summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
* s4:ldb - SQLite: port some constraints from the TDB backend also to the ↵Matthias Dieter Wallnöfer2009-10-081-0/+49
| | | | SQLITE one
* s4:subtree_delete - Make the initialisation of the child counter more clearMatthias Dieter Wallnöfer2009-10-081-0/+2
|
* s4:ldap.py - Further enhancementsMatthias Dieter Wallnöfer2009-10-081-6/+236
| | | | | | | | - Enhance test for "distinguishedName" - Add a test for single-valued attributes - Add a test for multi-valued attributes - Add a test for empty messages - Add a test for empty attributes
* s4:ldb - add a check which has to be done on beginning of a "modify" operationMatthias Dieter Wallnöfer2009-10-081-0/+8
|
* s4:ldap server - remove unused error handlingsMatthias Dieter Wallnöfer2009-10-081-35/+0
| | | | | Those error cases should be handled by LDB itself to be available on all connection methods and not only over LDAP.
* s4:ldb_tdb - Rework/VariousMatthias Dieter Wallnöfer2009-10-081-192/+200
| | | | | | - Unify the error handling method with "done" mark in all longer functions - Fix up result codes to match more the real MS AD - Some cosmetic fixups
* s4/torture: Ported SMBv1 RAW-OPEN tests to SMB2-CREATEAravind Srinivasan2009-10-071-1/+573
| | | | | | | | Four tests were ported from raw/open.c One new tests added LEADING-SLASH, which tests that a server provides the proper error when a relative path is given to a CREATE PDU with a leading "/".
* s4/torture: convert all printf to torture_commentsAravind Srinivasan2009-10-071-20/+32
|
* s4/torture: Ported SMBv1 RAW-STREAMS tests to SMB2-STREAMSAravind Srinivasan2009-10-073-1/+1770
|
* Merge branch 'master' of ssh://git.samba.org/data/git/sambaAndrew Tridgell2009-10-075-4/+9410
|\
| * s4/torture: Add server target of OneFSSteven Danneman2009-10-063-2/+51
| | | | | | | | | | | | | | | | | | | | | | | | | | I've added a "--target=onefs" which lists expected deviation in the OneFS SMB server implementation compared to a Windows machine. I've added this in a generic way using a list of module specific parameters. This list currently only contains the absence of SACL support but will be added to as additional server differences are defined. I'd liked to use this abstraction for defining the differences between a WinXP and Win7 server as well.
| * s4/torture: Add SMB sharemode/access mask testsAravind Srinivasan2009-10-063-0/+9355
| | | | | | | | | | | | | | | | | | | | | | | | | | Test several thousand permutations of create mask and sharemodes on file and directory opens. These tests use a checked-in results table derived from a WinXP server to verify correct server behavior. CREATEX_ACCESS CREATEX_SHAREMODES_FILE CREATEX_SHAREMODES_DIR MAXIMUM_ALLOWED
| * s4/torture: change comments to torture_failuresAravind Srinivasan2009-10-061-2/+4
| | | | | | | | | | This allows the frameworks that wrap smbtorture to detect errors better.
* | s4-drs: fixed a memory error introduced yesterdayAndrew Tridgell2009-10-071-1/+1
|/ | | | ids is retrurned via _ids, so it needs to be on the passed in mem_ctx
* torture: disable the ValidatePassword testAndrew Tridgell2009-10-071-1/+5
| | | | This test causes problems on non-sealed connections against windows
* s4-torture: removed an accidental commit of a local test hackAndrew Tridgell2009-10-071-1/+0
| | | | Sorry about that ....
* s4:various LDB modules - "build_request" functions - propagate result codes backMatthias Dieter Wallnöfer2009-10-067-15/+25
| | | | | | | | | It's very useful to know the exact result code when something fails and not only a generic (by the module) created one. Sure, there are some exception cases with specific results (special message constellations, attributes, values...) which shouldn't be changed at all (examples of them are in the "ldap.py" test). Therefore I looked very carefully to not change them.
* s4:rootdse module - intendation fixupMatthias Dieter Wallnöfer2009-10-061-2/+2
|
* s4:acl module - intendation fix and comment enhancementMatthias Dieter Wallnöfer2009-10-061-1/+2
|
* s4-provision: match win2003 functional levelAndrew Tridgell2009-10-063-4/+4
| | | | | We are now defaulting to win2003 functional level, and see to report the right revisions of our db and schema
* s4-drs: added some debug lines to DsAddEntry()Andrew Tridgell2009-10-061-0/+3
|
* s4-drs: take advantage of system session auth in dsbindAndrew Tridgell2009-10-062-41/+21
| | | | | Now that the bind opens samdb with the right credentials, we no longer need the re-open in updaterefs and getncchanges
* s4-drs: fixed error message for drs_security_level_checkAndrew Tridgell2009-10-061-1/+3
|
* s4-drs: open samdb with system credentials when authorisedAndrew Tridgell2009-10-061-1/+14
| | | | | | When a DC connects to DRS, open the samdb with system session credentials, so that we don't have to re-open it each time on other calls.
* s4-ldb: fixed error on single value errorAndrew Tridgell2009-10-061-1/+1
| | | | | | When you try to add a 2nd value to a single valued attribute you get LDB_ERR_ATTRIBUTE_OR_VALUE_EXISTS. w2k8-r2 join to s4 relies on this error, doing a replace after it sees the error
* s4-repl: added RELAX control and fix transactionsAndrew Tridgell2009-10-061-8/+57
| | | | | | Added the RELAX control to dsdb_origin_objects_commit(), as it needs to modify system objects. This patch also fixes the use of ldb transactions in that function, and fixes a memory leak.
* s4:drs-development Scripts to assist testing of DRS replication with ADAndrew Bartlett2009-10-066-0/+143
| | | | | | | | | | | | | | | | These scripts, originally by tridge, allow developers to easily reproduce the same domain join senerio time after time. They need documentation, and the template named.conf and zone files for hosting an AD domain are not provided. However, I hope to have the provision script provide these shortly. They assume a local 'bind' set up to read PREFIX/private/named.conf (as per the provision instructions). Ensure you edit the 'vars' file to match your local setup. Andrew Bartlett
* s4:param Remove duplicate argument to python provisionAndrew Bartlett2009-10-061-2/+0
|
* s4:provision Remove unused parameters from provision scriptsAndrew Bartlett2009-10-061-6/+4
|
* s4-seftest: skip hold.oplock for SMB2 as wellAndrew Tridgell2009-10-061-1/+1
| | | | | This test is not designed to be run automatically. It deliberately blocks forever.
* s4:ldap.py - commented out the UTF8 tests (and fixed some deletion DNs)Matthias Dieter Wallnöfer2009-10-031-10/+12
|
* s4:ldb_tdb - fix memory leaksMatthias Dieter Wallnöfer2009-10-031-7/+12
|
* heimdal kerberos - fix memory leak (free the plugin list always - not only ↵Matthias Dieter Wallnöfer2009-10-031-1/+1
| | | | in error cases)
* s4:objectclass - Free unused memory from responsesMatthias Dieter Wallnöfer2009-10-031-0/+3
|
* s4:schema_inferiors - Fix wrong checkMatthias Dieter Wallnöfer2009-10-031-1/+1
|
* s4:ldb.h - add constant for LDAP EXOP password changeMatthias Dieter Wallnöfer2009-10-031-4/+21
| | | | Also enhance some other comments.
* heimdal - fix various warningsMatthias Dieter Wallnöfer2009-10-037-24/+24
| | | | | | | | | - Shadowed variables - "const" related warnings - Parameter names which shadow function declarations - Non-void functions which have no return value (patch also ported upstream)
* s4:ldap.py - add tests for valid parent and RDNMatthias Dieter Wallnöfer2009-10-031-0/+39
|
* s4:dsdb Use possibleInferiors to restrict creation of child objectsAndrew Bartlett2009-10-031-4/+15
| | | | | | | This also uses systemPossibleInferiors when the 'relax' control is specified, which is done by the provision. Andrew Bartlett
* s4:dsdb add systemPossibleInferiors to schema codeAndrew Bartlett2009-10-032-0/+21
| | | | | | | This allows us to figure out what the system can add, which will not be in possibleInferiors due to the systemOnly flag. Andrew Bartlett
* s4:dsdb Add objectClass and RDN constraints to objectClass moduleAndrew Bartlett2009-10-031-8/+35
| | | | | | | | | | These additional constraints are applied, found by the Microsoft testsuite. - When the parent is not present, we now return 'NO_SUCH_OBJECT'. - Restrict the choice of RDN to the correct one per the schema - Honour the allowedChildClasses attribute from the parent's objectClass. Andrew Bartlett
* s4:ldap.py - add a test for the "systemOnly" classesMatthias Dieter Wallnöfer2009-10-031-1/+16
|
* s4:dsdb Don't allow creation of systemOnly objectclassesMatthias Dieter Wallnöfer2009-10-032-4/+10
| | | | | | (except as part of the provision, which specifies the 'relax' control) Andrew Bartlett
* s4:rdn_name - fix up the rename operationMatthias Dieter Wallnöfer2009-10-031-4/+4
| | | | A function call was wrong ("ldb_request" rathen than "ldb_next_request").
* Revert "s4:LDB/LDAP - Re-allow renames"Matthias Dieter Wallnöfer2009-10-031-49/+4
| | | | | | | This reverts commit 767fce6fccf484b547219abd5e6abc941eacaf92. Simo pointed out that the patch generates race conditions. We need to solve this using a new control.
* s4:repl_meta_data - variousMatthias Dieter Wallnöfer2009-10-021-9/+38
| | | | | | | - Add more "talloc_free"s and right error values where needed - Add a pre-lookup for entries before searching for metadata attribute (also suggested by TODO list) - Now the most part of "ldap.py" works again
* s4:ldap.py - add a very special rename test (with invalid - empty RDN)Matthias Dieter Wallnöfer2009-10-021-9/+23
|
* s4:ldb_ildap - Don't segfault on a empty RDNMatthias Dieter Wallnöfer2009-10-021-4/+12
|
* s4:LDB/LDAP - Re-allow renamesMatthias Dieter Wallnöfer2009-10-022-7/+47
| | | | | | The main problem is that the "rdn_name" module launches on a rename request also a modification one with the "special attributes" which can't be changed directly. An introduced flag helps to bypass the restriction.
* s4:ldap.py - major enhancementsMatthias Dieter Wallnöfer2009-10-021-102/+187
| | | | | | | - Clean up and reorder it a bit - Test which adds invalid attributes - Test which makes sure that the 'distinguishedName' attribute cannot be modified - Test which makes sure that we cannot change the RDN/'name' attribute through a modify request