summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
...
* s4:torture - GetAnyDCName - adaptionsMatthias Dieter Wallnöfer2010-04-271-2/+23
| | | | | | | | | - Check for the various domainname set modes (on NULL and "" the domain should be the default domain on the server) - support return value "WERR_NO_SUCH_DOMAIN" (the server is the PDC of the domain) Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4:dcesrv_netr_GetAnyDCName - improve the call according to the MS-NRPC ↵Matthias Dieter Wallnöfer2010-04-271-7/+55
| | | | | | | | | | | documentation This implementation checks if the domainname is valid for us or a trusted domain. Then I've also added the PDC location functionality. That means that we should return "WERR_NO_SUCH_DOMAIN" (MS-NRPC 3.5.5.2.5). Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4:torture - DsRAddressesToSitenames - enhance the testsuiteMatthias Dieter Wallnöfer2010-04-271-24/+264
| | | | | | This shows the Windows behaviour of these two calls which we should match. Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4:netr_DsRAddressToSitenames[Ex]W calls - implement them correctly with the ↵Matthias Dieter Wallnöfer2010-04-271-16/+93
| | | | | | | | client site information This behaviour should be similar to the one of Windows Server (in my case 2008) Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4:CLDAP server - make use of the new "samdb_client_site_name" callMatthias Dieter Wallnöfer2010-04-271-2/+3
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4:util - add a function which finds the matching client site using the ↵Matthias Dieter Wallnöfer2010-04-271-0/+90
| | | | | | | | | | | client address The lookup of the client site is done using the subnets in the configuration partition. If no one matches we use the Windows Server fallback mechansim. This means: if only one site is available just use it. If they're more set the output variable to "". Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-drsdevel: support sites in drs developer scriptsAndrew Tridgell2010-04-273-3/+7
|
* s4-vampire: show main CLDAP response attributes during vampireAndrew Tridgell2010-04-271-0/+4
|
* s4-repl: added a workaround for WERR_DS_DRA_NO_REPLICA DsReplicaSync errorsAndrew Tridgell2010-04-272-2/+19
| | | | | | | | | The 0xc0002104/WERR_DS_DRA_NO_REPLICA seems to be spurious, and can be avoided by setting DRSUAPI_DRS_SYNC_ALL in the DsReplicaSync request. We need to investigate this further, and find out from MS why this is sometimes being sent, even when the target DC has the right repsFrom entries
* s4-dns: fixed dc.dc duplication in DNS update listAndrew Tridgell2010-04-271-2/+2
|
* s4-drs: add entries to repsTo based on calculated repsFromAndrew Tridgell2010-04-271-2/+30
| | | | | | This is based on the documentation: "the KCC will automatically create the Reps-To attributes on destination DSAs based on other DSAs Reps-From entries."
* s4-drepl: don't setup a repsFrom from a DC that isn't a master for a NCAndrew Tridgell2010-04-271-5/+50
| | | | use hasMasterNCs to see what NCs we should be pulling from each DC
* s4-getncchanges: honor DRSUAPI_DRS_REF_GCSPNAndrew Tridgell2010-04-271-1/+3
| | | | this is an alternative way of establishing repsTo
* s4-repl: these messages are common, and don't deserve debug level 1Andrew Tridgell2010-04-271-2/+2
| | | | getting older attributes is quite common
* s4-repl: on a failed request, clear the current ptrAndrew Tridgell2010-04-271-0/+1
| | | | this prevents the queue being stuck on failure
* s4-repl: end repl request when not doing an UpdateRefsAndrew Tridgell2010-04-271-0/+2
| | | | otherwise the queue is stuck forever
* s4-repl: don't delete repsTo entry on DsReplicaSyncAndrew Tridgell2010-04-271-46/+12
| | | | | | we rely on the highestUSN counters instead. W2K8 does not resend DsUpdateRefs each time, and the WSPP docs do not indicate that repsTo should be deleted
* s4: remove unused rap.h.Günther Deschner2010-04-261-358/+0
| | | | Guenther
* s4: fix some build warnings.Günther Deschner2010-04-263-5/+5
| | | | Guenther
* s4: use generated rap header.Günther Deschner2010-04-266-6/+6
| | | | Guenther
* s4: rename RAP share_enum_info to share_info.Günther Deschner2010-04-264-28/+28
| | | | Guenther
* s4-ddb: don't create partitions with the UNINSTANT flag setAndrew Tridgell2010-04-261-1/+14
| | | | | | | these partitions and not on the server we are replicating from. Also check for deleted partitions. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: allow getncchanges requests to non WRIT_REP partitions for extended opsAndrew Tridgell2010-04-261-1/+2
| | | | | | Needed for RID allocation Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: don't send uninstantiated objects in getncchangesAndrew Tridgell2010-04-261-0/+5
| | | | | | This includes deleted partitions Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drepl: don't send an UpdateRefs unless its a plain replicationAndrew Tridgell2010-04-261-1/+3
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: make links to foreign partitions non-fatalAndrew Tridgell2010-04-261-8/+6
| | | | | | | DN links outside the set of partitions we are replication should be allowed. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-heimdalbuild: remove LIBNETIF dependency from HEIMDAL_GSSAPIAndrew Tridgell2010-04-261-1/+1
| | | | this avoids the s3compat layer from getting duplicate interfaces code
* s4 dns: Allow to specify static grant entries to be added to the dynamicaly ↵Matthieu Patou2010-04-241-3/+17
| | | | | | generated named.conf.update Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4-smbd: Fix compiler warning in prefork smbd.Tim Potter2010-04-241-1/+1
| | | | | | | | My first patch in a while... Tim. Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4-smbtorture: skip tests when no local driver directory is around.Günther Deschner2010-04-231-0/+4
| | | | Guenther
* s4-smbtorture: use server_name for all printerdriver delete and enum operations.Günther Deschner2010-04-231-12/+16
| | | | | | With this s3 passes the RPC-PRINTER-DRIVER test. Guenther
* s4-smbtorture: allow to upload or remove any file belonging to a driver.Günther Deschner2010-04-231-0/+30
| | | | Guenther
* s4-smbtorture: fix test_EnumPrinterDrivers_findone().Günther Deschner2010-04-231-8/+8
| | | | Guenther
* s4-smbtorture: samba currently supports level 3 and 6 driver adds.Günther Deschner2010-04-231-0/+25
| | | | Guenther
* s4-smbtorture: test both 32bit and 64bit driver uploads in RPC-SPOOLSS-DRIVER.Günther Deschner2010-04-231-61/+71
| | | | Guenther
* s4-smbtorture: allow to upload and later remove printer driver files in ↵Günther Deschner2010-04-231-0/+230
| | | | | | RPC-SPOOLSS-DRIVER. Guenther
* s4-smbtorture: add RPC-SPOOLSS-DRIVER test.Günther Deschner2010-04-232-0/+752
| | | | Guenther
* s4-smbtorture: rework EnumPrinterDrivers tests a bit.Günther Deschner2010-04-231-68/+119
| | | | Guenther
* s4:provision Remove moduleload for 'hdb' (wrong name).Andrew Bartlett2010-04-221-1/+0
| | | | The backends are not normally modules anyway
* s4-cldap: we should set the w2k8 flags even if not the PDC emulatorAndrew Tridgell2010-04-221-3/+4
| | | | | | these two tests are independent Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: validate RODC credentials via the user_sidAndrew Tridgell2010-04-221-27/+12
| | | | | | | | This checks whether a replication client is a RODC by inclusion of the the DOMAIN_RID_ENTERPRISE_READONLY_DCS sid in the users token Pair-Programmed-With: Rusty Russell <rusty@samba.org> Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: added new SECURITY_RO_DOMAIN_CONTROLLER levelAndrew Tridgell2010-04-2213-37/+69
| | | | | | | | | | | This is used for allowing operations by RODCs, and denying them operations that should only be allowed for a full DC This required a new domain_sid argument to security_session_user_level() Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Rusty Russell <rusty@samba.org>
* s4-net: fixed two compiler warningsAndrew Tridgell2010-04-221-6/+4
|
* s4-torture: fixed a initialiserAndrew Tridgell2010-04-221-1/+1
| | | | | | | we were not initialising the whole array Pair-Programmed-With: Rusty Russell <rusty@samba.org> Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-libnet: fixed two compiler warningsAndrew Tridgell2010-04-221-3/+2
|
* s4-drs: removed dsdb_validate_client_flags()Andrew Tridgell2010-04-222-37/+0
| | | | | | This test is in the wrong place. We end up validating our own flags. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: only allow replication with the right invocationIdAndrew Tridgell2010-04-221-1/+20
| | | | | | | Non-administrator replication checks the invocationId matches the sid of the user token being used Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: removed an unused variableAndrew Tridgell2010-04-221-1/+0
|
* s4-dsdb: added dsdb_validate_invocation_id()Andrew Tridgell2010-04-221-0/+87
| | | | | | | | | this validates that a invocationID matches an account sid This will be used to ensure that we don't allow DRS replication from someone a non-DC or administrator Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: added dsdb_get_extended_dn_sid()Andrew Tridgell2010-04-222-12/+34
| | | | | | This will be used by the RODC code Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
generated by cgit (git 2.34.1) at 2025-09-26 21:37:05 +0000