summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2011-01-14s4-dsdb: only enforce the extended dn rules over ldapAndrew Tridgell1-2/+21
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Fri Jan 14 07:23:31 CET 2011 on sn-devel-104
2011-01-14s4-dsdb: removed the last use of samdb_search_*() from the dsdb ldb modulesAndrew Tridgell1-4/+12
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-01-14s4-dsdb: removed some more samdb_search_*() calls from samldb.cAndrew Tridgell1-26/+69
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-01-14s4-dsdb: replaced another use of samdb_search in a ldb moduleAndrew Tridgell1-4/+10
we should be using the dsdb_module_search*() calls Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-01-14s4-dsdb: fixed primaryGroupID to use dsdb_module_search_dn()Andrew Tridgell1-6/+14
this avoids using a multi-part extended DN in a search that hits the check in extended_dn_in Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-01-14s4-dsdb: fixed filtering of tokengroupsAndrew Tridgell1-5/+3
builtin groups are shown in user tokenGroups searches Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-01-14ldb: new ABI file for 0.9.23Andrew Tridgell1-0/+247
2011-01-14s4-kdc: don't ask for an extended DN for krbtgt_dnAndrew Tridgell1-1/+1
otherwise msg->dn would be non-minimal and would fail in searches Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-01-14s4-test: added a tokengroups testAndrew Tridgell2-0/+101
this tests that the remote tokenGroups match the internally calculated ones Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-01-14s4-samdb: give a more useful debug when we can't open the privileges dbAndrew Tridgell1-0/+1
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-01-14s4-auth: fixed status return Andrew Tridgell1-1/+1
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-01-14s4-samba-tool: fixed the gpo command to use the right DN for access checksAndrew Tridgell1-5/+14
2011-01-14s4-dsdb: minimise the DN in group expansionAndrew Tridgell1-0/+5
this DN we have came from an extended DN search, which means it may have multiple extended components. We need to minimise the DN before AD will accept it Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-01-14ldb: added ldb_dn_minimise()Andrew Tridgell2-0/+64
this removes any extraneous components from a DN. For an extended DN, this means removing the string DN and all but the first extended component. This is needed as AD returns "invalid syntax" if you don't use a minimal DN as the base DN for a search. A non-minimal DN also doesn't ever match in a search expression. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-01-14s4-dns: renamed DNS_TYPE_ZERO to DNS_TYPE_TOMBSTONEAndrew Tridgell2-6/+7
we now know that these are tombstone records, with a timestamp Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-01-14s4-dsdb: validate number of extended componentsAndrew Tridgell1-2/+10
this checks that the number of extended components in a DN is valid, to match MS AD behaviour. We need to do this to ensure that our tools don't try to do operations that will be invalid when used against MS servers Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-01-14ldb: added ldb_dn_get_extended_comp_num()Andrew Tridgell3-1/+10
this returns the number of extended components. We need this to validate a DN in the extended_dn_in module Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-01-14s4-samba_tool Added ACL checking to python GPO management toolAndrew Bartlett1-8/+26
2011-01-14libcli/security Add python bindings for se_access_checkAndrew Bartlett2-0/+89
Andrew Bartlett
2011-01-14pyldb Simplify python wrappers for struct ldb_val (LdbValue)Andrew Bartlett1-17/+4
Andrew Bartlett
2011-01-14s4-auth Add get and set methods for auth_session_info python wrapperAndrew Bartlett2-7/+73
This allows the session key, security_token and credentials to be manipulated from python. Andrew Bartlett Pair-Programmed-With: Andrew Tridgell <tridge@samba.org>
2011-01-14s4-auth Add function to obtain any user's session_info from a given LDBAndrew Bartlett6-81/+209
This will be a building block for a tokenGroups test, which can compare against a remote server (in particular the rootDSE) against what we would calculate the tokenGroups to be. (this meant moving some parts out of the auth_sam code into the containing library) Andrew Bartlett
2011-01-14s4-auth use new dsdb_expand_nested_groups()Andrew Bartlett2-152/+11
This isn't quite as good as using tokenGroups, but that is only available for BASE searches, and this isn't how the all the callers work at the moment. Andrew Bartlett
2011-01-14s4-dsdb Implement tokenGroups expansion directly in ldb operational moduleAndrew Bartlett3-30/+269
This removes a silly cross-dependency between the ldb moudle stack and auth/ Andrew Bartlett
2011-01-13Fix bug #7909 - map SYNCHRONIZE acl permission statically in zfs_acl vfs module.Paul B. Henson2-1/+6
Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Thu Jan 13 20:02:32 CET 2011 on sn-devel-104
2011-01-13security: Fixed incorrect indentation in create_descriptor.cNadezhda Ivanova1-12/+12
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Thu Jan 13 15:53:16 CET 2011 on sn-devel-104
2011-01-13s3-build: remove RPCCLI_WINREG subsystem.Günther Deschner1-2/+1
Guenther Signed-off-by: Andreas Schneider <asn@samba.org> Autobuild-User: Andreas Schneider <asn@samba.org> Autobuild-Date: Thu Jan 13 15:06:36 CET 2011 on sn-devel-104
2011-01-13s3-waf: remove RPCCLI_WINREG subsystem.Günther Deschner1-6/+2
Guenther Signed-off-by: Andreas Schneider <asn@samba.org>
2011-01-13s3-net_registry: prefer dcerpc_winreg_X functions.Günther Deschner1-100/+273
Guenther Signed-off-by: Andreas Schneider <asn@samba.org>
2011-01-13s3-net: prefer dcerpc_winreg_X functions.Günther Deschner1-7/+18
Guenther Signed-off-by: Andreas Schneider <asn@samba.org>
2011-01-13s3-spoolss: no need to include cli_winreg header anymore.Günther Deschner1-1/+1
Guenther Signed-off-by: Andreas Schneider <asn@samba.org>
2011-01-13s3-rpcclient: prefer dcerpc_winreg_X functions.Günther Deschner1-8/+13
Guenther Signed-off-by: Andreas Schneider <asn@samba.org>
2011-01-13s3-build: remove RPCCLI_SRVSVC subsystem.Günther Deschner1-2/+1
Guenther Signed-off-by: Andreas Schneider <asn@samba.org>
2011-01-13s3-waf: remove RPCCLI_SRVSVC subsystem.Günther Deschner1-11/+7
Guenther Signed-off-by: Andreas Schneider <asn@samba.org>
2011-01-13s3-rpcclient: prefer dcerpc_srvsvc_X functions.Günther Deschner1-28/+90
Guenther Signed-off-by: Andreas Schneider <asn@samba.org>
2011-01-13s3-net: prefer dcerpc_srvsvc_X functions.Günther Deschner1-13/+44
Guenther Signed-off-by: Andreas Schneider <asn@samba.org>
2011-01-13s3-smbtree: prefer dcerpc_srvsvc_X functions.Günther Deschner1-2/+5
Guenther Signed-off-by: Andreas Schneider <asn@samba.org>
2011-01-13s3-lanman: prefer dcerpc_srvsvc_X functions.Günther Deschner1-3/+9
Guenther Signed-off-by: Andreas Schneider <asn@samba.org>
2011-01-13s3-libsmbclient: prefer dcerpc_srvsvc_X functions.Günther Deschner1-4/+18
Guenther Signed-off-by: Andreas Schneider <asn@samba.org>
2011-01-13s3-smbclient: prefer dcerpc_srvsvc_X functions.Günther Deschner1-2/+5
Guenther Signed-off-by: Andreas Schneider <asn@samba.org>
2011-01-13s3-libnetapi: prefer dcerpc_srvsvc_X functions.Günther Deschner3-15/+86
Guenther Signed-off-by: Andreas Schneider <asn@samba.org>
2011-01-13s3-build: remove RPCCLI_NETLOGON subsystem.Günther Deschner1-2/+1
Guenther Signed-off-by: Andreas Schneider <asn@samba.org>
2011-01-13s3-waf: remove RPCCLI_NETLOGON subsystem.Günther Deschner1-5/+1
Guenther Signed-off-by: Andreas Schneider <asn@samba.org>
2011-01-13s3-rpcclient: prefer dcerpc_netr_X functions.Günther Deschner1-27/+82
Guenther Signed-off-by: Andreas Schneider <asn@samba.org>
2011-01-13s3-winbind: prefer dcerpc_netr_X functions.Günther Deschner4-28/+61
Guenther Signed-off-by: Andreas Schneider <asn@samba.org>
2011-01-13s3-rpc_client: prefer dcerpc_netr_X functions.Günther Deschner1-27/+65
Guenther Signed-off-by: Andreas Schneider <asn@samba.org>
2011-01-13s3-net: prefer dcerpc_netr_X functions.Günther Deschner1-5/+13
Guenther Signed-off-by: Andreas Schneider <asn@samba.org>
2011-01-13s3-libnet: prefer dcerpc_netr_X functions.Günther Deschner2-11/+19
Guenther Signed-off-by: Andreas Schneider <asn@samba.org>
2011-01-13s3-libnetapi: prefer dcerpc_netr_X functions.Günther Deschner2-13/+32
Guenther Signed-off-by: Andreas Schneider <asn@samba.org>
2011-01-13s3-net: remove some pointless fstrings in "net rpc service".Günther Deschner1-12/+3
Guenther Signed-off-by: Andreas Schneider <asn@samba.org>
generated by cgit (git 2.34.1) at 2024-12-21 15:10:45 +0000