summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2010-02-11s4: Switch to S3-style id mapping data types.Kai Blin14-82/+97
2010-02-11s4 idmap: Make the sid_to_xid and xid_to_sid calls static.Kai Blin1-4/+8
Looking at the winbind interface, we should only be using the bulk conversion calls.
2010-02-11libwbclient: Test wbcLookupName async functionsKai Blin1-0/+79
2010-02-11libwbclient: Implement wbcLookupName_send/recvKai Blin2-0/+137
2010-02-11libwbclient: Implement wbcAuthenticateUserEx_send/recvKai Blin2-0/+280
2010-02-11libwbclient: Implement wbcLookupSid_send/recvKai Blin2-0/+140
2010-02-11libwbclient: Implement wbcGidToSid_send/recvKai Blin2-0/+117
2010-02-11libwbclient: Implement wbcSidToGid_send/recvKai Blin2-0/+107
2010-02-11libwbclient: Implement wbcUidToSid_send/recvKai Blin2-0/+116
2010-02-11libwbclient: Implement wbcSidToUid_send/recvKai Blin2-0/+108
2010-02-11libwbclient: Add wbcInterfaceDetails_send/recvKai Blin3-5/+231
2010-02-11libwbclient: Add wbcDomainInfo_send/recv callsKai Blin2-1/+155
2010-02-11libwbclient: Add wbcDomainName_send/recv callKai Blin2-0/+101
2010-02-11libwbclient: Add wbcNetbiosName_send/recv callsKai Blin2-0/+102
2010-02-11libwbclient: Add async wbcInfo_send()/wbcInfo_recv() callsKai Blin2-0/+106
2010-02-11libwbclient: add wbcInterfaceVersion send/recv callsKai Blin2-0/+98
2010-02-11libwbclient: torture-test wbcPing async functions.Kai Blin1-0/+20
2010-02-11libwbclient: Add async wbcPing_send/_recvKai Blin2-1/+87
2010-02-11libwbclient: Zero out context on initializationKai Blin1-1/+1
This prevents a segfault when using wbcDebug without prior call to wbcSetDebug
2010-02-11Final part of jumbo patch for bug #7104 - "wide links" and "unix extensions" ↵Jeremy Allison1-0/+12
are incompatible. Volker pointed out that the preexec scripts get passed the conn->connectpath as a parameter, so call canonicalize_connect_path() both *before* and after the preexec scripts. Ignore errors on the call before the preexec scripts, as the path may not exist until created by the preexec scripts. Jeremy.
2010-02-11Introduce lp_safe_widelinks()Simo Sorce5-5/+24
This way we avoid any chance that a configuration reload may turn back on wide links when unix extensions are enabled.
2010-02-11Fine changes to previous fix for bug #7104 - "wide links" and "unix ↵Jeremy Allison1-20/+18
extensions" are incompatible. Make sure we match the previous allow widelinks behavior, in that non-root preexec scripts can create share directories for a share definition. Jeremy
2010-02-11Suplementary patch for bug #7104 - "wide links" and "unix extensions" are ↵Jeremy Allison1-27/+28
incompatible. Bug reported by Ralf Zimmermann <r.zimmermann@siegnetz.de>. Reproduced by jra. If the target directory of a share doesn't exist, but is designed to be created by a "root preexec" script call, then the widelinks check is done too early - thus preventing the user from connecting to the share. Fix is to re-arrange the order of checks in make_connection_snum() to always do the following order of operations: (1). Turn off wide links if unix extensions = yes. (2). Call any root preexec scripts. (3). Canonicalize the share path to remove any symlinks (ie. end up with the realpath in the connection_struct). Jeremy.
2010-02-11ldb_match - Ignore ":dn" part of extended matches for nowMatthias Dieter Wallnöfer1-2/+5
It's not fully clear what this ":dn" part means for us. What we know is that older AD implementations (Windows Server 2000, 2003) need it to have extended matches working in the expected way. To be able to interoperate with s3's winbind and other tools I and gd decided to transform this into a warning until we know what to do. This should fix bug #6511.
2010-02-12s4-provision: import the R2 functional levelAndrew Tridgell1-1/+1
this makes it easier to modify the script to set us at R2 level in provision. We should make this a parameter.
2010-02-12s4-build: avoid finding python symlinksAndrew Tridgell1-1/+1
emacs creates symlinks to .py files while you are editing them. This could cause build failures.
2010-02-12s4-provision: fixed --function-level option to provisionAndrew Tridgell1-0/+1
we need the DS_DOMAIN_* levels imported
2010-02-12s4-script: make enablerecyclebin use system_sessionAndrew Tridgell1-1/+2
This allows it to work against our local ldb
2010-02-12s4-pyldb: null terminate string ldb message elements from pythonAndrew Tridgell1-4/+4
We need to eventually get rid of ldb_msg_find_attr_as_string() (or add a mem_ctx to it), but meanwhile we have too many places that break if we don't add a nul to the end of ldb msg strings from python.
2010-02-12libds: added recyclebin feature GUIDAndrew Tridgell1-0/+3
2010-02-11s3: re-run make samba3-idl.Günther Deschner2-0/+2
Guenther
2010-02-11spoolss: allow to set server architecture via parametric option.Günther Deschner1-2/+2
This allows to set "spoolss:architecture = 'Windows x64'" for debugging purpose. Guenther
2010-02-11s3-spoolss: implement spoolss_EnumJobs level 3.Günther Deschner1-0/+76
Level 3 has been added with NT 4.0 and Windows 7 (at least 64bit version) makes use of it in order to display queued jobs. Windows 7 will *not* fall back to level 2 if we just return WERR_UNKNOWN_LEVEL, instead there will be no printjobs displayed at all. Guenther
2010-02-11testprogs: one more error code for spoolss test.Günther Deschner1-0/+2
Guenther
2010-02-11testprogs: print secdesc->Control in spoolss test.Günther Deschner1-2/+1
Guenther
2010-02-11testprogs: use ConvertSidToStringSid in order to print sids in spoolss test.Günther Deschner1-12/+16
Guenther
2010-02-11s4-drs: Add DRSUAPI_DRS_NONGC_RO_REP bit to DRS_OPTIONSFernando J V da Silva1-0/+1
Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
2010-02-11s4-net-drs: fix some coding style issuesAndrew Tridgell2-3/+2
We should use the system/*.h headers for system includes. We also try to avoid C++ comments. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-02-11s4/net_drs: 'net drs kcc' command implementationKamen Mazdrashki3-2/+177
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-02-11s4/net_drs: 'net drs bind' command implementationKamen Mazdrashki2-1/+138
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-02-11s4/net_drs: 'net drs' utility initial creationKamen Mazdrashki5-1/+378
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-02-11s4/idl: regenerating drsuapi.idlKamen Mazdrashki2-4/+4
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-02-11s4/idl: Naming reserved flags for DRSUAPI_SUPPORTED_EXTENSION_ fieldKamen Mazdrashki1-2/+2
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-02-11provision: Use short name for assignee of ACE (BA, SA, CO, ...)Matthieu Patou1-8/+6
Use short name (shortcut for wellknown SID/RID) for assignee in each entry of ACL (when possible) of sysvol files (GPO objects and netlogon folders). This avoid error prone substitution of DOMAINSID in ACL and make ACL clearer by using shortname for assignee accordingly with SDDL synthax rules. Translation to real SID is handled internaly by the from_sddl function. Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
2010-02-11python-s4: use secrets.ldb instead of sam.ldb for reading domain SIDMatthieu Patou1-2/+2
This allow to be able to run net acl set xxx yyy on DC, but also on domain member. Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
2010-02-11provision: Fix an error with eadb when using not default install dir and ↵Matthieu Patou1-1/+5
running as a non root user Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
2010-02-11s4-dns: don't leave behind a tmp fileAndrew Tridgell1-0/+2
If the dns update file doesn't need updating we need to delete the tmp file
2010-02-11s4-selftest: don't run rndc reload in selftestAndrew Tridgell1-1/+3
We don't want rndc calls on the build farm
2010-02-11s4-dns: added a dns update taskAndrew Tridgell4-1/+237
This task watches for changes in the list of DCs, and creates a bind9 formatted file that grants update permission to all DCs, plus to the administration, and machines update for their own names. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-02-11s4-provision: cope with umask in creating private/dnsAndrew Tridgell1-0/+2