summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Add tldap paged searches, together with two helper routinesVolker Lendecke2009-06-204-0/+345
|
* Reorganize retrieving errors and server-sent controlsVolker Lendecke2009-06-203-93/+72
| | | | | | | This attaches the data to the tldap_message instead of the tevent_req. It adds tldap_ctx_lastmsg() to retrieve the last message for the users of the sync wrappers.
* Move asn1_load_nocopy() to lib/util/asn1.cVolker Lendecke2009-06-203-7/+11
|
* Move asn1_blob() to lib/util/asn1.cVolker Lendecke2009-06-203-13/+17
|
* Add tldap_supports_controlVolker Lendecke2009-06-202-0/+12
|
* Add tldap_entry_has_attrvalueVolker Lendecke2009-06-202-0/+22
|
* tldap control supportVolker Lendecke2009-06-202-9/+128
|
* Prepare control supportVolker Lendecke2009-06-204-58/+90
| | | | | | | | | We will have arrays of controls passed to tldap.c. Follow a mantra from the classic book "Thinking Forth" by Leo Brodie: Favor counts over terminators :-) This makes the parameter lists to tldap pretty long, but everyone will have wrapper routines anyway, see for example tldap_search_fmt. And the OpenLDAP manpages call the non-_ext routines deprecated, probably for a reason.
* Fix setting passwords in pdb_adsVolker Lendecke2009-06-201-6/+7
| | | | | | | | | | | | | | The samba4 password_hash module does not allow changing the password fields via the "delete oldval" -> "add newval" set of modify operations, it requires a single "replace with newval" operation. Andrew, Samba3 by default uses that delete/add pair to detect if between fetching the old value and storing the new one the old value has changed. This is lost by using the "replace" operation. Would it make sense to add this to the password_hash module? Volker
* Fix empty linesVolker Lendecke2009-06-201-3/+0
|
* talloc_tos() aborts if it can not get a stackframeVolker Lendecke2009-06-201-3/+0
|
* Fix coverity #729. Resource leak in error path.Jeremy Allison2009-06-191-1/+4
| | | | Jeremy.
* Fix coverity #740. Resource leak in error paths. We shouldJeremy Allison2009-06-191-3/+2
| | | | | always return queue here as the caller will free. Jeremy.
* Fix coverity #900. Resource leak.Jeremy Allison2009-06-191-0/+5
| | | | Jeremy.
* Fix coverity #920. Possible NULL deref.Jeremy Allison2009-06-191-0/+4
| | | | Jeremy.
* Fix coverity #676. Forward NULL.Jeremy Allison2009-06-191-0/+6
| | | | Jeremy.
* s3: fix make test with external libtalloc or libtdb.Michael Adam2009-06-191-4/+13
| | | | | | | | | | This skips the talloctort and tdbtorture tests when the corresponding binaries are not present. There might be more clever ways of detecting wether samba has been linked with internal or external libraries, but as a first approximation, this seems valid. Michael
* s3:build: build talloctort only when using the internal liballocMichael Adam2009-06-192-3/+8
| | | | | | | Fixes the build with the external libtalloc. And is the reasonable thing to do anyways. Michael
* s3:build: build the tdb tools only when using the internal libtdbMichael Adam2009-06-192-4/+18
| | | | | | This fixes the build when internal libtdb is used. Michael
* s3:build: remove LIBTDB_OBJ from TDBTORTURE_OBJ collectionMichael Adam2009-06-191-1/+1
| | | | | | | tdbtorture is linked with LIBTDB_LIBS, which is whatever configure has determined to be (-ltdb or LIBTDB_OBJ ...). Michael
* s3:build: check for availability of external libtdb and use it if availableMichael Adam2009-06-191-18/+34
| | | | | | | Link internal libtalloc statiaclly if extenal libtalloc is not found or does not have appropriate version. Michael
* s3:build: link libtalloc statically if using internal libtallocMichael Adam2009-06-191-0/+1
| | | | Michael
* Don't require "Modify property" perms to unjoin bug #6481)Jim McDonough2009-06-196-18/+50
| | | | | | | | | | | | | | | | | | "net ads leave" stopped working when "modify properties" permissions were not granted (meaning you had to be allowed to disable the account that you were about to delete). Libnetapi should not delete machine accounts, as this does not happen on win32. The WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE flag really means "disable" (both in practice and docs). However, to keep the functionality in "net ads leave", we will still try to do the delete. If this fails, we try to do the disable. Additionally, it is possible in windows to not disable or delete the account, but just tell the local machine that it is no longer in the account. libnet can now do this as well.
* Add a missing talloc_move() in tldap_search_recvVolker Lendecke2009-06-191-1/+1
|
* Fix Coverity IDs 922 and 933Volker Lendecke2009-06-192-3/+6
| | | | | | | | | | | In copy_internals(), if the !CAN_WRITE(conn) kicks in, we end up dereferencing a NULL smb_filename. This adds a simple protection around it. Tim, please check! Volker
* s3/docs: Fix typo.Karolin Seeger2009-06-191-1/+1
| | | | | | | This fixes bug #6412. Thanks to Carsten Dumke <carsten [at] cdumke.de> for reporting! Karolin
* Add tiny tldap testVolker Lendecke2009-06-192-1/+37
|
* Add tldap_fetch_rootdseVolker Lendecke2009-06-192-0/+138
|
* Make tevent_req_is_ldap_error publicVolker Lendecke2009-06-192-1/+3
|
* Add tldap_context_[gs]etattrVolker Lendecke2009-06-192-0/+81
| | | | | | | | | | This adds the ability to attach extended information to a tldap_context. This will become useful once we start to do automatic reconnects for example, a callback function might want attach a pointer to credentials so that it can rebind. The initial user of this will be a cached rootdse, so that things like the ability to do paged searches can be cached.
* s3:dmapi: prefer dmapi libs from gpfs over system libsBjörn Jacke2009-06-191-4/+4
| | | | | | | | | | | Patch from William Jojo sent to samba-technical: This is based on some pain felt when building 32-bit and 64-bit Clustered Samba on AIX with GPFS support. Part of the problem lies in AIX only providing 32-bit shared object in libxdsm.a(shr.o). So without libdmapi.a from gpfs.base, you get no DMAPI support under 64-bit.
* s4-smbtorture: fix test_GetInfoLevel crash bug in RPC-DFS.Günther Deschner2009-06-191-0/+2
| | | | Guenther
* Merge branch 'master' of ssh://git.samba.org/data/git/samba into master-develAndrew Bartlett2009-06-192-0/+287
|\
| * added some basic documentation for the idmap script optionAndrew Tridgell2009-06-191-0/+168
| |
| * added a sample script for the "idmap script" optionAndrew Tridgell2009-06-191-0/+119
| |
| * Partially revert restriction of socket_wrapper to 1500 byte writesAndrew Bartlett2009-06-191-10/+32
| | | | | | | | | | | | | | | | | | | | | | This keeps the restriction for stream sockets (where the caller will retry), without creating problems on datagram sockets (CLDAP is not defined, as far as I know, across multiple UDP packets). The commit adding this restriction was 47b106c0ae8b91c9cccfc21bf8e4e416b1abfd5d Andrew Bartlett
* | Allow developers access the the privilaged ldapi socket for the momentAndrew Bartlett2009-06-191-0/+4
| | | | | | | | This allows us some time to get the EXTERNAL bind working
* | On our way to alpha9!Andrew Bartlett2009-06-191-2/+2
| |
* | Mark as release versionAndrew Bartlett2009-06-191-1/+1
| |
* | Partially revert restriction of socket_wrapper to 1500 byte writesAndrew Bartlett2009-06-191-10/+32
| | | | | | | | | | | | | | | | | | | | | | This keeps the restriction for stream sockets (where the caller will retry), without creating problems on datagram sockets (CLDAP is not defined, as far as I know, across multiple UDP packets). The commit adding this restriction was 47b106c0ae8b91c9cccfc21bf8e4e416b1abfd5d Andrew Bartlett
* | s4:ldapsrv Place the 'privilaged' ldapi socket under an #ifdefAndrew Bartlett2009-06-191-1/+11
|/ | | | | | | | This makes it clear to our users that this particular implementation isn't final (all parties are agreed that an EXTERNAL bind is the right way to do this, but it has not been implemented yet). Andrew Bartlett
* s4:ldb Add test for integer normalisation behaviourAndrew Bartlett2009-06-191-0/+17
| | | | | | | This uses groupType as the example, but this actually applies to all integer types in AD. Andrew Bartlett
* A fix in the ACL code used by both SAMBA 3 and 4Matthias Dieter Wallnöfer2009-06-191-1/+1
| | | | | This fixes an uninitialised structure. It has been found through valgrind in the RAW-ACLs test suite (Bug #6397).
* Fixed some uninitialised variablesMatthias Dieter Wallnöfer2009-06-195-18/+20
| | | | I tried hard to not change the program logic. Should fix bug #6439.
* Correct handling of 32-bit integer attributes in SAMBA 4Matthias Dieter Wallnöfer2009-06-195-42/+88
| | | | | | | | | | - LDB handles now all 32-bit integer attributes correctly (also with overflows) according to the schema - LDAP backends handle the attributes "groupType", "userAccountControl" and "sAMAccountType" correctly. This handling doesn't yet use the schema but the conversion file "simple_ldap.map.c" which contains them hardcoded. Did also a refactoring of the conversion function there. - Bug #6136 should be gone
* s3-pam_winbind: Fix Bug 6253: Use correct value for password expiry calculation.Günther Deschner2009-06-191-1/+2
| | | | | | Based on patch from Blindauer Emmanuel <samba@mooby.net>. Guenther
* Fix bug 4699: Remove pidfile on clean shutdownVolker Lendecke2009-06-185-8/+28
|
* acl_group_override() doesn't need to call stat. Pass thisJeremy Allison2009-06-181-28/+17
| | | | | down from above (as const). Jeremy.
* Add some const to the stat struct in the dosmode calls.Jeremy Allison2009-06-188-102/+72
| | | | | | | | Fix a couple more unix_convert uses to filename_convert. Fix bug in acl_group_override() where an uninitialized struct could be used. Move unix_convert with wildcard use in SMBsearch reply to boilerplate code. Jeremy.
* Replace the boilerplate calls to :Jeremy Allison2009-06-186-270/+154
| | | | | | | | | | | | resolve_dfspath() -> unix_convert() -> get_full_smb_filename() -> check_name() with a new function filename_convert(). This restores the check_name() calls that had gone missing since the default create_file was changed. All "standard" pathname processing now goes through filename_convert(). I'll take a look at the non-standard pathname processing next. As a benefit, fixed a missing resolve_dfspath() in the trans2 mkdir call. Jeremy.