abartlet/samba.git/.git
10 years agorpc_server-drsuapi/getncchanges: Reload the schema and re-run failed conversions fix-drs-testing-25
Andrew Bartlett [Fri, 19 Jul 2013 06:18:54 +0000 (16:18 +1000)]
rpc_server-drsuapi/getncchanges: Reload the schema and re-run failed conversions

10 years agotorture: Ensure that GSSAPI and SPNEGO packets are accepted by dlz_bind9
Andrew Bartlett [Fri, 28 Dec 2012 10:00:28 +0000 (21:00 +1100)]
torture: Ensure that GSSAPI and SPNEGO packets are accepted by dlz_bind9

This exercises some more of the dlz_bind9 code outside BIND, by
sending in a ticket to be access checked, wrapped either in SPNEGO or
just in GSSAPI.

Andrew Bartlett

Reviewed-by: Stefan Metzmacher <metze@samba.org>
10 years agoselftest: Add a basic test of samba_upgradedns
Andrew Bartlett [Thu, 27 Dec 2012 23:06:39 +0000 (10:06 +1100)]
selftest: Add a basic test of samba_upgradedns

This does not check that the command runs correctly, but does at least check
that the command runs to completion without errors.

Andrew Bartlett

10 years agoselftest: Start internal DNS server on domain provisioned for BIND9_DLZ
Andrew Bartlett [Thu, 27 Dec 2012 22:25:11 +0000 (09:25 +1100)]
selftest: Start internal DNS server on domain provisioned for BIND9_DLZ

This shows that the internal server can use the dns-SERVER account.

Andrew Bartlett

Reviewed-by: Stefan Metzmacher <metze@samba.org>
10 years agoselftest: Test creation of the dns-SERVER account during selftest
Andrew Bartlett [Tue, 25 Dec 2012 23:03:47 +0000 (10:03 +1100)]
selftest: Test creation of the dns-SERVER account during selftest

We do this by having the samba-tool domain dcpromo for promoted_vampire_dc also create a
dns-SERVER account.

Andrew Bartlett

Reviewed-by: Stefan Metzmacher <metze@samba.org>
10 years agoscripting/samba_upgradedns: Tighten up exception and attribute list handling
Andrew Bartlett [Sun, 23 Dec 2012 22:12:04 +0000 (09:12 +1100)]
scripting/samba_upgradedns: Tighten up exception and attribute list handling

This avoids asking for attributes that will not be used, and looks only for the
expected exceptions, rather than all exceptions.

Andrew Bartlett

Reviewed-by: Stefan Metzmacher <metze@samba.org>
10 years agoscripting/join.py: Handle creating the dns-NAME account during a DC join
Andrew Bartlett [Sun, 23 Dec 2012 21:56:50 +0000 (08:56 +1100)]
scripting/join.py: Handle creating the dns-NAME account during a DC join

This will ensure that the DLZ plugin works out of the box when joining a second Samba DC to the
domain.

Andrew Bartlett

Reviewed-by: Stefan Metzmacher <metze@samba.org>
10 years agodsdb: Assert that incoming DRS objects are valid in the local schema
Andrew Bartlett [Tue, 4 Jun 2013 23:22:45 +0000 (09:22 +1000)]
dsdb: Assert that incoming DRS objects are valid in the local schema

This should change some of the random segfaults seen in autobuild into
errors we can further debug.

Andrew Bartlett

Reviewed-by: Stefan Metzmacher <metze@samba.org>
10 years agodynconfig: Remove last s3 markers now we have just one build system
Andrew Bartlett [Thu, 13 Jun 2013 09:33:42 +0000 (19:33 +1000)]
dynconfig: Remove last s3 markers now we have just one build system

10 years agosamba-tool dbcheck: Correctly remove deleted DNs in dbcheck
Andrew Bartlett [Sun, 14 Apr 2013 03:32:49 +0000 (13:32 +1000)]
samba-tool dbcheck: Correctly remove deleted DNs in dbcheck

The previous pattern never matched, as it was a typo.

Andrew Bartlett

Reviewed-by: Stefan Metzmacher <metze@samba.org>
10 years agodsdb: Include MS-ADTS doc references on deleted object contstraints
Andrew Bartlett [Tue, 4 Jun 2013 10:22:31 +0000 (20:22 +1000)]
dsdb: Include MS-ADTS doc references on deleted object contstraints

Reviewed-by: Stefan Metzmacher <metze@samba.org>
10 years agodsdb tests: Add member/memberOf checking to delete_objects testing
Andrew Bartlett [Mon, 3 Jun 2013 07:51:41 +0000 (17:51 +1000)]
dsdb tests: Add member/memberOf checking to delete_objects testing

Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>

Signed-off-by: Stefan Metzmacher <metze@samba.org>
10 years agodsdb: Improve DRS deleted link source/target handing in repl_meta_data
Andrew Bartlett [Tue, 4 Jun 2013 09:57:06 +0000 (19:57 +1000)]
dsdb: Improve DRS deleted link source/target handing in repl_meta_data

We now correctly ignore the link updates if the source or target is
deleted locally.

This fixes the long-standing failure in the vampire_dc dbcheck test.

Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>

Andrew Bartlett

Signed-off-by: Stefan Metzmacher <metze@samba.org>
10 years agotorture/drs: Expand an error message to aid debugging
Andrew Bartlett [Mon, 17 Jun 2013 12:37:54 +0000 (22:37 +1000)]
torture/drs: Expand an error message to aid debugging

10 years agodsdb: Ensure we always force deleted objects back under the deleted objects DN
Andrew Bartlett [Mon, 17 Jun 2013 12:37:20 +0000 (22:37 +1000)]
dsdb: Ensure we always force deleted objects back under the deleted objects DN

10 years agodsdb/repl_meta_data: split out replmd_deletion_state()
Stefan Metzmacher [Wed, 5 Jun 2013 07:35:42 +0000 (09:35 +0200)]
dsdb/repl_meta_data: split out replmd_deletion_state()

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
10 years agodsdb: Prune deleted objects of links and extra attributes of replicated deletes
Andrew Bartlett [Fri, 31 May 2013 10:01:17 +0000 (20:01 +1000)]
dsdb: Prune deleted objects of links and extra attributes of replicated deletes

When an object is deleted, the links to be removed are not propogated,
you have to watch out for them manually!

We do this by calling back into the originating update delete code (ie
what is called if you ldb_delete() locally) so that any extra
attribute found locally and not on the remote server becomes removed
remotely too.

We currently do the same with links, but that isn't strictly correct,
but for now our getNCChanges server code filters these out, so only
the usn is bumped.

Andrew Bartlett

Reviewed-by: Stefan Metzmacher <metze@samba.org>
10 years agodsdb: Force a schema reload before dealing with replicated objects
Andrew Bartlett [Sat, 22 Jun 2013 08:02:02 +0000 (18:02 +1000)]
dsdb: Force a schema reload before dealing with replicated objects

The schema is critical here, we should always ensure it is current.

Andrew Bartlett

10 years agoselftest: ensure samba4.nss.test.*using.*winbind is always tested
Andrew Bartlett [Sat, 13 Jul 2013 09:35:52 +0000 (19:35 +1000)]
selftest: ensure samba4.nss.test.*using.*winbind is always tested

With the winbind fixes now in master this should be more reliable.

Andrew Bartlett

10 years agoselftest: ensure samba4.rpc.samr.large-dc.two.samr.many is always tested
Andrew Bartlett [Sat, 13 Jul 2013 09:34:45 +0000 (19:34 +1000)]
selftest: ensure samba4.rpc.samr.large-dc.two.samr.many is always tested

This test should now be more reliable with the over-allocation of
RID values now fixed.

Andrew Bartlett

10 years agorpc_server-drsuapi: Improve comments and DEBUG lines
Andrew Bartlett [Thu, 27 Jun 2013 23:19:48 +0000 (09:19 +1000)]
rpc_server-drsuapi: Improve comments and DEBUG lines

10 years agodsdb: Add assert in drepl_take_FSMO_role
Andrew Bartlett [Thu, 27 Jun 2013 23:15:16 +0000 (09:15 +1000)]
dsdb: Add assert in drepl_take_FSMO_role

10 years agoselftest: Ensure the DC has started and and got a RID set before we proceed
Andrew Bartlett [Wed, 19 Jun 2013 01:33:36 +0000 (11:33 +1000)]
selftest: Ensure the DC has started and and got a RID set before we proceed

This avoids errors when a busy DC has not yet fetched a RID set, showing up
as flapping tests when users are created, such as the samr.large-dc test.

Andrew Bartlett

10 years agodsdb-ridalloc: Rework ridalloc to return error strings where RID allocation fails
Andrew Bartlett [Wed, 19 Jun 2013 00:30:48 +0000 (10:30 +1000)]
dsdb-ridalloc: Rework ridalloc to return error strings where RID allocation fails

We now also only poke the RID manager once per request.

This may help track down why RID allocation can fail, as while we
never wait for the RID set to be created/updated, it may be the only
clue the admin gets as to why the async allocations were failing.

Andrew Bartlett

10 years agodsdb: Rework subtree_rename module to use recursive LDB_SCOPE_ONELEVEL searches
Andrew Bartlett [Sun, 23 Jun 2013 11:38:40 +0000 (21:38 +1000)]
dsdb: Rework subtree_rename module to use recursive LDB_SCOPE_ONELEVEL searches

This should be more efficient, particularly in the leaf node case when renaming and
deleting entries on large databases.

Andrew Bartlett

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
10 years agodsdb-descriptor: Do not do a subtree search unless we have child entries
Andrew Bartlett [Sun, 23 Jun 2013 09:47:35 +0000 (19:47 +1000)]
dsdb-descriptor: Do not do a subtree search unless we have child entries

This avoids a subtree search here in most cases where an object is deleted.

Andrew Bartlett

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
10 years agolibrpc: srvsvc.idl: define level 1005 share info flags
Shekhar Amlekar [Thu, 11 Jul 2013 15:42:29 +0000 (21:12 +0530)]
librpc: srvsvc.idl: define level 1005 share info flags

define level 1005 share info flags.

Reviewed-by: Günther Deschner <gd@samba.org>
Autobuild-User(master): Günther Deschner <gd@samba.org>
Autobuild-Date(master): Thu Jul 18 16:35:51 CEST 2013 on sn-devel-104

10 years agonsswitch: Don't enumerate all domains with wbinfo -u|-g.
Andreas Schneider [Wed, 17 Jul 2013 14:13:22 +0000 (16:13 +0200)]
nsswitch: Don't enumerate all domains with wbinfo -u|-g.

By default wbinfo -u|-g should only enumerate the domain winbindd is
joined to. The command can be harmfull if you have e.g. 30 domains and
700k users. Then the parent will collect all information and the
oom-killer will kill winbind. As we still want to support it, you can
enable it the old behaviour with wbinfo --domain='*' -u. This is
a measure that sysadmins don't shoot themself.

https://bugzilla.samba.org/show_bug.cgi?id=10034

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Günther Deschner <gd@samba.org>
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Thu Jul 18 11:54:58 CEST 2013 on sn-devel-104

10 years agoFix memory leak in error code path.
Richard Sharpe [Wed, 17 Jul 2013 23:29:39 +0000 (16:29 -0700)]
Fix memory leak in error code path.

Reviewed-by: Volker Lendecke <Volker.Lendecke@SerNet.DE>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Thu Jul 18 03:22:37 CEST 2013 on sn-devel-104

10 years agoFix bug 10025 - Lack of Sanity Checking in calls to malloc()/calloc().
Bill Parker [Wed, 17 Jul 2013 22:30:35 +0000 (15:30 -0700)]
Fix bug 10025 - Lack of Sanity Checking in calls to malloc()/calloc().

In reviewing various files in Samba-4.0.7, I found a number
of instances where malloc()/calloc() were called without the
checking the return value for a value of NULL, which would
indicate failure.

(NB. The changes needed to ccan, iniparser, popt and heimdal
will be reported upstream, not patched inside Samba).

Reviewed-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Simo Source <idra@samba.org>
10 years agos3: Remove old mode special substitution.
Alexander Werth [Tue, 9 Jul 2013 15:14:08 +0000 (17:14 +0200)]
s3: Remove old mode special substitution.

The mode special substitution now happens in a separate function.
The substitution at this point is unnecessary.

Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Christian Ambach <ambi@samba.org>
Autobuild-User(master): Christian Ambach <ambi@samba.org>
Autobuild-Date(master): Tue Jul 16 00:52:26 CEST 2013 on sn-devel-104

10 years agos3:idmap_autorid: Add a NULL check in idmap_autorid_preallocate_wellknown
Volker Lendecke [Thu, 11 Jul 2013 11:10:25 +0000 (13:10 +0200)]
s3:idmap_autorid: Add a NULL check in idmap_autorid_preallocate_wellknown

Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Christian Ambach <ambi@samba.org>
10 years agos3:idmap_autorid: Don't zero in idmap_autorid_preallocate_wellknown
Volker Lendecke [Thu, 11 Jul 2013 11:08:39 +0000 (13:08 +0200)]
s3:idmap_autorid: Don't zero in idmap_autorid_preallocate_wellknown

We initialize everything later anyway

Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Christian Ambach <ambi@samba.org>
10 years agos3:idmap_autorid: Use ARRAY_SIZE where appropriate
Volker Lendecke [Thu, 11 Jul 2013 11:07:52 +0000 (13:07 +0200)]
s3:idmap_autorid: Use ARRAY_SIZE where appropriate

Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Christian Ambach <ambi@samba.org>
10 years agos3-winbind: Do not delete an existing valid credential cache.
Andreas Schneider [Thu, 11 Jul 2013 11:44:53 +0000 (13:44 +0200)]
s3-winbind: Do not delete an existing valid credential cache.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=9994

Thanks to David Woodhouse <dwmw2@infradead.org>.

Reviewed-by: Günther Deschner <gd@samba.org>
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Mon Jul 15 12:48:46 CEST 2013 on sn-devel-104

10 years agosmbd: Fix a 100% loop at shutdown time
Volker Lendecke [Thu, 11 Jul 2013 14:22:26 +0000 (16:22 +0200)]
smbd: Fix a 100% loop at shutdown time

In the destructor of fsp->aio_requests[0] we put another request into
fsp->aio_requests[0]. Don't overwrite that with TALLOC_FREE.

Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Thu Jul 11 20:56:42 CEST 2013 on sn-devel-104

10 years agosrvsvc: Use a symbolic constant where we have one
Volker Lendecke [Thu, 11 Jul 2013 09:31:50 +0000 (11:31 +0200)]
srvsvc: Use a symbolic constant where we have one

Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
10 years agoccan: Fix calling memset with zero length parameter
Volker Lendecke [Thu, 11 Jul 2013 12:57:53 +0000 (14:57 +0200)]
ccan: Fix calling memset with zero length parameter

Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Thu Jul 11 16:55:49 CEST 2013 on sn-devel-104

10 years agodocs: Bump version in meta data up to 4.1.
Karolin Seeger [Mon, 8 Jul 2013 07:07:32 +0000 (09:07 +0200)]
docs: Bump version in meta data up to 4.1.

Signed-off-by: Karolin Seeger <kseeger@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Thu Jul 11 02:53:34 CEST 2013 on sn-devel-104

10 years agos4:server: avoid calling into nss_winbind from within 'samba'
Stefan Metzmacher [Wed, 10 Jul 2013 12:48:18 +0000 (14:48 +0200)]
s4:server: avoid calling into nss_winbind from within 'samba'

The most important part is that the 'winbind_server' doesn't
recurse into itself. This could happen if the krb5 libraries
call getlogin().

As we may run in single process mode, we need to set
_NO_WINBINDD=1 everywhere, the only exception is the forked
'smbd'.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Autobuild-User(master): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(master): Wed Jul 10 23:18:06 CEST 2013 on sn-devel-104

10 years agoFix typos in man-pages
Michele Baldessari [Tue, 9 Jul 2013 21:23:33 +0000 (23:23 +0200)]
Fix typos in man-pages

Fix some typos in the man-pages.

Signed-off-by: Michele Baldessari <michele@acksyn.org>
Reviewed-by: Simo Sorce <idra@samba.org>
Autobuild-User(master): Simo Sorce <idra@samba.org>
Autobuild-Date(master): Wed Jul 10 16:45:07 CEST 2013 on sn-devel-104

10 years agos4:rpc_server: make sure we don't terminate a connection with pending requests (bug...
Stefan Metzmacher [Tue, 9 Jul 2013 14:38:59 +0000 (16:38 +0200)]
s4:rpc_server: make sure we don't terminate a connection with pending requests (bug #9820)

Sadly we may have nested event loops, which won't work correctly with
broken connections, that's why we have to do this...

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Autobuild-User(master): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(master): Wed Jul 10 08:47:38 CEST 2013 on sn-devel-104

10 years agos4-winbindd: Do not terminate a connection that is still pending (bug #9820)
Andrew Bartlett [Thu, 27 Jun 2013 01:28:03 +0000 (11:28 +1000)]
s4-winbindd: Do not terminate a connection that is still pending (bug #9820)

Instead, wait until the call attempts to reply, and let it terminate then

(often this happens in the attempt to then write to the broken pipe).

Andrew Bartlett

Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
10 years agoservice_stream: Log if the connection termination is deferred or not (bug #9820)
Andrew Bartlett [Thu, 27 Jun 2013 01:27:03 +0000 (11:27 +1000)]
service_stream: Log if the connection termination is deferred or not (bug #9820)

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
10 years agos3-smbstatus: display [u|g]id of -1 as "-1" in connection list
Björn Baumbach [Tue, 9 Jul 2013 10:32:34 +0000 (12:32 +0200)]
s3-smbstatus: display [u|g]id of -1 as "-1" in connection list

In order to avoid displayed uid or gid of "4294967295" instead of "-1", we
need to fetch the special case -1.
The id can be -1 if we are reading e.g. incomplete session information.

Signed-off-by: Björn Baumbach <bb@sernet.de>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Wed Jul 10 01:18:30 CEST 2013 on sn-devel-104

10 years agos3-lib: hide incomplete smbXsrv_tcon_global records
Stefan Metzmacher [Mon, 8 Jul 2013 14:31:13 +0000 (16:31 +0200)]
s3-lib: hide incomplete smbXsrv_tcon_global records

Part of fix for bug #10003

Pair-programmed-with: Björn Baumbach <bb@sernet.de>

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Björn Baumbach <bb@sernet.de>
Reviewed-by: Jeremy Allison <jra@samba.org>
10 years agos3-lib: fix segf while reading incomplete session info (bug #10003)
Björn Baumbach [Fri, 5 Jul 2013 11:19:59 +0000 (13:19 +0200)]
s3-lib: fix segf while reading incomplete session info (bug #10003)

Pair-programmed-with: Stefan Metzmacher <metze@samba.org>

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Björn Baumbach <bb@sernet.de>
Reviewed-by: Jeremy Allison <jra@samba.org>
10 years agowaf: Build with RELRO if supported by the compiler.
Andreas Schneider [Fri, 5 Jul 2013 06:13:56 +0000 (08:13 +0200)]
waf: Build with RELRO if supported by the compiler.

Make sure we create binaries with full RELocation Read-Only support. See
https://isisblogs.poly.edu/2011/06/01/relro-relocation-read-only/
for more details.

The default is to check if the compiler supports RELRO and then enable
it. Specifying '--with-relro' will make it mandatory and
'--without-relro' will disable it.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
10 years agosmbd: Fix a profile problem
Volker Lendecke [Tue, 9 Jul 2013 18:02:39 +0000 (11:02 -0700)]
smbd: Fix a profile problem

When trying to read a profile, under certain circumstances Windows tries
to read with its machine account first. The profile previously written
was stored with an ACL that only allows access for the user and not
the machine. Windows should get an NT_STATUS_ACCESS_DENIED when using
the machine account, making it retry with the user account (which would
then succeed).

Samba under these circumstances erroneously gives
NT_STATUS_OBJECT_PATH_NOT_FOUND, which makes Windows give up and not
retry. The reasons is the "dropbox" patch in unix_convert, turning EACCESS
on the last path component to OBJECT_PATH_NOT_FOUND. This patch makes
the dropbox behaviour only kick in when we are creating a file. I think
this is an abstraction violation. unix_convert() should not have to know
about the create_disposition, but given that we have pathname resolution
separated from the core open code right now this is the best we can do.

Signed-off-by: Volker Lendecke <Volker.Lendecke@SerNet.DE>
Reviewed-by: Jeremy Allison <jra@samba.org>
10 years agolib/param: sync debug related options with source3/param
Stefan Metzmacher [Thu, 4 Jul 2013 16:11:02 +0000 (18:11 +0200)]
lib/param: sync debug related options with source3/param

The most important change is "debug hires timestamp = Yes"
and "syslog = 1".

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Björn Jacke <bj@sernet.de>
Autobuild-User(master): Björn Jacke <bj@sernet.de>
Autobuild-Date(master): Tue Jul  9 17:15:15 CEST 2013 on sn-devel-104

10 years agolib/ldb-samba: only debug LDB_DEBUG_TRACE at level 10
Stefan Metzmacher [Tue, 9 Jul 2013 11:56:35 +0000 (13:56 +0200)]
lib/ldb-samba: only debug LDB_DEBUG_TRACE at level 10

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Björn Jacke <bj@sernet.de>
10 years agolib/ldb-samba: make use of DBGC_LDB
Stefan Metzmacher [Tue, 9 Jul 2013 11:56:08 +0000 (13:56 +0200)]
lib/ldb-samba: make use of DBGC_LDB

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Björn Jacke <bj@sernet.de>
10 years agolib/util: add 'ldb' debug class
Stefan Metzmacher [Tue, 9 Jul 2013 11:55:44 +0000 (13:55 +0200)]
lib/util: add 'ldb' debug class

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Björn Jacke <bj@sernet.de>
10 years agotevent: document tevent_req_create state zeroing
David Disseldorp [Mon, 8 Jul 2013 13:11:25 +0000 (15:11 +0200)]
tevent: document tevent_req_create state zeroing

Signed-off-by: David Disseldorp <ddiss@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Mon Jul  8 20:43:49 CEST 2013 on sn-devel-104

10 years agorpc_cli: Remove some unnecessary initializations
Volker Lendecke [Mon, 8 Jul 2013 10:35:46 +0000 (12:35 +0200)]
rpc_cli: Remove some unnecessary initializations

tevent_req_create already initializes "state" to 0

Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: David Disseldorp <ddiss@samba.org>
Autobuild-User(master): David Disseldorp <ddiss@samba.org>
Autobuild-Date(master): Mon Jul  8 17:04:20 CEST 2013 on sn-devel-104

10 years agodocs: Fix typo.
Karolin Seeger [Mon, 8 Jul 2013 07:20:33 +0000 (09:20 +0200)]
docs: Fix typo.

Signed-off-by: Karolin Seeger <kseeger@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Mon Jul  8 12:19:38 CEST 2013 on sn-devel-104

10 years agodocs: Fix typo.
Karolin Seeger [Mon, 8 Jul 2013 07:18:17 +0000 (09:18 +0200)]
docs: Fix typo.

Signed-off-by: Karolin Seeger <kseeger@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
10 years agotime: prefer CLOCK_BOOTTIME for clock_gettime_mono()
Björn Jacke [Wed, 3 Jul 2013 16:57:57 +0000 (18:57 +0200)]
time: prefer CLOCK_BOOTTIME for clock_gettime_mono()

this clock moves on while the machine was suspended. This is what we prefer
actually.

Signed-off-by: Björn Jacke <bj@sernet.de>
Reviewed-by: Simo Sorce <idra@samba.org>
Autobuild-User(master): Simo Sorce <idra@samba.org>
Autobuild-Date(master): Fri Jul  5 16:47:34 CEST 2013 on sn-devel-104

10 years agotime: don't try to use the coarse clock
Björn Jacke [Wed, 3 Jul 2013 16:51:14 +0000 (18:51 +0200)]
time: don't try to use the coarse clock

as we prefer to use the suspend aware CLOCK_BOOTTIME as monotonic clock source
we cannot deal with the mono coarse clock any more. Actually I never saw a real
performance gain with it.

Signed-off-by: Björn Jacke <bj@sernet.de>
Reviewed-by: Simo Sorce <idra@samba.org>
10 years agoVERSION: change to 4.2.0pre1
Stefan Metzmacher [Fri, 5 Jul 2013 10:32:07 +0000 (12:32 +0200)]
VERSION: change to 4.2.0pre1

Signed-off-by: Stefan Metzmacher <metze@samba.org>
10 years agoMerge remote-tracking branch 'origin/v4-1-test' into master
Stefan Metzmacher [Fri, 5 Jul 2013 10:07:53 +0000 (12:07 +0200)]
Merge remote-tracking branch 'origin/v4-1-test' into master

git merge -s ours origin/v4-1-test

Signed-off-by: Stefan Metzmacher <metze@samba.org>
10 years agoVERSION: Set version to 4.1.0rc1-GITSNAPSHOT.
Karolin Seeger [Fri, 5 Jul 2013 08:05:19 +0000 (10:05 +0200)]
VERSION: Set version to 4.1.0rc1-GITSNAPSHOT.

Signed-off-by: Karolin Seeger <kseeger@samba.org>
Autobuild-User(v4-1-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-1-test): Fri Jul  5 11:56:40 CEST 2013 on sn-devel-104

10 years agotevent: Fix a typo
Volker Lendecke [Thu, 4 Jul 2013 09:24:33 +0000 (09:24 +0000)]
tevent: Fix a typo

Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Karolin Seeger <kseeger@samba.org>
Autobuild-User(master): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(master): Fri Jul  5 11:10:07 CEST 2013 on sn-devel-104

10 years agoWHATSNEW: Start release notes for Samba 4.1.0rc1.
Karolin Seeger [Fri, 5 Jul 2013 08:04:37 +0000 (10:04 +0200)]
WHATSNEW: Start release notes for Samba 4.1.0rc1.

Signed-off-by: Karolin Seeger <kseeger@samba.org>
10 years agodocs: Fix typos in "use ntdb" section.
Karolin Seeger [Thu, 4 Jul 2013 08:36:33 +0000 (10:36 +0200)]
docs: Fix typos in "use ntdb" section.

Signed-off-by: Karolin Seeger <kseeger@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Thu Jul  4 22:44:54 CEST 2013 on sn-devel-104

10 years agodsdb-ridalloc: Fix RID pools - RID numbers increase too quickly
Andrew Bartlett [Sat, 22 Jun 2013 09:30:50 +0000 (19:30 +1000)]
dsdb-ridalloc: Fix RID pools - RID numbers increase too quickly

A patch by Cove Schneider <cove_s@yahoo.com> who reports:

I noticed that the RID numbers seem to increase incrementally, then
will suddenly jump by 124501. Unless I'm misunderstanding, shouldn't
RID pool allocations just be 500 at a time?

e.g.  Adding accounts one after another on a single test instance here's how they're incrementing (from 4.0.6):
1596
1597
1598
1599
126100
126101
126102
...
126599

251100
...

251599

376100
...

The problem is that this complicates using sssd's AD integration, as
that it doesn't expect the RIDs to increase in a single domain so
quickly.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
Autobuild-User(master): Stefan Metzmacher <metze@samba.org>
Autobuild-Date(master): Thu Jul  4 20:13:05 CEST 2013 on sn-devel-104

10 years agoMake the output of the crackname script more readable
Matthieu Patou [Sun, 30 Jun 2013 08:59:53 +0000 (01:59 -0700)]
Make the output of the crackname script more readable

Signed-off-by: Matthieu Patou <mat@matws.net>
Reviewed-by: Andreas Schneider <asn@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Wed Jul  3 23:17:57 CEST 2013 on sn-devel-104
(cherry picked from commit 2536ee8b640c1257dbe28a977ae0b48a62093d0c)

Autobuild-User(v4-1-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-1-test): Thu Jul  4 11:47:53 CEST 2013 on sn-devel-104

10 years agos3-winbind: Allow sec_initial_uid() to store creds.
Andreas Schneider [Mon, 1 Jul 2013 11:02:48 +0000 (13:02 +0200)]
s3-winbind: Allow sec_initial_uid() to store creds.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Tue Jul  2 23:26:24 CEST 2013 on sn-devel-104
(cherry picked from commit caf3af33deeea9bee61a741fcc991285006cc6f5)

10 years agoselftest: Use higher ip numbers.
Andreas Schneider [Mon, 1 Jul 2013 11:02:47 +0000 (13:02 +0200)]
selftest: Use higher ip numbers.

127.0.0.2 is used by some distributions to resolve the own hostname.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit a4af4fa9db768dce2e009ba132cf88525a9b8314)

10 years agoselftest: Add a newline to root entries in the nss files.
Andreas Schneider [Mon, 1 Jul 2013 11:02:46 +0000 (13:02 +0200)]
selftest: Add a newline to root entries in the nss files.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit d5511b125ccfd9c46cad63796aa49258bcc0ae38)

10 years agoselftest: Fix domain name of plugindc.
Andreas Schneider [Mon, 1 Jul 2013 11:02:45 +0000 (13:02 +0200)]
selftest: Fix domain name of plugindc.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit 7392985b2981cb82be5f99255faae1605972be53)

10 years agotorture: Don't segfault in smb2.session on error.
Andreas Schneider [Mon, 1 Jul 2013 11:02:44 +0000 (13:02 +0200)]
torture: Don't segfault in smb2.session on error.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit bf5bc723da0605c7bc796f5e047e3f041db0b943)

10 years agotorture: Don't segfault in raw.session on error.
Andreas Schneider [Mon, 1 Jul 2013 11:02:43 +0000 (13:02 +0200)]
torture: Don't segfault in raw.session on error.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
(cherry picked from commit d295e18409a2e18e52c5bb76fec0e0540b6199cf)

10 years agotorture: Fix comparsion of uninitalized bytes.
Andreas Schneider [Tue, 2 Jul 2013 13:24:40 +0000 (15:24 +0200)]
torture: Fix comparsion of uninitalized bytes.

As we compare string make sure we have the null terminator.

Found by valgrind.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
(cherry picked from commit 474eee0df7893a3a4546e1c6ea47220700c5b99f)

10 years agoMake the output of the crackname script more readable
Matthieu Patou [Sun, 30 Jun 2013 08:59:53 +0000 (01:59 -0700)]
Make the output of the crackname script more readable

Signed-off-by: Matthieu Patou <mat@matws.net>
Reviewed-by: Andreas Schneider <asn@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Wed Jul  3 23:17:57 CEST 2013 on sn-devel-104

10 years agos3-winbind: Allow sec_initial_uid() to store creds.
Andreas Schneider [Mon, 1 Jul 2013 11:02:48 +0000 (13:02 +0200)]
s3-winbind: Allow sec_initial_uid() to store creds.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Tue Jul  2 23:26:24 CEST 2013 on sn-devel-104

10 years agoselftest: Use higher ip numbers.
Andreas Schneider [Mon, 1 Jul 2013 11:02:47 +0000 (13:02 +0200)]
selftest: Use higher ip numbers.

127.0.0.2 is used by some distributions to resolve the own hostname.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
10 years agoselftest: Add a newline to root entries in the nss files.
Andreas Schneider [Mon, 1 Jul 2013 11:02:46 +0000 (13:02 +0200)]
selftest: Add a newline to root entries in the nss files.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
10 years agoselftest: Fix domain name of plugindc.
Andreas Schneider [Mon, 1 Jul 2013 11:02:45 +0000 (13:02 +0200)]
selftest: Fix domain name of plugindc.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
10 years agotorture: Don't segfault in smb2.session on error.
Andreas Schneider [Mon, 1 Jul 2013 11:02:44 +0000 (13:02 +0200)]
torture: Don't segfault in smb2.session on error.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
10 years agotorture: Don't segfault in raw.session on error.
Andreas Schneider [Mon, 1 Jul 2013 11:02:43 +0000 (13:02 +0200)]
torture: Don't segfault in raw.session on error.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
10 years agotorture: Fix comparsion of uninitalized bytes.
Andreas Schneider [Tue, 2 Jul 2013 13:24:40 +0000 (15:24 +0200)]
torture: Fix comparsion of uninitalized bytes.

As we compare string make sure we have the null terminator.

Found by valgrind.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
10 years agotsocket: Pass the full port number to getaddrinfo().
Andreas Schneider [Mon, 1 Jul 2013 15:05:33 +0000 (17:05 +0200)]
tsocket: Pass the full port number to getaddrinfo().

The code stripped port numbers above 9999 down to 4 digits.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Mon Jul  1 21:10:53 CEST 2013 on sn-devel-104

Autobuild-User(v4-1-test): Karolin Seeger <kseeger@samba.org>
Autobuild-Date(v4-1-test): Tue Jul  2 13:07:35 CEST 2013 on sn-devel-104

10 years agotsocket: Pass the full port number to getaddrinfo().
Andreas Schneider [Mon, 1 Jul 2013 15:05:33 +0000 (17:05 +0200)]
tsocket: Pass the full port number to getaddrinfo().

The code stripped port numbers above 9999 down to 4 digits.

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Mon Jul  1 21:10:53 CEST 2013 on sn-devel-104

10 years agosmbtorture: Make cracksname easier to debug by outputing the offered format
Matthieu Patou [Mon, 1 Jul 2013 03:40:07 +0000 (20:40 -0700)]
smbtorture: Make cracksname easier to debug by outputing the offered format

Reviewed-By: Jelmer Vernooij <jelmer@samba.org>
Signed-off-by: Matthieu Patou <mat@matws.net>
Autobuild-User(master): Matthieu Patou <mat@samba.org>
Autobuild-Date(master): Mon Jul  1 11:22:57 CEST 2013 on sn-devel-104

10 years agoFix a missing parenthesis in the LDAP search request
Matthieu Patou [Fri, 28 Jun 2013 00:59:39 +0000 (17:59 -0700)]
Fix a missing parenthesis in the LDAP search request

Signed-off-by: Matthieu Patou <mat@matws.net>
Reviewed-by: Volker Lendecke <vl@samba.org>
Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Sun Jun 30 13:34:13 CEST 2013 on sn-devel-104

10 years agodocs-xml/manpages/smbclient.1.xml: fix case of -T flag in example.
Aurélien Aptel [Fri, 28 Jun 2013 15:34:26 +0000 (17:34 +0200)]
docs-xml/manpages/smbclient.1.xml: fix case of -T flag in example.

Signed-off-by: Aurélien Aptel <aurelien.aptel@gmail.com>
Reviewed-by: David Disseldorp <ddiss@samba.org>
Autobuild-User(master): David Disseldorp <ddiss@samba.org>
Autobuild-Date(master): Fri Jun 28 17:45:31 CEST 2013 on sn-devel-104

10 years agowinbindd and nmbd don't set their umask to zero on startup like smbd does.
Jeremy Allison [Tue, 18 Jun 2013 00:25:41 +0000 (17:25 -0700)]
winbindd and nmbd don't set their umask to zero on startup like smbd does.

Fix this - we already control tightly what permissions are
on the files we create. Ensure we don't get surprised.

Signed-off-by: Jeremy Allison <jra@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
Autobuild-User(master): Michael Adam <obnox@samba.org>
Autobuild-Date(master): Thu Jun 27 02:02:24 CEST 2013 on sn-devel-104

10 years agosharesec: Document --view-all
Volker Lendecke [Wed, 26 Jun 2013 15:35:37 +0000 (15:35 +0000)]
sharesec: Document --view-all

Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
Autobuild-User(master): Volker Lendecke <vl@samba.org>
Autobuild-Date(master): Wed Jun 26 18:43:45 CEST 2013 on sn-devel-104

10 years agosharesec: Document -v/--view
Volker Lendecke [Wed, 26 Jun 2013 15:34:37 +0000 (15:34 +0000)]
sharesec: Document -v/--view

Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
10 years agosharesec: Implement --view-all
Volker Lendecke [Wed, 26 Jun 2013 13:21:39 +0000 (15:21 +0200)]
sharesec: Implement --view-all

Listing individual shares can be quite slow when you have a lot of shares. This
implements a --view-all option that prints something like

[share1]
REVISION:1
OWNER:(NULL SID)
GROUP:(NULL SID)
ACL:S-1-1-0:ALLOWED/0/FULL

[share2]
REVISION:1
OWNER:(NULL SID)
GROUP:(NULL SID)
ACL:S-1-1-0:ALLOWED/0/FULL

Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
10 years agos3:smbd/close remove filesystem lock before removing sharemode
Christian Ambach [Thu, 13 Jun 2013 13:23:07 +0000 (15:23 +0200)]
s3:smbd/close remove filesystem lock before removing sharemode

otherwise we are open for a race condition:

opener 1 opens file and closes it
- during the close, the share mode entry will be removed from
  locking.tdb, but share mode in the file system will be dropped later
  after delete_on_close and write time updates have been done

opener 2 requests open of same file with file overwrite
- locking.tdb does not list original entry, but file system share mode
  is still around
- VFS_FTRUNCATE will fail and error was converted to STATUS_ACCESS_DENIED

Signed-off-by: Christian Ambach <ambi@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
Autobuild-User(master): Christian Ambach <ambi@samba.org>
Autobuild-Date(master): Tue Jun 25 14:48:44 CEST 2013 on sn-devel-104

10 years agos3:smbd/close use common exit path
Christian Ambach [Fri, 21 Jun 2013 13:11:55 +0000 (15:11 +0200)]
s3:smbd/close use common exit path

do not return early here, but use the common exit path that will
remove the share mode from the record

Signed-off-by: Christian Ambach <ambi@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
10 years agos3:lib add mapping for ETXTBSY
Christian Ambach [Tue, 11 Jun 2013 16:20:20 +0000 (18:20 +0200)]
s3:lib add mapping for ETXTBSY

add ETXTBSY to the errno->STATUS conversion table.
It will be mapped to STATUS_SHARING_VIOLATION

Signed-off-by: Christian Ambach <ambi@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
10 years agos3-ctdb: Fix auto-enabling of CTDB readonly support
Daniel Gan-Levi [Mon, 17 Jun 2013 16:39:09 +0000 (19:39 +0300)]
s3-ctdb: Fix auto-enabling of CTDB readonly support

This fixes Bug 9957

Bug: https://bugzilla.samba.org/show_bug.cgi?id=9957
Signed-off-by: Daniel Gan-Levi <danielg@il.ibm.com>
Reviewed-by: Christian Ambach <ambi@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
10 years agos3:smbd/aio mark file as modified in the SMB2 case
Christian Ambach [Thu, 20 Jun 2013 16:27:39 +0000 (18:27 +0200)]
s3:smbd/aio mark file as modified in the SMB2 case

Signed-off-by: Christian Ambach <ambi@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
10 years agonsswitch: fix a comment
Christian Ambach [Fri, 21 Jun 2013 11:26:18 +0000 (13:26 +0200)]
nsswitch: fix a comment

the beginning if is only ifdef LINUX now, not the long list this comment refers to

Signed-off-by: Christian Ambach <ambi@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>
10 years agoheimdal_build: Add missing dep on samba4kgetcred
Andrew Bartlett [Sun, 16 Jun 2013 04:02:57 +0000 (14:02 +1000)]
heimdal_build: Add missing dep on samba4kgetcred

This started to fail on current Debian Sid with system Heimdal after a binutils update.

Andrew Bartlett

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-By: Jelmer Vernooij <jelmer@samba.org>
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Tue Jun 25 02:30:59 CEST 2013 on sn-devel-104

10 years agotorture: Add tests for LDAP substring search with no strings provided
Andrew Bartlett [Sat, 22 Jun 2013 06:55:08 +0000 (16:55 +1000)]
torture: Add tests for LDAP substring search with no strings provided

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Mon Jun 24 23:55:07 CEST 2013 on sn-devel-104

10 years agolibcli/ldap: Cope with substring match with no chunks in ldap_push_filter
Andrew Bartlett [Sat, 22 Jun 2013 07:01:42 +0000 (17:01 +1000)]
libcli/ldap: Cope with substring match with no chunks in ldap_push_filter

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>