summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
* pidfile: use set_close_on_exec()Andrew Tridgell2011-12-151-0/+2
| | | | this prevents a fd leak to child processes
* s4-socket: use set_close_on_exec()Andrew Tridgell2011-12-152-0/+8
| | | | this prevents a fd leak to child processes
* s4-smbtorture: make sure we can successfully run the schannel test against ↵Günther Deschner2011-12-141-16/+30
| | | | | | | | | | | | windows. lsa lookupsids3/lookupnames4 is only available over schannel sealed ncacn_ip_tcp. Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Dec 14 17:28:29 CET 2011 on sn-devel-104
* s4-torture: LookupSids3 is only available over NCACN_IP_TCP.Andreas Schneider2011-12-141-1/+2
| | | | | Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Wed Dec 14 15:39:58 CET 2011 on sn-devel-104
* s4-torture: Fix schannel test against win2k8.Andreas Schneider2011-12-141-4/+4
|
* s4-librpc: Fix NETLOGON credential chain with Windows 2008.Andreas Schneider2011-12-142-11/+42
| | | | | | | | | | Windows Server 2008 returns NT_STATUS_DOWNGRADE_DETECTED if you call netrServerAuthenticate2 during a domain join without setting the strong keys flag (128bit crypto). Only for NT4 we need to do a downgrade to the returned negotiate flags. See also 0970369ca0cb9ae465cff40e5c75739824daf1d0.
* s4-netlogon: Revert patch f02e4ebfafa6e5911e3fe744b1780527ab12c970Amitay Isaacs2011-12-141-5/+0
| | | | | | | DS_DNS_CONTROLLER bit is set if DC's domain name is dns name. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Wed Dec 14 07:31:05 CET 2011 on sn-devel-104
* samba-tool: Fix DN for GPO entriesAmitay Isaacs2011-12-141-8/+2
|
* samba-tool: gpo: fix a typoAmitay Isaacs2011-12-141-1/+1
|
* samba-tool: Remove duplicate code of dsacl to fsacl conversionAmitay Isaacs2011-12-141-38/+10
| | | | Use samba.ntacls.dsacl2fsacl() instead.
* setup: Fix phpldapadmin configuration for version 1.2.xAmitay Isaacs2011-12-141-18/+10
|
* s4-smbtorture: fix some typos in schannel test.Günther Deschner2011-12-141-3/+3
| | | | | | | Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Dec 14 02:52:54 CET 2011 on sn-devel-104
* s4-smbtorture: avoid printf(); in schannel test.Günther Deschner2011-12-141-13/+13
| | | | Guenther
* s4-smbtorture: remove trailing whitespace from schannel test.Günther Deschner2011-12-141-41/+41
| | | | Guenther
* s4-resolv: fix dns_ex so as to fail correctly when a name does not existAndrew Bartlett2011-12-141-0/+9
| | | | | | | | | | | | | Without this, netbios name lookups do not work, as we never fall back to them. This caused segfaults from e38d97e0424f7e5b21c8b7ac0b1f1bac33f19d69 to 251209bd6f6e66ca9bcf28cd652d85d1cd729fdc and then name lookup failure or timeouts until this patch. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Dec 14 01:16:37 CET 2011 on sn-devel-104
* s4-selftest: Add test of RPC to a netbios aliasAndrew Bartlett2011-12-131-0/+1
| | | | | | This tries to ensure our netbios lookup code is still run. Andrew Bartlett
* s4-selftest Give local.resolve a real name to look upAndrew Bartlett2011-12-131-1/+2
|
* s4:pydsdb: remove unused variable from py_dsdb_am_pdc()Stefan Metzmacher2011-12-131-1/+0
| | | | metze
* s4-provision: Do not guess partition file names, use @PARTITION recordAmitay Isaacs2011-12-131-59/+76
| | | | | | | | | | | This is to avoid duplicating the logic of generating partition file names. (partition file names are encoded partially as per RFC1738). Also, use tdb_copy() instead of filesystem copy function to copy database files, which guarantees correct database copy. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Tue Dec 13 03:28:03 CET 2011 on sn-devel-104
* s4-param: Added bin_dir(),sbin_dir() methods to get compiled in dirsAmitay Isaacs2011-12-131-3/+17
|
* s4-provision: Extract common utility routines in separate fileAmitay Isaacs2011-12-133-92/+106
|
* s4-provision: CN=MicrosoftDNS,CN=System container is in forest and not domainAmitay Isaacs2011-12-131-10/+10
|
* s4-cldap: Set DS_DNS_CONTROLLER bit if we are running RPC dnsserverAmitay Isaacs2011-12-131-0/+5
| | | | | Till we have internal DNS server which appears in services, use endpoint services to find out if we are running dns server.
* s4:python/samba/join: set msDS-Behavior-Version to '4' 2008_R2 on the nTDSA ↵Stefan Metzmacher2011-12-121-1/+1
| | | | | | | | | | | object This matches the values we set in provision. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Dec 12 19:16:13 CET 2011 on sn-devel-104
* HEIMDAL: Supply krb5_context to _krb5_internal_hmac to allow loggingAndrew Bartlett2011-12-121-6/+6
| | | | | | | | | | Without this, log messages from any abort are not printed to the samba logs. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Dec 12 14:34:16 CET 2011 on sn-devel-104
* s4-torture Do not use a fixed password for forest trust testsAndrew Bartlett2011-12-121-7/+13
| | | | | | It is much better to always use random passwords. Andrew Bartlett
* s4-torture cope with servers earlier than Windows 2008Andrew Bartlett2011-12-121-0/+5
| | | | | | Only Win2008 started to support new encryption types. Andrew Bartlett
* s4-torture Modify rpc.lsa.forest.trust test to progress further FL Win2003 R2Andrew Bartlett2011-12-121-3/+9
| | | | | | | This modification is required to pass against a domain in functional level Windows 2003 or later. Andrew Bartlett
* s4-torture: Fix commentAndrew Bartlett2011-12-121-1/+1
|
* s4-lsarpc handle more info levels in SetInfoTrustedDomain callsAndrew Bartlett2011-12-122-4/+20
| | | | | | | This uses the very helpful conversion functions written for the s3 lsa server and places these in common. Andrew Bartlett
* torture: do not reuse bindings between pipesAndrew Bartlett2011-12-121-6/+10
| | | | | | | | | This avoids connecting to the netlogon server over \pipe\lsarpc This works against windows because all pipes are implemented in the same process, but not Samba4, and relying on this is not recommended in the WSPP docs. Andrew Bartlett
* s4-lsarpc Fix segfaults found by the samba4.rpc.lsa.forest testAndrew Bartlett2011-12-121-14/+17
| | | | This allows us to move this test to knownfail from skip
* tdb2: don't use TDB2 versions of test tdb files.Rusty Russell2011-12-121-5/+2
| | | | | | | | | | | Now tdb2 handles tdb1 files, we don't need most of commit 5eecc854236f0b943aaa89e0c3a46f9fbd208ca9 which added TDB2 versions of all the testing tdbs. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au> Autobuild-User: Rusty Russell <rusty@rustcorp.com.au> Autobuild-Date: Mon Dec 12 06:33:44 CET 2011 on sn-devel-104
* s4:libcli/smb2: mark a request as error if we can't ship itStefan Metzmacher2011-12-091-0/+2
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Dec 9 15:13:11 CET 2011 on sn-devel-104
* s4:libcli/raw: mark a request as error if we can't ship itStefan Metzmacher2011-12-091-0/+2
| | | | metze
* s4:dsdb/common/util.c - test LDB result against LDB_SUCCESS as we are always ↵Matthias Dieter Wallnöfer2011-12-091-1/+1
| | | | | | | doing Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Fri Dec 9 12:00:03 CET 2011 on sn-devel-104
* s4 dns: Update requests with QCLASS != IN or ALL trigger NOTIMPLEMENTED errorsKai Blin2011-12-092-0/+17
| | | | | Autobuild-User: Kai Blin <kai@samba.org> Autobuild-Date: Fri Dec 9 03:32:28 CET 2011 on sn-devel-104
* s4 dns: Add test to prove two updates in one packet are a FORMERRKai Blin2011-12-091-0/+18
|
* s4 dns: More explicitly use the first question of an update packet onlyKai Blin2011-12-091-1/+1
|
* s4 dns: Get rid of const qualifier for prereqs, we do need to allocate thoseKai Blin2011-12-092-6/+6
|
* Revert "Install (platform-independent) python scripts to the PYTHONDIR ↵Jelmer Vernooij2011-12-091-1/+1
| | | | | | | | | | | | | | rather than PYTHONARCHDIR." This reverts commit de4b8943bfb40e2f50c9e4e2ee5d39e986317d08. PYTHONDIR and PYTHONARCHDIR are both incorrect - they're the distribution's python locations, rather than the python locations for third party applications. For the moment, using PYTHONARCHDIR seems better though, because it works around an issue on Fedora/RedHat. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Fri Dec 9 01:58:50 CET 2011 on sn-devel-104
* Add test for PEP8 - currently all errors are ignored, but we warn about them ↵Jelmer Vernooij2011-12-081-0/+50
| | | | | | | - and can ratchet if we want to. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Thu Dec 8 23:44:10 CET 2011 on sn-devel-104
* samba.drs_utils: Use new style classes and exceptions, fix formatting of ↵Jelmer Vernooij2011-12-081-13/+19
| | | | docstrings to make pydoctor happy.
* samba.kcc_utils: Fix formatting to match PEP8, make pydoctor happy.Jelmer Vernooij2011-12-081-246/+214
|
* Add tests for srvsvc python interface. Thanks Dhananjay SatheJelmer Vernooij2011-12-082-0/+70
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Thu Dec 8 04:57:52 CET 2011 on sn-devel-104
* selftest: Some extra assertions.Jelmer Vernooij2011-12-081-0/+4
|
* dbcheck: cope with objects disappearing during checkingAndrew Tridgell2011-12-082-6/+16
| | | | | Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Thu Dec 8 03:23:49 CET 2011 on sn-devel-104
* samba_kcc NTDSConnection translationDave Craft2011-12-082-218/+1292
| | | | | | | | | | | | | | | This is an advancement of samba_kcc to compute and commit the modification of a repsFrom on an NC Replica. The repsFrom is computed according to the MS tech spec for implied replicas of NTDSConnections. Proper maintenance of (DRS options, schedules, etc) from a NTDSConnection are now all present. New classes for inter-site transports, sites, and repsFrom) are now present in kcc_utils.py. Substantively this gets intra-site topology generation functional by committing the repsFrom that were computed from the DSA graph implemented in prior drops of samba_kcc Signed-off-by: Andrew Tridgell <tridge@samba.org>
* Invocation of samba_kcc from KCC taskDave Craft2011-12-083-21/+89
| | | | | | | | | Modification to periodic and explicit invocation paths of the KCC topology generation code. Managed via samba_runcmd_send() API. The samba_kcc script is invoked if (kccsrv:samba_kcc = true) appears in smb.conf Signed-off-by: Andrew Tridgell <tridge@samba.org>
* Add subreq and status to kcc_service structDave Craft2011-12-081-2/+9
| | | | | | | | The subreq and status fields in the kcc_service struct are added for execution management of the external samba_kcc python script. Signed-off-by: Andrew Tridgell <tridge@samba.org>