Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2009-09-19 | Add drs_security_level_check for dcesrv calls security checks | Anatoliy Atanasov | 6 | -20/+36 | |
There is also an option to disable the security check by specifying in the smb.conf file: drs:disable_sec_check = true | |||||
2009-09-20 | s4:provision_basedn_modify - fix the "auditPolicy" attribute | Matthias Dieter Wallnöfer | 1 | -1/+2 | |
I had to think about how to encode the string 0x0001 (taken from Windows Server). The problem is due to the "0" byte at the beginning of it. BASE64 encoding seems a good method to do it. | |||||
2009-09-19 | s4:utils Remove typo... | Andrew Bartlett | 1 | -1/+0 | |
2009-09-19 | s4:dsdb Print the partition we failed to suggest replication for | Andrew Bartlett | 1 | -1/+2 | |
2009-09-19 | libcli:nbt move prototypes of lmhosts functions to libnbt.h | Andrew Bartlett | 2 | -5/+6 | |
2009-09-19 | s4:utils Explian fix for testparm -v | Andrew Bartlett | 1 | -2/+6 | |
The problem here was that we take an address of a bool, and then (via a void*) cast it to a int *, so put this in a comment. Andrew Bartlett | |||||
2009-09-19 | s4-ldb: bump minimum version in ldb too | Andrew Tridgell | 1 | -1/+1 | |
2009-09-19 | more include minimisation | Andrew Tridgell | 12 | -41/+0 | |
2009-09-19 | tdb: increase minor version | Andrew Tridgell | 2 | -2/+2 | |
we depend on reads in transactions for s4 replication | |||||
2009-09-19 | s4-smbd: removed unnecessary includes | Andrew Tridgell | 5 | -11/+0 | |
2009-09-19 | s4-scripts: make minimal_includes handle our -I overrides | Andrew Tridgell | 1 | -10/+20 | |
2009-09-19 | s4-smbd: minimise includes in smbd/ and smb_server | Andrew Tridgell | 21 | -40/+0 | |
2009-09-19 | s4-testparm: fixed -v option | Andrew Tridgell | 1 | -1/+1 | |
never pass a bool pointer to popt | |||||
2009-09-19 | s4-rpc_server: removed remaining unnecessary #includes | Andrew Tridgell | 4 | -5/+2 | |
2009-09-19 | s4-rpc: remove some unnecessary #include lines | Andrew Tridgell | 4 | -8/+0 | |
I should remember to run script/minimal_includes.pl more often | |||||
2009-09-19 | s4:samdb.py - further rework | Matthias Dieter Wallnöfer | 1 | -12/+9 | |
- I added a comment to the "new user" operation to point out that this works only on s4, since we add also ID mapping entries for winbind there - The "new user" operation adds now the password through the "set password" operation which I find better due to the re-use principle - Remove the word "DC" after "SAMBA 4" in the comment over the "set password" operation since this note and operation applies also to s4 in standalone mode | |||||
2009-09-19 | pidl: update expected output for NDR64 changes | Andrew Tridgell | 1 | -1/+1 | |
2009-09-19 | s4-netlogon: implement dcesrv_netr_DsRAddressToSitenamesExW | Andrew Tridgell | 1 | -2/+24 | |
We don't implement sites properly at the moment so we just return Default-First-Site-Name | |||||
2009-09-19 | s4-resolve: fixed a crash bug on timeout | Andrew Tridgell | 9 | -11/+13 | |
We were creating the name resolution context as a child of lp_ctx, which meant when we gave up on a connection the timer on name resolution kept running, and when it timed out the callback crashed as the socket was already removed. | |||||
2009-09-18 | s4-pipes: convert pipe names to lowercase and validate | Andrew Tridgell | 1 | -0/+19 | |
clients may provide arbitrary names, but we only want lowercase alnum names | |||||
2009-09-18 | s4-server: kill main daemon if a task fails to initialise | Andrew Tridgell | 25 | -77/+159 | |
When one of our core tasks fails to initialise it can now ask for the server as a whole to die, rather than limping along in a degraded state. | |||||
2009-09-18 | s4-kdc: ignore unknown keytypes | Andrew Tridgell | 1 | -0/+6 | |
don't fail hdb operations if one of the key types is unknown | |||||
2009-09-18 | Merge branch 'master' of /home/tridge/samba/git/combined | Andrew Tridgell | 38 | -686/+2020 | |
2009-09-18 | s4-drs: cope with dupliate linked attributes | Andrew Tridgell | 1 | -1/+41 | |
With a w2k8-R2 DC, we sometimes get linked attribute updates via DRS which are duplicates of entries that we already have. We need to cope with this by using a remove/add pair in the ldb_modify() to avoid a "entry already exists" error | |||||
2009-09-18 | s4:provision_configuration - "sPNMappings": "http" missed on regeneration | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
2009-09-18 | s4/provision_configuration - re-add the "sPNMappings" | Matthias Dieter Wallnöfer | 1 | -0/+3 | |
Accidentally removed by a previous commit. | |||||
2009-09-18 | s4:scripts - Cleans also the rest under the "setup" directory up | Matthias Dieter Wallnöfer | 3 | -30/+43 | |
- I removed also the "-H" parameter since those scripts are all thought for the use on a local s4 domain controller. Another reason is also the bind as SYSTEM account which itself is only possible on local binds. | |||||
2009-09-18 | s3-rpc_client: fix non initialized structure in rpccli_lsa_lookup_sids_noalloc. | Günther Deschner | 1 | -0/+2 | |
Guenther | |||||
2009-09-18 | s3-smbd: fix get_ea_names_from_file() and check for pnames pointer. | Günther Deschner | 1 | -1/+3 | |
This fixes smbd from crashing all the time. Jeremy, Volker, please check. Guenther | |||||
2009-09-18 | s4:various scripts under "setup" - Unification | Matthias Dieter Wallnöfer | 4 | -73/+74 | |
- This unified the shape of those four scripts (comments, command sequence, call of SamDB) - To consider the samdb.py changes regarding the filter: there is now always the possibility either to specify the username or the search filter | |||||
2009-09-18 | s4:domainlevel/pwsettings - Remove unused import | Matthias Dieter Wallnöfer | 2 | -2/+0 | |
2009-09-18 | s4:samdb.py - Unification of the interfaces | Matthias Dieter Wallnöfer | 2 | -38/+54 | |
- When a user account is requested by a call always the search filter will be passed as argument. This helps us to unify the API - Add/fix some comments; in particular new comments inform the developer which requirements exist if he wants to use calls which manipulate the "userPassword" attribute (On s4 no problem - but on certain domain levels on Windows Server) | |||||
2009-09-18 | s4:minschema/fullschema - add correct header comments | Matthias Dieter Wallnöfer | 2 | -2/+2 | |
2009-09-18 | s4:rpc_server: remove some now unused code | Stefan Metzmacher | 2 | -199/+0 | |
metze | |||||
2009-09-18 | s4:ntvfs_ipc: add real named pipe support | Stefan Metzmacher | 2 | -236/+652 | |
We now open a named via the named_pipe_auth code and process IO via the tstream interface. This means we support byte mode and message mode named pipes. We also correctly issue NT_STATUS_PIPE_BUSY when a smb_trans request comes in and a read or smb_trans is already pending. We also have support for async dcerpc over ncacn_np now, and we now can remove the ncacn_np specific hacks from the rpc_server/ code. metze | |||||
2009-09-18 | s4:torture: the spoolss notify test should listen on the ncacn_np endpoint | Stefan Metzmacher | 1 | -0/+20 | |
metze | |||||
2009-09-18 | s4:rpc_server: export dcesrv_add_ep() so that torture tests can use it | Stefan Metzmacher | 2 | -5/+9 | |
metze | |||||
2009-09-18 | libcli/named_pipe_auth: pass gssapi delegated credentials through the named pipe | Stefan Metzmacher | 2 | -22/+32 | |
metze | |||||
2009-09-18 | s4:service_named_pipe: accept delegated credentials | Stefan Metzmacher | 2 | -3/+101 | |
metze | |||||
2009-09-18 | librpc: rerun 'make idl' | Stefan Metzmacher | 3 | -0/+353 | |
metze | |||||
2009-09-18 | named_pipe_auth.idl: add infrastructure to pass delegated credentials | Stefan Metzmacher | 1 | -0/+23 | |
metze | |||||
2009-09-18 | s4:torture: don't use 'pipe' as variable name it's a system call | Stefan Metzmacher | 1 | -3/+3 | |
metze | |||||
2009-09-18 | s4:heimdal/gssapi/krb5: set cred_handle in _gsskrb5_import_cred | Stefan Metzmacher | 1 | -0/+1 | |
metze | |||||
2009-09-18 | Merge branch 'master' of /home/tridge/samba/git/combined | Andrew Tridgell | 7 | -6/+12 | |
2009-09-18 | s3: Fix Coverity ID 581 -- NEGATIVE_RETURNS | Volker Lendecke | 1 | -0/+4 | |
2009-09-18 | s3:smbstatus: Fix bug 6703, allow smbstatus as non-root | Volker Lendecke | 1 | -11/+13 | |
We only require a ctdb connection when clustering is enabled. This limits the restriction for only-root smbstatus to the clustering case. | |||||
2009-09-18 | s3:smbstatus: Fix some nonempty blank lines | Volker Lendecke | 1 | -19/+19 | |
2009-09-18 | s4:domainlevel - fix indentations | Matthias Dieter Wallnöfer | 1 | -4/+4 | |
2009-09-18 | s4:domainlevel - Add a script which allows raising the domain/forest level | Matthias Dieter Wallnöfer | 1 | -0/+181 | |
This simple script allows raising the domain and/or forest level for s4. I integrated also the basic checks (since we don't perform them in LDB yet): e.g. the forest level can't be higher than the domain level(s). | |||||
2009-09-18 | s4:pwsettings - Simplify the error handling a bit | Matthias Dieter Wallnöfer | 1 | -5/+2 | |