summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
...
* s4:samldb LDB module - implement "fSMORoleOwner" attribute protectionMatthias Dieter Wallnöfer2012-04-302-0/+153
| | | | | | | | | This is a very essential attribute since it references to various domain master roles (PDC emulator, schema...) depending on which entry it has been set. Incautious modifications can cause severe problems. Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Apr 30 02:04:24 CEST 2012 on sn-devel-104
* s4:dsdb/common/util.c - samdb_is_pdc() - fail if the "fSMORoleOwner" ↵Matthias Dieter Wallnöfer2012-04-291-1/+5
| | | | attribute has not been set
* Add some debug for FOOBAR return case as they are hard to diagnoseMatthieu Patou2012-04-292-2/+8
| | | | | Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sun Apr 29 09:08:15 CEST 2012 on sn-devel-104
* dsdb: more RELAX to DBCHECK control shift so that only dbcheck can do ↵Matthieu Patou2012-04-291-2/+2
| | | | uncontrolled changes
* dsdb: change control from relax to dbcheckMatthieu Patou2012-04-291-1/+1
| | | | | Comment indicate that this is needed by dbcheck only and it permits other projects to push broken schema and remain undetected
* dns server: move very verbose debug to higher level 2 -> 8Matthieu Patou2012-04-291-4/+4
|
* s4:torture: add a check for talloc success in rpc.samba3.randomauth2Michael Adam2012-04-281-1/+1
| | | | | Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Sat Apr 28 02:10:39 CEST 2012 on sn-devel-104
* s4:torture: add a check for talloc success in the rpc.samba3 suiteMichael Adam2012-04-281-0/+1
|
* s4:torture: add a rpc.samba3.smb2-reauth2 testMichael Adam2012-04-281-0/+136
| | | | like smb-reauth2, only for smb2
* s4:torture: add a rpc.samba3.smb2-reauth1 testMichael Adam2012-04-271-1/+161
|
* s4:librpc: create a binding on the pipe if necessary in ↵Stefan Metzmacher2012-04-271-0/+15
| | | | | | dcerpc_pipe_open_smb2_send() Pair-Programmed-With: Michael Adam <obnox@samba.org>
* libcli/smb: move SMB2_IOCTL_FLAG_IS_FSCTL to smb2_constants.hStefan Metzmacher2012-04-271-3/+0
| | | | metze
* s4:ntvfs/ipc: don't echo back the smb2 ioctl input_bufferStefan Metzmacher2012-04-271-1/+1
| | | | metze
* torture: change dfs tests now that we return a level 4 when level 4 is requestedMatthieu Patou2012-04-261-3/+2
| | | | | Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Thu Apr 26 21:25:37 CEST 2012 on sn-devel-104
* s4-torture: never return false in the raw.composite torture testAndrew Bartlett2012-04-261-39/+7
| | | | | | | | | | | We must use torture_assert() macros to ensure that the failure is recorded in the subunit stream correctly, rather than being returned as an unknown 'error'. (We cannot handle error results as knownfail). Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Apr 26 04:00:16 CEST 2012 on sn-devel-104
* s4:torture: add a rpc.samba3.smb-reauth2 testMichael Adam2012-04-261-0/+145
| | | | | | | | | | | | | | | * Open session. * Reauth to anon. * Open lsa pipe. * Do lsa get username. * Rauth to original user. * Do lsa get username again. expected result: the getusername works and shows 'NT AUTHORITY\ANONYMOUS LOGON' in both calls. Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Thu Apr 26 02:27:12 CEST 2012 on sn-devel-104
* s4:torture: add a rpc.samba3.smb-reauth1 testMichael Adam2012-04-251-0/+165
| | | | | | | | | | | | | | | It does reauth while using an rpc pipe: * open session * open lsa pipe * do lsa getusername * reauth to anonymous * do lsa getusername again * reauth back to original user * do reauth again result: lsa getusername is always possible and always gives the first (authenticated user)
* s4:torture: add a raw.session suite with a raw.session.reauth testGregor Beck2012-04-253-1/+92
| | | | Signed-off-by: Michael Adam <obnox@samba.org>
* s4:torture:rpc:spoolss: also initialize driverName before checking it in ↵Michael Adam2012-04-251-0/+1
| | | | | | test_PrinterData_DsSpooler() Signed-off-by: Andreas Schneider <asn@samba.org>
* s4-messaging: Use generate_random() to get a unique ID for messaging clientsAndrew Bartlett2012-04-251-1/+2
| | | | | | | | | | | | The call to random() resulted in duplicate values for s3fs configurations which, due to the forked child, all started with the same random seed. A future improvement would be to move to a proven unique value. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Apr 25 11:43:40 CEST 2012 on sn-devel-104
* s4-torture: enable raw.composite test again, and convert to new style testAndrew Bartlett2012-04-254-114/+140
| | | | | | This test has been skipped for some time, but is an important test for parallel operation. Andrew Bartlett
* lib/replace: split out GSSAPI from lib/replace/system/kerberos.h into ↵Alexander Bokovoy2012-04-255-5/+5
| | | | | | | | | | | | | | lib/replace/system/gssapi.h With waf build include directories are defined by dependencies specified to subsystems. Without proper dependency <gssapi/gssapi.h> cannot be found for embedded Heimdal builds when there are no system-wide gssapi/gssapi.h available. Split out GSSAPI header includes in a separate replacement header and use that explicitly where needed. Autobuild-User: Alexander Bokovoy <ab@samba.org> Autobuild-Date: Wed Apr 25 00:18:33 CEST 2012 on sn-devel-104
* s4:libnet: pass an explicit mem_ctx to libnet_rpc_userinfo_send() (bug #8889)Stefan Metzmacher2012-04-243-7/+10
| | | | | | | | | This hopefully fixes the flakey autobuild. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Apr 24 16:43:03 CEST 2012 on sn-devel-104
* s4-s3upgrade: print the error message from passdb.error exceptionsAndrew Bartlett2012-04-241-6/+6
| | | | | | | | | This gives more information on why a group membership lookup failed. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Apr 24 04:34:44 CEST 2012 on sn-devel-104
* Cracknames: use krb wrapper functions so it works with MITSimo Sorce2012-04-231-25/+29
| | | | | | | Also avoid a silly game with directly modifying the principal and then calling krb5_principal_unparse_flags to get out a string. If we already assume it is a 2 components name and know what outcome we are going to get, just go ahead and talloc_asprintf the linearized string.
* Make krb5 wrapper library common so they can be used all overSimo Sorce2012-04-233-5/+6
|
* For now just disable this Heindal specific stuff in the MIT buildSimo Sorce2012-04-235-3/+29
|
* Make krb5 context initialization not heimdal specificSimo Sorce2012-04-233-23/+55
| | | | | Turn the logging data to an opaque pointer. Ifdef code and use MIT logging function when built against system MIT.
* Make sure krb5_principal_get_num_comp is identified as present for Heimdal buildAlexander Bokovoy2012-04-231-0/+1
| | | | | | | | Common wrappers for MIT / Heimdal use krb5_principal_get_num_comp() to replace krb5_princ_size but rely on krb5_principal_get_num_comp() identified by the build. As we know it exists in Heimdal, define it for waf build. Signed-off-by: Simo Sorce <idra@samba.org>
* waf: rename SAMBA4_INTERNAL_HEIMDAL to SAMBA4_USES_HEIMDALAlexander Bokovoy2012-04-231-1/+1
| | | | | | | | | | SAMBA4_INTERNAL_HEIMDAL is defined unconditionally regardless where Heimdal comes from, system-wide or embedded version. This define is not used anywhere. We'll use it to distinguish between Heimdal and MIT Krb5 builds. Signed-off-by: Simo Sorce <idra@samba.org>
* s4-libnet Always return after composite_error()Andrew Bartlett2012-04-234-1/+8
| | | | | | | | | | These instances should not cause a problem, but make it easier to audit for this kind of problem in the future with grep. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Apr 23 14:29:45 CEST 2012 on sn-devel-104
* s4-libnet Always return after composite_error()Andrew Bartlett2012-04-233-0/+3
| | | | | | | This can and does cause crashes as multiple conflicting sets of callbacks run on memory that may have been destroyed. Andrew Bartlett
* s4-libnet: Fix continue_groupinfo_openuser to check correct state infoAndrew Bartlett2012-04-231-2/+2
| | | | | | | | This meant that we would attempt to query the user that we could not open. This is a mirror of 4ba1647d5db59e5bb4911c399111e9286aac1a8e. Andrew Bartlett
* s4:librpc/rpc: directly return after composite_error()Stefan Metzmacher2012-04-231-1/+1
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Apr 23 12:17:08 CEST 2012 on sn-devel-104
* s4:libnet_become_dc: add missing 'return' after composite_error()Stefan Metzmacher2012-04-231-0/+2
| | | | metze
* s4-libnet: Fix continue_groupinfo_opengroup to check correct state infoAndrew Bartlett2012-04-231-2/+2
| | | | | | This meant that we would attempt to query the group that we could not open. Andrew Bartlett
* s4-libnet: Fix segfault shown by wbinfo --group-info=administratorAndrew Bartlett2012-04-231-0/+1
| | | | | | | | The issue was that after the LookupNames call indicated that this was not a group, the call paths diverged, with both sucess and failure paths running. Andrew Bartlett
* dlz_bind9: Also produce and install binary plugin for bind 9.9Andrew Bartlett2012-04-221-1/+1
| | | | | | | | | Thanks to Alexander Bokovoy <ab@samba.org> for the fix! Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Sun Apr 22 10:51:57 CEST 2012 on sn-devel-104
* Move kdc_get_policy helper in the lsa server where it belongs.Simo Sorce2012-04-207-96/+44
| | | | | | | | | | | | | | | | This was used in only 2 places, db-glue.c and the lsa server. In db-glue.c it is awkward though, as it forces to use an unconvenient lsa structure and conversions from time_t to nt_time only to have nt_times converted back to time_t for actual use. This is silly. Also the kdc-policy file was a single funciton library, that's just ridiculous. The loadparm helper is all we need to keep the values consistent, and if we ever end up doing something with group policies we will care about it when it's the time. the code would have to change quite a lot anyway. Autobuild-User: Simo Sorce <idra@samba.org> Autobuild-Date: Fri Apr 20 01:53:37 CEST 2012 on sn-devel-104
* Use loadparm helper to find lifetime defaultsSimo Sorce2012-04-191-6/+10
| | | | Implictly fixes buggy use of int for time_t
* Move README file in the right place.Simo Sorce2012-04-191-4/+0
| | | | Someone forgot to move the README when they moved the code ...
* s4-python: Ensure we handle the no-eadb case for system xattrs in get/setntaclAndrew Bartlett2012-04-191-0/+1
| | | | | Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Apr 19 20:51:16 CEST 2012 on sn-devel-104
* Added number of FSMO roles owned by the server we are trying to demote.Daniele Dario2012-04-191-1/+1
|
* s4-provision: Always give the warning if we are using eadb. It really ↵Andrew Bartlett2012-04-191-3/+6
| | | | should be for testing only
* waf: Fix mispellingSimo Sorce2012-04-191-1/+1
| | | | | Autobuild-User: Simo Sorce <idra@samba.org> Autobuild-Date: Thu Apr 19 17:36:41 CEST 2012 on sn-devel-104
* Fix Error messagesSimo Sorce2012-04-191-4/+2
|
* s4-kcc: avoid a false alarm with rodcMatthieu Patou2012-04-191-0/+7
| | | | | Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Thu Apr 19 12:32:58 CEST 2012 on sn-devel-104
* samba_spnupdate: don't try to register DNS related SPN if we are not ↵Matthieu Patou2012-04-191-1/+24
| | | | | | | | mastering the NC For RW DC the impact is pretty small but for RODC the whole SPN set is rejected by the target DC as RODC hasn't the right to register DNS SPN if it is not mastering this NC.
* dbcheck: Add a check that every FSMO role has a valid ownerAndrew Bartlett2012-04-191-0/+41
| | | | | Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Apr 19 07:49:54 CEST 2012 on sn-devel-104
* s4-samba-tool: Fix samba-tool fsmo seizeAndrew Bartlett2012-04-192-46/+51
| | | | | | This is currently untested, and a restructure broke it. Andrew Bartlett