samba.git/source3, branch talloc-2.0.8

Remove the parameters:

2012-10-04T19:04:21+00:00

security mask
force security mode
directory security mask
force directory security mode

and update the docs.

Remove all uses of lp_security_mask/lp_force_security_mode/lp_dir_security_mask/lp_force_dir_security_mode

2012-10-04T16:52:38+00:00

and replace with the normal masks. Now these parameters can be removed.

Revert "Add functions to programatically set the security mask and directory security mask parameters."

2012-10-04T16:52:38+00:00

This reverts commit 8f0ecbbbeebff0174579a78827d384067cd4cbb7.

Not now needed as part of the move to remove security mask parameters.

Revert "When creating a new file/directory, we need to obey the create mask/directory mask parameters."

2012-10-04T16:52:38+00:00

This reverts commit c251a6b0442abc13bc8be4ff8de324c1d7706a78.

Remove this as we're planning to remove the security mask,
directory security mask parameters and only use create mask/directory mask.

s3fs-smbd: Make sure the registry is set up before we init printing.

2012-10-04T10:06:29+00:00

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Thu Oct  4 12:06:29 CEST 2012 on sn-devel-104

waf: Build pam_smbpass module only if enabled.

2012-10-04T08:20:35+00:00

Revert "Fix bug #9222 - smbd ignores the "server signing = no" setting for SMB2."

2012-10-03T19:50:42+00:00

This reverts commit dfd3c31a3f9eea96854b2d22574856368e86b245.

As Metze pointed out:

From MS-SMB2 section 2.2.4:

SMB2_NEGOTIATE_SIGNING_ENABLED

When set, indicates that security signatures are enabled
on the server. The server MUST set this bit, and the client MUST return
STATUS_INVALID_NETWORK_RESPONSE if the flag is missing.

I'll submit a documentation bug to fix #9222 that way.

Fix bug #9214 - Bad user supplied SMB2 credit value can cause smbd to call smb_panic.

2012-10-03T19:49:15+00:00

Terminate the connection cleanly instead.

Fix bug #9222 - smbd ignores the "server signing = no" setting for SMB2.

2012-10-02T22:59:42+00:00

Still sign if client request is signed, just don't negotiate it in
negprot or sessionsetup.

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Wed Oct  3 00:59:42 CEST 2012 on sn-devel-104

When creating a new file/directory, we need to obey the create mask/directory mask parameters.

2012-10-02T20:27:17+00:00

Currently we call FSET_NT_ACL to inherit any ACLs on create. However
FSET_NT_ACL uses the security mask/directory security mask parameters
instead of the create mask/directory mask parameters.

Swap them temporarily when creating to ensure the correct masks
are applied.

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Tue Oct  2 22:27:17 CEST 2012 on sn-devel-104