summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2009-09-08schannel: add NL_AUTH_MESSAGE and both NL_AUTH_SIGNATURE structs.Günther Deschner8-1/+700
These actually belong netlogon but we for now want to keep netlogon as a security providor separate. Guenther
2009-09-08s4:idl Add generated code for netlogon.idl changesAndrew Bartlett3-3/+39
2009-09-08Return a correct value for Supported Encryption TypeMatthieu Patou2-2/+15
Vista and upper version use this value to check wether they should ask the DC to change the msDS-SupportedEncryptionTypes attribute or not. Declare the different value as a bitmap in Netlogon idl
2009-09-08tort: RPC-CRACKNAMES test case refactoredKamen Mazdrashki2-1/+18
2009-09-08tort: DsCrackNames - propagate torture context to all tests.Kamen Mazdrashki2-208/+166
2009-09-08tort: Helper function to get DC info for testingKamen Mazdrashki1-0/+53
2009-09-08tort: Implement 'setup' and 'teardown' for DRSUAPI test cases.Kamen Mazdrashki2-0/+44
2009-09-08s4/ldb: support NDR printing for 2 more replication typesAndrew Tridgell2-0/+40
print replUpToDateVector and replPropertyMetaData using NDR format if --show-binary is given.
2009-09-08s4/ldb: allow prefixMap to be shown as NDRAndrew Tridgell1-0/+8
2009-09-08s4/ldb: allow printing ntSecurityDescriptor in fullAndrew Tridgell1-33/+39
print security descriptors in NDR format if --show-binary is given. This is easier to read than sddl format.
2009-09-08s4/ldb: added ldif handler for repsFrom/repsToAndrew Tridgell2-2/+57
In normal usage this makes no difference, but if you add --show-binary then you can see the NDR printed out in the usual ndr_print_*() format
2009-09-08s4/ldb: expose the ldb flags with ldb_get_flags()Andrew Tridgell2-0/+11
2009-09-08s4/ldb: don't line wrap ldif when --show-binary is usedAndrew Tridgell1-4/+9
2009-09-08s4/ldb: added --show-binary command line optionAndrew Tridgell6-4/+20
This add --show-binary to ldbsearch. When this flag is set, binary blobs will be shown as-is, instead of base64 encoded. This is useful for some XML encoded attributes, and will also be used as part of some NDR print formatting for attributes like repsTo.
2009-09-08s3-schannel: Fix Bug #6697. Interdomain trusts with Windows 2008 R2 DCs.Günther Deschner2-2/+2
The Schannel verifier (aka NL_AUTH_SIGNATURE) structure (32 byte) sent from a W2k8r2 DC is passed in a buffer with the size of a NL_AUTH_SHA2_SIGNATURE (56 byte). We should just ignore the remaining 12 zeroed bytes and proceed. Guenther
2009-09-08s4:setpassword script - Passwords set by this script are set by the ↵Matthias Dieter Wallnöfer1-1/+1
administrator not the user
2009-09-08s4:provision - Cosmetic: Indent the parameters betterMatthias Dieter Wallnöfer1-36/+60
2009-09-07s4:templates - Remove the latest relics (in "dcesrv_lsa_CreateSecret")Matthias Dieter Wallnöfer2-114/+0
2009-09-07s4:wmic - Output enhancementsDmitry Karasik1-58/+105
Outputs shouldn't clash with metadata characters (|,()), special characters should be escaped, "NULL" values should be reported as "(null)" string. For the full explaination look at bug #6076.
2009-09-07Add read() to socketwrapper. Metze please check.Jeremy Allison3-2/+39
Jeremy.
2009-09-08s4: commit generated DRS changesAndrew Tridgell5-4/+274
2009-09-08s4: added the structure for repsToAndrew Tridgell1-0/+32
This structure is stored in NDR format in the repsTo attribute of each partition. It is updated by the DSUpdateRefs DSRUAPI call
2009-09-08s4: fixed updaterefs options bitmapAndrew Tridgell2-3/+4
2009-09-08s4: implemented server side of DSUpdateRefs callAndrew Tridgell5-11/+340
This call is made by DCs to tell us we should notify them of directory changes
2009-09-08s4/ldb: fixed spellingAndrew Tridgell1-2/+2
2009-09-08s4: 'index' is a libc functionAndrew Tridgell1-2/+2
2009-09-08s4: fixed a unsigned printf warningsAndrew Tridgell1-3/+3
2009-09-08s4: removed an unused variableAndrew Tridgell1-2/+0
2009-09-08s4: fixed some shadowed variable warningsAndrew Tridgell3-9/+9
2009-09-08Fill the meta data vector in the responce struct.Anatoliy Atanasov1-4/+32
2009-09-08s4:selftest Fix 'make testenv-gdb' and 'make valgrindtest' etcAndrew Bartlett1-28/+22
The problem here was that tridge's changes to ensure that test results were always propogated didn't merge well with the addition of extra environment variables for the 'make valgrindtest' and similar environments. By splitting out the macro further, we keep the build farm reporting accurate, but allow these other test modes to work. Andrew Bartlett
2009-09-07s4:tests/iconv - Fix a warningMatthias Dieter Wallnöfer1-1/+2
2009-09-07s4:pwsettings: Correct off by factor of 10 for ticks.Andrew Kroeger1-4/+4
The tick conversion math was off by a factor of 10 due to the incorrect usage of the "e" notation. The expression "XeY" means "X * (10^Y)", so the correct expression is 1e7 to get the correct adjustment for ticks.
2009-09-07gitignore: Ignore additional auto-generated files.Andrew Kroeger1-0/+4
2009-09-07s4: Let the "setpassword" script finally use the "samdb_set_password" routineMatthias Dieter Wallnöfer2-9/+70
The "setpassword" script should use the "samdb_set_password" call to change the NT user password. Windows Server tests show that "userPassword" is not the right place to save the NT password and does not inherit the password complexity.
2009-09-07s4:dsdb: correctly implement _dsdb_syntax_OID_oid_ldb_to_drsuapi()Stefan Metzmacher1-1/+31
Here we just need to map the oid string in the ldb value to the ATTRTYP id. metze
2009-09-07lib/tdr: fix the build with --enable-automatic-dependenciesStefan Metzmacher1-1/+1
metze
2009-09-07s4:LogonGetDomainInfo - add a basic check for the hostnameMatthias Dieter Wallnöfer1-2/+17
This check is specified in Windows Server after release 2003. The parameter "hostname" should match as prefix of the dns hostname given as parameter in the "workstation" structure.
2009-09-07tdb: fix c++ build warning.Günther Deschner1-2/+2
Guenther
2009-09-07s4: Fix "Small memory leak after calling several times lp_update"Inra2-37/+20
Should fix bug #6660.
2009-09-07s4: Exceptions in "provision.py"Michael Ströder1-11/+15
This looks much nicer than "normal" string exceptions - and fits better in the OO programming style.
2009-09-07s4:simple_ldap_map - "primaryGroupId"Matthias Dieter Wallnöfer1-4/+15
Previous patch was incomplete regarding the "primaryGroupId" attribute. Complete it.
2009-09-07s4:samldb - Fix typoMatthias Dieter Wallnöfer1-1/+1
2009-09-07s4:Foreign security principals - Fix them upMatthias Dieter Wallnöfer3-19/+31
I fixed them up to match with Windows Server 2003. I don't think that the creation of them in the provision script is needed so I put them in the "provision_users.ldif" file.
2009-09-07s4:subtree delete module - Cosmetic adaptionsMatthias Dieter Wallnöfer1-11/+16
2009-09-07s4:ldap.py - Adds a test for the primary group behaviourMatthias Dieter Wallnöfer1-12/+132
This passes the Windows Server behaviour. Also SAMBA 4 should match it. Also some small enhancement.
2009-09-07s4:provision - Change the module order to match Windows ServerMatthias Dieter Wallnöfer1-1/+1
Tests show that Windows Server seems to do the access checks on the very last moment.
2009-09-07s4:sam - Implement also here the right primary group behaviourMatthias Dieter Wallnöfer1-46/+71
We have not only to expand the additional groups but *also* the primary group to gain all rights of a user account. Also, remove an unneeded context (tmp_ctx) and "talloc_steal".
2009-09-07s4:samr - Fix up the SAMR server to support the primary group of a user in ↵Matthias Dieter Wallnöfer1-128/+189
the right way When doing some tests with the NT User Manager for Domains on s4 I noticed that the handling of the primary group for a user wasn't correct. So I fixed this. Also some cosmetic changes (tab indent corrections).
2009-09-07s4:samldb - Major reworkMatthias Dieter Wallnöfer4-328/+1000
This fixes up the change of the primary group of a user when using the ADUC console: - When the "primaryGroupId" attribute changes, we have to delete the "member"/"memberOf" attribute reference of the new primary group and add one for the old primary group. - Deny deletion of primary groups according to Windows Server (so we cannot have invalid "primaryGroupID" attributes in our AD). - We cannot add a primary group directly before it isn't a secondary one of a user account. - We cannot add a secondary reference ("member" attribute) when the group has been chosen as primary one. This also removes the LDB templates which are basically overhead now. This should also fix bug #6599.
generated by cgit (git 2.34.1) at 2025-02-17 16:52:12 +0000