summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Fix memleak I accidently introduced when reading from tdb.Jeremy Allison2010-11-101-0/+1
| | | | | Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Nov 10 01:56:21 UTC 2010 on sn-devel-104
* Fix bug 7781 - Samba transforms ShareName to lowercase (sharename) when ↵Jeremy Allison2010-11-1012-110/+195
| | | | | | | | | adding new share via MMC Change the find_service() interface to not depend on fstring, and create a useable talloc-based interface. Jeremy.
* Ensure we check the return from make_user_info before dereferencing the ↵Jeremy Allison2010-11-101-2/+2
| | | | | | value returned by it. Jeremy.
* Remove fstring from map_username. Create a more sane interface than the ↵Jeremy Allison2010-11-1010-101/+208
| | | | | | called-parameter-is-modified. Jeremy.
* s3/vfs_time_audit: use monotonic clock for time deltasBjörn Jacke2010-11-101-334/+445
| | | | | Autobuild-User: Björn Jacke <bjacke@samba.org> Autobuild-Date: Wed Nov 10 01:13:22 UTC 2010 on sn-devel-104
* s4: point to the wiki howto for s4Andrew Tridgell2010-11-091-214/+4
| | | | | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Tue Nov 9 23:38:28 UTC 2010 on sn-devel-104
* s4-join: raise mininum password length to 32 in new join codeAndrew Tridgell2010-11-101-1/+1
|
* s4:dsdb/operational.c: use DSDB_SECRET_ATTRIBUTES_EX()Stefan Metzmacher2010-11-091-5/+2
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Nov 9 22:43:44 UTC 2010 on sn-devel-104
* s4:dsdb/common: add DSDB_SECRET_ATTRIBUTES_EX()Stefan Metzmacher2010-11-091-11/+14
| | | | metze
* s4:dsdb/local_password: use DSDB_SECRET_ATTRIBUTESStefan Metzmacher2010-11-091-7/+3
| | | | metze
* s4:dsdb/schema/schema_filtered.c: make never_in_filtered_attrs static constStefan Metzmacher2010-11-091-1/+2
| | | | metze
* s4:dsdb/schema/schema_filtered.c: use DSDB_SECRET_ATTRIBUTESStefan Metzmacher2010-11-091-11/+1
| | | | metze
* s4:rpc_server/drsuapi: don't ask for constructed "distinguishedName" if we ↵Stefan Metzmacher2010-11-091-1/+0
| | | | | | don't use it metze
* s4:rpc_server/drsuapi: make msg_attrs static constStefan Metzmacher2010-11-091-1/+3
| | | | metze
* s4:rpc_server/drsuapi: let dcesrv_drsuapi_DsGetNCChanges() use ↵Stefan Metzmacher2010-11-091-5/+1
| | | | | | | | DSDB_SECRET_ATTRIBUTES We should replicate all secret attributes back to other DCs. metze
* s4:dsdb/common: create a DSDB_SECRET_ATTRIBUTES define with all secret ↵Stefan Metzmacher2010-11-092-12/+15
| | | | | | | | attributes We should have them just in one place, so that we don't forget some of them. metze
* s3: Quieten a bogus error messageVolker Lendecke2010-11-091-3/+1
| | | | | | | | | | | This happens if you set "auth methods = winbind" without a fallback method. The return NT_STATUS_LOGON_FAILURE; is not strictly require here, because we fall through to the equivalent statement a few lines down, but it makes the code a bit clearer IMO. Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Nov 9 20:15:59 UTC 2010 on sn-devel-104
* s3: Package autorid moduleVolker Lendecke2010-11-091-0/+1
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Nov 9 16:21:48 UTC 2010 on sn-devel-104
* raw.h is only needed in the S4 buildVolker Lendecke2010-11-091-0/+2
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Nov 9 14:49:14 UTC 2010 on sn-devel-104
* s4:provision_self_join.ldif - the object SID in AD is called "objectSid"Matthias Dieter Wallnöfer2010-11-091-1/+1
| | | | | Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue Nov 9 13:18:29 UTC 2010 on sn-devel-104
* s4:provision.py - strip trailing whitespacesMatthias Dieter Wallnöfer2010-11-091-106/+106
|
* s4:provision - switch to "clearTextPassword" for setting passwordsMatthias Dieter Wallnöfer2010-11-094-8/+8
| | | | | | | This is the default password set/change attribute for s4 specific purposes (otherwise in respect to Windows it's "unicodePwd"). We move away from "userPassword" since on Windows it's not activated by default - and s4 will follow soon.
* s4-test: make sure the selftest prefix existsAndrew Tridgell2010-11-091-0/+3
| | | | | Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Tue Nov 9 00:05:22 UTC 2010 on sn-devel-104
* s4-drs: reduce verbosity of dreplsrv_out_connection_attachAndrew Tridgell2010-11-081-2/+2
|
* heimdal: fixed a shadowed variable warning for error_messageAndrew Tridgell2010-11-081-23/+23
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-attid: Uppercase ATTID type constantsKamen Mazdrashki2010-11-083-10/+10
| | | | | | | Thanks Metze for noting this! Autobuild-User: Kamen Mazdrashki <kamenim@samba.org> Autobuild-Date: Mon Nov 8 23:06:41 UTC 2010 on sn-devel-104
* s4-test: Initial implementation for Schema replication black box testKamen Mazdrashki2010-11-081-0/+174
|
* Second part of fix for bug #7777 - When requesting lookups for BUILTIN sids, ↵Jeremy Allison2010-11-081-1/+3
| | | | | | | | | | | | winbindd allocates new uids/gids in error. Ensure we return after calling passdb for SID lookups for which we are authoritative. Jeremy. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Mon Nov 8 22:24:34 UTC 2010 on sn-devel-104
* Ensure we always have a mapped group for "Domain Users".Jeremy Allison2010-11-081-1/+6
| | | | | | Needed for DC tests to pass with bugfix for bug #7777. Jeremy.
* First part of fix for bug #7777 - When requesting lookups for BUILTIN sids, ↵Jeremy Allison2010-11-081-0/+10
| | | | | | | | | winbindd allocates new uids/gids in error. Ensure idmap_init_passdb_domain() correctly initialized the default domain first. Jeremy.
* s3/configure: fix typo and warningBjörn Jacke2010-11-081-1/+1
| | | | | Autobuild-User: Björn Jacke <bjacke@samba.org> Autobuild-Date: Mon Nov 8 20:58:20 UTC 2010 on sn-devel-104
* s4:password_hash LDB module - introduce a "userPassword" flag which ↵Matthias Dieter Wallnöfer2010-11-081-15/+37
| | | | | | | | | | | enables/disables the two "userPassword" behaviours - Enabled: "userPassword" password change behaviour (will later be linked to the "dSHeuristics") - Disabled: "userPassword" plain attribute behaviour (default) Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Nov 8 15:28:06 UTC 2010 on sn-devel-104
* s4:pyldb.c - fix "py_ldb_contains" according to the comment by JelmerMatthias Dieter Wallnöfer2010-11-081-4/+2
|
* s3-waf: add idmap_autorid to the build.Günther Deschner2010-11-082-1/+10
| | | | | | | Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Mon Nov 8 14:17:27 UTC 2010 on sn-devel-104
* s3: Fix an uninitialized variableVolker Lendecke2010-11-081-0/+1
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Mon Nov 8 13:22:06 UTC 2010 on sn-devel-104
* s3: Build idmap_autorid by defaultVolker Lendecke2010-11-081-0/+1
|
* s3:idmap: add a new ID mapping module autoridChristian Ambach2010-11-084-0/+610
| | | | | | | | | | | | This is an initial implementation of the idmap_autorid module. It works similar to the idmap_rid module but requires less configuration. It will automatically pick ranges for each domain, so you do not have to bother any more about adding an idmap configuration for all of the domains in the forest. This is very easy to use and to configure and much more deterministic and faster than idmap_tdb, the typical choice of Samba users up to now.
* s3:winbind add wcache_tdc_fetch_domainbysidChristian Ambach2010-11-082-0/+53
| | | | add a function to lookup a domain in the winbind cache by domain SID
* s3: Put some parentheses around conditionalsVolker Lendecke2010-11-081-2/+2
|
* s3: Consistently use stdbool types in new codeVolker Lendecke2010-11-081-11/+11
|
* s3:winbind add timeouts to winbind cacheChristian Ambach2010-11-081-14/+57
| | | | | | | | | | | | | | | This adds a timeout value to cache entries and the NDR records in the winbind cache. The previous approach of just comparing the sequence number has some issues, e.g. when retrying a wbinfo -n operation for a user in a not yet trusted domain was always failing even after the trusted domain was added. The new approach compares sequence number and timeout value to determine if a cache entry is still valid or not. I increased the cache version number so an old cache will be wiped automatically after upgrade.
* s4:passwords.py - test empty password attributes behaviourMatthias Dieter Wallnöfer2010-11-081-1/+154
| | | | | Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Nov 8 12:09:56 UTC 2010 on sn-devel-104
* s4:password_hash LDB module - deleting password attributes is a little more ↵Matthias Dieter Wallnöfer2010-11-081-6/+6
| | | | complicated
* s4:samdb_msg_find_old_and_new_ldb_val - reworkMatthias Dieter Wallnöfer2010-11-082-10/+38
| | | | | | - don't crash when no values where specified - return ERR_CONSTRAINT_VIOLATION on malformed messages - only check for flags when we are involved in a LDB modify operation
* s4:password_hash LDB module - clear the fact that a delete of password ↵Matthias Dieter Wallnöfer2010-11-081-1/+1
| | | | attributes isn't possible
* s4:acl LDB module - define the delete passwords special case a bit betterMatthias Dieter Wallnöfer2010-11-081-3/+4
|
* s4:passwords.py - add another two failure casesMatthias Dieter Wallnöfer2010-11-081-0/+21
|
* ldb:pyldb.c - "py_ldb_msg_element_get" - here we can safely use "unsigned ↵Matthias Dieter Wallnöfer2010-11-081-3/+3
| | | | | | | | | int" for the element reference We don't make use of "Py_List*" calls Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Nov 8 11:21:27 UTC 2010 on sn-devel-104
* ldb:pyldb.c - "py_ldb_contains" - return only "0" not found, "1" found, "-1" ↵Matthias Dieter Wallnöfer2010-11-081-3/+10
| | | | error
* ldb:pyldb.c - most of the times "time_t" is defined as "long int"Matthias Dieter Wallnöfer2010-11-081-5/+5
| | | | | | Therefore use a signed long int for conversions. http://stackoverflow.com/questions/471248/what-is-ultimately-a-time-t-typedef-to