summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2010-04-14s4:torture/rpc/dsgetinfo: first check the rpc layer status before looking at ↵Stefan Metzmacher1-8/+13
the application result metze
2010-04-13Don't set "requested_posix_capabilities" in the sync code, already done in ↵Jeremy Allison1-2/+0
the async. Jeremy.
2010-04-13Add basic DFS tests.Jeremy Allison2-0/+92
Jeremy.
2010-04-13Split out the client unix capabilities to those the server offered, and ↵Jeremy Allison5-9/+24
those the client asked for. This fixes a bug when using encrypted transport and DFS links. Found by my basic DFS torture test, which I'll check in next. Testing *rocks* :-). Jeremy.
2010-04-14s4:auth Change auth_generate_session_info to take an auth contextAndrew Bartlett15-72/+180
The auth context was in the past only for NTLM authentication, but we need a SAM, an event context and and loadparm context for calculating the local groups too, so re-use that infrustructure we already have in place. However, to avoid problems where we may not have an auth_context (in torture tests, for example), allow a simpler 'session_info' to be generated, by passing this via an indirection in gensec and an generate_session_info() function pointer in the struct auth_context. In the smb_server (for old-style session setups) we need to change the async context to a new 'struct sesssetup_context'. This allows us to use the auth_context in processing the authentication reply . Andrew Bartlett
2010-04-14s4:auth Allow the simple 'struct auth_session_info' generator for all usersAndrew Bartlett1-3/+3
This code isn't ideal, but it is better than needing to consult the main SamDB in things like a torture test. Andrew Bartlett
2010-04-13s3-winbind: Authenticate SAM usersVolker Lendecke2-5/+75
2010-04-13s4-heimdal: Fix typo in comment.Karolin Seeger1-1/+1
Karolin
2010-04-13s3-winbindd: Fix typo in comment.Karolin Seeger1-1/+1
Karolin
2010-04-13examples: Fix typo in comment.Karolin Seeger1-1/+1
Karolin
2010-04-13s3-docs: Fix typo in man idmap_ad.Karolin Seeger1-1/+1
Karolin
2010-04-13s4:librpc/rpc: the python bindings should use !NT_STATUS_IS_OK instead of ↵Stefan Metzmacher1-4/+4
NT_STATUS_IS_ERR Everything but NT_STATUS_OK is an error here. metze
2010-04-13s4:librpc/rpc: make PyErr_SetDCERPCStatus() staticStefan Metzmacher2-3/+3
metze
2010-04-13s4:"samdb_server_site_name" uses - proof for out of memoryMatthias Dieter Wallnöfer2-2/+7
2010-04-13s4:samdb_server_site_name - fix indentationMatthias Dieter Wallnöfer1-4/+6
2010-04-13s4:fill_netlogon_samlogon_reponse - fix a typoMatthias Dieter Wallnöfer1-1/+1
2010-04-13s4:torture/netlogon - enhance test for "dcesrv_netr_DsRGetDCNameEx2"Matthias Dieter Wallnöfer1-0/+20
Test for right domainname handling.
2010-04-13s4:dcesrv_netr_DsRGetDCNameEx2 - provide a much better implementationMatthias Dieter Wallnöfer2-52/+51
On the base of the "fill_netlogon_samlogon_response" call. This removes duplicated code.
2010-04-13s4:fill_netlogon_samlogon_response - some rework of the detection codeMatthias Dieter Wallnöfer1-16/+26
To make it compatible by the use of the "dcesrv_netr_DsRGetDCName*" calls. Some result checks were redundant so I removed them. In other cases I added debug outputs. Sometimes the debug messages were misleading.
2010-04-13s4: prevent the autoconf build from removing source4/librpc/gen_ndr/READMEAndrew Tridgell2-2/+2
2010-04-13s4-waf: don't try to use the system lib for the library buildAndrew Tridgell3-13/+17
when building library FOO, don't try to find the system library FOO Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-13tevent-waf: added man page and pkgconfig fileAndrew Tridgell1-3/+11
this allows libtevent to build under rpmbuild Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-13libwbclient: Re-Fix a bug that was fixed with e5741e27c4cVolker Lendecke4-29/+56
> r21878: Fix a bug with smbd serving a windows terminal server: If winbind > decides smbd to be idle it might happen that smbd needs to do a winbind > operation (for example sid2name) as non-root. This then fails to get the > privileged pipe. When later on on the same connection another authentication > request comes in, we try to do the CRAP auth via the non-privileged pipe. > > This adds a winbindd_priv_request_response() request that kills the existing > winbind pipe connection if it's not privileged. The fix for this was lost during the conversion to libwbclient. Thanks to Ira Cooper <samba@ira.wakeful.net> for pointing this out! Volker
2010-04-13libwbclient: Remove a pointless variableVolker Lendecke1-3/+1
2010-04-13buildtools/wafsamba: make sure CHECK_FUNC() and CHECK_VARIABLE() work with ↵Stefan Metzmacher1-2/+6
-O3 in the CFLAGS 'CFLAGS="-O3" waf configure' was not detecting dlopen() needs -ldl. metze
2010-04-13tdb-waf: added build of manpages and config options for RPM buildAndrew Tridgell2-3/+45
Building a RPM from the fedora spec file now works with minimal changes Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-13talloc-waf: the talloc1-compat lib depends on tallocAndrew Tridgell1-2/+2
It is a library linked to another library, not a 2nd copy of talloc.c Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-13build: for unbundled libraries install devel link tooAndrew Tridgell1-0/+8
We need a symlink libFOO.so -> libFOO.so.x.y as a development symlink Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-13testprogs/blackbox/test_kinit: reorder arguments to "net time" to fix make testStefan Metzmacher1-1/+1
metze
2010-04-13s4:tortore/rpc/spoolss: some compilers don't like .foo.bar = 5Stefan Metzmacher1-28/+42
metze
2010-04-13talloc-waf: added the manpage generation and talloc1-compat generationAndrew Tridgell1-1/+34
this allows the RPM spec file to be used with only a tiny mod (using autogen-waf.sh instead of autogen.sh and using ln -sf for the library links instead of ln -s) Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-13build: added autoconf compatible configure optionsAndrew Tridgell1-0/+27
This adds --build, --host, --program-prefix and --disable-dependency-tracking. All we do with them is check them for sanity and throw an error if (for example) the user tries a cross-compile using these options Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-13s4:CLDAP - "fill_netlogon_samlogon_reponse" - check for out of memoryMatthias Dieter Wallnöfer1-1/+4
2010-04-13s4:acl/descriptor LDB module - distinguish between root and default basednMatthias Dieter Wallnöfer2-0/+12
The first is the forest base DN, the second the domain base DN. At the moment we assume that they are both the same but it hasn't to be so. Nadia, I would invite you to fix the outstanding parts regarding this (I added comments).
2010-04-13s4:use "samdb_forest_name" for the forest DNS domainname lookupMatthias Dieter Wallnöfer2-15/+12
2010-04-13s4:dsdb/common/util.c - add a call which determines centrally the forest DNS ↵Matthias Dieter Wallnöfer1-0/+19
domainname
2010-04-13s3: Cache the username map in gencacheVolker Lendecke4-0/+79
This is for uses with a heavy-weight username map script
2010-04-13s4:remove "samdb_root_dn", "samdb_base_dn", "samdb_config_dn" and ↵Matthias Dieter Wallnöfer1-20/+0
"samdb_schema_dn" They aren't needed anymore.
2010-04-13Revert "s4:prefer "samdb_*_dn" basedn calls over the "ldb_get_*_dn" functions"Matthias Dieter Wallnöfer20-37/+43
We should use the "ldb_get_*_basedn" calls since they are available in the LDB library.
2010-04-13s4:objectclass LDB module - remove a unneeded newlineMatthias Dieter Wallnöfer1-2/+1
2010-04-12Move to using 64-bit mid values in our internal open file database.Jeremy Allison15-166/+188
This will allow us to share logic much easier between SMB1 and SMB2 servers. Jeremy
2010-04-13build: cope with spaces in options passed to ./configureAndrew Tridgell1-1/+1
2010-04-13build: allow cross-builds to use shared librariesAndrew Tridgell1-1/+1
2010-04-13s4-tevent: up tevent version numberAndrew Tridgell3-4/+4
tevent now has tevent_re_initialise() which is needed for the s4 build
2010-04-13build: check the type of implied dependenciesAndrew Tridgell1-1/+12
an implied dependency needs to be a library or module
2010-04-13build: fixed a typo that prevented --bundled-libraries from working correctlyAndrew Tridgell1-1/+1
Jelmer noticed that --minimum-library-version=talloc:2.0.1 --bundled-libraries=!tevent didn't do the right thing.
2010-04-13build: cope with existing binaries in bin/ left over from the old buildAndrew Tridgell1-4/+2
2010-04-12s3: Apply some constVolker Lendecke2-6/+10
2010-04-12s3/s4:netlogon IDL - fix up "struct netr_SamInfo6" regarding the "forest" ↵Matthias Dieter Wallnöfer5-12/+12
attribute According to MS-NRPC 2.2.1.4.13 this should be the DNS domainname, not the forest one.
2010-04-12s4:auth/auth_sam_reply.c - fix counter typesMatthias Dieter Wallnöfer1-3/+3