summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* skip the autoidl testAndrew Tridgell2009-08-171-0/+1
| | | | | The autoidl test is not needed now that we have IDL source available. It also generates a lot of errors in the logs.
* fixed up some provision errors from the recent changesAndrew Tridgell2009-08-171-3/+2
|
* s4:provision Add comments to the provision scriptAndrew Bartlett2009-08-171-1/+10
| | | | | | | Hopefully this will explain a bit more whey things are done the way that they are done. Andrew Bartlett
* s4:provision Avoid one more call to ltdb_reindexAndrew Bartlett2009-08-172-6/+19
| | | | | | | | | The Samba4 schema code (called via samdb.set_schema_from_ldb(schema.ldb)) manages the @ATTRIBUTES and @INDEXLIST records, so don't wipe them early. The chances are that we will not change them anyway. Andrew Bartlett
* s4:ldb Remove obsolete comment about ldb_tdb's sequence numAndrew Bartlett2009-08-171-2/+0
|
* make sure we update the current schema->prefixes when we add a new prefixAndrew Tridgell2009-08-171-0/+9
| | | | | | This triggered a failure in the updateNow schema test, as the current global schema was not being updated when a new schema element was added
* fixed the updateNow schema test to use a canonical OIDAndrew Tridgell2009-08-171-1/+2
| | | | | | | | The expression time.strftime("%s", time.gmtime())[3:] leads to a string with a leading 0. When added then read back from the prefix map this leads to a different string, so it is never found. Use the simpler str(random.randint(a,b)) expression instead
* s4:selftest Remove the 'subunit filter' from make testenv etcAndrew Bartlett2009-08-171-2/+2
| | | | | | | | | The extra filter is no use for 'testenv', as we are not running tests, but an xterm. The filter also breaks running 'GDB_PROVISION=yes make test', but at least if we can run 'GDB_PROVISION=yes make testenv' then we can debug provision. Andrew Bartlett
* s4:libcli/ldap Explain why we set a hostname for ldapi:// connectionsAndrew Bartlett2009-08-171-1/+3
| | | | | | | It is a pretty odd thing to do, and it's only because of the restrictions of DIGEST-MD5 in Cyrus SASL that we do it. Andrew Bartlett
* s4:provision Fix existing ldapi:// backend detection exceptionAndrew Bartlett2009-08-171-1/+1
| | | | | | Found by Oliver Liebel <oliver@itc.li> Andrew Bartlett
* s4:install Remove provision-backend script from 'make install'Andrew Bartlett2009-08-171-1/+1
| | | | | | Spotted by MICHAEL BROWN <mbrown@mesainc.com> Andrew Bartlett
* s4:provision Make sure that we don't use Kerberos to our LDAP backendAndrew Bartlett2009-08-171-1/+3
| | | | | | | This makes no sense, and just causes trouble - we are aiming for DIGEST-MD5 or NTLM. Andrew Bartlett
* s4:provison Print the LDAP backend admin username/passwordAndrew Bartlett2009-08-171-6/+14
|
* s4:selftest Confirm that there isn't a listener on the ldapi:// socketAndrew Bartlett2009-08-171-1/+5
| | | | | | | This should help debug problems with 'make test' of the LDAP backend, if a stray listener is still around. Andrew Bartlett
* s4: Re-add --ldapadminpass as an option to provisionAndrew Bartlett2009-08-172-5/+12
| | | | | | | | This should make setting up LDAP servers more predictable. When not specified, it is random Andrew Bartlett
* s4:python Allow 'no such object' on the delete of the DNAndrew Bartlett2009-08-171-1/+5
| | | | | | | | | | This fixes the recursive delete in erase_partitions() For reasons I cannot understand, it is possible to get 'no such object' trying to delete a DN I just search for without error. Oh well... Andrew Bartlett
* s4:provision Keep a single transaction for the erase and rebuildAndrew Bartlett2009-08-171-15/+6
| | | | | | | | | Using a single transaction to both erase the bulk of the data and the rebuild of that data means that the in-memory index list is maintained, and not written out to disk until it is all compleated. All the writes then occour at the end. Andrew Bartlett
* s4:provision A crude update of the OpenLDAP backend HOWTOAndrew Bartlett2009-08-171-59/+11
|
* s4:provision Fixes for Fedora DS schema mapping with full AD schemaEndi Sukma Dewata2009-08-171-0/+8
|
* s4:provision Rework provision-backend into provisionAndrew Bartlett2009-08-179-811/+608
| | | | | | | | | | | | | | | This removes a *lot* of duplicated code and the cause of much administrator frustration. We now handle starting and stopping the slapd (at least for the provision), and ensure that there is only one 'right' way to configure the OpenLDAP and Fedora DS backend We now run OpenLDAP in 'cn=config' mode for online configuration. To test what was the provision-backend code, a new --ldap-dryrun-mode option has been added to provision. It quits the provision just before it would start the LDAP binaries Andrew Bartlett
* s4:provision Move helper functions back to provisionAndrew Bartlett2009-08-171-21/+0
| | | | (These will be added back in a future commit)
* s4:setup Don't manually set @ATTRIBUTES any moreAndrew Bartlett2009-08-171-32/+0
| | | | | | | | We now set these as part of the schema load, and we now load the schema before the provision loads the DB, so setting them here is pointless Andrew Bartlett
* s4:python Push some helper functions from SamDB into samba.LdbAndrew Bartlett2009-08-172-64/+57
| | | | | | | | | | | | | | | This makes it possible to do a bit more of the provision with Samba helpers, but without some of the otherwise useful things (such as loading in the global schema) that SamDB does. Rewrite provision_erase to use a recursive search, rather than a looping subtree search. This is much more efficient, particularly now we have one-level indexes enabled. Delete the @INDEX and similar records *after* deleting all other visible records, this hopefully also assists performance. Andrew Bartlett
* s4:schema Allow a schema load on an unconnected databaseAndrew Bartlett2009-08-172-6/+7
| | | | | | | This helps ensure we don't load the schema too often in the provision (allowing a reference in of the schema before the modules load). Andrew Bartlett
* s4:provision Remove the ACI element from the provision templatesAndrew Bartlett2009-08-174-17/+14
| | | | | | | We need to find a better way to apply this (used in the Fedora DS LDAP backend), not by trying to tunnel this down the module stack. Andrew Bartlett
* s4:schema Provide a way to reference a loaded schema between ldbsAndrew Bartlett2009-08-173-16/+56
| | | | | | | | This allows us to load the schema against one ldb context, but apply it to another. This will be useful in the provision script, as we need the schema before we start the LDAP server backend. Adnrew Bartlett
* s3:winbind: The get[gr|pw]end functions need access to the client stateVolker Lendecke2009-08-1618-3/+36
|
* s3:winbind: Convert WINBINDD_GETGRNAM to the new APIVolker Lendecke2009-08-165-253/+199
|
* s3:winbind: Convert WINBINDD_GETGRGID to the new APIVolker Lendecke2009-08-165-52/+143
|
* s3:winbind: Add winbindd_print_groupmemVolker Lendecke2009-08-162-0/+75
| | | | | This converts a talloc_dict retrieved from wb_group_members to the string that the pipe protocol expects
* s3:winbind: Make fill_grent publically availableVolker Lendecke2009-08-162-3/+4
|
* s3:winbind: Add const to normalize_name_mapVolker Lendecke2009-08-162-4/+4
|
* s3:winbind: Add async wb_getgrsidVolker Lendecke2009-08-163-0/+160
|
* s3:winbind: Add async wb_group_membersVolker Lendecke2009-08-1612-2/+1091
|
* s3:winbind: Make wcache_lookup_groupmem available publicallyVolker Lendecke2009-08-162-24/+60
|
* s3: Add talloc_dict.[ch]Volker Lendecke2009-08-165-0/+258
|
* s3:winbind: Fix a potential segfault in libwbclientVolker Lendecke2009-08-161-1/+1
|
* s3:winbind: Convert winbindd_show_sequence to the new APIVolker Lendecke2009-08-165-112/+178
|
* s3:winbind: Add async wb_seqnumsVolker Lendecke2009-08-163-0/+139
| | | | | This is something that would have been very difficult with the old style of async requests: Send the request to all children simultaneously.
* s3:winbind: Add async wb_seqnumVolker Lendecke2009-08-1612-2/+447
|
* s3:winbind: WINBIND_USERINFO -> wbint_userinfoVolker Lendecke2009-08-1612-87/+49
|
* s3:winbind: Simplify _wbint_[GU]id2SidVolker Lendecke2009-08-161-16/+4
|
* tevent: add some more doxygen comments for tevent_req functionsStefan Metzmacher2009-08-151-0/+38
| | | | metze
* s3:Makefile: build ../libcli/smb/smb2_create_blob.o as part of smbdStefan Metzmacher2009-08-151-0/+1
| | | | metze
* libcli/smb: add smb2_create_blob_find()Stefan Metzmacher2009-08-152-0/+23
| | | | metze
* Use defined names rather than numeric constants to make codeJeremy Allison2009-08-141-2/+2
| | | | | clearer. Jeremy.
* gpfs.so: map the file_inherit and dir_inherit flags away for filesMichael Adam2009-08-141-1/+15
| | | | | | | | | | | GPFS sets inherits dir_inhert and file_inherit flags to files, too, which confuses windows, and seems to be wrong anyways. So when mapping a nfs4 acl to a windows acl, we map these flags away for files. Michael
* cifs.upcall: fix IPv6 addrs sent to upcall to have colon delimitersJeff Layton2009-08-141-4/+29
| | | | | | | Current kernels don't send IPv6 addresses with the colon delimiters, add a routine to add them when they're not present. Signed-off-by: Jeff Layton <jlayton@redhat.com>
* cifs.upcall: use ip address passed by kernel to get server's hostnameJeff Layton2009-08-141-12/+56
| | | | | | | | Instead of using the hostname given by the upcall to get the server's principal, take the IP address given in the upcall and reverse resolve it to a hostname. Signed-off-by: Jeff Layton <jlayton@redhat.com>
* cifs.upcall: clean up flag handlingJeff Layton2009-08-141-10/+10
| | | | | | | | | | Add a new stack var to hold the flags returned by the decoder routine so that we don't need to worry so much about preserving "rc". With this, we can drop privs before trying to find the location of the credcache. Signed-off-by: Jeff Layton <jlayton@redhat.com>
generated by cgit (git 2.34.1) at 2025-09-25 18:36:06 +0000