[Samba] Issue upgrading to samba 3.5.5
Hi, I've upgraded samba from 3.2.8 to 3.5.5 and some issues appears. I'am in ADS mode of samba. My problem is : - I have a windows server which use a local account to launch a service. - The service launched by the local must send file to a samba share. - I have created a user in my Active Directory which have the same login/password than my local server account. Since I was in samba 3.2.8 - ADS - winbind mode it was working, but now in the 3.5.5 versions it does not... What can I do to make it works again in 3.5.5 (because of security hole corrected) because this is an important part of my production process. Cordialy, Sylvain RICHAUD Responsable Sécurité, Système et Réseau Tél. +33 (0) 4 72 52 72 45 Fax +33 (0) 4 78 47 44 27 Mobile +33 (0) 6 20 81 38 85 sylvain.rich...@delta2s.fr Delta Security Solutions Service/département Chemin du Château d’Eau Parc d’affaires de Dardilly BP 70 69543 Champagne-au-Mont-d’Or Cedex Afin de contribuer à la préservation de l'environnement, merci de n'imprimer ce courriel que si nécessaire Les informations contenues dans ce courrier électronique sont confidentielles. En tout état de cause, elles ne sont destinées qu’à la personne ou entreprise dont le nom est mentionne ci-dessus. Veuillez aviser l'expéditeur de toute difficulté ou de toute erreur dans la transmission de ce document. Si vous n'êtes pas le destinataire du présent courrier, vous n'êtes pas autorise, sous peine de poursuites à en prendre des copies, le divulguer ou le diffuser. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Issue upgrading to samba 3.5.5
You could make a guest ok share and deny all ip and only allows access from server ip address. Not sure if this fits your need. - Original Message - From: Sylvain RICHAUD [mailto:sylvain.rich...@delta2s.fr] Sent: Sunday, October 10, 2010 07:06 PM To: 'Jeremy Allison' j...@samba.org Cc: samba@lists.samba.org samba@lists.samba.org; samba-techni...@lists.samba.org samba-techni...@lists.samba.org Subject: [Samba] Issue upgrading to samba 3.5.5 Hi, I've upgraded samba from 3.2.8 to 3.5.5 and some issues appears. I'am in ADS mode of samba. My problem is : - I have a windows server which use a local account to launch a service. - The service launched by the local must send file to a samba share. - I have created a user in my Active Directory which have the same login/password than my local server account. Since I was in samba 3.2.8 - ADS - winbind mode it was working, but now in the 3.5.5 versions it does not... What can I do to make it works again in 3.5.5 (because of security hole corrected) because this is an important part of my production process. Cordialy, Sylvain RICHAUD Responsable Sécurité, Système et Réseau Tél. +33 (0) 4 72 52 72 45 Fax +33 (0) 4 78 47 44 27 Mobile +33 (0) 6 20 81 38 85 sylvain.rich...@delta2s.fr Delta Security Solutions Service/département Chemin du Château d’Eau Parc d’affaires de Dardilly BP 70 69543 Champagne-au-Mont-d’Or Cedex Afin de contribuer à la préservation de l'environnement, merci de n'imprimer ce courriel que si nécessaire Les informations contenues dans ce courrier électronique sont confidentielles. En tout état de cause, elles ne sont destinées qu’à la personne ou entreprise dont le nom est mentionne ci-dessus. Veuillez aviser l'expéditeur de toute difficulté ou de toute erreur dans la transmission de ce document. Si vous n'êtes pas le destinataire du présent courrier, vous n'êtes pas autorise, sous peine de poursuites à en prendre des copies, le divulguer ou le diffuser. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba Notice This email and any attachments are strictly confidential and subject to copyright. They may contain privileged information. If you are not the intended recipient please delete the message and notify the sender. You should not read, copy, use, change, alter or disclose this email or its attachments without authorisation. The company and any related or associated companies do not accept any liability in connection with this email and any attachments including in connection with computer viruses, data corruption, delay, interruption, unauthorised access or unauthorised amendment. Any views expressed in this email and any attachments do not necessarily reflect the views of the company or the views of any of our related or associated companies. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Issue upgrading to samba 3.5.5
On 10/10/2010 11:06 AM, Sylvain RICHAUD wrote: I'am in ADS mode of samba. My problem is : - I have a windows server which use a local account to launch a service. - The service launched by the local must send file to a samba share. - I have created a user in my Active Directory which have the same login/password than my local server account. your service try to authenticate on the samba server as service that's interpreted as SAMBASERVER\service on the samba server this user doesn't exist on your configuration. (on older samba versions you couldn't log in as SAMBASERVER\USER on member servers or at least DOMAIN\USER was the default, someone illuminated on arcane samba details could elaborate for everybody's benefit.) you could: 1- create an account with the same name and password, not in AD, but on the samba server local password databases unix and samba (create the SAMBASERVER\service user) 2- if your windows server is an AD-member a) use an AD user account to run the service b) use sytem to run the service on the windows server and create a share writable for the machine account of the windows server it should work with W2K8 and probably not with W2K3 (I use this with windows seven, the system account of the clients write logs on a samba server only accessible to machine accounts. I needed an other way around for XP) -- Jean-Jacques Moulis Tel: (013) 281684 ISYFax: (013) 139282 Linköping UniversityE-mail: j...@isy.liu.se 581 83 Linköping -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Samba 3.5.6 Available for Download
This is the latest stable release of Samba 3.5. It has just been uploaded to Debian unstable. Thanks to the strict release policy of the Samba Team (only well identified bugfixes allowed in the stable version releases), this updated got pre-approved by the Debian release team. So, it means that even if Debian is now deeply frozen, in preparation for the release of Debian 6.0 squeeze, samba 3.5.6 will be in that release. Not that many upstream software get such exceptions. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Build status as of Sun Oct 10 06:00:07 2010
URL: http://build.samba.org/ --- /home/build/master/cache/broken_results.txt.old 2010-10-09 00:00:03.0 -0600 +++ /home/build/master/cache/broken_results.txt 2010-10-10 00:00:41.0 -0600 @@ -1,4 +1,4 @@ -Build status as of Sat Oct 9 06:00:02 2010 +Build status as of Sun Oct 10 06:00:07 2010 Build counts: Tree Total Broken Panic
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated
via f827fcd s4-libnet_vampire: Remove unused self_corrected_schema
via b44135a s4-libnet_vampire use a linked list to handle schema
objects pending conversion
via 837af1c s4-vampire: Optimize Schema decoding conversion
via 0440741 s4-vampire: Initial implementation for multi-pass schema
decoding from DRS data
via 20029aa s4-dsdb-repl: Print what the error code for failure is
via 81e5e23 s4-dsdb: Make dsdb_setup_sorted_accessors() public
from c15e919 wafsamba: Clarify needs_python argument name, use
pyembed/pyext where applicable.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit f827fcd0e0f91b6aca113ec94e09e293f119cba8
Author: Kamen Mazdrashki kame...@samba.org
Date: Sun Oct 3 04:29:08 2010 +0300
s4-libnet_vampire: Remove unused self_corrected_schema
Autobuild-User: Kamen Mazdrashki kame...@samba.org
Autobuild-Date: Sun Oct 10 10:40:38 UTC 2010 on sn-devel-104
commit b44135ac737499052f54e72b4076ef5561852d35
Author: Andrew Bartlett abart...@samba.org
Date: Mon Sep 27 08:50:54 2010 +1000
s4-libnet_vampire use a linked list to handle schema objects pending
conversion
commit 837af1c29ae6ecebf483706e14b3190fdf4988c8
Author: Kamen Mazdrashki kame...@samba.org
Date: Sat Sep 25 13:26:03 2010 +0300
s4-vampire: Optimize Schema decoding conversion
memmove() is removed and I am using the beginning
of the list for storage for failed objects
commit 0440741473a87d184055942586c5f68de153fa2f
Author: Kamen Mazdrashki kame...@samba.org
Date: Fri Sep 24 22:56:36 2010 +0300
s4-vampire: Initial implementation for multi-pass schema decoding from DRS
data
We can't decode all schema object in just one (or even two)
passes when Schema tree has more levels of inheritance.
commit 20029aac31d1952b8307d4f0c3c628f17562af51
Author: Kamen Mazdrashki kame...@samba.org
Date: Fri Sep 24 00:47:37 2010 +0300
s4-dsdb-repl: Print what the error code for failure is
commit 81e5e23683ebbb48bb3a2b2db306f47234cdfe09
Author: Kamen Mazdrashki kame...@samba.org
Date: Fri Sep 24 00:46:50 2010 +0300
s4-dsdb: Make dsdb_setup_sorted_accessors() public
We are going to need it while converting DRS schema.
---
Summary of changes:
source4/dsdb/repl/replicated_objects.c |4 +-
source4/dsdb/schema/schema_set.c |4 +-
source4/libnet/libnet_vampire.c| 176 +--
3 files changed, 101 insertions(+), 83 deletions(-)
Changeset truncated at 500 lines:
diff --git a/source4/dsdb/repl/replicated_objects.c
b/source4/dsdb/repl/replicated_objects.c
index 0beb53c..10b13a8 100644
--- a/source4/dsdb/repl/replicated_objects.c
+++ b/source4/dsdb/repl/replicated_objects.c
@@ -271,7 +271,9 @@ WERROR dsdb_extended_replicated_objects_convert(struct
ldb_context *ldb,
out-objects, out-objects[i]);
if (!W_ERROR_IS_OK(status)) {
talloc_free(out);
- DEBUG(0,(Failed to convert object %s\n,
cur-object.identifier-dn));
+ DEBUG(0,(Failed to convert object %s: %s\n,
+cur-object.identifier-dn,
+win_errstr(status)));
return status;
}
}
diff --git a/source4/dsdb/schema/schema_set.c b/source4/dsdb/schema/schema_set.c
index 344e9bb..4a4466a 100644
--- a/source4/dsdb/schema/schema_set.c
+++ b/source4/dsdb/schema/schema_set.c
@@ -264,8 +264,8 @@ static void dsdb_sorted_accessors_free(struct dsdb_schema
*schema)
/*
create the sorted accessor arrays for the schema
*/
-static int dsdb_setup_sorted_accessors(struct ldb_context *ldb,
- struct dsdb_schema *schema)
+int dsdb_setup_sorted_accessors(struct ldb_context *ldb,
+ struct dsdb_schema *schema)
{
struct dsdb_class *cur;
struct dsdb_attribute *a;
diff --git a/source4/libnet/libnet_vampire.c b/source4/libnet/libnet_vampire.c
index adcb010..6a94f07 100644
--- a/source4/libnet/libnet_vampire.c
+++ b/source4/libnet/libnet_vampire.c
@@ -68,9 +68,6 @@ struct libnet_vampire_cb_state {
* converted, because we may not know them yet */
struct dsdb_schema *self_made_schema;
- /* 2nd pass, with full ID-OID-name table */
- struct dsdb_schema *self_corrected_schema;
-
/* prefixMap in LDB format, from the remote DRS server */
DATA_BLOB prefixmap_blob;
const struct dsdb_schema *schema;
@@ -222,9 +219,17 @@ NTSTATUS libnet_vampire_cb_check_options(void
*private_data,
static NTSTATUS libnet_vampire_cb_apply_schema(struct libnet_vampire_cb_state
*s,
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated
via 9b94894 socket_wrapper: Make it work on freebsd for udp packets
via 9d958ce build: make make tests SCREEN=1 work on freebsd
from f827fcd s4-libnet_vampire: Remove unused self_corrected_schema
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit 9b9489479e9c429cefd58c31be4d39da8ea90057
Author: Stefan Metzmacher me...@samba.org
Date: Sun Oct 10 12:29:08 2010 +0200
socket_wrapper: Make it work on freebsd for udp packets
Autobuild-User: Matthieu Patou m...@samba.org
Autobuild-Date: Sun Oct 10 12:57:00 UTC 2010 on sn-devel-104
commit 9d958ce582fa760456b52d65a2deb36d8bd3794a
Author: Matthieu Patou m...@freebsd.home.tridgell.net
Date: Sun Oct 10 10:12:46 2010 +1100
build: make make tests SCREEN=1 work on freebsd
---
Summary of changes:
lib/socket_wrapper/socket_wrapper.c | 12 +++-
selftest/in_screen | 17 +++--
selftest/target/Samba4.pm |7 +--
source4/selftest/wscript|4 ++--
4 files changed, 33 insertions(+), 7 deletions(-)
Changeset truncated at 500 lines:
diff --git a/lib/socket_wrapper/socket_wrapper.c
b/lib/socket_wrapper/socket_wrapper.c
index 9d732ee..c52d98c 100644
--- a/lib/socket_wrapper/socket_wrapper.c
+++ b/lib/socket_wrapper/socket_wrapper.c
@@ -1967,7 +1967,17 @@ _PUBLIC_ ssize_t swrap_sendto(int s, const void *buf,
size_t len, int flags, con
si-defer_connect = 0;
}
- ret = real_sendto(s, buf, len, flags, (struct sockaddr
*)un_addr, sizeof(un_addr));
+ /* Man page for Linux says:
+* the error EISONN may be returned when they are not NULL and
0
+* But in practice it's not on x86/amd64, but on other unix it
is
+* (ie. freebsd)
+* So if we are already connected we send NULL/0
+*/
+ if (si-connected) {
+ ret = real_sendto(s, buf, len, flags, NULL, 0);
+ } else {
+ ret = real_sendto(s, buf, len, flags, (struct sockaddr
*)un_addr, sizeof(un_addr));
+ }
break;
default:
ret = -1;
diff --git a/selftest/in_screen b/selftest/in_screen
index 8a3cc5c..927d831 100755
--- a/selftest/in_screen
+++ b/selftest/in_screen
@@ -1,10 +1,24 @@
-#!/bin/bash
+#!/usr/bin/env bash
export TMPDIR=$SELFTEST_TMPDIR
SERVERNAME=$ENVNAME
[ -z $SERVERNAME ] SERVERNAME=base
basedir=$TMPDIR
+osname=$(uname)
+if [ $osname = Linux ]; then
+ vars=$(mktemp)
+else
+ vars=$(mktemp -t tmpsmb)
+ function seq() {
+ dpt=$1
+ end=$2
+ while [ $dpt -le $end ]; do
+ echo $dpt
+ dpt=$(( $dpt + 1))
+ done
+ }
+fi
[ -r $basedir/$SERVERNAME.pid ] {
for i in $(seq 2 100); do
@@ -19,7 +33,6 @@ rm -f $basedir/$SERVERNAME.*
# set most of the environment vars we have in the screen session too
_ENV=
-vars=$(mktemp)
printenv |
egrep -v '^TERMCAP|^WINDOW|^SHELL|^STY|^SHLVL|^SAMBA_VALGRIND|\$' |
egrep '^[A-Z]' |
diff --git a/selftest/target/Samba4.pm b/selftest/target/Samba4.pm
index 36023f2..574c015 100644
--- a/selftest/target/Samba4.pm
+++ b/selftest/target/Samba4.pm
@@ -88,6 +88,7 @@ sub check_or_start($$$)
POSIX::mkfifo($env_vars-{SAMBA_TEST_FIFO}, 0700);
unlink($env_vars-{SAMBA_TEST_LOG});
+ my $pwd = `pwd`;
print STARTING SAMBA for $ENV{ENVNAME}\n;
my $pid = fork();
if ($pid == 0) {
@@ -138,9 +139,11 @@ sub check_or_start($$$)
if (defined($ENV{SAMBA_PROCESS_MODEL})) {
$model = $ENV{SAMBA_PROCESS_MODEL};
}
- my $ret = system($valgrind $samba $optarg
$env_vars-{CONFIGURATION} -M $model -i);
+ chomp($pwd);
+ my $cmdline = $valgrind ${pwd}/$samba $optarg
$env_vars-{CONFIGURATION} -M $model -i;
+ my $ret = system($cmdline);
if ($ret == -1) {
- print Unable to start $samba: $ret: $!\n;
+ print Unable to start $cmdline: $ret: $!\n;
exit 1;
}
my $exit = ($ret 8);
diff --git a/source4/selftest/wscript b/source4/selftest/wscript
index 561baeb..249db5e 100644
--- a/source4/selftest/wscript
+++ b/source4/selftest/wscript
@@ -130,8 +130,8 @@ def cmd_testonly(opt):
server_wrapper = '../selftest/gdb_run _DUMMY=X'
if Options.options.SCREEN:
-server_wrapper = '../selftest/in_screen %s' % server_wrapper
-os.environ['TERMINAL'] = '../selftest/in_screen'
+server_wrapper = '%s/../selftest/in_screen %s' %
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 7552dd8 rpc_ndr_netlogon: Add missing dependency on tevent. via fd718c9 samdb: Remove dependency on unknown subsystem. via 904a6c3 util: Link headers to correct subsystem, fix formatting. via aa6d7cc dsdb: add missing dependency on samba_socket. via e2f3e10 ldb-samba: Rename samdb_relative_path to ldb_relative_path, as it's not samdb-specific. via 33c4b85 dsdb: Move attr_in_list to SAMDB_COMMON to avoid circular dependency between SAMDB_COMMON and DSDB_MODULE_HELPERS. via 8f6ca48 gensec: Support building without any linked-in modules. via 7ba7ca7 idmap: Add missing dependency on ldbsamba. via be1f2c4 secrets: Add missing dependency on ldbsamba. via c4c2985 cldapd: Add missing dependency on ldbsamba. via c1884f3 ldb-samba: Add ldb_wrap_add, remove last schema reference from ldb_wrap. via 7f68870 ldb-samba: Split up ldb_wrap_connect() a bit. via 938cb40 ldb-samba: Add convenience function for doing a Samba-style LDB init. via 93126b3 samdb: Add flags argument to samdb_connect(). via 6280725 samdb: Handle schema setup in samdb, not in more generic ldbsamba. via 614c8ea tls: add missing dependency on util_tevent. via a20f025 wafsamba: Fix init function when building modules as shared objects. from 9b94894 socket_wrapper: Make it work on freebsd for udp packets http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 7552dd8d1e5f844fbf71580f1a34d50dcb4f3fbc Author: Jelmer Vernooij jel...@samba.org Date: Mon Oct 11 00:22:42 2010 +0200 rpc_ndr_netlogon: Add missing dependency on tevent. Autobuild-User: Jelmer Vernooij jel...@samba.org Autobuild-Date: Sun Oct 10 23:04:13 UTC 2010 on sn-devel-104 commit fd718c96f0bcbcdff0c931a117392ee6a4bc6ed9 Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 23:59:04 2010 +0200 samdb: Remove dependency on unknown subsystem. commit 904a6c376105e084789a66894644c9a498574778 Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 18:39:07 2010 +0200 util: Link headers to correct subsystem, fix formatting. commit aa6d7ccc44e226a65fc1b56c6d973a375c482811 Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 23:00:59 2010 +0200 dsdb: add missing dependency on samba_socket. commit e2f3e10b1a47e195e9b329ac244be93c2fcdf0a0 Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 23:45:23 2010 +0200 ldb-samba: Rename samdb_relative_path to ldb_relative_path, as it's not samdb-specific. commit 33c4b85058f21ab9865bc7cf1b49b7bd38e0275d Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 17:02:10 2010 +0200 dsdb: Move attr_in_list to SAMDB_COMMON to avoid circular dependency between SAMDB_COMMON and DSDB_MODULE_HELPERS. commit 8f6ca4859c4d377974fa61a3de10d6304b562986 Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 16:46:55 2010 +0200 gensec: Support building without any linked-in modules. commit 7ba7ca7062cf7d239c169eda4aa779eaaa2bb780 Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 18:42:14 2010 +0200 idmap: Add missing dependency on ldbsamba. commit be1f2c4d0212efeddbc8e6635920b1c6a152 Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 18:41:57 2010 +0200 secrets: Add missing dependency on ldbsamba. commit c4c298591d2930f3c355c3fa36699a5ab074d04e Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 22:57:18 2010 +0200 cldapd: Add missing dependency on ldbsamba. commit c1884f31ea13618cd3a94a30f9c413d176d1e258 Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 23:25:38 2010 +0200 ldb-samba: Add ldb_wrap_add, remove last schema reference from ldb_wrap. commit 7f68870bc939e33df958f708ec7f46253fefadd9 Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 17:34:21 2010 +0200 ldb-samba: Split up ldb_wrap_connect() a bit. commit 938cb40290af72bdd887d964f46ccc00d80ab744 Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 17:15:11 2010 +0200 ldb-samba: Add convenience function for doing a Samba-style LDB init. commit 93126b3315a70d1beaeaa64d05cdbfb167acbabe Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 17:00:45 2010 +0200 samdb: Add flags argument to samdb_connect(). commit 6280725b47391c69dd7db1133c15bd0ce7418da6 Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 16:56:55 2010 +0200 samdb: Handle schema setup in samdb, not in more generic ldbsamba. commit 614c8ea98650405b461a6ce034ee5e5acc45a952 Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 23:08:12 2010 +0200 tls: add missing dependency on util_tevent. commit a20f025ff611d541b82b83791013f2713c999235 Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 22:52:35 2010 +0200 wafsamba: Fix init function when building modules as shared
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via 2bff55f dsdb/modules: Split up helpers a bit to prevent recursive dependencies. via 4280527 torture_auth: Add missing dependency on gensec_ntlmssp. via ea6a3f5 wafsamba: Support setting pyembed on libraries. via ffd7cee torture: Link against rpc server itself, not service module. (against which we can't link). via ea8fc87 ldap_server: Add missing dependency on gensec_server_start. via 6c410dd kdc: Add missing dependency on samba_gensec_server. via 57bf052 smb_server: Split core out of service, since the service can be built as a .so against which we can't link. via b0963b7 smb2: Add missing dependency on NDR_DFSBLOBS. via d0c7ae5 librpc: Remove unnecessary dependency on libsamba-hostconfig. via 3b19993 dsdb/schema: Move some dsdb_dn functions that are schema-specific. via 41e55d7 ntvfs_ipc: add missing dependency on dcerpc_common. via 2c9ebb7 libsecurity-common: Add missing dependency on libndr. via dc47e8d libcli-auth: Remove unnecessary dependency on libsamba-hostconfig. via 1f73f3b dsdb modules: Split ridalloc out of common helpers, because of dependency loops. from 7552dd8 rpc_ndr_netlogon: Add missing dependency on tevent. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit 2bff55f5deede15d09d2f685f5391e579ad36831 Author: Jelmer Vernooij jel...@samba.org Date: Mon Oct 11 01:03:42 2010 +0200 dsdb/modules: Split up helpers a bit to prevent recursive dependencies. Autobuild-User: Jelmer Vernooij jel...@samba.org Autobuild-Date: Sun Oct 10 23:47:54 UTC 2010 on sn-devel-104 commit 4280527b6abb0070ad4f62338e9eea2c1ad991a7 Author: Jelmer Vernooij jel...@samba.org Date: Mon Oct 11 00:58:28 2010 +0200 torture_auth: Add missing dependency on gensec_ntlmssp. commit ea6a3f5c485ebc82c6c7cfd6b2a3451a75676cfb Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 21:22:02 2010 +0200 wafsamba: Support setting pyembed on libraries. commit ffd7cee150527fbbfe29b5f9d30c1aec2137e392 Author: Jelmer Vernooij jel...@samba.org Date: Mon Oct 11 00:49:13 2010 +0200 torture: Link against rpc server itself, not service module. (against which we can't link). commit ea8fc8727b02004b90db46d444bcefbc4c622c70 Author: Jelmer Vernooij jel...@samba.org Date: Mon Oct 11 00:47:18 2010 +0200 ldap_server: Add missing dependency on gensec_server_start. commit 6c410dd6150206bf5f052bd6501f989e61a16583 Author: Jelmer Vernooij jel...@samba.org Date: Mon Oct 11 00:46:37 2010 +0200 kdc: Add missing dependency on samba_gensec_server. commit 57bf052e683e6ebc99dd85e3d1a6cf62d2fb89ea Author: Jelmer Vernooij jel...@samba.org Date: Mon Oct 11 00:41:22 2010 +0200 smb_server: Split core out of service, since the service can be built as a .so against which we can't link. commit b0963b7b31fad5a057d2517b2e9f39db5efbd772 Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 19:15:41 2010 +0200 smb2: Add missing dependency on NDR_DFSBLOBS. commit d0c7ae5cd5f4495dd7ba1de8e8cd9e09aa7f5d11 Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 23:00:32 2010 +0200 librpc: Remove unnecessary dependency on libsamba-hostconfig. commit 3b199935615eb50ff039e89b9d3cfcebde2b4844 Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 21:37:58 2010 +0200 dsdb/schema: Move some dsdb_dn functions that are schema-specific. commit 41e55d78944a04b0fa8b351ff4a25c78bc9499a3 Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 22:57:40 2010 +0200 ntvfs_ipc: add missing dependency on dcerpc_common. commit 2c9ebb764657b3fea9161190cf924ff638eab9b2 Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 22:56:58 2010 +0200 libsecurity-common: Add missing dependency on libndr. commit dc47e8dc52964447aab80fb58a42c4f33aeaef33 Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 22:56:38 2010 +0200 libcli-auth: Remove unnecessary dependency on libsamba-hostconfig. commit 1f73f3b1ca561f8cad680459e0ef418d90b2e955 Author: Jelmer Vernooij jel...@samba.org Date: Mon Oct 11 00:29:18 2010 +0200 dsdb modules: Split ridalloc out of common helpers, because of dependency loops. --- Summary of changes: buildtools/wafsamba/wafsamba.py | 12 +- lib/crypto/wscript_build|2 +- libcli/auth/wscript_build |4 +- libcli/security/wscript_build |2 +- source4/dsdb/common/dsdb_dn.c | 78 source4/dsdb/samdb/ldb_modules/acl.c|1 + source4/dsdb/samdb/ldb_modules/acl_util.c | 61 --- source4/dsdb/samdb/ldb_modules/descriptor.c |1 + source4/dsdb/samdb/ldb_modules/objectclass.c|1 +
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated via c5ae099 kerberos_util: Put into separate subsystem. via 539d5f5 auth: Remove unnecessary dependencies, fix formatting. via 5cbbe94 credentials: Move code that doesn't need any external dependencies into credentials.c. via 53db1f3 server: Add missing dependency on schannel database. via ffb6766 service: Add missing dependency on process_model. via 5324b94 wafsamba: Fix handling of pyembed/pyext. from 2bff55f dsdb/modules: Split up helpers a bit to prevent recursive dependencies. http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master - Log - commit c5ae0991528dfeb3dbd1539f5c9c2ed2f19990b9 Author: Jelmer Vernooij jel...@samba.org Date: Mon Oct 11 01:28:45 2010 +0200 kerberos_util: Put into separate subsystem. Autobuild-User: Jelmer Vernooij jel...@samba.org Autobuild-Date: Mon Oct 11 00:34:56 UTC 2010 on sn-devel-104 commit 539d5f518da96d348529f6a87064c040a63ba298 Author: Jelmer Vernooij jel...@samba.org Date: Mon Oct 11 01:23:20 2010 +0200 auth: Remove unnecessary dependencies, fix formatting. commit 5cbbe943664aa428785fdffa1d1e5192decd4783 Author: Jelmer Vernooij jel...@samba.org Date: Mon Oct 11 01:20:42 2010 +0200 credentials: Move code that doesn't need any external dependencies into credentials.c. commit 53db1f34674ee161e102c4797f5ce5a9bee53350 Author: Jelmer Vernooij jel...@samba.org Date: Mon Oct 11 01:10:55 2010 +0200 server: Add missing dependency on schannel database. commit ffb67664230358ebdf3a35d9c9342ac5e4c9 Author: Jelmer Vernooij jel...@samba.org Date: Sun Oct 10 19:14:20 2010 +0200 service: Add missing dependency on process_model. commit 5324b943e72d597da178d362f7c938fe0a4e57b0 Author: Jelmer Vernooij jel...@samba.org Date: Mon Oct 11 01:09:26 2010 +0200 wafsamba: Fix handling of pyembed/pyext. --- Summary of changes: buildtools/wafsamba/wafsamba.py |7 +- source4/auth/credentials/credentials.c | 147 ++ source4/auth/credentials/credentials_files.c | 131 --- source4/auth/credentials/credentials_krb5.c |1 + source4/auth/credentials/credentials_ntlm.c | 13 --- source4/auth/credentials/wscript_build |4 +- source4/auth/kerberos/kerberos_util.c|3 +- source4/auth/kerberos/wscript_build |6 + source4/auth/wscript_build |4 +- source4/lib/ldb/wscript |3 +- source4/lib/policy/wscript_build |3 +- source4/librpc/wscript_build |2 +- source4/param/wscript_build |4 +- source4/scripting/python/wscript_build | 38 source4/smbd/wscript_build |4 +- source4/web_server/wscript_build | 23 ++-- 16 files changed, 201 insertions(+), 192 deletions(-) Changeset truncated at 500 lines: diff --git a/buildtools/wafsamba/wafsamba.py b/buildtools/wafsamba/wafsamba.py index 414fdc6..e53472b 100644 --- a/buildtools/wafsamba/wafsamba.py +++ b/buildtools/wafsamba/wafsamba.py @@ -148,8 +148,8 @@ def SAMBA_LIBRARY(bld, libname, source, group = group, autoproto = autoproto, depends_on = depends_on, -pyembed= pyembed, hide_symbols = hide_symbols, +pyext = (target_type == PYTHON), local_include = local_include) if BUILTIN_LIBRARY(bld, libname): @@ -270,9 +270,9 @@ def SAMBA_BINARY(bld, binname, source, group = group, autoproto = autoproto, subsystem_name = subsystem_name, -pyembed= pyembed, local_include = local_include, use_hostcc = use_hostcc, +pyext = pyembed, use_global_deps= use_global_deps) bld.SET_BUILD_GROUP(group) @@ -409,7 +409,6 @@ def SAMBA_SUBSYSTEM(bld, modname, source, use_global_deps=True, vars=None, hide_symbols=False, -pyembed=False, pyext=False): '''define a Samba subsystem''' @@ -433,8 +432,6 @@ def SAMBA_SUBSYSTEM(bld, modname, source, bld.SET_BUILD_GROUP(group) features = 'cc' -if pyembed: -features += ' pyembed' if pyext: features += ' pyext' diff --git a/source4/auth/credentials/credentials.c b/source4/auth/credentials/credentials.c index e1965b3..30ab46d 100644 --- a/source4/auth/credentials/credentials.c +++
[SCM] Samba Shared Repository - branch master updated
The branch, master has been updated
via d589430 credentials: Fix the build.
via d74e0ad credentials: Split up into several subsystems.
from c5ae099 kerberos_util: Put into separate subsystem.
http://gitweb.samba.org/?p=samba.git;a=shortlog;h=master
- Log -
commit d589430fa006dc4fc950be025e3a949b56e1a7bd
Author: Jelmer Vernooij jel...@samba.org
Date: Mon Oct 11 04:05:37 2010 +0200
credentials: Fix the build.
Autobuild-User: Jelmer Vernooij jel...@samba.org
Autobuild-Date: Mon Oct 11 02:47:50 UTC 2010 on sn-devel-104
commit d74e0adb3041036e8e89d4265a67a455354bc308
Author: Jelmer Vernooij jel...@samba.org
Date: Mon Oct 11 02:05:03 2010 +0200
credentials: Split up into several subsystems.
---
Summary of changes:
source4/auth/credentials/credentials.c |2 +-
source4/auth/credentials/credentials.h |1 +
source4/auth/credentials/credentials_krb5.h|3 ++
.../{credentials_files.c = credentials_secrets.c} |2 +-
source4/auth/credentials/wscript_build | 21 ---
source4/auth/gensec/wscript_build |6 ++--
source4/auth/kerberos/wscript_build|2 +-
source4/auth/ntlm/wscript_build|2 +-
source4/dsdb/samdb/ldb_modules/wscript_build |2 +-
source4/dsdb/wscript_build |2 +-
source4/lib/cmdline/wscript_build |2 +-
source4/smbd/wscript_build |2 +-
12 files changed, 32 insertions(+), 15 deletions(-)
rename source4/auth/credentials/{credentials_files.c = credentials_secrets.c}
(99%)
Changeset truncated at 500 lines:
diff --git a/source4/auth/credentials/credentials.c
b/source4/auth/credentials/credentials.c
index 30ab46d..3a2e9a6 100644
--- a/source4/auth/credentials/credentials.c
+++ b/source4/auth/credentials/credentials.c
@@ -25,7 +25,7 @@
#include librpc/gen_ndr/samr.h /* for struct samrPassword */
#include auth/credentials/credentials.h
#include auth/credentials/credentials_krb5.h
-#include auth/credentials/credentials_proto.h
+#include auth/kerberos/kerberos_util.h
#include libcli/auth/libcli_auth.h
#include lib/events/events.h
#include param/param.h
diff --git a/source4/auth/credentials/credentials.h
b/source4/auth/credentials/credentials.h
index b7023cd..a468624 100644
--- a/source4/auth/credentials/credentials.h
+++ b/source4/auth/credentials/credentials.h
@@ -299,4 +299,5 @@ NTSTATUS cli_credentials_set_secrets(struct cli_credentials
*cred,
char **error_string);
int cli_credentials_get_kvno(struct cli_credentials *cred);
+
#endif /* __CREDENTIALS_H__ */
diff --git a/source4/auth/credentials/credentials_krb5.h
b/source4/auth/credentials/credentials_krb5.h
index 3a614ff..1630b21 100644
--- a/source4/auth/credentials/credentials_krb5.h
+++ b/source4/auth/credentials/credentials_krb5.h
@@ -52,4 +52,7 @@ krb5_error_code
impersonate_principal_from_credentials(TALLOC_CTX *parent_ctx,
krb5_principal *princ,
const char
**error_string);
+void cli_credentials_invalidate_client_gss_creds(struct cli_credentials *cred,
+enum credentials_obtained
obtained);
+
#endif /* __CREDENTIALS_KRB5_H__ */
diff --git a/source4/auth/credentials/credentials_files.c
b/source4/auth/credentials/credentials_secrets.c
similarity index 99%
rename from source4/auth/credentials/credentials_files.c
rename to source4/auth/credentials/credentials_secrets.c
index 4a9ccf5..d68ed33 100644
--- a/source4/auth/credentials/credentials_files.c
+++ b/source4/auth/credentials/credentials_secrets.c
@@ -30,7 +30,7 @@
#include ../lib/util/util_ldb.h
#include auth/credentials/credentials.h
#include auth/credentials/credentials_krb5.h
-#include auth/credentials/credentials_proto.h
+#include auth/kerberos/kerberos_util.h
#include param/param.h
#include lib/events/events.h
#include dsdb/samdb/samdb.h
diff --git a/source4/auth/credentials/wscript_build
b/source4/auth/credentials/wscript_build
index a8ef95f..9e81e8f 100644
--- a/source4/auth/credentials/wscript_build
+++ b/source4/auth/credentials/wscript_build
@@ -1,17 +1,30 @@
#!/usr/bin/env python
bld.SAMBA_SUBSYSTEM('CREDENTIALS',
- source='credentials.c credentials_files.c credentials_ntlm.c
credentials_krb5.c',
+ source='credentials.c',
autoproto='credentials_proto.h',
- public_deps='LIBCLI_AUTH SECRETS LIBCRYPTO KERBEROS KERBEROS_UTIL
UTIL_LDB gssapi com_err',
public_headers='credentials.h',
- deps='SECRETS SAMDB'
+ deps='LIBCRYPTO LIBSAMBA-ERRORS LIBEVENTS LIBCLI_AUTH LIBSECURITY',
)
