summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2012-05-02s3-smbd: Use security_session_user_level() rather than nt_token_check_sid()Andrew Bartlett1-13/+1
This allows the unix.whoami test to pass when configured as part of the AD DC. The struct auth_session_info is slightly different in the AD DC configuration when using auth_samba4. In particular, there is a distinction between Guest and Anonymous logins. Andrew Bartlett
2012-05-02s3:torture fix flakey testcaseChristian Ambach1-6/+20
don't put database into /tmp, use lp_private_dir() to put it into the selftest prefix Autobuild-User: Christian Ambach <ambi@samba.org> Autobuild-Date: Wed May 2 00:57:05 CEST 2012 on sn-devel-104
2012-05-01s3:selftest run LOCAL-IDMAP-TDB-COMMON in make testChristian Ambach1-0/+1
Autobuild-User: Christian Ambach <ambi@samba.org> Autobuild-Date: Tue May 1 11:07:08 CEST 2012 on sn-devel-104
2012-05-01s3:torture: add idmap_tdb_common test codeChristian Ambach5-3/+1038
2012-05-01s3:winbindd/idmap_tdb: use idmap_tdb_common codeChristian Ambach1-558/+18
2012-05-01s3:winbindd/idmap_tdb2: fix logic error in set_mapping_actionChristian Ambach1-1/+1
fix an endless loop
2012-05-01s3:winbindd/idmap_tdb2: use idmap_tdb_common codeChristian Ambach1-357/+91
2012-05-01s3:winbindd/autorid use idmap_tdb_common code in autoridChristian Ambach1-86/+227
- use common logic for the allocation pool - add a idmap_tdb style 1on1 mapping for non-domain SIDs like Everyone (S-1-1-0)
2012-05-01s3:winbindd add idmap_tdb_common file to store common code of TDB idmap backendsChristian Ambach4-2/+796
2012-05-01s3:util add sid_check_is_wellknown_builtin()Christian Ambach2-0/+28
2012-05-01move VERSION to alpha21Andrew Bartlett1-2/+2
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue May 1 08:16:38 CEST 2012 on sn-devel-104
2012-05-01prepare WHATSNEW for alpha20 and mark as releaseAndrew Bartlett2-43/+37
2012-05-01s4-upgradedns: Update serverdn with only the attributes that have changedAmitay Isaacs1-11/+21
This fixes the issue of ldb 'Operations Error' when trying to modify hasPartialReplicaNCs attribute. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Tue May 1 05:28:04 CEST 2012 on sn-devel-104
2012-05-01Fix bug #8873 - self granting privileges in security=ads.Jeremy Allison1-4/+12
Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue May 1 01:04:46 CEST 2012 on sn-devel-104
2012-04-30Fix the loop unrolling inside resolve_ads(). If we don't getJeremy Allison1-34/+73
an IP list don't use interpret_string_addr(), as this only returns one address, use interpret_string_addr_internal() instead. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Mon Apr 30 23:21:16 CEST 2012 on sn-devel-104
2012-04-30Protect all of the name resolution methods from returning null addrs. Ensure ↵Jeremy Allison1-9/+19
all returns go through remove_duplicate_addrs2().
2012-04-30Fix convert_ss2service() to filter out zero addresses.Jeremy Allison1-12/+33
2012-04-30Fix remove_duplicate_addrs2 to do exactly what it says. Previously it could ↵Jeremy Allison1-10/+9
leave zero addresses in the list.
2012-04-30s4:samldb LDB module - homogenize LDB search attributes arraysMatthias Dieter Wallnöfer1-13/+13
First they do not need to be "static" any longer since we have abandoned asynchronous result handling (where global variables have been important). In addition add some "const" in order to protect us from unwanted writes. Reviewed-by: Andrew Bartlett Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Apr 30 16:46:20 CEST 2012 on sn-devel-104
2012-04-30s4-libnet: Add mem_ctx to libnet_rpc_groupdel calls (bug #8889)Andrew Bartlett1-2/+3
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Apr 30 14:41:36 CEST 2012 on sn-devel-104
2012-04-30s4-libnet: Add mem_ctx to libnet_rpc_groupadd calls (bug #8889)Andrew Bartlett2-4/+5
2012-04-30s4-libnet: Add mem_ctx to libnet_rpc_usermod calls (bug #8889)Andrew Bartlett2-3/+4
2012-04-30s4-libnet: Add mem_ctx to libnet_rpc_userdel calls (bug #8889)Andrew Bartlett2-4/+5
2012-04-30s4-libnet: Add mem_ctx to libnet_rpc_useradd calls (bug #8889)Andrew Bartlett3-5/+6
2012-04-30s4-libnet: Add mem_ctx to libnet_rpc_groupinfo calls (bug #8889)Andrew Bartlett2-5/+6
2012-04-30s4-libnet: Add mem_ctx to libnet_DomainClose calls (bug #8889)Andrew Bartlett1-5/+8
2012-04-30s4-libnet: Add mem_ctx to libnet_DomainOpen calls (bug #8889)Andrew Bartlett5-20/+25
2012-04-30s4-libnet: Add mem_ctx to libnet_Lookup calls (bug #8889)Andrew Bartlett1-4/+6
2012-04-30net: Let get*sid return error from passdb initChristof Schmitt1-6/+4
When initialize_password_db returns an error this means that the SID stored in the backend cannot be read. Return this error directly instead of creating a random SID through get_global_sam_sid. Autobuild-User: Volker Lendecke <vl@samba.org> Autobuild-Date: Mon Apr 30 13:07:20 CEST 2012 on sn-devel-104
2012-04-30passdb: Do not panic in initialize_password_dbChristof Schmitt1-17/+17
A call to initialize_password_db leads to smb_panic in case the backend returns an error. All callers to initialize_password_db check the return value, so this code path should return the status instead of calling smb_panic. Move the call to smb_panic from pdb_get_methods_reload pdb_get_methods to get it out of the initialize code path. This allows printing the proper error message for 'net getlocalsid' which is much nicer than printing the panic stack trace.
2012-04-30s3-auth_samba4: use new_server_id_task() to allocate server id valuesAndrew Bartlett1-6/+27
This is rather than just picking a random number out of the air. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Apr 30 11:29:34 CEST 2012 on sn-devel-104
2012-04-30s3-lib Add a way to allocate the task_id value in server_idAndrew Bartlett3-2/+44
This safely allocates the task_id so that when we have multiple event contexts, they can each have their own messaging context, particularly for the imessaging subsystem under source4. Andrew Bartlett
2012-04-30s4-messaging: Fill in the whole server_id in all use casesAndrew Bartlett4-4/+12
This started per https://bugzilla.samba.org/show_bug.cgi?id=8872#c4 and avoids any possible collision with a different process. We also need to ensure that across a Samba installation on a single node that id.vnn is the same. Samba4 previously used 0, while Samba3 used NONCLUSTER_VNN. When a message is sent between these 'different' nodes, the error NT_STATUS_INVALID_DEVICE_REQUEST is raised. Andrew Bartlett
2012-04-30s4-torture: convert samba3misc tests to use torture_failure and torture_assertAndrew Bartlett1-148/+105
This helps us when these tests fail, as subunit-formatted failures can be declared as knownfail entries, and show up correctly in the make test output. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Apr 30 08:34:52 CEST 2012 on sn-devel-104
2012-04-30s4-torture: move samba3 tests to use torture helper functionsAndrew Bartlett1-33/+4
2012-04-30s4-torture: Move various samba3 tests to the torture_suite_add_1smb_test wrapperAndrew Bartlett3-63/+14
2012-04-30s4:samldb LDB module - implement "fSMORoleOwner" attribute protectionMatthias Dieter Wallnöfer2-0/+153
This is a very essential attribute since it references to various domain master roles (PDC emulator, schema...) depending on which entry it has been set. Incautious modifications can cause severe problems. Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Apr 30 02:04:24 CEST 2012 on sn-devel-104
2012-04-29s4:dsdb/common/util.c - samdb_is_pdc() - fail if the "fSMORoleOwner" ↵Matthias Dieter Wallnöfer1-1/+5
attribute has not been set
2012-04-29Add some debug for FOOBAR return case as they are hard to diagnoseMatthieu Patou2-2/+8
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sun Apr 29 09:08:15 CEST 2012 on sn-devel-104
2012-04-29dsdb: more RELAX to DBCHECK control shift so that only dbcheck can do ↵Matthieu Patou1-2/+2
uncontrolled changes
2012-04-29dsdb: change control from relax to dbcheckMatthieu Patou1-1/+1
Comment indicate that this is needed by dbcheck only and it permits other projects to push broken schema and remain undetected
2012-04-29dns server: move very verbose debug to higher level 2 -> 8Matthieu Patou1-4/+4
2012-04-28s3: Remove a SMB_ASSERTVolker Lendecke1-1/+5
Autobuild-User: Volker Lendecke <vl@samba.org> Autobuild-Date: Sat Apr 28 23:38:45 CEST 2012 on sn-devel-104
2012-04-28s3: Fix bug 8904 -- wbinfo --lookup-sids "" crashes winbindVolker Lendecke1-5/+5
Much of the code further down and up the call chain expects the structures wb_lookupsids returns to be allocated. Do that despite we have nothing to look up.
2012-04-28Add an audit file VFS routine so we can handle auditing with SACLs.Richard Sharpe4-0/+35
Autobuild-User: Richard Sharpe <sharpe@samba.org> Autobuild-Date: Sat Apr 28 08:05:00 CEST 2012 on sn-devel-104
2012-04-28s4:torture: add a check for talloc success in rpc.samba3.randomauth2Michael Adam1-1/+1
Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Sat Apr 28 02:10:39 CEST 2012 on sn-devel-104
2012-04-28s4:torture: add a check for talloc success in the rpc.samba3 suiteMichael Adam1-0/+1
2012-04-28s4:torture: add a rpc.samba3.smb2-reauth2 testMichael Adam1-0/+136
like smb-reauth2, only for smb2
2012-04-27s4:torture: add a rpc.samba3.smb2-reauth1 testMichael Adam1-1/+161
2012-04-27s4:librpc: create a binding on the pipe if necessary in ↵Stefan Metzmacher1-0/+15
dcerpc_pipe_open_smb2_send() Pair-Programmed-With: Michael Adam <obnox@samba.org>