summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
...
* selftest: Fix subunit stream to include the right prefixes rather thanJelmer Vernooij2009-06-111-1/+1
| | | | extending the subunit protocol.
* selftest: Use external processes for filtering known failures and prettyJelmer Vernooij2009-06-111-16/+14
| | | | formatting.
* selftest: Use filter-xfail for known failuresJelmer Vernooij2009-06-111-2/+5
|
* selftest: Use subunit internally, and a separate test output formatter.Jelmer Vernooij2009-06-111-18/+19
|
* A script to compare the differences in nTSecurityDescriptor between 2 hostsNadezhda Ivanova2009-06-111-0/+153
| | | | | | | | | | This script walks the schema, configuration and domain partitions of the locally installed Ldb and a remote hosts and compares the descriptors disregarding the difference in domain SID. The goal is to make sure a freshly provisioned Samba has the correct descriptors so ACLs work correctly. It outputs the descriptors in short SDDL, where the correct SIDs are to be replaced during provisioning. Optionally it can be output as an LDIF file with the current local domain and domain SIDs.
* fixed some places where RPC-SECRETS needs to be changed to RPC-LSA-SECRETSAndrew Tridgell2009-06-101-6/+6
| | | | | this copes with a rename of SECRETS to LSA-SECRETS in an earlier patch by gd
* fixed the encoding/decoding of the reverse attribute for server side sortAndrew Tridgell2009-06-101-3/+10
|
* Clarify and expand the Kerberos notes made by Andrew Bartlett in 2005Donald T. Davis2009-06-101-154/+448
| | | | | | | | Compiled with Andrew over a series of phone calls and gobby sessions, with the aim of documenting Kerberos requirements for Samba to us an alternate (ie, MIT) Kerberos library. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* Remove copy of kerberos-notes.txt added in incorrect locationAndrew Bartlett2009-06-101-760/+0
|
* Clarify and expand the Kerberos notes made by Andrew Bartlett in 2005Donald T. Davis2009-06-101-0/+760
| | | | | | | | Compiled with Andrew over a series of phone calls and gobby sessions with Andrew, with the aim of documenting Kerberos requirements for Samba to us an alternate (ie, MIT) Kerberos library. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* fixed server side sort controlAndrew Tridgell2009-06-101-4/+7
| | | | | when sorting a record that does not have the requested sort attribute then put those records last in the sort result
* fixed server side sorting of case-insensitive stringsAndrew Tridgell2009-06-101-3/+0
| | | | | | | | The sort module uses ldb_comparison_fold() as the comparison function for case-insensitive attributes. In other places the function is being used to produce a boolean, but for sorting we care about ordering. The n1 - n2 return was sorting by length, not value
* Fix installation path of the subunit python modules.Timur I Bakeyev2009-06-091-1/+1
| | | | Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
* s4-tests: Add separate variable for tap2subunit.Jelmer Vernooij2009-06-091-2/+3
|
* SMB2-COMPOUND: add some tests for invalid requestsStefan Metzmacher2009-06-091-0/+201
| | | | | | TODO: check why the INVALID1 tests fails with --signing=required. metze
* s4:smb2srv: don't allow the related flag on the first request in a ↵Stefan Metzmacher2009-06-091-0/+7
| | | | | | compounded chain metze
* s4: smbcli_transport_send hit the socket right away if possibleSam Liddicott2009-06-091-0/+7
| | | | | | | | | | | | | | | | | | [Metze; "make test" on git master outputs exactly the same test summary with our without this patch (apart from the "using seed" lines)] If the transport socket is writable, then push the queue along rather than wait until the caller returns back to the tevent loop. This strategy keeps the sockets piping hot, and is particularly good for cases where reading requests from one socket causes lots of writes on another socket, or where lots of writes are made in a batch. It doesn't matter if the socket is not writeable yet, packet_queue_run will return quite cheaply in such a case. Signed-off-by: Sam Liddicott <sam@liddicott.com> Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4:torture: add SMB2-COMPOUND testStefan Metzmacher2009-06-093-1/+245
| | | | metze
* s4:smb2srv: correctly fail remaining compounded requests after a failureStefan Metzmacher2009-06-092-5/+18
| | | | metze
* s4:smb2srv: remove old TODO comment, we already check the seqnumStefan Metzmacher2009-06-091-2/+0
| | | | metze
* s4:smb2srv: fix handling of multiple compounded requestsStefan Metzmacher2009-06-091-7/+12
| | | | metze
* s4:smb2srv: remove the chained file handle on closeStefan Metzmacher2009-06-091-0/+4
| | | | metze
* s4:libcli/smb2: add smb2_transport_credits_ask_num()Stefan Metzmacher2009-06-093-2/+13
| | | | metze
* s4:libcli/smb2: only add the 1 byte dynamic buffer padding for non ↵Stefan Metzmacher2009-06-091-2/+6
| | | | | | compounded requests metze
* s4:libcli/smb2: add support sending compounded requestsStefan Metzmacher2009-06-093-50/+205
| | | | metze
* s4:libcli/smb2: prepare SMB2 signing code for compounded requestsStefan Metzmacher2009-06-091-2/+8
| | | | metze
* s4-selftest: change rpc.secrets to rpc.lsa.secrets here as well.Günther Deschner2009-06-091-5/+5
| | | | Guenther
* s4-smbtorture: rename SECRETS to LSA-SECRETS.Günther Deschner2009-06-091-1/+1
| | | | Guenther
* work around conflict in pidfile() prototype for heimdal on NetBSD5Andrew Tridgell2009-06-091-0/+7
|
* s4-smbtorture: when testing RPC-SAMR-LARGE-DC its fine to just close the ↵Günther Deschner2009-06-081-13/+17
| | | | | | objects. Guenther
* s4-smbtorture: add test_QueryDisplayInfo_level to RPC-SAMR-LARGE-DC.Günther Deschner2009-06-081-6/+79
| | | | Guenther
* python: Fix samba4.dcerpc.rpcecho.RpcEchoTests.test_surrounding test.Jelmer Vernooij2009-06-081-1/+1
|
* s4:heimdal: fix build on FreeBSDBjörn Jacke2009-06-082-1/+4
| | | | | | | | | | Patch from Timur I. Bakeyev sent to samba-technical: Heimdal requires openpty() presence. FreeBSD has in in standard libc, so autodetection works, but compilation fails, as declaration of this function is missing. This patch adds proper header detection and inclusion for openpty().
* s4-smbtorture: also test for "all" architecture in enum driver tests in ↵Günther Deschner2009-06-081-5/+28
| | | | | | RPC-SPOOLSS. Guenther
* s4-smbtorture: fix test_ReportEventLog in RPC-EVENTLOG.Günther Deschner2009-06-081-2/+2
| | | | Guenther
* Make tunable for modulesdirTimur I. Bakeyev2009-06-081-0/+16
| | | | | | | | | | | | | | | This patch is for Samba4. It adds configure tunable for modulesdir - location, where modules should be installed. In the case, when no FHS compliance is used and libdir is redefined, modulesdir still points to $PREFIX/modules. In some installations it may be not desired. I'd rather set it myself :) So, here is the patch. With regards, Timur Bakeyev. Signed-off-by: Stefan Metzmacher <metze@samba.org>
* rl_event_hook detectionTimur I. Bakeyev2009-06-081-1/+4
| | | | | | | | | | | This patch is relevant for Samba4 source mostly. The way, how readline compiled under FreeBSD makes it require stdio.h to get all the necessary declarations. Without this addition rl_event_hook is not properly detected. With regards, Timur Bakeyev. Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4-smbtorture: exclude oem_information checking for s3 in RPC-SAMR.Günther Deschner2009-06-081-4/+10
| | | | Guenther
* s4-smbtorture: skip samr MultipleMember alias tests for 3 as well as we do ↵Günther Deschner2009-06-071-2/+3
| | | | | | already for s4. Guenther
* Allow access as SYSTEM on a privileged ldapi connectionVolker Lendecke2009-06-061-13/+83
| | | | | | | This patch creates ldap_priv/ as a subdirectory under the private dir with the appropriate permissions to only allow the same access as the privileged winbind socket allows. Connecting to ldap_priv/ldapi gives SYSTEM access to the ldap database.
* Fix some nonempty blank linesVolker Lendecke2009-06-062-64/+60
|
* fixed handling of change notify buffer overrunsAndrew Tridgell2009-06-051-2/+9
| | | | | | | When the notify buffer overruns and there are no pending notify requests, the notify buffer doesn't actually get destroyed, it just gets put in a state where new notifies are discarded and the next notify change request will return 0 changes.
* s4-smbtorture: fix comment in RPC-SAMR-LARGE-DC test.Günther Deschner2009-06-041-3/+3
| | | | | | Andrew, I think you wanted to print this instead. Guenther
* Increase tevent version for tevent_req_notify_callback()Volker Lendecke2009-06-041-1/+1
|
* s4:torture Cut the RPC-SAMR-LARGE-DC test down to sizeAndrew Bartlett2009-06-041-7/+16
| | | | | | | | | | | | This removes the validation of the estimated number of accounts, because MS-SAMR 3.1.5.5.1.1 makes clear the number returned cannot be relied apon. I've also converted a bit more of the test to use torture_assert(), and where that is impractical, to print error messages when things fail. Andrew Bartlett
* s4:torture assert that we get a Mailslot allocated before we dereferenceAndrew Bartlett2009-06-041-0/+2
|
* changed the auth path to use extended DN ops to avoid non-indexed searchesAndrew Tridgell2009-06-043-92/+91
| | | | | | | | | | | | | | | | | | Logs showed that every SAM authentication was causing a non-indexed ldb search for member=XXX. This was previously indexed in Samba4, but since we switched to using the indexes from the full AD schema it now isn't. The fix is to use the extended DN operations to allow us to ask the server for the memberOf attribute instead, with with the SIDs attached to the result. This also means one less search on every authentication. The patch is made more complex by the fact that some common routines use the result of these user searches, so we had to update all searches that uses user_attrs and those common routines to make sure they all returned a ldb_message with a memberOf filled in and the SIDs attached.
* fixed ldb rename now that we have unique indexesAndrew Tridgell2009-06-041-30/+11
| | | | | | With unique indexes, any rename of a record that has an attribute that is uniquely indexed needs to be done as a delete followed by an add, otherwse you'll get an error that the attribute value already exists.
* Don't run the RPC-SAMR-LARGE-DC test multiple timesAndrew Bartlett2009-06-041-1/+1
|
* s4:torture Make Samba4 build on hosts with an older libnetapiAndrew Bartlett2009-06-042-4/+7
| | | | | | | For example, Samba4 would not build (for the last week) on Fedora 10, with samba-common 3.2.11 installed. Andrew Bartlett