summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* heimdal: fixed a shadowed variable warning for error_messageAndrew Tridgell2010-11-081-23/+23
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-attid: Uppercase ATTID type constantsKamen Mazdrashki2010-11-083-10/+10
| | | | | | | Thanks Metze for noting this! Autobuild-User: Kamen Mazdrashki <kamenim@samba.org> Autobuild-Date: Mon Nov 8 23:06:41 UTC 2010 on sn-devel-104
* s4-test: Initial implementation for Schema replication black box testKamen Mazdrashki2010-11-081-0/+174
|
* Second part of fix for bug #7777 - When requesting lookups for BUILTIN sids, ↵Jeremy Allison2010-11-081-1/+3
| | | | | | | | | | | | winbindd allocates new uids/gids in error. Ensure we return after calling passdb for SID lookups for which we are authoritative. Jeremy. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Mon Nov 8 22:24:34 UTC 2010 on sn-devel-104
* Ensure we always have a mapped group for "Domain Users".Jeremy Allison2010-11-081-1/+6
| | | | | | Needed for DC tests to pass with bugfix for bug #7777. Jeremy.
* First part of fix for bug #7777 - When requesting lookups for BUILTIN sids, ↵Jeremy Allison2010-11-081-0/+10
| | | | | | | | | winbindd allocates new uids/gids in error. Ensure idmap_init_passdb_domain() correctly initialized the default domain first. Jeremy.
* s3/configure: fix typo and warningBjörn Jacke2010-11-081-1/+1
| | | | | Autobuild-User: Björn Jacke <bjacke@samba.org> Autobuild-Date: Mon Nov 8 20:58:20 UTC 2010 on sn-devel-104
* s4:password_hash LDB module - introduce a "userPassword" flag which ↵Matthias Dieter Wallnöfer2010-11-081-15/+37
| | | | | | | | | | | enables/disables the two "userPassword" behaviours - Enabled: "userPassword" password change behaviour (will later be linked to the "dSHeuristics") - Disabled: "userPassword" plain attribute behaviour (default) Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Nov 8 15:28:06 UTC 2010 on sn-devel-104
* s4:pyldb.c - fix "py_ldb_contains" according to the comment by JelmerMatthias Dieter Wallnöfer2010-11-081-4/+2
|
* s3-waf: add idmap_autorid to the build.Günther Deschner2010-11-082-1/+10
| | | | | | | Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Mon Nov 8 14:17:27 UTC 2010 on sn-devel-104
* s3: Fix an uninitialized variableVolker Lendecke2010-11-081-0/+1
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Mon Nov 8 13:22:06 UTC 2010 on sn-devel-104
* s3: Build idmap_autorid by defaultVolker Lendecke2010-11-081-0/+1
|
* s3:idmap: add a new ID mapping module autoridChristian Ambach2010-11-084-0/+610
| | | | | | | | | | | | This is an initial implementation of the idmap_autorid module. It works similar to the idmap_rid module but requires less configuration. It will automatically pick ranges for each domain, so you do not have to bother any more about adding an idmap configuration for all of the domains in the forest. This is very easy to use and to configure and much more deterministic and faster than idmap_tdb, the typical choice of Samba users up to now.
* s3:winbind add wcache_tdc_fetch_domainbysidChristian Ambach2010-11-082-0/+53
| | | | add a function to lookup a domain in the winbind cache by domain SID
* s3: Put some parentheses around conditionalsVolker Lendecke2010-11-081-2/+2
|
* s3: Consistently use stdbool types in new codeVolker Lendecke2010-11-081-11/+11
|
* s3:winbind add timeouts to winbind cacheChristian Ambach2010-11-081-14/+57
| | | | | | | | | | | | | | | This adds a timeout value to cache entries and the NDR records in the winbind cache. The previous approach of just comparing the sequence number has some issues, e.g. when retrying a wbinfo -n operation for a user in a not yet trusted domain was always failing even after the trusted domain was added. The new approach compares sequence number and timeout value to determine if a cache entry is still valid or not. I increased the cache version number so an old cache will be wiped automatically after upgrade.
* s4:passwords.py - test empty password attributes behaviourMatthias Dieter Wallnöfer2010-11-081-1/+154
| | | | | Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Nov 8 12:09:56 UTC 2010 on sn-devel-104
* s4:password_hash LDB module - deleting password attributes is a little more ↵Matthias Dieter Wallnöfer2010-11-081-6/+6
| | | | complicated
* s4:samdb_msg_find_old_and_new_ldb_val - reworkMatthias Dieter Wallnöfer2010-11-082-10/+38
| | | | | | - don't crash when no values where specified - return ERR_CONSTRAINT_VIOLATION on malformed messages - only check for flags when we are involved in a LDB modify operation
* s4:password_hash LDB module - clear the fact that a delete of password ↵Matthias Dieter Wallnöfer2010-11-081-1/+1
| | | | attributes isn't possible
* s4:acl LDB module - define the delete passwords special case a bit betterMatthias Dieter Wallnöfer2010-11-081-3/+4
|
* s4:passwords.py - add another two failure casesMatthias Dieter Wallnöfer2010-11-081-0/+21
|
* ldb:pyldb.c - "py_ldb_msg_element_get" - here we can safely use "unsigned ↵Matthias Dieter Wallnöfer2010-11-081-3/+3
| | | | | | | | | int" for the element reference We don't make use of "Py_List*" calls Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Nov 8 11:21:27 UTC 2010 on sn-devel-104
* ldb:pyldb.c - "py_ldb_contains" - return only "0" not found, "1" found, "-1" ↵Matthias Dieter Wallnöfer2010-11-081-3/+10
| | | | error
* ldb:pyldb.c - most of the times "time_t" is defined as "long int"Matthias Dieter Wallnöfer2010-11-081-5/+5
| | | | | | Therefore use a signed long int for conversions. http://stackoverflow.com/questions/471248/what-is-ultimately-a-time-t-typedef-to
* ldb:pyldb.c - fix some "Py_ssize_t" output warningsMatthias Dieter Wallnöfer2010-11-081-3/+2
|
* ldb:pyldb.c - use "Py_ssize_t" for counting list entriesMatthias Dieter Wallnöfer2010-11-081-12/+11
| | | | This seems to be the most appopriate type
* ldb:pyldb.c - fix indentationMatthias Dieter Wallnöfer2010-11-081-2/+3
|
* s4:pydsdb.c - use "Py_ssize_t" for Python list countersMatthias Dieter Wallnöfer2010-11-081-1/+1
| | | | Seems to be the most appropriate type
* s4:pydsdb.c - introduce Python 2.4 compatibility definesMatthias Dieter Wallnöfer2010-11-081-0/+11
|
* s4:objectguid/repl_meta_data LDB module - deny "objectGUID" updatesMatthias Dieter Wallnöfer2010-11-083-0/+29
| | | | | Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Nov 8 10:36:50 UTC 2010 on sn-devel-104
* s4:objectclass LDB module - no idea why we'd need the "objectGUID" hereMatthias Dieter Wallnöfer2010-11-081-1/+1
|
* s4:objectguid LDB module - make use of "dsdb_next_callback"Matthias Dieter Wallnöfer2010-11-082-30/+6
|
* s4:drsuapi RPC server - writespn.c - fix indentationsMatthias Dieter Wallnöfer2010-11-081-15/+24
|
* s4-drs: allow bypass of writespn checking for some SPNsAndrew Tridgell2010-11-081-1/+111
| | | | | | | | | | | | | this allows accounts (and in particular RODCs) to make SPN updates on their own account if they take the form SERVICE/hostname we may be able to remove this in the future after some changes in our ACL checking for userPrincipalName Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 08:45:16 UTC 2010 on sn-devel-104
* heimdal Add clock-skew handling to DCE-style GSSAPIAndrew Bartlett2010-11-081-39/+65
| | | | | | | | | | | The clock skew handling was previously only on properly wrapped GSSAPI, and was skipped for DCE-style. This allows the ASN.1 errors from the krb5_rd_req to suggest parsing as a kerberos error packet. Andrew Bartlett Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 07:58:09 UTC 2010 on sn-devel-104
* s4-auth Supply more useful error messages on Kerberos failureAndrew Bartlett2010-11-083-13/+28
| | | | | | | | | The practice of returning only NT_STATUS_INVALID_PARAMETER hasn't helped our users to debug problems effectivly, and so we now return more errors and try and give a more useful debug message when then happen. Andrew Bartlett
* s4-auth Fix typos in samba4 auth codeBrad Hards2010-11-081-7/+7
|
* s4-dsdb Explain why we may not use the GC name in some situations.Andrew Bartlett2010-11-081-0/+8
| | | | | | | This delicate balance caused us a bit of a puzzle when we could not work out why an DC join failed with the new python scripts. Andrew Bartlett
* s4-selftest fix indentationAndrew Bartlett2010-11-081-3/+3
|
* s4-repl: fixed replication notifications to RODCsAndrew Tridgell2010-11-083-7/+58
| | | | | | | | | | We need a separate source dsa list for RODCs, as they are not in the repsFrom for our partitions, but are in the repsTo. This adds a new 'notifies' list, which contains all the source dsas for the DCs that we should send notifies to, but which we don't replicate from Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 06:57:43 UTC 2010 on sn-devel-104
* fixAndrew Tridgell2010-11-082-4/+4
|
* s4-debug: lowered the debug level of some unimportant messagesAndrew Tridgell2010-11-083-4/+4
|
* s4-ldb: don't give an error if a module is already registeredAndrew Tridgell2010-11-081-0/+7
| | | | | | | | this can happen when both the build and install paths are used to load ldb modules Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 05:28:14 UTC 2010 on sn-devel-104
* waf: go back to the previous method of handling .inst. rulesAndrew Tridgell2010-11-081-1/+1
| | | | | the change broke the library linkages for some library, as spotted by Brad
* waf: fixed the names of the installed libraries after the last changeAndrew Tridgell2010-11-081-5/+13
| | | | | Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 02:31:18 UTC 2010 on sn-devel-104
* s4-dns: ensure we get the right case on the grant rule for administratorAndrew Tridgell2010-11-081-2/+1
| | | | | | | | | | it may be 'Administrator' in the database, and bind match rules are case sensitive Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 01:41:43 UTC 2010 on sn-devel-104
* waf: fixed tabs/spaces for python3.0Andrew Tridgell2010-11-082-5/+5
| | | | | Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 00:55:13 UTC 2010 on sn-devel-104
* waf: prevent us from modifying non-install libs during make installAndrew Tridgell2010-11-081-2/+6
| | | | | | | | | | | | | we need to ensure that 'make install' does not change any of our build libraries, and only changes the .inst.so libraries, otherwise doing a make test in the build directory directly after a make install could use the installed libraries, which would mean using the wrong LDB_MODULES_PATH this could cause the "unknown error" loading ldb modules when running some commands directly after a make install Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>