summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2010-11-14Fix the unexpected.tdb database problem. Change nmbd to store theJeremy Allison9-19/+195
transaction id of packets it was requested to send via a client, and only store replies that match these ids. On the client side change clients to always attempt to ask nmbd first for name_query and node_status calls, and then fall back to doing socket calls if we can't talk to nmbd (either nmbd is not running, or we're not root and cannot open the messaging tdb's). Fix readers of unexpected.tdb to delete packets they've successfully read. This should fix a long standing problem of unexpected.tdb growing out of control in noisy NetBIOS envioronments with lots of bradcasts, yet still allow unprivileged client apps to work mostly as well as they already did (nmblookup for example) in an environment when nmbd isn't running. Jeremy. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Sun Nov 14 05:22:45 UTC 2010 on sn-devel-104
2010-11-14Move error reporting of messaging context creation fail intoJeremy Allison7-23/+24
the daemons themselves. Allows client utilities to silently fail to create a messaging context due to access denied on the messaging tdb (which I need for the following patch). Jeremy.
2010-11-14s4-auth: fixed infinite loop in krb5 authAndrew Tridgell1-1/+1
we were continually trying the first address returned, instead of moving to the next address Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Sun Nov 14 04:11:28 UTC 2010 on sn-devel-104
2010-11-14s4-auth: fixed crash in krb5 authAndrew Tridgell1-2/+1
remote_addr was used after free
2010-11-13s3/doc: add missing documentation for vfs_time_auditBjörn Jacke1-0/+101
Autobuild-User: Björn Jacke <bj@sernet.de> Autobuild-Date: Sat Nov 13 17:13:24 UTC 2010 on sn-devel-104
2010-11-13s4:password_hash LDB module - return "ERR_CONSTRAINT_VIOLATION" on password ↵Matthias Dieter Wallnöfer1-6/+9
conversion errors This errors can happen also on a regular basis - then we shouldn't return ERR_OPERATIONS_ERROR (this error code is reserved for very serious failures). Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Nov 13 12:37:36 UTC 2010 on sn-devel-104
2010-11-13s4:upgradeprovision - why not directly use "provision:0"?Matthias Dieter Wallnöfer1-4/+4
2010-11-13s4:objectclass LDB module - multiple "objectClass" change elements are ↵Matthias Dieter Wallnöfer2-173/+178
unfortunately still allowed The test message has been compressed - therefore I've now used "modify_ldif".
2010-11-13s4-drs: fixed a crash in writspnAndrew Tridgell1-2/+8
sam_ctx_system may be NULL for non-privileged users Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Sat Nov 13 08:52:53 UTC 2010 on sn-devel-104
2010-11-13s4-test: we need to import testtools before subunit/pythonAndrew Tridgell1-1/+1
subunit/python depends on testtools Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Sat Nov 13 02:02:45 UTC 2010 on sn-devel-104
2010-11-12ktpass: also use userPrincipalName for locating the principalMatthieu Patou1-1/+2
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Fri Nov 12 20:24:23 UTC 2010 on sn-devel-104
2010-11-12ktpass: fix the search path for when running in samba's source dirMatthieu Patou1-0/+3
2010-11-12python: use the ldbMessage + modify notation instead of modify_ldif that we ↵Matthieu Patou1-7/+6
try to avoid
2010-11-12Fix typoMatthieu Patou1-1/+1
2010-11-12unit tests: add testing for dns account password changeMatthieu Patou1-0/+4
2010-11-12upgradeprovision: use relaxed control while adding missing object containerMatthieu Patou1-1/+3
2010-11-12upgradeprovision: fix pb with dns-hostname, regenerate a correct keytabMatthieu Patou2-1/+75
2010-11-12upgradeprovision: use the relax/(upgrade)provision when modifying objectMatthieu Patou1-1/+8
For certain attribute we use the relax/provision control so that we try to respect checks as this is not a good idea to always force unwanted behavior.
2010-11-12upgradeprovision: use the (upgrade)provision control alsoMatthieu Patou1-2/+2
2010-11-12upgradeprovision: update revision for forestupdate and domainupdate objectsMatthieu Patou1-1/+4
2010-11-12samldb: relax groupType modification checksMatthieu Patou1-27/+32
Allow programs with the PROVISION control to bypass groupType checks. This is needed by upgradeprovision for older alpha (11, 10 ...)
2010-11-12Update WHATSNEW4 to add information related to samba_backupMatthieu Patou1-49/+10
2010-11-12Add a script to make backup of samba provisionMatthieu Patou1-0/+65
2010-11-12s4:objectclass LDB module - we should not simply ignore additional ↵Matthias Dieter Wallnöfer2-2/+29
"objectClass" attribute changes There first one we perform all other tentatives are terminated with ERR_ATTRIBUTE_OR_VALUE_EXISTS (tested against Windows). Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Fri Nov 12 19:39:07 UTC 2010 on sn-devel-104
2010-11-12s4:repl_meta_data LDB module - convert two debug messages into error messagesMatthias Dieter Wallnöfer1-4/+4
These regarding "objectGUID".
2010-11-12s4:samldb/objectclass_attrs LDB modules - move "description" logic from ↵Matthias Dieter Wallnöfer4-198/+245
"objectclass_attrs" into "samldb" This according to an answer from dochelp is SAM specific behaviour.
2010-11-12waf/samba_version: Simplify git show command.Jelmer Vernooij1-1/+1
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Fri Nov 12 18:38:21 UTC 2010 on sn-devel-104
2010-11-12samba_version: Make COMMIT_IS_CLEAN an int rather than a string.Jelmer Vernooij1-4/+4
2010-11-12samba_version: Simplify dirty tree detection.Jelmer Vernooij1-5/+4
2010-11-12waf/samba_version: Support integer defines.Jelmer Vernooij1-4/+12
2010-11-12s3: Rename GIT_COMMIT_{TIME,DATE} to COMMIT_{TIME,DATE}.Jelmer Vernooij3-13/+13
This avoids some special casing in the waf code.
2010-11-12s4: Remove obsolete mkversion.shJelmer Vernooij1-133/+0
2010-11-12samba_version: When working from git checkout, display git revision SHA1 ratherJelmer Vernooij4-47/+69
than Bazaar revision ids.
2010-11-12samba_version: Support retrieving snapshot identity from bzr.Jelmer Vernooij1-0/+23
2010-11-12samba_version: Cope with building snapshots in directories without git checkout.Jelmer Vernooij1-1/+6
Error out when run in a git checkout in which git fails.
2010-11-12Put git tree finding into a separate function.Jelmer Vernooij1-32/+32
2010-11-12sambaversion.py: Some cleanups, make less git-specific.Jelmer Vernooij1-18/+22
2010-11-12wafsamba: Support make dist from bzr checkout.Jelmer Vernooij1-3/+11
2010-11-12torture: Only add in tests for socket_wrapper/nss_wrapper when they have ↵Jelmer Vernooij2-2/+18
been enabled.
2010-11-12unix_privs: Add missing dependency on libreplace.Jelmer Vernooij2-1/+2
2010-11-12socket_wrapper: Only add as global dependency when enabled.Jelmer Vernooij1-3/+3
2010-11-12heimdal_build: Add missing dependency on replace, necessary because ↵Jelmer Vernooij1-1/+1
replace.h is included.
2010-11-12s4-waf: Only enable various wrappers if they're actually used.Jelmer Vernooij3-2/+5
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Fri Nov 12 14:33:34 UTC 2010 on sn-devel-104
2010-11-12Lowercase DNS_UPDATE_SRV name.Jelmer Vernooij1-1/+1
2010-11-12tdb: set tdb->name early, as it's needed for tdb_name()Stefan Metzmacher1-6/+27
tdb_name() might be used within the given log function, which might be called from within tdb_open_ex(). metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Nov 12 11:22:21 UTC 2010 on sn-devel-104
2010-11-12s4-kdc: added proxying of kdc requests for RODCsAndrew Tridgell5-66/+782
when we are an RODC and we get a request for a principal that we don't have the right secrets for, we need to proxy the request to a writeable DC. This happens for both TCP and UDP requests, for both krb5 and kpasswd Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Fri Nov 12 08:03:20 UTC 2010 on sn-devel-104
2010-11-12s4-kdc Return HDB_ERR_NOT_FOUND_HERE on un-revealed accounts on an RODCAndrew Bartlett1-1/+7
This means that when we are an RODC, and an account does not have the password attributes, we can now indicate to the kdc code that it should forward the request to a real DC. (The proxy code itself is not in this commit). Andrew Bartlett
2010-11-12heimdal Return HDB_ERR_NOT_FOUND_HERE to the callerAndrew Bartlett3-11/+34
This means that no reply packet should be generated, but that instead the user of the libkdc API should forward the packet to a real KDC, that has a full database. Andrew Bartlett
2010-11-12s4-kdc: split the kdc process return into a tri-stateAndrew Tridgell3-53/+59
this is in preparation for doing forwarding of packets for RODCs Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-12s4-kdc: we don't need the special include handling nowAndrew Tridgell1-6/+0
the special handling was to cope with the conflict with the kdc.h header Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>