summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2009-11-06s4:torture/drs: move intern/ => unit/Stefan Metzmacher2-1/+1
metze
2009-11-06Revert "s3-kerberos: add smb_krb5_parse_name_flags()."Günther Deschner2-22/+1
This reverts commit 17ef153b68795fec681f9ce17c198236aba2b1c2.
2009-11-06s3-kerberos: support S4U2SELF impersionation through cli_krb5_get_ticket().Günther Deschner2-6/+22
Guenther
2009-11-06s3-kerberos: use smb_krb5_get_credentials in ads_krb5_mk_req.Günther Deschner1-4/+7
Guenther
2009-11-06s3-kerberos: modify cli_krb5_get_ticket to take a new impersonate_princ_s arg.Günther Deschner6-9/+14
Guenther
2009-11-06s3-net: better use memory credential cache in net_ads_kerberos_pac().Günther Deschner1-1/+1
Guenther
2009-11-06s3-net: allow to call "net ads kerberos pac <impersonation principal> -P".Günther Deschner1-1/+7
Guenther
2009-11-06s3-kerberos: add impersonate_principal for kerberos_return_pac_X calls.Günther Deschner3-1/+28
Guenther
2009-11-06s3-kerberos: add smb_krb5_get_tkt_from_creds().Günther Deschner1-0/+40
Guenther
2009-11-06s3-kerberos: fix some build warnings when building against heimdal.Günther Deschner1-2/+2
Guenther
2009-11-06s3-kerberos: add smb_krb5_get_{creds,credentials} incl. support for S4U2SELF ↵Günther Deschner3-2/+284
impersonation. Guenther
2009-11-06s3-kerberos: remove duplicate prototype.Günther Deschner1-4/+0
Guenther
2009-11-06s3-kerberos: add smb_krb5_parse_name_flags().Günther Deschner2-1/+22
Guenther
2009-11-06s3-kerberos: add configure checks for krb5_get_creds_X api.Günther Deschner1-0/+3
Guenther
2009-11-05Got the logic simplification worked out so we still passJeremy Allison5-33/+50
BASE-DELAYWRITE and also RAW-CLOSE. Jeremy.
2009-11-05Revert commit "0551284dc08eb93ef7b2b2227a45e5ec21d482fb" - simplifyJeremy Allison4-12/+34
the logic. This was incorrect (I'll revisit this tomorrow). Jeremy.
2009-11-05Remove the smbd:writetimeupdatedelay change Metze added. Metze pleaseJeremy Allison2-3/+7
explain why you added this. Change --maximum-runtime=900 for smbtorture4 with BASE-DELAYWRITE. Should allow it to successfully complete now. Jeremy.
2009-11-05Simplify the logic - remove extraneous argument and calls to ↵Jeremy Allison4-34/+12
set_close_write_time(). We were treating a file time set on close as a sticky write time set, and I don't think it is. I will add a torture test later to RAW-CLOSE to confirm this. Jeremy.
2009-11-05Fix explicit set of write time on close.Jeremy Allison1-1/+5
Jeremy.
2009-11-05Get closer to an accurate model of Windows timestamp changes.Jeremy Allison6-32/+56
"Normal" non truncate writes always cause the timestamp to be set on close. Once a close is done on a handle this can reset the sticky write time to current time also. Updated smbtorture4 confirms this. Jeremy.
2009-11-05Fix up some of the timing constants for DELAYWRITE. Add some extra tests up ↵Jeremy Allison1-30/+114
test_delayed_write_update6 to investigate what happens to a sticky write handle after a second handle close. Jeremy.
2009-11-05Python tests for the acl module.Zahari Zahariev2-0/+1105
Signed-off-by: Nadezhda Ivanova <nadezhda.ivanova@postpath.com> Author: Zahari Zahariev <zahari.zahariev@postpath.com>
2009-11-05Version 1.0 of the directory service acls module.Nadezhda Ivanova6-1013/+419
At this point, support for checks on LDAP add, delete, rename and modify. Old kludge_acl is still there to handle the searches. This module is synchronous as the async version was impossible to debug, will be converted to async after some user testing.
2009-11-05s3: Fix a crash in notify_remove_onelevel when "change notify = no"Volker Lendecke1-0/+4
2009-11-05s3: Fix the talloc hierarchy in notify_remove_onelevelVolker Lendecke1-1/+1
We want to free the record early, not when talloc_tos() is free'ed.
2009-11-05s4:torture/rpc/samr - Add a comment for "ValidatePassword" testMatthias Dieter Wallnöfer1-0/+2
2009-11-05s4:dcesrv_samr - Implement "dcesrv_samr_ValidatePassword" using my new check ↵Matthias Dieter Wallnöfer1-7/+49
password call This implements a very basic method for password validation using my new "samdb_check_password" call.
2009-11-05s4:dsdb/common/util - Add a new utility function "samdb_check_password"Matthias Dieter Wallnöfer1-9/+45
This function performs basic password checks and will be used by the "samrValidatePassword" call and the "password_hash" module.
2009-11-05s4:samdb_set_password/samdb_set_password_sid - Better comments and cosmeticsMatthias Dieter Wallnöfer1-28/+34
2009-11-05s3: Add parameter "ctdb timeout"Volker Lendecke6-5/+73
When something in the cluster blocks, it can happen that we wait indefinitely long for ctdb, just adding to the blocking condition. In theory, nothing should block, but as someone said "In practice the difference between theory and practice is larger than in theory". This adds a timeout parameter in seconds, after which we stop waiting for ctdb and panic.
2009-11-05s4:samdb python bindings - add a wrapper for "dsdb_make_schema_global"Matthias Dieter Wallnöfer1-0/+17
2009-11-05s4:samdb python bindings - make the python wrap connect more like the C oneMatthias Dieter Wallnöfer1-3/+10
Add call for setting the create permissions.
2009-11-05s4:samdb python bindings - Reorder some function bodies to match the order ↵Matthias Dieter Wallnöfer1-25/+24
in "ldb_wrap_connect"
2009-11-05s4:kdc: remove unused struct kpasswd_socketStefan Metzmacher1-10/+0
metze
2009-11-06s3: Fix kerberos refresh chain.Bo Yang1-1/+3
Signed-off-by: Bo Yang <boyang@samba.org>
2009-11-04Fix debug comment (brain wasn't working...).Jeremy Allison1-2/+2
Jeremy.
2009-11-04Filter the returned DOS attributes by 0xFF for clientsJeremy Allison1-0/+12
using older protocols (LANMAN2 or below). Jeremy.
2009-11-04Remove "Protocol" as an extern, and add accessor functions.Jeremy Allison9-30/+31
Jeremy.
2009-11-04s3: add support for full windows timestamps resolution on filesBjörn Jacke2-6/+14
setting nanosecond timestamps using utimensat() was first supported by Linux kernel 2.6.22 and glibc 2.6. It's specified in POSIX.1-2008. This effectively makes us use Windows' full 100ns timestamp resolution - actually just an improvement from 10^-6 to 10^-7. For now Linux CIFS vfs will also just be able to make use of 100ns resolution, not 1ns.
2009-11-04Added security descriptor for the domain NC to provisioning.Nadezhda Ivanova2-1/+61
Necessary for correct descriptor inheritance. Based on the default state of a single DC. Will be modified later when we support multiple DCs.
2009-11-04s4:provisioning - Fixed minor bugs in provisioning tool and partition module.Endi S. Dewata2-3/+4
2009-11-04libcli/nbt Move more of lmhosts lookup into common codeAndrew Bartlett3-45/+100
This aims to eventually share this with Samba4. Andrew Bartlett
2009-11-04lib/util Fix comments in rfc1738.c.Andrew Bartlett1-3/+3
The Samba version does not use static buffers Andrew Bartlett
2009-11-04s3-netlogon: make sure we protect some function codes in ↵Günther Deschner1-0/+13
_netr_LogonControl2Ex(). Guenther
2009-11-04s3-netlogon: let s3 pass against RPC-NETLOGON-S3 again.Günther Deschner1-0/+72
Guenther
2009-11-04s3-netlogon: implement _netr_NETLOGON_INFO_4 in netr_LogonControl2Ex() and ↵Günther Deschner1-0/+10
friends as well. Guenther
2009-11-04s3-netlogon: implement remote trust account changing in ↵Günther Deschner1-0/+41
netr_LogonControl2Ex() and friends. Guenther
2009-11-03security: re-run make samba3-idl after IDL change.Günther Deschner2-25/+0
Guenther
2009-11-03s3-lsa: fill in some more info levels in _lsa_QueryInfoPolicy().Günther Deschner1-0/+32
Add dummys (just like s4 does) and fill in some more appropriate error codes. Guenther
2009-11-03s4-smbtorture: skip three info levels while testing s3 with RPC-LSA.Günther Deschner1-3/+14
These are only supported by s3 when running pdb_ads atm. Guenther