summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* s3:net: "net rpc vampire" is an alias for "net rpc vampire passdb"Stefan Metzmacher2011-02-021-4/+1
| | | | | | The should use exactly the same code path for both. metze
* s3:libnet: add 'process_links' to dssync_opsStefan Metzmacher2011-02-022-0/+27
| | | | | | This allows the backend to handle linked attributes. metze
* s3:groupdb: allow machine accounts as members.Stefan Metzmacher2011-02-021-4/+4
| | | | metze
* s3:winbindd: catch lookup_names/sids schannel errors over ncacn_ip_tcp (bug ↵Stefan Metzmacher2011-02-021-0/+28
| | | | | | | | | | | | | | | | | | | | | | | | | | | #7944) If winbindd connects to a domain controller it doesn't establish the lsa connection over ncacn_ip_tcp direct. This happens only on demand. If someone does a 'net rpc testjoin' and then a wbinfo -n DOMAIN\\administrator, we'll get DCERPC faults with ACCESS_DENIED/SEC_PKG_ERROR, because winbindd's in memory copy of the schannel session key is invalidated. This problem can also happen on other calls, but the lookup_names/sids calls on thet lsa ncacn_ip_tcp connection are the most important ones. The long term fix is to store the schannel client state in a tdb, but for now it's enough to catch the error and invalidate the all connections to the dc and reestablish the schannel session key. The fix for bug 7568 (commit be396411a4e1f3a174f8a44b6c062d834135e70a) made this worse, as it assumes winbindd's in memory session key is always the current one. metze
* s3: Remove superfluous ;Günther Deschner2011-02-0213-18/+18
| | | | | | | Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Feb 2 15:44:21 CET 2011 on sn-devel-104
* nsswitch: remove unused code from wbinfo.cGünther Deschner2011-02-021-27/+0
| | | | Guenther
* s3: Fix a typoVolker Lendecke2011-02-021-1/+1
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Wed Feb 2 14:58:52 CET 2011 on sn-devel-104
* s3-winbind: prefer dcerpc_samr_X functions in winbindd/winbindd_msrpc.c.Günther Deschner2011-02-021-24/+59
| | | | | | | Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Feb 2 14:14:43 CET 2011 on sn-devel-104
* s3-winbind: prefer dcerpc_samr_X functions in winbindd/winbindd_pam.c.Günther Deschner2011-02-021-13/+37
| | | | Guenther
* s3-winbind: prefer dcerpc_samr_X functions in winbindd/winbindd_rpc.c.Günther Deschner2011-02-021-58/+134
| | | | Guenther
* s3-winbind: prefer dcerpc_samr_X functions in winbindd/winbindd_samr.c.Günther Deschner2011-02-021-43/+92
| | | | Guenther
* s3-winbind: prefer dcerpc_samr_X functions in invalidate_cm_connection.Günther Deschner2011-02-021-3/+6
| | | | Guenther
* s3-winbind: prefer dcerpc_samr_X functions in cm_connect_sam.Günther Deschner2011-02-021-13/+35
| | | | Guenther
* s3-winbind: use status variable name in cm_connect_sam.Günther Deschner2011-02-021-33/+33
| | | | Guenther
* s3-selftest: Enable RPC-EPMAPPER tests.Andreas Schneider2011-02-021-1/+1
| | | | | Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Wed Feb 2 13:28:41 CET 2011 on sn-devel-104
* s3-smbd: Disable the endpoint mapper by default.Andreas Schneider2011-02-023-2/+32
|
* s3-smbd: Added a function to setup rpc services.Andreas Schneider2011-02-024-90/+411
| | | | | Move the complete setup of the rpc service to its own file and use callbacks to register at the endpoint mapper.
* s3-rpc_server: Only allow registering endpoints on priviledged pipes.Andreas Schneider2011-02-021-4/+21
|
* s3-librpc: Added dcerpc_binding_vector_create function.Andreas Schneider2011-02-022-16/+107
|
* s3-librpc: Added dcerpc register endpoint functions.Andreas Schneider2011-02-023-0/+233
|
* s3-epmapper: Commented unimplemented functions.Andreas Schneider2011-02-021-4/+10
|
* s3-epmapper: Improved the epm_Map function.Andreas Schneider2011-02-021-44/+210
|
* s3-epmapper: Implemented epm_Lookup.Andreas Schneider2011-02-021-8/+327
|
* s3-epmapper: Implemented epm_LookupHandleFree.Andreas Schneider2011-02-021-5/+14
|
* s3-epmapper: Added arg to match uuid in build_ep_list().Andreas Schneider2011-02-021-1/+16
|
* s3-epmapper: Added epm_Map function from Samba4.Andreas Schneider2011-02-021-4/+77
|
* s3-epmapper: Added epm_Delete function.Andreas Schneider2011-02-021-7/+87
|
* s3-epmapper: Added epm_Insert function.Andreas Schneider2011-02-021-8/+234
|
* s3-epmapper: Added a endpoint mapper skeleton.Andreas Schneider2011-02-023-1/+131
|
* s4:torture/rpc/netlogon: add invalid level tests for netr_LogonControl2Stefan Metzmacher2011-02-021-0/+24
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Feb 2 12:43:32 CET 2011 on sn-devel-104
* s4:torture/rpc/netlogon: improve comments in test_LogonControl2()Stefan Metzmacher2011-02-021-12/+12
| | | | metze
* s4:torture/rpc/netlogon: test invalid netr_LogonControl() levelStefan Metzmacher2011-02-021-0/+7
| | | | metze
* s4:torture/rpc/netlogon: test invalid LogonSamLogon levelsStefan Metzmacher2011-02-021-0/+90
| | | | | | | This proves that the invalid parameter/info class checks need to be done before the credential chain checks. metze
* s4:torture/rpc/netlogon: test validation levels 2 and 3Stefan Metzmacher2011-02-021-1/+1
| | | | metze
* netlogon.idl: remove pointless union arms of netr_DELTA_UNIONStefan Metzmacher2011-02-021-16/+4
| | | | | | | These were just padding, which was needed as we didn't have 'ms_union' support. metze
* netlogon.idl: use 'ms_union' as specified in [MS-NRPC]Stefan Metzmacher2011-02-021-0/+1
| | | | metze
* netlogon.idl: add missing [default]; union armsStefan Metzmacher2011-02-021-0/+4
| | | | metze
* s3:rpc_server/netlogon: add _netr_LogonSamLogon_check()Stefan Metzmacher2011-02-021-14/+87
| | | | | | | We need to check for invalid parameters before we check for access denied. metze
* s4:rpc_server/netlogon: add dcesrv_netr_LogonSamLogon_check()Stefan Metzmacher2011-02-021-10/+83
| | | | | | | We need to check for invalid parameters before we check for access denied. metze
* s4:rpc_server/netlogon: set *r->out.authoritative = 1 even on ↵Stefan Metzmacher2011-02-021-2/+3
| | | | | | INVALID_PARAMETER/INFO_CLASS metze
* s4:rpc_server/netlogon: return INVALID_INFO_CLASS for invalid ↵Stefan Metzmacher2011-02-021-1/+1
| | | | | | netr_Validation levels metze
* replace: Try to fix broken sys/capabilites.h on Linux.Andreas Schneider2011-02-023-1/+6
| | | | | | | | As this is more or less a broken header we need to include linux/types.h before sys/capabilities.h to avoid redefinitions. Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Wed Feb 2 11:57:04 CET 2011 on sn-devel-104
* s4/samba-tool: Add --sync-forced flag to 'drs replicate' commandKamen Mazdrashki2011-02-021-1/+4
| | | | | | | | We are going to need this to trigger replication when inbound replication is disabled for a given DC Autobuild-User: Kamen Mazdrashki <kamenim@samba.org> Autobuild-Date: Wed Feb 2 09:03:22 CET 2011 on sn-devel-104
* s4-dsdb Add tests to ensure we don't break the rootDSE function levels againAndrew Bartlett2011-02-021-0/+33
| | | | | | | | | | This both checks that the levels make sense, and they match what they should be based on in the DB. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Feb 2 06:09:53 CET 2011 on sn-devel-104
* s4-dsdb Fix generation of rootDSE domainControllerFunctionalityAndrew Bartlett2011-02-021-1/+3
| | | | | | | | | | The issue here is that when the samdb calls were removed, this call relied on going back to the top of the module stack, so as to re-enter the rootDSE search handler. It makes more sense to check the @ROOTDSE record directly, and therefore not to invoke the search() handler during the init. Andrew Bartlett
* wintest Return debug info when dcpromo fails from the logAndrew Bartlett2011-02-021-1/+11
|
* s4-waf Don't install any Samba packages into PYTHONDIRAndrew Bartlett2011-02-023-4/+4
| | | | | | | This causes the parts of Samba installed into PYTHONARCHDIR to then be missed in mixed python/C module namespaces. Andrew Bartlett
* s4-python Remove manipuation of python path from samba moduleAndrew Bartlett2011-02-021-2/+1
| | | | | | | | This manipulation should be done by top level scripts, otherwise we won't find samba in the first place (and these can be munged correctly for the install). Andrew Bartlett
* s4-python Ensure we add the Samba python path first.Andrew Bartlett2011-02-0216-16/+16
| | | | | | | This exact form of the construction is important, and we match on it in the installation scripts. Andrew Bartlett
* waf: Replace python installation rule to allow PYTHONARCHDIR and PYTHONDIRAndrew Bartlett2011-02-021-7/+23
| | | | | | | | | | | The old rule could only substitute one part of one line, but we need to add a second line to handle when PYTHONDIR and PYTHONARCHDIR do not match. This also avoids shelling out to sed with a regex, which was difficult to read. Andrew Bartlett