| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
|
|
|
|
| |
call samba_spnupdate at the same time as samba_spnupdate
|
|
|
|
| |
used by SPN update code
|
|
|
|
|
| |
this script adds all our required servicePrincipalName entries at
runtime. The admin can add more entries to spn_update_list as needed
|
| |
|
| |
|
|
|
|
|
|
|
| |
The idea here is to make it not dependent on the system's default
realm.
Andrew Bartlett
|
|
|
|
| |
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
|
|
|
|
| |
Andrew Bartlett
|
|
|
|
| |
We are counting LDB objects here -> therefore "unsigned"
|
|
|
|
|
|
|
| |
"GetAnyDCName" behaviour
We get back "NO_SUCH_DOMAIN" when we query the PDC. This is fine and therefore
we use the "logon_server" variable as "dcname".
|
|
|
|
|
|
| |
client site information
This behaviour should be similar to the one of Windows Server (in my case 2008)
|
|
|
|
|
|
|
|
| |
with the client site information"
This reverts commit 908d982980846257b65ab576d31131e8793e9399.
I need to merge the improved version of this commit.
|
|
|
|
|
|
|
| |
This reverts commit e88a54a87e185b44e2d216bd853e6a87bf950be6.
This isn't the correct behaviour. See MS-NRPC documentation under the
"GetAnyDCName" section.
|
|
|
|
|
|
| |
We fall back to the server site name in a vampire
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
|
|
|
|
|
|
| |
We should respond when we are the PDC
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
|
|
|
|
| |
Signed-off-by: Andrew Tridgell <tridge@samba.org>
|
|
|
|
|
|
|
| |
When we aren't a DC we shouldn't have the netlogon pipe available.
[MS-NRPC 1.3] says that we can only have DCs on the server side.
Signed-off-by: Andrew Tridgell <tridge@samba.org>
|
|
|
|
| |
Signed-off-by: Andrew Tridgell <tridge@samba.org>
|
|
|
|
|
|
| |
Does for now only return DC's primary site.
Signed-off-by: Andrew Tridgell <tridge@samba.org>
|
|
|
|
|
|
|
|
| |
"computer_name" check
We don't support the check for the computer name on the RPC server side.
Signed-off-by: Andrew Tridgell <tridge@samba.org>
|
|
|
|
|
|
| |
MS-NRPC docs
Signed-off-by: Andrew Tridgell <tridge@samba.org>
|
|
|
|
|
|
|
|
|
| |
- Check for the various domainname set modes (on NULL and "" the domain should
be the default domain on the server)
- support return value "WERR_NO_SUCH_DOMAIN" (the server is the PDC of the
domain)
Signed-off-by: Andrew Tridgell <tridge@samba.org>
|
|
|
|
|
|
|
|
|
|
|
| |
documentation
This implementation checks if the domainname is valid for us or a trusted domain.
Then I've also added the PDC location functionality. That means that we should
return "WERR_NO_SUCH_DOMAIN" (MS-NRPC 3.5.5.2.5).
Signed-off-by: Andrew Tridgell <tridge@samba.org>
|
|
|
|
|
|
| |
This shows the Windows behaviour of these two calls which we should match.
Signed-off-by: Andrew Tridgell <tridge@samba.org>
|
|
|
|
|
|
|
|
| |
client site information
This behaviour should be similar to the one of Windows Server (in my case 2008)
Signed-off-by: Andrew Tridgell <tridge@samba.org>
|
|
|
|
| |
Signed-off-by: Andrew Tridgell <tridge@samba.org>
|
|
|
|
|
|
|
|
|
|
|
| |
client address
The lookup of the client site is done using the subnets in the configuration
partition. If no one matches we use the Windows Server fallback mechansim.
This means: if only one site is available just use it. If they're more set the
output variable to "".
Signed-off-by: Andrew Tridgell <tridge@samba.org>
|
| |
|
| |
|
|
|
|
|
|
|
|
|
| |
The 0xc0002104/WERR_DS_DRA_NO_REPLICA seems to be spurious, and can be
avoided by setting DRSUAPI_DRS_SYNC_ALL in the DsReplicaSync request.
We need to investigate this further, and find out from MS why this is
sometimes being sent, even when the target DC has the right repsFrom
entries
|
| |
|
|
|
|
|
|
| |
This is based on the documentation: "the KCC will automatically create
the Reps-To attributes on destination DSAs based on other DSAs
Reps-From entries."
|
|
|
|
| |
use hasMasterNCs to see what NCs we should be pulling from each DC
|
|
|
|
| |
this is an alternative way of establishing repsTo
|
|
|
|
| |
getting older attributes is quite common
|
|
|
|
| |
this prevents the queue being stuck on failure
|
|
|
|
| |
otherwise the queue is stuck forever
|
|
|
|
|
|
| |
we rely on the highestUSN counters instead. W2K8 does not resend
DsUpdateRefs each time, and the WSPP docs do not indicate that repsTo
should be deleted
|
|
|
|
| |
Guenther
|
|
|
|
| |
Guenther
|
|
|
|
| |
Guenther
|
|
|
|
| |
Guenther
|
|
|
|
|
|
|
| |
these partitions and not on the server we are replicating from. Also
check for deleted partitions.
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
|
|
|
|
|
|
| |
Needed for RID allocation
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
|
|
|
|
|
|
| |
This includes deleted partitions
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
|
|
|
|
| |
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
|
|
|
|
|
|
|
| |
DN links outside the set of partitions we are replication should be
allowed.
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
|
|
|
|
| |
this avoids the s3compat layer from getting duplicate interfaces code
|
|
|
|
|
|
| |
generated named.conf.update
Signed-off-by: Stefan Metzmacher <metze@samba.org>
|