summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
...
* s4:provision.c - "provsion_store_self_join" - don't set the realm if it's NULLMatthias Dieter Wallnöfer2010-02-151-2/+4
| | | | | | The realm can be NULL when this function is called by "libnet_Join_primary_domain". This seems to be a valid value since "libnet_JoinDomain" is allowed to return an empty realm if we are not in a ADS domain.
* s4-drs: replace manual checks with dsdb_modify_permissive()Andrew Tridgell2010-02-151-32/+1
| | | | | Much simpler to use the permissive control instead of manually munging the SPN list.
* s4-drs: use a permissive modify in addentryAndrew Tridgell2010-02-151-1/+1
| | | | It is not an error if entries already exist.
* s4-dsdb: added dsdb_modify_permissive()Andrew Tridgell2010-02-151-0/+36
| | | | This will be used in the drsuapi server
* s4:dcesrv_lsa.c - remove a superfluous empty lineMatthias Dieter Wallnöfer2010-02-141-1/+0
| | | | One empty line is enough for code part divisions.
* s4-rpcserver: teach the rpc server to cope with bad sig_size estimatesAndrew Tridgell2010-02-141-18/+14
|
* a4-dcerpc: another attempt at dcerpc auth paddingAndrew Tridgell2010-02-143-15/+20
| | | | The last change broke net vampire against w2k8r2
* s4-ldb: use TYPESAFE_QSORT() in the rest of the ldb codeAndrew Tridgell2010-02-145-11/+20
|
* s4:loadparm.c - prevent memory leaksMatthias Dieter Wallnöfer2010-02-131-0/+3
| | | | | If a "logfile" was already set, free the content up before setting a new location. This can happen on a loadparm reload.
* s4:loadparm.c - the logfile parameter value needs to be duplicatedMatthias Dieter Wallnöfer2010-02-131-1/+1
| | | | | Otherwise the "logfile" pointer tracks all changes of "pszParmValue" which content is only temporal. This was the cause of bug #6212.
* s4:popt_common.c - fix intendationMatthias Dieter Wallnöfer2010-02-131-1/+1
|
* s4:util.c - Corrected the location of the "Directory Service" objectMatthias Dieter Wallnöfer2010-02-131-1/+1
| | | | | I wonder why nobody noticed this since for sure this "tombstone" functionality was broken till now.
* s4:server.c - use always "return" instead of "exit" in the ↵Matthias Dieter Wallnöfer2010-02-131-4/+4
| | | | | | "binary_smbd_main" function Just to be consistent - no functional change
* libwbclient: Separate out the async functionsKai Blin2010-02-131-1/+1
|
* s4-smbd: fix crash in notify code on client terminationAndrew Tridgell2010-02-131-2/+2
| | | | | | | | We need to free the lp_ctx after we free the event context, otherwise the teardown code in the notify backend dies when it tries to use the iconv_convenience ptr Fixes bug 7053
* s4-rpc: be more careful about DCERPC auth paddingAndrew Tridgell2010-02-133-107/+107
| | | | | | Cope with a wider range of auth padding in dcerpc bind_ack and alter_context packets. We now use a helper function that calculates the right auth padding.
* s4: use LDB_TYPESAFE_QSORT() instead of ldb_qsort()Andrew Tridgell2010-02-136-16/+8
|
* s4-ldb: added LDB_TYPESAFE_QSORT()Andrew Tridgell2010-02-131-0/+18
| | | | Like TYPESAFE_QSORT() but for the ldb_qsort() function
* s4-wrepl: use TYPESAFE_QSORT() in wins repl codeAndrew Tridgell2010-02-131-1/+2
|
* s4-torture: use TYPESAFE_QSORT() in smbtortureAndrew Tridgell2010-02-134-26/+15
|
* s4-rpcserver: use TYPESAFE_QSORT() in rpc serversAndrew Tridgell2010-02-133-24/+19
|
* s4-ntvfs: use TYPESAFE_QSORT() in notify codeAndrew Tridgell2010-02-131-3/+2
|
* s4-socket: use TYPESAFE_QSORT() in netif codeAndrew Tridgell2010-02-131-1/+2
|
* s4-auth: use TYPESAFE_QSORT() in gensecAndrew Tridgell2010-02-131-1/+2
|
* s4-dsdb: use TYPESAFE_QSORT() in dsdb codeAndrew Tridgell2010-02-137-52/+28
|
* s4:kdc Fill in created_by principal fieldSimo Sorce2010-02-121-4/+7
|
* s4:kdc Fix double free and uninitialized memory.Simo Sorce2010-02-121-2/+13
| | | | | | In samba_kdc_trust_message2entry() on error, hdb_free_entry() may end up trying to access uninitialized memory or double free the hdb_entry.
* s4:auth/credentials/credentials.c - Initialise the "lm_response" and ↵Matthias Dieter Wallnöfer2010-02-121-0/+5
| | | | | | | "nt_response" structures In some cases those structures are not initialised and the whole authentication system crashes with a SIGSEGV. Bug discovered by Matthieu Patou in bug #6755.
* s4:getopt.py - set the password callback only when no password has been providedMatthias Dieter Wallnöfer2010-02-121-4/+6
| | | | | | | | | | Previously the "no_pass" and "no_pass2" variables weren't handled correctly. Since at the initialisation of the "CredentialsOptions" we don't have any password at all. Only afterwards we could get one through "set_password". If a password is specified, use it. If no password is specified, consider the use fo an input mask on STDOUT. But if the loadparm context contains one prefer it over the input.
* s4:net_drs_bind: make some more stuff staticStefan Metzmacher2010-02-121-2/+2
| | | | metze
* s4:net/drs: use the full path to "utils/net/drs/net_drs*.h"Stefan Metzmacher2010-02-125-5/+5
| | | | | | This fixes the build with automatic dependecies. metze
* s4: Switch to S3-style id mapping data types.Kai Blin2010-02-1114-82/+97
|
* s4 idmap: Make the sid_to_xid and xid_to_sid calls static.Kai Blin2010-02-111-4/+8
| | | | Looking at the winbind interface, we should only be using the bulk conversion calls.
* ldb_match - Ignore ":dn" part of extended matches for nowMatthias Dieter Wallnöfer2010-02-111-2/+5
| | | | | | | | | | | It's not fully clear what this ":dn" part means for us. What we know is that older AD implementations (Windows Server 2000, 2003) need it to have extended matches working in the expected way. To be able to interoperate with s3's winbind and other tools I and gd decided to transform this into a warning until we know what to do. This should fix bug #6511.
* s4-provision: import the R2 functional levelAndrew Tridgell2010-02-121-1/+1
| | | | | this makes it easier to modify the script to set us at R2 level in provision. We should make this a parameter.
* s4-build: avoid finding python symlinksAndrew Tridgell2010-02-121-1/+1
| | | | | emacs creates symlinks to .py files while you are editing them. This could cause build failures.
* s4-provision: fixed --function-level option to provisionAndrew Tridgell2010-02-121-0/+1
| | | | we need the DS_DOMAIN_* levels imported
* s4-script: make enablerecyclebin use system_sessionAndrew Tridgell2010-02-121-1/+2
| | | | This allows it to work against our local ldb
* s4-pyldb: null terminate string ldb message elements from pythonAndrew Tridgell2010-02-121-4/+4
| | | | | | We need to eventually get rid of ldb_msg_find_attr_as_string() (or add a mem_ctx to it), but meanwhile we have too many places that break if we don't add a nul to the end of ldb msg strings from python.
* s4-net-drs: fix some coding style issuesAndrew Tridgell2010-02-112-3/+2
| | | | | | | We should use the system/*.h headers for system includes. We also try to avoid C++ comments. Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4/net_drs: 'net drs kcc' command implementationKamen Mazdrashki2010-02-113-2/+177
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4/net_drs: 'net drs bind' command implementationKamen Mazdrashki2010-02-112-1/+138
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4/net_drs: 'net drs' utility initial creationKamen Mazdrashki2010-02-114-1/+377
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* provision: Use short name for assignee of ACE (BA, SA, CO, ...)Matthieu Patou2010-02-111-8/+6
| | | | | | | | | | Use short name (shortcut for wellknown SID/RID) for assignee in each entry of ACL (when possible) of sysvol files (GPO objects and netlogon folders). This avoid error prone substitution of DOMAINSID in ACL and make ACL clearer by using shortname for assignee accordingly with SDDL synthax rules. Translation to real SID is handled internaly by the from_sddl function. Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
* python-s4: use secrets.ldb instead of sam.ldb for reading domain SIDMatthieu Patou2010-02-111-2/+2
| | | | | | | This allow to be able to run net acl set xxx yyy on DC, but also on domain member. Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
* provision: Fix an error with eadb when using not default install dir and ↵Matthieu Patou2010-02-111-1/+5
| | | | | | running as a non root user Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
* s4-dns: don't leave behind a tmp fileAndrew Tridgell2010-02-111-0/+2
| | | | | If the dns update file doesn't need updating we need to delete the tmp file
* s4-dns: added a dns update taskAndrew Tridgell2010-02-114-1/+237
| | | | | | | | This task watches for changes in the list of DCs, and creates a bind9 formatted file that grants update permission to all DCs, plus to the administration, and machines update for their own names. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-provision: cope with umask in creating private/dnsAndrew Tridgell2010-02-111-0/+2
|
* s4-provision: pre-create a named.conf.update fileAndrew Tridgell2010-02-113-36/+13
| | | | | | The named.conf.update file will be filled in at runtime by Samba to contain the list of bind9 grant rules for granting DNS dynamic update permissions on the domain.