summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2007-10-10r10985: To aid in testing, this allows us to easily force kerberos to use ↵Andrew Bartlett1-5/+9
UDP or TCP. Andrew Bartlett (This used to be commit ae0b4028ff7033dab70687376c2090baa692cf58)
2007-10-10r10984: fix valgrind warnings, I had used that to check if w2k3 accept ↵Stefan Metzmacher1-1/+1
random values here, as w2k generates also random stuff here metze (This used to be commit e04c78e4e925ce385651eb0e77e3ea7aee9e8008)
2007-10-10r10983: Another case were we want to avoid DNS for unqualified names.Andrew Bartlett1-1/+8
Andrew Bartlett (This used to be commit 1d7094b8dfd53dfda55db7ce30f47f74864093bf)
2007-10-10r10982: Move credentials.h into auth/credentials, and add flags needed byAndrew Bartlett2-1/+6
previous patch. Andrew Bartlett (This used to be commit 2c537d47ba99885c6462016342b1cc29df4c54c5)
2007-10-10r10981: Pull code to decide between and implement NTLMv2, NTLM and LMAndrew Bartlett5-210/+290
authentication out of the various callers and into the kitchen sink.. err, credentials subsystem. This should ensure consistant logic, as well as get us one step closer to security=server operation in future. Andrew Bartlett (This used to be commit 09c95763301c0f7770d56462e8af4169b8c171fb)
2007-10-10r10980: Use ldb_attr_cmp and ldb_dn_escape_valueAndrew Bartlett1-6/+6
Andrew Bartlett (This used to be commit 2b1c88f628b27ffda08de3f4ac83c1f3b052a078)
2007-10-10r10973: - make debugging a bit easierStefan Metzmacher1-1/+277
- add unique vs. normal group section in replica vs replica conflict testing metze (This used to be commit b94be6b1191aa18642b334dc1fe1529d977d6c57)
2007-10-10r10971: - test static records with the same owner tooStefan Metzmacher1-12/+388
- test with different owners, and all combinations of unique records metze (This used to be commit 8df80c5649467be6cb4dd532974a083173a5a920)
2007-10-10r10967: move the function in the order they are usedStefan Metzmacher1-98/+99
metze (This used to be commit 6f44ae5a6950cee5722758030df862b0f919f43b)
2007-10-10r10965: - only run the cross connection assoc test when running with -XStefan Metzmacher1-1/+288
this sometimes crashes the windows server - add the first replication conflict tests we now test that replica records are always overwritten when the owner is the same metze (This used to be commit f93353ac41441e0ca7b31c82318005438cd00ce5)
2007-10-10r10959: fix compiler warningsStefan Metzmacher1-2/+3
metze (This used to be commit 9a9311fa6b4bbb2a385413c056c8be57cdb9eb59)
2007-10-10r10957: make a comment clearerAndrew Tridgell1-1/+1
(This used to be commit d379fb5f101155edd5f266ae9aaae4e7ac7bd76b)
2007-10-10r10956: Tridge thought some comments might be a good idea :-)Andrew Bartlett1-2/+14
Andrew Bartlett (This used to be commit c0d6126effdf31e0a107c06a400973c731e0e263)
2007-10-10r10955: finally worked out why our computer accounts were being identified ↵Andrew Tridgell1-0/+1
as users in mmc. The problem was that the samdb module was auto-adding objectClass=user for these accounts. That would be OK, as computer accounts are supposed to be in that objectClass, but mmc cares about the order of the values in the objectClass attribute! It looks for the last value, and takes that as the value to use when deciding how to manipulate the record. So, this patch adds an explicit objectClass=user to the record when it gets created, which tells the samdb module to not add it as well. That fixes the order. I suspect we are missing something else though - is objectClass supposed to auto-sort based on the schema? (This used to be commit 68c5f807fdb99fd605154d455e61a08293cbd2d0)
2007-10-10r10954: added support for canonicalName in the operational module, using theAndrew Tridgell3-32/+94
dn->canonicalName function abartlet just committed (This used to be commit 197e8a27f0557869eacd17b74e1b14e0665883b1)
2007-10-10r10953: Add a new function to form a canonicalName out of a DN to ldb_dn.cAndrew Bartlett4-97/+210
Use this new function in the client and server for the CrackNames case, where we particularly need it. Andrew Bartlett (This used to be commit 380037ee09ef8293bdb288d6c015e7c80f180a30)
2007-10-10r10950: More cracknames variations (including expected values) than you canAndrew Bartlett1-16/+76
poke a stick at... Andrew Bartlett (This used to be commit e4b21300304f8c66c81fa0d15198c640d87db68e)
2007-10-10r10946: Use the right name for the remote workstation, and always initialise it.Andrew Bartlett2-4/+7
Should fix a valgrind error volker is seeing. Andrew Bartlett (This used to be commit 11957c5f37fe0a0be465a9ce9d6d256724c5951c)
2007-10-10r10945: Free the salt after we are done with it. May need a merge to similarAndrew Bartlett1-2/+4
code in Samba3. Andrew Bartlett (This used to be commit 36e302bac87d0a07c86cc4c841d376c778630dab)
2007-10-10r10941: Hmmm. Making that fn static is more correct.Volker Lendecke2-2/+1
(This used to be commit eaf347bdeaaddb655fe72ddb98f3a67ace795937)
2007-10-10r10940: add struct definitionVolker Lendecke1-0/+1
(This used to be commit 295271a329586d0858b6d6b845b8ebba3d035f5f)
2007-10-10r10936: Commit work in progress: wb_pam_auth_crap made async. This does not ↵Volker Lendecke4-19/+326
work yet, but the version before did not either, so we're not worse than before. One thing this does better is to call the domain init code if it's not there yet. Volker (This used to be commit 35bcfb185b9763a3677d7ac9e748f3a3ba7d2593)
2007-10-10r10934: Fix a gcc 4 warningVolker Lendecke1-1/+2
(This used to be commit 317edeb546ef03507812e5a0fa1fb331073f55c1)
2007-10-10r10924: we don't need this line twiceStefan Metzmacher1-1/+0
metze (This used to be commit f1ee8d4b58d97888dc4c57af34c7604ee9dd2a73)
2007-10-10r10920: in case of a accept() failure just failing and trying again is noAndrew Tridgell3-0/+17
good, as it is probably a resource constraint, so if we just try again we will spin (as the incoming socket will still be readable). Using a sleep(1) solves this by throtting smbd until the resource constraint goes away. if the resource constraint doesn't go away, then at least smbd won't be spinning chewing cpu (This used to be commit 7a5a9da477186b5e4fdb34ec64cc97915de4fd8e)
2007-10-10r10919: fixed the ldb test for the new operational moduleAndrew Tridgell1-3/+4
(This used to be commit 915878d7cebacf499c0c9d264a2dcbc82b521dfd)
2007-10-10r10918: - fixed standalone ldb buildAndrew Tridgell8-241/+15
- added note about allowedAttributesEffective (will be needed for mmc) - fixed some more ldb warnings (This used to be commit e9e4d81b6976549db8a7668572a5da466fbec4a9)
2007-10-10r10917: copy the element name in a ldb_msg_rename_attr() and ↵Andrew Tridgell3-9/+18
ldb_msg_copy_attr() to ensure that callers (like the ldap server) can talloc_steal the name (This used to be commit 9c914542cc346758c82f89990c80eb096a9c0959)
2007-10-10r10916: - finished the 'operational' ldb moduleAndrew Tridgell8-42/+148
- removed the timestamps module, replacing it with the operational module - added a ldb_msg_copy_shallow() function which should be used when a module wants to add new elements to a message on add/modify. This is needed because the caller might be using a constant structure, or may want to re-use the structure again - enabled the UTC time attribute syntaxes in the operational module (This used to be commit 61e8b010223ac6a0573185008f3719ba29574688)
2007-10-10r10915: added a standard attribute handler for a ldap UTC time stringAndrew Tridgell3-11/+56
(This used to be commit efd7dd1a775c06f21924f35760f7768b4e8db449)
2007-10-10r10914: moved the ldap time string functions into ldb so they can be used byAndrew Tridgell7-59/+52
the time attribute handling functions (This used to be commit 93c296d52718e77f8b702e1721b548eaadc56c76)
2007-10-10r10913: This patch isn't as big as it looks ...Andrew Tridgell35-281/+625
most of the changes are fixes to make all the ldb code compile without warnings on gcc4. Unfortunately That required a lot of casts :-( I have also added the start of an 'operational' module, which will replace the timestamp module, plus add support for some other operational attributes In ldb_msg_*() I added some new utility functions to make the operational module sane, and remove the 'ldb' argument from the ldb_msg_add_*() functions. That argument was only needed back in the early days of ldb when we didn't use the hierarchical talloc and thus needed a place to get the allocation function from. Now its just a pain to pass around everywhere. Also added a ldb_debug_set() function that calls ldb_debug() plus sets the result using ldb_set_errstring(). That saves on some awkward coding in a few places. (This used to be commit f6818daecca95760c12f79fd307770cbe3346f57)
2007-10-10r10912: added a test for supporting batch oplock upgradesAndrew Tridgell1-0/+14
(This used to be commit 1183af06b70a06ef7a1af665567560e9158fc960)
2007-10-10r10897: added in a hackish ldb proxy module that I am using to experiment withAndrew Tridgell3-0/+351
mmc management support (This used to be commit 99a5b088810e8e2f4e28b99a4a0e5e7dc9301594)
2007-10-10r10896: added a strcasestr() replacement functionAndrew Tridgell3-2/+20
(This used to be commit 4483d275e12006e5acc72ae143c0a01da01bd00d)
2007-10-10r10895: allow 'dn=string' searches to work again. Windows doesn't allow these,Andrew Tridgell1-7/+2
but they are so very useful for things like dn=@MODULES that I think its worth supporting them (This used to be commit e2e3193a98b0f81c7bdb02c98db375ca0449022a)
2007-10-10r10894: make the handling of dn/distinguishedName much closer to realAndrew Tridgell14-40/+37
ldap. Also ensure we put a objectclass on our private ldb's, so they have some chance of being stored in ldap if you want to (This used to be commit 1af2cc067f70f6654d08387fc28def67229bb06a)
2007-10-10r10893: add configure test for utime (needed for the previous utime patch)Andrew Tridgell1-1/+1
(This used to be commit ef020d599fd2336cbf879920fe3505b97783dfc8)
2007-10-10r10892: - improved the handling of the special distinguishedName attributeAndrew Tridgell1-85/+43
- ensure we don't add attributes twice, should a user ask for the attribute twice. Do this in such a way that we don't become O(n^2) - removed some unused code (This used to be commit 7684cdb47b4ae516f066afb249d5f88032152ec9)
2007-10-10r10891: I noticed that the secrets.db was not being backed up on my system dueAndrew Tridgell1-0/+9
to msync/mmap not changing the mtime of the file. This patch ensures that for successfully completed transactions we update the mtime. I don't do this on all tdb writes as its too expensive, but doing it just on transactions is bearable, as those cost quite a lot anyway. (This used to be commit b2934732dd62f705f59c124f19460c5436a9a422)
2007-10-10r10889: make searches for dn's less of a special case, and much faster whenAndrew Tridgell2-15/+7
part of more complex expressions (This used to be commit 40d304140b4cf22559d6b55c8cbaf1b984baf62f)
2007-10-10r10880: Missed terminating ';', sorry.Jeremy Allison1-2/+2
Jeremy. (This used to be commit 2680aeffb1e40a7d1d59c98f0ee533d7c4362f40)
2007-10-10r10879: Added the ZERO_STRUCT(q_u), (r_u) entries to the generatedJeremy Allison1-0/+3
Samba3 code. Jelmer please check ! Jeremy. (This used to be commit 534e8d16228ad4f1306ddf21ea9c9b988d736525)
2007-10-10r10878: Reply to some comments by tridge and metze:Volker Lendecke11-330/+520
* rename the composite helper functions from comp_* to composite_* * Move the lsa initialization to wb_connect_lsa.c * Equip smb_composite_connect with a fallback_to_anonymous The latter two simplify wb_init_domain.c quite a bit. Volker (This used to be commit deb127e04ea01ae93394da5ebffb39d81caeb6d9)
2007-10-10r10873: check the complete payload headerStefan Metzmacher1-3/+11
metze (This used to be commit 27f8d82231f2978ff15719e4b23912ae7f910638)
2007-10-10r10872: fix the length of the dummy XPRESS decompressed bufferStefan Metzmacher1-1/+1
metze (This used to be commit 0a1e4498a3550721b214716d1106843bf1ff4597)
2007-10-10r10871: make xpress compression choosable, by --option="dssync:xpress=yes",Stefan Metzmacher1-1/+29
default is to not use it, as it's currently not supported metze (This used to be commit 2fb79e24228a47edcb7e1e12fb73def523b0400b)
2007-10-10r10870: decompress DsGetNCChangesCtr7 replies, that uses type 2 (MSZIP)Stefan Metzmacher1-19/+57
compression metze (This used to be commit b451137526c4872a808f14ef42b2ed50abce1355)
2007-10-10r10869: add dummy functions and dummy parsing of XPRESS decompression,Stefan Metzmacher2-8/+87
this is the compression algorithm used by w2k3 for DsGetNCChanges(). This algorithm isn't known yet, but it seems to be some sort of Lempel-Ziv algorithm. metze (This used to be commit 694252b6e02e365ae5baffb76cdbc89eec5358e7)
2007-10-10r10868: make flag(NDR_PAHEX) possible to use and show the union level in hexStefan Metzmacher2-4/+10
metze (This used to be commit 7efb92adc057ad8a993eb9de66c3806608747104)