summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
...
* s4-dsdb: fix a warning about unused variableMatthieu Patou2012-06-221-3/+0
|
* s4:torture/raw: add raw.session.expire1Stefan Metzmacher2012-06-221-0/+200
| | | | | | | This demonstrates the interaction of CAP_DYNAMIC_REAUTH and NT_STATUS_NETWORK_SESSION_EXPIRED. metze
* s4:torture/smb2: run smb2.session.reauth5 in a subdirectoryStefan Metzmacher2012-06-221-14/+77
| | | | | | | | | This way we can give anonymous full access to the directory. metze Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Fri Jun 22 11:30:06 CEST 2012 on sn-devel-104
* s4:torture/smb2: add smb2.durable-open.lock-oplockStefan Metzmacher2012-06-221-0/+79
| | | | | | | metze Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Fri Jun 22 03:37:54 CEST 2012 on sn-devel-104
* s4:torture/smb2: rename smb2.durable-open.lock to smb2.durable-open.lock-leaseStefan Metzmacher2012-06-221-4/+4
| | | | metze
* samdb: Accept a list of member variables rather than a comma-separated string.Jelmer Vernooij2012-06-215-23/+25
|
* s4-provision: Give better clues on what Samba needs for s3fs ACL supportAndrew Bartlett2012-06-211-1/+7
| | | | | Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Thu Jun 21 14:07:55 CEST 2012 on sn-devel-104
* s4:torture/smb2: add smb2.durable-open.delete_on_close1Stefan Metzmacher2012-06-211-2/+126
| | | | | | | metze Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Thu Jun 21 10:19:00 CEST 2012 on sn-devel-104
* samba-tool: gpo: Fix creation of filesystem ACL from directory ACLAmitay Isaacs2012-06-211-2/+8
| | | | | Autobuild-User(master): Amitay Isaacs <amitay@samba.org> Autobuild-Date(master): Thu Jun 21 03:25:57 CEST 2012 on sn-devel-104
* s4-pysmb: Parse security info as an unsigned integerAmitay Isaacs2012-06-211-1/+1
|
* s4-torture: Expand whoami test to confirm the user token.Andrew Bartlett2012-06-201-2/+44
| | | | | | | | | | | | | This uses the tokenGroups attribute on LDAP and the posix whoami call to confirm that user token matches between LDAP and CIFS. I have a seperate patch for the anonymous case, because this isn't consistent at this stage, and we need to study and fix that. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Jun 20 18:43:43 CEST 2012 on sn-devel-104
* s4-torture: Change the unix.whoami test to use torture_assert()Andrew Bartlett2012-06-201-24/+19
|
* s4-idmap: Add parameter 'idmap_ldb:use rfc2307' and correct implementation ↵Andrew Bartlett2012-06-203-22/+51
| | | | errors
* s4-provision: Remove --slapd-path optionAndrew Bartlett2012-06-203-9/+6
| | | | | | | | This just leaves a default enough for the test code to still check the start of the provision. This may well be removed in future, and we wish to reduce the extra options to provision. Andrew Bartlett
* s4-provision: Remove last unused remenants of the 'sid generator' configurationAndrew Bartlett2012-06-201-10/+3
| | | | | | This was part of the now-abandoned S4 AD LDAP backend project. Andrew Bartlett
* Revert "s4-libcli: Remove unused finddcs_nbt"Andrew Bartlett2012-06-201-0/+311
| | | | | | | | | | | | | | | | This reverts commit 06c90cb6f55701effa4cbafaf189a4de8471949b. There is genuine interest in using this currently unused code, so put it back into the tree to avoid folks having to rewrite it. It should be carefully hooked back into libnet at some point, and possibly told how to talk to the s3 nmbd socket if nbt_server isn't running. The wscript patches are skipped, due to the way the extra dep interacted with the build system. When used, this will be resolved. Andrew Bartlett
* auth: Use only security_token_is_system to determine that a user is SYSTEMAndrew Bartlett2012-06-191-2/+0
| | | | | | | | | | This removes the duplication on how to detect that a user is system in Samba now that the smbd system account is also only SID_NT_SYSTEM we can use the same check everywhere. Andrew Bartlett Signed-off-by: Andreas Schneider <asn@samba.org>
* lib/tdb_wrap: use tdb directly, not tdb_compat.Rusty Russell2012-06-192-3/+1
| | | | | Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
* ldb: use tdb directly, not tdb_compat.Rusty Russell2012-06-191-6/+6
| | | | | Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
* heimdal:lib/wind: include <stdlib.h> at the endStefan Metzmacher2012-06-173-3/+3
| | | | | | | | | | | This makes sure config.h gets includes first. This should fix the build on AIX. metze Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Sun Jun 17 16:16:24 CEST 2012 on sn-devel-104
* heimdal:lib/wind: make sure errorlist_table.c includes config.h as first headerStefan Metzmacher2012-06-161-1/+1
| | | | | | | | | This should fix the build on AIX. metze Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Sat Jun 16 23:59:07 CEST 2012 on sn-devel-104
* heimdal:lib/krb5: don't name a struct 'token'Stefan Metzmacher2012-06-161-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | This is a static const struct and the name is never used, so just make it an anonymous struct. This hopefully fixes the build on AIX: "../source4/heimdal/lib/roken/roken-common.h", line 276.9: 1506-236 (W) Macro name __attribute__ has been redefined. "../source4/heimdal/lib/roken/roken-common.h", line 276.9: 1506-358 (I) "__attribute__" is defined on line 45 of ../source4/heimdal/lib/com_err/com_err.h. "../source4/heimdal/lib/krb5/expand_path.c", line 331.21: 1506-334 (S) Identifier token has already been defined on line 98 of "/usr/include/net/if_arp.h". "../source4/heimdal/lib/krb5/expand_path.c", line 390.43: 1506-019 (S) Expecting an array or a pointer to object type. "../source4/heimdal/lib/krb5/expand_path.c", line 391.31: 1506-019 (S) Expecting an array or a pointer to object type. "../source4/heimdal/lib/krb5/expand_path.c", line 392.20: 1506-019 (S) Expecting an array or a pointer to object type. "../source4/heimdal/lib/krb5/expand_path.c", line 392.48: 1506-019 (S) Expecting an array or a pointer to object type. "../source4/heimdal/lib/krb5/expand_path.c", line 393.39: 1506-019 (S) Expecting an array or a pointer to object type. Waf: Leaving directory `/opt/home/build/build_farm/samba_4_0_test/bin' Build failed: -> task failed (err #1): {task: cc expand_path.c -> expand_path_52.o} gmake: *** [all] Error 1 metze Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Sat Jun 16 15:20:59 CEST 2012 on sn-devel-104
* s4-classicupgrade: Also ask testparm for 'smb passwd file'Andrew Bartlett2012-06-161-0/+2
|
* s4-classicupgrade: Use "samba classic" description for samba3 NT4-like ↵Andrew Bartlett2012-06-162-11/+13
| | | | domains in samba3upgrade
* s4-lib/param: FLAG DAY for the default FILE SERVERAndrew Bartlett2012-06-161-4/+4
| | | | | | | | | | | This commit changes the default file server to be s3fs. Existing installs wishing to keep the ntvfs file server need to set this in their smb.conf: server services = +smb -s3fs dcerpc endpoint services = +winreg +srvsvc Andrew Bartlett
* s4-s3upgrade: Assert that administrator has a SID of -500, and only skip ↵Andrew Bartlett2012-06-161-2/+9
| | | | | | | | root if it is -500 Many upgraded installations have root as -1000, and so that account needs to be kept. Andrew Bartlett
* s4-s3upgrade: Add my wins.dat and fix the parsing errorAndrew Bartlett2012-06-162-1/+4
| | | | | | | The issue was that the numbers at the end of the lines are space padded. Andrew Bartlett
* s4-s3upgrade: improve idmap import to use posixAccount and posixGroup entriesAndrew Bartlett2012-06-161-2/+32
|
* s4-idmap: Add mapping using uidNumber and gidNumber like idmap_adAndrew Bartlett2012-06-162-2/+123
| | | | | | | | | | This is a solution for users who are upgrading from Samba 3.x in particuar, or have clients that will be using idmap_ad. This avoids needing to have duplicate values in idmap.ldb and in the directory. No check for conflicts is made with the idmap.ldb - the AD store always wins. Andrew Bartlett
* s4-selftest: Add tests for dbcheck on an old database that needs repairAndrew Bartlett2012-06-161-0/+2
| | | | | | | | | We changed a lot since alpha13, so there are lots of legitimate errors to fix. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Sat Jun 16 05:44:15 CEST 2012 on sn-devel-104
* s4-dbcheck: Always specify the dhcheck controlAndrew Bartlett2012-06-161-0/+1
| | | | | | This will then allow us to make schema modifications, overriding the default ban. Andrew Bartlett
* selftest: Add targetdir and tdbrestore parameters to undump.shAndrew Bartlett2012-06-161-5/+22
|
* lib/param: Use server role = 'standalone server' to be consistant with ↵Andrew Bartlett2012-06-152-7/+11
| | | | | | | | member server standalne is left as an alias. Andrew Bartlett
* lib/param: Create a seperate server role for "active directory domain ↵Andrew Bartlett2012-06-1523-39/+48
| | | | | | | | | | | | | | | controller" This will allow us to detect from the smb.conf if this is a Samba4 AD DC which will allow smarter handling of (for example) accidentially starting smbd rather than samba. To cope with upgrades from existing Samba4 installs, 'domain controller' is a synonym of 'active directory domain controller' and new parameters 'classic primary domain controller' and 'classic backup domain controller' are added. Andrew Bartlett
* heimdal:lib/hdb: <config.h> needs to be the first headerStefan Metzmacher2012-06-151-2/+2
| | | | | | This should fix build problems on AIX. metze
* s4:ntvfs: add '_fn' suffix to all ntvfs_ops function pointersStefan Metzmacher2012-06-1312-439/+439
| | | | | | | | | | | This hopefully fixes the build on systems where _LARGE_FILES triggers defines of syscalls e.g. '#define lseek lseek64' on AIX. metze Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Wed Jun 13 11:03:15 CEST 2012 on sn-devel-104
* s4:smbd: fix typosMichael Adam2012-06-122-3/+3
| | | | | Autobuild-User(master): Michael Adam <obnox@samba.org> Autobuild-Date(master): Tue Jun 12 09:21:15 CEST 2012 on sn-devel-104
* s4:kerberos: fix typos in kerberos-notes.txtMichael Adam2012-06-121-2/+2
|
* s4:gensec: fix a comment typoMichael Adam2012-06-121-1/+1
|
* s4:torture: fix use of non-existent word (existant)Michael Adam2012-06-128-15/+15
|
* s4:tests: fix use of a non-existent word (existant)Michael Adam2012-06-123-4/+4
|
* s4:provision: fix use of non-existent word (existant)Michael Adam2012-06-121-1/+1
|
* s4:registry:testsuite: fix use of non-existent word (existant)Michael Adam2012-06-121-3/+3
|
* s4:heimdal: fix use of a non-existent word (existant)Michael Adam2012-06-121-1/+1
|
* s4-selftest: Test samba-tool drs replicate --local --full-syncAndrew Bartlett2012-06-113-2/+12
|
* s4/pvfs: handle non-POSIX compliant Tru64, NetBSD and FreeBSD errno on ↵Björn Jacke2012-06-101-1/+22
| | | | | | O_NOFOLLOW symlink open calls see also f75f1d62339f0accb4e574645b1d265c75a01b5b
* heimdal:lib/asn1: try to fix the build on IRIXStefan Metzmacher2012-06-101-2/+6
| | | | | | | | | | | cc-1028 cc: ERROR File = ../source4/heimdal/lib/asn1/gen_template.c, Line = 548 The expression used must have a constant value. struct templatehead template = { 0L, &(template). tqh_first }; ^ If this really fixes the IRIX build, we'll propose this for heimdal upstream. metze
* s4-torture: fsrvp test suiteDavid Disseldorp2012-06-083-2/+574
| | | | Covers most operations defined by the File Server Remote VSS Protocol.
* waf: support --without-ad-dc for Heimdal (embedded and system) as wellAlexander Bokovoy2012-06-073-3/+3
| | | | | | --without-ad-dc was hardwired to mean --with-system-mitkrb5. With this change it also possible to build source3/ code and source4/ client side without building AD DC functionality using Heimdal (embedded or system).
* s4-libcli: Remove unused finddcs_nbtAndrew Bartlett2012-06-072-314/+3
| | | | | | | | | | | | | This would only do the NBT getdc lookup for a single DC (but would find multiple DCs at first stage), but more particular it of course uses Netbios rather than DNS names. In any case it was also unused, as we use CLDAP for reliable DC location these days. Found by callcatcher Andrew Bartlett