summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
...
* s4-dsdb: cope with cracknames of form dnsdomain\accountAndrew Tridgell2010-08-171-2/+8
| | | | | | this is used by w2k8r2 when doing a RODC dcpromo Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: set LDB_FLAG_INTERNAL_DISABLE_VALIDATION for msDS-SecondaryKrbTgtNumberAndrew Tridgell2010-08-171-1/+8
| | | | | | | | | msDS-SecondaryKrbTgtNumber is setup with a value that is outside the range allowed by the schema (the schema has rangeLower==rangeUpper==65536). We need to mark this element as being internally generated to avoid the range checks Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-ldb: added LDB_FLAG_INTERNAL_DISABLE_VALIDATIONAndrew Tridgell2010-08-172-7/+15
| | | | | | | | When this flag is set on an element in an add/modify request then the normal validate_ldb() call that checks the element against schema constraints is disabled Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-ldb: added LDB_FLAG_INTERNAL_MASKAndrew Tridgell2010-08-172-0/+31
| | | | | | | This ensures that internal bits for the element flags in add/modify requests are not set via the ldb API Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-ldb: use LDB_FLAG_MOD_TYPE() to extract element type from messagesAndrew Tridgell2010-08-178-23/+28
| | | | | | | | | | | | The flags field of message elements is part of a set of flags. We had LDB_FLAG_MOD_MASK for extracting the type, but it was only rarely being used (only 1 call used it correctly). This adds LDB_FLAG_MOD_MASK() to make it more obvious what is going on. This will allow us to use some of the other flags bits for internal markers on elements Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: support LDB_CONTROL_RODC_DCPROMO_OID for nTDSDSA addAndrew Tridgell2010-08-171-1/+24
| | | | | | this control disables the system only check for nTDSDSA add operations Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: fixed test for LDB_CONTROL_RODC_DCPROMO_OIDAndrew Tridgell2010-08-171-1/+1
| | | | the ldb_msg_add_fmt() call returns LDB_SUCCESS on success
* s4-ldapserver: support controls on ldap add and renameAndrew Tridgell2010-08-171-10/+12
| | | | | | we need to pass the controls down to the add and rename ldb operations Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: added support for LDB_CONTROL_RODC_DCPROMO_OIDAndrew Tridgell2010-08-173-0/+76
| | | | | | | | | | | | this control adds a unique msDS-SecondaryKrbTgtNumber attribute to a user object. There is some 'interesting' interaction with the rangeLower and rangeUpper attributes and this add. We don't implementat rangeLower/rangeUpper yet, but when we do we'll need an override for this control (or be careful about module ordering). Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-ldap: use common functions for ldap flag controls encode/decodeAndrew Tridgell2010-08-171-163/+11
| | | | | | | many controls are simple present/not-present flags, and don't need their own parsers Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* build fixBrad Hards2010-08-171-1/+5
|
* s4-ldb: test the 'displayName=a,b' bugAndrew Tridgell2010-08-171-0/+6
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s3-provision: cope with the policy directory already existingAndrew Tridgell2010-08-171-3/+8
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-ldb: fixed the ldb 'displayName=a,b' indexing bugAndrew Tridgell2010-08-171-2/+4
| | | | | | | | | the problem was the inconsistency between the key form of DNs between the itdb used for indexing and the on disk form Thanks to Matthieu Patou for finding this bug! Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-ldb: add some comments explaining the ltdb_index_idxptr() functionAndrew Tridgell2010-08-171-0/+8
| | | | | | this function copes with alignment sensitive CPUs Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:samdb_set_password_sid - fix commentMatthias Dieter Wallnöfer2010-08-161-1/+2
| | | | Add more possible result NTSTATUS codes
* s3-auth: Remove docs about obsolete 'update encrypted' option.Andreas Schneider2010-08-161-1/+0
|
* Revert "s4:RPC-SPOOLSS-NOTIFY: skip test_RFFPCNEx() for now, as the test is ↵Günther Deschner2010-08-161-9/+0
| | | | | | broken" This reverts commit 8ca8250443319e0f19f05aab2014118fd03eaa8a.
* s4:samdb_set_password - fix formattingMatthias Dieter Wallnöfer2010-08-151-1/+2
| | | | (Sorry, I've overseen this)
* s4:passwords.py - proof the most important extended error codesMatthias Dieter Wallnöfer2010-08-151-8/+17
|
* s4:samdb_set_password - implement the extended LDAP error code detectionMatthias Dieter Wallnöfer2010-08-151-9/+17
|
* s4:password_hash LDB module - introduce the extended LDAP error codes on the ↵Matthias Dieter Wallnöfer2010-08-151-43/+72
| | | | important failure cases
* s4:password_hash LDB module - support this new password set syntaxMatthias Dieter Wallnöfer2010-08-151-2/+10
|
* s4:passwords.py - another special password testMatthias Dieter Wallnöfer2010-08-151-3/+23
| | | | This looks like a password change but it's rather a password set operation.
* s4:password_hash LDB module - allow to compare against both NT and LM hashes ↵Matthias Dieter Wallnöfer2010-08-151-10/+1
| | | | | | on password change operations This is to match the SAMR password change behaviour.
* s4:ldap_backend.c - Windows returns WERROR codes in majuscule HEX formatMatthias Dieter Wallnöfer2010-08-151-1/+1
|
* s4:ldap_backend.c - map error codes - add a change which allows custom ↵Matthias Dieter Wallnöfer2010-08-151-0/+13
| | | | | | | | | | WERROR codes This is strictly needed by my recent passwords work, since I want to remove most of the password change stuff in "samr_password.c". Since AD gives us CONSTRAINT_VIOLATION on all change problems I cannot distinguish on the SAMR level which the real cause was about. Therefore I need the extended WERROR codes here.
* s4:subtree_rename.c - relax the checks when requestedMatthias Dieter Wallnöfer2010-08-151-0/+5
| | | | (Needed by upgradeprovision for example)
* s4-test: Add drs.rpc.msDSIntId test to knownfail testsKamen Mazdrashki2010-08-151-0/+1
|
* s4-test: Run all DRS-RPC.* tests in ncacn_ip_tcp_tests tests groupKamen Mazdrashki2010-08-151-3/+3
| | | | Andrew, please check.
* s4-drs-test: Make the two DRS test suite a top-level test suitesKamen Mazdrashki2010-08-151-16/+21
| | | | so that test cases gets visible with "smbtorture --list"
* s4:ldap_backend.c - fix a DS error code after WERROR changeMatthias Dieter Wallnöfer2010-08-141-1/+1
|
* s4:libnet - free the "c" context also on error conditionsMatthias Dieter Wallnöfer2010-08-142-1/+3
| | | | (and if it's NULL then "talloc_free" does ignore it)
* s4:samdb_set_password - return "NT_STATUS_WRONG_PASSWORD" when a user ↵Matthias Dieter Wallnöfer2010-08-141-0/+2
| | | | | | account doesn't exist This is for the (SAMR) account detection protection mechanism.
* s4:password_hash LDB module - improve an error messageMatthias Dieter Wallnöfer2010-08-141-2/+2
|
* s4:password_hash LDB module - implement the SAMR behaviour when checking old ↵Matthias Dieter Wallnöfer2010-08-141-5/+16
| | | | | | passwords Sooner or later this module should take over all password change actions.
* s4:password_hash LDB module - fix wrong error codesMatthias Dieter Wallnöfer2010-08-141-4/+4
| | | | To match the passwords.py test
* s4:passwords.py - test the error code when there doesn't exist any password yetMatthias Dieter Wallnöfer2010-08-141-4/+24
| | | | After the creation of a user object we don't have any password yet.
* s4:passwords.py - perform testing of wrong old passwords on change operationsMatthias Dieter Wallnöfer2010-08-141-0/+44
|
* s4:torture/rpc/samr.c - fix a wrong torture error messageMatthias Dieter Wallnöfer2010-08-141-1/+1
|
* s4:auth Move struct auth_usersupplied_info to a common locationAndrew Bartlett2010-08-146-54/+9
| | | | | | | | | This also changes the calling convention slightly - we should always allocate this with talloc_zero() to allow some elements to be optional. Some elements may only make sense in Samba3, which I hope will use this common structure. Andrew Bartlett
* s4-build: fixed library name in dcerpc_server.pc.inAndrew Tridgell2010-08-141-1/+1
| | | | Thanks to Metze for spotting this
* s4: remove REMOVE_MAPPING from wb_samba3_protocolMichael Adam2010-08-141-2/+0
| | | | Michael
* s4: remove SET_MAPPING from wb_samba3_protocolMichael Adam2010-08-141-2/+0
| | | | Michael
* s4: remove SET_HWM and SET_DUAL_HWM from wb_samba3_protocolMichael Adam2010-08-141-2/+0
| | | | Michael
* s4:librpc/rpc: make struct dcerpc_binding_handle privateStefan Metzmacher2010-08-121-10/+0
| | | | metze
* s4:librpc/rpc: add dcerpc_binding_handle dcerpc_pipe backendStefan Metzmacher2010-08-123-4/+411
| | | | metze
* librpc/rpc: add dcerpc_binding_handle abstrationStefan Metzmacher2010-08-122-3/+118
| | | | metze
* s4:librpc/rpc: fix dcerpc_log_packet() prototypeStefan Metzmacher2010-08-122-6/+6
| | | | metze
* s4:librpc/rpc: autodetect the need of async call logicStefan Metzmacher2010-08-122-8/+6
| | | | metze