summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2011-01-19s4-auth Allow NULL methods to be specified to auth_context_create_methods()Andrew Bartlett1-14/+3
This allows us to init an auth context that isn't going to do any NTLM authentication, but is used by other subsystems. Andrew Bartlett
2011-01-19s4-dsdb Add a test of the tokenGroups behaviour on the user's DN.Andrew Bartlett1-3/+21
Andrew Bartlett
2011-01-19s4-gensec Remove special case 'for SASL' that is not required any more.Andrew Bartlett1-13/+0
I've examined the code paths involved, and it appears an alternative fix has been made in the ldap_server/ldap_bind.c code, and there is no code path that uses this behaviour. Andrew Bartlett
2011-01-19tdb: Added doxygen documentation.Andreas Schneider3-25/+2454
Autobuild-User: Andreas Schneider <asn@samba.org> Autobuild-Date: Wed Jan 19 11:26:34 CET 2011 on sn-devel-104
2011-01-19s3: Add wbinfo --dc-infoVolker Lendecke8-2/+284
wbinfo --dc-info prints the current DC name and IP address. This helps diagnosing problems that might happen when a later wbinfo --ping-dc fails. This patch started out by using the SAF and NBT cache entires, but those are relatively short-lived. So I decided to invent a new gencache entry with a very long timeout. We need to go via the gencache because when for some reason a winbind child process is stuck, we can't query it for the current DC it's connected to. This must eventually go away again when we have a fully async winbind. Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Wed Jan 19 08:40:28 CET 2011 on sn-devel-104
2011-01-19Add DELETE-LN test to show bug #7863 - Unlink may unlink wrong file when ↵Jeremy Allison1-0/+111
hardlinks are involved Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Jan 19 03:06:32 CET 2011 on sn-devel-104
2011-01-19waf: change private libraries to use the same soname as public librariesAndrew Tridgell1-7/+5
See http://lists.samba.org/archive/samba-technical/2011-January/075816.html for a description of the reason behind this change Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Jan 19 02:21:06 CET 2011 on sn-devel-104
2011-01-19pygensec: remove special case handling for None for buffersAndrew Tridgell2-36/+29
always returning a buffer makes life easier for callers Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-01-19Fix "net usersidlist" not to skip every other userOlly Betts1-1/+0
Remove double increment from for loop over users in get_user_tokens(), left over from when this used to be a while loop. Bug was introduced in 1e39a619. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Jan 19 01:34:29 CET 2011 on sn-devel-104
2011-01-19s3-winbind: no need to include ../librpc/gen_ndr/cli_lsa.h inGünther Deschner1-1/+0
winbindd/winbindd_msrpc.c. Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Jan 19 00:37:46 CET 2011 on sn-devel-104
2011-01-18s3-rpc_client: no need to include ../librpc/gen_ndr/ndr_lsa_c.h anymore.Günther Deschner1-1/+1
Guenther
2011-01-18s3-netlogon: no need to include ../librpc/gen_ndr/ndr_lsa_c.h anymore.Günther Deschner1-1/+1
Guenther
2011-01-18s3-netlogon: no need to include ../librpc/gen_ndr/cli_samr.h anymore.Günther Deschner1-1/+1
Guenther
2011-01-18s3-net: use correct spoolss header in net rpc.Günther Deschner1-1/+1
Guenther
2011-01-18s3-net: use correct spoolss header in net_ads.c.Günther Deschner1-1/+1
Guenther
2011-01-18Fix error where Windows client spoolss returns WERR_INVALID_DATA ↵Jeremy Allison1-0/+4
W_ERROR(0x0000000D) on opening a printer. We can't return zero for devmode->size. Guenther please check ! Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Tue Jan 18 23:45:33 CET 2011 on sn-devel-104
2011-01-18s4:tls_tstream: also use a dynamic buffer for the pull sideStefan Metzmacher1-3/+12
Maybe that fixes the remaining issues with some gnutls versions. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Jan 18 17:26:08 CET 2011 on sn-devel-104
2011-01-18s4:tls_tstream: fix partial reads, so that the gnutls layer doesn't read the ↵Stefan Metzmacher1-1/+6
same data twice metze
2011-01-18s4-tests: Added a test for correct inheritance of IO flagged ACEs.Nadezhda Ivanova1-0/+18
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Tue Jan 18 15:53:46 CET 2011 on sn-devel-104
2011-01-18s4-security: Fixed incorrect inheritance of IO flagged ACESNadezhda Ivanova1-0/+5
They should be inherited without the IO flag unless they contain generic information.
2011-01-18release-scripts: add build-htmlman-nogitMichael Adam1-0/+55
non-git version of a script to ease building of html version of manpages Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Tue Jan 18 15:07:09 CET 2011 on sn-devel-104
2011-01-18release-scripts: add build-htmlman-gitMichael Adam1-0/+52
git version of a script to ease building of html version of manpages
2011-01-18release-scripts: add gpl header comment to build-manpages-nogitMichael Adam1-0/+14
2011-01-18release-scripts: add gpl header comment to build-manpages-gitMichael Adam1-0/+14
2011-01-18release-scripts: remove commented out line from git-versionMichael Adam1-2/+0
2011-01-18packaging/RHEL-CTDB: add the smbta-util manpageMichael Adam1-0/+1
2011-01-18packaging/RHEL-CTDB: add the pam_winbind.conf manpageMichael Adam1-0/+1
2011-01-18packaging/RHEL-CTDB: do not use an external docs tarball but build the manpagesMichael Adam2-15/+9
2011-01-18packaging/RHEL-CTDB: untangle the various %doc entries to single linesMichael Adam1-3/+10
2011-01-18docs: Remove template "itemizedlist/listitem" from man.xslMichael Adam1-60/+0
This seems to have been basically taken from the manpages/lists.xls from the docbook-xsl stylesheets. But it references a variable list-indent that older versions of docbook-xsl (e.g. 1.69) do not provide. This makes the manpage build break on older systems. Removing the definition lets the build succeed, using the system-definition of the itemizedlist/listitem. The diff between the docbook's (version 1.75.1) definition of itemizedlist/listitem and the definition in our man.xls is this: -- with this patch -- without this patch @@ -53,5 +53,7 @@ <!-- * seems to require the extra space. --> <xsl:call-template name="roff-if-end"/> <xsl:apply-templates/> - <xsl:text>.RE&#10;</xsl:text> + <xsl:if test=" following-sibling::listitem"> + <xsl:text>&#10;.RE&#10;</xsl:text> + </xsl:if> </xsl:template> I.e. the version of man.xsl made insertion if ".RE" conditional. I hope this does not break anything severely. The diff for e.g. the resulting winbindd.8 manpage is this: --- with this patch +++ witout this patch: @@ -375,7 +375,6 @@ \m[blue]\fBwinbind: rpc only\fR\m[] Setting this parameter forces winbindd to use RPC instead of LDAP to retrieve information from Domain Controllers\&. -.RE .SH "EXAMPLE SETUP" .PP To setup winbindd for user and group lookups plus authentication from a domain controller use something like the following setup\&. This was tested on an early Red Hat Linux box\&. Cheers
2011-01-18s4-gensec Extend python bindings for GENSEC and the associated testAndrew Bartlett3-28/+275
This now tests a real GENSEC exchange, including wrap and unwrap, using GSSAPI. Therefore, it now needs to access a KDC. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Jan 18 11:41:26 CET 2011 on sn-devel-104
2011-01-18s4-auth Extend python bindings to allow ldb and message to be specifiedAndrew Bartlett3-11/+61
This will allow for some more tokenGroups tests in future. Andrew Bartlett
2011-01-18s4-pygensec Fix indentation of py_gensec_start_mech_by_name()Andrew Bartlett1-11/+11
2011-01-18s4-torture Remove unused temp dirs from the RPC-PAC test.Andrew Bartlett1-9/+0
The code previously required the creation of a messaging context, but this isn't done any more, so we don't need the tmp dir to put it in. Andrew Bartlett
2011-01-18s4-pyldb Fix tp_basicsize for PyLdbDnAndrew Bartlett1-1/+1
This wasn't actually causing problems before, as the structures were the same size. Andrew Bartlett
2011-01-18s4-pygensec Add bindings for server_start() and update()Andrew Bartlett1-4/+96
2011-01-18s4-pyauth Add bindings for auth_context_create() as AuthContext()Andrew Bartlett2-1/+81
2011-01-18s4-pyauth Use py_talloc_get_type() for greater talloc binding safetyAndrew Bartlett2-12/+15
This does a talloc check of the returned pointer before casting it. Andrew Bartlett
2011-01-18s4-gensec Don't steal the auth_context, reference it.Andrew Bartlett2-6/+17
We don't want to steal this pointer away from the caller if it's been set up from python. Andrew Bartlett
2011-01-18pidl:wscript: don't warn about pidl gammar file changes for nowStefan Metzmacher1-2/+4
We may add some logic that uses git diff HEAD to detect this changes in developer mode later again. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Jan 18 08:10:06 CET 2011 on sn-devel-104
2011-01-18s4-ldb_ldif: Take into account LDB_FLG_SHOW_BINARYKamen Mazdrashki1-1/+4
when user requires binary data to be displayed using samba user-friendly ldif handlers Found using following test search: bin/ldbsearch -H st/dc/private/sam.ldb -b "CN=Deleted Objects,DC=samba,DC=example,DC=com" \ "(objectGUID=97b52eac-6d89-434d-b935-1e5f2e086ffc)" replPropertyMetaData --show-deleted --show-binary Autobuild-User: Kamen Mazdrashki <kamenim@samba.org> Autobuild-Date: Tue Jan 18 00:40:01 CET 2011 on sn-devel-104
2011-01-18s4-ldb_ldif: Don't check for LDB_FLG_SHOW_BINARY in ldb_should_b64_encodeKamen Mazdrashki1-4/+0
LDB_FLG_SHOW_BINARY is data representation flag and should not modify behavior of data checking functions. This lead to a bug in lib/ldb/ldb_tdb/ldb_index.c as ltdb_index_key() function relies on ldb_should_b64_encode function to determine how to process index keys. Found using following test search: bin/ldbsearch -H st/dc/private/sam.ldb -b "CN=Deleted Objects,DC=samba,DC=example,DC=com" \ "(objectGUID=97b52eac-6d89-434d-b935-1e5f2e086ffc)" replPropertyMetaData --show-deleted --show-binary
2011-01-17s4-provision: Fixed owner/group for hard-coded Sites descriptor.Nadezhda Ivanova1-3/+1
We must not specify explicitly owner and group. As there is a difference between WIN_2003 and WIN_2008, we should let descriptor module compute the correct default ones. Also removed inherited ACEs, they are ignored during SD creation anyway. Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Mon Jan 17 18:23:24 CET 2011 on sn-devel-104
2011-01-17s4-tools: Fixed a bug in ldapcmp - DACL was not retrieved correctly if the ↵Nadezhda Ivanova1-1/+4
object had no SACL. --Pair-Programmed-With: Zahari Zahariev
2011-01-17s3-rpc_client: Fixed status check of dcerpc_lsa_lookup_sids_noalloc.Andreas Schneider1-1/+1
Autobuild-User: Andreas Schneider <asn@samba.org> Autobuild-Date: Mon Jan 17 17:35:50 CET 2011 on sn-devel-104
2011-01-17s3-rpc_client: Fixed return values of dcerpc_lsa_lookup_sids_generic.Andreas Schneider1-4/+4
2011-01-17s3-auth: Fixed account lockout check.Andreas Schneider1-1/+1
2011-01-17s3: Make sure we call wbcAuthenticateUserEx correctlyVolker Lendecke2-8/+29
There are cases where we fill in params.password.response.lm_data with non-NULL where params.password.response.lm_length is 0. wbcAuthenticateUserEx does not like that. I haven't been able to reproduce this with smbclient yet, I've seen it with a proprietary smb client implementation. Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Mon Jan 17 16:30:11 CET 2011 on sn-devel-104
2011-01-17s4-tools: Added a --sort-aces option to ldapcmpNadezhda Ivanova1-6/+12
This option sorts the ACE lists during SD comparison in collision view to make it easier to determine of a difference is only in ACE order, and if not, where do differences start. Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Mon Jan 17 14:09:09 CET 2011 on sn-devel-104
2011-01-17s3:build: don't use librpc/gen_ndr/cli_echo.[ch] anymoreStefan Metzmacher2-8/+3
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Jan 17 09:34:12 CET 2011 on sn-devel-104