Age | Commit message (Collapse) | Author | Files | Lines |
|
With these changes, we don't leak the LDAP socket, and don't reset all
credentials feature flags, just the ones we are actually incompatible
with.
Andrew Bartlett
(This used to be commit 72e52a301102941c41ab423e0212fe9a1aed0405)
|
|
This makes Samba4 behave much like Samba3 did, and use a single set of
administrative credentials for it's connection to LDAP.
Andrew Bartlett
(This used to be commit e396a59788d77aa2fbf3b523c3773fe0e5c976c0)
|
|
This includes a simple bind DN, or SASL credentials.
The error messages are reworked as on systems without an LDAP backend,
we will fail to find this record very often.
Andrew Bartlett
(This used to be commit 95825ae6d5e9d9846f3a7505a81ebe603826227e)
|
|
We don't really care (because nobody uses them) what we send as the
domain and workstation in the negotiate packet.
Andrew Bartlett
(This used to be commit 9ac07e14873df2c18d0e9501691c2d4c4047e218)
|
|
(This used to be commit 79c4d8e2fabc9c33d978c064b9c01ca45e463ced)
|
|
Andrew Bartlett
(This used to be commit 7ca421eb32bed3c400f863b654712d922c82bfb9)
|
|
This attribute is used in a very similar way (virtual attribute
updating the password) in AD on Win2003, so eliminate the difference.
This should not cause a problem for on-disk passwords, as by default
we do not store the plaintext at all.
Andrew Bartlett
(This used to be commit 1cf0d751493b709ef6b2234ec8847a7499f48ab3)
|
|
This code is now in common with ad2oLschema.
Andrew Bartlett
(This used to be commit 0a797388ca442c3ad4809888897b1c63b65a7fdf)
|
|
(This used to be commit f956908cde7dd40643ff49cf433d0cf7765027de)
|
|
Instead of extensibleObject, we use the new (more correct) ad2oLschema
tool, and a new objectClass called 'samba4Top', which we add and
remove in the same way we did extensibleObject.
Andrew Bartlett
(This used to be commit 5ab20aa8b43415751f77602fff3a3008bf2186db)
|
|
This will allow the kludge_acl and schema code to leverage the same
work. (We might even get schema validation soon! :-)
Andrew Bartlett
(This used to be commit cecd04ce1f8ce2af2fb654b3abc1499092405d60)
|
|
const char. The deletion earlier was a typo.
Jeremy.
(This used to be commit aa27344b96929c925b30965a1cd20e69c3dbd515)
|
|
that can store a timestamp along with the SD. Allows
us to check for validity against the POSIX st_ctime.
Keeps the IDL consistent with Samba3.3 IDL.
Jeremy.
(This used to be commit 29843a6b339a581de714924219632390b156aa4f)
|
|
Michael
(This used to be commit b7c14af3790bcf825367a7f16d2aaa375b04393c)
|
|
Michael
(This used to be commit ea99590046f50ec2d0c4afe0163fc8660a797ba4)
|
|
Michael
(This used to be commit 3b0917dbc5399dc6835b523d762b244bdcf45b79)
|
|
This reverts commit fafb8ad2b81b9a46cf8259bedc1dca5023b06115.
This fix is not valid:
1. convert_string() is not only used for key strings but also for data.
2. Some databases use string_tdb_data() i.e. non-null-terminated strings
as keynames and others (like the one I was using), use
string_term_tdb_data(), i.e. zero-terminated key strings.
After discussion with Metze, the easiest (and proper way) to
handle this is to specify key names as "keyname\0" for databases
which use string_term_tdb_data().
Sorry for the noise...
Michael
(This used to be commit 17c012c4645f4e9542537c15f80d9b4e74304d11)
|
|
This prevented all commands operating on keys (all non-traverse commands)
in tdbtool to fail with a "fetch failed" or "delete failed" message.
It seems that it fixes bug #2344 ...
Apparently this bug was introduced with 94e53472666ed in 2005.
Either nobody is using tdbtool or else tdb_find() has become
more strict about the key legth in the meantime. :-)
Michael
(This used to be commit fafb8ad2b81b9a46cf8259bedc1dca5023b06115)
|
|
metze
(This used to be commit 76dd521bcf53a245bd1412968e9b921e5c2f10c9)
|
|
metze
(cherry picked from commit 20795c4a0d5f75561561470231de1a2fad2906ff)
(This used to be commit 5d5b4e4ab23e1c630dfde2b9f296681e3979c4e0)
|
|
metze
(This used to be commit 9a5f7bf68b20e3b490b209b5cfc4408566320f2e)
|
|
metze
(This used to be commit 36a39b92d732a682e38ad4b3f733951fee4757ed)
|
|
metze
(This used to be commit d235ce673705641e06b4ad5f5679e146b59a19e1)
|
|
We now support async multi fragment SMBtrans calls.
metze
(This used to be commit ba8499867af90dcd88455476b1f58a2ab18f159b)
|
|
We now support async multi fragment SMBtrans calls.
metze
(This used to be commit 66e0c1754f14cf0100ca2d3e9c0cd8c87f9dc1e6)
|
|
We now support async multi fragment SMBtrans calls.
metze
(This used to be commit 6813e22e9d300696a40993476629227d5cc4d35f)
|
|
metze
(This used to be commit a6aa055097313975299f214d8ebe8d45aa51d10a)
|
|
metze
(This used to be commit 1b507a9b8e2ede5a4eb542bdf7a0eab9269b9f7b)
|
|
metze
(This used to be commit 48ccb51caf7976ec07c8a9bfc1afd3076bf4ee22)
|
|
metze
(This used to be commit e1d81388fcabba9a947ed0be9ccae875e2b19135)
|
|
metze
(This used to be commit ec67c61b6a82e4f39a15f37a98ae3fe93bb81316)
|
|
metze
(This used to be commit 5bf136e233e26b4372155f494bae5118ef777a76)
|
|
The recv helper will be called when a response comes
and the recv helper can decide to let the request
on the SMBCLI_REQUEST_RECV when more reponse packets
are expected. It's up to the helper function
to keep a reference to the in buffers, each incoming
response overwrites req->in.
metze
(This used to be commit 6d84af89ba96627abe142ba7080c24ae2421ed6c)
|
|
metze
(This used to be commit a65599cc83a12ec61e5a6ba6ad9628619a0dc8a3)
|
|
Also add a note about NT_STATUS_DOS(ERRSRV, ERRerror).
metze
(This used to be commit 4287b7c1323796cf0688d0fae9b5bd4e840e3d48)
|
|
We need to use smbsrv_setup_secondary_request(req) to send the
trans ack, because smbsrv_send_reply(req) destroys 'req'
and the partial trans list had dead elements in the list.
Also make sure the partial list element is removed by a talloc
destructor.
metze
(This used to be commit 221f4d6e534a40b7def6e51dc6b4f9e8057d18b7)
|
|
Windows seems to use 64 here, so we do now.
Before we got nca_proto_error fault because we send fragments
larger than the negotiated max frag size.
If the max frag size is 5840, we're sending 5837 bytes
when the auth_len is 45 and that matches w2k3 traffic.
metze
(This used to be commit 351947dba3f7a26ac871d4aa7b6bba4cd472383a)
|
|
metze
(This used to be commit 9ff0ce42b32bf0f1463d2cb9c2a6595f51b13d04)
|
|
strlcat gives error.
Jeremy.
(This used to be commit e633dc4ec2d72c3d34b5e096e0460e07e07ab514)
|
|
(This used to be commit 91c899290f6962f277c103f11d5d8dc0a7c9aa02)
|
|
(This used to be commit d6652540c2dda9091ccc6d05c3ebb24a663c9fac)
|
|
(This used to be commit b4e7063058ac8587c526dd9133aee345e99f8ef8)
|
|
LDB does not know about nor process the AD schema, so it makes no
sense to have this tool there. I've been changing it anyway, to use a
common schema manipulation library, and will enhance these links in
the future.
Andrew Bartlett
(This used to be commit c7704805b9a3541e4c8768278c8289b0aa6ed5e3)
|
|
layer
metze
(This used to be commit 3da6f7f95d7c04cff49fa2312f94c059686d11e4)
|
|
Andrew Bartlett
(This used to be commit 615564b3daec0ffe17d05599b7ec8688619f5c65)
|
|
MS-ADTS 3.1.1.3.1.1.5 describes the behaviour of auxiliary classes.
In effect, these are additional MUST or MAY attributes that are
appeneded to the parent class (the auxiliary does not become listed in
the objectClass attribute), and so we do just that, and merge them
here, for export to OpenLDAP as it's schema.
Andrew Bartlett
(This used to be commit d674e92591ea90eb3b2117d8dd21f79f718d7730)
|
|
This implements the logic in the schema_fsmo_add() function,
but it only calls a dummy dsdb_create_prefix_mapping() yet.
metze
(This used to be commit 9018b85e834de6714a78304ba1c7018838e30a61)
|
|
metze
(This used to be commit 8538d305c803268c712a90879f29a2a74ba0ef03)
|
|
(This used to be commit cd5e48649ce0987952b2b55ea79c3ecceecfafd5)
|
|
This is a problem because the location of the winbind privilaged pipe
moved.
Andrew Bartlett
(This used to be commit 68afc2893c032be0a8a31d996f90574ceb6c10ad)
|