------------------------------------------------------------
revno: 3739
committer: Jelmer Vernooij <[EMAIL PROTECTED]>
branch nick: libndr
timestamp: Wed 2006-09-06 20:26:35 +0200
message:
merge 3.0 upstream changes
added:
source/include/ads_protos.h
source/script/tests/test_local_s3.sh
modified:
examples/libsmbclient/Makefile
examples/libsmbclient/testacl.c
examples/libsmbclient/testread.c
source/Makefile.in
source/auth/auth_util.c
source/client/clitar.c
source/include/ads.h
source/include/ads_cldap.h
source/include/includes.h
source/include/libsmb_internal.h
source/include/libsmbclient.h
source/include/smb.h
source/include/talloc.h
source/lib/account_pol.c
source/lib/events.c
source/lib/gencache.c
source/lib/smbldap.c
source/lib/snprintf.c
source/lib/sysacls.c
source/lib/talloc.c
source/lib/tallocmsg.c
source/lib/talloctort.c
source/lib/time.c
source/lib/util.c
source/libaddns/dns.h
source/libaddns/dnsrecord.c
source/libaddns/dnsupdate.c
source/libaddns/dnsutils.c
source/libads/ads_struct.c
source/libads/cldap.c
source/libads/dns.c
source/libads/gpo_util.c
source/libads/kerberos.c
source/libads/kerberos_verify.c
source/libads/ldap.c
source/libads/ldap_printer.c
source/libads/ldap_schema.c
source/libads/ldap_user.c
source/libads/ldap_utils.c
source/libads/sasl.c
source/libsmb/clientgen.c
source/libsmb/clifile.c
source/libsmb/clilist.c
source/libsmb/clirap.c
source/libsmb/libsmbclient.c
source/libsmb/namecache.c
source/libsmb/namequery.c
source/libsmb/namequery_dc.c
source/libsmb/ntlm_check.c
source/libsmb/ntlmssp.c
source/libsmb/ntlmssp_sign.c
source/libsmb/smbdes.c
source/locking/brlock.c
source/locking/locking.c
source/nsswitch/pam_winbind.c
source/nsswitch/winbindd.c
source/nsswitch/winbindd_ads.c
source/nsswitch/winbindd_async.c
source/nsswitch/winbindd_cache.c
source/nsswitch/winbindd_ccache_access.c
source/nsswitch/winbindd_cm.c
source/nsswitch/winbindd_cred_cache.c
source/nsswitch/winbindd_nss.h
source/nsswitch/winbindd_pam.c
source/passdb/lookup_sid.c
source/passdb/passdb.c
source/printing/nt_printing.c
source/printing/print_iprint.c
source/rpc_parse/parse_dfs.c
source/rpc_parse/parse_prs.c
source/script/tests/selftest.sh
source/script/tests/test_functions.sh
source/script/tests/test_smbclient_s3.sh
source/script/tests/test_smbtorture_s3.sh
source/script/tests/tests_all.sh
source/smbd/oplock_linux.c
source/smbd/sesssetup.c
source/tdb/common/transaction.c
source/torture/torture.c
source/utils/net_ads.c
source/utils/net_ads_gpo.c
source/utils/net_dns.c
source/utils/net_lookup.c
source/utils/net_usershare.c
source/utils/netlookup.c
source/utils/ntlm_auth.c
source/utils/ntlm_auth_diagnostics.c
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jerry
timestamp: Wed 2006-09-06 15:17:25 +0000
message:
only grant privs to Administrators if privileges are enabled to avoid
bopgus error messages
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: gd
timestamp: Wed 2006-09-06 13:20:06 +0000
message:
Some build- and memleak-fixes for the (not build by default) ADS GPO
routines.
Guenther
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: gd
timestamp: Wed 2006-09-06 13:13:12 +0000
message:
Forgot to call asn1_free() in previous commit.
Guenther
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: gd
timestamp: Wed 2006-09-06 13:10:20 +0000
message:
Do not return "success" when we failed to write in the CLDAP code.
Guenther
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: gd
timestamp: Wed 2006-09-06 12:34:00 +0000
message:
Just a little more verbosity in this debug statement.
Guenther
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: gd
timestamp: Wed 2006-09-06 12:29:45 +0000
message:
Make sure to actually get the printing data before trying to publish it
in AD.
Guenther
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: gd
timestamp: Wed 2006-09-06 12:21:13 +0000
message:
Adding DEBUG() to winbinds refresh seqnum to track down a failure.
Guenther
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: gd
timestamp: Wed 2006-09-06 12:14:58 +0000
message:
Fix memleaks.
Guenther
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: gd
timestamp: Wed 2006-09-06 11:53:13 +0000
message:
Close socket when the CLDAP request has failed.
Guenther
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: gd
timestamp: Wed 2006-09-06 10:59:39 +0000
message:
Stop winbindd from accumulating memory creds infinitely when doing
pam offline logons.
Guenther
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Wed 2006-09-06 04:41:43 +0000
message:
Don't forget to set the ref count to 1 on a reference
counted struct. Doh !
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Wed 2006-09-06 00:35:27 +0000
message:
Make max usershares an advisory limit, pointed out
by Cybionet <[EMAIL PROTECTED]>.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Tue 2006-09-05 21:11:08 +0000
message:
Only do a SAF realm store if the logon was krb5.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: metze
timestamp: Tue 2006-09-05 15:28:28 +0000
message:
merge from samba4 to make tcc happy as the same struct name was used in
multiple
places and that only works if they're all in a local scope
metze
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: metze
timestamp: Tue 2006-09-05 10:40:22 +0000
message:
ignore generated files
metze
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: metze
timestamp: Tue 2006-09-05 10:37:18 +0000
message:
be more verbose when errors happen
metze
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: metze
timestamp: Tue 2006-09-05 10:29:16 +0000
message:
it isn't a good idea to run the PIPE_NUMBER test on a file share...
But I wonder why it is so slow on my laptop and takes only 1 second on
the 'opi' build farm host.
I got only 2-3 opens per second...
metze
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: vlendec
timestamp: Tue 2006-09-05 07:43:49 +0000
message:
It's a bit pointless to send ourselves a signal just to check if we exist
:-)
Volker
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: metze
timestamp: Tue 2006-09-05 06:57:13 +0000
message:
build talloctort as part of 'make torture'
metze
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Tue 2006-09-05 06:32:46 +0000
message:
When we get a successful connection using ADS,
cache the SAF name under both the domain name
and the realm name, as we could be looking up
under both. Jerry please check.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Tue 2006-09-05 05:28:31 +0000
message:
Fix to ensure the name used by pam matches the
name that will be returned by winbindd. This
(should) fix the bug where the user logs in
with DOMAIN\user but winbindd returns only
"user" for the username due to 'winbind use
default domain' being set.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: idra
timestamp: Mon 2006-09-04 19:53:30 +0000
message:
Backport SAMBA_4_0 snprintf changes
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: vlendec
timestamp: Mon 2006-09-04 19:50:30 +0000
message:
More nested structures
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: vlendec
timestamp: Mon 2006-09-04 19:47:48 +0000
message:
More C++ stuff
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: vlendec
timestamp: Mon 2006-09-04 10:12:04 +0000
message:
When compiling with C++, nested structs lead to nested class definitions
which
are not compatible. I am aware that this would be a huge change in
Samba4, but
I would like to see it in the code that is shared.
Stefan, when you do merge work, can you get this across to Samba4?
Thanks,
Volker
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: vlendec
timestamp: Mon 2006-09-04 09:51:47 +0000
message:
More C++ stuff
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: vlendec
timestamp: Mon 2006-09-04 09:29:50 +0000
message:
Fix warnings on non-krb5 systems
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: vlendec
timestamp: Mon 2006-09-04 08:55:58 +0000
message:
Fix some 64-bit warnings
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: vlendec
timestamp: Sun 2006-09-03 21:31:51 +0000
message:
Fix SunX (with LDAP but without ADS)
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: vlendec
timestamp: Sun 2006-09-03 21:07:16 +0000
message:
Fix a C++ warnings: Don't use void * in libads/ for LDAPMessage anymore.
Compiled it on systems with and without LDAP, I hope it does not break the
build farm too badly. If it does, I'll fix it tomorrow.
Volker
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: vlendec
timestamp: Sun 2006-09-03 08:16:25 +0000
message:
OpenBSD apparently does not have ENOTSUP
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Sun 2006-09-03 03:46:07 +0000
message:
Try and detect network failures immediately in
set_dc_type_and_flags().
Fix problem when DC is down in ads_connect, where
we fall back to NetBIOS and try exactly the same
IP addresses we just put in the negative connection
cache.... We can never succeed, so don't try lookups
a second time.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: derrell
timestamp: Sun 2006-09-03 02:28:22 +0000
message:
revert a possibly unnecessary change
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: derrell
timestamp: Sun 2006-09-03 02:10:24 +0000
message:
Fix for "bug" (enhancement) 3684.
Provide a new option to specify the share mode to be used when opening a
file.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: derrell
timestamp: Sun 2006-09-03 01:37:26 +0000
message:
Should fix bug 4018.
NetApp filers expect paths in Open AndX Request to have a leading slash.
Windows clients send the leading slash, so we should too.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: derrell
timestamp: Sun 2006-09-03 00:50:34 +0000
message:
Should fix bug 3835.
Jeremy: requires your eyes...
If the remote connection timed out while cli_list() was retrieving its
list of
files, the error was not returned to the user, e.g. via smbc_opendir(),
so the
user didn't have a way to know to set the timeout longer and try again.
This
problem would occur when a very large directory is being read with a
too-small
timeout on the cli.
Jeremy, although there were a couple of areas that needed to be handled, I
needed to make one change that you should bless, in libsmb/clientgen.c.
It
was setting
cli->smb_rw_error = smb_read_error;
but smb_read_error is zero, so this had no effect. I'm now doing
cli->smb_rw_error = READ_TIMEOUT;
instead, and according to the OP, these (cumulative) changes (in a
slightly
different form) solve the problem.
Please confirm this smb_rw_error change will have no other adverse effects
that you can see.
Derrell
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Sat 2006-09-02 23:06:21 +0000
message:
Ensure we don't timeout twice to the same
server in winbindd when it's down and listed
in the -ve connection cache. Fix memory leak,
reduce timeout for cldap calls - minimum 3 secs.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: derrell
timestamp: Sat 2006-09-02 21:47:56 +0000
message:
Fixes bug 4026.
This completes the work Jeremy began last week, disambiguating the
meaning of
c_time. (In POSIX terminology, c_time means "status Change time", not
"create
time".) All uses of c_time, a_time and m_time have now been replaced with
change_time, access_time, and write_time, and when creation time is
intended,
create_time is used.
Additionally, the capability of setting and retrieving the create time
have
been added to the smbc_setxattr() and smbc_getxattr() functions. An
example
of setting all four times can be seen with the program
examples/libsmbclient/testacl
with the following command line similar to:
testacl -f -S
"system.*:CREATE_TIME:1000000000,ACCESS_TIME:1000000060,WRITE_TIME:1000000120,CHANGE_TIME:1000000180"
'smb://server/share/testfile.txt'
The -f option turns on the new mode which uses full time names in the
attribute specification (e.g. ACCESS_TIME vs A_TIME).
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: vlendec
timestamp: Sat 2006-09-02 21:41:28 +0000
message:
Ok, same fix as before. But this time also allocate the session key. This
had
worked in one test, no idea what memory I've overwritten that time. This
time
it survives the unpatched w2k password change.
Volker
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Sat 2006-09-02 20:17:05 +0000
message:
Ensure we don't namecache KDC entries with port 88
as a generic DC (that should be the LDAP port).
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Sat 2006-09-02 19:27:44 +0000
message:
Actually a smaller change than it looks. Leverage
the get_dc_list code to get the _kerberos. names
for site support. This way we don't depend on one
KDC to do ticket refresh. Even though we know it's
up when we add it, it may go down when we're trying
to refresh.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: vlendec
timestamp: Sat 2006-09-02 19:18:49 +0000
message:
The ntlmssp fix is not correct yet, working on it
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Sat 2006-09-02 06:28:48 +0000
message:
If you're writing out a krb5.conf, at least
get the syntax right... :-).
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Sat 2006-09-02 05:55:47 +0000
message:
Creating a directory and getting EEXIST isn't an error.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Sat 2006-09-02 04:53:04 +0000
message:
Improved debug.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Sat 2006-09-02 04:50:08 +0000
message:
Proper error reporting on write/close fail.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Sat 2006-09-02 04:46:27 +0000
message:
Get nelem/size args right for x_fwrite.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Sat 2006-09-02 03:42:55 +0000
message:
No need to prevent others from reading. Use 755 instead
of 700, and 644 instead of 600. Reading might help
debugging.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Sat 2006-09-02 02:04:41 +0000
message:
Ensure lockdir exists for winbindd. Store tmp
krb5.conf files under lockdir, not privatedir.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Sat 2006-09-02 01:34:37 +0000
message:
Don't talloc free the memory then reference it. Doh !
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Sat 2006-09-02 01:33:13 +0000
message:
Ensure we create the domain-specific krb5 files in a
separate directory.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Sat 2006-09-02 01:23:08 +0000
message:
Add debugs that showed me why my site code wasn't
working right. Don't update the server site when we
have a client one...
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Fri 2006-09-01 04:41:03 +0000
message:
Ensure we never indirect a null opt_username if it wasn't
specified.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Fri 2006-09-01 04:33:33 +0000
message:
Hmmm. Don't break helper functions that don't need
the username by forcing it to be specified. Still
split out domain \ user for the ones that do use
it.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Fri 2006-09-01 04:15:04 +0000
message:
Make ntlm_auth more intelligent about figuring out it's
domain and user args. if only given a parameter of the
form --username DOMAIN\user. When called by firefox
or other user apps they may not know what the domain
is (and they don't care). They just want to pass the
contents of $USERNAME without having to parse it
or guess a domain.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: vlendec
timestamp: Thu 2006-08-31 20:45:29 +0000
message:
To be honest, I have NO idea whatsoever what this does, but it fixes what
I
have been able to reproduce with smbtorture4 for bug number 4059. It's too
late here now to check with W2k native, I'll do that tomorrow or over the
weekend. I'll then also check in a samba4 torture test to walk this from
now
on.
Abartlet, can you do me a favor and look over this? It is a 1:1 copy of
the
corresponding Samba4 code.
Thanks,
Volker
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: vlendec
timestamp: Thu 2006-08-31 20:37:16 +0000
message:
Fix typo
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jerry
timestamp: Thu 2006-08-31 18:33:50 +0000
message:
revert accidental commit to ads_verify_ticket()
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jerry
timestamp: Thu 2006-08-31 18:32:23 +0000
message:
Disable storing SIDs in the S-1-22-1 and S-1-22-2 domain to the
SID<->uid/gid cache. FIxes a bug in token creation
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Thu 2006-08-31 16:26:32 +0000
message:
Add missing include-guards around ads.h and ads_cldap.h.
Remove all reference to "Default-First-Site-Name" and
treat it like any other site.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: metze
timestamp: Thu 2006-08-31 09:27:03 +0000
message:
sync with samba4
metze
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: metze
timestamp: Thu 2006-08-31 07:43:57 +0000
message:
run bin/talloctort with samba3's make test
metze
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: metze
timestamp: Thu 2006-08-31 07:42:47 +0000
message:
sync talloctort.c with samba4
metze
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: metze
timestamp: Thu 2006-08-31 06:30:51 +0000
message:
change the comment, talloc_enable_null_tracking() should
stay here.
metze
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: metze
timestamp: Thu 2006-08-31 05:57:10 +0000
message:
ignore generated files
metze
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Thu 2006-08-31 04:17:07 +0000
message:
Remove extra const.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Thu 2006-08-31 04:16:13 +0000
message:
Fix couple of typos...
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Thu 2006-08-31 04:14:08 +0000
message:
Store the server and client sitenames in the ADS
struct so we can see when they match - only create
the ugly krb5 hack when they do.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Thu 2006-08-31 01:27:51 +0000
message:
Handle locking madness.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Thu 2006-08-31 01:20:21 +0000
message:
The horror, the horror. Add KDC site support by
writing out a custom krb5.conf file containing
the KDC I need. This may suck.... Needs some
testing :-).
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Thu 2006-08-31 00:07:24 +0000
message:
Jerry is right - when no site support is enabled
the client sitename is "Default-First-Site-Name".
Treat this as a blank site (no site configured).
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Wed 2006-08-30 23:56:40 +0000
message:
Fix print out of client site name.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Wed 2006-08-30 18:48:49 +0000
message:
Move the saf_ cache into the tcp ad connection code.
Cause winbindd to set site support before doing the
generic AD server lookup.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jerry
timestamp: Wed 2006-08-30 16:58:29 +0000
message:
allow srcdir != builddir for 'make test'
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Wed 2006-08-30 16:02:08 +0000
message:
Don't print a NULL sitename.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Wed 2006-08-30 05:52:31 +0000
message:
Ok, I think I finally figured out where to put
the code to redo the CLDAP query to restrict DC
DNS lookups to the sitename. Jerry, please check
to stop me going insane :-).
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Wed 2006-08-30 04:40:03 +0000
message:
Implement the basic store for CLDAP sitename
support when looking up DC's. On every CLDAP
call store the returned client sitename (if
present, delete store if not) in gencache with
infinate timeout. On AD DNS DC lookup, try looking
for sitename DC's first, only try generic if
sitename DNS lookup failed.
I still haven't figured out yet how to ensure
we fetch the sitename with a CLDAP query before
doing the generic DC list lookup. This code is
difficult to understand. I'll do some experiments
and backtraces tomorrow to try and work out where
to force a CLDAP site query first.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: vlendec
timestamp: Tue 2006-08-29 19:14:25 +0000
message:
Get rid of warnings now that talloc is merged.
Destructors now take a pointer to the "real" destroyed object as an
argument.
Volker
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: metze
timestamp: Tue 2006-08-29 17:17:02 +0000
message:
turn on null_tracking with the first talloc_init() call,
(this needs to be moved to a samba3 specific place)
I commit this because I habe no time to test smbcontrol .... pool-usage
and don't want to break it. I'll try to find a better fix tomorrow.
metze
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: metze
timestamp: Tue 2006-08-29 16:54:12 +0000
message:
sync samba3's talloc with samba4's and move the samba3 specific stuff to
tallocmsg.c
metze
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Tue 2006-08-29 16:52:59 +0000
message:
Comment is obsolte. This is now implemented in winbindd.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jerry
timestamp: Tue 2006-08-29 15:43:15 +0000
message:
remove incorrect comment (code has already been fixed)
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jerry
timestamp: Tue 2006-08-29 15:42:09 +0000
message:
ensure we do not call map_username() twice on Krb5 session setups
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: vlendec
timestamp: Tue 2006-08-29 09:49:10 +0000
message:
Port the snprintf bugfix from 4. I wonder why we never hit this....
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Tue 2006-08-29 01:25:57 +0000
message:
Fix null deref caught by Stanford checker. Don't
call ntlmssp_end on a null pointer ! (Doh !).
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Tue 2006-08-29 01:11:02 +0000
message:
Fix possible null deref caught by Stanford checker.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Tue 2006-08-29 01:04:25 +0000
message:
Stanford checker fix. cookie here can't be null or we'd
deref null. Make interface explicit.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Tue 2006-08-29 00:56:08 +0000
message:
Fix from Michael Adam <[EMAIL PROTECTED]> - make internal_resolve_name
do what it's supposed to.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Tue 2006-08-29 00:53:28 +0000
message:
Fix Stanford checker bug - possible null deref.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: jra
timestamp: Mon 2006-08-28 23:01:30 +0000
message:
Store the uid in the memory creds. Don't request the
krb5 refresh creds when doing cached NTLM auth, request
the memory creds instead.
Jeremy.
------------------------------------------------------------
merged: svn-v1:[EMAIL PROTECTED]
committer: vlendec
timestamp: Mon 2006-08-28 18:25:55 +0000
message:
Reformatting. I did not want to do it anymore, but these ones looked just
silly :-)
Volker
