summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2010-03-16s4-smbtorture: avoid printf calls in RPC-WINREG test.Günther Deschner1-41/+33
Guenther
2010-03-16Added a net acl ds command for modification of ACLs on directory objectsNadezhda Ivanova7-3/+260
At present the command supports only addition of control access rigts, done so DRS access checks can be tested. It will be expanded to deal with most ways to modify and view a DS ACL. Shifted commands a bit. What used to be net acl is now "net acl nt" as apposed to this, which is "net acl ds" ./bin/net acl ds set --help Usage: set --objectdn=objectdn --car=control right --action=[deny|allow] --trusteedn=trustee-dn Options: -h, --help show this help message and exit --host=HOST LDB URL for database or target server --car=CAR The access control right to allow or deny --action=ACTION Deny or allow access --objectdn=OBJECTDN DN of the object whose SD to modify --trusteedn=TRUSTEEDN DN of the entity that gets access Samba Common Options: -s FILE, --configfile=FILE Configuration file Credentials Options: --simple-bind-dn=DN DN to use for a simple bind --password=PASSWORD Password -U USERNAME, --username=USERNAME Username -W WORKGROUP, --workgroup=WORKGROUP Workgroup -N, --no-pass Don't ask for a password -k KERBEROS, --kerberos=KERBEROS Use Kerberos
2010-03-16s3-spoolss: be very strict on OpenPrinter{Ex} failures for bad names.Günther Deschner1-8/+4
Guenther
2010-03-16s4:dsdb - fix up warningsMatthias Dieter Wallnöfer2-4/+8
2010-03-16s4:registry - use a macro for reverse byte orderMatthias Dieter Wallnöfer2-10/+4
2010-03-16s4:dsdb Show more detail in failure to compute the aggregate DN.Andrew Bartlett1-1/+1
Andrew Bartlett
2010-03-16s4:dsdb Change dsdb_get_schema() callers to use new talloc argumentAndrew Bartlett22-52/+125
This choses an appropriate talloc context to attach the schema too, long enough lived to ensure it does not go away before the operation compleates. Andrew Bartlett
2010-03-16s4:dsdb Fix warnings in DEBUG() by casting to unsigned long intAndrew Bartlett1-4/+4
2010-03-16s4:dsdb/acl Reduce calls to dsdb_get_schema() and add memory contextAndrew Bartlett1-24/+46
dsdb_get_schema() isn't a very cheap call, due to the use of LDB opaque pointers. We need to call it less, and instead pass it as a parameter where possible. This also changes to the new API with a talloc context. Andrew Bartlett
2010-03-16s4:dsdb Add a memory context for dsdb_get_schema()Andrew Bartlett1-3/+9
When specified, we talloc_reference onto this context to ensure that pointers found in it are valid for the life of the objects they are placed into. (Such as the string form of LDAP attributes). Andrew Bartlett
2010-03-16s4:dsdb Don't error out if we can't get the Aggregate schema DN yetAndrew Bartlett1-9/+16
It's easier to just set it up when we can, then to deal with the ordering issues in ldb startup. As long as we have it ready if a real client ever asks for it, then we should be happy. Andrew Bartlett
2010-03-16s4:registry - check also for other registry value types in the generic testMatthias Dieter Wallnöfer1-0/+16
2010-03-16s4:registry - add a test for the "REG_DWORD_BIG_ENDIAN" datatypeMatthias Dieter Wallnöfer1-0/+14
2010-03-16s4:registry - introduce the "REG_DWORD_BIG_ENDIAN" datatypeMatthias Dieter Wallnöfer2-4/+26
It's like the normal REG_DWORD type but the byte order swapped
2010-03-16s4:dsdb/kcc/*.c - fix up wrong typed countersMatthias Dieter Wallnöfer5-20/+22
2010-03-16s4-drs: Torture testcase for DS_REPL_INFO_METADATA_2_FOR_OBJ infoType of ↵Erick Nogueira do Nascimento1-46/+104
DsGetReplInfo() This torture testcase considers both cases for this infoType: when the flag DRSUAPI_DS_LINKED_ATTRIBUTE_FLAG_ACTIVE is enabled and when not. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-03-16s4-drs: DsGetReplInfo(), infoType = DS_REPL_INFO_METADATA_2_FOR_OBJErick Nogueira do Nascimento1-80/+284
Implementation of the DS_REPL_INFO_METADATA_2_FOR_OBJ infoType for DsGetReplInfo() Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-03-15Fix bug #7191 - WINS doesn't respond after > 86 #1c registrations.Craig Miskell1-4/+115
2010-03-16s3:registry-legacy: use talloc_stackframe() instead of NULL in ↵Michael Adam1-2/+3
regkey_open_internal() Michael
2010-03-16s3:smbcacls: also honour the "--sddl" flag when setting ACLs.Michael Adam1-2/+6
Michael
2010-03-15s3: Fix an uninitialized variable readVolker Lendecke1-1/+1
Found by Laurent Gaffie <laurent.gaffie@gmail.com> Thanks for that, Volker
2010-03-15Remove the bool admin_user from conn struct. We no longer look at this to ↵Jeremy Allison4-9/+5
make access decisions. Jeremy.
2010-03-15Fix bug #7188 - Logic error in check of total_data for call_trans2mkdir()Jeremy Allison1-16/+13
Make ea data checks identical for trans2open and trans2mkdir. Jeremy.
2010-03-15Remove reference to conn->admin_user in preparation for removal.Jeremy Allison1-9/+13
We use (uid_t)0 here not sec_initial_uid() as make test uses a single user context. I will revisit this when all the uid check changes are complete. Jeremy.
2010-03-15Simplify processing of "admin user". If a user is an admin_user ensure their ↵Jeremy Allison1-15/+14
conn token is uid 0. This simplifies change_to_user() and removes special processing of the assignments we pass to set_sec_ctx(). Jeremy.
2010-03-15Switch over to using get_currect_XXX() accessor functions.Jeremy Allison5-33/+38
Jeremy.
2010-03-15Pass "connection_struct *conn" into functions that currently use ↵Jeremy Allison3-20/+22
"current_user.XXX" Will allow me to replace them with accessor functions. Jeremy.
2010-03-15Add accessor functions for current uid, gid, unix token, NT token and vuid.Jeremy Allison2-0/+48
Jeremy.
2010-03-15We don't need to treat the token differently in the conn->admin_user case, ↵Jeremy Allison1-11/+0
it should already be pointing to a token with uid == 0. Jeremy.
2010-03-15Rever e80ceb1d7355c8c46a2ed90d5721cf367640f4e8 "Remove more uses of "extern ↵Jeremy Allison10-129/+78
struct current_user current_user;"." As requested by Volker, split this into smaller commits. Jeremy.
2010-03-15s4-smbtorture: add simple printer rename test to RPC-SPOOLSS-PRINTER.Günther Deschner1-1/+95
Guenther
2010-03-15testprogs: add EnumPrinterData test to win32 spoolss test.Günther Deschner2-0/+67
Guenther
2010-03-15s4-smbtorture: fill PrinterDriverData with more values for consistency test.Günther Deschner1-3/+22
Guenther
2010-03-15s3:smbd: make sure we always have a valid talloc stackframeStefan Metzmacher1-0/+3
metze
2010-03-15talloc_stack: reset stackframe pointers to NULLStefan Metzmacher1-0/+2
This makes it easier to debug the code in future. metze
2010-03-15talloc_stack: make sure we never let talloc_tos() return ts->talloc_stack[-1]Stefan Metzmacher1-1/+1
In smbd there's a small gab between TALLOC_FREE(frame); before be call smbd_parent_loop() where we don't have a valid talloc stackframe. smbd_parent_loop() calls talloc_stackframe() only within the while(1) loop. As DEBUG(2,("waiting for connections")) uses talloc_tos() to construct the time header for the debug message we crash on some systems. metze
2010-03-15s4-smbtorture: cleanup data after enumdata{ex} consistency test.Günther Deschner1-0/+8
Guenther
2010-03-15s3-spoolss: Fix _spoolss_EnumPrinterData.Günther Deschner1-3/+5
Guenther
2010-03-15s4-smbtorture: when cross checking enumdata{ex} make sure to have at least ↵Günther Deschner1-0/+21
one entry. Guenther
2010-03-15s4-smbtorture: add PrinterInfo_to_SetPrinterInfo helper to RPC-SPOOLSS.Günther Deschner1-72/+59
Guenther
2010-03-15s4:registry - rpc - don't crash when communication partner isn't availableMatthias Dieter Wallnöfer1-4/+4
2010-03-15s4:registry - util.c - treat unsupported and binary values as the same in ↵Matthias Dieter Wallnöfer1-17/+5
the conversion functions We don't need to provide an extra representation for all available registry types. But if we treat all unsupported types as binary we also get our tools (regtree, regshell, regdiff...) working with them in a basic manner.
2010-03-15s4:registry - util.c - move the "REG_NONE" case in the conversion functions ↵Matthias Dieter Wallnöfer1-6/+6
on top of the switch (As in the "reg_value_types" structure)
2010-03-15s4:registry - local testsuite - add a test for REG_QWORDMatthias Dieter Wallnöfer1-1/+15
Change also here to fixed-length HEX values output to test for the right representation.
2010-03-15s4:registry - fix up the output of hexadecimal valuesMatthias Dieter Wallnöfer2-14/+6
Use a fixed-length representation to avoid platform-specific issues.
2010-03-15s4:registry - add support for REG_QWORD valuesMatthias Dieter Wallnöfer2-1/+82
Basically the same as REG_DWORD but these are eight byte long.
2010-03-15s4-smbtorture: fix torture_comment in RPC-SPOOLSS.Günther Deschner1-1/+1
Guenther
2010-03-15s4:tortore/libnet: fix crash bugs because of incorrect function prototypesStefan Metzmacher6-26/+43
metze
2010-03-14s4:registry - util.c - add harder checks for inputs on "reg_val_data_string"Matthias Dieter Wallnöfer1-12/+16
("NULL" result is error on most data types).
2010-03-14Revert "s4-smbtorture: skip extended SetValue test against Samba (both dont ↵Matthias Dieter Wallnöfer1-5/+9
survive)." This reverts commit 40e2c04f8aba605e951810751222559ea0d32ebd. s4 should support now also the extended "SetValue" tests.