summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
* s4:auth/sam.c - change base context for the "tmp_ctx" context in ↵Matthias Dieter Wallnöfer2010-03-041-1/+1
| | | | | | | "authsam_expand_nested_groups" Better use the "res_sids_ctx" as base context for the "tmp_ctx" and not the long-living "sam_ctx"/"ldb" context to prevent memory leaks.
* s4:ldap.py - give the "primaryGroupToken" test a better nameMatthias Dieter Wallnöfer2010-03-041-3/+3
| | | | It tests also some other constructed attributes in a basic way.
* s4:ldap.py - add test for "tokenGroups"Matthias Dieter Wallnöfer2010-03-041-0/+44
|
* s4:operational LDB - don't accidentally "ate" search helper attributes if we ↵Matthias Dieter Wallnöfer2010-03-041-6/+14
| | | | | | | need them for more constructed attributes With this patch we delete the helper attributes at the end where all constructed attributes have already been computed.
* s4:operational LDB module - make the counters unsignedMatthias Dieter Wallnöfer2010-03-041-2/+2
| | | | No need to have signed counters here.
* s4:operational LDB - implement the "tokenGroups" constructed attributeMatthias Dieter Wallnöfer2010-03-042-1/+96
| | | | | | | | | | It contains the transitive SID closure (expand member/memberOf attributes) of a certain SAM object. The "tokenGroups" attribute never contains the SID of the object itself. References: http://msdn.microsoft.com/en-us/library/ms680275(VS.85).aspx, http://support.microsoft.com/kb/301916, MS-ADTS 3.1.1.4.5.19.
* s4:sam.c - make "authsam_expand_nested_groups" publicMatthias Dieter Wallnöfer2010-03-042-1/+7
| | | | This is needed by the "tokenGroups" work in the operational LDB module.
* s4:sam.c - cosmetic indentation fixMatthias Dieter Wallnöfer2010-03-041-2/+1
|
* s4:sam.c - change variable types to unsigned in "sids_contains_sid"Matthias Dieter Wallnöfer2010-03-041-3/+4
| | | | Should also be unsigned - no need for a signed "i" and "num_sids" here.
* s4:operational LDB module - use right memory context int ↵Matthias Dieter Wallnöfer2010-03-041-2/+2
| | | | | | "construct_primary_group_token" Use the "msg" as temporary context and not "ldb" which lives much longer.
* Refactored ACL python testsNadezhda Ivanova2010-03-041-441/+256
| | | | | Made each type into a separate class to be easily run individually, removed code duplication
* s4:provision - use the new "interface_ips" python call to detect the right ↵Matthias Dieter Wallnöfer2010-03-041-8/+8
| | | | | | | | | | | host IPv4 address Inform the user when there are more possibilities (so he can check for the right address and otherwise he is able to do an immediate reprovision) and no possibility at all (then we fall back to the loopback address "127.0.0.1" - this is thought for testing purposes). I think this should be enough for closing bug #5484.
* s4:ldif_handlers - Use "unsigned int" for counting purposesMatthias Dieter Wallnöfer2010-03-041-4/+4
| | | | | | I changed "uint32_t" to "unsigned int" since the LDB specification prescrives "unsigned (int)" for counter variables (number of attributes, number of values...).
* s4:samdb.c - Make it signed-safeMatthias Dieter Wallnöfer2010-03-031-2/+2
| | | | | | Use an unsigned argument for the numbers of groups and the counter "i" since the function is called only by "auth_generate_session_info" with an unsigned number of groups argument.
* s4:srvsvc RPC - "srvsvc_create_ntvfs_connect"Matthias Dieter Wallnöfer2010-03-031-1/+1
| | | | | | Previous commit was incomplete. The "service" parameter in the "tcon" structure should point to "scfg->name". I'm not sure if "share" is right but the first was used before commit f390daef475126b4ff5a3d0ffd2babbd87d4c22b.
* s4:srvsvc RPC - fix up the "ntvfs_connect" in "srvsvc_create_ntvfs_connect"Matthias Dieter Wallnöfer2010-03-031-3/+5
| | | | | This should be the right fix (set the service name in the tcon union to the share name/path). That should be the solution for bug #6784.
* s4:torture/rpc/samr - Fix up SAMR-USERS testMatthias Dieter Wallnöfer2010-03-031-10/+22
| | | | | "QueryDomainInfo" returns only global groups, "QueryDisplayInfo" also universal ones. Consider MS-SAMR 3.1.5.5.1.1 and 3.1.5.3.1.
* s4:torture/rpc/samr - enhance the "EnumDomainGroups" test regarding ↵Matthias Dieter Wallnöfer2010-03-031-0/+15
| | | | | | | | | | | | | | | universal groups Find the "Enterprise Admins" group which does exist on s4 and Windows directories and is always per default universal. Test this only when the target is set to s4 (s3 deployments don't contain this group). If the number of returned objects is "0" (count) then we are likely testing the builtin domain of an AD deployment.Then we ignore the inexistent "Enterprise Admins" group. I didn't enhance the test for "QueryDomainInfo" since this does itself a comparison of all returned objects with the "EnumDomainGroups" call. Therefore if the latter passes, and the "QueryDomainInfo" test passes also the "QueryDomainInfo" call is okay regarding groups.
* s4:dcesrv_samr - Also "OpenGroup" needs to support universal groupsMatthias Dieter Wallnöfer2010-03-031-2/+3
|
* s4:dcesrv_samr - Fix up "EnumDomainGroups" and "QueryDisplayInfo" callsMatthias Dieter Wallnöfer2010-03-031-3/+6
| | | | | We need to look for both global and universal group types when querying them. Found by ekacnet (http://lists.samba.org/archive/samba-technical/2010-March/069777.html).
* Fix typo in comments.Karolin Seeger2010-03-031-2/+2
|
* dns: make dns update script use unbuffered IOAndrew Tridgell2010-03-031-0/+4
| | | | Otherwise we can lose debug output when a timeout happens
* s4-posix: allow change ownership of files if the user has the right privilegesAndrew Tridgell2010-03-031-2/+21
| | | | | | | | | When a user has SEC_PRIV_TAKE_OWNERSHIP or SEC_PRIV_RESTORE they have permission to change the ownership of a file. This should fix bug 6987 Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-build: fix SMB_LIBRARY and change its name so it didn't collide with s3 oneMatthieu Patou2010-03-031-4/+4
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4-winrepl: Migrated the wins replication server to tsocket.Andreas Schneider2010-03-034-141/+314
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4:move the sddl code down to the top levelMichael Adam2010-03-033-627/+2
| | | | Michael
* s4/ildap: fine tune ildb_callback()Kamen Mazdrashki2010-03-031-3/+3
| | | | | | | | | | Actually ildb_context pointer is not supposed to be valid after calling ildb_request_done(). This is due to the fact that when calling ildb_request_done() caller will (most probably) free any locally built ldap_request objects - thus rendering ildb_context invalid. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-smbtorture: fix WINBIND-STRUCT assumptions about getpwent() for s3.Günther Deschner2010-03-021-5/+16
| | | | | | | | | In samba3 it is not an error when no users are returned in getpwent() calls (e.g. on a DC w/o interdomain trusts). Kai, please check. Guenther
* LDB:NSS - make LDB "signed-safe" on counter variablesMatthias Dieter Wallnöfer2010-03-021-2/+2
| | | | | | | | | "i" needs to be unsigned on both places since it counts till a "count" variable of a "struct ldb_result" object which itself is unsigned. I see counting variables much better as "unsigned" since in most cases we don't use negative values at all. We've only to be careful on binary searches and downto counts regarding them.
* s4:echo RPC - make this one "signed-safe"Matthias Dieter Wallnöfer2010-03-021-1/+1
| | | | | "i" needs to be unsigned here since it counts until "r->in.len" which itself is unsigned and not signed.
* s4:provision - Moved default FDS SASL mappings deletion from post_setup() to ↵Endi S. Dewata2010-03-022-7/+11
| | | | | | init(). Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:provision - Moved setup_db_config() into OpenLDAPBackend class.Endi S. Dewata2010-03-021-16/+16
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:provision - Moved backend-specific variables into backend class.Endi S. Dewata2010-03-022-75/+60
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:provision - Use netbios name for FDS instance name.Endi S. Dewata2010-03-022-15/+17
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-libcli: Added NULL handlers for DSDB_CONTROL_DN_STORAGE_FORMAT_OID and ↵Endi S. Dewata2010-03-021-0/+4
| | | | | | LDB_CONTROL_AS_SYSTEM_OID Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:srvsvc RPC - revert one unsigned integer "i" back to signedMatthias Dieter Wallnöfer2010-03-011-1/+1
| | | | | | This is needed since this particular "i" counts until "count" which itself is signed. "count" is set through a signed integer variable parameter from the "share_list_all" call.
* s4:RPC-ECHO: don't ignore errors in the Sleep test now that we support async ↵Stefan Metzmacher2010-03-011-3/+3
| | | | | | rpc over ncacn_np metze
* s4:rpc_server/remote: do async callsStefan Metzmacher2010-03-011-6/+42
| | | | metze
* s4:srvsvc RPC - make this one "signed-safe"Matthias Dieter Wallnöfer2010-03-011-19/+20
|
* s4:unixinfo RPC - make this one "signed-safe"Matthias Dieter Wallnöfer2010-03-011-1/+1
|
* s4:spoolss RPC - make this one "signed-safe"Matthias Dieter Wallnöfer2010-03-011-1/+1
|
* s4:remote RPC - make this one "signed-safe"Matthias Dieter Wallnöfer2010-03-011-2/+2
|
* s4:epmapper RPC - make this one "signed-safe"Matthias Dieter Wallnöfer2010-03-011-2/+2
|
* s4:LDB - cosmetic fix for a "for" loopMatthias Dieter Wallnöfer2010-03-011-1/+1
|
* Fix the build, add filtered subunit runner.Jelmer Vernooij2010-03-012-1/+5
|
* Add testrepository configuration.Jelmer Vernooij2010-03-011-0/+3
|
* More formatting fixes, pointed out by pylint.Jelmer Vernooij2010-03-018-44/+51
|
* s4:RPC-NETLOGON: remove useless rpc callbackStefan Metzmacher2010-03-011-18/+1
| | | | | | If we got a failure from one request we bail out early. metze
* s4:RPC-ECHO: don't look at the internals of 'struct rpc_request'Stefan Metzmacher2010-03-011-4/+14
| | | | metze
* s4:libnet_become_dc: don't look at the internals of 'struct rpc_request'Stefan Metzmacher2010-03-011-7/+21
| | | | metze