summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2010-11-08s3:idmap: add a new ID mapping module autoridChristian Ambach4-0/+610
This is an initial implementation of the idmap_autorid module. It works similar to the idmap_rid module but requires less configuration. It will automatically pick ranges for each domain, so you do not have to bother any more about adding an idmap configuration for all of the domains in the forest. This is very easy to use and to configure and much more deterministic and faster than idmap_tdb, the typical choice of Samba users up to now.
2010-11-08s3:winbind add wcache_tdc_fetch_domainbysidChristian Ambach2-0/+53
add a function to lookup a domain in the winbind cache by domain SID
2010-11-08s3: Put some parentheses around conditionalsVolker Lendecke1-2/+2
2010-11-08s3: Consistently use stdbool types in new codeVolker Lendecke1-11/+11
2010-11-08s3:winbind add timeouts to winbind cacheChristian Ambach1-14/+57
This adds a timeout value to cache entries and the NDR records in the winbind cache. The previous approach of just comparing the sequence number has some issues, e.g. when retrying a wbinfo -n operation for a user in a not yet trusted domain was always failing even after the trusted domain was added. The new approach compares sequence number and timeout value to determine if a cache entry is still valid or not. I increased the cache version number so an old cache will be wiped automatically after upgrade.
2010-11-08s4:passwords.py - test empty password attributes behaviourMatthias Dieter Wallnöfer1-1/+154
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Nov 8 12:09:56 UTC 2010 on sn-devel-104
2010-11-08s4:password_hash LDB module - deleting password attributes is a little more ↵Matthias Dieter Wallnöfer1-6/+6
complicated
2010-11-08s4:samdb_msg_find_old_and_new_ldb_val - reworkMatthias Dieter Wallnöfer2-10/+38
- don't crash when no values where specified - return ERR_CONSTRAINT_VIOLATION on malformed messages - only check for flags when we are involved in a LDB modify operation
2010-11-08s4:password_hash LDB module - clear the fact that a delete of password ↵Matthias Dieter Wallnöfer1-1/+1
attributes isn't possible
2010-11-08s4:acl LDB module - define the delete passwords special case a bit betterMatthias Dieter Wallnöfer1-3/+4
2010-11-08s4:passwords.py - add another two failure casesMatthias Dieter Wallnöfer1-0/+21
2010-11-08ldb:pyldb.c - "py_ldb_msg_element_get" - here we can safely use "unsigned ↵Matthias Dieter Wallnöfer1-3/+3
int" for the element reference We don't make use of "Py_List*" calls Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Nov 8 11:21:27 UTC 2010 on sn-devel-104
2010-11-08ldb:pyldb.c - "py_ldb_contains" - return only "0" not found, "1" found, "-1" ↵Matthias Dieter Wallnöfer1-3/+10
error
2010-11-08ldb:pyldb.c - most of the times "time_t" is defined as "long int"Matthias Dieter Wallnöfer1-5/+5
Therefore use a signed long int for conversions. http://stackoverflow.com/questions/471248/what-is-ultimately-a-time-t-typedef-to
2010-11-08ldb:pyldb.c - fix some "Py_ssize_t" output warningsMatthias Dieter Wallnöfer1-3/+2
2010-11-08ldb:pyldb.c - use "Py_ssize_t" for counting list entriesMatthias Dieter Wallnöfer1-12/+11
This seems to be the most appopriate type
2010-11-08ldb:pyldb.c - fix indentationMatthias Dieter Wallnöfer1-2/+3
2010-11-08s4:pydsdb.c - use "Py_ssize_t" for Python list countersMatthias Dieter Wallnöfer1-1/+1
Seems to be the most appropriate type
2010-11-08s4:pydsdb.c - introduce Python 2.4 compatibility definesMatthias Dieter Wallnöfer1-0/+11
2010-11-08s4:objectguid/repl_meta_data LDB module - deny "objectGUID" updatesMatthias Dieter Wallnöfer3-0/+29
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Nov 8 10:36:50 UTC 2010 on sn-devel-104
2010-11-08s4:objectclass LDB module - no idea why we'd need the "objectGUID" hereMatthias Dieter Wallnöfer1-1/+1
2010-11-08s4:objectguid LDB module - make use of "dsdb_next_callback"Matthias Dieter Wallnöfer2-30/+6
2010-11-08s4:drsuapi RPC server - writespn.c - fix indentationsMatthias Dieter Wallnöfer1-15/+24
2010-11-08s4-drs: allow bypass of writespn checking for some SPNsAndrew Tridgell1-1/+111
this allows accounts (and in particular RODCs) to make SPN updates on their own account if they take the form SERVICE/hostname we may be able to remove this in the future after some changes in our ACL checking for userPrincipalName Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 08:45:16 UTC 2010 on sn-devel-104
2010-11-08heimdal Add clock-skew handling to DCE-style GSSAPIAndrew Bartlett1-39/+65
The clock skew handling was previously only on properly wrapped GSSAPI, and was skipped for DCE-style. This allows the ASN.1 errors from the krb5_rd_req to suggest parsing as a kerberos error packet. Andrew Bartlett Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 07:58:09 UTC 2010 on sn-devel-104
2010-11-08s4-auth Supply more useful error messages on Kerberos failureAndrew Bartlett3-13/+28
The practice of returning only NT_STATUS_INVALID_PARAMETER hasn't helped our users to debug problems effectivly, and so we now return more errors and try and give a more useful debug message when then happen. Andrew Bartlett
2010-11-08s4-auth Fix typos in samba4 auth codeBrad Hards1-7/+7
2010-11-08s4-dsdb Explain why we may not use the GC name in some situations.Andrew Bartlett1-0/+8
This delicate balance caused us a bit of a puzzle when we could not work out why an DC join failed with the new python scripts. Andrew Bartlett
2010-11-08s4-selftest fix indentationAndrew Bartlett1-3/+3
2010-11-08s4-repl: fixed replication notifications to RODCsAndrew Tridgell3-7/+58
We need a separate source dsa list for RODCs, as they are not in the repsFrom for our partitions, but are in the repsTo. This adds a new 'notifies' list, which contains all the source dsas for the DCs that we should send notifies to, but which we don't replicate from Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 06:57:43 UTC 2010 on sn-devel-104
2010-11-08fixAndrew Tridgell2-4/+4
2010-11-08s4-debug: lowered the debug level of some unimportant messagesAndrew Tridgell3-4/+4
2010-11-08s4-ldb: don't give an error if a module is already registeredAndrew Tridgell1-0/+7
this can happen when both the build and install paths are used to load ldb modules Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 05:28:14 UTC 2010 on sn-devel-104
2010-11-08waf: go back to the previous method of handling .inst. rulesAndrew Tridgell1-1/+1
the change broke the library linkages for some library, as spotted by Brad
2010-11-08waf: fixed the names of the installed libraries after the last changeAndrew Tridgell1-5/+13
Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 02:31:18 UTC 2010 on sn-devel-104
2010-11-08s4-dns: ensure we get the right case on the grant rule for administratorAndrew Tridgell1-2/+1
it may be 'Administrator' in the database, and bind match rules are case sensitive Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 01:41:43 UTC 2010 on sn-devel-104
2010-11-08waf: fixed tabs/spaces for python3.0Andrew Tridgell2-5/+5
Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 00:55:13 UTC 2010 on sn-devel-104
2010-11-08waf: prevent us from modifying non-install libs during make installAndrew Tridgell1-2/+6
we need to ensure that 'make install' does not change any of our build libraries, and only changes the .inst.so libraries, otherwise doing a make test in the build directory directly after a make install could use the installed libraries, which would mean using the wrong LDB_MODULES_PATH this could cause the "unknown error" loading ldb modules when running some commands directly after a make install Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-08s4-ldb: better error message when we try to register a module twiceAndrew Tridgell1-2/+3
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-08s4-pydrs: validate the DsGetNCChanges responseAndrew Tridgell1-0/+2
check that object_count matches up with first_object
2010-11-07s4-join: modify join behaviour according to domain levelAndrew Tridgell4-43/+112
Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Sun Nov 7 23:32:16 UTC 2010 on sn-devel-104
2010-11-07s4-drs: allow override of the replica_flagsAndrew Tridgell1-2/+7
2010-11-07s4-dsdb: give the DN on a shema attribute failureAndrew Tridgell1-1/+1
2010-11-07s4:ldap.py - add more "objectGUID" related testsMatthias Dieter Wallnöfer1-2/+76
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Nov 7 21:12:03 UTC 2010 on sn-devel-104
2010-11-07s4:objectguid LDB module - fix typo in output messageMatthias Dieter Wallnöfer1-1/+1
2010-11-07s4:objectguid LDB module - objectGUIDs cannot be specified on add operationsMatthias Dieter Wallnöfer1-2/+6
2010-11-07s4:upgradeprovision - remove some "recalculate_sd" usesMatthias Dieter Wallnöfer1-3/+3
We need "recalculate_sd" only when no external "nTSecurityDescriptor" change is performed. Otherwise the recalculation is performed automatically. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Nov 7 18:52:42 UTC 2010 on sn-devel-104
2010-11-07s4:descriptor LDB module - make the "nTSecurityDescriptor" attribute fully ↵Matthias Dieter Wallnöfer2-52/+117
behave as in AD - fix crash when provided "nTSecurityDescriptor" attribute is empty - print out the correct error codes if it's provided multi-valued - simplify the "recalculate_sd" control handling
2010-11-07s4:ldb_modules/util.c - "dsdb_get_single_valued_attr" - support the ↵Matthias Dieter Wallnöfer2-10/+20
attribute fetch also on LDB add operations We've to completely ignore the flags in that case. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Nov 7 11:10:23 UTC 2010 on sn-devel-104
2010-11-07ldb:ldb_pack.c - the "dn" attribute isn't allowed in the message part, only ↵Matthias Dieter Wallnöfer1-2/+0
the "distinguishedName" one Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Nov 7 10:11:02 UTC 2010 on sn-devel-104
generated by cgit (git 2.34.1) at 2024-11-06 11:41:11 +0000