summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2010-06-28s3-nmbd: Leave the sync function if there are no syncs.Andreas Schneider1-0/+5
Found by clang-analyzer.
2010-06-28s3-libsmb: Make sure that finfo is initialized.Andreas Schneider1-0/+2
Found by clang-analyzer.
2010-06-28s3-eventlog: make sure _eventlog_OpenEventLogW fails when we cannot open the ↵Günther Deschner1-1/+4
registry key. Guenther
2010-06-28s3: Fix some valgrind errorsVolker Lendecke1-19/+36
Essentially the same change as 15297ee, this time for the client side. Günther, Andrew B, please check! Thanks, Volker
2010-06-28s3-passdb: Make sure that we don't assign garbage.Andreas Schneider1-1/+1
2010-06-28librpc: Use switch in GUID_from_data_blob().Andreas Schneider1-7/+16
2010-06-28nss_wrapper: Fixed a possible NULL pointer problem.Andreas Schneider1-1/+1
2010-06-28s4:ldap_server: don't start if we can't bind to port 389Stefan Metzmacher1-1/+4
metze
2010-06-28Implementation of self membership validated right.Nadezhda Ivanova3-6/+234
When this right is granted, the user can add or remove themselves from a group even if they dont have write property right.
2010-06-28s4/test: Run DrsDeleteObjectTestCase as part of S4 testingKamen Mazdrashki1-0/+3
I put this test in the end of the list of tests as it runs with 'vampire_dc' environment running. Currently there are tests that are failing when we have 2 DCs constantly replicating in the test environment (this, of course, should be fixed in the near future)
2010-06-28s4/drs: re-implement 'renaming' object replicationKamen Mazdrashki1-18/+53
We should rename objects only after we make sure, that changes on the partner DC are newer than what we have. This fixes a bug, when we have following situation with 2 DCs: - we have an object O on the two DCs - we rename (delete) object O on DC1 - DC1 replicates from DC2 In the above scenario, object O will be renamed back to its original name (i.e. it will be restored). Now, we check that DC2 state is older than what we have, so nothing happens with object's DN.
2010-06-28s4/drs-test: Add few comments in DrsDeleteObjectTestCase testKamen Mazdrashki1-3/+10
Also remove unused code
2010-06-26s4:rpc_server/srvsvc/dcesrv_srvsvc.c - remove unreachable codeMatthias Dieter Wallnöfer1-36/+0
2010-06-26s4:rpc_server/wkssvc/dcesrv_wkssvc.c - remove unreachable codeMatthias Dieter Wallnöfer1-4/+0
2010-06-26s4:rpc_server/lsa/dcesrv_lsa.c - remove unreachable codeMatthias Dieter Wallnöfer1-2/+0
2010-06-26s4:lsa/lsa_lookup.c - use a better type for the "rtype" of the wellknown SIDsMatthias Dieter Wallnöfer1-3/+4
To suppress warnings on Solaris 10
2010-06-26s4:rpc_server/drsuapi/drsutil.c - remove unreachable codeMatthias Dieter Wallnöfer1-1/+0
2010-06-26s4:rpc_server/dcesrv_auth.c - remove unreachable codeMatthias Dieter Wallnöfer1-2/+0
2010-06-26s4:winbind/wb_samba3_protocol.c - add cast to suppress warnings on Solaris 10 ccMatthias Dieter Wallnöfer1-1/+1
2010-06-26s4:kdc/kdc.c - add cast to suppress warnings on Solaris 10 ccMatthias Dieter Wallnöfer1-2/+2
2010-06-26s4:kdc/kpasswdd.c - remove unreachable codeMatthias Dieter Wallnöfer1-2/+0
2010-06-26s4:provision.py - fix comment regarding DNS entriesMatthias Dieter Wallnöfer1-1/+1
I think this should mean partially Samba4 specified (all beside the "dns" account is standard)
2010-06-26s4:provision: add entries for root dns serversStefan Metzmacher1-0/+72
metze
2010-06-26s4:provision: move Samba4 specific DNS stuff to its own fileStefan Metzmacher4-21/+39
metze
2010-06-26s4:provision: add --next-rid optionStefan Metzmacher2-3/+16
Make it possible to provision a domain with a given next rid counter. This will be useful for upgrades, where we want to import users with already given SIDs. metze
2010-06-26s4:dsdb/ridalloc: add comment about windows behavior regarding rIDUsedPoolStefan Metzmacher1-1/+6
metze
2010-06-26s4:provision: don't use hardcoded values for 'nextRid' and 'rIDAvailablePool'Stefan Metzmacher5-6/+24
On Windows dcpromo imports nextRid from the local SAM, which means it's not hardcoded to 1000. The initlal rIDAvailablePool starts at nextRid + 100. I also found that the RID Set of the local dc should be created via provision and not at runtime, when the first rid is needed. (Tested with dcpromo on w2k8r2, while disabling the DNS check box). After provision we should have this (assuming nextRid=1000): rIDAllocationPool: 1100-1599 rIDPrevAllocationPool: 1100-1599 rIDUsedPool: 0 rIDNextRID: 1100 rIDAvailablePool: 1600-1073741823 Because provision sets rIDNextRid=1100, the first created account (typically DNS related accounts) will get 1101 as rid! metze
2010-06-26s4:provision: pass relax control also to modify_ldifStefan Metzmacher1-2/+2
metze
2010-06-26s4/net-drs: Fix error messages typo and formattingKamen Mazdrashki1-7/+7
2010-06-26s4/drs-test: Fix whitespaces and permissions for delete_object.py testKamen Mazdrashki1-5/+5
Sorry I've missed to do this before
2010-06-25Move UCS2 macros to common codeJelmer Vernooij2-21/+23
2010-06-25Don't use frame as the talloc ctx in open_schannel_session_store(), as this ↵Jeremy Allison1-1/+1
breaks running from inetd (we free frame below). Use NULL instead. Jeremy.
2010-06-25Change talloc_autofree_context() to frame in Andrew's schannel.tdb ↵Jeremy Allison1-1/+1
TDB_CLEAR_IF_FIRST changes. Using talloc_autofree_context() has undesirable effects when forked subprocesses exit. Jeremy.
2010-06-25schannel Change to TDB_CLEAR_IF_FIRST to reduce fsync()Andrew Bartlett1-32/+1
By making this DB TDB_NOSYNC, and by making that safe with TDB_CLEAR_IF_FIRST, we greatly reduce the fsync() load on the server. This particularly helps the source4/ 'make test', which otherwise tries to disable fsync() in ldb. Andrew Bartlett Signed-off-by: Jeremy Allison <jra@samba.org>
2010-06-25s3:schannel Open the schannel_state.tdb at startupAndrew Bartlett1-0/+8
This will allow future TDB_CLEAR_IF_FIRST behaviour Signed-off-by: Jeremy Allison <jra@samba.org>
2010-06-25s4:schannel Open the schannel_store.tdb at startupAndrew Bartlett1-0/+8
This will allow TDB_CLEAR_IF_FIRST behaviour in future Signed-off-by: Jeremy Allison <jra@samba.org>
2010-06-25libcli/auth make open_schannel_session_store() publicAndrew Bartlett2-7/+7
This will allow TDB_CLEAR_IF_FIRST to be used Signed-off-by: Jeremy Allison <jra@samba.org>
2010-06-25s3:registry: use regdb_store_regdb_version() in regdb_init().Michael Adam1-13/+2
2010-06-25s3:registry: use regdb_store_regdb_version() in regdb_upgrade_v1_to_v2()Michael Adam1-13/+8
2010-06-25s3:registry: add a function regdb_store_regdb_version()Michael Adam1-0/+21
2010-06-25s3:registry: rename regdb_upgrade_to_version_2() -> regdb_upgrade_v1_to_v2()Michael Adam1-2/+2
2010-06-25s3:net [rpc] registry: be as user-friendly as possible wrt to the ↵Michael Adam1-2/+9
normalization change The registry has been changed to use '\' as a key delimiter instead of '/'. Originally, one could mix both characters in the specification of registry key for net [rpc] registry. Now this can not work any more, since '/' is generally treated as a valid character of a key name. Now, to be as user-friendly as possible, the net [rpc] registry code has been changed to still support '/' as a key name delimiter if no '\' character is found in the given registry path string. In that case, all '/' characters are converted to '\' characters before proceeding. If on the other hand, a '\' character is found in the path string, then no conversion is assumed, and it is hence assumed that the path is already in the correct form and '/' characters are supposed to be part of the key names.
2010-06-25s3:registry: improve logic of upgrade code in regdb_init()Michael Adam1-30/+45
Don't overwrite unknown versions (0 or > 2) of the registry.
2010-06-25s3:registry: fix some debug messages in regdb_ini()Michael Adam1-4/+4
2010-06-25s3-registry: Convert registry key delimiter from slash to backslash.Andreas Schneider5-51/+30
This is needed to support keynames containing a '/' like TCP/IP. Which is used in serveral standard paths. Signed-off-by: Michael Adam <obnox@samba.org>
2010-06-25s3-registry: Added a db upgrade function to normalize the key delimiter.Andreas Schneider2-6/+107
This converts the key delimiter from a slash to a blackslash. We need to support keynames with a backslash. Signed-off-by: Michael Adam <obnox@samba.org>
2010-06-25s3: In make_server_info_info3, check the result of copy_netr_SamInfo3Volker Lendecke1-0/+4
2010-06-25s3: In copy_netr_SamInfo3 copy all of the sids arrayVolker Lendecke1-0/+3
2010-06-25s3: Fix a winbind crashVolker Lendecke1-0/+10
nss_get_info_cached might deep inside sequence_number() invalidate the ads_struct without telling its callers.
2010-06-25s3: Fix a winbind crashVolker Lendecke1-1/+6
nss_get_info_cached might have invalidated "ads" deep inside.