| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
| |
| |
| | |
This matches the sec_access_check() code
|
| |
| |
| |
| | |
The correct answer depends on the users privileges.
|
| |
| |
| |
| |
| |
| | |
When you have backup or restore privileges, you automatically get
extra access bits in ACL interpretation. This adds definitions for the
bits you get.
|
| |
| |
| |
| |
| |
| |
| |
| | |
"dcerpc_generic_session_key"
I don't think that this code needs to exist identically on the server and on the
client side. This patch leaves it on the client side (dcerpc lib) and calls it
from the server.
|
| |
| |
| |
| | |
Guenther
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
When parsing a SPNEGO session setup retry (falling back from KRB5 to NTLMSSP),
we failed to parse the ASN1_ENUMERATED negResult in the negTokenTarg, thus
failing spnego_parse_auth() completely.
By just using the shared spnego/asn1 code, we get the parsing the correct way.
Guenther
|
| |
| |
| |
| |
| |
| | |
I think this is a better location for this script. Since the subdirectory
"script" of "source4" contains only scripts for "make install" and "make
uninstall".
|
| |
| |
| |
| |
| |
| | |
Avoid warnings.
Karolin
|
| |
| |
| |
| | |
This helps with the CIFS NTVFS backend, but doesn't solve all problems
|
| |
| |
| |
| | |
The CIFS passthru NTVFS doesn't handle some options yet (eg. root_fid)
|
| | |
|
| |
| |
| |
| |
| | |
This one didn't matter until the root_fid changed the alignment of the
two structures.
|
| |
| |
| |
| | |
It is annoying when you mistype a command line option and aren't told.
|
| |
| |
| |
| | |
Construct the filename from the old handle and the new name.
|
| |
| |
| |
| |
| |
| | |
In order to implement root_fid in the s4 SMB server we need to declare
it as a handle type, just as for other fnum values in SMB. This
required some extensive (but simple) changes in many bits of code.
|
| |
| |
| |
| |
| | |
The CREATEX_ACCESS test shows that this is used as a bit test, not a
equality test
|
| |
| |
| |
| |
| | |
This failed on one of my test boxes that has a group called
"testgroup". using "testgroupXX" should be a bit better.
|
| | |
|
| |
| |
| |
| | |
This should fix bug #6755.
|
| |
| |
| |
| | |
Matthias, please check!
|
| | |
|
| |
| |
| |
| | |
w2k8 imposes a limit of 64 characters on the rDN
|
| |
| |
| |
| |
| | |
This is a property of AD, not ldb, so should be in our ldb
modules.
|
| |
| |
| |
| | |
This isn't the rDN !
|
| | |
|
| |
| |
| |
| |
| | |
This avoids having to do make install after each change when using the
drs devel scripts
|
| |
| |
| |
| |
| |
| |
| | |
The DRSUAPI_DRS_ADD_REF flag tells the DRS server to run an UpdateRefs
call on behalf of the client after the DsGetNCChanges call. The lack
of support for this option may explain why the repsTo attribute was
not being created for w2k8-r2 replication partners.
|
| |
| |
| |
| |
| |
| |
| |
| | |
The DsUpdateRefs calls takes a set of flags that indicates if the
server should ignore specific add/delete error codes.
This patch also exposes the core UpdateRefs call into a public
function, so that it can be called from DsGetNCChanges
|
| | |
|
| |
| |
| |
| | |
Check the validity of the requested options in DsGetNCChanges
|
| |
| |
| |
| |
| | |
Later we will need to make samdb_rodc() look in the database, but for
now we should at least have the function in a central place
|
| | |
|
| |
| |
| |
| | |
This should make it much easier to work through the logic in MS-DRSR
|
| |
| |
| |
| | |
Jeremy.
|
| |
| |
| |
| |
| | |
Don't use mapped_user uninitialized.
Jeremy.
|
| |
| |
| |
| | |
Part of a fix for bug #6793.
|
| | |
|
| |
| |
| |
| |
| |
| |
| | |
2.0.0 did not got the exports right.
This and the 2.0.1 talloc fixes resolve bug #6808.
Guenther
|
| | |
|
| |
| |
| |
| |
| | |
Make always sure the exports and signature files are up to date before
shipping a release.
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| | |
Make sure we always have a sorted (per file) export file.
This way we can directly compare the real export and the check file w/o having
to further sort things.
Also return error code from abi_checks.sh if warnings were reported
|
| |
| |
| |
| | |
Guenther
|
| | |
|
| |
| |
| |
| | |
And don't cut them out from the DNS hostname.
|
| | |
|
| |
| |
| |
| |
| |
| | |
For KERBEROS applications the realm should be upcase (function "lp_realm") but
for DNS ones it should be used lowcase (function "lp_dnsdomain"). This patch
implements the use of both in the right way.
|
| |
| |
| |
| |
| | |
Change "lp_realm" behaviour to return the realm always upcased and add a
function "lp_dnsdomain" which returns it always lowcased.
|
| |
| |
| |
| | |
Signed-off-by: Bo Yang <boyang@samba.org>
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This reverts commit 11a8a54c825a52d7dd6ab78bc7aeff2d719327d2.
The actual fix for bug 6801 is in hdb_end_seq_get() - this attempt
leaks 'db' instead.
Andrew Bartlett
|