summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* r4054: got rid of Realloc(), replacing it with the type safe macro realloc_p()Andrew Tridgell2007-10-1011-50/+25
| | | | (This used to be commit b0f6e21481745d1b2ced28d9ed6f09f6ffd99562)
* r4053: expanded and fixed a bug in the RAW-ACLS testAndrew Tridgell2007-10-101-6/+19
| | | | (This used to be commit 0d19b4a09f4ce0b0c5e7779809c383322f4de4fc)
* r4052: fixed a bunch of code to use the type safe _p allocation macrosAndrew Tridgell2007-10-1023-55/+77
| | | | (This used to be commit 80d15fa3402a9d1183467463f6b21c0b674bc442)
* r4051: use talloc_array() instead of talloc() when allocating arrays in ↵Andrew Tridgell2007-10-101-1/+1
| | | | | | auto-generated ndr code (This used to be commit 90cdfd921e1a6f8806fe94bba61f1bbaa79c79f1)
* r4050: make sure we add objectClass and sAMAccountNameAndrew Tridgell2007-10-101-7/+6
| | | | (This used to be commit 57d0079bb91b8edc625027e1f28203794e018afc)
* r4049: a simple perl script to add a new user to Samba4 ldbAndrew Tridgell2007-10-101-0/+146
| | | | (This used to be commit 76f2ae32040fe494e703abb54dd7ad09d7110408)
* r4048: a very simple howto for new developers to tell them how to build and ↵Andrew Tridgell2007-10-101-0/+118
| | | | | | install samba4 (This used to be commit 4e7d723dacc0d6d526721ee037502c02ffd3fdec)
* r4046: add more servicePrincipalName's for the dc accountStefan Metzmacher2007-10-101-0/+5
| | | | | metze (This used to be commit 659a0b26e2fa466169078bab6dd4af1e5fffb48b)
* r4045: readd krb5 support defaulted to disableStefan Metzmacher2007-10-108-5/+22
| | | | | | | | | | | | | use: gensec:krb5=yes gensec:ms_krb5=yes to enable it or -k on the client tools on the command line metze (This used to be commit 0ae5794cf44933d2554e0356baaca24c7a784f71)
* r4044: only send supportedMech when we also send other dataStefan Metzmacher2007-10-101-5/+8
| | | | | metze (This used to be commit 1e0483a8482574fa0f8d7ad31cc4bf4a6155ec52)
* r4042: fix segfault on server schannel connectionsStefan Metzmacher2007-10-101-1/+4
| | | | | metze (This used to be commit 57bd26f9c528687ca2ca9bbaa56f7f36efd2231f)
* r4041: fix cut-n-paste typoStefan Metzmacher2007-10-101-1/+1
| | | | | metze (This used to be commit 54398aa889b5954c7c387b252dd1a9173eac36f0)
* r4040: sorry today is not my day...Stefan Metzmacher2007-10-101-2/+2
| | | | | | | uint32 != uint8_t ... metze (This used to be commit a8a3b8ee341fda041383df225ea2b7f9b589fc04)
* r4039: added a test for an element > 128 bytes in length, to ensure we testAndrew Tridgell2007-10-101-0/+3
| | | | | for sign extending errors in element length (This used to be commit 07378fca6c12ffffcd3fe5e91f4d70ef838a45d5)
* r4038: fix sign/unsign bug I introduced in -r 4022Stefan Metzmacher2007-10-101-2/+2
| | | | | | | | | this caused new ldb record to be corrupt if the length was > 12b byte thanks tridge for finding this metze (This used to be commit 6998c37b473d8efeb2ed5285f10f469a29ad787a)
* r4037: fixed a bunch of "might be uninitialised" warnings after enabling -O1 ↵Andrew Tridgell2007-10-1022-48/+50
| | | | | | in my compile (This used to be commit 0928b1f5b68c858922c3ea6c27ed03b5091c6221)
* r4036: expanded the RAW-ACLS torture test to include tests for theAndrew Tridgell2007-10-101-2/+427
| | | | | | generic->specific access mask mappings, and tests of the behaviour of SID_CREATOR_OWNER and SEC_FLAG_MAXIMUM_ALLOWED (This used to be commit f572fe6d29d5a318b24d71a2ebfa2baca2b79a10)
* r4035: more effort on consistent naming of the access mask bits.Andrew Tridgell2007-10-1032-104/+116
| | | | | | | | | | | This removes the duplicate named SEC_RIGHTS_MAXIMUM_ALLOWED and SEC_RIGHTS_FULL_CONTROL, which are just other names for SEC_FLAG_MAXIMUM_ALLOWED and SEC_RIGHTS_FILE_ALL. The latter names match the new naming conventions in security.idl Also added names for the generic->specific mappings for files are directories (This used to be commit 17a4e0b3aca227b40957ed1e0c57e498debc6ddf)
* r4034: add a function security_descriptor_create() which can be used toAndrew Tridgell2007-10-101-0/+79
| | | | | | | easily create complex security descriptors for testing. This greatly simplifies the smbtorture code I am writing for testing our new access_check code. (This used to be commit 891a8bc16af3c6ce5800e793ce4ec8b0078e444f)
* r4033: removed a pointless commentAndrew Tridgell2007-10-101-1/+1
| | | | (This used to be commit 1f3f9f829444cb889c6782c4fe52773fd6867b55)
* r4027: add a useful function for debuggingStefan Metzmacher2007-10-101-0/+18
| | | | | metze (This used to be commit 41b1ba53fc201b7b9f9d806dccef6258b2a1d157)
* r4026: added NT ACL checking on pvfs_open() for existing files. I need toAndrew Tridgell2007-10-102-16/+90
| | | | | work out some way to do a decent test suite for this. (This used to be commit 9a9a0d0e791e4b64f0a35c921729e623b977af47)
* r4025: added a sec_access_check() function for checking security descriptorsAndrew Tridgell2007-10-103-39/+163
| | | | | against a users security token and access_mask (This used to be commit c4d21cd4b1ccffd5aaa70a551c57f6eab1ca9c6d)
* r4022: fix compiler warningsStefan Metzmacher2007-10-104-6/+7
| | | | | metze (This used to be commit 79d0eb2f677f9e985ba476a9680f68537d41be6f)
* r4015: correct copyright attributionsAndrew Tridgell2007-10-101-3/+2
| | | | (This used to be commit 078d9ab05bffc79e4f329ea18fe3dafd144d989c)
* r4014: removed unused MacExtension.h headerAndrew Tridgell2007-10-101-246/+0
| | | | (This used to be commit 5ffffdd79f23c461e30bc91e983b12939f063d2d)
* r4013: got rid of a bunch of unused or unmaintained codeAndrew Tridgell2007-10-1012-2676/+80
| | | | | | | | | - removed the clitar code. It is unmaintained, and a horribly badly done hack - removed client.h as it contained mostly unused definitions - removed the unused clidfs.c code (This used to be commit 31a7bddbb3815b4d625e993dbce4805dae1c18f8)
* r4012: split out the lsa lookup single name logic into a separate functionAndrew Tridgell2007-10-101-24/+34
| | | | (This used to be commit 44d97619623830cc24905a5f4df941d45ebd41c3)
* r4011: get rid of rpc_secdes.h and replace it with a single sane set ofAndrew Tridgell2007-10-1041-646/+450
| | | | | | | | | definitions for security access masks, in security.idl The previous definitions were inconsistently named, and contained many duplicate and misleading entries. I kept finding myself tripping up while using them. (This used to be commit 01c0fa722f80ceeb3f81f01987de95f365a2ed3d)
* r4010: fixed parsing of null attributes in the ldb ldif parserAndrew Tridgell2007-10-102-2/+7
| | | | (This used to be commit b4fd76f78eadd8648ceed508766235e80702aa8f)
* r4003: run successful against a nt4 sp6 pdc with one nt4 sp6 trust and a ↵Stefan Metzmacher2007-10-102-10/+23
| | | | | | | w2k3 trust metze (This used to be commit 5101cd51a24fdcda8dd8fc4da446782948290f9b)
* r4002: NT 4.0 sp6a can't do schannel 128Stefan Metzmacher2007-10-101-2/+2
| | | | | metze (This used to be commit c04a77ed6945db0292434fb5461a884708a9ebf2)
* r4001: fix segfault fix auth failedStefan Metzmacher2007-10-102-0/+4
| | | | | metze (This used to be commit 6a7eee1d9917e0884072354dddae568645798da5)
* r4000: DATA_BLOB.data is uint8_t * not void * :-)Stefan Metzmacher2007-10-105-5/+5
| | | | | | | (thanks abartlet for telling me) metze (This used to be commit 2783bf393f6310f9d827538329d619dad5b02dd0)
* r3999: - reply with the same DsBindInfo blob as w2k3 in the server functionStefan Metzmacher2007-10-102-6/+54
| | | | | | | | | - add idl for drsuapi_DsReplicaSync() not yet complete - just return WERR_OK for the drsuapi_DsReplicaSync() server function metze (This used to be commit e896925ac0b58bd48b5b9cc2d675682409d09ae1)
* r3998: allow const arrays (see next commit to drsuapi.idl)Stefan Metzmacher2007-10-103-469/+626
| | | | | metze (This used to be commit 7264a2227d7a1881db01964d0d713c144eb77152)
* r3997: fix STR_CHARLEN pull caseStefan Metzmacher2007-10-101-21/+25
| | | | | metze (This used to be commit 623411f74ee766dee2170949b118216387779929)
* r3996: add some commentsStefan Metzmacher2007-10-101-5/+5
| | | | | metze (This used to be commit 87a92d3d5c7c2ab0bc07a9fb101022b3db1d637b)
* r3995: improved the default ACL mapping from unix permsAndrew Tridgell2007-10-101-7/+11
| | | | (This used to be commit 01e89697fe837ee76fedda149e1e2b389a7d3889)
* r3994: - removed the unused reference count code in lsa serverAndrew Tridgell2007-10-101-37/+39
| | | | | - fixed the sid_index field in lsa LookupSids and LookupNames (This used to be commit 677f701e71609d82376b1ea2fa9ebc3521896671)
* r3993: use distinctive fnums in the ipc backend, to make monitoring sniffs ↵Andrew Tridgell2007-10-101-1/+3
| | | | | | easier (This used to be commit 54209ed05686a442156f7927c58d8656aa5e4900)
* r3992: provide hooks for lsa to lookup sids allocated using the linear ↵Andrew Tridgell2007-10-102-17/+104
| | | | | | id->sid mapping (This used to be commit e61140510905b6bbe57ad35dad8e4dd68d1f6bd8)
* r3991: for uid->sid and gid->sid to be efficient we need to index on unixIDAndrew Tridgell2007-10-101-0/+2
| | | | | and unixName in samdb. (This used to be commit 5c966821e2eced9a1b34a5274cc317eab1a44eaf)
* r3990: take advantage of the uid->sid and gid->sid code to create a muchAndrew Tridgell2007-10-103-14/+97
| | | | | better default NT ACL in pvfs (This used to be commit 9ff6ecbdb6c08528193f7958d7ea7d9a8df6defd)
* r3989: added a linear algorithmic mapping for uid->sid and gid->sid withinAndrew Tridgell2007-10-101-21/+351
| | | | | | | | | | our local domain. Note that this linear mapping does not suffer from the "foreign sid" problems of the linear mappings we have previously rejected for the sid->uid problem. the mapping allows for 1 billion automatically allocated users or groups for the local domain. (This used to be commit 8f573439753e2a425305936107442c85cffb9369)
* r3988: made dom_sid_add_rid() allocate the new sid with proper parent/child ↵Andrew Tridgell2007-10-101-3/+5
| | | | | | | talloc relationship (This used to be commit 5db0eb1fe3abb5150bef27bfed4b7da723e4a287)
* r3984: success full parse the repsFrom/repsTo LDAP fieldsStefan Metzmacher2007-10-102-28/+36
| | | | | metze (This used to be commit 56c66f4a090b1efca011fc2fc9880c4d93da164c)
* r3983: posix:fakeoplocks should default to False, not True !Andrew Tridgell2007-10-101-1/+1
| | | | (This used to be commit 052d91c59f177851b5e0e53c8a033bdd28702f64)
* r3982: split out the sid -> uid/gid mapping routines into a ntvfs_sidmapAndrew Tridgell2007-10-105-160/+237
| | | | | | subsystem. This is in preparation for adding better default ACL generation in pvfs, which will require uid/gid -> sid mapping. (This used to be commit b31108e49247495d98cf7c12ee303b12a9e44e92)
* r3981: Use correct access-mask when querying aliases.Günther Deschner2007-10-101-2/+2
| | | | | Guenther (This used to be commit 5dde59be0995b9893ef476b06c259776c1115ae7)