summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* idl:dnsserver: Add DNS_DP_STATE enumeration for diretory partition stateAmitay Isaacs2011-12-231-1/+8
|
* s4:rpc-dnsserver: Implement EnumDirectoryPartition operationAmitay Isaacs2011-12-232-1/+36
|
* s4:rpc-dnsserver: Cache DNS partition informationAmitay Isaacs2011-12-234-89/+151
| | | | | This information will be used for the RPC calls for partition information.
* s4:rpc-dnsserver: If a zone is reverse zone, set the fReverse flagAmitay Isaacs2011-12-232-3/+14
| | | | And use fReverse flag in the enumeration of zones.
* s4:rpc-dnsserver: For PTR records, use dns_name_equal instead of strcmp to ↵Amitay Isaacs2011-12-231-1/+1
| | | | compare
* samba-tool:dns: Add support for reverse names (PTR records)Amitay Isaacs2011-12-231-5/+33
|
* s4-provision: Set dNSProperty attribute for dns zonesAmitay Isaacs2011-12-231-2/+71
|
* s3-librpc Use gensec_sig_size() instead of a fixed NTLMSSP_SIG_SIZEAndrew Bartlett2011-12-221-2/+7
| | | | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Dec 22 20:57:27 CET 2011 on sn-devel-104
* s3-rpc_server: Rework pipe_ntlmssp_auth_bind() to be genericAndrew Bartlett2011-12-223-25/+63
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-rpc_server: Allow gensec mechanisms to return NT_STATUS_OKAndrew Bartlett2011-12-221-2/+2
| | | | | | | | If a kerberos mechanism is added, then it can return OK after just one packet. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-rpc_server: rename pipe_ntlmssp_verify_final() to ↵Andrew Bartlett2011-12-221-3/+3
| | | | | | pipe_auth_generic_verify_final() Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-rpc_server: Rename dcesrv_ntlmssp.[ch] to dcesrv_auth_generic.[ch]Andrew Bartlett2011-12-226-5/+5
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-rpc_server rename NTLMSSP functions to auth_generic..()Andrew Bartlett2011-12-224-11/+11
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-rpc_server rename ntlmssp_server_auth_start() -> auth_generic_server_start()Andrew Bartlett2011-12-224-5/+9
| | | | | | | | | By adding an OID parameter we can make this routine generic to any gensec module that may be made available. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-rpc_server remove unused headerAndrew Bartlett2011-12-221-1/+0
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-auth split the auth_generic functions into a seperate fileAndrew Bartlett2011-12-225-159/+194
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-rpc_server request both sign and seal for clarityAndrew Bartlett2011-12-221-1/+1
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-auth remove auth_ntlmssp_start(), call auth_generic_start() directlyAndrew Bartlett2011-12-225-14/+9
| | | | | | | | This makes it clear that this can support more than just NTLMSSP. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-auth rename auth_ntlmssp_prepare() -> auth_generic_prepare()Andrew Bartlett2011-12-227-13/+13
| | | | | | | | | This function handles more than NTLMSSP now, at least when we are an AD DC and so changing the name may avoid some confusion in the future. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-auth rename auth_ntlmssp_state -> auth_generic_stateAndrew Bartlett2011-12-2214-35/+35
| | | | | | | | | This structure handles more than NTLMSSP now, at least when we are an AD DC and so changing the name may avoid some confusion in the future. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-rpc_server request the DCE_STYLE feature in ntlmssp_server_auth_startAndrew Bartlett2011-12-221-0/+4
| | | | | | | | | This is not used or honoured by NTLMSSP, but I hope to make this routine more generic in the future. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-netlogon: use dsgetdcname() instead of get_dc_name()Sumit Bose2011-12-221-2/+7
| | | | | | | | Sometimes the domain parameter might not contain the NetBIOS name of the remote domain but the DNS name. Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Thu Dec 22 19:21:21 CET 2011 on sn-devel-104
* s3-netlogon: Add support to authenticate trusted domains.Sumit Bose2011-12-221-0/+13
|
* s4-torture: Test rpc schannel netr_LogonGetCapability.Stefan Metzmacher2011-12-222-0/+62
| | | | metze
* s3-rpc_server: Pass in our flags to netlogon_creds_server_init().Stefan Metzmacher2011-12-221-1/+1
| | | | metze
* s3-netlogon: Add support for LogonGetCapabilities.Stefan Metzmacher2011-12-221-1/+21
| | | | | | This is also needed to support AES. metze
* s4-librpc: Fix netlogon schannel client connect.Andreas Schneider2011-12-221-0/+2
| | | | | | | As a client we request as much flags as possible. The server checks which flags it supports and returns the same negotiation flags or less. So we need to store the negotiate flags from the server. We need them later if we have to call netr_LogonGetCapabilities.
* s3:torture/test_smb2: also try PROTOCOL_SMB2_24Stefan Metzmacher2011-12-221-6/+9
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Dec 22 17:47:17 CET 2011 on sn-devel-104
* lib/param: add support for "SMB2_24" in smb.conf optionsStefan Metzmacher2011-12-221-0/+1
| | | | metze
* s3:smb2_negprot: add support for PROTOCOL_SMB2_24Stefan Metzmacher2011-12-221-0/+15
| | | | metze
* libcli/smb: add PROTOCOL_SMB2_24 supportStefan Metzmacher2011-12-222-1/+3
| | | | metze
* libcli/smb: add SMB2_DIALECT_REVISION_224Stefan Metzmacher2011-12-221-0/+1
| | | | | | This is specified in the new [MS-SMB2] preview document. metze
* s3-auth Restore shortcut for guest security tokenAndrew Bartlett2011-12-221-11/+11
| | | | | | | | | | | | | | This was lost when the server_info and session_info structures were split. This helps avoid doing lookups for the guest account to determine the uid/gid and SID values. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Dec 22 15:51:09 CET 2011 on sn-devel-104
* runcmd: use set_close_on_exec()Andrew Tridgell2011-12-221-0/+8
| | | | | | | this prevents a fd leak to child processes Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Dec 22 14:00:06 CET 2011 on sn-devel-104
* runcmd: use a pipe for stdin to child processesAndrew Tridgell2011-12-221-7/+46
| | | | | this allows child processes to detect the exit of the parent by looking for EOF on stdin
* Change the signature of pthreadpool_finished_job() to return 0Jeremy Allison2011-12-224-16/+19
| | | | | | | | | on success, errno on fail and return the jobid in a separate variable. I need this fix for my vfs_aio_pthread.c module. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Thu Dec 22 12:12:33 CET 2011 on sn-devel-104
* param: domain_logons and domain_master are of type enum_bool_autoAmitay Isaacs2011-12-223-3/+3
| | | | | | | | These parameters should be defined as int and not bool. This fixes the test failures on big endian machines. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Thu Dec 22 10:37:42 CET 2011 on sn-devel-104
* s3-rpc_server: Add my copyright for my previous work hereAndrew Bartlett2011-12-221-0/+1
| | | | | Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Dec 22 09:02:57 CET 2011 on sn-devel-104
* s3-rpc_server: Remove old commentAndrew Bartlett2011-12-221-5/+0
|
* s3-rpc: added "rpc_server:default" config optionAndrew Tridgell2011-12-221-4/+12
| | | | | | | | this allows the config to specify a default behaviour (embedded, external or disabled) for unknown pipes. This is needed to allow the s3 smbd server to redirect unknown pipes to the s4 RPC server when using s3 smbd as a file server for a s4 DC. If rpc_server:default is not specified then this change preserves the old behaviour
* s3-loadparm: mark a few parameters as having P_BYTES typeAndrew Tridgell2011-12-221-12/+12
| | | | | | | | | this fixes a problem with "max xmit = 32K" resulting in a maximum SMB transmit size of 32 bytes, which makes for some very interesting network traces! This is what was causing smbtorture to consume gigabytes of memory in the rpc.schannel test
* param: Fix the data type for bAvailableAmitay Isaacs2011-12-221-1/+1
| | | | | | | | This causes the copy_service() to not copy bAvailable boolean on big endian machines causing tests to fail. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Thu Dec 22 05:30:49 CET 2011 on sn-devel-104
* s3: There's no reason not to at least build winbind on darwinVolker Lendecke2011-12-221-0/+2
| | | | | | | | It does not necessarily do nsswitch services, but as a NETLOGON proxy it should work fine Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Thu Dec 22 00:16:44 CET 2011 on sn-devel-104
* s3-dns: prevent from potentially doing wrong SRV DNS lookups.Günther Deschner2011-12-211-1/+1
| | | | | | | | | | With an empty sitename we asked for e.g. _ldap._tcp.._sites.dc._msdcs.AD.EXAMPLE.COM Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Dec 21 17:23:25 CET 2011 on sn-devel-104
* idl: Avoid c++ style commentsVolker Lendecke2011-12-211-1/+1
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Wed Dec 21 13:36:01 CET 2011 on sn-devel-104
* tdb: don't free old recovery area when expanding if already at EOF.Rusty Russell2011-12-211-17/+30
| | | | | | | | | | | | We allocate a new recovery area by expanding the file. But if the recovery area is already at the end of file (as shown in at least one client case), we can simply expand the record, rather than freeing it and creating a new one. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au> Autobuild-User: Rusty Russell <rusty@rustcorp.com.au> Autobuild-Date: Wed Dec 21 06:25:40 CET 2011 on sn-devel-104
* tdb: use same expansion factor logic when expanding for new recovery area.Rusty Russell2011-12-213-21/+34
| | | | | | | | | | If we're expanding because the current recovery area is too small, we expand only the amount we need. This can quickly lead to exponential growth when we have a slowly-expanding record (hence a slowly-expanding transaction size). Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
* Allow an object to be deleted from a directory if the caller has ↵Jeremy Allison2011-12-201-1/+9
| | | | | | | | | | DELETE_CHILD access even if we don't have access to read the ACL on the object. Fixes bug #8673 - NT ACL issue. Different fix needed for 3.6.x. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Tue Dec 20 22:13:51 CET 2011 on sn-devel-104
* s3: Fix some False/NULL hickupsVolker Lendecke2011-12-208-17/+17
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Dec 20 13:13:17 CET 2011 on sn-devel-104
* samba-tool: Add transaction wrapper for creating GPOAmitay Isaacs2011-12-201-51/+44
| | | | | | | | This ensures that if the GPT files are not copied via SMB, AD changes are rolled back. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Tue Dec 20 09:12:41 CET 2011 on sn-devel-104