| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
| |
| |
| |
| | |
W2K8 join as a DC relies on being able to ask for the sid component of
extended DNs from the rootDSE DNs
|
| | |
|
| |
| |
| |
| |
| | |
Currently disabled. The search will be greatly modified,
also the object tree stuff will be simplified.
|
|\| |
|
| |
| |
| |
| |
| |
| |
| | |
The previous commit changed the wrong end - we must fix our server,
not our client.
Andrew Bartlett
|
| |
| |
| |
| |
| |
| | |
We need to look into salting algorithms further.
Andrew Bartlett
|
| |
| |
| |
| | |
Michael
|
| |
| |
| |
| |
| |
| | |
So one can perform tdbtool operations protected by transactions.
Michael
|
| |
| |
| |
| | |
Michael
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| | |
I removed it since on some scripts it was present, on others not - so I thought
it wouldn't be really needed. This was a bad decision (pointed out by abartlet).
So I reintroduce it on all scripts (to have consistent parameters).
|
| |
| |
| |
| |
| |
| |
| | |
This reverts commit d4389a230b6aea5a0b2a98e255b14a59c8248b0b.
This revert changed the behaviour which I didn't expect. Thanks abartlet to
point this out!
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Also add a note to clarify that this should not be changed without
discussion and consensus. We don't want this bouncing around.
Paramater support to allow optional selection of Win2003 mode welcomed.
Andrew Bartlett
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
It doesn't really matter if the entries
have invalid context in it. Older versions of samba
refuse to open the file if the version doesn't match.
If we can't parse individual records, we'll fail schannel binds,
but the clients are supposed to reestablish the netlogon secure channel
by doing ServerReqChallenge/ServerAuthenticate* again. This
will just overwrite the old record.
metze
|
| |
| |
| |
| | |
metze
|
| |
| |
| |
| |
| |
| | |
This makes the error handling in the callers easier.
metze
|
| |
| |
| |
| | |
metze
|
| |
| |
| |
| | |
metze
|
| |
| |
| |
| | |
metze
|
| |
| |
| |
| | |
metze
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| | |
This ensures we only have one codepath to store the secret, and
therefore that we have a single choke point for setting the
saltPrincipal, which we were previously skipping.
Andrew Bartlett
|
| | |
|
| | |
|
|\| |
|
| |
| |
| |
| | |
also pointless now we have docs
|
| |
| |
| |
| | |
The RPC-COUNTCALLS was useful when we were working out IDL by hand
|
| |\ |
|
| | | |
|
| | |
| | |
| | |
| | |
| | | |
This shouldn't be specified on creation time (Windows Server doesn't allow that).
Hope this also fixes the test (see buildfarm).
|
| | | |
|
| | |
| | |
| | |
| | |
| | | |
The "enableaccount" script works only on local LDB anymore - therefore remove
this parameter.
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
This adds a function which performs the check for the supported forest and
domain function levels. On an unsuccessful result a textual error message can
be created (parameter "errmsg" != NULL) which gives hints for the user to help
him fixing the issue.
|
| | | |
|
| | |
| | |
| | |
| | |
| | |
| | | |
The second "nTMixedDomain" attribute (under Partitions/Domain-DN) is only a
copy of the one under the directory root object. Therefore there doesn't exist
the "Windows 2000 Mixed" forest level.
|
| |/
|/|
| |
| |
| | |
TODO's:
ACE sorting and clarifying the inheritance of object specific ace's.
|
| |
| |
| |
| |
| |
| |
| | |
Since this code may still have some problems, it is not executed by default.
To enable descriptor inheritance add:
acl:inheritance = true
in your smb.conf
|
|/
|
|
|
|
|
|
|
|
|
|
| |
When we disable null tracking, we need to move any existing objects
that are under the null_context to be parented by the true NULL
context.
We also need a new talloc_enable_null_tracking_no_autofree() function,
as the talloc testsuite cannot cope with the moving of the autofree
context under the null_context as it wants to check exact counts of
objects under the null_context, and smbtorture has a large number of
objects in the autofree_context from .init functions
|
| |
|
|
|
|
| |
I found this through a compile warning. Hope that I got this right.
|
|
|
|
|
|
|
| |
I reread some docs about this attributes and it seems that this as mapping
attribute isn't host specific but in common for the whole domain. To allow
Windows DCs to join our s4 domain sooner or later we have to provide the full
attribute.
|
|
|
|
|
|
|
|
| |
- The tool displays now also mixed/interim domain levels and warns about them
(s4 isn't capable to run on them)
- But it allows now also to raise/step-up from them
- It displays now also levels higher than 2008 R2 (altough we don't support them
yet) but to be able to get a correct output
|
|
|
|
|
|
| |
attributes and classes
metze
|
|
|
|
| |
metze
|
|
|
|
|
|
|
|
|
|
| |
Windows Servers allow OID strings to be used instead of
attribute/class names.
For now we only resolve the OIDs in the search expressions,
the rest will follow.
metze
|
|
|
|
| |
metze
|
|
|
|
| |
metze
|
|
|
|
| |
metze
|