summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
* ldb:ldb_cache.c - fix memory contexts and memory leaksMatthias Dieter Wallnöfer2010-10-201-3/+4
|
* ldb:ldb_tdb submodule - use "ldb_msg_new" where appropriateMatthias Dieter Wallnöfer2010-10-202-12/+12
| | | | It is saver than a manual "talloc".
* ldb:ldb_pack.c - remove superflous "message->elements = NULL"Matthias Dieter Wallnöfer2010-10-201-1/+0
| | | | It's already marked at this at the beginning of the call.
* s4-mailslot: fixed handling of random collision in temporary mailslot namesAndrew Tridgell2010-10-191-1/+1
| | | | | | | | | we could get occasional failures in the samba4.nbt.dgram test if we happened to get a collision in the random mailslot names. Thanks to Jeremy for spotting this! (his autobuild failed) Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4:nbt_server - fix a LDB counter typeMatthias Dieter Wallnöfer2010-10-191-1/+1
| | | | | Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue Oct 19 14:05:13 UTC 2010 on sn-devel-104
* s4-dsdb Reset the error string after 'expected' errors.Andrew Bartlett2010-10-191-0/+1
| | | | | | | | | | This helps ensure that we don't get confusing error strings in the logs on other error cases. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 19 12:16:07 UTC 2010 on sn-devel-104
* s4-dsdb Add module to send only 'simple' DNs to OpenLDAP backendsAndrew Bartlett2010-10-193-2/+83
| | | | | | | | | If we send the full extended DN, then we risk standards-complient LDAP servers rejecting it as invalid. Only the DN portion is needed to resolve the record in any case, and any SID or GUID componenets have already been evaluated into the DN. Andrew Bartlett
* s4-dsdb Allow LDB_ERR_INVALID_DN_SYNTAX in dsdb_load_partition_usnAndrew Bartlett2010-10-191-1/+1
| | | | | | | | This will happen on an OpenLDAP backend, because @ records are invalid in LDAP. We don't have these sequence numbers in this case. Andrew Bartlett
* s4-auth Add DEBUG() for invalid DNs and errors expanding user groups.Andrew Bartlett2010-10-191-0/+5
| | | | | | | Against the OpenLDAP backend, I currently get failures. This makes it possible to debug those failures. Andrew Bartlett
* ldb:"ldb_schema_attribute_by_name_internal" - support the whole unsigned int ↵Matthias Dieter Wallnöfer2010-10-191-7/+5
| | | | | | | | | | | | range Commit 8556602b048e825b35df314d6865f997823ec2bb wasn't quite right - it only restored the functionality on the positive integer range. This one however should now really support the whole unsigned range. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue Oct 19 10:52:08 UTC 2010 on sn-devel-104
* s4:dsdb/schema/schema_init.c - remove a duplicated "talloc_free"Matthias Dieter Wallnöfer2010-10-191-1/+0
|
* s4:samdb.py - remove a pointless commentMatthias Dieter Wallnöfer2010-10-191-1/+0
| | | | | | | | We are only looking for the default DN - but the method name already tells us this. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue Oct 19 10:03:12 UTC 2010 on sn-devel-104
* s4:samdb.py - use a more standard way to get to the domain realm/dns nameMatthias Dieter Wallnöfer2010-10-191-1/+2
| | | | We do always use the canonical name as a base if we don't have it around yet.
* Addition of userPrincipalName attribute when new account is createdLukasz Zalewski2010-10-191-0/+2
|
* s4-gensec Don't give more to sasl_encode() than it will permitAndrew Bartlett2010-10-191-3/+10
| | | | | | | | | We need to ask the library how much data to pass in at any time. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 19 08:37:45 UTC 2010 on sn-devel-104
* s4-gensec Don't upgrade all DIGEST-MD5 connections to sealAndrew Bartlett2010-10-191-12/+21
| | | | | | | | The issue here is that when props.max_ssf = UINT_MAX was always set, as was the maxbufsize, and the connection would always be upgraded, regardless of the callers wishes. Andrew Bartlett
* s4-provisionbackend Allow a fixed URI to be specified for LDAP backendAndrew Bartlett2010-10-193-54/+72
| | | | | | | | This is added to make the 'existing' LDAP backend class more useful, and to allow debuging of our OpenLDAP backend class with wireshark, by forcing the traffic over loopback TCP, which is much easier to sniff. Andrew Bartlett
* s4-provision Remove serverdn parameter from Schema()Andrew Bartlett2010-10-194-14/+7
| | | | | | | We don't need to know the server DN here any more, and it makes no sense for many callers. Andrew Bartlett
* s4-dsdb: register the DCPROMO_OID control with the rootdseAndrew Tridgell2010-10-191-0/+7
| | | | | | | this is needed to allow it over ldap Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Tue Oct 19 04:44:23 UTC 2010 on sn-devel-104
* s4-ldb: increase minor version for 2 new functionsAndrew Tridgell2010-10-192-1/+229
| | | | | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Tue Oct 19 01:27:44 UTC 2010 on sn-devel-104
* s4-ldap: mark all ldap:// requests as untrustedAndrew Tridgell2010-10-191-0/+21
| | | | | | this allows the rootdse module to filter unregistered controls Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: filter unregistered controls in the rootdse moduleAndrew Tridgell2010-10-191-19/+84
| | | | | | | | | | | if we get an unregistered control in the rootdse module, and the request comes from an untrusted source (eg. ldap://) then we need to: 1) filter the control out if it is marked non-critical 2) give an error if it is marked critical Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-ldb: cope with NULL oid in controlsAndrew Tridgell2010-10-192-9/+11
| | | | | | | the ldap server will mark a control with a NULL oid in order to remove it. This prevents a O(n^2) cost in control handling. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-ldb: added --relax cmdline optionAndrew Tridgell2010-10-191-0/+9
| | | | this adds the relax control
* s4-ldb: added ldb_req_mark_untrusted() and ldb_req_is_untrusted()Andrew Tridgell2010-10-193-0/+30
| | | | | | | | these will be used to determine if a ldb request comes from an untrusted source. We want requests over ldap:// to be marked untrusted so we can reject unregistered controls Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* waf: put -Wl,-no-undefined only in the linker flags, not when compiling CAndrew Tridgell2010-10-191-3/+3
|
* s4:ldap_server - use error code constantMatthias Dieter Wallnöfer2010-10-181-1/+1
| | | | | Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Oct 18 20:32:40 UTC 2010 on sn-devel-104
* ldb: always return PROTOCOL_ERROR if an operation is unsupportedMatthias Dieter Wallnöfer2010-10-184-4/+4
| | | | That's exactly the behaviour of various LDAP servers.
* selftest: use full path for selftest.pl instead of relative pathsMatthieu Patou2010-10-181-1/+2
| | | | | | | | FindBin on solaris8 with perl 5.04 has problem to get the path of the called script if the script is called with a relative path. Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Mon Oct 18 19:50:03 UTC 2010 on sn-devel-104
* ldb:"ldb_schema_attribute_by_name_internal" - switch back to 32bit countersMatthias Dieter Wallnöfer2010-10-181-4/+5
| | | | | | | | Use the signed counter for the binary search but use an unsigned one for accessing the entry. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Oct 18 19:01:31 UTC 2010 on sn-devel-104
* ldb:ldb_tdb.c - fix up counter variablesMatthias Dieter Wallnöfer2010-10-181-5/+8
| | | | | | "find_element" returns an "int" since there is also the possibility that a certain element doesn't exist - then "-1" is returned. But beside this exception treat all other return values as unsigned.
* ldb:ldb_tdb.c - improve the error outputsMatthias Dieter Wallnöfer2010-10-181-13/+25
| | | | | | - Fix indentation - Include always the failing DN - Reorder the outputs to make them consistent
* s4:"util_ldb" - remove some really unused dependanciesMatthias Dieter Wallnöfer2010-10-1811-11/+4
|
* libcli/nbt: convert nbt_name_register_bcast_send/recv to tevent_reqStefan Metzmacher2010-10-181-6/+7
| | | | metze
* s4:nbt_server/register: add a nbtd_register_name_stateStefan Metzmacher2010-10-181-21/+36
| | | | metze
* libcli/nbt: convert nbt_name_register_wins_send/recv to tevent_reqStefan Metzmacher2010-10-181-6/+7
| | | | metze
* s4:nbt_server/winsclient: add a nbtd_wins_register_stateStefan Metzmacher2010-10-181-34/+48
| | | | | | | We now keep the nbtd_wins_register_state around between nbt_name_register_wins_send() and nbt_name_register_wins_recv() metze
* libcli/nbt: convert nbt_name_refresh_wins_send/recv to tevent_reqStefan Metzmacher2010-10-181-6/+6
| | | | metze
* s4:nbt_server/winsclient: add a nbtd_wins_refresh_stateStefan Metzmacher2010-10-181-42/+50
| | | | | | | We now keep the nbtd_wins_refresh_state around between nbt_name_refresh_wins_send() and nbt_name_refresh_wins_recv() metze
* s4:nbt_server/wins: fix compiler warningsStefan Metzmacher2010-10-181-0/+1
| | | | metze
* s4:libcli/util: add pipe related NT_STATUS_RPC_* codesStefan Metzmacher2010-10-181-0/+6
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Oct 18 13:50:55 UTC 2010 on sn-devel-104
* s4-gensec: Add dependency on com_err to GENSEC_KRB5.Andreas Schneider2010-10-181-1/+1
|
* s4-ldb Add LDB_REQ_SET_LOCATION to help track handler useAndrew Bartlett2010-10-184-0/+14
| | | | | | | | | | This greatly assists in debugging what is going on with the ldb handle, as it indicates where it was created. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Oct 18 11:54:46 UTC 2010 on sn-devel-104
* ldb Ensure we mark ongoing LDAP requests as PENDINGAndrew Bartlett2010-10-181-0/+2
|
* s4-openldap-backend Don't set 'dbnosync' on cn=configAndrew Bartlett2010-10-181-1/+0
| | | | | | This isn't valid in current OpenLDAP versions. Andrew Bartlett
* s4-provision Use --ldap-backend-nosync rather than just --nosyncAndrew Bartlett2010-10-181-2/+1
| | | | | | | For some reason we had both options, and --ldap-backend-nosync is the better name. Andrew Bartlett
* heimdal_build: Add dependency on com_err to HEIMDAL_CONFIG.Jelmer Vernooij2010-10-181-1/+1
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Mon Oct 18 10:27:47 UTC 2010 on sn-devel-104
* dsdb simple_ldap_map depends on LDBSAMBAAndrew Bartlett2010-10-181-1/+1
| | | | | | | | | | This shows up at build time on MacOS and runtime on Linux when we use the LDAP backend. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Oct 18 00:57:51 UTC 2010 on sn-devel-104
* Revert "s4:dsdb - make the RELAX control private"Andrew Bartlett2010-10-182-8/+9
| | | | | | | | This must be available to the OpenLDAP backend, to set the GUID values in some situations. We need a proper ACL mechanism to control the use or abuse of this control. This reverts commit 10adee89367cee9add993869280542418fb3d370.
* heimdal: Attempt to fix path of hdb_asn1.hJelmer Vernooij2010-10-181-0/+1
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Mon Oct 18 00:15:11 UTC 2010 on sn-devel-104