| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>
|
|
|
|
| |
Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>
|
|
|
|
|
| |
This makes it much clearer which argument to a function had the wrong
type
|
|
|
|
|
|
| |
This prevents a crash when converting bad types in NDR unions
Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>
|
|
|
|
|
|
| |
This allows you to print a returned NDR structure using
s.__ndr_print__() which gives an easy view of complex
structures, such as those from netlogon
|
|
|
|
|
|
| |
-Werror-implicit-function-declaration
This should fix bug 7620.
|
| |
|
|
|
|
|
|
|
|
|
| |
resolution.
Still needs some more work to fix missing netbios name issues, but fixes
underlying issue of IP address being ignored.
Jeremy.
|
| |
|
| |
|
|
|
|
|
|
| |
drsuapi_DsReplicaAttribute and drsuapi_DsAttributeValueCtr objects
This makes tracing what data has been transferred much easier
|
| |
|
|
|
|
| |
metze
|
|
|
|
| |
metze
|
|
|
|
| |
metze
|
|
|
|
|
|
| |
We should not use 'result' uninitialized.
metze
|
|
|
|
|
|
|
|
|
|
|
| |
This patch changes the behavior of LDAPCmp in a single domain
scenario. No place-holders will be applied during comparison
so replication will be fully tested and even the silightest
difference will pop up.
There is a second smaller fix when we compre hosts in different
domains. This fix disables ${SERVERNAME} paace-holder when there
are more then one serevr (domain controller) in the given domain.
|
|
|
|
|
|
|
| |
when adding a user with the RODC_JOIN control, the samAccountName is
automatically set to the krbtgt_NNNNN form
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
|
|
|
|
|
|
| |
we need to actually return the SID!
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
|
|
|
|
|
|
|
| |
this allows you to specify the RODC join control in python ldb calls
or on the command line
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
|
|
|
|
|
|
|
|
| |
when we deny a EXOP_REPL_SECRET call we should set the exop error code
to NONE, and the main return code to WERR_DS_DRA_ACCESS_DENIED (based
on observing windows server behaviour)
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The rules for when a RODC can replicate secrets are:
- it can always replicate its own acct
- it can also replicate its krbtgt acct
- it can't replicate other krbtgt accts
- it can't replicate interdomain trust accounts
- it can't replicate users in the denied group list
- it can replicate users in the allowed group list
otherwise it can't replicate
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
|
|
|
|
|
|
| |
it should honor the component_name
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
|
|
|
|
| |
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
|
|
|
|
|
|
|
|
| |
When a RODC uses extended getncchanges operation
DRSUAPI_EXOP_REPL_SECRET it gets an override on the ability to
replicate the secret attributes.
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
|
|
|
|
|
|
|
|
| |
The getncchanges call needs to be able to access the sam as the system
user for RODC clients. To do this it needs a sam_ctx connection with
system credentials
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
|
| |
|
|
|
|
|
|
|
|
|
| |
DOS error codes were being lost with the conversion to async
libsmbclient. If we're passing around NTSTATUS internally,
let's just convert it when we get it.
DOS ACCESS_DENIED on nautilus was not prompting for other credentials,
because it was not being mapped.
|
| |
|
|
|
|
| |
Guenther
|
|
|
|
|
|
|
|
| |
This one is suiteable for cn=config setups and should be added via ldapadd.
Thanks to Sumit Bose <sbose@redhat.com> for providing it.
Guenther
|
|
|
|
|
|
| |
Volker, please check.
Guenther
|
|
|
|
|
|
| |
Michael, please check.
Guenther
|
| |
|
| |
|
| |
|
|
|
|
| |
trapped in blackbox tests
|
|
|
|
| |
Also format in a pretty way the int64 ranges
|
|
|
|
| |
reindexing
|
|
|
|
|
|
| |
Full schema reloading is needed when we modify exisiting elements that
have attributes that comes from not from the default schema (ie.
openchange schema, user schema ..)
|
|
|
|
|
| |
This is used by upgradeprovision to readd this delta just before loading
a merged schema
|
|
|
|
| |
fix
|
|
|
|
| |
increment_calculated_keyversion
|
|
|
|
|
|
| |
Volker, please check.
Guenther
|
|
|
|
|
|
|
|
|
|
| |
https://launchpad.net/bugs/276472
This patch adds the translation of Unix Error code -ENOTSUP to NT Error Code
NT_STATUS_NOT_SUPPORTED. The absense of this translation wrongly sends back to
the client a STATUS_DENIED message in samba3.
Signed-off-by: Surbhi Palande <surbhi.palande@canonical.com>
|
|
|
|
|
| |
We go through the same check in auth/auth.c line 287 after the module has done
its job. So we don't have to do that check twice.
|
|
|
|
| |
it exists
|
| |
|
|
|
|
|
| |
When it comes to read logs and dumping data received
Octet String syntax comes in handy
|
| |
|