summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
* s4:selftest: skip flakey samba4.nbt.winsreplication for nowStefan Metzmacher2011-09-221-0/+1
| | | | | | | | | | | | | | | [825/1154 in 43m52s] samba4.nbt.winsreplication(dc) Test if we always get back the same assoc_ctx Setup wrepl connections Test one pull replication cycle Setup wrepl connections Setup wrepl conflict pull connection UNEXPECTED(error): samba4.nbt.winsreplication.replica REASON: _StringException: _StringException: Unknown error/failure I don't have time to look into the problem currently. metze
* s4-dbcheck: fixed transaction nesting in dbcheckAndrew Tridgell2011-09-221-2/+6
| | | | | | | | | ensure we don't cancel a transaction we didn't start Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Thu Sep 22 03:39:59 CEST 2011 on sn-devel-104
* samba-tool: use show_recycled in dbcheckerAndrew Tridgell2011-09-221-13/+16
| | | | | we need to use show_recycled instead of show_deleted in dbchecker to allow us to see recycled objects
* s4-kdc: set NO_GLOBAL_CATALOG control in kdcAndrew Tridgell2011-09-221-3/+5
| | | | | | | | the kdc doesn't want to find users who are in partialReplica partitions, as they won't have the needed secret info for the kdc to operate. We need to generate referrals instead Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-rpc: show binding string in failed rpc bindsAndrew Tridgell2011-09-221-1/+2
| | | | this makes debugging some RPC auth issues easier
* s4-ldap-server: set the NO_GLOBAL_CATALOG control on non-GC operationsAndrew Tridgell2011-09-221-0/+2
| | | | this makes us honor GC semantics on the two ldap ports
* s4-repl: remove unused principal_name elementAndrew Tridgell2011-09-221-3/+0
|
* s4-dsdb: load the partialReplica attribute in the @PARTITION objectAndrew Tridgell2011-09-223-2/+27
| | | | | | this modifies the partition module to honor a partialReplica attribute on the @PARTITION module, marking partiations as partial replicas so the NO_GLOBAL_CATALOG control can be honoured
* s4-repl: fill in GUID and SID from partition informationAndrew Tridgell2011-09-221-2/+9
| | | | | when we find a NC via a DN string, fill in the GUID and SID so the caller can properly report them
* s4-kcc: return partial replica NCs in drs showreplAndrew Tridgell2011-09-221-24/+20
| | | | | the showrepl operation should return all our replicated NCs, including partial replicas
* s4-dsdb: added NO_GLOBAL_CATALOG controlAndrew Tridgell2011-09-224-1/+15
| | | | | | | this control is used to ask samdb to not return searches with a basedn in partial repica partitions, which is needed to support the difference between a search on the 3268 GC ldap port and the non-GC 389 port
* s4-dns: started adding support for auto-creation of NS glue recordAndrew Tridgell2011-09-221-1/+37
| | | | | when we create a new subdomain we need to create a NS glue record in the parent domain pointing at our subdomain
* s4-dsdb: get GUID and SID for DSA from extended DNAndrew Tridgell2011-09-221-21/+27
| | | | | this allows us to use the DN from a hasPartialReplicaNCs attribute to create a reps1 object
* s4-dsdb: enable initial replication of partitions via DsReplicaSyncAndrew Tridgell2011-09-222-0/+52
| | | | | we need to create a temporary dsa object to allow the replication task to replicate a NC that is not listed in a repsFrom attribute
* s4-repl: get NCs to replicate from our NTDS objectAndrew Tridgell2011-09-221-28/+64
| | | | | | | we need to use the hasMasterNCs and hasPartialReplicaNCs attributes on our NTDS object to get the list of NCs to replicate, instead of using the rootDSE. This is needed to support replicating of GC partial replicas, which are not listed in the rootDSE
* s4-dsdb: added support for replicating with GC partial attribute setAndrew Tridgell2011-09-222-3/+51
| | | | | if we are replicating a partial replica, then we need to supply the partial attribute set we want to replicate to the server
* s4-dsdb: failing to find the object is not an error in dsdb_loadreps()Andrew Tridgell2011-09-221-3/+8
| | | | | we may not have replicated the partition yet, so this should be considered the same as having no repsFrom/repsTo
* s4:ntvfs common - remove two outdated function prototypesMatthias Dieter Wallnöfer2011-09-202-4/+0
| | | | | | | | | The two functions don't exist anymore. Reviewed-by: Jelmer Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue Sep 20 20:16:29 CEST 2011 on sn-devel-104
* s4:ntvfs common - add "UTIL_TDB" and "tdb-wrap" as internal build dependencyMatthias Dieter Wallnöfer2011-09-201-0/+1
| | | | | | | These modules are required for both header and source code files (see bug #8468). Reviewed-by: Jelmer
* s4:param/pyparam.c - suppress "P_SEP" compilation warningMatthias Dieter Wallnöfer2011-09-201-2/+2
| | | | Reviewed-by: Jelmer
* s4-drs: allow replication of the GC partial attribute setAndrew Tridgell2011-09-201-5/+95
| | | | | | | | | when a DC has the GUID_DRS_GET_FILTERED_ATTRIBUTES right on a NC, we need to allow it to replicate if all the attributes it is asking for are in the GC partial attribute set Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Tue Sep 20 13:47:38 CEST 2011 on sn-devel-104
* lib/util/charset: remove charset module loadingAndrew Bartlett2011-09-204-10/+12
| | | | | | | | | | | | | Now that the 'table' modules are gone, there is no reason for there to be charset modules at all. This builds the macosxfs and weird modules into the binary at the appropriate times, and changes the tests to test instead the difference between the remaining internal handlers and iconv(). Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Sep 20 06:27:06 CEST 2011 on sn-devel-104
* s4-client: added close command in smbclientAndrew Tridgell2011-09-191-4/+62
| | | | | | | | | | this matches the existing open command, and also gives you error codes on both open and close useful for testing share mode locking Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Sep 19 23:59:28 CEST 2011 on sn-devel-104
* s4:ntvfs/common/brlock.c - remove unnecessary include "tdb_compat.h"Matthias Dieter Wallnöfer2011-09-191-1/+0
| | | | | | | | | | Attempt to fix bug #8468 (https://bugzilla.samba.org/show_bug.cgi?id=8468). Reviewed-by: Jelmer Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Sep 19 18:03:24 CEST 2011 on sn-devel-104
* s4:libnet/py_net.c - fix up includes (in order to find all "struct"s)Matthias Dieter Wallnöfer2011-09-191-3/+2
| | | | Reviewed-by: Jelmer
* s4:auth - remove unused variablesMatthias Dieter Wallnöfer2011-09-193-3/+0
| | | | Reviewed-by: Jelmer
* s4:selftest: run the nbt tests before the smb testsStefan Metzmacher2011-09-191-3/+4
| | | | | | | | | | | | | | | | | | | This hopefully avoids to run into problems with the flakey error in the samba4.nbt.winsreplication test [1071/1154 in 58m58s] samba4.nbt.winsreplication(dc) Test if we always get back the same assoc_ctx Setup wrepl connections Test one pull replication cycle Setup wrepl connections Setup wrepl conflict pull connection UNEXPECTED(error): samba4.nbt.winsreplication.replica REASON: _StringException: _StringException: Unknown error/failure metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Sep 19 16:29:22 CEST 2011 on sn-devel-104
* s4-dsdb: cope with out of sync replication attributes in partition moduleAndrew Tridgell2011-09-191-1/+68
| | | | | | | | | | | | | if the @ATTRIBUTES or other objects which are replicated between partions become out of sync, then the ldb would fail to open. This changes ensures that we can always fix those records, by running the operation in the top level partition, and replicating the result to the other partitions Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Sep 19 04:31:48 CEST 2011 on sn-devel-104
* pyldb: fixed places where we try to concatenate a Dn with a stringAndrew Tridgell2011-09-194-22/+22
| | | | you need to either use str(dn) or use %s in a format string
* s4-provision: use get_config_basedn() in DNS setupAndrew Tridgell2011-09-191-1/+1
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* samba-tool: use get_config_basedn() to get configuration NC DNAndrew Tridgell2011-09-192-9/+7
| | | | | | this allows these commands to work for subdomains Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-kdc: default kvno for inter-domain trusts to zeroAndrew Tridgell2011-09-191-1/+9
| | | | | | | | | | the exact value doesn't matter, as both Samba and windows check against the latest password, but the old default of -1 caused ASN.1 parsing errors on windows, which prevented it answering TGS requests thanks to Hongwei Sun for finding this from a ttt trace Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: use get_config_basedn() in python testsAndrew Tridgell2011-09-194-18/+18
| | | | | | | we can't just append CN=Configuration to the basedn, as that won't give the right configuration DN for a subdomain of a forest Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: cope with REPL_OBJ getncchanges call for new objectAndrew Tridgell2011-09-191-5/+10
| | | | | | | | when we do a subdomain join we create a new object using a REPL_OBJ getncchanges call for the partitions DN. This has a side effect of creating that object. We need to skip the UDV update in that case Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-provision Add initial support for joining as a new subdomainAndrew Bartlett2011-09-192-133/+154
| | | | | | | | To do this we need to reorganise a lot of the provision code, so that we can create the framework for the inbound replicaton of the config and schema partitions and then add in the new subdomain locally. Andrew Bartlett
* s4:selftest: skip flakey samba4.drs.repl_schema.python for nowStefan Metzmacher2011-09-171-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | UNEXPECTED(error): samba4.drs.repl_schema.python(vampire_dc).repl_schema.DrsReplSchemaTestCase.test_classWithCustomAttribute REASON: _StringException: _StringException: Content-Type: text/x-traceback;charset=utf8,language=python traceback 49F Traceback (most recent call last): File "/usr/lib/python2.6/dist-packages/testtools/runtest.py", line 128, in _run_user return fn(*args) File "/usr/lib/python2.6/dist-packages/testtools/testcase.py", line 368, in _run_test_method testMethod() File "/memdisk/autobuild/flakey/b12973/samba4/source4/torture/drs/python/repl_schema.py", line 179, in test_classWithCustomAttribute self._net_drs_replicate(DC=self.dnsname_dc2, fromDC=self.dnsname_dc1, nc_dn=self.schema_dn) File "/memdisk/autobuild/flakey/b12973/samba4/source4/torture/drs/python/drs_base.py", line 110, in _net_drs_replicate return self.check_output(cmd_line) File "bin/python/samba/tests/__init__.py", line 157, in check_output raise BlackboxProcessError(retcode, line, p.stdout.read(), p.stderr.read()) BlackboxProcessError: Command '/memdisk/autobuild/flakey/b12973/samba4/bin/samba-tool drs replicate -USAMBADOMAIN/Administrator%locDCpass1 --sync-forced LOCALVAMPIREDC.samba.example.com localdc.samba.example.com CN=Schema,CN=Configuration,DC=samba,DC=example,DC=com'; exit status 255; stdout: ''; stderr: 'ERROR(runtime): DsReplicaSync failed - (-1073741807, 'NT_STATUS_END_OF_FILE') ' 0 As this is an error, we have to skip it instead of adding it to the knowfail file metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sat Sep 17 08:43:31 CEST 2011 on sn-devel-104
* s4:upgrade_from_s3 - old s3 versions < 3.4.x don't have a "state directory" ↵Matthias Dieter Wallnöfer2011-09-161-1/+5
| | | | | | | | | param Hence the "lock directory" path has to be used instead. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Fri Sep 16 00:07:30 CEST 2011 on sn-devel-104
* waf: restore libsmbclient handling.Günther Deschner2011-09-152-6/+5
| | | | | | | | | | | | This is a temporary solution to get libsmbclient installed properly as a library (including symlinks and proper symbols). I was not able to make the old internal library name 'libsmb/smbclient' work together with "realname" and/or "link_name". Maybe one of the waf gurus has more ideas here. Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Thu Sep 15 15:31:59 CEST 2011 on sn-devel-104
* s4:wrepl_server: return NT_STATUS_CONNECTION_DISCONNECTEDStefan Metzmacher2011-09-141-1/+1
| | | | | | We should return the same in all places. metze
* s4:libcli/wrepl: return NT_STATUS_CONNECTION_DISCONNECTEDStefan Metzmacher2011-09-141-3/+3
| | | | | | We should return the same in all places. metze
* s4:lib/messaging: let irpc handles return NT_STATUS_CONNECTION_DISCONNECTEDStefan Metzmacher2011-09-141-2/+2
| | | | | | We should return the same in all places. metze
* s4:librpc/rpc: return NT_STATUS_CONNECTION_DISCONNECTEDStefan Metzmacher2011-09-141-2/+2
| | | | | | We should return the same in all places. metze
* s4-s3-upgrade Improve samba-tool domain samba3upgrade behaviourAndrew Bartlett2011-09-133-17/+38
| | | | | | | | | | | | | The --realm argument is again optional (the previous code would take the default from the default smb.conf, not the one specified) and --targetdir is now a named argument much like it is to provision. We now test the --testparm option to ensure it behaves the way we expect. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Sep 13 16:30:31 CEST 2011 on sn-devel-104
* s4:upgrade_from_s3 - restore "get_testparm_var" methodMatthias Dieter Wallnöfer2011-09-131-1/+4
| | | | | | This has accidentally been removed by commit 8268c2d4e231b05b439bc70331b75342b35daa4e. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* script/librelease.sh: automate Samba4 alpha releasesAndrew Bartlett2011-09-131-19/+0
|
* s4-subdomain: match windows form for trustAuthInOutBlobAndrew Tridgell2011-09-131-11/+3
| | | | | | Windows does not put a version element in the array Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-subdomain: fixed domain guid choice for subdomain joinAndrew Tridgell2011-09-131-4/+13
| | | | | | | We need to use the domain GUID that the server choose in the ncName link Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-subdomain: don't delete account DN not created in subdomain joinAndrew Tridgell2011-09-131-5/+8
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-subdomain: use a password length of 128Andrew Tridgell2011-09-131-1/+1
| | | | | | | | windows seems to use a fixed size for this password. It is possible that windows servers can only handle one size, given we have observed some strange behaviour from the windows kdc when we setup trusts Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-join: fixed non-subdomain joinAndrew Tridgell2011-09-131-0/+2
| | | | | | these two vars need to be initialised for general join Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>