summaryrefslogtreecommitdiffstats
path: root/source4/cldap_server/netlogon.c
Commit message (Collapse)AuthorAgeFilesLines
* s4-netlogon: fixed logic for setting DS_SERVER_WRITABLEAndrew Tridgell2010-09-151-1/+1
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-cldap: don't set the writable bit when we are a RODCAndrew Tridgell2010-09-151-2/+6
| | | | | | | when we are a RODC, don't respond with the writable bit in the server type response of netlogon requests Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4:cosmetic - the SID attribute is called objectSid - not objectSIDMatthias Dieter Wallnöfer2010-09-131-1/+1
|
* s4-loadparm: 2nd half of lp_ to lpcfg_ conversionAndrew Tridgell2010-07-161-10/+10
| | | | | | | this converts all callers that use the Samba4 loadparm lp_ calling convention to use the lpcfg_ prefix. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* Finish removal of iconv_convenience in public API's.Jelmer Vernooij2010-05-181-7/+3
|
* s4:cldap_server/netlogon.c - handle the domain SID correctlyMatthias Dieter Wallnöfer2010-04-271-7/+21
|
* nbt: samlogon/netlogon structures - unify denominationsMatthias Dieter Wallnöfer2010-04-271-3/+3
|
* s4:fill_netlogon_samlogon_response - reorder assign operations (to be ↵Matthias Dieter Wallnöfer2010-04-271-5/+4
| | | | consistent)
* s4:fill_netlogon_samlogon_response - use "lp_workgroup" for the short ↵Matthias Dieter Wallnöfer2010-04-271-1/+1
| | | | | | netbios domainname This call is only for the DC mode.
* s4-netlogon: fixed getDcNameEx2 for blank inputsAndrew Tridgell2010-04-281-4/+21
| | | | | | | | | w2k8r2 returns the local DC information on no inputs for getDcNameEx2. This is needed for starting dsa.msc (ADUC) on Win7. CDLAP on the same call returns an error. This uses a parameter fill_on_blank_request to distinguish the two cases.
* s4:cldap_server: allow src_address = NULL in fill_netlogon_samlogon_response()Stefan Metzmacher2010-04-271-2/+10
| | | | | | | If we don't have the client address, we assume it's a local call, maybe ncalrpc. metze
* s4:CLDAP server - make use of the new "samdb_client_site_name" callMatthias Dieter Wallnöfer2010-04-271-2/+3
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-cldap: we should set the w2k8 flags even if not the PDC emulatorAndrew Tridgell2010-04-221-3/+4
| | | | | | these two tests are independent Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4:"samdb_server_site_name" uses - proof for out of memoryMatthias Dieter Wallnöfer2010-04-131-1/+3
|
* s4:fill_netlogon_samlogon_reponse - fix a typoMatthias Dieter Wallnöfer2010-04-131-1/+1
|
* s4:fill_netlogon_samlogon_response - some rework of the detection codeMatthias Dieter Wallnöfer2010-04-131-16/+26
| | | | | | To make it compatible by the use of the "dcesrv_netr_DsRGetDCName*" calls. Some result checks were redundant so I removed them. In other cases I added debug outputs. Sometimes the debug messages were misleading.
* s4:CLDAP - "fill_netlogon_samlogon_reponse" - check for out of memoryMatthias Dieter Wallnöfer2010-04-131-1/+4
|
* s4:use "samdb_forest_name" for the forest DNS domainname lookupMatthias Dieter Wallnöfer2010-04-131-2/+4
|
* Revert "s4:prefer "samdb_*_dn" basedn calls over the "ldb_get_*_dn" functions"Matthias Dieter Wallnöfer2010-04-131-1/+1
| | | | | We should use the "ldb_get_*_basedn" calls since they are available in the LDB library.
* s4:prefer "samdb_*_dn" basedn calls over the "ldb_get_*_dn" functionsMatthias Dieter Wallnöfer2010-04-121-1/+1
| | | | Purely cosmetic change.
* s4:cldap_server - make it "signed-safe"Matthias Dieter Wallnöfer2010-02-251-1/+1
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-server: use GUID_to_ndr_blob() in cldap and smb serversAndrew Tridgell2009-12-101-5/+3
|
* s4-dsdb: added dsdb_functional_level() helper functionAndrew Tridgell2009-12-091-3/+1
|
* s4:sites - get the server site (name) from DSDBMatthias Dieter Wallnöfer2009-10-181-2/+2
|
* s4: Changes the old occurences of "lp_realm" in "lp_dnsdomain" where neededMatthias Dieter Wallnöfer2009-10-141-7/+5
| | | | | | For KERBEROS applications the realm should be upcase (function "lp_realm") but for DNS ones it should be used lowcase (function "lp_dnsdomain"). This patch implements the use of both in the right way.
* s4-cldap: match w2k8-r2 for cldap netlogon bitsAndrew Tridgell2009-10-021-10/+17
| | | | | Windows does not set the 3 high bits, which is strange given their meaning. I've submitted a CAR on this.
* s4-cldap: return domainFunctionality from SAMAndrew Tridgell2009-09-231-0/+5
|
* libds: merge the UF<->ACB flag mapping functions.Günther Deschner2009-07-131-1/+1
| | | | Guenther
* Don't use crossRef records to find our own domainAndrew Bartlett2009-05-261-96/+20
| | | | | | | | A single AD server can only host a single domain, so don't stuff about with looking up our crossRef record in the cn=Partitions container. We instead trust that lp_realm() and lp_workgroup() works correctly. Andrew Bartlett
* s4:cldap: rewrite the cldap library based on tsocketStefan Metzmacher2009-03-191-11/+12
| | | | metze
* s4:cldap: s/private/private_dataStefan Metzmacher2009-02-021-1/+1
| | | | metze
* idl: finally fully share nbt.idl in s3 and s4.Günther Deschner2008-10-151-3/+3
| | | | Guenther
* Sync with Samba 3.Jelmer Vernooij2008-10-141-1/+1
|
* Merge commit 'master/master'Andrew Tridgell2008-10-031-40/+40
|\
| * The IRIX compiler does not like embedded unnamed unionsVolker Lendecke2008-10-021-40/+40
| |
* | fixed the sense of ldb base dn comparisons in two places, and use aAndrew Tridgell2008-10-021-1/+1
|/ | | | | | direct comparison instead of a sub-tree comparison in another this fixes basedn searches on the global catalog port
* Merge ldb_search() and ldb_search_exp_fmt() into a simgle function.Simo Sorce2008-09-231-24/+20
| | | | | The previous ldb_search() interface made it way too easy to leak results, and being able to use a printf-like expression turns to be really useful.
* fixed the DomainDNS searches in the netlogon codeAndrew Tridgell2008-08-221-2/+2
| | | | (This used to be commit 7dce38f9897df02073132f18b1021e0d0636590c)
* Validate input in the CLDAP and DGRAM 'netlogon' responder.Andrew Bartlett2008-08-211-7/+37
| | | | (This used to be commit 682ca3cae1d5e796bc58142f79c99d43742ac85c)
* Add extra bits to our 'netlogon' response in CLDAP and NBT.Matthias Dieter Wallnöfer2008-08-201-1/+7
| | | | | | | | | | | I've studied now the netlogon attribute from the CLDAP request and have compared them with the table presented in the WSPP docs (http://msdn.microsoft.com/en-us/library/cc201036.aspx). The first two bytes seem to be correct, but that the third and fourth one is completely clear with SAMBA 4. Signed-off-by: Andrew Bartlett <abartlet@samba.org> (This used to be commit 3024a43c25e3ec9821d94a27d5cf738890b1b8f3)
* Fix creation of sockaddr in netlogon datagram generator.Andrew Bartlett2008-05-211-1/+1
| | | | | | | The previous code sent uninitialised data, and was the wrong length. Andrew Bartlett (This used to be commit 8e070293cfd522b7464be5bc4d8045572d6d996c)
* Extend the 'netlogon' CLDAP and NBT implementation.Andrew Bartlett2008-05-211-10/+50
| | | | | | | | | | | This now handles checking if the user exists, including validating the ACB mask on the user. This would be a nasty security hole, if Kerberos did not already expose this information anonymously... Andrew Bartlett (This used to be commit 441b286c00f9a7743cdefeb243545bdbd2c94c5e)
* Handle netbios domains in the CLDAP server too.Andrew Bartlett2008-05-171-8/+64
| | | | | | | | This commit also fixes a number of issues found by the NBT-DGRAM and LDAP-CLDAP tests. Andrew Bartlett (This used to be commit 8f99a4b94e95f8bde0f80f92d4e57020c62cfaab)
* Convert the CLDAP server to use the new netlogon structures.Andrew Bartlett2008-05-171-95/+98
| | | | | | | | | This also makes the CLDAP server the place where we create the NETLOGON SAMLOGON replies, regardless of protocol (NBT mailslots or CLDAP). Andrew Bartlett (This used to be commit 8b00a9429470c9ad3646255c340e6a963bd226bd)
* Remove prototypes from build.h in preparation of removing build.hJelmer Vernooij2008-04-141-1/+1
| | | | | altogether. (This used to be commit dbeab2a9cdee4e5f69afeb2603ba29cbed56debd)
* r26681: Use fewer magic numbers.Andrew Bartlett2008-01-061-2/+2
| | | | | Andrew Bartlett (This used to be commit 16edbe1d607390227652ee97a000da98c696c735)
* r26680: Don't always advertise GC functionality.Andrew Bartlett2008-01-061-1/+4
| | | | | Andrew Bartlett (This used to be commit 2f228bcbf63af98ff2d0f498f48d49d0f2926343)
* r26649: Only claim to be a PDC if we are a PDC.Andrew Bartlett2008-01-031-1/+5
| | | | | Andrew Bartlett (This used to be commit fc5746ae95e5a0b751ec19cae1f204c505f4ca27)
* r26402: Require a talloc context in libnetif.Jelmer Vernooij2007-12-211-1/+1
| | | | (This used to be commit a35e51871bbf1ab33fc316fa59e597b722769c50)
* r26401: Don't cache interfaces context in libnetif.Jelmer Vernooij2007-12-211-1/+3
| | | | (This used to be commit 9f975417cc66bfd4589da38bfd23731dbe0e6153)