summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2009-09-15s4-security: added a new security level SECURITY_DOMAIN_CONTROLLERAndrew Tridgell2-0/+10
This will be used as a simple way to lock down DRS replication to administrators and domain controllers
2009-09-15s4-ldb: ldap attribute names can contain a '.'Andrew Tridgell1-1/+2
When they are of the form of OIDs
2009-09-15s4-ldb: expose ldb_transaction_prepare_commit() in ldbAndrew Tridgell3-21/+64
It is useful to be able to control the 2 phase commit from application code (s4 replication uses it)
2009-09-15s4-repl: don't do double replicationAndrew Tridgell4-6/+44
When we replicate from a remote DC, we need to note the new uSN that the local changes have resulted in, and modify the uSN that the notify task uses to determine if it should send a ReplicaSync message back to the remote DC. Otherwise we end up always triggering a ReplicaSync every time we replicate from another DC
2009-09-15tdb: allow reads after prepare commitAndrew Tridgell1-8/+0
We previously only allowed a commit to happen after a prepare commit. It is in fact safe to allow reads between a prepare and a commit, and the s4 replication code can make use of that, so allow it.
2009-09-15s4-drs: filter based on local_usnAndrew Tridgell1-1/+1
The getncchanges uSN is in our local space, so we must compare it to the local_usn in replPropertyMetaData
2009-09-15s4-repl: make sure we marshal the replPropertyMetaData after the last changeAndrew Tridgell1-10/+10
we were setting local_usn after the marshall, so it wasn't going into the object
2009-09-15s4-dsdb: use DLIST_ADD() not DLIST_ADD_END()Andrew Tridgell2-4/+4
Using DLIST_ADD_END() to construct a long list is very inefficient (it is O(n^2). These lists are not ordered, so using DLIST_ADD() is much better.
2009-09-15s4-ldb: cope better with corruption of tdb recordsAndrew Tridgell4-5/+30
When doing an indexed search if we hit a corrupt record we abandoned the indexed search and did a full search. The problem was that we might have sent some records to the caller already, which means the caller ended up with duplicate records. Fix this by returning a search error if indexing returns an error and we have given any records to the caller.
2009-09-15talloc: when we enable NULL tracking, reparent the autofree contextAndrew Tridgell1-0/+3
If NULL tracking is enabled after the autofree context is initialised then autofree ends up separate from the null_context. This means that talloc_report_full() doesn't report the autofree context. Fix this by reparenting the autofree context when we create the null_context.
2009-09-15s4-repl: add a debug to make it easier to monitor replicationAndrew Tridgell1-0/+5
2009-09-16s3: Fix reading beyond the end of a named stream in xattr_streamsVolker Lendecke1-2/+1
This was found thanks to a test by Sivani from Microsoft against Samba at the SDC plugfest
2009-09-16s3: Add some debugs to streams_xattrVolker Lendecke1-0/+6
2009-09-16schannel: remove last traces of gensec.Günther Deschner1-2/+0
Guenther
2009-09-16lib/crypto: link in AES crypto for s4 as well.Günther Deschner1-1/+2
Guenther
2009-09-16s3-schannel: remove unused schannel_decode/schannel_encode.Günther Deschner2-293/+0
Guenther
2009-09-16schannel: fully share schannel sign/seal between s3 and 4.Günther Deschner9-83/+144
Guenther
2009-09-16schannel: move schannel_sign to main directory.Günther Deschner6-9/+52
Guenther
2009-09-16s4-schannel: try to fix the build.Günther Deschner1-1/+1
Guenther
2009-09-16s4-schannel: first step of decoupling schannel from gensec.Günther Deschner2-20/+51
Guenther
2009-09-16s4-schannel: strip trailing whitespace.Günther Deschner1-36/+36
Guenther
2009-09-16s3-schannel: fix blob length when pulling off a NL_AUTH_SIGNATURE inGünther Deschner1-1/+1
cli_pipe_verify_schannel(). Guenther
2009-09-16lib/crypto: add aes encryption routines to main cryto lib.Günther Deschner5-1/+1464
Guenther
2009-09-15libreplace: white space cleanupsBjörn Jacke2-12/+12
2009-09-15s3: ignore cups-config to tidy up library dependenciesBjörn Jacke1-1/+1
contrary to krb5-config for example, which outputs useful things, cups-config --libs does not output libs we have to link against. It outputs libs that cups linked against. We just have to link against cups.
2009-09-15libcli:nbt put util_net.c protos in new header fileAndrew Bartlett4-21/+48
This fixed a very odd build problem due to util.h importing system/network.h being imported before the uid_wapper code. Andrew Bartlett
2009-09-15s4:schema Add code to provide an index into the subClass treeAndrew Bartlett2-1/+27
In time, this should avoid the astounding (order) complexity of the objectclass sorting in objectclass.c eventually. Andrew Bartlett
2009-09-15s3-dcerpc: really fix remaining old auth level constants. sorry...Günther Deschner1-2/+2
Guenther
2009-09-15s3-dcerpc: fix remaining old auth level constants.Günther Deschner2-19/+19
Guenther
2009-09-15ntlmssp: pretty print a VERSION structure.Günther Deschner6-19/+21
Guenther
2009-09-15ntlmssp: better document to what structures we are reffering to.Günther Deschner1-3/+25
Guenther
2009-09-15s3-dcerpc: remove unsed auth type defines as seen on the wire.Günther Deschner2-18/+5
Guenther
2009-09-15s3-dcerpc: remove more unused structs.Günther Deschner1-12/+0
Guenther
2009-09-15s3-dcerpc: remove duplicate RPC_AUTH_LEVEL flags.Günther Deschner2-14/+5
Guenther
2009-09-15s3-dcerpc: use dcerpc_AuthLevel and remove duplicate set of flags.Günther Deschner16-100/+93
Guenther
2009-09-15libcli:nbt make the lmhosts parsing code and dependicies commonAndrew Bartlett10-298/+346
This starts the process to have Samba4 use lmhosts. Andrew Bartlett
2009-09-15s4:heimdal_build: fix one more problem with automatic dependeciesStefan Metzmacher1-1/+1
metze
2009-09-14s4:provision Prevent some invalid combinations of realm and domainAndrew Bartlett1-0/+9
We don't do well (even just trying to create duplicate servicePrincipalName values) with some of these combinations, so kill it off early before the administrator thinks it's going to work. Andrew Bartlett
2009-09-14s4: Script to build or rebuild extend DN attributesMatthieu Patou1-0/+141
This script can be used to upgrade a provision that didn't integrate extended dn. It can also be used to add missing extended DN that weren't created during provision.
2009-09-15s3: BSD needs sys/sysctl.h included to build properlyBjörn Jacke3-1/+10
FreeBSD (and other BSDs, too) need sys/sysctl.h inclueded to use sysctlbyname(). Thanks to Timur Bakeyev for that.
2009-09-14Second part of bug fix for 6606.Volker Lendecke1-0/+6
s3:libsmb: Fix bug 6606 -- short reads in smbclient were not handled
2009-09-14Torture test for bug 6529 - Offline files conflict with Vista and Office 2003.Jeremy Allison1-0/+131
Ensure we don't regress. Jeremy.
2009-09-15nss_winbind: remove unused variableBjörn Jacke1-1/+0
2009-09-14Fix bug 6494 - Incorrect FileStatus returned in NT_CREATE_ANDX.Jeremy Allison3-3/+36
Lookup the EA and Stream status on CreateX. Jeremy.
2009-09-14Fix bug 6726 - Filename length overwrites oplock request field in ↵Jeremy Allison1-1/+1
cli_nt_create(). Jeremy.
2009-09-14s3:vfs_catia: Make some fns staticVolker Lendecke1-3/+3
2009-09-14s3:vfs_catia: Use talloc_zero for simplificationVolker Lendecke1-2/+1
2009-09-14s3:vfs_modules: Fix Coverity ID 946: OVERRUN_STATICVolker Lendecke1-1/+1
Tim, please check!
2009-09-14s4-repl: handle rename in repl_meta_dataAndrew Tridgell1-0/+97
On a rename we need to update uSNChanged, and the max uSN for the partition
2009-09-14s4-drs: allow replication of renamesAndrew Tridgell1-6/+7
a rename may have no attribute changes