summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2011-08-19s3_upgrade: Set the administrator password on upgradeAmitay Isaacs1-2/+22
In the upgrade process, set the administrator password from the existing root or administrator account. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-19s3-passdb: Fix the get/set routines for pw_history for samuAmitay Isaacs1-2/+2
Return pw_history with current string length (which is a multiple of PW_HISTORY_ENTRY_LEN) and same thing for setting the pw_history. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-19s3_upgrade: Do not add administrator and root accounts from s3 to s4Amitay Isaacs1-0/+2
Need to copy the password from s3 for administrator/root to s4. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-19python-samba3: Secrets file loaded from private dir, not lib dirAmitay Isaacs2-2/+8
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-19s3-passdb: Display username when reporting error on add_sam_account.Amitay Isaacs1-1/+2
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-19s3-passdb: Use pdb_get_nt_passwd() to get nt passwd.Amitay Isaacs1-1/+1
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-19s3upgrade: Add idmap migration, users/groups importAmitay Isaacs1-40/+193
Added users/groups import from s3 using python wrapper for passdb. Fix idmap entries for users/groups when migrating from s3 idmap. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-19provision: Add idmap database handle to the result of provisionAmitay Isaacs1-0/+2
It is required in s3_upgrade script to migrate idmap database from s3 to s4. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-19samba3-python: Add methods to get any entry (user/group) and its sid from idmapAmitay Isaacs1-0/+14
This is required in upgrade_s3 script to migrate idmap database from s3 to s4 Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-19py_security: Fix comparison between two dom_sid objectsAmitay Isaacs1-1/+9
dom_sid_compare() function can return values other than -1, 0, 1. Python requires compare function to return value from [-1, 0, 1]. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-19s3-passdb: Fix call for search_aliases(). It returns bool and not NTSTATUS.Amitay Isaacs1-4/+1
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-19s3-passdb: Return list of sids from python wrapper enum_group_membersAmitay Isaacs1-5/+9
Instead of returning rids as the C api does, return sids, so it is similar to enum_aliasmem and can be used easily in s3_upgrade. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-19s3-passdb: Make arguments for python wrapper enum_group_mapping() optionalAmitay Isaacs1-5/+10
Set the defaults, if no arguments are provided. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-19s3-passdb: Added python wrapper for passdb methodsAmitay Isaacs1-21/+831
Added following methods - uid_to_sid, gid_to_sid, sid_to_id, new_rid - get_trusteddom_pw, set_trusteddom_pw, del_trusteddom_pw, enum_trusteddoms - get_trusted_domain, get_trusted_domain_by_sid, set_trusted_domain, del_trusted_domain, enum_trusted_domains - get_secret, set_secret, delete_secret Updated documentation for all methods Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-19s3-passdb: Python wrapper for passdbAmitay Isaacs1-8/+1283
- Added Groupmap python wrapper - Added passdb methods getgrsid, getgrgid, getgrnam create_dom_group, delete_dom_group add_group_mapping_entry, update_group_mapping_entry, delete_group_mapping_entry enum_group_mapping, enum_group_members add_groupmem, del_groupmem create_alias, delete_alias get_aliasinfo, set_aliasinfo add_aliasmem, del_aliasmem, enum_aliasmem get_account_policy, set_account_policy search_groups, search_aliases Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-19s3-passdb: Replace SMB_MALLOC_ARRAY()/SAFE_FREE() with talloc equivalents.Amitay Isaacs4-16/+16
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-19Fix bug #8370 - vfs_chown_fsp broken -- returns in the wrong directoryJeremy Allison2-5/+18
Ensure we always use vfs_ChDir() to keep the singleton cache coherent. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Aug 19 00:43:05 CEST 2011 on sn-devel-104
2011-08-18credentials: Rename library to samba-credentials to avoid name clashes.Jelmer Vernooij19-34/+34
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Thu Aug 18 22:16:38 CEST 2011 on sn-devel-104
2011-08-18smb_common: Fix include paths.Jelmer Vernooij1-5/+5
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Thu Aug 18 16:54:01 CEST 2011 on sn-devel-104
2011-08-18cli-raw: Add public libsmbclient-raw library.Jelmer Vernooij8-12/+24
2011-08-18libcliraw: Install more header files.Jelmer Vernooij4-4/+4
2011-08-18smb_common: Install some more headers.Jelmer Vernooij2-2/+3
2011-08-18libcliraw: Install request.h and signing.h.Jelmer Vernooij1-1/+2
2011-08-18smb_composite: Remove unnecessary include of signing header.Jelmer Vernooij1-1/+0
2011-08-18smb_composite: Integrate prototypes in header file.Jelmer Vernooij3-4/+69
2011-08-14Use public pytalloc header file.Jelmer Vernooij0-0/+0
2011-08-18s3/ldap: don't continue if we couldn't get the domain info on startupBjörn Jacke1-7/+4
while some things work without the domain info, some important things don't, which is highly irritating. As even calls like EnumTrustDom fail and thus clients' domain logins fail we are sufficiently broken to refuse to go on. Autobuild-User: Björn Jacke <bj@sernet.de> Autobuild-Date: Thu Aug 18 12:48:37 CEST 2011 on sn-devel-104
2011-08-18s4-test: use dbcheck on more of our selftest databasesAndrew Tridgell1-2/+3
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Thu Aug 18 02:58:55 CEST 2011 on sn-devel-104
2011-08-18s4-test: only check one database in quickcheckAndrew Tridgell1-1/+1
2011-08-18s4-dsdb: fixed deletion of backlinks for fl2000 DCsAndrew Tridgell1-18/+13
when in FL 2000 we were not correctly deleting backlinks as we uses dsdb_find_dn_by_guid() which doesn't find deleted objects. Modules should use dsdb_module_dn_by_guid() which prevents going to the top level, and finds deleted objects Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-08-18s4-dsdb: added comments and fixed backlink check in repl_meta_dataAndrew Tridgell1-2/+17
added comments explaining the backlink deletion code, plus fix a use of a bitwise operation in a boolean expression, and avoid calling dsdb_functional_level() inside a loop Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-08-18s4-dirsync: use dsdb_module_dn_by_guid() not dsdb_find_dn_by_guid() in modulesAndrew Tridgell1-1/+1
this prevents us going to the top level of the module stack Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-08-18samba-tool: changed samba-tool user delete to use samdb instead of Net()Andrew Tridgell1-9/+17
this makes it possible to use with -H, so you can delete users on remote DCs or against local databases
2011-08-18s4-samdb: added deleteuser() to samdbAndrew Tridgell1-0/+23
This is similar to deletegroup()
2011-08-18s4-test: prevent the utable test from crashingAndrew Tridgell1-3/+5
2011-08-17Adapt del_sid_from_array to Samba coding styleVolker Lendecke1-1/+2
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Wed Aug 17 16:46:24 CEST 2011 on sn-devel-104
2011-08-17Fix a typoVolker Lendecke1-1/+1
2011-08-17s3: Next step to fix MIT trustsVolker Lendecke1-0/+4
aa3f10c was not complete in the sense that it did not fully cover some conditions that led to invalid domains in the winbind parent Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Wed Aug 17 13:59:06 CEST 2011 on sn-devel-104
2011-08-17s3: Increase a debug level in ads_find_dcVolker Lendecke1-1/+2
This message can happen with AD trusts that winbind can not cope with. The message is not really clear and not worth spamming syslog always.
2011-08-17Remove unused "sid_equal"Volker Lendecke2-10/+0
2011-08-17Replace calls to sid_equal with calls to dom_sid_equalVolker Lendecke5-10/+11
2011-08-16s3-messaging: IDMAP_ messages belongs to the Winbind rangeSimo Sorce1-4/+4
Autobuild-User: Simo Sorce <idra@samba.org> Autobuild-Date: Tue Aug 16 22:27:05 CEST 2011 on sn-devel-104
2011-08-16s3: Use ZERO_STRUCT where appropriateVolker Lendecke1-1/+1
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Aug 16 13:59:55 CEST 2011 on sn-devel-104
2011-08-16tdb: increment sequence number in tdb_wipe_all().Rusty Russell1-0/+2
TDB2 testing revealed that tdb1 doesn't do this. It's minor, but fix it. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au> Autobuild-User: Rusty Russell <rusty@rustcorp.com.au> Autobuild-Date: Tue Aug 16 10:47:41 CEST 2011 on sn-devel-104
2011-08-15s3:registry: enhance debugging of deletekey_recursiveMichael Adam1-0/+14
Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Mon Aug 15 19:34:44 CEST 2011 on sn-devel-104
2011-08-15s3:dbwrap_ctdb: improve transaction start/commit/cancel debuggingMichael Adam1-2/+8
* also log nesting transaction start/commit/cancel * unify transaction log messages slightly
2011-08-15s3:lib: fix a comment in tdb_unpack()Michael Adam1-1/+1
2011-08-15s3:registry: fix regdb_key_exists: the record has to contain at least the ↵Michael Adam1-1/+72
4-byte subkey counter More precisley, we return false if the record does not match the required structure of a leading 4-byte subkey counter followed by the corresponding number zero-terminated strings.
2011-08-15s3: avoid reading past the end of buffer in tdb_unpack 'f' if zero ↵Gregor Beck1-1/+1
termination is missing Signed-off-by: Michael Adam <obnox@samba.org>
2011-08-15s3: avoid reading past the end of buffer in tdb_unpack 'P' if zero ↵Gregor Beck1-1/+3
termination is missing Signed-off-by: Michael Adam <obnox@samba.org>