summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* ldb: added ldb_req_mark_trusted()Andrew Tridgell2011-01-173-1/+14
| | | | | | | | this is used to mark a ldb child request trusted, if the caller has validated all inputs. This will be used when creating new child requests with trusted inputs. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* ldb: inherit parent flags on child requests in modulesMatthias Dieter Wallnöfer2011-01-171-0/+11
|
* web_server: Display trivial placeholder page if SWAT could not be found.Jelmer Vernooij2011-01-171-6/+19
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Mon Jan 17 01:27:10 CET 2011 on sn-devel-104
* web_server: Fix initialization.Jelmer Vernooij2011-01-171-3/+6
|
* web_server: Avoid references to swat. Load samba.web_server instead.Jelmer Vernooij2011-01-172-8/+11
|
* param: Load web service by default.Jelmer Vernooij2011-01-171-1/+1
|
* s4:dsdb_find_nc_root - fix it up to let the provisioning work correctlyMatthias Dieter Wallnöfer2011-01-151-2/+2
| | | | | | | | | | | Use the temporary list unless we have at least the three main "namingContexts" from the rootDSE available (Default, Configuration, Schema - these are mandatory on all AD deployments!). This bug has been discovered by Nadya in relation with her SD work. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Jan 15 19:01:11 CET 2011 on sn-devel-104
* s4:auth/ntlm/auth_sam.c - fix call to "get_server_info_principal"Matthias Dieter Wallnöfer2011-01-151-7/+7
| | | | | | | | | This should obviously point to the wrapper not the call itself. Found out by Tru64 host build warning. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Jan 15 18:05:59 CET 2011 on sn-devel-104
* s3: Avoid some calls to cli_errstrVolker Lendecke2011-01-151-18/+24
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Sat Jan 15 17:18:54 CET 2011 on sn-devel-104
* s3: Convert cli_set_secdesc to cli_transVolker Lendecke2011-01-155-43/+35
|
* s3: Fix some nonempty blank linesVolker Lendecke2011-01-152-7/+7
|
* s4:samr RPC server - always interpret filter integer values as signedMatthias Dieter Wallnöfer2011-01-151-4/+4
| | | | | | | To prevent platform-dependant problems. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Jan 15 14:54:14 CET 2011 on sn-devel-104
* Add OPLOCK4 test which explores how Windows copes with oplock and share mode ↵Jeremy Allison2011-01-152-1/+147
| | | | | | | | | breaks on hard links. Jeremy. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Sat Jan 15 00:59:46 CET 2011 on sn-devel-104
* s4:web_server - immeditately assign "wdata" as private data for the stream ↵Matthias Dieter Wallnöfer2011-01-141-11/+11
| | | | | | | | | socket This fixes bug #7887. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Fri Jan 14 22:33:13 CET 2011 on sn-devel-104
* s4:urgent_replication.py - remove a now superflous RELAX controlMatthias Dieter Wallnöfer2011-01-141-1/+1
| | | | | | | | The LSA object creation protection changed to the trusted/untrusted connection model. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Fri Jan 14 19:30:52 CET 2011 on sn-devel-104
* s4:samldb LDB module - fix "userAccountControl" handlingMatthias Dieter Wallnöfer2011-01-142-15/+39
| | | | | | | | "UF_ACCOUNTDISABLE" is only added automatically if no "userAccountControl" flags are set on LDAP add operations. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Fri Jan 14 18:29:07 CET 2011 on sn-devel-104
* s3: Fix bug 7917: Yet another bug in chain_replyVolker Lendecke2011-01-141-2/+2
| | | | | | | Found by Michael Hanscho <samba@micha.priv.at> with a WinCE client. Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Fri Jan 14 17:42:05 CET 2011 on sn-devel-104
* s3-waf: fix the build after rpc_winreg removal.Günther Deschner2011-01-141-1/+1
| | | | | | | Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Fri Jan 14 11:38:40 CET 2011 on sn-devel-104
* ldb:ldb_dn.c - fix counter type in "ldb_dn_minimise"Matthias Dieter Wallnöfer2011-01-141-1/+1
| | | | | Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Fri Jan 14 10:43:29 CET 2011 on sn-devel-104
* s3:vfs aio_fork children do not go awayChristian Ambach2011-01-141-1/+13
| | | | | | | | | | | | | | | on RHEL 5.5, recvmsg() does not return when it is reading from the socket and the process on the other side closes its connection. This left aio children around that should have gone already and were just wasting system resources. This patch makes the child go away by writing invalid data to it so that the child exits. Pair-Programmed-With: Volker Lendecke <vl@samba.org> Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Fri Jan 14 09:57:18 CET 2011 on sn-devel-104
* s3:vfs fix children cleanup in aio_forkChristian Ambach2011-01-141-0/+1
| | | | | | | the cleanup loop in aio_fork always stopped operation on the first inactive child it found. In case lots of children need to be reaped, it will take multiple runs before all children are gone
* waf: this script does need bashAndrew Tridgell2011-01-141-2/+1
| | | | | | | this is a developer test script. It is not meant to be portable. Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Fri Jan 14 09:10:20 CET 2011 on sn-devel-104
* waf: use PYTHONARCHDIR for installing python shared libsAndrew Tridgell2011-01-147-4/+13
| | | | | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Fri Jan 14 08:19:40 CET 2011 on sn-devel-104
* waf: new version of wafAndrew Tridgell2011-01-141-0/+0
| | | | | | this one adds PYTHONARCHDIR to fix bug 7905 thanks to Thomas Nagy for the fix!
* s4-dsdb: only enforce the extended dn rules over ldapAndrew Tridgell2011-01-141-2/+21
| | | | | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Fri Jan 14 07:23:31 CET 2011 on sn-devel-104
* s4-dsdb: removed the last use of samdb_search_*() from the dsdb ldb modulesAndrew Tridgell2011-01-141-4/+12
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: removed some more samdb_search_*() calls from samldb.cAndrew Tridgell2011-01-141-26/+69
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: replaced another use of samdb_search in a ldb moduleAndrew Tridgell2011-01-141-4/+10
| | | | | | we should be using the dsdb_module_search*() calls Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: fixed primaryGroupID to use dsdb_module_search_dn()Andrew Tridgell2011-01-141-6/+14
| | | | | | | this avoids using a multi-part extended DN in a search that hits the check in extended_dn_in Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: fixed filtering of tokengroupsAndrew Tridgell2011-01-141-5/+3
| | | | | | builtin groups are shown in user tokenGroups searches Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* ldb: new ABI file for 0.9.23Andrew Tridgell2011-01-141-0/+247
|
* s4-kdc: don't ask for an extended DN for krbtgt_dnAndrew Tridgell2011-01-141-1/+1
| | | | | | otherwise msg->dn would be non-minimal and would fail in searches Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-test: added a tokengroups testAndrew Tridgell2011-01-142-0/+101
| | | | | | | this tests that the remote tokenGroups match the internally calculated ones Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-samdb: give a more useful debug when we can't open the privileges dbAndrew Tridgell2011-01-141-0/+1
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-auth: fixed status return Andrew Tridgell2011-01-141-1/+1
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-samba-tool: fixed the gpo command to use the right DN for access checksAndrew Tridgell2011-01-141-5/+14
|
* s4-dsdb: minimise the DN in group expansionAndrew Tridgell2011-01-141-0/+5
| | | | | | | | this DN we have came from an extended DN search, which means it may have multiple extended components. We need to minimise the DN before AD will accept it Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* ldb: added ldb_dn_minimise()Andrew Tridgell2011-01-142-0/+64
| | | | | | | | | | | | this removes any extraneous components from a DN. For an extended DN, this means removing the string DN and all but the first extended component. This is needed as AD returns "invalid syntax" if you don't use a minimal DN as the base DN for a search. A non-minimal DN also doesn't ever match in a search expression. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dns: renamed DNS_TYPE_ZERO to DNS_TYPE_TOMBSTONEAndrew Tridgell2011-01-142-6/+7
| | | | | | we now know that these are tombstone records, with a timestamp Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: validate number of extended componentsAndrew Tridgell2011-01-141-2/+10
| | | | | | | | | this checks that the number of extended components in a DN is valid, to match MS AD behaviour. We need to do this to ensure that our tools don't try to do operations that will be invalid when used against MS servers Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* ldb: added ldb_dn_get_extended_comp_num()Andrew Tridgell2011-01-143-1/+10
| | | | | | | this returns the number of extended components. We need this to validate a DN in the extended_dn_in module Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-samba_tool Added ACL checking to python GPO management toolAndrew Bartlett2011-01-141-8/+26
|
* libcli/security Add python bindings for se_access_checkAndrew Bartlett2011-01-142-0/+89
| | | | Andrew Bartlett
* pyldb Simplify python wrappers for struct ldb_val (LdbValue)Andrew Bartlett2011-01-141-17/+4
| | | | Andrew Bartlett
* s4-auth Add get and set methods for auth_session_info python wrapperAndrew Bartlett2011-01-142-7/+73
| | | | | | | | | This allows the session key, security_token and credentials to be manipulated from python. Andrew Bartlett Pair-Programmed-With: Andrew Tridgell <tridge@samba.org>
* s4-auth Add function to obtain any user's session_info from a given LDBAndrew Bartlett2011-01-146-81/+209
| | | | | | | | | | | This will be a building block for a tokenGroups test, which can compare against a remote server (in particular the rootDSE) against what we would calculate the tokenGroups to be. (this meant moving some parts out of the auth_sam code into the containing library) Andrew Bartlett
* s4-auth use new dsdb_expand_nested_groups()Andrew Bartlett2011-01-142-152/+11
| | | | | | | | This isn't quite as good as using tokenGroups, but that is only available for BASE searches, and this isn't how the all the callers work at the moment. Andrew Bartlett
* s4-dsdb Implement tokenGroups expansion directly in ldb operational moduleAndrew Bartlett2011-01-143-30/+269
| | | | | | This removes a silly cross-dependency between the ldb moudle stack and auth/ Andrew Bartlett
* Fix bug #7909 - map SYNCHRONIZE acl permission statically in zfs_acl vfs module.Paul B. Henson2011-01-132-1/+6
| | | | | Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Thu Jan 13 20:02:32 CET 2011 on sn-devel-104
* security: Fixed incorrect indentation in create_descriptor.cNadezhda Ivanova2011-01-131-12/+12
| | | | | Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Thu Jan 13 15:53:16 CET 2011 on sn-devel-104
generated by cgit (git 2.34.1) at 2025-09-25 14:34:33 +0000