summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
...
* s4: fixed a unsigned printf warningsAndrew Tridgell2009-09-081-3/+3
|
* s4: removed an unused variableAndrew Tridgell2009-09-081-2/+0
|
* s4: fixed some shadowed variable warningsAndrew Tridgell2009-09-083-9/+9
|
* Fill the meta data vector in the responce struct.Anatoliy Atanasov2009-09-081-4/+32
|
* s4:selftest Fix 'make testenv-gdb' and 'make valgrindtest' etcAndrew Bartlett2009-09-081-28/+22
| | | | | | | | | | The problem here was that tridge's changes to ensure that test results were always propogated didn't merge well with the addition of extra environment variables for the 'make valgrindtest' and similar environments. By splitting out the macro further, we keep the build farm reporting accurate, but allow these other test modes to work. Andrew Bartlett
* s4:pwsettings: Correct off by factor of 10 for ticks.Andrew Kroeger2009-09-071-4/+4
| | | | | | The tick conversion math was off by a factor of 10 due to the incorrect usage of the "e" notation. The expression "XeY" means "X * (10^Y)", so the correct expression is 1e7 to get the correct adjustment for ticks.
* s4: Let the "setpassword" script finally use the "samdb_set_password" routineMatthias Dieter Wallnöfer2009-09-072-9/+70
| | | | | | The "setpassword" script should use the "samdb_set_password" call to change the NT user password. Windows Server tests show that "userPassword" is not the right place to save the NT password and does not inherit the password complexity.
* s4:dsdb: correctly implement _dsdb_syntax_OID_oid_ldb_to_drsuapi()Stefan Metzmacher2009-09-071-1/+31
| | | | | | | Here we just need to map the oid string in the ldb value to the ATTRTYP id. metze
* s4:LogonGetDomainInfo - add a basic check for the hostnameMatthias Dieter Wallnöfer2009-09-071-2/+17
| | | | | | This check is specified in Windows Server after release 2003. The parameter "hostname" should match as prefix of the dns hostname given as parameter in the "workstation" structure.
* s4: Exceptions in "provision.py"Michael Ströder2009-09-071-11/+15
| | | | | This looks much nicer than "normal" string exceptions - and fits better in the OO programming style.
* s4:simple_ldap_map - "primaryGroupId"Matthias Dieter Wallnöfer2009-09-071-4/+15
| | | | Previous patch was incomplete regarding the "primaryGroupId" attribute. Complete it.
* s4:samldb - Fix typoMatthias Dieter Wallnöfer2009-09-071-1/+1
|
* s4:Foreign security principals - Fix them upMatthias Dieter Wallnöfer2009-09-073-19/+31
| | | | | | I fixed them up to match with Windows Server 2003. I don't think that the creation of them in the provision script is needed so I put them in the "provision_users.ldif" file.
* s4:subtree delete module - Cosmetic adaptionsMatthias Dieter Wallnöfer2009-09-071-11/+16
|
* s4:ldap.py - Adds a test for the primary group behaviourMatthias Dieter Wallnöfer2009-09-071-12/+132
| | | | | | This passes the Windows Server behaviour. Also SAMBA 4 should match it. Also some small enhancement.
* s4:provision - Change the module order to match Windows ServerMatthias Dieter Wallnöfer2009-09-071-1/+1
| | | | Tests show that Windows Server seems to do the access checks on the very last moment.
* s4:sam - Implement also here the right primary group behaviourMatthias Dieter Wallnöfer2009-09-071-46/+71
| | | | | | | We have not only to expand the additional groups but *also* the primary group to gain all rights of a user account. Also, remove an unneeded context (tmp_ctx) and "talloc_steal".
* s4:samr - Fix up the SAMR server to support the primary group of a user in ↵Matthias Dieter Wallnöfer2009-09-071-128/+189
| | | | | | | | | the right way When doing some tests with the NT User Manager for Domains on s4 I noticed that the handling of the primary group for a user wasn't correct. So I fixed this. Also some cosmetic changes (tab indent corrections).
* s4:samldb - Major reworkMatthias Dieter Wallnöfer2009-09-074-328/+1000
| | | | | | | | | | | | | | | | | | This fixes up the change of the primary group of a user when using the ADUC console: - When the "primaryGroupId" attribute changes, we have to delete the "member"/"memberOf" attribute reference of the new primary group and add one for the old primary group. - Deny deletion of primary groups according to Windows Server (so we cannot have invalid "primaryGroupID" attributes in our AD). - We cannot add a primary group directly before it isn't a secondary one of a user account. - We cannot add a secondary reference ("member" attribute) when the group has been chosen as primary one. This also removes the LDB templates which are basically overhead now. This should also fix bug #6599.
* s4:provision - Add a new delete function only for users and computersMatthias Dieter Wallnöfer2009-09-071-0/+25
| | | | | | We need this new function to delete users and computers before other objects on reprovisioning. Otherwise primary groups could be deleted before user/computer accounts (which isn't allowed anymore by the reworked "samldb" module).
* s4:provision - Change the "provision_users.ldif" file to support the ↵Matthias Dieter Wallnöfer2009-09-071-26/+35
| | | | | | | "samldb" changes The "provision_users.ldif" file needs some rework to pass against the changed and improved "samldb" module (see next commit).
* s4:setup_dns.sh fixed the update of the GUID CNAMEAndrew Tridgell2009-09-071-8/+14
|
* s4:nsupdate-gss allow forcing of the realmAndrew Tridgell2009-09-071-35/+37
| | | | this is needed for the _msdcs zone
* s4:setup: Remove display_specifiers.ldif.Andrew Kroeger2009-09-071-482/+0
| | | | | This file is no longer needed as the DisplaySpecifiers are now generated from files provided by Microsoft.
* s4:setup: Updated comment to reflect new DisplaySpecifiers location.Andrew Kroeger2009-09-071-1/+3
|
* s4:setup: Use ms_display_specifiers script for provision.Andrew Kroeger2009-09-071-2/+5
| | | | | Changed the provisioning to use the new script to parse the Microsoft-provided DisplaySpecifiers LDIF file.
* s4:setup: Added script to parse Microsoft DisplaySpecifiers document.Andrew Kroeger2009-09-071-0/+189
| | | | | | | | | | Created this script based on the existing ms_schema.py script. - Removed some unnecessary transformations that are only necessary for schema processing. - Added capability to parse and properly output base64-encoded values. - Removed unnecessary attributes based on what attributes were present (and also what were explicitly removed) from display_specifiers.ldif.
* s4:setup: Change license headers to LDIF comments.Andrew Kroeger2009-09-075-86/+146
| | | | | | | | | | The original license headers provided by Microsoft cannot be parsed as valid LDIF. Changed the license headers to be valid LDIF comments, and added a new header section detailing the exact changes that were made to the original document. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:setup Add DisplaySpecifiers from Microsoft.Andrew Bartlett2009-09-075-0/+148158
| | | | | | | | Like the schema, these are provided under the licence at the head of the file, which is not the GPL, but allows us to distribute them with Samba. Andrew Bartlett
* s4: bring nsupdate-gss into the s4 treeAndrew Tridgell2009-09-072-0/+379
| | | | | | | | This is a perl script that does TSIG-GSS DNS updates against a AD DC. The bind 9.5 nsupdate still doesn't seem to work with TSIG-GSS, and we need a way to do DNS updates when we vampire a domain, so I revived this ancient perl script and added a wrapper script that can update DNS entries using our machine account credentials
* s4: fixed the secrets.ldb construction in libnetAndrew Tridgell2009-09-071-8/+8
| | | | | on a vampire join we were not putting the right attributes and objectclass on the secrets.ldb record
* s4: the secrets.ldb module needs the loadparm opaque setupAndrew Tridgell2009-09-071-0/+7
|
* s4:simple_ldap_map - Enhance it for supporting "primaryGroupID" in the right wayMatthias Dieter Wallnöfer2009-09-061-14/+25
|
* s4:torture - Fix uninitialized variableMatthias Dieter Wallnöfer2009-09-061-1/+1
|
* s4:"linked attributes" modules - correct the commentsMatthias Dieter Wallnöfer2009-09-061-2/+2
|
* s4: Fix typoMatthias Dieter Wallnöfer2009-09-061-2/+2
|
* s4:pwsettings - Introduce the LDB modify flags in the right wayMatthias Dieter Wallnöfer2009-09-061-27/+8
| | | | | We can't emulate them through the LDB changetype flags since they haven't the same constants! The previous behaviour led to huge problems.
* s4:ldb_errors - add spacesMatthias Dieter Wallnöfer2009-09-061-0/+2
|
* s4:dsdb/common/util.c - Copy parameters to prevent segfaultsMatthias Dieter Wallnöfer2009-09-061-3/+8
| | | | | The parameters "lmNewHash" and/or "ntNewHash" could be NULL and when we perform write operations on them (look below in the code) we could get SIGSEGVs!
* s4:dsdb/common/util - Indentation fixesMatthias Dieter Wallnöfer2009-09-061-4/+5
|
* Tell newbie devs about ./configure.developerRusty Russell2009-09-061-1/+1
| | | | | | Enhances the outputs in autogen.sh for both s3 and s4. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
* s4:configure: require tevent >= 0.9.8Stefan Metzmacher2009-09-041-1/+1
| | | | metze
* s4:python fixed subunit tests of dcerpcAndrew Tridgell2009-09-047-6/+6
| | | | | | The version of the unitest python module in Ubuntu Jaunty doesn't seem to support this many level of subdirectories. Moving the tests up one level solves the problem.
* ldb: make ldb module programming less error proneAndrew Tridgell2009-09-042-0/+17
| | | | | | | | | | | | | When a top level method in a module returns an error, it is supposed to call ldb_module_done(). We ran across a case where this wasn't done, and then found that in fact that are hundreds of similar cases in our modules. It took Andrew and I a full day to work out that this was the cause of a subtle segv in another part of the code. To try to prevent this happening again, this patch changes ldb_next_request() to catch the error by checking if a module returning an error has called ldb_module_done(). If it hasn't then the call is made on behalf of the module.
* ldb: ensure we cancel a ldb transactionAndrew Tridgell2009-09-042-3/+9
| | | | | | When we fail a ldbadd or ldbedit we should cancel the transaction to prevent ldb giving a warning about having a open transaction in the ldb destructor
* s4: fixed a missing NULL termination in a attribute list passed to ldb_searchAndrew Tridgell2009-09-041-1/+1
|
* First attempt to implement dcesrv_drsuapi_DsGetNCChangesAnatoliy Atanasov2009-09-031-1/+204
| | | | | | | So far it returns the ctr6 responce without proper linked attributes support and metadata. A couple of improvements are the filter in the search uses '(uSNChanged>=N)', added extended dn search support, non-replicated attributes are excluded from the result.
* Fix the dsdb_syntax_OID_ldb_to_drsuapi functionAnatoliy Atanasov2009-09-031-1/+51
| | | | | | This replace the dsdb_syntax_FOOBAR_ldb_to_drsuapi function, which was left as a TODO code. Implementation in both added functions is completely identical and probably should differ in the future.
* another large change to the linked_attribute moduleAndrew Tridgell2009-09-031-20/+64
| | | | | | | | | | | | | | | This one copes with deleted objects where linked attributes have been set on the module. We hit this when we do the ldb wipe at the start of a provision, which trigers linked attribute updates, but for objects that have disappeared. We need to ensure that the linked attribute updates only happen on the right object, and if the object gets re-created (as happens with a provision) then it is not the right object. To cope with this we record the GUID of the object when the operation that triggered the linked attribute update comes in, and then find the DN by suing that GUID when we apply the change in the prepare commit hook.
* hook on prepare_commit instead of transaction_endAndrew Tridgell2009-09-032-8/+11
| | | | This allows for safe transaction end aborts
generated by cgit (git 2.34.1) at 2025-09-26 20:51:54 +0000