summaryrefslogtreecommitdiffstats
path: root/source4/rpc_server
Commit message (Collapse)AuthorAgeFilesLines
* s3:build: move sessionid_tdb.o and conn_tdb.o to SMBD_OBJ_BASEGregor Beck2012-10-191-1/+1
| | | | | | | | and use SMBD_OBJ_BASE for a couple of targets where sessionid_tdb and conn_tdb were used. Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Michael Adam <obnox@samba.org>
* s4-rpc: dnsserver: Ignore DNS zones that are not used by RPC dnsserverAmitay Isaacs2012-10-091-0/+4
| | | | | | | | | ..TrustAnchors zone is not interpreted by RPC dnsserver code. Signed-off-by: Amitay Isaacs <amitay@gmail.com> Autobuild-User(master): Amitay Isaacs <amitay@samba.org> Autobuild-Date(master): Tue Oct 9 03:21:07 CEST 2012 on sn-devel-104
* drsuapi: Validate the input parameters for the drsuapi_UpdateRefs functionMatthieu Patou2012-10-071-0/+16
|
* drsuapi: check more carefully the validity of the NCMatthieu Patou2012-10-071-4/+11
| | | | | Check that both the GUID and DN are the GUID/DN of a NC if not return WERR_DS_DRA_BAD_NC
* s4-drs: fix the logic to allow REPL_SECRET if the account has GET_ALL_CHANGESMatthieu Patou2012-10-071-0/+24
|
* s4-drs: EXOP_REPL_SECRETS can be called by RW DC as wellMatthieu Patou2012-10-071-7/+15
|
* drs-getncchanges: do not set the highestUsn to 0Matthieu Patou2012-10-071-1/+0
| | | | | | | | Paragraph 4.1.10.5 says that if err = 0 then msgOut.pNC := msgIn.pNC msgOut.usnvecFrom := msgIn.usnvecFrom so no need to set the highestUsn to 0
* kcc: return invalid parameter if the taskId is not 0Matthieu Patou2012-10-071-1/+3
|
* Implement the LIST_INFO_FOR_SERVER input formatMatthieu Patou2012-10-071-1/+2
|
* getdcinfo: Check that the server object has a serverreference objects ↵Matthieu Patou2012-10-071-2/+4
| | | | | | | | pointing to a DC object The problem was found by the DRSR testsuite where server objects were created in the Site container without serverrefrence attribute triggering error in the testsuite.
* netlogon: Per MS-NRPC, don't send unknown workstation flags back to theJelmer Vernooij2012-09-261-1/+2
| | | | client.
* s4:rpc_server/drsuapi: use talloc_zero instead of talloc() in ↵Stefan Metzmacher2012-09-251-1/+1
| | | | | | | | | dcesrv_drsuapi_DsBind() metze Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Tue Sep 25 03:06:13 CEST 2012 on sn-devel-104
* s4:rpc_server/drsuapi: fix a crash in ↵Stefan Metzmacher2012-09-251-6/+6
| | | | | | dcesrv_drsuapi_DsGetDomainControllerInfo_1() metze
* s4-repl: Use samdb_reference_dn_is_our_ntdsa()Andrew Bartlett2012-08-141-15/+13
|
* s4-dsdb: Add mem_ctx argument to samdb_ntds_settings_dnAndrew Bartlett2012-08-142-3/+3
| | | | | | | | | | | | | | As this value is calculated new each time, we need to give it a context to live on. If the value is the forced value during provision, a reference is taken. This was responsible for the memory leak in the replication process. In the example I was given, this DN appeared in memory 13596 times! Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Tue Aug 14 10:05:14 CEST 2012 on sn-devel-104
* build: rename security → samba-securityBjörn Jacke2012-08-101-2/+2
| | | | | | | | | there is a libsecurity on OSF1 which clasheѕ with our security lib. see bug #9023. Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User(master): Björn Jacke <bj@sernet.de> Autobuild-Date(master): Fri Aug 10 14:22:21 CEST 2012 on sn-devel-104
* lib/param: Remove "ntptr providor" and hard-code in s4 spoolss serverAndrew Bartlett2012-07-241-1/+1
| | | | | | | | This stub codebase does not justify a merged parameter. Andrew Bartlett Pair-Programmed-With: Andrew Tridgell <tridge@samba.org>
* s4:rpc_server/netlogon: add support for AES based netlogon schannelStefan Metzmacher2012-07-171-0/+4
| | | | | | metze Signed-off-by: Günther Deschner <gd@samba.org>
* s4:rpc_server/netlogon: only return STRONG_KEYS if the client asked for itStefan Metzmacher2012-07-171-26/+31
| | | | | | metze Signed-off-by: Günther Deschner <gd@samba.org>
* s4:rpc_server/netlogon: implement netr_LogonGetCapabilitiesStefan Metzmacher2012-07-171-2/+20
| | | | | | | | This is also needed to support AES. metze Signed-off-by: Günther Deschner <gd@samba.org>
* s4-lsarpc: DCERPC_FAULT_ACCESS_DENIED for tcpAndreas Schneider2012-07-061-0/+10
| | | | | Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Fri Jul 6 11:50:40 CEST 2012 on sn-devel-104
* s4-lsarpc: DCERPC_FAULT_ACCESS_DENIED for npAndreas Schneider2012-07-063-0/+45
|
* s4-lsarpc: Restrict LookupSids3 to crypto connections only.Andreas Schneider2012-07-061-0/+10
|
* s4-lsarpc: Restrict LookupNames4 to crypto connections only.Andreas Schneider2012-07-061-0/+10
|
* s4-lsarpc: Don't call lsa_OpenPolicy2 in lsa_LookupSids3.Andreas Schneider2012-07-061-46/+48
|
* s4-lsaprc: Don't call lsa_OpenPolicy2 in lsa_LookupNames4.Andreas Schneider2012-07-061-49/+53
|
* lib/param: Create a seperate server role for "active directory domain ↵Andrew Bartlett2012-06-154-8/+8
| | | | | | | | | | | | | | | controller" This will allow us to detect from the smb.conf if this is a Samba4 AD DC which will allow smarter handling of (for example) accidentially starting smbd rather than samba. To cope with upgrades from existing Samba4 installs, 'domain controller' is a synonym of 'active directory domain controller' and new parameters 'classic primary domain controller' and 'classic backup domain controller' are added. Andrew Bartlett
* Revert "waf-mitkrb5: enable dcerpc_server library to support OpenChange ↵Alexander Bokovoy2012-06-011-37/+20
| | | | | | | | | | | | | | | client code" This reverts commit f8c447b1a48eaf12dcf70b92fd7525c4ad26c246. After discussing with Julien (Openchange) and Metze, I decided to revert this code. Instead I made a patch to Openchange which allows to build client side only. Openchange server code requires working s4 member DC and --without-ad-dc build does not provide working provisioning even if we enable dcerpc_server and end point mapper. Autobuild-User: Alexander Bokovoy <ab@samba.org> Autobuild-Date: Fri Jun 1 16:46:08 CEST 2012 on sn-devel-104
* waf-mitkrb5: enable dcerpc_server library to support OpenChange client codeAlexander Bokovoy2012-06-011-20/+37
| | | | Signed-off-by: Andreas Schneider <asn@samba.org>
* Introduce system MIT krb5 build with --with-system-mitkrb5 option.Alexander Bokovoy2012-05-232-12/+60
| | | | | | | | | | | | | | | | | System MIT krb5 build also enabled by specifying --without-ad-dc When --with-system-mitkrb5 (or --withou-ad-dc) option is passed to top level configure in WAF build we are trying to detect and use system-wide MIT krb5 libraries. As result, Samba 4 DC functionality will be disabled due to the fact that it is currently impossible to implement embedded KDC server with MIT krb5. Thus, --with-system-mitkrb5/--without-ad-dc build will only produce * Samba 4 client libraries and their Python bindings * Samba 3 server (smbd, nmbd, winbindd from source3/) * Samba 3 client libraries In addition, Samba 4 DC server-specific tests will not be compiled into smbtorture. This in particular affects spoolss_win, spoolss_notify, and remote_pac rpc tests.
* auth and s4-rpc_server: Do not use features we currently can't implement ↵Simo Sorce2012-05-231-0/+6
| | | | with MIT Kerbros build
* Fix direct access to krb5_principal structureSimo Sorce2012-05-041-2/+4
|
* Move kdc_get_policy helper in the lsa server where it belongs.Simo Sorce2012-04-202-2/+26
| | | | | | | | | | | | | | | | This was used in only 2 places, db-glue.c and the lsa server. In db-glue.c it is awkward though, as it forces to use an unconvenient lsa structure and conversions from time_t to nt_time only to have nt_times converted back to time_t for actual use. This is silly. Also the kdc-policy file was a single funciton library, that's just ridiculous. The loadparm helper is all we need to keep the values consistent, and if we ever end up doing something with group policies we will care about it when it's the time. the code would have to change quite a lot anyway. Autobuild-User: Simo Sorce <idra@samba.org> Autobuild-Date: Fri Apr 20 01:53:37 CEST 2012 on sn-devel-104
* s4-rpc: dnsserver: Fix IPv6 reverse zone handlingAmitay Isaacs2012-03-211-0/+7
| | | | Thanks to Marcel Ritter <marcel.ritter@rrze.fau.de> for the patch.
* libndr: Rename policy_handle_empty to ndr_policy_handle_empty.Jelmer Vernooij2012-03-201-1/+1
| | | This makes the NDR namespace a bit clearer, in preparation of ABI checking.
* libndr: Rename ndr64_transfer_syntax and null_ndr_syntax_id so they have a ↵Jelmer Vernooij2012-03-202-8/+8
| | | | | ndr_ prefix. This makes the NDR namespace a bit clearer, in preparation of ABI checking.
* s4-rpc: dnsserver: Fix the typo in comparing two DNS recordsAmitay Isaacs2012-03-021-2/+2
| | | | | Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Fri Mar 2 10:27:41 CET 2012 on sn-devel-104
* s4-rpc: dnsserver: Update data type for TXT DNS recordsAmitay Isaacs2012-03-021-6/+25
|
* s4-netlogond: Fix use of uninitialised value dns_nameAndrew Bartlett2012-02-271-19/+8
| | | | | | | | The GET_CHECK_STR macro (now unrolled) did not initialise the trusts->array[n].dns_name when the value was not set. New tests for our trusted domains code create domain trusts without a DNS domain name. Found by the autobuild flakey build detector. Andrew Bartlett
* dcerpc_server: Add 'modulesdir' variable to pkg-config file.Jelmer Vernooij2012-02-231-0/+1
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Thu Feb 23 16:26:25 CET 2012 on sn-devel-104
* s4-rpc_server: Fix search for existing trust to actually look for the dns nameAndrew Bartlett2012-01-261-1/+1
| | | | | | | | | Found by a eagle-eyed user. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Jan 26 08:39:47 CET 2012 on sn-devel-104
* s4-rpc:dnsserver: DNS names are case insensitiveAmitay Isaacs2012-01-123-17/+17
|
* s4-rpc:dnsserver: Do not replace @ with zone_name in update operationAmitay Isaacs2012-01-061-1/+6
| | | | This fixes the problem when updating DNS record for '@' or domain name.
* s4:netlogon RPC server - dcesrv_netr_DsRGetSiteName - add a small explainationMatthias Dieter Wallnöfer2011-12-231-0/+5
| | | | | | NETLOGON pipe is only thought for DCs. Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4:drsuapi/getncchanges: the default for isRecycled is FALSEStefan Metzmacher2011-12-231-1/+1
| | | | | | | metze Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Fri Dec 23 09:30:09 CET 2011 on sn-devel-104
* s4-drsuapi: we store boolean in upppercase so we need to test them in uppercaseMatthieu Patou2011-12-231-4/+4
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4:rpc-dnsserver: Set the rank for the new DNS record correctlyAmitay Isaacs2011-12-231-0/+8
| | | | | Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Fri Dec 23 07:56:34 CET 2011 on sn-devel-104
* s4:rpc-dnsserver: Add commentsAmitay Isaacs2011-12-231-0/+7
|
* s4:rpc-dnsserver: Make sure that zone information is filled inAmitay Isaacs2011-12-231-0/+10
| | | | | This fixes the problem of NULL zone in zone operations when specific zone is specified and no zone filter is specified.
* s4:rpc-dnsserver: Implement zone management RPC operationsAmitay Isaacs2011-12-233-2/+436
| | | | | | | - ZoneCreate operation to create zone. - DeleteZoneFromDs operation to delete zone When a zone is deleted, all the records in that zone are also deleted.