summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
...
* s4-auth Add DEBUG() for invalid DNs and errors expanding user groups.Andrew Bartlett2010-10-191-0/+5
| | | | | | | Against the OpenLDAP backend, I currently get failures. This makes it possible to debug those failures. Andrew Bartlett
* ldb:"ldb_schema_attribute_by_name_internal" - support the whole unsigned int ↵Matthias Dieter Wallnöfer2010-10-191-7/+5
| | | | | | | | | | | | range Commit 8556602b048e825b35df314d6865f997823ec2bb wasn't quite right - it only restored the functionality on the positive integer range. This one however should now really support the whole unsigned range. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue Oct 19 10:52:08 UTC 2010 on sn-devel-104
* s4:dsdb/schema/schema_init.c - remove a duplicated "talloc_free"Matthias Dieter Wallnöfer2010-10-191-1/+0
|
* s4:samdb.py - remove a pointless commentMatthias Dieter Wallnöfer2010-10-191-1/+0
| | | | | | | | We are only looking for the default DN - but the method name already tells us this. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue Oct 19 10:03:12 UTC 2010 on sn-devel-104
* s4:samdb.py - use a more standard way to get to the domain realm/dns nameMatthias Dieter Wallnöfer2010-10-191-1/+2
| | | | We do always use the canonical name as a base if we don't have it around yet.
* Addition of userPrincipalName attribute when new account is createdLukasz Zalewski2010-10-191-0/+2
|
* s4-gensec Don't give more to sasl_encode() than it will permitAndrew Bartlett2010-10-191-3/+10
| | | | | | | | | We need to ask the library how much data to pass in at any time. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 19 08:37:45 UTC 2010 on sn-devel-104
* s4-gensec Don't upgrade all DIGEST-MD5 connections to sealAndrew Bartlett2010-10-191-12/+21
| | | | | | | | The issue here is that when props.max_ssf = UINT_MAX was always set, as was the maxbufsize, and the connection would always be upgraded, regardless of the callers wishes. Andrew Bartlett
* s4-provisionbackend Allow a fixed URI to be specified for LDAP backendAndrew Bartlett2010-10-193-54/+72
| | | | | | | | This is added to make the 'existing' LDAP backend class more useful, and to allow debuging of our OpenLDAP backend class with wireshark, by forcing the traffic over loopback TCP, which is much easier to sniff. Andrew Bartlett
* s4-provision Remove serverdn parameter from Schema()Andrew Bartlett2010-10-194-14/+7
| | | | | | | We don't need to know the server DN here any more, and it makes no sense for many callers. Andrew Bartlett
* s4-dsdb: register the DCPROMO_OID control with the rootdseAndrew Tridgell2010-10-191-0/+7
| | | | | | | this is needed to allow it over ldap Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Tue Oct 19 04:44:23 UTC 2010 on sn-devel-104
* s4-ldb: increase minor version for 2 new functionsAndrew Tridgell2010-10-192-1/+229
| | | | | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Tue Oct 19 01:27:44 UTC 2010 on sn-devel-104
* s4-ldap: mark all ldap:// requests as untrustedAndrew Tridgell2010-10-191-0/+21
| | | | | | this allows the rootdse module to filter unregistered controls Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dsdb: filter unregistered controls in the rootdse moduleAndrew Tridgell2010-10-191-19/+84
| | | | | | | | | | | if we get an unregistered control in the rootdse module, and the request comes from an untrusted source (eg. ldap://) then we need to: 1) filter the control out if it is marked non-critical 2) give an error if it is marked critical Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-ldb: cope with NULL oid in controlsAndrew Tridgell2010-10-192-9/+11
| | | | | | | the ldap server will mark a control with a NULL oid in order to remove it. This prevents a O(n^2) cost in control handling. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-ldb: added --relax cmdline optionAndrew Tridgell2010-10-191-0/+9
| | | | this adds the relax control
* s4-ldb: added ldb_req_mark_untrusted() and ldb_req_is_untrusted()Andrew Tridgell2010-10-193-0/+30
| | | | | | | | these will be used to determine if a ldb request comes from an untrusted source. We want requests over ldap:// to be marked untrusted so we can reject unregistered controls Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* waf: put -Wl,-no-undefined only in the linker flags, not when compiling CAndrew Tridgell2010-10-191-3/+3
|
* s4:ldap_server - use error code constantMatthias Dieter Wallnöfer2010-10-181-1/+1
| | | | | Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Oct 18 20:32:40 UTC 2010 on sn-devel-104
* ldb: always return PROTOCOL_ERROR if an operation is unsupportedMatthias Dieter Wallnöfer2010-10-184-4/+4
| | | | That's exactly the behaviour of various LDAP servers.
* selftest: use full path for selftest.pl instead of relative pathsMatthieu Patou2010-10-181-1/+2
| | | | | | | | FindBin on solaris8 with perl 5.04 has problem to get the path of the called script if the script is called with a relative path. Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Mon Oct 18 19:50:03 UTC 2010 on sn-devel-104
* ldb:"ldb_schema_attribute_by_name_internal" - switch back to 32bit countersMatthias Dieter Wallnöfer2010-10-181-4/+5
| | | | | | | | Use the signed counter for the binary search but use an unsigned one for accessing the entry. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Oct 18 19:01:31 UTC 2010 on sn-devel-104
* ldb:ldb_tdb.c - fix up counter variablesMatthias Dieter Wallnöfer2010-10-181-5/+8
| | | | | | "find_element" returns an "int" since there is also the possibility that a certain element doesn't exist - then "-1" is returned. But beside this exception treat all other return values as unsigned.
* ldb:ldb_tdb.c - improve the error outputsMatthias Dieter Wallnöfer2010-10-181-13/+25
| | | | | | - Fix indentation - Include always the failing DN - Reorder the outputs to make them consistent
* s4:"util_ldb" - remove some really unused dependanciesMatthias Dieter Wallnöfer2010-10-1811-11/+4
|
* libcli/nbt: convert nbt_name_register_bcast_send/recv to tevent_reqStefan Metzmacher2010-10-181-6/+7
| | | | metze
* s4:nbt_server/register: add a nbtd_register_name_stateStefan Metzmacher2010-10-181-21/+36
| | | | metze
* libcli/nbt: convert nbt_name_register_wins_send/recv to tevent_reqStefan Metzmacher2010-10-181-6/+7
| | | | metze
* s4:nbt_server/winsclient: add a nbtd_wins_register_stateStefan Metzmacher2010-10-181-34/+48
| | | | | | | We now keep the nbtd_wins_register_state around between nbt_name_register_wins_send() and nbt_name_register_wins_recv() metze
* libcli/nbt: convert nbt_name_refresh_wins_send/recv to tevent_reqStefan Metzmacher2010-10-181-6/+6
| | | | metze
* s4:nbt_server/winsclient: add a nbtd_wins_refresh_stateStefan Metzmacher2010-10-181-42/+50
| | | | | | | We now keep the nbtd_wins_refresh_state around between nbt_name_refresh_wins_send() and nbt_name_refresh_wins_recv() metze
* s4:nbt_server/wins: fix compiler warningsStefan Metzmacher2010-10-181-0/+1
| | | | metze
* s4:libcli/util: add pipe related NT_STATUS_RPC_* codesStefan Metzmacher2010-10-181-0/+6
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Oct 18 13:50:55 UTC 2010 on sn-devel-104
* s4-gensec: Add dependency on com_err to GENSEC_KRB5.Andreas Schneider2010-10-181-1/+1
|
* s4-ldb Add LDB_REQ_SET_LOCATION to help track handler useAndrew Bartlett2010-10-184-0/+14
| | | | | | | | | | This greatly assists in debugging what is going on with the ldb handle, as it indicates where it was created. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Oct 18 11:54:46 UTC 2010 on sn-devel-104
* ldb Ensure we mark ongoing LDAP requests as PENDINGAndrew Bartlett2010-10-181-0/+2
|
* s4-openldap-backend Don't set 'dbnosync' on cn=configAndrew Bartlett2010-10-181-1/+0
| | | | | | This isn't valid in current OpenLDAP versions. Andrew Bartlett
* s4-provision Use --ldap-backend-nosync rather than just --nosyncAndrew Bartlett2010-10-181-2/+1
| | | | | | | For some reason we had both options, and --ldap-backend-nosync is the better name. Andrew Bartlett
* heimdal_build: Add dependency on com_err to HEIMDAL_CONFIG.Jelmer Vernooij2010-10-181-1/+1
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Mon Oct 18 10:27:47 UTC 2010 on sn-devel-104
* dsdb simple_ldap_map depends on LDBSAMBAAndrew Bartlett2010-10-181-1/+1
| | | | | | | | | | This shows up at build time on MacOS and runtime on Linux when we use the LDAP backend. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Oct 18 00:57:51 UTC 2010 on sn-devel-104
* Revert "s4:dsdb - make the RELAX control private"Andrew Bartlett2010-10-182-8/+9
| | | | | | | | This must be available to the OpenLDAP backend, to set the GUID values in some situations. We need a proper ACL mechanism to control the use or abuse of this control. This reverts commit 10adee89367cee9add993869280542418fb3d370.
* heimdal: Attempt to fix path of hdb_asn1.hJelmer Vernooij2010-10-181-0/+1
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Mon Oct 18 00:15:11 UTC 2010 on sn-devel-104
* dsdb: Module aliases require to be prefixed with the subsystem name.Jelmer Vernooij2010-10-181-2/+2
|
* dcerpc_samr: Fix -l arguments for dcerpc_samr and dcerpc_atsvc.Jelmer Vernooij2010-10-172-2/+2
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Oct 17 19:15:43 UTC 2010 on sn-devel-104
* heimdal: Add local simpler copy of to_list().Jelmer Vernooij2010-10-171-9/+17
|
* Revert "s4:remove "util_ldb" submodule and integrate the three gendb_* calls ↵Matthias Dieter Wallnöfer2010-10-1727-92/+27
| | | | | | | | | | | | in "dsdb/common/util.c"" This reverts commit 8a2ce5c47cee499f90b125ebde83de5f9f1a9aa0. Jelmer pointed out that these are also in use by other LDB databases - not only SAMDB ones. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Oct 17 13:37:16 UTC 2010 on sn-devel-104
* s4:remove "util_ldb" submodule and integrate the three gendb_* calls in ↵Matthias Dieter Wallnöfer2010-10-1727-27/+92
| | | | | | | | | "dsdb/common/util.c" They're only in use by SAMDB code. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Oct 17 09:40:13 UTC 2010 on sn-devel-104
* s4:ldb-samba/ldb_wrap.c - fix indentation and trailing whitespacesMatthias Dieter Wallnöfer2010-10-171-36/+36
|
* s4:"wrap_casefold" - move it to "ldb_wrap.c" since it's only used thereMatthias Dieter Wallnöfer2010-10-171-0/+9
|
* s4:dsdb - make the RELAX control privateMatthias Dieter Wallnöfer2010-10-162-9/+8
| | | | | | | This makes our LDAP much more secure and less error-prone. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Oct 16 19:43:36 UTC 2010 on sn-devel-104