summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
| | * s3-netapi: Fix Coverity #670: FORWARD_NULL.Günther Deschner2009-09-161-1/+1
| | | | | | | | | | | | Guenther
| | * s3-eventlogadm: Fix Coverity #938: UNINIT.Günther Deschner2009-09-161-1/+1
| | | | | | | | | | | | Guenther
| | * s3-rpcclient: Fix Coverity #935: UNINIT.Günther Deschner2009-09-161-1/+1
| | | | | | | | | | | | Guenther
| | * s3-ntlmssp: add missing prototype.Günther Deschner2009-09-162-2/+3
| | | | | | | | | | | | Guenther
| | * s3-dcerpc: remove more obsolete or duplicate headers.Günther Deschner2009-09-166-111/+69
| | | | | | | | | | | | Guenther
| | * s3-schannel: add dump_NL_AUTH_SIGNATURE.Günther Deschner2009-09-164-44/+44
| | | | | | | | | | | | Guenther
* | | Merge branch 'master' of /home/tridge/samba/git/combinedAndrew Tridgell2009-09-161-0/+8
|\| |
| * | s4-dsdb: treat uSNHighest as 0 if @REPLCHANGED doesn't existAndrew Tridgell2009-09-161-0/+8
| |/ | | | | | | When a partition is first created it still needs a uSNHighest value
* | Merge branch 'master' of /home/tridge/samba/git/combinedAndrew Tridgell2009-09-155-35/+123
|\|
| * s4-repl: take advantage of async RPC forwardingAndrew Tridgell2009-09-152-26/+7
| | | | | | | | This uses async RPC forwarding for the DsReplicaSync call
| * s4-rpc: added a module for forwarding RPC requestsAndrew Tridgell2009-09-153-9/+116
| | | | | | | | | | | | | | | | dcesrv_irpc_forward_rpc_call() can be used to forward an arbitrary RPC request to another task in Samba4, with the return being handled asynchronously. This is useful for forwarding DRS requests to the repl or kcc tasks
* | Merge branch 'master' of /home/tridge/samba/git/combinedAndrew Tridgell2009-09-156-22/+64
|\|
| * s4-drs: lock down key DRS callsAndrew Tridgell2009-09-154-22/+54
| | | | | | | | | | The key DRS calls should only be allowed by administrators or domain controllers
| * s4-security: added a new security level SECURITY_DOMAIN_CONTROLLERAndrew Tridgell2009-09-152-0/+10
| | | | | | | | | | This will be used as a simple way to lock down DRS replication to administrators and domain controllers
* | Merge branch 'master' of /home/tridge/samba/git/combinedAndrew Tridgell2009-09-1522-439/+1748
|\|
| * s4-ldb: ldap attribute names can contain a '.'Andrew Tridgell2009-09-151-1/+2
| | | | | | | | When they are of the form of OIDs
| * s4-ldb: expose ldb_transaction_prepare_commit() in ldbAndrew Tridgell2009-09-153-21/+64
| | | | | | | | | | It is useful to be able to control the 2 phase commit from application code (s4 replication uses it)
| * s4-repl: don't do double replicationAndrew Tridgell2009-09-154-6/+44
| | | | | | | | | | | | | | | | When we replicate from a remote DC, we need to note the new uSN that the local changes have resulted in, and modify the uSN that the notify task uses to determine if it should send a ReplicaSync message back to the remote DC. Otherwise we end up always triggering a ReplicaSync every time we replicate from another DC
| * tdb: allow reads after prepare commitAndrew Tridgell2009-09-151-8/+0
| | | | | | | | | | | | We previously only allowed a commit to happen after a prepare commit. It is in fact safe to allow reads between a prepare and a commit, and the s4 replication code can make use of that, so allow it.
| * s4-drs: filter based on local_usnAndrew Tridgell2009-09-151-1/+1
| | | | | | | | | | The getncchanges uSN is in our local space, so we must compare it to the local_usn in replPropertyMetaData
| * s4-repl: make sure we marshal the replPropertyMetaData after the last changeAndrew Tridgell2009-09-151-10/+10
| | | | | | | | | | we were setting local_usn after the marshall, so it wasn't going into the object
| * s4-dsdb: use DLIST_ADD() not DLIST_ADD_END()Andrew Tridgell2009-09-152-4/+4
| | | | | | | | | | | | Using DLIST_ADD_END() to construct a long list is very inefficient (it is O(n^2). These lists are not ordered, so using DLIST_ADD() is much better.
| * s4-ldb: cope better with corruption of tdb recordsAndrew Tridgell2009-09-154-5/+30
| | | | | | | | | | | | | | | | | | When doing an indexed search if we hit a corrupt record we abandoned the indexed search and did a full search. The problem was that we might have sent some records to the caller already, which means the caller ended up with duplicate records. Fix this by returning a search error if indexing returns an error and we have given any records to the caller.
| * talloc: when we enable NULL tracking, reparent the autofree contextAndrew Tridgell2009-09-151-0/+3
| | | | | | | | | | | | | | If NULL tracking is enabled after the autofree context is initialised then autofree ends up separate from the null_context. This means that talloc_report_full() doesn't report the autofree context. Fix this by reparenting the autofree context when we create the null_context.
| * s4-repl: add a debug to make it easier to monitor replicationAndrew Tridgell2009-09-151-0/+5
| |
| * s3: Fix reading beyond the end of a named stream in xattr_streamsVolker Lendecke2009-09-161-2/+1
| | | | | | | | | | This was found thanks to a test by Sivani from Microsoft against Samba at the SDC plugfest
| * s3: Add some debugs to streams_xattrVolker Lendecke2009-09-161-0/+6
| |
| * schannel: remove last traces of gensec.Günther Deschner2009-09-161-2/+0
| | | | | | | | Guenther
| * lib/crypto: link in AES crypto for s4 as well.Günther Deschner2009-09-161-1/+2
| | | | | | | | Guenther
| * s3-schannel: remove unused schannel_decode/schannel_encode.Günther Deschner2009-09-162-293/+0
| | | | | | | | Guenther
| * schannel: fully share schannel sign/seal between s3 and 4.Günther Deschner2009-09-169-83/+144
| | | | | | | | Guenther
| * schannel: move schannel_sign to main directory.Günther Deschner2009-09-166-9/+52
| | | | | | | | Guenther
| * s4-schannel: try to fix the build.Günther Deschner2009-09-161-1/+1
| | | | | | | | Guenther
| * s4-schannel: first step of decoupling schannel from gensec.Günther Deschner2009-09-162-20/+51
| | | | | | | | Guenther
| * s4-schannel: strip trailing whitespace.Günther Deschner2009-09-161-36/+36
| | | | | | | | Guenther
| * s3-schannel: fix blob length when pulling off a NL_AUTH_SIGNATURE inGünther Deschner2009-09-161-1/+1
| | | | | | | | | | | | cli_pipe_verify_schannel(). Guenther
| * lib/crypto: add aes encryption routines to main cryto lib.Günther Deschner2009-09-165-1/+1464
| | | | | | | | Guenther
* | Merge branch 'master' of /home/tridge/samba/git/combinedAndrew Tridgell2009-09-153-14/+16
|\ \
| * | s4-ldb: ldap attribute names can contain a '.'Andrew Tridgell2009-09-151-1/+2
| | | | | | | | | | | | When they are of the form of OIDs
| * | s4-ldb: expose ldb_transaction_prepare_commit() in ldbAndrew Tridgell2009-09-153-21/+64
| | | | | | | | | | | | | | | It is useful to be able to control the 2 phase commit from application code (s4 replication uses it)
| * | s4-repl: don't do double replicationAndrew Tridgell2009-09-154-6/+44
| | | | | | | | | | | | | | | | | | | | | | | | When we replicate from a remote DC, we need to note the new uSN that the local changes have resulted in, and modify the uSN that the notify task uses to determine if it should send a ReplicaSync message back to the remote DC. Otherwise we end up always triggering a ReplicaSync every time we replicate from another DC
| * | tdb: allow reads after prepare commitAndrew Tridgell2009-09-151-8/+0
| | | | | | | | | | | | | | | | | | We previously only allowed a commit to happen after a prepare commit. It is in fact safe to allow reads between a prepare and a commit, and the s4 replication code can make use of that, so allow it.
| * | s4-drs: filter based on local_usnAndrew Tridgell2009-09-151-1/+1
| | | | | | | | | | | | | | | The getncchanges uSN is in our local space, so we must compare it to the local_usn in replPropertyMetaData
| * | s4-repl: make sure we marshal the replPropertyMetaData after the last changeAndrew Tridgell2009-09-151-10/+10
| | | | | | | | | | | | | | | we were setting local_usn after the marshall, so it wasn't going into the object
| * | s4-dsdb: use DLIST_ADD() not DLIST_ADD_END()Andrew Tridgell2009-09-152-4/+4
| | | | | | | | | | | | | | | | | | Using DLIST_ADD_END() to construct a long list is very inefficient (it is O(n^2). These lists are not ordered, so using DLIST_ADD() is much better.
| * | s4-ldb: cope better with corruption of tdb recordsAndrew Tridgell2009-09-154-5/+30
| | | | | | | | | | | | | | | | | | | | | | | | | | | When doing an indexed search if we hit a corrupt record we abandoned the indexed search and did a full search. The problem was that we might have sent some records to the caller already, which means the caller ended up with duplicate records. Fix this by returning a search error if indexing returns an error and we have given any records to the caller.
| * | talloc: when we enable NULL tracking, reparent the autofree contextAndrew Tridgell2009-09-151-0/+3
| | | | | | | | | | | | | | | | | | | | | If NULL tracking is enabled after the autofree context is initialised then autofree ends up separate from the null_context. This means that talloc_report_full() doesn't report the autofree context. Fix this by reparenting the autofree context when we create the null_context.
| * | s4-repl: add a debug to make it easier to monitor replicationAndrew Tridgell2009-09-151-0/+5
| |/
| * libreplace: white space cleanupsBjörn Jacke2009-09-152-12/+12
| |
* | Merge branch 'master' of /home/tridge/samba/git/combinedAndrew Tridgell2009-09-151-2/+4
|\ \