summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2011-12-10contrib: add a set of sample /etc/request-key.d filesJeff Layton8-1/+22
Add a contrib directory, a set of sample /etc/request-key.d files and a README that explains what they're for. This version sets the path to the upcall programs based on the configure options. Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-12-09autoconf: bump release to 5.2.1 for interim buildsJeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-12-09autoconf: set version to 5.2cifs-utils-5.2Jeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-12-05manpage: add an entry for prefixpath= to the mount.cifs manpageJeff Layton1-0/+5
Reported-by: Sumit Bose <sbose@redhat.com> Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-12-03cifs.upcall: try and guess the domain name on unqualified namesJeff Layton1-5/+42
Resolve the unqualified hostname and set AI_CANONNAME to make sure that field is populated. Scan forward to the first '.' in ai_canonname, and append that value onto the unqualified hostname to get a FQDN. Then prepend that value with "cifs/" and try to get a service ticket for that principal. Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-12-03cifs.upcall: move to Andrew's suggested algorithm for picking a principalJeff Layton2-13/+29
Andrew Bartlett suggests the heuristic supplied in the comments. For now, we don't try to guess the domainname when the hostname is not qualified, but add a comment with what needs to be done in order to support that. Also, with this change we no longer need util.o to be linked in. Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-12-03cifs.upcall: always lowercase the hostnameJeff Layton1-0/+12
Most KDCs are case-sensitive (the notable exception being AD), but DNS is case-insensitive. To prevent admins from having to put in all possible case combinations of a principal, lowercase the hostname prior to trying to get a principal. Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-12-03cifs.upcall: move to an on-stack princ bufferJeff Layton1-14/+11
...and check to see if provided hostname will exceed it. Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-12-03resolve_host: silence compiler warning about discarding const qualifierJeff Layton1-2/+1
...don't use "ipaddr" here since it's a const pointer. Signed-off-by: Jeff Layton <jlayton@samba.org> Reviewed-by: Steve French <sfrench@us.ibm.com>
2011-11-12cifs.upcall: silence unused parameter warningJeff Layton1-1/+1
cifs.upcall.c: In function ‘cifs_krb5_principal_get_realm’: cifs.upcall.c:80:57: warning: unused parameter ‘context’ [-Wunused-parameter] Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-10-19manpage: document new rsize= behaviorJeff Layton1-2/+2
With the addition of async readpages in 3.2 kernels, the behavior of the rsize= option has changed. Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-10-19cifs.idmap: Add uid/gid to SID mapping functions (try #3)Shirish Pargaonkar1-0/+37
Add functions to map a uid and gid to a SID. These functions are similar to SID to uid and gid mapping functions. A SID is what is returned to the cifs module. Signed-off-by: Shirish Pargaonkar <shirishpargaonkar@gmail.com>
2011-10-19manpage: cleanups to new backupuid/gid sectionsJeff Layton1-9/+5
Minor cleanups and consistency fixes... Cc: Shirish Pargaonkar <shirishpargaonkar@gmail.com> Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-10-19mount.cifs: Add mount options for backup intent and their manpages (try #8)Shirish Pargaonkar2-2/+118
Add mount options backupuid and backugid and their manpage contents. Check for either a valid uid/gid or valid user/group name. Signed-off-by: Shirish Pargaonkar <shirishpargaonkar@gmail.com>
2011-10-18cifs-utils: manpage: mention the required kernel version to make cifs.idmap workSuresh Jayaraman1-0/+3
Cc: Shirish Pargaonkar <shirishpargaonkar@gmail.com> Signed-off-by: Suresh Jayaraman <sjayaraman@suse.de>
2011-10-18cifs-utils: manpage: mention the kernel version that introduced getcifsaclSuresh Jayaraman1-0/+3
Reviewed-by: Shirish Pargaonkar <shirishpargaonkar@gmail.com> Signed-off-by: Suresh Jayaraman <sjayaraman@suse.de>
2011-10-18cifs-utils: mention the kernel version that introduced setcifsaclSuresh Jayaraman1-0/+3
Reviewed-by: Shirish Pargaonkar <shirishpargaonkar@gmail.com> Signed-off-by: Suresh Jayaraman <sjayaraman@suse.de>
2011-10-18manpage: move SEE ALSO section in setcifsacl.1 nearer to bottomJeff Layton1-6/+6
The convention is to have that close to the bottom of the manpage. In this case, we want it after the EXAMPLES section. Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-09-24acltools: install them in $bindir, not $sbindirJeff Layton6-16/+13
Move the manpages to section 1 since getcifsacl and setcifsacl are user, not sysadmin tools. Get rid of the useless sed calls on the manpages. They don't have any explicit paths in them that need replacing. Also get rid of the "4.0" in the footers of all the manpages. Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-09-23autoconf: bump version to 5.1.1 for interim buildsJeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-09-23autoconf: set version to 5.1cifs-utils-5.1Jeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-09-23setcifsacl: remove unused rc var from build_cmdline_acesJeff Layton1-7/+1
...and eliminate this build warning: setcifsacl.c: In function ‘build_cmdline_aces’: setcifsacl.c:582:9: warning: variable ‘rc’ set but not used [-Wunused-but-set-variable] Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-09-23manpage: document sec=ntlmssp(i) and clean up discussion of signingJeff Layton1-4/+26
Acked-by: Shirish Pargaonkar <shirishpargaonkar@gmail.com> Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-08-29mount.cifs: fix the conflict between rwpidforward and rw mount optionsPavel Shilovsky1-1/+1
Both these options are started with "rw" - that's why the first one isn't switched on even if it is specified. Fix this by adding a length check for "rw" option check. Signed-off-by: Pavel Shilovsky <piastry@etersoft.ru>
2011-08-25autoconf: work around broken wbclient.h fileJeff Layton1-27/+32
Some versions of wbclient.h have function declarations with bool type args, but they don't include stdbool.h themselves. Make sure that we can deal with that by telling the autoconf test to include stdbool.h explicitly. In order to do that properly we need to move some of the standard header and type tests up in the file. Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-08-25cifsacl: fix whitespace problem in setcifsacl.cJeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-08-25cifsacl: Add make directives for setcifsacl (try #2)Shirish Pargaonkar1-1/+8
Add Makefile directives for setcifsacl. Signed-off-by: Shirish Pargaonkar <shirishpargaonkar@gmail.com>
2011-08-25cifsacl: Add configure and make directives for cifsacl (try #2)Shirish Pargaonkar3-4/+53
Add configure directives for option cifsacl. The default action is to enable cifsacl option. cifsacl option is enabled or disabled in a similar way to cifs.idmap in the same function. In addition, for cifsacl, check for sys/xattr.h is done in the smae .m4 file. Add directives to build getcifsacl in Makefile. Signed-off-by: Shirish Pargaonkar <shirishpargaonkar@gmail.com>
2011-08-25cifsacl: Change contents of mount.cifs manpage (try #2)Shirish Pargaonkar1-1/+1
State getcifsacl and setcifsacl utilities to manipulate get/set xattr blob respectively. Signed-off-by: Shirish Pargaonkar <shirishpargaonkar@gmail.com>
2011-08-25cifsacl: Add man pages for setcifsacl (try #5)Shirish Pargaonkar1-0/+104
Man pages for utility setcifsacl. Signed-off-by: Shirish Pargaonkar <shirishpargaonkar@gmail.com>
2011-08-25cifsacl: Add man pages for getcifsacl (try #2)Shirish Pargaonkar1-0/+55
Man pages for utility getcifsacl. Signed-off-by: Shirish Pargaonkar <shirishpargaonkar@gmail.com>
2011-08-25cifsacl: Add file setcifsacl.c (try #2)Shirish Pargaonkar1-0/+905
Parse the blob that contains a security descriptor obtained by calling getxattr API using attribute system.cifs_acl . Start parsing and printing security descriptor including the a DACL within the security descriptor, printing each ACE of the DACL by printing SID, type, flags, and mask. Winbind apis are used to translate raw SID to a name. Signed-off-by: Shirish Pargaonkar <shirishpargaonkar@gmail.com>
2011-08-25cifsacl: Add file getcifsacl.c (try #2)Shirish Pargaonkar1-0/+389
Parse the blob that contains a security descriptor obtained by calling getxattr API using attribute system.cifs_acl . Start parsing and printing security descriptor including the a DACL within the security descriptor, printing each ACE of the DACL by printing SID, type, flags, and mask. Winbind apis are used to translate raw SID to a name. Signed-off-by: Shirish Pargaonkar <shirishpargaonkar@gmail.com>
2011-08-25cifsacl: Add file cifsacl.h (try #2)Shirish Pargaonkar1-0/+136
Add defines and structures related to security descriptor, ACL, ACE, various fields within an ACE, and SID. Also define various file permissions and acess types. Signed-off-by: Shirish Pargaonkar <shirishpargaonkar@gmail.com>
2011-08-23autoconf: fix help message for --enable-cifsidmapJeff Layton1-1/+1
It currently says "no" is the default, but it should be "yes". Reported-by: Elias Pipping <pipping@lavabit.com> Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-07-29mount.cifs: check_newline returns EX_USAGE on error, not -1Jeff Layton1-2/+1
Reported-by: Jan Lieskovsky <jlieskov@redhat.com> Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-07-19cifs-utils: add a note about inclusion of keys.dns_resolver program in keyutilsJeff Layton1-2/+5
As of version 1.5, the keyutils package is shipping a generic dns_resolver upcall. Add a note to the cifs.upcall manpage that mentions this and recommends the use of that program over cifs.upcall. Eventually, we may want to be able to conditionally compile out the dns_resolver part of the upcall, but it's already pretty small and wouldn't save us very much. Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-07-19manpage: corrections and cleanups to the cifsacl option sectionsJeff Layton1-12/+12
..also update the part that describes what kernel version this manpage is accurate against. Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-07-18manpages: add contents for mount option cifsacl (try #3)Shirish Pargaonkar1-0/+90
Manpage contents for cifs mount option cifsacl Signed-off-by: Shirish Pargaonkar <shirishpargaonkar@gmail.com>
2011-07-12mtab: handle ENOSPC/EFBIG condition properly when altering mtabJeff Layton3-2/+53
It's possible that when mount.cifs goes to append the mtab that there won't be enough space to do so, and the mntent won't be appended to the file in its entirety. Add a my_endmntent routine that will fflush and then fsync the FILE if that succeeds. If either fails then it will truncate the file back to its provided size. It will then call endmntent unconditionally. Have add_mtab call fstat on the opened mtab file in order to get the size of the file before it has been appended. Assuming that that succeeds, use my_endmntent to ensure that the file is not corrupted before closing it. It's possible that we'll have a small race window where the mtab is incorrect, but it should be quickly corrected. This was reported some time ago as CVE-2011-1678: http://openwall.com/lists/oss-security/2011/03/04/9 ...and it seems to fix the reproducer that I was able to come up with. Signed-off-by: Jeff Layton <jlayton@samba.org> Reviewed-by: Suresh Jayaraman <sjayaraman@suse.de>
2011-07-12manpage: add some missing options to mount.cifs.8Jeff Layton1-1/+25
Clarify servernetbiosname parameter name, add mention of ignorecase, and add a section on noposixpaths. Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-07-08autoconf: bump release number to 5.0.1 for interim buildsJeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-06-01autoconf: bump release to 5.0cifs-utils-5.0Jeff Layton1-1/+1
Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-06-01manpage: fix some manpage nitsJeff Layton2-6/+6
Fix alignment of columns and trailing whitespace in cifs.idmap(8). Fix request-key.conf(5) reference in cifs.idmap(8) and cifs.upcall(8). Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-06-01cifs-utils: Create man pages for cifs.idmap program (try #2)Shirish Pargaonkar3-3/+108
Create man pages for program cifs.idmap Enable cifs.idmap config option by default. Signed-off-by: Shirish Pargaonkar <shirishpargaonkar@gmail.com>
2011-06-01README: suggest use of autoreconf -iJeff Layton1-1/+1
Otherwise you get warnings about missing files with recent autotools. Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-05-30manpage: change mention of kernel 2.6.40 to 3.0.0Jeff Layton1-1/+1
...to match the change in versioning. Signed-off-by: Jeff Layton <jlayton@samba.org>
2011-05-30manpage: add entry for rwpidforward optionPavel Shilovsky1-0/+5
Signed-off-by: Pavel Shilovsky <piastry@etersoft.ru>
2011-05-30manpage: add decription about matching superblock to wsize= optionPavel Shilovsky1-1/+1
...according to shared superblock capability merged into cifs-2.6 git tree recently. Signed-off-by: Pavel Shilovsky <piastry@etersoft.ru>
2011-05-26manpage: update the description of the wsize= optionJeff Layton1-2/+2
...to account for the changes in the async write patchset. Signed-off-by: Jeff Layton <jlayton@samba.org>
generated by cgit v1.2.3 (git 2.25.1) at 2025-04-22 11:32:34 +0000