Gerald Carter [Wed, 25 Apr 2007 11:19:12 +0000 (11:19 +0000)]
r22512: add a note about offline files and "map acl inherit"
Gerald Carter [Wed, 25 Apr 2007 09:36:47 +0000 (09:36 +0000)]
r22510: pull patches from SAMBA_3_0_25 and update release notes for 3.0.25rc3
Gerald Carter [Mon, 23 Apr 2007 06:10:22 +0000 (06:10 +0000)]
r22473: Correct fix for setting a default compat tdb idmap backend.
Previous code would always fill in "idmap backend = tdb"
even if you defined idmap domains. My fault. I should
have tested the original patch more before committing.
Gerald Carter [Sun, 22 Apr 2007 10:10:29 +0000 (10:10 +0000)]
r22448: grab idmap compat patch from 3.0.25 (will recur 3.0.25rc2 for this)
Gerald Carter [Sun, 22 Apr 2007 09:36:32 +0000 (09:36 +0000)]
r22445: Final touches on release notes
Gerald Carter [Sun, 22 Apr 2007 09:32:14 +0000 (09:32 +0000)]
r22444: * Validate a SID before trying to convert it to a uid/gid via the public
winbindd interface
* Add nss_info/*so files to the RHEL/Fedora packaging
Gerald Carter [Sat, 21 Apr 2007 21:52:40 +0000 (21:52 +0000)]
r22435: adding new librepleasce files for release
Gerald Carter [Sat, 21 Apr 2007 21:51:01 +0000 (21:51 +0000)]
r22434: sync from the 3.0.25 tree for rc2
Gerald Carter [Sat, 21 Apr 2007 21:49:40 +0000 (21:49 +0000)]
r22433: set version to 3.0.25rc2
Gerald Carter [Sat, 21 Apr 2007 21:45:37 +0000 (21:45 +0000)]
r22432: release notes for 3.0.25rc2
Gerald Carter [Mon, 9 Apr 2007 17:41:48 +0000 (17:41 +0000)]
r22143: Jeremy says to not set the length
Gerald Carter [Mon, 9 Apr 2007 17:37:20 +0000 (17:37 +0000)]
r22142: add mention of the Vista performance fixes
Gerald Carter [Mon, 9 Apr 2007 17:08:02 +0000 (17:08 +0000)]
r22141: add forgotten vfs_readahead file
Gerald Carter [Mon, 9 Apr 2007 16:04:07 +0000 (16:04 +0000)]
r22138: * Sync up with the SAMBA_3_0_25 as of svn r22132.
* Set VERSION to 3.0.25rc1
* Update release notes.
Gerald Carter [Wed, 21 Mar 2007 21:17:02 +0000 (21:17 +0000)]
r21920: add idmap man pages to RHEL packaging
Gerald Carter [Wed, 21 Mar 2007 21:08:15 +0000 (21:08 +0000)]
r21918: Reverting this change as it is now causing aborts() in
find_builtin_domain(). This all needs more testing
before anyone starts changing these lookup routines again.
Gerald Carter [Wed, 21 Mar 2007 17:59:29 +0000 (17:59 +0000)]
r21915: grab the sid_peek_check_rid() fix from 3.0.25 and the release notes
Gerald Carter [Wed, 21 Mar 2007 15:51:59 +0000 (15:51 +0000)]
r21907: install smbmount pages now that Lars has fixed 'make install'
Gerald Carter [Wed, 21 Mar 2007 15:21:28 +0000 (15:21 +0000)]
r21905: Rename
idmap expire time -> idmap cache time
idmap negative time -> idmap negative cache time
Gerald Carter [Tue, 20 Mar 2007 22:25:14 +0000 (22:25 +0000)]
r21895: Updating release notes for 3.0.25pre2. Feel free to fix error
in the SAMBA_3_0_25 tree and I'll pull the changes across.
Gerald Carter [Tue, 20 Mar 2007 16:56:16 +0000 (16:56 +0000)]
r21889: * Pull from SAMBA-3_0_25 svn r21888
* Set version to 3.0.25pre2
Gerald Carter [Thu, 1 Mar 2007 06:07:30 +0000 (06:07 +0000)]
r21627: some last minute packaging fixes on RHEL4/Fedora
Gerald Carter [Thu, 1 Mar 2007 05:21:31 +0000 (05:21 +0000)]
r21624: Remove stray #endif from bad merge
Gerald Carter [Thu, 1 Mar 2007 04:58:52 +0000 (04:58 +0000)]
r21622: Fix bad merge caught by James.
Gerald Carter [Thu, 1 Mar 2007 04:50:10 +0000 (04:50 +0000)]
r21621: This is the final draft of the release notes. Time to start testing tarballs to RTTW
Gerald Carter [Thu, 1 Mar 2007 04:35:31 +0000 (04:35 +0000)]
r21619: * Pickup latest changes from SAMBA_3_0_25 (this will be it
for 3.0.25pre1 unless something blows up)
* Update release notes some more
Gerald Carter [Wed, 28 Feb 2007 19:18:12 +0000 (19:18 +0000)]
r21598: checkin before I sync to the 3.0.25 so people can fix typos directly
Gerald Carter [Wed, 28 Feb 2007 19:01:56 +0000 (19:01 +0000)]
r21597: anotehr safety checkin of the releas notes for review
Gerald Carter [Wed, 28 Feb 2007 17:57:33 +0000 (17:57 +0000)]
r21596: safety checking of release notes and give others a chance to start reviewing
Gerald Carter [Wed, 28 Feb 2007 14:57:51 +0000 (14:57 +0000)]
r21587: more sync with 3.0.25 tree (remove old directories and copy pcap2nbench)
Gerald Carter [Wed, 28 Feb 2007 14:35:26 +0000 (14:35 +0000)]
r21585: Start syncing the monster that will become 3.0.25pre1
Still todo:
* release notes
* few minor outstanding patches
* additional idmap man pages
Volker Lendecke [Wed, 28 Feb 2007 09:04:05 +0000 (09:04 +0000)]
r21581: Add an error code I just got
Jeremy Allison [Wed, 28 Feb 2007 00:38:49 +0000 (00:38 +0000)]
r21577: Remove unneeded #define (part of earlier patch that was
removed).
Jeremy.
Jeremy Allison [Wed, 28 Feb 2007 00:35:58 +0000 (00:35 +0000)]
r21576: Patch based on work from Todd Stecher <todd.stecher@isilon.com>
to allow client to fragment large SPNEGO blobs (large krb5
tickets). Tested against W2K3R2. Should fix bug #4400.
Jeremy.
Jeremy Allison [Tue, 27 Feb 2007 22:04:23 +0000 (22:04 +0000)]
r21569: Fix bug reported by Martin Zielinski <mz@seh.de>
where return value was incorrectly initialized.
Jeremy.
Jeremy Allison [Tue, 27 Feb 2007 20:34:10 +0000 (20:34 +0000)]
r21566: If we're going to be broken, at least be *consistently*
broken :-). This will do until Simo fixes the escape
calls properly.
Jeremy.
Volker Lendecke [Tue, 27 Feb 2007 17:21:21 +0000 (17:21 +0000)]
r21563: Fix a memleak: We only need dispinfo structs for "our" and for the builtin
domain. Without this patch we leaked a DISPINFO for the (NULL) domain per
samr_connect*() call.
Volker
Günther Deschner [Tue, 27 Feb 2007 14:24:49 +0000 (14:24 +0000)]
r21561: It makes absolutely no sense to call krb5_kt_resolve() two times
directly after another.
Guenther
Günther Deschner [Tue, 27 Feb 2007 13:42:15 +0000 (13:42 +0000)]
r21560: Convert name_to_fqdn to BOOL.
Guenther
Günther Deschner [Tue, 27 Feb 2007 13:31:42 +0000 (13:31 +0000)]
r21558: Safe more indent, again no code changes.
Guenther
Günther Deschner [Tue, 27 Feb 2007 13:27:31 +0000 (13:27 +0000)]
r21557: indent only fix. No code change.
Guenther
Günther Deschner [Tue, 27 Feb 2007 13:25:42 +0000 (13:25 +0000)]
r21556: Remove superfluos return check in ads_keytab_verify_ticket().
Guenther
Herb Lewis [Mon, 26 Feb 2007 22:19:23 +0000 (22:19 +0000)]
r21548: prevent segv (reference to -1 element of array)
Herb Lewis [Mon, 26 Feb 2007 17:43:45 +0000 (17:43 +0000)]
r21546: remove duplicate lines
Günther Deschner [Mon, 26 Feb 2007 16:37:19 +0000 (16:37 +0000)]
r21543: Fix 64bit build warning.
Guenther
Günther Deschner [Mon, 26 Feb 2007 16:36:23 +0000 (16:36 +0000)]
r21542: Fix the build with profiling in 3.0.25 (wasn't merged from 3_0 it
seems).
Guenther
Günther Deschner [Mon, 26 Feb 2007 13:07:34 +0000 (13:07 +0000)]
r21540: Fix Bug #3713 and readd reporting what the profiles tool does (when
called with the -v option).
Patch from William Jojo <jojowil@hvcc.edu>.
Guenther
Günther Deschner [Mon, 26 Feb 2007 09:53:35 +0000 (09:53 +0000)]
r21537: Avoid to trigger the confusing "cached entry differs." warning when
there is just no cache around for a user.
Guenther
Günther Deschner [Mon, 26 Feb 2007 09:46:05 +0000 (09:46 +0000)]
r21536: Fix copy/paste typo.
Guenther
Jeremy Allison [Sun, 25 Feb 2007 09:04:06 +0000 (09:04 +0000)]
r21530: Don't code with jet-lag and Volker looking over your
shoulder.... Correct fix for warning :-)
Jeremy.
Jeremy Allison [Sun, 25 Feb 2007 09:00:37 +0000 (09:00 +0000)]
r21529: Fix warning from bad cast.
Jeremy.
Volker Lendecke [Sat, 24 Feb 2007 14:25:41 +0000 (14:25 +0000)]
r21527: Add forgotten notify fam module -- thanks James for the heads-up
Gerald Carter [Sat, 24 Feb 2007 13:03:59 +0000 (13:03 +0000)]
r21526: Fix stray character in sys_memalign() that is only
is the case where we don't have memalign() or posix_memalign().
Gerald Carter [Sat, 24 Feb 2007 12:40:43 +0000 (12:40 +0000)]
r21525: Go ahead and checkin the mlock() & memalign() fixes so
others don't get stuck with the winbindd hang.
Still waiting on additional confirmation from Guenther
that this fixes thes issues he was observing as well.
But it's been running in my local tree for a day without
problems.
Günther Deschner [Fri, 23 Feb 2007 11:53:43 +0000 (11:53 +0000)]
r21517: Fix build warnings.
Guenther
Lars Müller [Thu, 22 Feb 2007 23:12:36 +0000 (23:12 +0000)]
r21509: Merge lp_passdb_backend() from rev 21506 to 3_0_25.
Slightly change the DEBUG 0 message as suggested by Volker on
samba-technical.
Simo Sorce [Thu, 22 Feb 2007 21:59:54 +0000 (21:59 +0000)]
r21508: Fix memleak in new idmap_tdb, thanks Herb.
Jerry please check.
Simo.
Gerald Carter [Thu, 22 Feb 2007 20:52:27 +0000 (20:52 +0000)]
r21507: Fix some "cannot access LDAP when no root" bugs.
The two culprits were
* pdb_get_account_policy()
* pdb_get_group_sid()
Gerald Carter [Thu, 22 Feb 2007 17:21:27 +0000 (17:21 +0000)]
r21505: make sure mlock()'d memory is aligned on a page boundary
Günther Deschner [Thu, 22 Feb 2007 13:35:01 +0000 (13:35 +0000)]
r21500: Fix inappropriate creation of a krb5 ticket refreshing event when a user
changed a password via pam_chauthtok. Only do this if
a) a user logs on using an expired password (or a password that needs to
be changed immediately) or
b) the user itself changes his password.
Also make sure to delete the in-memory krb5 credential cache (when a
user did not request a FILE based cred cache).
Finally honor the krb5 settings in the first pam authentication in the
chauthtok block (PAM_PRELIM_CHECK). This circumvents confusion when
NTLM samlogon authentication is still possible with the old password after
the password has been already changed (on w2k3 sp1 dcs).
Guenther
Jeremy Allison [Wed, 21 Feb 2007 02:15:23 +0000 (02:15 +0000)]
r21483: Fix use of uninitialized variable.
Jeremy.
Jeremy Allison [Wed, 21 Feb 2007 02:11:06 +0000 (02:11 +0000)]
r21482: Use IPC$ not ipc$ for consistency.
Jeremy.
Jeremy Allison [Wed, 21 Feb 2007 02:04:28 +0000 (02:04 +0000)]
r21481: No one said anything, so I'm disallowing anything
but explicit shares in "default service" :-).
Jeremy.
Jeremy Allison [Wed, 21 Feb 2007 01:55:08 +0000 (01:55 +0000)]
r21480: Make fd_open match fd_close be translating
errno into an NTSTATUS immediately.
Jeremy.
Jeremy Allison [Wed, 21 Feb 2007 01:06:45 +0000 (01:06 +0000)]
r21479: Merge Volker's code simplification for the AIO
paths.
Jeremy.
Jeremy Allison [Tue, 20 Feb 2007 23:56:46 +0000 (23:56 +0000)]
r21478: Add 65k length limit for split SPNEGO blobs.
Jeremy
Jeremy Allison [Tue, 20 Feb 2007 19:57:14 +0000 (19:57 +0000)]
r21474: Ensure trustdom_cache_shutdown() gets called
on terminate. Pointed out by Herb.
Jeremy.
Jeremy Allison [Tue, 20 Feb 2007 17:20:08 +0000 (17:20 +0000)]
r21471: Merge from Volker.
Not strictly necessary, as data_blob() panics if it can't allocate. But I'd
see this as a design flaw in data_blob() and it made me look in that routine.
Jeremy.
Alexander Bokovoy [Tue, 20 Feb 2007 15:56:32 +0000 (15:56 +0000)]
r21469: Fix nfs4_acls module to follow 3.0.25 deviation in SEC_ACE and SEC_ACL definitions
Alexander Bokovoy [Tue, 20 Feb 2007 15:55:44 +0000 (15:55 +0000)]
r21468: Add GPFS-provided DMAPI support based on their GPL library
Jeremy Allison [Tue, 20 Feb 2007 06:22:20 +0000 (06:22 +0000)]
r21460: Fix for server-side processing of SPNEGO auth
fragmented into "max xmit" size security blob
chunks. Bug #4400. Needs limits adding, and also
a client-side version.
Jeremy.
Günther Deschner [Mon, 19 Feb 2007 17:47:50 +0000 (17:47 +0000)]
r21454: Fix debug typo.
Guenther
Gerald Carter [Mon, 19 Feb 2007 17:19:25 +0000 (17:19 +0000)]
r21452: Revert to tdb group_mapping implementation for 3.0.25 release.
No other changes here.
Günther Deschner [Mon, 19 Feb 2007 14:43:31 +0000 (14:43 +0000)]
r21450: No need to TALLOC_FREE twice here.
Guenther
Volker Lendecke [Mon, 19 Feb 2007 13:52:29 +0000 (13:52 +0000)]
r21449: Talked to Jerry on irc, he does not see what might break with this: Change
back the 'msdfs root = yes' default to 'no'.
Volker
Volker Lendecke [Mon, 19 Feb 2007 13:30:07 +0000 (13:30 +0000)]
r21446: Karolins "printjob username"
Volker Lendecke [Mon, 19 Feb 2007 11:45:33 +0000 (11:45 +0000)]
r21445: Apply tdb_parse_record Tridges error return, merge to 3_0_25 and 4_0
Jeremy Allison [Sun, 18 Feb 2007 02:50:52 +0000 (02:50 +0000)]
r21420: Looks big, but isn't really. Move internal names
of SEC_DESC over from grp_owner -> group_owner,
ace -> aces and info.mask -> mask. Makes it *much*
easier to move code within branches as they're now
referring to the same names for the same things
(which is what the NDR code also uses).
Jeremy.
Volker Lendecke [Sat, 17 Feb 2007 23:41:45 +0000 (23:41 +0000)]
r21412: The last patch also incremented the seqnum when tdb_store failed. Not as bad
as not doing it at all, but needs fixing. Also simplify the logic, I had
missed the "goto out" at the end of the function.
Volker
Volker Lendecke [Sat, 17 Feb 2007 21:46:13 +0000 (21:46 +0000)]
r21410: We have to increment the sequence number also when tdb_update_hash()
succeeded. Found while testing the brlock seqnum patch.
Tridge, please check!
Volker
Gerald Carter [Fri, 16 Feb 2007 20:53:01 +0000 (20:53 +0000)]
r21400: fix version to 3.0.24 (Thanks Karolin)
Herb Lewis [Fri, 16 Feb 2007 20:27:30 +0000 (20:27 +0000)]
r21399: need to zero the request and response structures
Herb Lewis [Fri, 16 Feb 2007 20:07:33 +0000 (20:07 +0000)]
r21398: update sharesec to allow add modify and remove commands
Herb Lewis [Fri, 16 Feb 2007 20:02:13 +0000 (20:02 +0000)]
r21397: revert accidential commit
Herb Lewis [Fri, 16 Feb 2007 19:49:12 +0000 (19:49 +0000)]
r21396: fix wbinfo --lookup-rids command
allow detection of libbiconv if all others fail - need for FreeBSD
Günther Deschner [Fri, 16 Feb 2007 17:25:54 +0000 (17:25 +0000)]
r21394: Prevent nscd crash due to potential NULL pointer dereference in
_nss_winbind_initgroups_dyn() on an empty group list.
Guenther
Günther Deschner [Fri, 16 Feb 2007 16:59:28 +0000 (16:59 +0000)]
r21393: Fix typo.
Guenther
Günther Deschner [Fri, 16 Feb 2007 15:13:57 +0000 (15:13 +0000)]
r21387: Another important fix for non-AD domains:
Avoid assigning 0 as primary group id for users in NSS calls.
Jerry, please check.
Guenther
Jeremy Allison [Fri, 16 Feb 2007 13:40:11 +0000 (13:40 +0000)]
r21383: More possible "security=share" fixes. If a client
is sending LMv2 make sure we test with the password
blob in the LM field as well as the NT field.
Jeremy.
Günther Deschner [Fri, 16 Feb 2007 13:30:19 +0000 (13:30 +0000)]
r21382: Important fix for winbind when using non-AD domains.
Jeremy, I'm afraid you removed the "domain->initialized" from the
set_dc_types_and_flags() call when the connect to PI_LSARPC_DS failed
(with rev. 19148).
This causes now that init_dc_connection_network is called again and
again which in turn rescans the DC each time (which of course fails each
time with NT_STATUS_BUFFER_TOO_SMALL). Just continue with the
non-PI_LSARPC_DS scan so that the domain is initialized properly.
Guenther
Volker Lendecke [Fri, 16 Feb 2007 12:13:52 +0000 (12:13 +0000)]
r21379: Attempt to fix the build on "gwen"
Simo Sorce [Thu, 15 Feb 2007 16:51:30 +0000 (16:51 +0000)]
r21370: check into 3.0.25 as well
Günther Deschner [Thu, 15 Feb 2007 12:10:57 +0000 (12:10 +0000)]
r21358: Some more debugging for _nss_winbind_initgroups_dyn() on Linux.
Guenther
Günther Deschner [Thu, 15 Feb 2007 12:05:19 +0000 (12:05 +0000)]
r21357: Fix typo.
Guenther
Günther Deschner [Thu, 15 Feb 2007 11:44:06 +0000 (11:44 +0000)]
r21353: In the turn of tracking down nss_winbind related bugs on Linux:
print NSS_STATUS code with DEBUG_NSS when leaving a function.
Guenther
Günther Deschner [Thu, 15 Feb 2007 00:03:38 +0000 (00:03 +0000)]
r21352: Let ads_upn_suffixes() return a pointer to an array of suffixes.
Guenther
Günther Deschner [Wed, 14 Feb 2007 20:52:23 +0000 (20:52 +0000)]
r21349: Fix memleak in ads_upn_suffixes().
Guenther
Jeremy Allison [Wed, 14 Feb 2007 17:17:32 +0000 (17:17 +0000)]
r21346: FIXME ! Our parsing here is wrong I think,
but for a level3 it makes no sense for
ptr_sec_desc to be NULL. JRA. Based on
a Vista sniff from Martin Zielinski <mz@seh.de>.
Jerry - part of the Vista patchset.
Jeremy.
Günther Deschner [Wed, 14 Feb 2007 16:20:38 +0000 (16:20 +0000)]
r21345: Smaller fixes for adssearch:
* get rid of horrible ads.h parsing
* add LDAP_SERVER_SHUTDOWN_NOTIFY_OID
* display hex bitmasks
Guenther
Jim McDonough [Wed, 14 Feb 2007 14:25:56 +0000 (14:25 +0000)]
r21339: Fix the non-linux build. This is more evidence that this needs to be
moved up one layer.