summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
* s4:auth/ntlm/auth_sam.c - fix call to "get_server_info_principal"Matthias Dieter Wallnöfer2011-01-151-7/+7
| | | | | | | | | This should obviously point to the wrapper not the call itself. Found out by Tru64 host build warning. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Jan 15 18:05:59 CET 2011 on sn-devel-104
* s4:samr RPC server - always interpret filter integer values as signedMatthias Dieter Wallnöfer2011-01-151-4/+4
| | | | | | | To prevent platform-dependant problems. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Jan 15 14:54:14 CET 2011 on sn-devel-104
* s4:web_server - immeditately assign "wdata" as private data for the stream ↵Matthias Dieter Wallnöfer2011-01-141-11/+11
| | | | | | | | | socket This fixes bug #7887. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Fri Jan 14 22:33:13 CET 2011 on sn-devel-104
* s4:urgent_replication.py - remove a now superflous RELAX controlMatthias Dieter Wallnöfer2011-01-141-1/+1
| | | | | | | | The LSA object creation protection changed to the trusted/untrusted connection model. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Fri Jan 14 19:30:52 CET 2011 on sn-devel-104
* s4:samldb LDB module - fix "userAccountControl" handlingMatthias Dieter Wallnöfer2011-01-142-15/+39
| | | | | | | | "UF_ACCOUNTDISABLE" is only added automatically if no "userAccountControl" flags are set on LDAP add operations. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Fri Jan 14 18:29:07 CET 2011 on sn-devel-104
* ldb:ldb_dn.c - fix counter type in "ldb_dn_minimise"Matthias Dieter Wallnöfer2011-01-141-1/+1
| | | | | Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Fri Jan 14 10:43:29 CET 2011 on sn-devel-104
* waf: use PYTHONARCHDIR for installing python shared libsAndrew Tridgell2011-01-145-1/+10
| | | | | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Fri Jan 14 08:19:40 CET 2011 on sn-devel-104
* s4-dsdb: only enforce the extended dn rules over ldapAndrew Tridgell2011-01-141-2/+21
| | | | | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Fri Jan 14 07:23:31 CET 2011 on sn-devel-104
* s4-dsdb: removed the last use of samdb_search_*() from the dsdb ldb modulesAndrew Tridgell2011-01-141-4/+12
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: removed some more samdb_search_*() calls from samldb.cAndrew Tridgell2011-01-141-26/+69
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: replaced another use of samdb_search in a ldb moduleAndrew Tridgell2011-01-141-4/+10
| | | | | | we should be using the dsdb_module_search*() calls Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: fixed primaryGroupID to use dsdb_module_search_dn()Andrew Tridgell2011-01-141-6/+14
| | | | | | | this avoids using a multi-part extended DN in a search that hits the check in extended_dn_in Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: fixed filtering of tokengroupsAndrew Tridgell2011-01-141-5/+3
| | | | | | builtin groups are shown in user tokenGroups searches Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* ldb: new ABI file for 0.9.23Andrew Tridgell2011-01-141-0/+247
|
* s4-kdc: don't ask for an extended DN for krbtgt_dnAndrew Tridgell2011-01-141-1/+1
| | | | | | otherwise msg->dn would be non-minimal and would fail in searches Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-test: added a tokengroups testAndrew Tridgell2011-01-142-0/+101
| | | | | | | this tests that the remote tokenGroups match the internally calculated ones Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-samdb: give a more useful debug when we can't open the privileges dbAndrew Tridgell2011-01-141-0/+1
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-auth: fixed status return Andrew Tridgell2011-01-141-1/+1
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-samba-tool: fixed the gpo command to use the right DN for access checksAndrew Tridgell2011-01-141-5/+14
|
* s4-dsdb: minimise the DN in group expansionAndrew Tridgell2011-01-141-0/+5
| | | | | | | | this DN we have came from an extended DN search, which means it may have multiple extended components. We need to minimise the DN before AD will accept it Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* ldb: added ldb_dn_minimise()Andrew Tridgell2011-01-142-0/+64
| | | | | | | | | | | | this removes any extraneous components from a DN. For an extended DN, this means removing the string DN and all but the first extended component. This is needed as AD returns "invalid syntax" if you don't use a minimal DN as the base DN for a search. A non-minimal DN also doesn't ever match in a search expression. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dns: renamed DNS_TYPE_ZERO to DNS_TYPE_TOMBSTONEAndrew Tridgell2011-01-141-5/+5
| | | | | | we now know that these are tombstone records, with a timestamp Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: validate number of extended componentsAndrew Tridgell2011-01-141-2/+10
| | | | | | | | | this checks that the number of extended components in a DN is valid, to match MS AD behaviour. We need to do this to ensure that our tools don't try to do operations that will be invalid when used against MS servers Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* ldb: added ldb_dn_get_extended_comp_num()Andrew Tridgell2011-01-143-1/+10
| | | | | | | this returns the number of extended components. We need this to validate a DN in the extended_dn_in module Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-samba_tool Added ACL checking to python GPO management toolAndrew Bartlett2011-01-141-8/+26
|
* pyldb Simplify python wrappers for struct ldb_val (LdbValue)Andrew Bartlett2011-01-141-17/+4
| | | | Andrew Bartlett
* s4-auth Add get and set methods for auth_session_info python wrapperAndrew Bartlett2011-01-142-7/+73
| | | | | | | | | This allows the session key, security_token and credentials to be manipulated from python. Andrew Bartlett Pair-Programmed-With: Andrew Tridgell <tridge@samba.org>
* s4-auth Add function to obtain any user's session_info from a given LDBAndrew Bartlett2011-01-146-81/+209
| | | | | | | | | | | This will be a building block for a tokenGroups test, which can compare against a remote server (in particular the rootDSE) against what we would calculate the tokenGroups to be. (this meant moving some parts out of the auth_sam code into the containing library) Andrew Bartlett
* s4-auth use new dsdb_expand_nested_groups()Andrew Bartlett2011-01-142-152/+11
| | | | | | | | This isn't quite as good as using tokenGroups, but that is only available for BASE searches, and this isn't how the all the callers work at the moment. Andrew Bartlett
* s4-dsdb Implement tokenGroups expansion directly in ldb operational moduleAndrew Bartlett2011-01-143-30/+269
| | | | | | This removes a silly cross-dependency between the ldb moudle stack and auth/ Andrew Bartlett
* s4:torture/nbench/nbench.c - initialise "n"Matthias Dieter Wallnöfer2011-01-121-1/+1
| | | | | Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Wed Jan 12 20:38:02 CET 2011 on sn-devel-104
* s4:dns_server/dlz_bind9.c - initialise "ret" variablesMatthias Dieter Wallnöfer2011-01-121-2/+2
|
* s4:extended_dn_out LDB module - initialise "have_reveal_control"Matthias Dieter Wallnöfer2011-01-121-1/+1
|
* s4:librpc/rpc/dcerpc_connect.c - fix uninitialised variableMatthias Dieter Wallnöfer2011-01-121-0/+1
|
* ldb:ltdb_sequence_number - initialise "tmp_ctx" to prevent uninitialisation ↵Matthias Dieter Wallnöfer2011-01-121-1/+2
| | | | warning
* ldb:ldbsearch.c - fix possible uninitialised variableMatthias Dieter Wallnöfer2011-01-121-2/+2
| | | | And add a comparison for the "ret" result - this is more standard-oriented
* torture:drs/rpc/msds_intid.c - proof for the correct "intId"Matthias Dieter Wallnöfer2011-01-121-1/+1
| | | | "drs_attr" is uninitialised in this loop
* s4:winbind/idmap.c - we cannot use "failed" until we are in a transactionMatthias Dieter Wallnöfer2011-01-121-8/+14
| | | | We've to wait until "trans" is initialised.
* ldb:ltdb_sequence_number - check for an OOM exceptionMatthias Dieter Wallnöfer2011-01-121-0/+4
|
* ldb:ldb_dn_explode - remove/unify some duplicate initialisationsMatthias Dieter Wallnöfer2011-01-121-6/+2
|
* s4:dynconfig/dynconfig.h - fix ending newline warningMatthias Dieter Wallnöfer2011-01-121-1/+1
|
* torture: add ndr tests for backup key protocolMatthieu Patou2011-01-123-1/+161
| | | | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jan 12 10:25:00 CET 2011 on sn-devel-104
* idl: Add IDL for remote key backup protocol (rkbp)Matthieu Patou2011-01-121-1/+1
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* idl: remove protected storageMatthieu Patou2011-01-121-1/+1
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* Add some debug in s4's winbind serverMatthieu Patou2011-01-123-2/+3
| | | | | Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Wed Jan 12 01:43:11 CET 2011 on sn-devel-104
* s4-tests: Tests for expansion of ACEs containing generic information.Nadezhda Ivanova2011-01-111-2/+59
| | | | | Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Tue Jan 11 12:10:25 CET 2011 on sn-devel-104
* ldb: link to the download directory on the websiteAndrew Tridgell2011-01-111-16/+4
|
* s4: fixed 'make dist' not to need configure for s4Andrew Tridgell2011-01-111-2/+4
|
* s4: make pipes with underscore works alsoMatthieu Patou2011-01-091-1/+3
| | | | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sun Jan 9 15:47:01 CET 2011 on sn-devel-104
* waf: ensure "make dist" works from a clean git tree for all librariesAndrew Tridgell2011-01-081-2/+4
| | | | | | | this uses a temporary waf lock file to force the build directory Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Sat Jan 8 02:35:22 CET 2011 on sn-devel-104