summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2010-11-08s3:winbind add timeouts to winbind cacheChristian Ambach1-14/+57
This adds a timeout value to cache entries and the NDR records in the winbind cache. The previous approach of just comparing the sequence number has some issues, e.g. when retrying a wbinfo -n operation for a user in a not yet trusted domain was always failing even after the trusted domain was added. The new approach compares sequence number and timeout value to determine if a cache entry is still valid or not. I increased the cache version number so an old cache will be wiped automatically after upgrade.
2010-11-08s4:passwords.py - test empty password attributes behaviourMatthias Dieter Wallnöfer1-1/+154
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Nov 8 12:09:56 UTC 2010 on sn-devel-104
2010-11-08s4:password_hash LDB module - deleting password attributes is a little more ↵Matthias Dieter Wallnöfer1-6/+6
complicated
2010-11-08s4:samdb_msg_find_old_and_new_ldb_val - reworkMatthias Dieter Wallnöfer2-10/+38
- don't crash when no values where specified - return ERR_CONSTRAINT_VIOLATION on malformed messages - only check for flags when we are involved in a LDB modify operation
2010-11-08s4:password_hash LDB module - clear the fact that a delete of password ↵Matthias Dieter Wallnöfer1-1/+1
attributes isn't possible
2010-11-08s4:acl LDB module - define the delete passwords special case a bit betterMatthias Dieter Wallnöfer1-3/+4
2010-11-08s4:passwords.py - add another two failure casesMatthias Dieter Wallnöfer1-0/+21
2010-11-08ldb:pyldb.c - "py_ldb_msg_element_get" - here we can safely use "unsigned ↵Matthias Dieter Wallnöfer1-3/+3
int" for the element reference We don't make use of "Py_List*" calls Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Nov 8 11:21:27 UTC 2010 on sn-devel-104
2010-11-08ldb:pyldb.c - "py_ldb_contains" - return only "0" not found, "1" found, "-1" ↵Matthias Dieter Wallnöfer1-3/+10
error
2010-11-08ldb:pyldb.c - most of the times "time_t" is defined as "long int"Matthias Dieter Wallnöfer1-5/+5
Therefore use a signed long int for conversions. http://stackoverflow.com/questions/471248/what-is-ultimately-a-time-t-typedef-to
2010-11-08ldb:pyldb.c - fix some "Py_ssize_t" output warningsMatthias Dieter Wallnöfer1-3/+2
2010-11-08ldb:pyldb.c - use "Py_ssize_t" for counting list entriesMatthias Dieter Wallnöfer1-12/+11
This seems to be the most appopriate type
2010-11-08ldb:pyldb.c - fix indentationMatthias Dieter Wallnöfer1-2/+3
2010-11-08s4:pydsdb.c - use "Py_ssize_t" for Python list countersMatthias Dieter Wallnöfer1-1/+1
Seems to be the most appropriate type
2010-11-08s4:pydsdb.c - introduce Python 2.4 compatibility definesMatthias Dieter Wallnöfer1-0/+11
2010-11-08s4:objectguid/repl_meta_data LDB module - deny "objectGUID" updatesMatthias Dieter Wallnöfer3-0/+29
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Nov 8 10:36:50 UTC 2010 on sn-devel-104
2010-11-08s4:objectclass LDB module - no idea why we'd need the "objectGUID" hereMatthias Dieter Wallnöfer1-1/+1
2010-11-08s4:objectguid LDB module - make use of "dsdb_next_callback"Matthias Dieter Wallnöfer2-30/+6
2010-11-08s4:drsuapi RPC server - writespn.c - fix indentationsMatthias Dieter Wallnöfer1-15/+24
2010-11-08s4-drs: allow bypass of writespn checking for some SPNsAndrew Tridgell1-1/+111
this allows accounts (and in particular RODCs) to make SPN updates on their own account if they take the form SERVICE/hostname we may be able to remove this in the future after some changes in our ACL checking for userPrincipalName Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 08:45:16 UTC 2010 on sn-devel-104
2010-11-08heimdal Add clock-skew handling to DCE-style GSSAPIAndrew Bartlett1-39/+65
The clock skew handling was previously only on properly wrapped GSSAPI, and was skipped for DCE-style. This allows the ASN.1 errors from the krb5_rd_req to suggest parsing as a kerberos error packet. Andrew Bartlett Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 07:58:09 UTC 2010 on sn-devel-104
2010-11-08s4-auth Supply more useful error messages on Kerberos failureAndrew Bartlett3-13/+28
The practice of returning only NT_STATUS_INVALID_PARAMETER hasn't helped our users to debug problems effectivly, and so we now return more errors and try and give a more useful debug message when then happen. Andrew Bartlett
2010-11-08s4-auth Fix typos in samba4 auth codeBrad Hards1-7/+7
2010-11-08s4-dsdb Explain why we may not use the GC name in some situations.Andrew Bartlett1-0/+8
This delicate balance caused us a bit of a puzzle when we could not work out why an DC join failed with the new python scripts. Andrew Bartlett
2010-11-08s4-selftest fix indentationAndrew Bartlett1-3/+3
2010-11-08s4-repl: fixed replication notifications to RODCsAndrew Tridgell3-7/+58
We need a separate source dsa list for RODCs, as they are not in the repsFrom for our partitions, but are in the repsTo. This adds a new 'notifies' list, which contains all the source dsas for the DCs that we should send notifies to, but which we don't replicate from Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 06:57:43 UTC 2010 on sn-devel-104
2010-11-08fixAndrew Tridgell2-4/+4
2010-11-08s4-debug: lowered the debug level of some unimportant messagesAndrew Tridgell3-4/+4
2010-11-08s4-ldb: don't give an error if a module is already registeredAndrew Tridgell1-0/+7
this can happen when both the build and install paths are used to load ldb modules Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 05:28:14 UTC 2010 on sn-devel-104
2010-11-08waf: go back to the previous method of handling .inst. rulesAndrew Tridgell1-1/+1
the change broke the library linkages for some library, as spotted by Brad
2010-11-08waf: fixed the names of the installed libraries after the last changeAndrew Tridgell1-5/+13
Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 02:31:18 UTC 2010 on sn-devel-104
2010-11-08s4-dns: ensure we get the right case on the grant rule for administratorAndrew Tridgell1-2/+1
it may be 'Administrator' in the database, and bind match rules are case sensitive Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 01:41:43 UTC 2010 on sn-devel-104
2010-11-08waf: fixed tabs/spaces for python3.0Andrew Tridgell2-5/+5
Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 00:55:13 UTC 2010 on sn-devel-104
2010-11-08waf: prevent us from modifying non-install libs during make installAndrew Tridgell1-2/+6
we need to ensure that 'make install' does not change any of our build libraries, and only changes the .inst.so libraries, otherwise doing a make test in the build directory directly after a make install could use the installed libraries, which would mean using the wrong LDB_MODULES_PATH this could cause the "unknown error" loading ldb modules when running some commands directly after a make install Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-08s4-ldb: better error message when we try to register a module twiceAndrew Tridgell1-2/+3
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-08s4-pydrs: validate the DsGetNCChanges responseAndrew Tridgell1-0/+2
check that object_count matches up with first_object
2010-11-07s4-join: modify join behaviour according to domain levelAndrew Tridgell4-43/+112
Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Sun Nov 7 23:32:16 UTC 2010 on sn-devel-104
2010-11-07s4-drs: allow override of the replica_flagsAndrew Tridgell1-2/+7
2010-11-07s4-dsdb: give the DN on a shema attribute failureAndrew Tridgell1-1/+1
2010-11-07s4:ldap.py - add more "objectGUID" related testsMatthias Dieter Wallnöfer1-2/+76
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Nov 7 21:12:03 UTC 2010 on sn-devel-104
2010-11-07s4:objectguid LDB module - fix typo in output messageMatthias Dieter Wallnöfer1-1/+1
2010-11-07s4:objectguid LDB module - objectGUIDs cannot be specified on add operationsMatthias Dieter Wallnöfer1-2/+6
2010-11-07s4:upgradeprovision - remove some "recalculate_sd" usesMatthias Dieter Wallnöfer1-3/+3
We need "recalculate_sd" only when no external "nTSecurityDescriptor" change is performed. Otherwise the recalculation is performed automatically. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Nov 7 18:52:42 UTC 2010 on sn-devel-104
2010-11-07s4:descriptor LDB module - make the "nTSecurityDescriptor" attribute fully ↵Matthias Dieter Wallnöfer2-52/+117
behave as in AD - fix crash when provided "nTSecurityDescriptor" attribute is empty - print out the correct error codes if it's provided multi-valued - simplify the "recalculate_sd" control handling
2010-11-07s4:ldb_modules/util.c - "dsdb_get_single_valued_attr" - support the ↵Matthias Dieter Wallnöfer2-10/+20
attribute fetch also on LDB add operations We've to completely ignore the flags in that case. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Nov 7 11:10:23 UTC 2010 on sn-devel-104
2010-11-07ldb:ldb_pack.c - the "dn" attribute isn't allowed in the message part, only ↵Matthias Dieter Wallnöfer1-2/+0
the "distinguishedName" one Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Nov 7 10:11:02 UTC 2010 on sn-devel-104
2010-11-07s4:torture/dssync.c - remove unused variableMatthias Dieter Wallnöfer1-1/+0
2010-11-07s4:descriptor LDB module - save a pointer to the request message on the ↵Matthias Dieter Wallnöfer1-33/+33
temporary "ac" context This prevents two calls of "ldb_msg_copy_shallow".
2010-11-07s4:descriptor LDB module - by "dsdb_next_callback" we don't need anymore the ↵Matthias Dieter Wallnöfer1-33/+2
default operation callback implementations Only customised ones still need to remain.
2010-11-07s4:descriptor LDB module - remove a bit pointless memory contextMatthias Dieter Wallnöfer1-9/+1
For only one operation we do not need an additional "mem_ctx". "ac" should be enough (see for example the samldb LDB module).