summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* [SAMBA 4 directory] Corrects the "systemFlags" attributesMatthias Dieter Wallnöfer2009-07-017-32/+39
| | | | Set the values like Windows Server 2003 R2.
* [SAMBA 4 directory] Adds the complete "objectclass path" to our self-created ↵Matthias Dieter Wallnöfer2009-07-011-0/+4
| | | | | | DC object Found after some comparisons against Windows Server 2003 R2.
* [SAMBA 4 directory] Adds the object version and "systemFlags" attribute to ↵Matthias Dieter Wallnöfer2009-07-011-0/+2
| | | | | | | the display specifiers The object version showed up in the Windows 2003 Server R2 AD. The "systemFlags" attribute has been set to the right value.
* s3 docs: Add documentation for 'kerberos method' and 'dedicated keytab file' ↵Tim Prouty2009-06-302-0/+54
| | | | parameters
* Fix bug #6496 - MS-DFS: cannot follow multibyte char link name.SATOH Fumiyasu2009-06-302-15/+39
| | | | | | | | | consumed_ucs is the number of bytes of the UCS2 path consumed not counting any terminating null. We need to convert back to unix charset and count again to get the number of bytes consumed from the incoming path.
* s3-netlogon: remove unneeded fstrings from netlogon server.Günther Deschner2009-06-301-22/+12
| | | | Guenther
* umount.cifs: don't build it by defaultJeff Layton2009-06-302-9/+47
| | | | | | | | | | | | | | Now that the sanity checks for mount.cifs default to matching the behavior of /bin/mount, then there is virtually no need for umount.cifs. The only exception is when someone enables the loose setuid behavior in mount.cifs. If an unprivileged user mounts a share that isn't in /etc/fstab, then /bin/mount won't allow that user to unmount it. In that situation, umount.cifs will be necessary to allow unmounting the share. Signed-off-by: Jeff Layton <jlayton@samba.org> Acked-by: Steve French <smfrench@us.ibm.com>
* Fix bug #6431 - local groups from 3.0 setups no longer found.Volker Lendecke2009-06-301-8/+8
| | | | Search for groups without group suffix, group suffix is only used for new entries.
* s3-spoolss: Bug #6512. Fix support for enumerating user forms.Günther Deschner2009-06-301-5/+5
| | | | | | | Found while testing Xerox WorkCentre 133 PCL driver, now also tested with torture test. Guenther
* s4-smbtorture: Test for newly added form with enum call in RPC-SPOOLSS.Günther Deschner2009-06-301-0/+45
| | | | Guenther
* s4-smbtorture: remove trailing whitespace from RPC-SPOOLSS.Günther Deschner2009-06-301-98/+98
| | | | Guenther
* Rework the kerberos-notes.txt in order and formatDon Davis2009-06-301-0/+803
| | | | | | | | This reworks the notes file to be less stream-of-consciousness and more task for porting, with a very particular focus on a potential port of Samba4 to use MIT Kerberos. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:ldb Allow rootdse module to build without ldb_private.hAndrew Bartlett2009-06-303-2/+4
| | | | | | | It seems quite reasonable to allow modules to re-initialise the set of cached DNs on the ldb context. Andrew Bartlett
* s4: dsdb Avoid using the internal ldb_private.h headerAndrew Bartlett2009-06-305-118/+122
| | | | | | | This job is not complete (the partition module remains a unfinished task), but now we do use the private ldb headers much less. Andrew Bartlett
* s4:heimdal Allow KRB5_NT_ENTERPRISE names in all DB lookupsAndrew Bartlett2009-06-305-24/+35
| | | | | | | | | | | | | | The previous code only allowed an KRB5_NT_ENTERPRISE name (an e-mail list user principal name) in an AS-REQ. Evidence from the wild (Win2k8 reportadely) indicates that this is instead valid for all types of requests. While this is now handled in heimdal/kdc/misc.c, a flag is now defined in Heimdal's hdb so that we can take over this handling in future (once we start using a system Heimdal, and if we find out there is more to be done here). Andrew Bartlett
* s4:kdc Only get the lp_ctx once for a LDB_fetch()Andrew Bartlett2009-06-301-11/+18
|
* Rework hdb-samba4 to remove useless abstractions.Andrew Bartlett2009-06-301-84/+44
| | | | | | | | | | | The function LDB_lookup_principal() has been eliminated, and it's contents spread back to it's callers. Removing the abstraction makes the code clearer. Also ensure we never pass unescaped user input to a LDB search function. Andrew Bartlett
* s4:dsdb Explain the parsing steps for userPrincipalName cracknames callsAndrew Bartlett2009-06-301-0/+4
|
* s4-smbtorture: use torture_comment & torture_warning in RPC samr tests.Günther Deschner2009-06-291-205/+206
| | | | Guenther
* s3:build: check for external liblua, link lua statically if using internal libMichael Adam2009-06-292-14/+42
| | | | | | So liblua is treated the same way as libtalloc and libtdb. Michael
* s4-smbtorture: correctly test comment behaviour in RPC-SAMR-USERS against s3.Günther Deschner2009-06-291-7/+4
| | | | Guenther
* s3-pdb_tdb: give 'unknown_str' the proper name 'comment' and set comment in ↵Günther Deschner2009-06-291-10/+15
| | | | | | | | passdb. pdb_{get,set}_comment were already existing in the API but were never used. Guenther
* s3:pdb_ads: we need to make the fd for tldap/tsocket non-blockingStefan Metzmacher2009-06-291-0/+2
| | | | metze
* s3:fix build of old linux quota system and other unixes' quota implementationMichael Adam2009-06-291-14/+14
| | | | | | By fixing the use of struct stat_ex. Michael
* s3:lib/sysquotas: fix usage of SMB_STRUCT_STAT (struct stat_ex).Michael Adam2009-06-291-3/+3
| | | | | | | This fixes the build with quotas / configure time detection of sys_quota interface. Michael
* lib/util: fix building tevent_ntstatus without config.hMichael Adam2009-06-291-1/+0
| | | | | | (when called from places with "#define NO_CONFIG_H" set, such as configure) Michael
* tsocket/bsd: also ask for TEVENT_FD_READ when we want to write into a stream ↵Stefan Metzmacher2009-06-291-2/+9
| | | | | | | | socket Otherwise we would not notice a broken connection. metze
* tsocket/bsd: more correctly check if the cached tevent_fd is still validStefan Metzmacher2009-06-291-4/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | I some cases the pointer value of tevent_context is the same again, if we do something like: ev1 = tevent_context_init(); ... fde = tevent_add_fd(ev1, fd, TEVENT_FD_READ...); ... talloc_free(ev1); ... ev2 = tevent_context_init(); if (ev1 == ev2) { /* this can happen! */ } if (tevent_fd_get_flags(fde) == 0) { /* this is always true */ } But the "talloc_free(ev1)" will set fde->event_ctx to NULL and tevent_fd_get_flags() will always return 0. metze
* s3-selftest: add RPC-SAMR-MACHINE-AUTH to list of test to run against s3.Günther Deschner2009-06-291-2/+3
| | | | Guenther
* s4-smbtorture: add RPC-SAMR-MACHINE-AUTH test.Günther Deschner2009-06-292-1/+486
| | | | | | | | | | | | This test talks to a DC as a joined workstation member - in the same way winbindd does, in particular the calls used in this test's query pattern will all request for SEC_FLAG_MAXIMUM_ALLOWED access_mask (which pretty much all of samba's client code does as well). In fact this test verifies that winbind can correctly talk to a samba dc using samr dcerpc calls. Guenther
* s4-smbtorture: add torture_suite_add_machine_workstation_rpc_iface_tcase.Günther Deschner2009-06-295-10/+65
| | | | | | | Unlike torture_suite_add_machine_bdc_rpc_iface_tcase() which joins as a BDC (ACB_SRVTRUST) this joins as a member workstation (ACB_WSTRUST). Guenther
* mount.cifs: don't pass text ro/rw options to kernelJeff Layton2009-06-291-0/+2
| | | | | | | /bin/mount strips off the ro/rw options after setting the MS_RDONLY flag appropriately. Make mount.cifs do the same thing. Signed-off-by: Jeff Layton <jlayton@samba.org>
* Fix ndrdump to use a common setup_logging() APIAndrew Bartlett2009-06-295-2/+29
| | | | | | | | | By adding a new common setup_logging_stdout() API, we no longer need to abuse the ABI compatability between the different setup_logging() calls in Samba3 and Samba4's DEBUG() subsystems. The revert of 49a6d757b4d944cd22c91b2838beb83f04fbe1e9 works with this to fix bug 6211. Andrew Bartlett
* Revert "s4:debug: make setup_logging() a bit more compatible with samba3"Andrew Bartlett2009-06-291-1/+1
| | | | | | | | The problem is that the enum was previously a 'rachet', that is, it would only reset to a level higher than it was previouly set to. Changing the order broke file-based logging for our production sites. This reverts commit 49a6d757b4d944cd22c91b2838beb83f04fbe1e9.
* Adds the impersonation level in ntcreatex requests to SAMBA 3 misc torture testMatthias Dieter Wallnöfer2009-06-291-0/+4
| | | | Specifies the impersonation level according to the reporter commit in bug #6283
* Fix bug 6514: net gives unhelpful "lp_load failed" when it's missing smb.confDavid Markey2009-06-291-1/+1
|
* Correct some typos in the LDB partition moduleMatthias Dieter Wallnöfer2009-06-291-5/+5
|
* SAMDB: Don't check for "sAMAccountName" twiceMatthias Dieter Wallnöfer2009-06-291-1/+0
|
* Enhancement of "simple ldap map" with "systemFlags" attributeMatthias Dieter Wallnöfer2009-06-291-0/+22
| | | | | Enhance the simple ldap map to support also the "systemFlags" attribute in the correct way.
* ldb: Properly handle NULL when copying attr lists.Andrew Kroeger2009-06-291-4/+4
| | | | | When copying an attribute list, ensure the list itself is not NULL before attempting to access elements of the list.
* Correct the headers of some SAMBA 4 setup python scriptsMatthias Dieter Wallnöfer2009-06-293-3/+3
|
* Two patches which fix issues on cross compiling/buildingNathaniel McCallum2009-06-292-2/+4
|
* Fixes for SAMBA3RPC torture testMatthias Dieter Wallnöfer2009-06-291-4/+11
| | | | | | On calls where both NT_STATUS and WERROR results are returned and consulted we have to make sure to form function results considering both. This errors have been found through a run against SAMBA 4.
* Small patch for SPOOLSS pipeMatthias Dieter Wallnöfer2009-06-291-5/+5
| | | | | Prevents a crash of the SAMBA 4 daemon on the torture SPOOLSS test due to not initialised structures.
* _lsa_QueryInfoPolicy: Use symbolic info level namesVolker Lendecke2009-06-281-4/+4
|
* Turn the pdb_rid_algorithm into a capabilities call that returns flagsVolker Lendecke2009-06-2810-30/+33
|
* Make pdb_ads survive a restart of Samba4Volker Lendecke2009-06-281-106/+225
| | | | | | | The search function retries once, the modifying call that hits a dead smbd returns an error. The next try will reconnect. This was simple to implement and provides a good compromise against Samba4 idling our connection. Most of the modifying calls are quickly after a search (like OpenUser) anyway.
* If the connection is down, don't try another write.Volker Lendecke2009-06-282-0/+18
|
* Add tldap_search_vaVolker Lendecke2009-06-282-8/+24
|
* tldap_msg_received: Properly free the asn1_struct in case of an errorVolker Lendecke2009-06-281-0/+1
|