summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2009-10-17Merge branch 'master' of ssh://jra@git.samba.org/data/git/sambaJeremy Allison580-34455/+38776
2009-10-17s3:winbind: Move fillup_pw_field() as static to wb_fill_pwent.cVolker Lendecke3-47/+47
2009-10-17s4-smbserver: removed bogus initialisation of two union armsAndrew Tridgell2-2/+0
Thanks to Metze for spotting this.
2009-10-17s4-pvfs: when uwrap is enabled, ignore chown errorsAndrew Tridgell1-0/+3
chown is expected to fail under uwrap
2009-10-17s4-torture: fixed the default ACL for s4Andrew Tridgell1-13/+41
s4 returns group and world ACEs in the default acl, based on unix permissions
2009-10-17s4-torture: minor debugging enhancementsAndrew Tridgell1-3/+3
2009-10-17s4-schema: We should not need Samba4TopExtra nowAndrew Tridgell1-23/+0
The last attribute this contained was 'privilege' which is now gone
2009-10-17s4-pvfs: don't auto-apply privilege bits in unix acl handling eitherAndrew Tridgell1-7/+11
2009-10-17s4-acl: SEC_FLAG_MAXIMUM_ALLOWED doesn't auto-apply privilege access masksAndrew Tridgell1-6/+2
2009-10-17s4-torture: the BASE-CREATEX_ACCESS test is broken for non-administratorsAndrew Tridgell1-0/+1
See my msg to samba-technical about this test and privilege testing.
2009-10-17s4-torture: cleanup after the MAXIMUM_ALLOWED testAndrew Tridgell1-0/+1
2009-10-17s4-pvfs: use privileges rather than "uid == 0" in unix access checkAndrew Tridgell1-6/+12
This makes the unix access check much closer to the full ACL check
2009-10-17s4-security: honor more of the privilege access bitsAndrew Tridgell1-4/+12
2009-10-17s4-torture: add a special check for administrators and privilegesAndrew Tridgell4-18/+57
lsa privileges calls don't expand groups. darn.
2009-10-17s4-lsasrv: make sure only admins can alter privilegesAndrew Tridgell1-0/+6
2009-10-17s4-provision: added the default privileges dbAndrew Tridgell2-0/+99
privileges are now stored in a separate database
2009-10-17s4-provision: removed the old privilege attributesAndrew Tridgell2-53/+14
Our schema is getting a bit cleaner :-)
2009-10-17s4-torture: show the sid we are basing privilege tests onAndrew Tridgell1-2/+6
2009-10-17s4-privileges: moved privileges to private/privilege.ldbAndrew Tridgell4-38/+70
We were storing privileges in the sam, which was OK when we were a standalone DC, but is no good when we replicate with a windows DC. This moves the privileges to a separate (local) database
2009-10-17added NT_STATUS_NOT_OK_RETURN_AND_FREE()Andrew Tridgell1-0/+7
Try to make it a bit easier to avoid leaks in common code
2009-10-16Add comment explaining about symlink following & posix.Jeremy Allison1-1/+6
Jeremy.
2009-10-16Last 2 VFS_STAT -> LSTAT fixes I can see in the modules code.Jeremy Allison2-2/+14
Jeremy.
2009-10-16Fix one missing STAT -> LSTAT with POSIX pathnames in vfs_xattr_tdb.c. ↵Jeremy Allison2-1/+9
Caught by the torture tester. I love unit tests :-). Jeremy.
2009-10-16s3: build pam_smbpass when possibleBjörn Jacke1-20/+34
2009-10-16s3-netlogon: fix updating trust accout passwords with downlevel domains.Günther Deschner1-2/+2
When choosing the netlogon password set function, make sure to look at the *negotiated* flags in the cli->dc state, not the ones we start the negotiation with. Guenther
2009-10-16nsswitch: increase libwbclient version after adding wbcChangeTrustCredentials().Günther Deschner1-1/+2
Guenther
2009-10-16s3:packaging: Fix building RHEL packages.Karolin Seeger2-6/+23
Fix bug #6721. Thanks to Eero Volotinen <eero.volotinen@medicel.com> for providing the patch! Karolin
2009-10-16s3:srv_samr_nt - another fix for the reject reasonMatthias Dieter Wallnöfer1-1/+1
2009-10-16s4-smbtorture: extend netr_LogonControl test in RPC-NETLOGON.Günther Deschner1-3/+109
Guenther
2009-10-16s3-netlogon: Fix _netr_ServerPasswordSet2 cleartext blob handling.Günther Deschner1-1/+4
Following Andrew's advice, let's straight md4 the plaintext blob and avoid trying to get a paintext string out of the input the client sends. Guenther
2009-10-16s4-smbtorture: test wbcLookupUserSids in WINBIND-WBCLIENT as well.Günther Deschner1-1/+4
Guenther
2009-10-16s4-smbtorture: test wbcGuidToString and friends as well in WINBIND-WBCLIENT.Günther Deschner1-0/+34
Guenther
2009-10-16s4:provision - fixed invalid creationTime formatEndi S. Dewata1-2/+2
2009-10-16s4:ldb - fixed dangling pointer in ldb_request_add_control()Endi S. Dewata1-2/+7
2009-10-16s4:auth - fixed problem reading bind DN from secrets databaseEndi S. Dewata2-0/+8
2009-10-16s4:provision - replaced linked_attributes with FDS pluginsEndi S. Dewata7-3/+100
When FDS is used as a backend, Samba should not use the linked_attributes LDB module, but instead use the built-in DS plugins for attribute linking, indexing, and referential integrity.
2009-10-16s4:auth_sam: Restructure tail in "authsam_get_server_info_principal" and fix ↵Matthias Dieter Wallnöfer1-3/+8
a memory leak
2009-10-16s4:winsdb - Substitute LDB result numbers with constantsMatthias Dieter Wallnöfer1-19/+20
2009-10-16s3: Try to fix the build on Solaris & AIX regarding the password change ↵Matthias Dieter Wallnöfer1-1/+1
reject reason
2009-10-16s4/drs(tort): prefixMap unit test initial implementatoinKamen Mazdrashki3-1/+84
2009-10-16s4/drs: prefixMap module initial definitionKamen Mazdrashki3-1/+69
2009-10-16s4/drs(tort): fix compile time warningKamen Mazdrashki1-0/+1
2009-10-16s4/drs(tort): _drs_util_verify_attids() to verify ATTIDs in objects receivedKamen Mazdrashki1-0/+50
2009-10-16s4/drs(tort): drs_util_DsAttributeId_to_string() functionKamen Mazdrashki1-0/+74
2009-10-16s4/drs(tort): _drs_ldap_attr_by_oid() implementationKamen Mazdrashki1-0/+49
Utility function to be used to fetch Attribute name and DN giving attribute OID
2009-10-16s4/drs(tort): ignore drs/proto.h fileKamen Mazdrashki1-0/+1
2009-10-16s4/drs(tort): oid_from_attid() reference implementationKamen Mazdrashki2-1/+96
Decode Attribute OID using prefixMap and ATTID received during replication Based on MS documentation. See MS-DRSR.pdf - 5.16.4
2009-10-16s4/drs(tort): TORTURE_DRS torture module - initial implementationKamen Mazdrashki4-0/+95
Drsuapi tests module registers two suites: - DRS-RPC - tests to be executed against remote machine - DRS-UNIT - unit test for internal testing
2009-10-16s4/drs: Propagate redefinition of drsuapi_DsReplicaOID into code baseKamen Mazdrashki2-69/+134
The biggest change is that 'oid' field is transmited in binary format. Also the field name is changed to 'binary_oid' so that field format to be clear for callers. After those changes, Samba4 should work the way it works before - i.e. no added value here but we should not fail when partial-oid is part of prefixMap transmited from Win server. Also, thre is a bug in this patch - partial-binary-OIDs are not handled correctly. Partial-binary-OIDs received during replication will be encoded, but not handled correctly.
2009-10-16s4/drs(NDR): Print implementation for drsuapi_DsReplicaOIDKamen Mazdrashki1-0/+19
Custom ndr_print functions is implemented so that transmited partia-binary-oid to be printed both in hex and partial-oid formats