Age | Commit message (Collapse) | Author | Files | Lines |
|
outside the tree, instead defined _SAMBA_BUILD_ inside the Samba
build. This makes it easier to pull code out of Samba for external
use.
(This used to be commit 09e98c8745cca7ccb1ad7134c0c09b8e4c0f4f06)
|
|
(This used to be commit fee40e110d56c932aeff11178c120f3f4e19ddd2)
|
|
CREATOR_GROUP inheritance rules
(This used to be commit 0a29fb45c310b4b8c348d187b8ff1833deaac6c3)
|
|
(This used to be commit 5448c72ebe58e264ee772f8e1c4caee2250c328c)
|
|
- add DSSETUP to the list of tests run in test_rpc.sh
(This used to be commit 73c3cdc8ed8dafd544ce4dcac9141124d2b85670)
|
|
pipe is now complete!
The only glitch is that I am returning DS_ROLE_MEMBER_SERVER when I
should be returning DS_ROLE_PRIMARY_DC. This is needed for the moment
or ACL editing doesn't work from w2k3. Once we have some more ADS
calls we should be able to fix this.
(This used to be commit 6566dc2805a9f6473ebab70b0dbd381c4dbd42c8)
|
|
(disabled by default, set parametric option: gensec:gssapi=yes to enable).
This module backs directly onto GSSAPI, and allows us to sign and seal
GSSAPI/Krb5 connections in particular. This avoids me reinventing the
entire GSSAPI wheel.
Currently a lot of things are left as default - we will soon start
specifiying OIDs as well as passwords (it uses the keytab only at the
moment). Tested with our LDAP-* torture tests against Win2k3.
My hope is to use this module to access the new SPNEGO implementation
in Heimdal, to avoid having to standards-verify our own.
Andrew Bartlett
(This used to be commit 14b650c85db14a9bf97e24682b2643b63c51ff35)
|
|
In developing a GSSAPI plugin for GENSEC, it became clear that the API
needed to change:
- GSSAPI exposes only a wrap() and unwrap() interface, and determines
the location of the signature itself.
- The 'have feature' API did not correctly function in the recursive
SPNEGO environment.
As such, NTLMSSP has been updated to support these methods.
The LDAP client and server have been updated to use the new wrap() and
unwrap() methods, and now pass the LDAP-* tests in our smbtorture.
(Unfortunely I still get valgrind warnings, in the code that was
previously unreachable).
Andrew Bartlett
(This used to be commit 9923c3bc1b5a6e93a5996aadb039bd229e888ac6)
|
|
can use ncalrpc as well.
(This used to be commit 02340bb6eec394576d23f2c51956f4c47f475452)
|
|
(This used to be commit dbcaff7c71c9b7ee984a2ed458b6c3ce27772740)
|
|
Volker
(This used to be commit f8588a769c185f871fdcd5db35428ad587bdfad3)
|
|
(This used to be commit 05c8fd81ddec969ed5280e2fe9f838ac4399f1c9)
|
|
to join a Samba4 domain. It is hard-coded for my GUID, so
you will need to edit it to suit.
I'm committing this so others can experiment. Obviously
what we really need is a new nmbd in Samba4.
(This used to be commit a30be712e5abe81b57f8b1b75ebf152018df0eea)
|
|
role. The value '5', which is what my w2k3 DC returns, doesn't
work. I'm not sure why this is.
with this change the GUI ACL editor from w2k3 works properly, with
either server role in the HKLM registry.
(This used to be commit 27a8b270bdd029a850c5ec3d10c1ac42468169cb)
|
|
(This used to be commit 1c2170ae21d60c22ee3053fbf249dba59de576ba)
|
|
ds_RolerGetPrimaryDomainInformation()
(This used to be commit 7aec3dac6fd5165cfca5c650aaa29234e278d95d)
|
|
editing from w2k3
when we present ourselves as a DC in the registry
(This used to be commit 9651901791e0553f106ab957c5787c109098248b)
|
|
(This used to be commit 40a68a160e43b2e5d018e393ddecdfc50bad5360)
|
|
- honor the change ownership requests of acl set, changing the underlying
unix owner/group
- fix the access mask on file create with SEC_FLAG_MAXIMUM_ALLOWED
(This used to be commit 5761fa35ab727b51ef1b52459911bafbdd788755)
|
|
(This used to be commit e535f84504b07a912c2f5dd6eca4c9893c1843db)
|
|
(This used to be commit 9f0bf657aeee86d859742fb4da3a0f806e7060b6)
|
|
(This used to be commit 382231ca365eccec8024af9420b1ebe41953bdb5)
|
|
provision.pl suggests hklm.ldb be put)
- fix the globals init not to wipe parametic values after initialising
them (this bug prevented default values for parametric parameters)
(This used to be commit 6a360c52c1723b4c3485a97ebcfeb907f840a051)
|
|
(This used to be commit d37f556258ba12479e4e9acc5cdb5535ebf41d7f)
|
|
(This used to be commit 0dd258709554265efaa0d25ad5bc86b559139c2e)
|
|
- Use more of the clikrb5.c wrapper calls
- Don't use the session keytab if we kinit for the user.
Andrew Bartlett
(This used to be commit e15dbee00628475d5e1c1f329a7f9b199bc36360)
|
|
- filterout hidden shares in NetShareEnum()
- get max_connections right
metze
(This used to be commit c685823c5d75f22177549566866301523a64a1dd)
|
|
metze
(This used to be commit e62b36bef193f6a58ee035d581ef0f574f1e2910)
|
|
metze
(This used to be commit 33a185ec3b211f6137abd6367ccc81d5102e5f4f)
|
|
For some reason I am getting ACCESS_DENIED from w2k3 on
lsa_LookupSids3(). I will investigate.
(This used to be commit c759fa0000e37c3e93a7529a7701998af6727612)
|
|
metze
(This used to be commit 7886000e031622795fecb6ec37990c133b1e66f7)
|
|
metze
(This used to be commit 02861f63052c48fc85c6694ad8164cc6cc5443d4)
|
|
- add torture test for NetShareCheck()
metze
(This used to be commit 96000a2261ed56fda613a45e3aa460eb3c87082a)
|
|
for adding LookupSids3 (needed for ACL editing from w2k3)
(This used to be commit 745bbc0e1717c1e0068be00cff36071dbdc451a6)
|
|
- implement srvsvc_NetGetShareInfo()
- add more error checks
- bring the rest of the code in the same layout
metze
(This used to be commit 0dd14d9fc611a33dad4e559321d6c50d82efb5d1)
|
|
metze
(This used to be commit 74e65680fa9a6b8f04c6ae62ec1da49659879fb5)
|
|
setup the directory before each test,
thus avoiding errors due to previous failures
(This used to be commit a44fa5319d87e57f4b904334d9ea65cc6807b789)
|
|
(This used to be commit 81630d3014c8cbd970bc917e3e9aef337fa211cd)
|
|
the user is
not prevented from viewing the acl by other access bits
(This used to be commit 61e71782f573d0fa5b88237299df516c67405e30)
|
|
- added a ldb_msg_canonicalize() function that fixes a record to not have any duplicate
elements
- changed ldbedit to use ldb_msg_canonicalize(). This fixes a bug when you rename multiple
elements in a record in one edit
(This used to be commit f006e724400843419c8b6155cbeae1876983855e)
|
|
metze
(This used to be commit 18bbe40fe1e400546ff3750213f6c0505895e357)
|
|
W_ERROR_HAVE_NO_MEMORY() macro
- add parameters for
server_info:platform_id = 500 /* this is PLATFORM_ID_NT */
server_info:version_major = 5
server_info:version_minor = 2
- implmented srvsvc_NetSrvGetInfo level 101
- make dcesrv_common_get_server_name() match w2k3
metze
(This used to be commit 16f43207704397c6e3c0132e9f17c8a1a846ddca)
|
|
amazed we got along for so long with this bug!
(This used to be commit 937159cf2c6ae08808bd10946fcdbd8741e1a560)
|
|
metze
(This used to be commit c44f4d44b51789916e50c9da93046d0a15245edc)
|
|
metze
(This used to be commit 19482a2245abbf9154423ca8997957b56333fba2)
|
|
metze
(This used to be commit 222abd4171ce69c65a13b52675d4d75009056bca)
|
|
they should be used in mostly all our code after
calling a talloc_* function
- the current NTSTATUS_TALLOC_CHECK() and WERR_TALLOC_CHECK()
should be replaced by this new macros
metze
(This used to be commit b6376590f4b2409b2237809d378d9425fe1ce07e)
|
|
and debug privileges
metze
(This used to be commit c981808ed4cfa63c7ba7c4f9190b6b14f74bab40)
|
|
metze
(This used to be commit 5861657fd12aae026c06ab8c6ae1f1656d06d0a1)
|
|
Volker
(This used to be commit 04cf580ef30ac38f3f312184a7b18551195a17ce)
|