summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
...
* s4-rodc: next step in RODC join codeAndrew Tridgell2010-08-251-126/+218
| | | | | | | | a RODC net join can now replicate the schame, config and base partitions, by calling the net.replicate*() python hooks, and driving the GetNCChanges calls from python Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-pynet: added replicate_init() and replicate_chunk() callsAndrew Tridgell2010-08-251-35/+134
| | | | | | | these calls allow python code to pass chunks from DRS replication calls into the code that applies the chunks to a database Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-libnet: added libnet_vampire_replicate_init()Andrew Tridgell2010-08-251-0/+17
| | | | | | this is used to setup for later calls to the replicate chunk functions Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4:getncchanges.c - fix some counter variable typesMatthias Dieter Wallnöfer2010-08-231-3/+3
| | | | | They should be "unsigned" since they count LDB objects. And also the SID array can be counted as "unsigned".
* s4-devel: added a getncchanges developer scriptAndrew Tridgell2010-08-231-0/+120
| | | | | | | | | this allows for command line access to getncchanges it also provides a good example of calling DRSUAPI interfaces from python Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-pyrpc: use s4_event_context_init()Andrew Tridgell2010-08-231-1/+1
| | | | | | | This fixes a crash when using kerberos and the python dcercpc interface, which requires event nesting Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-pyregistry: use s4_event_context_init()Andrew Tridgell2010-08-231-2/+2
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-event: event_context_find() should use s4_event_context_init()Andrew Tridgell2010-08-231-1/+1
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-net: role should be case insensitive for joinAndrew Tridgell2010-08-231-1/+4
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: show the user sid that does the GetNCChanges callAndrew Tridgell2010-08-231-2/+3
| | | | | | this is useful when debugging replication Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: removed the warning on WRIT_REP being setAndrew Tridgell2010-08-231-4/+2
| | | | we just need to clear this flag
* s4-net: added initial implemention of RODC joinAndrew Tridgell2010-08-232-6/+311
| | | | | | This does the join using python code Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* libnet-s4: added replicate() command in pynetAndrew Tridgell2010-08-231-0/+60
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-libnet: split libnet_Vampire() into two partsAndrew Tridgell2010-08-232-26/+82
| | | | | | | | | libnet_Replicate() will do just the replication portion of libnet_Vampire(). This will be used by the RODC join, where the join part of the operation happens in python, and behaves quite differently to the libnet_Join() code. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-libnet: show the DN when DsAddEntry() failsAndrew Tridgell2010-08-231-1/+2
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-net: moved the net join command to pythonAndrew Tridgell2010-08-235-108/+5
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-libnet: added join type constants to python interfaceAndrew Tridgell2010-08-231-0/+4
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-python: added ndr_print() method in ndrAndrew Tridgell2010-08-231-0/+3
|
* s4:security Change struct security_token->sids from struct dom_sid * to ↵Andrew Bartlett2010-08-2316-59/+60
| | | | | | | | | struct dom_sid This makes the structure much more like NT_USER_TOKEN in the source3/ code. (The remaining changes are that privilages still need to be merged) Andrew Bartlett
* s4: Only install testparm to /usr/bin/, no longer to /usr/sbin.Jelmer Vernooij2010-08-221-1/+1
|
* s4: Install testparm to /usr/bin, consistent with old behaviour.Jelmer Vernooij2010-08-221-3/+3
|
* Avoid use of Samba DTD, which requires net access.Jelmer Vernooij2010-08-2210-14/+10
|
* s4-net: better error message on net setpasswordAndrew Tridgell2010-08-221-3/+5
|
* librpc: add python bindings for the netlogon pipeAndrew Tridgell2010-08-221-0/+6
| | | | Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>
* pyldb: do type checking on the list form of ldb addAndrew Tridgell2010-08-221-0/+6
| | | | Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>
* pidl: give the varible name for bad type in python callsAndrew Tridgell2010-08-221-1/+1
| | | | | This makes it much clearer which argument to a function had the wrong type
* librpc/rpc: move dcerpc_read_ncacn_packet_send/recv() to dcerpc_util.cStefan Metzmacher2010-08-202-174/+9
| | | | metze
* Remove place-holders when it is single domainZahari Zahariev2010-08-201-18/+32
| | | | | | | | | | | This patch changes the behavior of LDAPCmp in a single domain scenario. No place-holders will be applied during comparison so replication will be fully tested and even the silightest difference will pop up. There is a second smaller fix when we compre hosts in different domains. This fix disables ${SERVERNAME} paace-holder when there are more then one serevr (domain controller) in the given domain.
* s4-dsdb: the RODC_JOIN control also changes samAccountNameAndrew Tridgell2010-08-201-9/+13
| | | | | | | when adding a user with the RODC_JOIN control, the samAccountName is automatically set to the krbtgt_NNNNN form Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-pysamdb: fixed get_domain_sid()Andrew Tridgell2010-08-201-1/+1
| | | | | | we need to actually return the SID! Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-ldb: added support for rodc_control in ldbAndrew Tridgell2010-08-201-0/+27
| | | | | | | this allows you to specify the RODC join control in python ldb calls or on the command line Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: fixed the error code for EXOP_REPL_SECRET getncchanges callsAndrew Tridgell2010-08-201-10/+8
| | | | | | | | when we deny a EXOP_REPL_SECRET call we should set the exop error code to NONE, and the main return code to WERR_DS_DRA_ACCESS_DENIED (based on observing windows server behaviour) Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: bring us much closer to the docs for DRS secret replicationAndrew Tridgell2010-08-201-9/+241
| | | | | | | | | | | | | | | The rules for when a RODC can replicate secrets are: - it can always replicate its own acct - it can also replicate its krbtgt acct - it can't replicate other krbtgt accts - it can't replicate interdomain trust accounts - it can't replicate users in the denied group list - it can replicate users in the allowed group list otherwise it can't replicate Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: fixed dsdb_get_extended_dn_sid()Andrew Tridgell2010-08-201-1/+1
| | | | | | it should honor the component_name Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: implement RODC attribute filtering overrideAndrew Tridgell2010-08-202-39/+79
| | | | | | | | When a RODC uses extended getncchanges operation DRSUAPI_EXOP_REPL_SECRET it gets an override on the ability to replicate the secret attributes. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: added sam_ctx_system on DRS bind stateAndrew Tridgell2010-08-202-0/+20
| | | | | | | | The getncchanges call needs to be able to access the sam as the system user for RODC clients. To do this it needs a sam_ctx connection with system credentials Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4 provision: POLICY_ACL is already an FS acl no need to translate itMatthieu Patou2010-08-191-2/+1
|
* s4 provision: Add some documentation to GPO related functionsMatthieu Patou2010-08-192-15/+58
|
* unit tests: debug to ease locating pb, remove dir if exists to avoid errorMatthieu Patou2010-08-191-2/+8
|
* s4 upgradeprovision: exit with a non null return code so that it can be ↵Matthieu Patou2010-08-191-0/+1
| | | | trapped in blackbox tests
* s4 upgradeprovision: add more attrbutes the ignore listMatthieu Patou2010-08-192-5/+20
| | | | Also format in a pretty way the int64 ranges
* s4 upgradeprovision: Deal with bootstrap indexing attribute to avoid useless ↵Matthieu Patou2010-08-191-13/+65
| | | | reindexing
* s4 upgradeprovision: Add a function for schema reloadingMatthieu Patou2010-08-191-1/+31
| | | | | | Full schema reloading is needed when we modify exisiting elements that have attributes that comes from not from the default schema (ie. openchange schema, user schema ..)
* s4 upgradeprovision: upgrade_delta_samdb return a msg_diff of @ATTRIBUTESMatthieu Patou2010-08-191-9/+14
| | | | | This is used by upgradeprovision to readd this delta just before loading a merged schema
* s4 upgradeprovision: Fixes for increment_keyversionMatthieu Patou2010-08-193-3/+22
| | | | fix
* s4 upgradeprovision: fix a typo and pass correct parameter to ↵Matthieu Patou2010-08-192-4/+5
| | | | increment_calculated_keyversion
* s4-drs: ATTIDs for deleted attributes should be based on msDs-IntId value if ↵Kamen Mazdrashki2010-08-192-3/+4
| | | | it exists
* s4-test: make better error message for ATTID checksKamen Mazdrashki2010-08-191-4/+20
|
* s4-test: Change attribute syntax and value for readabilityKamen Mazdrashki2010-08-191-3/+3
| | | | | When it comes to read logs and dumping data received Octet String syntax comes in handy
* s4-test: Enable drs.rpc.msdsintid test case - it should be passing nowKamen Mazdrashki2010-08-191-1/+0
|