Jeremy.
Qiao Yang [Fri, 5 Sep 2008 12:17:04 +0000 (14:17 +0200)]
Fix a memleak
request.extra_data is not freed if there is no extra_data in response or when
there is some error happens in processing. This patch will free the buffer
right after processing a request before sending back a response.
Jeremy Allison [Wed, 3 Sep 2008 20:19:20 +0000 (13:19 -0700)]
Fix bug #5729. Explicitly allow "-valid".
Jeremy
Simo Sorce [Wed, 3 Sep 2008 14:44:09 +0000 (10:44 -0400)]
The msync manpage reports that msync *must* be called before munmap. Failure to do so may result in lost data. Fix an ifdef check, I really think we meant to check HAVE_MMAP here.
Günther Deschner [Thu, 28 Aug 2008 22:06:09 +0000 (00:06 +0200)]
net: net should just use machine account creds when changing passwords.
Guenther
Günther Deschner [Thu, 28 Aug 2008 22:05:32 +0000 (00:05 +0200)]
Backport bugfix for bug #5710.
In order to successfully update a machine account password we need to use
Netlogon ServerPasswordSet2 when NETLOGON_NEG_PASSWORD_SET2 has been negotiated.
Guenther
Günther Deschner [Thu, 28 Aug 2008 22:02:54 +0000 (00:02 +0200)]
netlogon: "re-run make idl" - implement netr_ServerPasswordSet2 client.
Guenther
Günther Deschner [Thu, 28 Aug 2008 22:01:45 +0000 (00:01 +0200)]
netlogon: define NET_SRVPWSET2 call.
Guenther
Andrew Tridgell [Tue, 26 Aug 2008 16:59:54 +0000 (09:59 -0700)]
become root for AIO operations
We need to become root for AIO read and write to allow the AIO thread
to send a completion signal to the parent process when the IO
completes
Andrew Tridgell [Tue, 26 Aug 2008 16:59:20 +0000 (09:59 -0700)]
EINVAL is also a valid error return, meaning "this filesystem
cannot do sendfile for this file"
Andrew Tridgell [Sun, 24 Aug 2008 03:56:59 +0000 (13:56 +1000)]
Avoid a race condition in glibc between AIO and setresuid().
See this test: http://samba.org/~tridge/junkcode/aio_uid.c
The problem is that setresuid() tries to be clever about threads, and
tries to change the euid of any threads that are running. If a AIO read
or write completes while this is going on then the signal from the thread
where the IO completed is lost, as it gets -1/EPERM from rt_sigqueueinfo()
The simplest fix is to try to use setreuid() instead of setresuid(),
as setreuid() doesn't try to be clever. Unfortunately this also means
we must use become_root()/unbecome_root() in the aio code.
Gerald (Jerry) Carter [Mon, 25 Aug 2008 22:41:42 +0000 (17:41 -0500)]
Set version to 3.0.33-GIT
Jeremy Allison [Mon, 25 Aug 2008 22:15:25 +0000 (15:15 -0700)]
Merge branch 'v3-0-test' of ssh://jra@git.samba.org/data/git/samba into v3-0-test
David Leonard [Mon, 25 Aug 2008 22:14:41 +0000 (15:14 -0700)]
Fix bug 4516, no IPv6 on Solaris 2.6.
Gerald (Jerry) Carter [Mon, 25 Aug 2008 21:08:28 +0000 (16:08 -0500)]
Add workaround for docs build and dependency on parameters.all.xml
Gerald (Jerry) Carter [Mon, 25 Aug 2008 21:07:08 +0000 (16:07 -0500)]
Updating release notes for 3.0.32.
Gerald (Jerry) Carter [Mon, 25 Aug 2008 21:05:12 +0000 (16:05 -0500)]
Set version to 3.0.32.
Jeremy Allison [Fri, 22 Aug 2008 20:54:22 +0000 (13:54 -0700)]
Don't re-initialize a token when we already have one. This fixes the build farm failures when winbindd connects as guest.
This one took a *lot* of tracking down :-).
Jeremy.
Gerald (Jerry) Carter [Wed, 20 Aug 2008 18:00:40 +0000 (13:00 -0500)]
nss_winbind: When returning NSS_UNAVAIL, squash errno to ENOENT
According to the GNU libc nss guide, we should always set
errno to ENOENT when returning NSS_UNAVAIL.
http://www.gnu.org/software/libtool/manual/libc/NSS-Modules-Interface.html#NSS-Modules-Interface
At least the MQ Series message queing service that runs
on WebSphere will fail if you return any other errno in this case.
(cherry picked from commit
ee26664602445fa7798e2061f6bcbef0756d6528)
Jeremy Allison [Wed, 20 Aug 2008 01:13:25 +0000 (18:13 -0700)]
Fix bug 5697 nmbd spins in reload_interfaces when only loopback exists.
Reported by Ted Percival <ted@midg3t.net>.
Jeremy.
Michael Adam [Mon, 4 Aug 2008 11:31:26 +0000 (13:31 +0200)]
net: Fix IPC connections with interactive password prompt.
This fixes a regression introduced with
52f916c6.
Some net subcommands didn't work when the username, but not the
corresponding password was given on the command line.
Karolin Seeger [Tue, 29 Jul 2008 10:03:08 +0000 (12:03 +0200)]
man pages: Fix typos in man smbclient.
Karolin
(cherry picked from commit
db843d2faafb3487e3c7df4a3a52d6c71f369e1d)
(cherry picked from commit
3a3640a85daa1a85415c949f9c2b804b4f067dd7)
Jeremy Allison [Fri, 25 Jul 2008 18:46:34 +0000 (11:46 -0700)]
Back-port of Volkers fix.
Fix a race condition in winbind leading to a crash
When SIGCHLD handling is delayed for some reason, sending a request to a child
can fail early because the child has died already. In this case
async_main_request_sent() directly called the continuation function without
properly removing the malfunctioning child process and the requests in the
queue. The next request would then crash in the DLIST_ADD_END() in
async_request() because the request pending for the child had been
talloc_free()'ed and yet still was referenced in the list.
This one is *old*...
Volker
Jeremy.
Karolin Seeger [Tue, 22 Jul 2008 09:27:16 +0000 (11:27 +0200)]
man pages: "printcap name" is a global parameter, not a share specific one.
Karolin
(cherry picked from commit
9cde2525560536e16e2dbf991dbeb446260dd0df)
(cherry picked from commit
76061eee93fd67b96916a088c64a038e47a48814)
(cherry picked from commit
32dab019adaa3a0999af7baf6bcb8b2865e386c3)
Alexander Bokovoy [Sat, 19 Jul 2008 20:11:50 +0000 (00:11 +0400)]
Fix link for Using Samba
Jim McDonough [Thu, 17 Jul 2008 19:54:13 +0000 (15:54 -0400)]
In the "log file = " case, don't overwrite the
log.wb-<domain> logfile name on smb.conf reload.
Bo Yang [Wed, 16 Jul 2008 15:11:55 +0000 (11:11 -0400)]
Allow %u parameters for print job username - use advanced sub
Christoph Zauner [Fri, 11 Jul 2008 13:50:25 +0000 (15:50 +0200)]
man pages: Fix typos and add improvements.
(cherry picked from commit
060ff6d8d4e61f3ce89f980182413852cc5719be)
(cherry picked from commit
dab5cf616ce044040dd598fec3da9d3c97e51f6d)
(cherry picked from commit
253405062237edfa78dc669a275af7ce9db849c4)
Michael Adam [Thu, 10 Jul 2008 21:49:58 +0000 (23:49 +0200)]
docs: fix the specified default of "password server" - it is *, not "".
Michael
(cherry picked from commit
d7f759d302612ef9eb0bba022f3b3e1dd433f843)
Gerald W. Carter [Thu, 10 Jul 2008 19:17:14 +0000 (14:17 -0500)]
Updating release notes for 3.0.31
Jeremy Allison [Thu, 10 Jul 2008 17:05:00 +0000 (10:05 -0700)]
Fix from Volker. Fix a segfault in base64_encode_data_blob
We did not allocate enough memory for the \0 and a = at the end.
Jeremy.