summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2010-09-27libcli/ldap: correctly marshall LDAP Unbind PDUsStefan Metzmacher1-0/+2
metze
2010-09-27s3-waf: fix dependencies to NDR_XATTR.Günther Deschner2-9/+4
Guenther
2010-09-27s3-waf: link PReg parser only in registry client side extension.Günther Deschner2-4/+1
Guenther
2010-09-27s3-waf: NDR_SRVSVC is defined now from the main librpc wscript_build.Günther Deschner1-4/+0
Guenther
2010-09-27waf: add more NDR subsystems for shared IDL files.Günther Deschner2-2/+42
Guenther
2010-09-27s4-waf: remove NDR-SRVSVC alias.Günther Deschner2-1/+10
Thanks tridge, this was driving me nuts... Guenther
2010-09-27s4-smbtorture: remove unneeded dcerpc_mgmt alias.Günther Deschner3-3/+2
Guenther
2010-09-27s4-drs: fixed comment in getncchanges codeAndrew Tridgell1-1/+1
Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Sep 27 04:54:43 UTC 2010 on sn-devel-104
2010-09-26s4-gensec: fixed a valgrind error in gensecAndrew Tridgell1-12/+2
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-27lib/util: change tevent_req_nterror() to a macroStefan Metzmacher2-3/+10
This way we can record where a tevent_req was finished by tevent_req_nterror(). metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Sep 27 03:18:14 UTC 2010 on sn-devel-104
2010-09-27s4-dns: use the generated krb5.conf in samba_dnsupdateAndrew Tridgell1-0/+5
this gives one less thing that an admin can get wrong Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Sep 27 02:35:29 UTC 2010 on sn-devel-104
2010-09-27s4-provision: fixed the generation of the krb5.conf for vampireAndrew Tridgell1-6/+6
we need a correct krb5.conf for nsupdate from bind9
2010-09-27s3-waf: move SERVICES into a subsystem.Günther Deschner1-5/+13
Guenther
2010-09-27s3-waf: add PRINTING subsystems.Günther Deschner1-12/+21
Guenther
2010-09-27s3-waf: add two more REGF based subsystems.Günther Deschner1-9/+14
Guenther
2010-09-27tdb: fix non-WAF build, commit 1.2.6 ABI file.Rusty Russell2-1/+62
Sorry Jeremy. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
2010-09-27tdb: TDB_INCOMPATIBLE_HASH, to allow safe changing of default hash.Rusty Russell6-6/+23
This flag to tdb_open/tdb_open_ex effects creation of a new database: 1) Uses the Jenkins lookup3 hash instead of the old gdbm hash if none is specified, 2) Places a non-zero field in header->rwlocks, so older versions of TDB will refuse to open it. This means that the caller (ie Samba) can set this flag to safely change the hash function. Versions of TDB from this one on will either use the correct hash or refuse to open (if a different hash is specified). Older TDB versions will see the nonzero rwlocks field and refuse to open it under any conditions. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
2010-09-27tdb: automatically identify Jenkins hash tdbsRusty Russell1-14/+27
If the caller to tdb_open_ex() doesn't specify a hash, and tdb_old_hash doesn't match, try tdb_jenkins_hash. This was Metze's idea: it makes life simpler, especially with the upcoming TDB_INCOMPATIBLE_HASH flag. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
2010-09-27tdb: add Bob Jenkins lookup3 hash as helper hash.Rusty Russell7-18/+447
This is a better hash than the default: shipping it with tdb makes it easy for callers to use it as the hash by passing it to tdb_open_ex(). This version taken from CCAN and modified, which took it from http://www.burtleburtle.net/bob/c/lookup3.c. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
2010-09-27s3-waf: rework static and shared list handling a little.Günther Deschner1-17/+20
Guenther
2010-09-27waf: add delimiter argument to TO_LIST.Günther Deschner1-2/+2
Guenther
2010-09-27s3-waf: add missing IDMAP modules.Günther Deschner2-1/+18
Guenther
2010-09-27s3-waf: rework CLDAP and LIBCLI_LDAP subsystems.Günther Deschner2-9/+18
Guenther
2010-09-27s3-waf: move gpext subsystem to libgpo/gpext/wscript_build.Günther Deschner2-35/+36
Guenther
2010-09-27s3-waf: move perfcount subsystem to modules/wscript_build.Günther Deschner2-23/+23
Guenther
2010-09-27s3-waf: move charset subsystem to modules/wscript_build.Günther Deschner2-41/+43
Guenther
2010-09-27s3-waf: move idmap subsystem to winbindd/wscript_build.Günther Deschner2-77/+77
Guenther
2010-09-27s3-waf: move pdb subsystem to pdb/wscript_build.Günther Deschner2-50/+51
Guenther
2010-09-27s3-waf: move auth subsystem to auth/wscript_build.Günther Deschner2-83/+85
Guenther
2010-09-27s3-waf: support --with-acl-support, at least for posix acls.Günther Deschner2-22/+55
Guenther
2010-09-27s3-waf: move VFS subsystem to modules/wscript_build.Günther Deschner2-389/+403
Guenther
2010-09-27s3-waf: add some module specific functions for s3 waf build.Günther Deschner2-0/+23
Thanks to Kai. Guenther
2010-09-27s3-waf: convert VFS into a subsystem.Günther Deschner1-0/+340
Guenther
2010-09-27s3-waf: convert GPEXT into a subsystem.Günther Deschner1-0/+27
Guenther
2010-09-27s3-waf: convert PERFCOUNT into a subsystem.Günther Deschner1-0/+20
Guenther
2010-09-27s3-waf: convert CHARSET into a subsystem.Günther Deschner1-0/+34
Guenther
2010-09-27s3-waf: convert IDMAP into subsystem.Günther Deschner1-0/+55
Guenther
2010-09-27s3-waf: convert PDB into subsystem.Günther Deschner1-0/+41
Guenther
2010-09-27s3-waf: convert AUTH into subsystem.Günther Deschner1-0/+59
Guenther
2010-09-26s4-ldbmodules: Added new module aclread to handle access checks on LDAP searchNadezhda Ivanova4-0/+327
It is currently enabled only if the request comes from the LDAP server, and is disabled by default. Use acl:search=true in smb.conf to enable it. It filters out all objects the user is not allowed to see, and all attributes the user does not have RP on. Extended access not supported yet.
2010-09-26s4-tests: Added tests for search checks on attributesNadezhda Ivanova2-5/+102
The ACL reach tests are in the knowfail because aclread module is not enabled by default
2010-09-26s4-tests: Removed search tests with anonymous credentials as they fail ↵Nadezhda Ivanova2-4/+4
againts Windows These tests will fail in make test as well if the acl_read module is enabled.
2010-09-26s4-dsdb: Added a function to check access on a particular object by its guidNadezhda Ivanova1-0/+37
Similar to dsdb_check_access_on_dn, only it searches by guid.
2010-09-26s4-dsdb: A helper to determine if an attribute is part of the search filterNadezhda Ivanova1-0/+46
2010-09-26s4-dsdb: Moved some helper functions to a separate fileNadezhda Ivanova5-222/+260
We need these to be accessible to the aclread module as well.
2010-09-26s4-ldap: Added a control to apply the access checks on read via LDAPNadezhda Ivanova3-0/+6
2010-09-26autobuild: use killbysubdir if availableAndrew Tridgell1-2/+4
this will reduce the spurious test output while processes are being killed
2010-09-26autobuild: exit immediately if no changes from masterAndrew Tridgell1-1/+9
we don't need to test master in autobuild
2010-09-26s3-waf: convert LIBGPO into a subsystem.Günther Deschner1-2/+5
Guenther
2010-09-26s3-waf: convert PLAINTEXT_AUTH, SLCACHE and DCUTIL into subsystems.Günther Deschner1-11/+19
Guenther