summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
* s4:dsdb remove unused variableAndrew Bartlett2009-08-241-1/+0
|
* s4:dsdb use talloc_strndup() in GET_STRING_LDB() rather than walk off the endAndrew Bartlett2009-08-241-7/+17
| | | | | | | | | | The problem is that samdb_result_string() and ldb_msg_find_attr_as_string() both simply cast the string, rather than ensuring the return value is NULL terminated. This may be best regarded as a flaw in LDB, but fixing it there is going to be more difficult. Andrew Bartlett
* s4:cmdline: setup talloc log and abort functionsStefan Metzmacher2009-08-242-5/+7
| | | | metze
* s4:build: require talloc >= 2.0.0Stefan Metzmacher2009-08-241-1/+1
| | | | metze
* s4:ntp_signd Fix bug 6656 - Set protocol version to 0, as used by ntpdAndrew Bartlett2009-08-223-7/+6
| | | | | | | The change to protocol version 1 was not intentional, and broke the protocol established with the ntp.org project. Andrew Bartlett
* s4:clientSam Liddicott2009-08-211-3/+7
| | | | | | | Put was assuming that the remote name was always absolute, and not relative to the current remote directory. Signed-off-by: Sam Liddicott <sam@liddicott.com>
* s4:ldb Python requires that a 'compare' handler return -1, 0 or 1Andrew Bartlett2009-08-211-1/+5
|
* s4:ldb Use length-limited printf to avoid walking off end of stringsAndrew Bartlett2009-08-211-1/+1
| | | | | | | This should ensure the debug messages do not have random characters at their ends. Andrew Bartlett
* s4:kerberos Use MIT compatible names for these enc typesAndrew Bartlett2009-08-212-3/+3
| | | | | | | | | This is a small start on (ie, the only trivial part of) the work shown in: http://k5wiki.kerberos.org/wiki/Projects/Samba4_Port#Samba.27s_use_of_Heimdal_symbols.2C_with_MIT_differences (a table of all Kerberos symbols used in Samba4, and notes on where they differ from those provided with MIT Kerberos) Andrew Bartlett
* s4-spoolss: add stubs for new idl opcodes in spoolss server.Günther Deschner2009-08-201-0/+140
| | | | Guenther
* added basic support for rename in DRS replicationAndrew Tridgell2009-08-191-5/+9
| | | | | | | Added simple DRS rename support in replication. This should be done async, and I'm not sure if we should also do any repl data updates to indicate the rename. I'm still learning how this stuff works, but at least this allows a rename on a DC to propogate correctly
* we need the Deleted Objects container for replicationAndrew Tridgell2009-08-191-0/+6
| | | | | When objects are deleted they get renamed to this container. The container needs to exist when we provision
* s4 winbind: Quiet down the WINBINDD_DOMAIN_INFO handler stub warningKai Blin2009-08-181-1/+1
|
* s4 winbind: Silence compile warning by adding new commands to the listKai Blin2009-08-181-0/+3
|
* s4 winbind: Implement a stubbed out version of WINBINDD_DOMAIN_INFOKai Blin2009-08-182-1/+19
|
* s4 ctags: Stop *_proto.h files from cluttering up the tagsKai Blin2009-08-181-1/+1
|
* s4: int32 handling: previous fix was not fully correctMatthias Dieter Wallnöfer2009-08-171-1/+1
|
* s4: Make the int32 problem more clear - and fix another errorMatthias Dieter Wallnöfer2009-08-173-1/+9
|
* s4:librpc/rpc: fix DEBUG() messageStefan Metzmacher2009-08-181-1/+1
| | | | metze
* fixed make test reporting success when provision failsAndrew Tridgell2009-08-171-24/+51
| | | | | | | | | | | | | | We were getting build test 'pass' on the build farm when the provision is failing. The cause was the use of filter pipelines in the selftest code in the makefile. A bourne shell will by default report the error status of the last element of the pipeline, which means when provision failed, make thought everything had passed. We could use the bash 'pipefail' option to fix this, but it isn't portable, so instead I've modified the makefile to touch st/st_done when the first element in the pipeline completes successfully. That means we now get errors in make test, at the expense of making the makefile even more horrible than it was.
* s4: Fixed the int32 datatype supportMatthias Dieter Wallnöfer2009-08-172-4/+4
| | | | Should finally fix bug #6136 ("groupType", "sAMAccountType" ... attributes).
* fixed the buildAndrew Tridgell2009-08-171-3/+5
| | | | | the changes from Matthias didn't take account of url and lp being None in some ldb python instances in 'make test'
* s4: Major rework of the LDB/SAMDB/IDMAP python bindingsMatthias Dieter Wallnöfer2009-08-174-55/+57
| | | | | | | | | | - Centralise the lookups for the default domain (root) in the call "domain_dn" - Reduce the LDB connections attempts ("connect" calls) from three to one - tools should load faster - Make the LDB connection init more like the "ldb_wrap_connection" call - Load the right UTF8 casefolder which fixes up problems with special characters (discovered by me: e.g. small "Umlaute" (ä, ö, ü, ...) in the DN weren't upcased - so records "seemed" lost in TDB)
* s4:python tools - Centralise the lookups for the default domain (root) in ↵Matthias Dieter Wallnöfer2009-08-172-16/+7
| | | | the call "domain_dn" from SamDB
* s4:pyglue Add a wrapper for loading the correct UTF8 casefolderMatthias Dieter Wallnöfer2009-08-171-0/+20
| | | | Needed for special characters (e.g. in German "Umlaute")
* s4:ldb python bindings: Handle the parameters of the connect call in the ↵Matthias Dieter Wallnöfer2009-08-171-2/+8
| | | | right way
* Revert "s4:samdb python bindings - we don't need the attributes here"Matthias Dieter Wallnöfer2009-08-171-1/+2
| | | | | | | This reverts commit 53ef426e6f68728763436bd0cd3dd91180c00579. As abartlet pointed out this causes to load all attributes and therefore gives us more here than we need (only the check for the DN)!
* sigh - still not rightAndrew Tridgell2009-08-171-5/+5
|
* fixed up add_foreign againAndrew Tridgell2009-08-172-23/+23
| | | | | | my last patch was not even close ... I'll leave abartlet to work out how to fix the test case
* more fixups from provision changesAndrew Tridgell2009-08-172-24/+24
| | | | | | Andrew, can you please check this? The idmap.setup_name_mapping tests look totally out of place here. I'm also not sure I captured your intention with the other changes
* s4:build: require tevent 0.9.7 with tevent_req_cancel()Stefan Metzmacher2009-08-171-1/+1
| | | | metze
* skip the autoidl testAndrew Tridgell2009-08-171-0/+1
| | | | | The autoidl test is not needed now that we have IDL source available. It also generates a lot of errors in the logs.
* fixed up some provision errors from the recent changesAndrew Tridgell2009-08-171-3/+2
|
* s4:provision Add comments to the provision scriptAndrew Bartlett2009-08-171-1/+10
| | | | | | | Hopefully this will explain a bit more whey things are done the way that they are done. Andrew Bartlett
* s4:provision Avoid one more call to ltdb_reindexAndrew Bartlett2009-08-172-6/+19
| | | | | | | | | The Samba4 schema code (called via samdb.set_schema_from_ldb(schema.ldb)) manages the @ATTRIBUTES and @INDEXLIST records, so don't wipe them early. The chances are that we will not change them anyway. Andrew Bartlett
* s4:ldb Remove obsolete comment about ldb_tdb's sequence numAndrew Bartlett2009-08-171-2/+0
|
* make sure we update the current schema->prefixes when we add a new prefixAndrew Tridgell2009-08-171-0/+9
| | | | | | This triggered a failure in the updateNow schema test, as the current global schema was not being updated when a new schema element was added
* fixed the updateNow schema test to use a canonical OIDAndrew Tridgell2009-08-171-1/+2
| | | | | | | | The expression time.strftime("%s", time.gmtime())[3:] leads to a string with a leading 0. When added then read back from the prefix map this leads to a different string, so it is never found. Use the simpler str(random.randint(a,b)) expression instead
* s4:selftest Remove the 'subunit filter' from make testenv etcAndrew Bartlett2009-08-171-2/+2
| | | | | | | | | The extra filter is no use for 'testenv', as we are not running tests, but an xterm. The filter also breaks running 'GDB_PROVISION=yes make test', but at least if we can run 'GDB_PROVISION=yes make testenv' then we can debug provision. Andrew Bartlett
* s4:libcli/ldap Explain why we set a hostname for ldapi:// connectionsAndrew Bartlett2009-08-171-1/+3
| | | | | | | It is a pretty odd thing to do, and it's only because of the restrictions of DIGEST-MD5 in Cyrus SASL that we do it. Andrew Bartlett
* s4:provision Fix existing ldapi:// backend detection exceptionAndrew Bartlett2009-08-171-1/+1
| | | | | | Found by Oliver Liebel <oliver@itc.li> Andrew Bartlett
* s4:install Remove provision-backend script from 'make install'Andrew Bartlett2009-08-171-1/+1
| | | | | | Spotted by MICHAEL BROWN <mbrown@mesainc.com> Andrew Bartlett
* s4:provision Make sure that we don't use Kerberos to our LDAP backendAndrew Bartlett2009-08-171-1/+3
| | | | | | | This makes no sense, and just causes trouble - we are aiming for DIGEST-MD5 or NTLM. Andrew Bartlett
* s4:provison Print the LDAP backend admin username/passwordAndrew Bartlett2009-08-171-6/+14
|
* s4: Re-add --ldapadminpass as an option to provisionAndrew Bartlett2009-08-172-5/+12
| | | | | | | | This should make setting up LDAP servers more predictable. When not specified, it is random Andrew Bartlett
* s4:python Allow 'no such object' on the delete of the DNAndrew Bartlett2009-08-171-1/+5
| | | | | | | | | | This fixes the recursive delete in erase_partitions() For reasons I cannot understand, it is possible to get 'no such object' trying to delete a DN I just search for without error. Oh well... Andrew Bartlett
* s4:provision Keep a single transaction for the erase and rebuildAndrew Bartlett2009-08-171-15/+6
| | | | | | | | | Using a single transaction to both erase the bulk of the data and the rebuild of that data means that the in-memory index list is maintained, and not written out to disk until it is all compleated. All the writes then occour at the end. Andrew Bartlett
* s4:provision Fixes for Fedora DS schema mapping with full AD schemaEndi Sukma Dewata2009-08-171-0/+8
|
* s4:provision Rework provision-backend into provisionAndrew Bartlett2009-08-178-765/+594
| | | | | | | | | | | | | | | This removes a *lot* of duplicated code and the cause of much administrator frustration. We now handle starting and stopping the slapd (at least for the provision), and ensure that there is only one 'right' way to configure the OpenLDAP and Fedora DS backend We now run OpenLDAP in 'cn=config' mode for online configuration. To test what was the provision-backend code, a new --ldap-dryrun-mode option has been added to provision. It quits the provision just before it would start the LDAP binaries Andrew Bartlett
* s4:provision Move helper functions back to provisionAndrew Bartlett2009-08-171-21/+0
| | | | (These will be added back in a future commit)