summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
* Various source4 spelling fixes.Brad Hards2010-02-224-4/+4
| | | | Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
* Spelling fixes for source4/auth.Brad Hards2010-02-222-3/+3
| | | | | | The comment for USER_INFO_INTERACTIVE_LOGON looks like a cut-n-paste from the line above. Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
* Spelling fixes for source4/lib/registry.Brad Hards2010-02-224-8/+8
| | | | Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
* Typo fix.Brad Hards2010-02-221-1/+1
| | | | Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
* LDB related spelling fixes.Brad Hards2010-02-2211-11/+11
| | | | Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
* s4:torture/ldap/basic.c - add some "const"Matthias Dieter Wallnöfer2010-02-221-5/+3
| | | | | | In addition I removed a "talloc_free(req)" since we never free elsewhere the requests explicitly and do it only indirectly with freeing the "conn" object when the testsuite terminates.
* s4:netlogon enhance DsrEnumerateDomainTrustsSimo Sorce2010-02-211-27/+178
| | | | | | Actually return trust relationships by searching the appropriate entries in the SAM database. Add checks and return the correct flags, type and attributes.
* s4:operational LDB module - enable support for passing referrals through itMatthias Dieter Wallnöfer2010-02-211-2/+1
|
* s4:partition DSDB module - Cosmetic fixupsMatthias Dieter Wallnöfer2010-02-211-16/+23
|
* s4:password_hash - Fix up request message pointersMatthias Dieter Wallnöfer2010-02-211-7/+7
| | | | | For add requests we need the add request messages, for modify requests we need the modify request messages.
* s4:dsdb/util.c - Use LDB result constants in some more helper functionsMatthias Dieter Wallnöfer2010-02-211-11/+11
| | | | Always better to rely on the standards rather than on custom results.
* s4:provision.py - try to use other addresses than "127.0.0.x" and "::1"Matthias Dieter Wallnöfer2010-02-211-2/+10
| | | | | | | | | | | | | On production systems a user for sure strongly disagrees to use local IP addresses (how should the server be accessible?). Therefore if the user didn't specify an IP as provision option and in the "/etc/hosts" file we have at least one not-local IP which resolves to our hostname use this or one of them. Notice: if a host has more public IP addresses with the same name assigned the behaviour is non-deterministic (well, okay - by the entries order it is). But then the user is invited to specify the host IP manually. This should address bug #5484.
* s4:AD content - Implement the new password settings containerMatthias Dieter Wallnöfer2010-02-211-0/+5
|
* s4:AD content - adequate some revision levels to match Windows Server 2008Matthias Dieter Wallnöfer2010-02-212-5/+5
|
* s4:AD content - Add the DFSR objects which exist on Windows Server >= 2008Matthias Dieter Wallnöfer2010-02-212-4/+22
| | | | Those replace the FRS ones.
* cleanupSimo Sorce2010-02-211-133/+131
| | | | remove trailing spaces, tabs and blank lines
* s4:credentials Add hooks to extract a named Kerberos credentials cacheAndrew Bartlett2010-02-208-65/+197
| | | | | | | | | | | | This allows the integration of external tools that can't be linked into C or python, but need to authenticate as the local machine account. The machineaccountccache script demonstrates this, and debugging has been improved in cli_credentials_set_secrets() by passing back and error string. Andrew Bartlett
* s4:lsa open trusted domain also with dns nameSimo Sorce2010-02-191-3/+7
| | | | | When searching for a trusted domain object to open, search also the DNS Name attributes for a match. W2K8R2 uses the DNS domain if available.
* remove trailing tabs and spacesSimo Sorce2010-02-191-9/+9
|
* readability reformattingSimo Sorce2010-02-191-28/+36
| | | | stop this function from maiking my eyes bleed
* s4:rpc_server Add a 'if_version' parameter to the bind operation.Andrew Bartlett2010-02-203-4/+6
| | | | | | | This allows the interface version to be forwarded to the remote server in the RPC proxy, both in the endpoint lookup and the subsequent bind. Andrew Bartlett
* s4-smbtorture: more work on devicemode tests.Günther Deschner2010-02-191-35/+63
| | | | Guenther
* s4-smbtorture: explain failure conditions in printer device mode tests a ↵Günther Deschner2010-02-191-11/+20
| | | | | | little more. Guenther
* s4-smbtorture: add --option=torture:spoolss_check_size=yes.Günther Deschner2010-02-191-0/+6
| | | | | | This disables the size calculation comparison by default. Guenther
* s4-smbtorture: print more comments while running SD and DM tests in ↵Günther Deschner2010-02-191-15/+14
| | | | | | RPC-SPOOLSS-PRINTER. Guenther
* s4:selftest Add test for the RPC proxyAndrew Bartlett2010-02-191-0/+3
|
* s4:rpc_server Record the remote connections association group IDAndrew Bartlett2010-02-192-6/+39
| | | | | | | | | | | By recording the association group the remote server assigned to our proxied RPC connection, we can ensure we use the same value when the client wishes to use it. This isn't stored in a private pointer, as mapiproxy will want to use this feature too. Andrew Bartlett
* s4:winbind Make the 'no SID found' message even more detailedAndrew Bartlett2010-02-192-5/+26
| | | | | | | Now we give the user a clue as to what may be wrong, and the file path that we could not find the domain SID in. Andrew Bartlett
* Revert "Got back to 16-byte padding on auth RPC. S3 clients and servers now ↵Jeremy Allison2010-02-171-6/+4
| | | | | | | | | | | cope with this. Jeremy" This reverts commit 38c50c7027d2a2a9a3df060b74b2a2efce4d9e6f. As tridge requested, we need this to work with older S3 servers, not just for smbtorture4. Jeremy.
* s4-smbtorture: skip printer info cross tests against samba 3 for now.Günther Deschner2010-02-181-0/+4
| | | | | | Not even w2k8r2 passes them atm. Guenther
* s4-smbtorture: try more combinations to find printers in ↵Günther Deschner2010-02-181-0/+14
| | | | | | | | | test_EnumPrinters_findname(). Also take a note of servers returning full UNC printer paths although we did not set the servername. Guenther
* s4-smbtorture: simplify test_PrinterInfo_DevMode a bit.Günther Deschner2010-02-181-17/+4
| | | | Guenther
* s4-smbtorture: avoid potential loop while adding a new printer in ↵Günther Deschner2010-02-181-0/+7
| | | | | | RPC-SPOOLSS-PRINTER. Guenther
* Got back to 16-byte padding on auth RPC. S3 clients and servers now cope ↵Jeremy Allison2010-02-171-4/+6
| | | | with this. Jeremy
* s4:param Modify secrets_get_domain_sid to give more useful errorsAndrew Bartlett2010-02-185-87/+55
| | | | | | | | | This also moves the calls to secrets_get_domain_sid back into winbind_task_init(), so that we can terminate with a much more detailed error message. (The previous message was simply NT_STATUS_CANT_ACCESS_DOMAIN_INFO). Andrew Bartlett
* s4/rodc: change the libnet_become_dc code to do RODC joinAnatoliy Atanasov2010-02-173-6/+59
|
* s4/drs:kccdrs_replica_get_info_obj_metadata implementationAnatoliy Atanasov2010-02-173-20/+96
| | | | | | Fix the names of the drsuapi_DsReplicaInfoType enum and rebuild the .idl The get_info_obj_metadata implementation is ported from implementation i developed and tested at the samba io lab 2009
* s4/ldap: Refactor the fix for ldap nested searchesKamen Mazdrashki2010-02-172-13/+15
| | | | | | | | | | | Current implementation synchronizes processing for all types of LDAP request, not only LDAP_Search ones. Synchronization for ldap replies processing is done locally in ldb_ildap module as this concerns only ildb_callback() function. Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
* s4-smbtorture: unify test list to run against single created printers in ↵Günther Deschner2010-02-171-18/+28
| | | | | | | | | RPC-SPOOLSS-PRINTER. This is to make sure we run the same tests for printers created via AddPrinter and via AddPrinterEx. Guenther
* s4-smbtorture: also test level 2 sets for devicemodes and see if they persist.Günther Deschner2010-02-171-0/+21
| | | | Guenther
* s4-smbtorture: refactor setprinter devicemode calls in RPC-SPOOLSS-PRINTER.Günther Deschner2010-02-171-19/+71
| | | | Guenther
* s4-provision: freeze the DNS zone before creating the zone fileAndrew Tridgell2010-02-171-2/+10
| | | | | This prevents bind from getting confused if it has a journal for the zone.
* s4-dnsupdate: use samba_runcmd() in the dns update taskAndrew Tridgell2010-02-172-17/+37
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-param: added "rndc command" smb.conf optionAndrew Tridgell2010-02-172-0/+5
|
* s4-provision: fix permissions on generated DNS zone fileAndrew Tridgell2010-02-171-9/+11
| | | | | | | The zone file needs to be writeable by bind to allow for it to flush its journal on dynamic updates Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-rpc: paranoid check for auth_lengthAndrew Tridgell2010-02-171-0/+11
| | | | | This is not strictly needed as the ndr_pull_advance() checks it a few lines further down, but I want to save Jeremy getting more grey hairs :-)
* s4-kcc: remove a qsort() that snuck into the new topology codeAndrew Tridgell2010-02-161-2/+1
|
* s4-rpc: don't use auth padding in rpc bind requests as it breaks s3Andrew Tridgell2010-02-161-0/+7
| | | | | | | | | | The s3 RPC server returns a bind_nak if it gets a rpc bind with auth padding. This change forces a padding length of zero to maximimise compatibility with s3 servers. I've left the padding code in as a #if 0 to make it easier for us to test/fix the s3 server code, which should be changed to correctly handle arbitrary auth padding in all rpc requests with auth trailers.
* s4-dcerpc: fixed auth padding to be relative to the stub, not packetAndrew Tridgell2010-02-162-10/+17
| | | | | | | The recent dcerpc padding changes made our padding relative to the packet header, instead of the start of the stub. Surprisingly, this broke w2k8r2 doing a dcpromo join to a s4 server. It seems that w2k8r2 is very fussy about the padding it gets in some circumstances.
* s4-dsdb: return LDB_ERR_CONSTRAINT_VIOLATION on num_recs != 1Andrew Tridgell2010-02-161-1/+1
| | | | | | | In a single record search, LDB_ERR_CONSTRAINT_VIOLATION is more useful than the generic LDB_ERR_OPERATIONS_ERROR Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>