summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
* s4-smbtorture: restructure documentname handling in spoolss test a bit.Günther Deschner2011-04-201-3/+4
| | | | Guenther
* libcli/auth Move PAC parsing and verification in common.Andrew Bartlett2011-04-204-350/+28
| | | | | | | | This uses the source3 PAC code (originally from Samba4) with some small changes to restore functionality needed by the torture tests, and to have a common API. Andrew Bartlett
* selftest: Don't specify SELFTEST_TARGET as an env variableAndrew Bartlett2011-04-192-2/+1
| | | | | | | It is much more reliable to specify it as a direct parameter, and this is needed for the combined 'make test'. Andrew Bartlett
* s4-selftest Rename Samba4 'member' test environment to s4memberAndrew Bartlett2011-04-191-14/+14
| | | | | | This will avoid a conflict with the s3 'member' environment. Andrew Bartlett
* s4-selftest: Stop creating netbios aliases everywhereAndrew Bartlett2011-04-191-1/+0
| | | | | | | | | | This reduces some of the clutter when we have quite so many server configurations starting. The one case that actually needs an alias (dc environment for the test_nmblookup.sh test) will still keep it. Andrew Bartlett
* samba-tool: fix machinepw command so that we use the full path to the secret ↵Matthieu Patou2011-04-171-3/+6
| | | | | | | database and raise an error if secret can't be found Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sun Apr 17 13:12:27 CEST 2011 on sn-devel-104
* s4-heimdal: Allow any kvno to match when searching the keytab.Andrew Bartlett2011-04-161-2/+1
| | | | | | | | Windows does not use a KVNO when it checks it's passwords, and MIT doesn't check the KVNO when no acceptor identity is specified (looping over all keys in the keytab). Andrew Bartlett
* s4-heimdal_build: Add extra HAVE defines needed for the source3 krb5 codeAndrew Bartlett2011-04-161-0/+3
|
* selftest Remove selftest of the test subsystemAndrew Bartlett2011-04-161-1/+0
| | | | | | | The intereactions between selftest.pl and the target are now too complex to unit test like this any more. Andrew Bartlett
* selftest: Move Samba4 selftest wscript to the top levelAndrew Bartlett2011-04-161-201/+0
|
* selftest: Start using the binary mapping at the python layer as wellAndrew Bartlett2011-04-162-2/+2
|
* selftest: Remove duplication between BUILDIR and BINDIRAndrew Bartlett2011-04-169-9/+9
| | | | | | Just have BINDIR, and have it default to ./bin Andrew Bartlett
* s4-dsdb: Add more information on why we don't check the SD controlMatthieu Patou2011-04-151-0/+5
| | | | | | | Signed-off-by: Nadezhda Ivanova <nivanova@samba.org> Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Fri Apr 15 16:16:27 CEST 2011 on sn-devel-104
* s4-dsdb: If current attribute list is empty use the one from the requestMatthieu Patou2011-04-151-1/+1
| | | | | | This will avoid overwritting attribute list made by upper modules. Signed-off-by: Nadezhda Ivanova <nivanova@samba.org>
* s3-auth Rename smb_krb5_open_keytab to avoid a conflict with s3Andrew Bartlett2011-04-142-9/+9
| | | | | | The s3 function doesn't use the keytab_container concept. Andrew Bartlett
* libcli/auth Move krb5 wrapper functions from s3 into commonAndrew Bartlett2011-04-144-113/+79
| | | | | | | | | This requires a small rework of the build system to ensure that the correct #define statements are made in both the s3 and top level builds. We now define the various HAVE_ macros in config.h at all times, using heimdal_build/wscript_configure when that is in use. Andrew Bartlett
* s4/libcli: do not use netbios name in NTLMv2 blobs w/o spnegoChristian Ambach2011-04-141-4/+22
| | | | | | | | | | | | | | | | | | | I have seen domain controllers rejecting NTLMv2 blobs presented to NetrLogonSamLogonEx with LOGON_FAILURE when the MsvAvNbComputerName was a FQDN or an IP address I have not seen this field in NTLMv2 blobs send by Windows clients when extended security was not available, so omitting the field makes Samba similar to Windows. This prevents errors with some smbtorture testcases that disable spnego and when a target name is specified that is not a valid netbios name. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Apr 14 02:19:08 CEST 2011 on sn-devel-104
* s4/libcli: do not announce NT error code support when it is disabledChristian Ambach2011-04-141-1/+4
| | | | | | | | when the support of NT error codes has been disabled in the options of a CLI connection, support for them should not be announced during protocol negotiation Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-test: added a test for E_deshash()Andrew Tridgell2011-04-133-1/+72
| | | | | | | | | | this particularly checks the boundary conditions near passwords of length 14 characters Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Apr 13 07:31:55 CEST 2011 on sn-devel-104
* lib/util/charset Add many more charset testsAndrew Bartlett2011-04-131-0/+2
| | | | | | | | | This confirms that the behaviour of the convert_string() API (with the process-wide iconv handle). Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* lib/util/charset Rename convert_string test to allow a 'non_handle' testAndrew Bartlett2011-04-131-1/+1
| | | | | | | | | A future commit will test (with a subset of tests) the varient of this function without _handle. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4/torture Fix calls to charcnv functions to always supply converted_sizeAndrew Bartlett2011-04-132-2/+3
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/ldap pull LIBCLI_LDAP_MESSAGE and LIBCLI_LDAP_NDR into a libraryAndrew Bartlett2011-04-132-3/+3
| | | | | | This reduces symbol duplication Andrew Bartlett
* ldb:ldb/common/ldb_modules.c - change the request counter type to be "unsigned"Matthias Dieter Wallnöfer2011-04-081-1/+1
| | | | | | | | | | Just for consistency since all other LDB counters are unsigned as well. And also the debug output specifier has been chosen to be "%u" - so it really should be unsigned. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Fri Apr 8 09:17:47 CEST 2011 on sn-devel-104
* ldb:ldb/common/ldb_modules.c - trivial - fix integer output specifiersMatthias Dieter Wallnöfer2011-04-081-2/+2
|
* ldb:ldb_msg.c - make "ldb_msg_find_attr_as_*" more robust against invalid valuesMatthias Dieter Wallnöfer2011-04-071-19/+106
| | | | | | | | | | | | | - Integer handling was modeled after validate code from "schema_syntax.c". - Double handling was modeled similar, but with a dynamic buffer. I don't know if there is a maximum literal length for double values but an allocation shouldn't a problem here since doubles are rare. - String handlind is enhanced with a terminating "0" test for safety. Reviewed-by: abartlet + metze Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Thu Apr 7 16:38:57 CEST 2011 on sn-devel-104
* ldb:ldb_msg_check_sanity - clean it up from unneeded stuffMatthias Dieter Wallnöfer2011-04-071-4/+0
|
* dsdb:schema/schema_syntax.c - correctly check error code of ↵Matthias Dieter Wallnöfer2011-04-071-2/+1
| | | | | | | | "ldb_string_utc_to_time" This one doesn't set ERRNO. An error happens if the result is "0". Reviewed-by: abartlet
* dsdb:schema/schema_syntax.c - add some empty value checks on validate functionsMatthias Dieter Wallnöfer2011-04-071-0/+9
| | | | | | They are needed since the check in "ldb_msg_sanity_check" will be removed. Reviewed-by: abartlet
* s4:objectclass LDB module - "ldb_msg_sanity_check" call not really neededMatthias Dieter Wallnöfer2011-04-071-5/+0
| | | | | | | | | | | This call should only be performed at the beginning of a request. "ldb_msg_sanity_check" checks for DN validity (which should already have been done at the beginning of the request) and empty attributes (which should be done by the "objectclass_attrs" LDB module). Hence it is superflous here. Reviewed-by: abartlet
* ldb:ldbadd/modify tool - return error code when at least one operation has ↵Matthias Dieter Wallnöfer2011-04-072-5/+8
| | | | | | | | | failed This is required to better detect failures and should raise the compatiblity to "ldapadd"/"ldapmodify". Reviewed-by: abartlet
* ldb:tests - "init.ldif" - deactivate empty "seeAlso" attributeMatthias Dieter Wallnöfer2011-04-071-1/+2
|
* ldb:ldb/common/ldb_modules.c - always use LDB error codes if possibleMatthias Dieter Wallnöfer2011-04-071-6/+7
| | | | | | | The callers do compare against LDB error codes - hence don't give back "-1". Reviewed-by: Tridge + abartlet
* ldb:common/*.c - check for some OOM conditionsMatthias Dieter Wallnöfer2011-04-072-0/+7
| | | | Reviewed-by: abartlet
* s4:objectclass LDB module - fix a comment - add a ")"Matthias Dieter Wallnöfer2011-04-071-1/+1
| | | | Reviewed-by: abartlet
* s4-smbtorture: fix lsa forest trust test.Günther Deschner2011-04-071-1/+1
| | | | | | | | | | | | | lsa_lsaRSetForestTrustInformation takes a policy handle obtained from lsaopenpolicy/lsaopenpolicy2 and not a trusted domain handle (MS-LSAD 3.1.4.7.16 LsarSetForestTrustInformation (Opnum 74)). Sumit, please check. Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Thu Apr 7 14:52:52 CEST 2011 on sn-devel-104
* s4-samba_dnsupate Fix syntax errorAndrew Bartlett2011-04-071-2/+1
| | | | | | | | | | This particular sub-part of the script isn't tested in 'make test' due to it making real changes to DNS. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Apr 7 08:51:11 CEST 2011 on sn-devel-104
* samba_dnsupdate: Don't use subprocess.check_call, it isn't in python 2.4Andrew Bartlett2011-04-071-1/+8
| | | | RHEL5 and clones use python 2.5
* ldb: fixed --paged option in ldb toolsAndrew Tridgell2011-04-072-2/+2
| | | | | | we were sometimes using 'paged_result' and sometimes using 'paged_results'. The latter seemed to be more common, so I changed the two places that used the 'paged_result' string to 'paged_results'
* s4:dsdb/repl_meta_data: update replPropertyMetaData on originating renamesStefan Metzmacher2011-04-061-6/+122
| | | | | | | | | | | The version of the "name" attribute needs to change even if the value is the same. This also normalizes the rdn attribute name based on the schema. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Apr 6 19:55:50 CEST 2011 on sn-devel-104
* s4:dsdb/repl_meta_data: allow passing an explicit attribute list to ↵Stefan Metzmacher2011-04-061-4/+15
| | | | | | | | replmd_update_rpmd() This will be used for renames. metze
* s4:dsdb/repl_meta_data: normalize the rdn attribute name based on the schemaStefan Metzmacher2011-04-061-5/+15
| | | | metze
* s4-test: fixed a problem with very verbose NDR debugAndrew Tridgell2011-04-063-4/+4
| | | | | | | | lp.get("log level") returns a string, not an integer. It needs to be cast to an integer for comparison with a number Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Apr 6 08:58:05 CEST 2011 on sn-devel-104
* lib/crypto: rename the SHA256_ functions to samba_SHA256_Andrew Tridgell2011-04-061-3/+3
| | | | | | | this prevents a symbol duplication with the openssl library, which may be linked in via a secondary library dependency Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* tstream: make npa_tstream a private libraryAndrew Tridgell2011-04-062-2/+2
| | | | | | this prevents symbol duplication of the npa_tstream symbols Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* lib: make asn1_util a private libraryAndrew Tridgell2011-04-063-3/+3
| | | | | | | this prevents symbol duplication of the asn1 symbols in the service and ntvfs subsystems Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4: Update/Set local USN only on attribute that have been modified/createdMatthieu Patou2011-04-061-9/+15
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* kdc: always ldb escape the realmAndrew Bartlett2011-04-051-1/+11
|
* auth: Move auth_session_info into IDLAndrew Bartlett2011-04-057-106/+103
| | | | | | | | | | This changes auth_session_info_transport to just be a wrapper, rather than a copy that has to be kept in sync. As auth_session_info was already wrapped in python, this required changes to the existing pyauth wrapper and it's users. Andrew Bartlett
* s4-auth: Always talloc_zero() the struct auth_session_infoAndrew Bartlett2011-04-051-1/+1
|