summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Expand)AuthorAgeFilesLines
...
* torture-krb5: Check for UPN hanlding in krb5.kdc.canon testAndrew Bartlett2015-01-231-18/+90
* kdc: Correctly return the krbtgt/realm@REALM principal from our KDCAndrew Bartlett2015-01-231-25/+31
* torture-krb5: Move checking of server and client names to krb5.kdc.canonAndrew Bartlett2015-01-232-20/+25
* torture-krb5: Move test of krb5_get_init_creds_opt_set_win2k to krb5.kdc.canonAndrew Bartlett2015-01-232-25/+11
* torture-krb5: Split the expected behaviour of the RODC upAndrew Bartlett2015-01-233-7/+14
* torture-kdc: Skip the request-pac behaviour for now against an RODCAndrew Bartlett2015-01-231-0/+3
* torture-krb5: Add commentsAndrew Bartlett2015-01-232-0/+79
* kdc: Add TODO to remind us where we need to hook for RODC to get secretsAndrew Bartlett2015-01-231-0/+1
* kdc: Fix Samba's KDC to only change the principal in the right casesAndrew Bartlett2015-01-231-9/+23
* torture-krb5: Add tests for combinations of enterprise, cannon, and different...Andrew Bartlett2015-01-234-6/+408
* torture: Extend krb5.kdc test to confirm correct RODC proxy behaviourAndrew Bartlett2015-01-232-5/+26
* kdc: Fix enterpise principal name handlingAndrew Bartlett2015-01-232-11/+24
* heimdal: Ensure that HDB_ERR_NOT_FOUND_HERE, critical for the RODC, is not ov...Andrew Bartlett2015-01-231-4/+19
* heimdal: Really bug in KDC handling of enterprise princsNicolas Williams2015-01-231-3/+2
* heimdal: Fix bug in KDC handling of enterprise principalsNicolas Williams2015-01-231-35/+38
* torture: Extend KDC test to cover more options and modesAndrew Bartlett2015-01-231-7/+147
* torture: Decode expected packets and test KDC behaviour for wrong passwordsAndrew Bartlett2015-01-231-9/+164
* torture: Additionally run testsuite for krb5 and KDC behaviour against all th...Andrew Bartlett2015-01-231-5/+5
* torture: Additionally run testsuite for krb5 and KDC behaviour with unprivile...Andrew Bartlett2015-01-231-0/+4
* torture: Run new testsuite for krb5 and KDC behaviour with machine account alsoAndrew Bartlett2015-01-232-6/+15
* torture: Start a new testsuite for krb5 and KDC behaviourAndrew Bartlett2015-01-236-37/+226
* Remove use of the "staticforward" macroPetr Viktorin2015-01-222-2/+2
* dsdb-tests: Clarify that accounts really do fall back to UF_NORMAL_ACCOUNT if...Andrew Bartlett2015-01-221-3/+63
* dsdb-samldb: Clarify userAccountControl manipulation code by always using UF_...Andrew Bartlett2015-01-221-8/+6
* dsdb-samldb: Clarify that accounts really do fall back to UF_NORMAL_ACCOUNT i...Andrew Bartlett2015-01-221-3/+8
* dsdb-samldb: Only allow known and settable userAccountControl bits to be setAndrew Bartlett2015-01-221-4/+9
* dsdb-tests: Show that we can not change the primaryGroupID of a DCAndrew Bartlett2015-01-221-0/+110
* s4:dsdb/samldb: let samldb_prim_group_change() protect DOMAIN_RID_{READONLY_,...Stefan Metzmacher2015-01-221-2/+26
* dsdb: Improve userAccountControl handlingAndrew Bartlett2015-01-222-32/+158
* dsdb-tests: Add new test samba4.user_account_control.pythonAndrew Bartlett2015-01-222-0/+522
* dsdb: Default to UF_NORMAL_ACCOUNT when no account type is specifiedAndrew Bartlett2015-01-221-3/+3
* libds: UF_PARTIAL_SECRETS_ACCOUNT is a flag, not an account typeAndrew Bartlett2015-01-221-10/+9
* dsdb-tests: Align sam.py with Windows 2012R2 and uncomment userAccountControl...Andrew Bartlett2015-01-221-82/+68
* s4:kdc/db-glue: fix supported_enctypes samba_kdc_trust_message2entry()Stefan Metzmacher2015-01-211-5/+5
* CVE-2014-8143:dsdb-samldb: Check for extended access rights before we allow c...Andrew Bartlett2015-01-154-2/+210
* CVE-2014-8143:dsdb: Allow use of dsdb_autotransaction_request outside util.cAndrew Bartlett2015-01-151-2/+2
* CVE-2014-8143:pydsdb: Pull in UF_USE_AES_KEYS flagAndrew Bartlett2015-01-151-0/+1
* CVE-2014-8143:auth: Force talloc type of session_info pointer to matchAndrew Bartlett2015-01-151-0/+5
* s4:torture:vfs_fruit: fix model name checkRalph Boehme2015-01-081-7/+1
* s4:rpc_server/lsa: remove msDS-TrustForestTrustInfo if FOREST_TRANSITIVE is c...Stefan Metzmacher2015-01-061-1/+24
* s4:rpc_server/lsa: allow LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE to be changed.Stefan Metzmacher2015-01-061-5/+15
* Happy New Year 2015!Stefan Metzmacher2015-01-011-1/+1
* dsdb: Add tokenGroupsGlobalAndUniversal, tokenGroups, tokenGroupsNoGCAcceptableGarming Sam2014-12-222-15/+399
* dsdb: Ignore errors from search in dns_notify moduleAndrew Bartlett2014-12-221-14/+12
* dsdb: Use a fixed set of attributes in search in dns_notify moduleAndrew Bartlett2014-12-221-2/+4
* dsdb: Use ldb_attr_cmp() for comparing objectclass namesAndrew Bartlett2014-12-221-3/+3
* s4-dns: Reload DNS zones from dsdb when zones are modified through RPC or DRSSamuel Cabrero2014-12-225-39/+565
* selftest: Run samba.tests.dns in :local environment so it can access credentialsAndrew Bartlett2014-12-221-1/+1
* dsdb: Only parse SAMBA_LDAP_MATCH_RULE_TRANSITIVE_EVAL as a DNAndrew Bartlett2014-12-221-1/+3
* s4:dsdb: Fix not freed temp memory contextSamuel Cabrero2014-12-221-0/+1