summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2010-08-22s3: Pass the rhost through smb_pam_accountcheckVolker Lendecke5-8/+11
2010-08-22s3: Rename auth.c:backends to auth_backendsVolker Lendecke1-4/+4
2010-08-22s3: Fix some nonemtpy blank linesVolker Lendecke2-12/+11
2010-08-22s4: Only install testparm to /usr/bin/, no longer to /usr/sbin.Jelmer Vernooij1-1/+1
2010-08-22s4: Install testparm to /usr/bin, consistent with old behaviour.Jelmer Vernooij1-3/+3
2010-08-22s4-waf: re-use SAMBA_LIBRARY() in building shared modulesAndrew Tridgell1-35/+15
make SAMBA_MODULE() call SAMBA_LIBRARY() to do the heavy lifting. This fixes the problem with modules being a bit too slim :-) Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>
2010-08-22s3: Move check_access to cgi.c, its only userVolker Lendecke3-82/+81
2010-08-22s3: Replace calls to check_access by allow_accessVolker Lendecke4-10/+17
We already have both the name and address of the client stored now
2010-08-22Avoid use of Samba DTD, which requires net access.Jelmer Vernooij10-14/+10
2010-08-22wafsamba: fix CHECK_XSLTPROC_MANPAGES().Jelmer Vernooij1-12/+5
2010-08-22Use DocBook DTD rather than Samba one, as no Samba-specific things areJelmer Vernooij3-3/+3
used in the tdb manpages.
2010-08-22s4-net: better error message on net setpasswordAndrew Tridgell1-3/+5
2010-08-22librpc: add python bindings for the netlogon pipeAndrew Tridgell1-0/+6
Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>
2010-08-22pyldb: do type checking on the list form of ldb addAndrew Tridgell1-0/+6
Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>
2010-08-22pidl: give the varible name for bad type in python callsAndrew Tridgell1-1/+1
This makes it much clearer which argument to a function had the wrong type
2010-08-22pidl: cope with bad type conversions in unionsAndrew Tridgell1-1/+9
This prevents a crash when converting bad types in NDR unions Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>
2010-08-22pidl: added a __ndr_print__() method on python NDR objectsAndrew Tridgell1-0/+13
This allows you to print a returned NDR structure using s.__ndr_print__() which gives an easy view of complex structures, such as those from netlogon
2010-08-21s3: Fix netgrent configure checks for compilers not supporting ↵Kai Blin1-1/+3
-Werror-implicit-function-declaration This should fix bug 7620.
2010-08-21s3: Fix bug 7635Volker Lendecke1-2/+4
2010-08-20Fix bug 7627 - smbclient ignores "-I" when used with "-L", fails name ↵Jeremy Allison1-2/+3
resolution. Still needs some more work to fix missing netbios name issues, but fixes underlying issue of IP address being ignored. Jeremy.
2010-08-20Fix const warning.Jeremy Allison2-2/+2
2010-08-21s4-ndr_basic.c: Fix ndr_*_hyper() when [bigendian] data is processedKamen Mazdrashki1-0/+6
2010-08-21s4-drsuapi: Implement custom printing for drsuapi protocol forKamen Mazdrashki2-1/+108
drsuapi_DsReplicaAttribute and drsuapi_DsAttributeValueCtr objects This makes tracing what data has been transferred much easier
2010-08-20s3: Use sconn->client_id in session_claimVolker Lendecke1-10/+2
2010-08-20s3:librpc: make dcerpc_read_ncacn_packet_send/recv() availableStefan Metzmacher1-0/+9
metze
2010-08-20librpc/rpc: move dcerpc_read_ncacn_packet_send/recv() to dcerpc_util.cStefan Metzmacher3-174/+187
metze
2010-08-20s3:Makefile.in: use python with -u to disable stdin/out cachingStefan Metzmacher1-1/+1
metze
2010-08-20s3:winbindd: fix error handling in wb_next_grent_fetch_done()Stefan Metzmacher1-1/+9
We should not use 'result' uninitialized. metze
2010-08-20Remove place-holders when it is single domainZahari Zahariev1-18/+32
This patch changes the behavior of LDAPCmp in a single domain scenario. No place-holders will be applied during comparison so replication will be fully tested and even the silightest difference will pop up. There is a second smaller fix when we compre hosts in different domains. This fix disables ${SERVERNAME} paace-holder when there are more then one serevr (domain controller) in the given domain.
2010-08-20s4-dsdb: the RODC_JOIN control also changes samAccountNameAndrew Tridgell1-9/+13
when adding a user with the RODC_JOIN control, the samAccountName is automatically set to the krbtgt_NNNNN form Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-08-20s4-pysamdb: fixed get_domain_sid()Andrew Tridgell1-1/+1
we need to actually return the SID! Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-08-20s4-ldb: added support for rodc_control in ldbAndrew Tridgell1-0/+27
this allows you to specify the RODC join control in python ldb calls or on the command line Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-08-20s4-drs: fixed the error code for EXOP_REPL_SECRET getncchanges callsAndrew Tridgell1-10/+8
when we deny a EXOP_REPL_SECRET call we should set the exop error code to NONE, and the main return code to WERR_DS_DRA_ACCESS_DENIED (based on observing windows server behaviour) Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-08-20s4-drs: bring us much closer to the docs for DRS secret replicationAndrew Tridgell1-9/+241
The rules for when a RODC can replicate secrets are: - it can always replicate its own acct - it can also replicate its krbtgt acct - it can't replicate other krbtgt accts - it can't replicate interdomain trust accounts - it can't replicate users in the denied group list - it can replicate users in the allowed group list otherwise it can't replicate Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-08-20s4-dsdb: fixed dsdb_get_extended_dn_sid()Andrew Tridgell1-1/+1
it should honor the component_name Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-08-20idl: added the RODC allow/deny secrets RIDsAndrew Tridgell1-0/+2
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-08-20s4-drs: implement RODC attribute filtering overrideAndrew Tridgell2-39/+79
When a RODC uses extended getncchanges operation DRSUAPI_EXOP_REPL_SECRET it gets an override on the ability to replicate the secret attributes. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-08-20s4-drs: added sam_ctx_system on DRS bind stateAndrew Tridgell2-0/+20
The getncchanges call needs to be able to access the sam as the system user for RODC clients. To do this it needs a sam_ctx connection with system credentials Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-08-20s3:loadparm: make lp_load_ex static. We have wrappers for external callers.Michael Adam2-14/+7
2010-08-19s3-libsmbclient Convert dos error codes to NTstatus in async libsmbclient.Jim McDonough2-8/+2
DOS error codes were being lost with the conversion to async libsmbclient. If we're passing around NTSTATUS internally, let's just convert it when we get it. DOS ACCESS_DENIED on nautilus was not prompting for other credentials, because it was not being mapped.
2010-08-19s3-ads: Fix wrong test in if statementSimo Sorce2-1/+3
2010-08-19s3-waf: fix the build.Günther Deschner1-1/+1
Guenther
2010-08-19s3-ldapsam: add samba.ldif LDAP schema.Günther Deschner1-0/+185
This one is suiteable for cn=config setups and should be added via ldapadd. Thanks to Sumit Bose <sbose@redhat.com> for providing it. Guenther
2010-08-19s3-cli: fix uninitialized variable.Günther Deschner1-1/+1
Volker, please check. Guenther
2010-08-19s3-idmap: fix uninitialized variable in idmap_tdb_sids_to_unixids_action().Günther Deschner1-1/+1
Michael, please check. Guenther
2010-08-19s4 provision: POLICY_ACL is already an FS acl no need to translate itMatthieu Patou1-2/+1
2010-08-19s4 provision: Add some documentation to GPO related functionsMatthieu Patou2-15/+58
2010-08-19unit tests: debug to ease locating pb, remove dir if exists to avoid errorMatthieu Patou1-2/+8
2010-08-19s4 upgradeprovision: exit with a non null return code so that it can be ↵Matthieu Patou1-0/+1
trapped in blackbox tests
2010-08-19s4 upgradeprovision: add more attrbutes the ignore listMatthieu Patou2-5/+20
Also format in a pretty way the int64 ranges