samba.git/source3/include, branch talloc-2.0.8

Remove the parameters:

2012-10-04T19:04:21+00:00

security mask
force security mode
directory security mask
force directory security mode

and update the docs.

Revert "Add functions to programatically set the security mask and directory security mask parameters."

2012-10-04T16:52:38+00:00

This reverts commit 8f0ecbbbeebff0174579a78827d384067cd4cbb7.

Not now needed as part of the move to remove security mask parameters.

Add functions to programatically set the security mask and directory security mask parameters.

2012-10-02T18:41:35+00:00

Move cached cwd onto conn struct.

2012-09-12T20:06:06+00:00

This enables us to make VFS modules safe for use in root called
code when we've changed directory under conn->connectpath.

Avoid overriding default ccache for ads operations.

2012-09-12T19:18:09+00:00

Avoid overriding default ccache for ads operations.

Nowadays various samba components may need to use GSSAPI and a default cred
cache to perform their tasks.
This code was completely overriding the whole process default ccache name, thus
altering the current credentials and sometimes hijacking them (or getting
preemptively hijaked).

By using gss_krb5_import_cred we can instead use a private ccache (necessary
sometimes to use a different set of credentials fromt he default
cifs/fqdn@realm one, for example when contacting foreign DCs using trust
credentials) that does not affect the rest of the process.

For the kerberos versions which don't have gss_krb5_import_cred
we fallback to temp override of KRB5CCNAME and gss_acquire_cred.

Signed-off-by: Alexander Bokovoy 
Signed-off-by: Günther Deschner 

Autobuild-User(master): Alexander Bokovoy 
Autobuild-Date(master): Wed Sep 12 21:18:09 CEST 2012 on sn-devel-104

smbd: Add extra VFS hooks to get the posix ACL as a blob

2012-09-12T05:06:01+00:00

This will allow us to hash this, rather than the NT ACL it maps to.
This will in turn allow us to know if the NT ACL is valid even if we
have to change the mapping code.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Wed Sep 12 07:06:01 CEST 2012 on sn-devel-104

smbd: Remove pre-allocation of ACL array in sys_acl_init()

2012-09-12T03:26:16+00:00

Instead, this is just handled with realloc in sys_acl_create_entry()

This allows us to remove the size element from the SMB_ACL_T.

Andrew Bartlett

s3:smbd Bump the smbd vfs interface version to 30

2012-09-10T17:40:01+00:00

that is what Samba 4.0.0 will ship with

Autobuild-User(master): Christian Ambach 
Autobuild-Date(master): Mon Sep 10 19:40:01 CEST 2012 on sn-devel-104

s3: introduce a new share config option "durable handles" defaulting to "yes"

2012-09-08T17:46:08+00:00

This is in order to be able to turn durable handles off and on on a per share
basis.

Note: This is only used in combination with:

	kernel share modes = no
	kernel oplocks = no
	posix locking = no

Which means CIFS/SMB2 only access.

Signed-off-by: Stefan Metzmacher

s3: add an option "kernel share modes" to be able to switch off using kernel flocks

2012-09-08T09:10:54+00:00

Signed-off-by: Stefan Metzmacher