summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* | s4:auth/kerberos: add S4U2Proxy support to kerberos_kinit_password_cc()Stefan Metzmacher2011-06-223-5/+134
| | | | | | | | | | | | | | For S4U2Proxy we need to use the ticket from the S4U2Self stage and ask the kdc for the delegated ticket for the target service. metze
* | Update eDirectory schemaJim McDonough2011-06-221-49/+20
| | | | | | | | | | Autobuild-User: Jim McDonough <jmcd@samba.org> Autobuild-Date: Wed Jun 22 14:48:09 CEST 2011 on sn-devel-104
* | s4-dsdb: bypass validation when relax setAndrew Tridgell2011-06-221-1/+2
| | | | | | | | | | | | | | this allows dbcheck to fix bad attributes Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Jun 22 12:27:06 CEST 2011 on sn-devel-104
* | samba-tool: allow for running dbcheck against a remove ldap serverAndrew Tridgell2011-06-221-5/+14
| | | | | | | | this is useful for running it against a Windows server
* | samba-tool: expanded dbcheck DN checkingAndrew Tridgell2011-06-221-21/+104
| | | | | | | | | | | | | | this now checks for bad GUID elements in DN links, and offers to fix them when possible Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* | s4-dsdb: prioritise GUID in extended_dn_inAndrew Tridgell2011-06-221-8/+11
| | | | | | | | | | | | | | if we search with a base DN that has both a GUID and a SID, then use the GUID first. This matters for the S-1-5-17 SID. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* | s4-dsdb: catch duplicate matches in extended_dn_inAndrew Tridgell2011-06-221-0/+12
| | | | | | | | | | | | | | | | When searching using extended DNs, if there are multiple matches then return an object not found error. This is needed for the case of a duplicate objectSid, which happens for S-1-5-17 Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* | s3: Added missing includes to .clang_complete.Andreas Schneider2011-06-221-0/+2
| | | | | | | | | | Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Wed Jun 22 11:15:56 CEST 2011 on sn-devel-104
* | s4:auth/kerberos: protect kerberos_kinit_password_cc() against old KDCsStefan Metzmacher2011-06-221-1/+47
| | | | | | | | | | | | | | | | | | | | Old KDCs may not support S4U2Self (or S4U2Proxy) and return tickets which belongs to the client principal of the TGT. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jun 22 09:10:55 CEST 2011 on sn-devel-104
* | s4:auth/kerberos: remove one indentation level in kerberos_kinit_password_cc()Stefan Metzmacher2011-06-221-94/+99
| | | | | | | | | | | | This will make the following changes easier to review. metze
* | s4:auth/kerberos: reformat kerberos_kinit_password_cc()Stefan Metzmacher2011-06-221-32/+41
| | | | | | | | | | | | In order to make the following changes easier to review. metze
* | s4:auth/kerberos: don't mix s4u2self creds with machine account credsStefan Metzmacher2011-06-221-24/+76
| | | | | | | | | | | | | | | | | | | | | | It's important that we don't store the tgt for the machine account in the same krb5_ccache as the ticket for the impersonated principal. We may pass it to some krb5/gssapi functions and they may use them in the wrong way, which would grant machine account privileges to the client. metze
* | s4:auth/kerberos: use better variable names in kerberos_kinit_password_cc()Stefan Metzmacher2011-06-221-27/+41
| | | | | | | | | | | | This will make the following changes easier to review. metze
* | s4:auth/kerberos: don't ignore return code in kerberos_kinit_password_cc()Stefan Metzmacher2011-06-221-0/+2
| | | | | | | | metze
* | samba-tool: added missing GUID component checks to dbcheckAndrew Tridgell2011-06-221-4/+93
| | | | | | | | | | | | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Jun 22 07:59:30 CEST 2011 on sn-devel-104
* | pyldb: added methods to get/set extended components on DNsAndrew Tridgell2011-06-221-0/+51
| | | | | | | | | | | | this will be used by the dbcheck code Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* | pydsdb: added get_syntax_oid_from_lDAPDisplayName()Andrew Tridgell2011-06-222-0/+45
| | | | | | | | | | | | this gives you access to the syntax oid of an attribute Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* | ldb: added extended_str() method to pyldbAndrew Tridgell2011-06-221-0/+16
| | | | | | | | | | | | this gives access to ldb_dn_get_extended_linearized() from python Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* | ldb: expose syntax oids to pythonAndrew Tridgell2011-06-221-0/+10
| | | | | | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* | samba-tool: try to keep dbcheck.py in a logical orderingAndrew Tridgell2011-06-221-29/+38
| | | | | | | | keep individual error handlers together and separate from driver code
* | s4-dsdb: don't add zero GUID to BINARY_DNAndrew Tridgell2011-06-221-9/+11
| | | | | | | | | | | | | | When converting from DRS to ldb format for a BINARY_DN, don't add the GUID extended DN element if the GUID is all zeros. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* | s3-spoolss: Fix some valgrind warnings.Andreas Schneider2011-06-212-8/+8
| | | | | | | | | | | | | | | | | | These are in/out values and need to be initialized. Signed-off-by: Günther Deschner <gd@samba.org> Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Tue Jun 21 18:58:30 CEST 2011 on sn-devel-104
* | s3-rpc_client: Fix some valgrind warnings.Andreas Schneider2011-06-211-10/+12
| | | | | | | | | | | | These are in/out values and need to be initialized. Signed-off-by: Günther Deschner <gd@samba.org>
* | s4-smbtorture: rework the spoolss notify test a bit.Günther Deschner2011-06-211-16/+15
| | | | | | | | Guenther
* | s4-smbtorture: use ipv4 addresses for backchannel spoolss change notifyGünther Deschner2011-06-211-1/+1
| | | | | | | | | | | | connections for now. Guenther
* | s3: Remove unused codeVolker Lendecke2011-06-213-127/+0
| | | | | | | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Jun 21 15:36:01 CEST 2011 on sn-devel-104
* | s3: Convert WINBINDD_WINS_BYNAME to the async APIVolker Lendecke2011-06-215-4/+159
| |
* | s3-smbd: longer explanation of smbd_shim codeAndrew Tridgell2011-06-211-2/+7
| | | | | | | | | | | | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Tue Jun 21 09:05:37 CEST 2011 on sn-devel-104
* | s3-build: Provide a run-time shim to work around duplicate symbolsAndrew Bartlett2011-06-2113-95/+187
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The become_root() and similar 'smbd' functions that are used widely in Samba libraries had 'dummy' copies in dummysmbd.c and dummyroot.c. These have been replaced by a runtime plugin mechanim, which ensures that standlone binaries still do nothing, while in smbd the correct function is used. This avoids having these as duplicate symbols in the smbd binary, which can cause unpredictable behaviour. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* | lib/util: Restore CH_UNIX as source charset for d_printf()Andrew Bartlett2011-06-211-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I'm changed this during the change to use the d_printf() code in common, but should not have. However, there is a puzzle: What is the right source charset? Translated strings in our .mo and .msg files are in UTF8, but strings such as file names on remote servers are in UNIX (whatever that is). I can't see how this actually works properly when either CH_DISPLAY or CH_UNIX are other than UTF8! Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* | lib/util Remove display_cd from d_printf()Andrew Bartlett2011-06-211-7/+0
| | | | | | | | | | | | | | | | | | | | The setting of the display charset is now done by convert_string_talloc() selecting the right charset based on CH_DISPLAY. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* | s4/auth: Trivial spelling fixes.Brad Hards2011-06-212-6/+6
| | | | | | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* | build: move dynconfig for top level build upAndrew Bartlett2011-06-213-4/+4
| | | | | | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* | lib/ccan/tally.h: update for FreeBSD compile.Rusty Russell2011-06-217-2/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | Based on commit 0284423676209380a2e07086b9b356096a2f93e6 from CCAN: Author: Rusty Russell <rusty@rustcorp.com.au> Date: Tue Jun 21 10:43:31 2011 +0930 tally: fix FreeBSD compile, memleak in tests. Posix says ssize_t is in sys/types.h; on Linux stdlib.h is enough. Autobuild-User: Rusty Russell <rusty@rustcorp.com.au> Autobuild-Date: Tue Jun 21 05:52:12 CEST 2011 on sn-devel-104
* | s4-param Autogenerate the loadparm_globals and loadparm_service tablesAndrew Bartlett2011-06-213-153/+226
| | | | | | | | | | | | | | | | | | | | This makes it much easier and less error prone to add new parameters as we merge the s3 and s4 loadparm systems. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Jun 21 04:41:54 CEST 2011 on sn-devel-104
* | selftest: Run tests for libsmbclient and libnetapiAndrew Bartlett2011-06-214-2/+11
| | | | | | | | | | | | | | This adds the known failure for the one test (netbios browsing) that fails. Andrew Bartlett
* | s4-torture Enable libnetapi and libsmbclient tests using combined buildAndrew Bartlett2011-06-214-27/+25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Because we now always build the source3 code, we can link directly against a private libnetapi and libsmbclient to test the behaviour of these important APIs. We use a private libnetapi_net_init(), and by using this interface rather than the public one, we can ensure that the correct smb.conf is loaded (as smbtorture4 is a Samba4 semantics binary). The #include of the source3 includes.h is required to do the manual lp_load(). Andrew Bartlett
* | build: disable -Wl,--as-needed to try and fix the buildAndrew Bartlett2011-06-211-2/+7
| | | | | | | | | | | | | | | | | | | | | | The issue here is that the source3 components now built as part of the top level build do not have their depenencies fully specified, and this causes the build to fail for many of our users. When we fix that, we can restore this flag, so we again find that kind of bug, which will show up for our Gentoo users regardless. Andrew Bartlett
* | s4-cmdline: Rename popt tables to avoid symbol conflictsAndrew Bartlett2011-06-213-12/+12
| | | | | | | | | | | | | | | | These same names are use in the source3 popt code, which is called from in libsmbclient and libnet. These are then included in the smbtorture binary for testing Andrew Bartlett
* | lib/util Remove samba-util-common!Andrew Bartlett2011-06-2110-145/+112
| | | | | | | | | | | | | | All of this code is now in common, so we don't need the second '-common' library any more! Andrew Bartlett
* | lib/util: allow parmlist.c to compile under s3 includes.hAndrew Bartlett2011-06-211-0/+2
| |
* | lib/util: Use common d_printf() in the whole codebaseAndrew Bartlett2011-06-217-162/+26
| | | | | | | | | | | | | | | | | | This removes the lang_tdb based varient, the only user of the lang_tdb code is SWAT, which calls that directly. 'net' and 'pam_winbind' are internationalised using gettext. Andrew Bartlett
* | s3-param Put &Globals in the FN_ macros, rather than in each entryAndrew Bartlett2011-06-211-254/+254
| | | | | | | | | | | | | | This global replace allows an easier comparison between the source3 and source4 loadparm systems. Andrew Bartlett
* | s4-param Add my authorship to this scriptAndrew Bartlett2011-06-211-2/+3
| |
* | lib/util Make unused d_vfprintf() staticAndrew Bartlett2011-06-214-5/+2
| |
* | s3: Fix a winbind messageVolker Lendecke2011-06-201-1/+1
| | | | | | | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Mon Jun 20 23:28:43 CEST 2011 on sn-devel-104
* | s3:idmap_autorid: remove redundant codeMichael Adam2011-06-201-4/+0
| | | | | | | | | | Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Mon Jun 20 14:56:29 CEST 2011 on sn-devel-104
* | s3:idmap_autorid: in initialize, don't leak storedconfig to talloc_tos() in ↵Michael Adam2011-06-201-2/+4
| | | | | | | | the success case
* | s3:idmap_autorid: use "idmap config * : rangesize" instead of "autorid : ↵Michael Adam2011-06-201-1/+1
| | | | | | | | rangesize"
* | s3:idmap_autorid: fail initialization if the domain is not "*"Michael Adam2011-06-201-0/+7
| | | | | | | | autorid can only be used as a backend for the default idmap configuration.