summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2011-09-08libgpo: call security_token_has_sid() directlyAndrew Bartlett1-2/+2
2011-09-08s3:libsmb: pass CLI_FULL_CONNECTION_* flags via cli_connect_nb()Stefan Metzmacher14-51/+65
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Sep 8 10:21:50 CEST 2011 on sn-devel-104
2011-09-08s3:libsmb: pass CLI_FULL_CONNECTION_* flags to cli_state_create()Stefan Metzmacher4-6/+30
metze
2011-09-08lib/replace: include <sys/uio.h> in "system/filesys.h" in order to have ↵Stefan Metzmacher1-0/+4
struct iovec This is needed on some platforms, e.g. NetBSD5. metze
2011-09-08Revert "Part 4 of bugfix for bug #7509 - smb_acl_to_posix: ACL is invalid ↵Jeremy Allison1-11/+8
for set (Invalid argument)" This belongs as part of the bugfix for bug #8443 - Default user entry is set to minimal permissions on incoming ACL change with no user specified. Not as part of #7509. This reverts commit 2a1453e2318af77a79180f3137f8a8d3f1240233. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Thu Sep 8 08:50:12 CEST 2011 on sn-devel-104
2011-09-08s4-cracknames: use consistent search for crossRef objectsAndrew Tridgell1-2/+4
This matches the search in other places Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Thu Sep 8 05:02:54 CEST 2011 on sn-devel-104
2011-09-08pidl: adjust expected output for new flag checkingAndrew Tridgell1-2/+4
2011-09-08s4-dsdb: prevent crash on bad DN in construct_parent_guid()Andrew Tridgell1-0/+3
this was found by a flakey test in autobuild
2011-09-08torture-drs: fixed NDR tests for DRS blobsAndrew Tridgell1-2/+40
this also adds new tests for trustAuthInOutBlob blobs Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08torture-ndr: fixed NDR tests for NTLMSSP blobsAndrew Tridgell1-4/+5
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08torture-ndr: fixed NDR tests for NBT blobsAndrew Tridgell1-2/+2
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08torture-ndr: fixed NDR tests for DFS blobsAndrew Tridgell1-3/+3
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08torture-ndr: added support for testing push functionsAndrew Tridgell2-25/+52
this allows us to check the symmetry of pull/push functions in NDR tests Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08pidl: added checking of NDR flags in generated codeAndrew Tridgell1-0/+8
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08libndr: add checking to all pull/push functions of base typesAndrew Tridgell1-0/+34
this checks that the passed in ndr_flags are valid Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08libndr: moved the NDR_* flags to have less overlapAndrew Tridgell1-8/+36
We have 3 different types of flags values in our NDR layer. We've recently found bugs where these types of flags have been mixed up, especially by people adding hand written ndr code for tricky structures. We previously got away with this because (for example) NDR_SCALARS and NDR_IN had the same value, so mixing up the two concepts sometimes worked. Unfortunately it also led to bugs where we didn't do what was expected, such as in our smbtorture ndr test suite, where passing a ndr_flags value of zero led to only checking that two empty structures were equal. This changes the values of the NDR_IN|NDR_OUT and NDR_SCALARS|NDR_BUFFERS values to be in different bit ranges, and adds macros for checking the validity of passed in flags. A followup patch modifies the ndr calls to use these macros, and pidl to generate them. This should catch misuse of the APIs. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08lib: added base64_decode_data_blob_talloc()Andrew Tridgell2-2/+19
its nice to be able to allocate on other than NULL Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-dsdb: fixed compiler warningAndrew Tridgell1-1/+1
sid can be const Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-08Tidy up previous patch for bug #8442 - NFSv4 DENY ACLs always include ↵Jeremy Allison1-5/+4
SYNCHRONIZE flag - blocking renames. aceType is an enum field, not a bitmask. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Thu Sep 8 03:34:39 CEST 2011 on sn-devel-104
2011-09-08s4-provision: Fill msDS-NC-Replica-Locations attribute in DNS provisioningAmitay Isaacs2-0/+4
This attribute is required by the hosting requirement. [MS_ADTS].pdf 7.1.2.3.1 DC and Application NC Replica Signed-off-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Sep 8 02:04:51 CEST 2011 on sn-devel-104
2011-09-08s4-provision: Make DNS entries consistent with dns_update scriptAmitay Isaacs1-4/+4
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-provision: Reworked DNS provisioning to support AD DNS schemaAmitay Isaacs1-114/+435
This changes configure DNS partitions used by AD DNS and populate with relevant entries. This has an advantage that Windows can replicate these partitions and set up dns server using them. In addition, these partitions are used by bind9_dlz module to query zone information directly and do not need to create text database for dynamic zones. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-provision: LDIF files to set up AD DNS schemaAmitay Isaacs5-3/+129
This files set up DomainDnsZones and ForestDnsZones partitions and other configuration parameters for replication. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-provision: Add DNS backend option to provisionAmitay Isaacs2-4/+10
This option is introduced temporarily to test bind9 backend with and without dlz_dlopen module. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-provision: exit is not imported directed, use sys.exitAmitay Isaacs1-1/+1
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08s4-provision: Extract dns account creation as separate ldifAmitay Isaacs2-92/+12
MicrosoftDNS container and LDAP entries for root servers will be added by sambadns.py directly. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-08samba-tool: Avoid use of "except .. as" construction introduced in python2.6.Jelmer Vernooij1-2/+3
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Thu Sep 8 00:34:22 CEST 2011 on sn-devel-104
2011-09-07Fix bug #8442 - NFSv4 DENY ACLs always include SYNCHRONIZE flag - blocking ↵Ira Cooper1-1/+7
renames. Thanks to Youzhong Yang for discovering this issue. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Sep 7 22:56:06 CEST 2011 on sn-devel-104
2011-09-07s3:winbind: put winbindd_cache into the state dir, not the cache dirMichael Adam1-1/+1
Despite the name, in winbind offline logon mode, this is a database that contains valuable information and should not be cleared. Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Wed Sep 7 21:17:37 CEST 2011 on sn-devel-104
2011-09-07s3:dbwrap_ctdb: improve error message in transaction destructorGregor Beck1-1/+2
Signed-off-by: Michael Adam <obnox@samba.org>
2011-09-07s3: let g_lock_unlock() return more specific status codes on failureGregor Beck1-2/+2
Signed-off-by: Michael Adam <obnox@samba.org>
2011-09-07s3: Fix Coverity ID 2611, UNINITVolker Lendecke1-0/+1
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Wed Sep 7 19:47:49 CEST 2011 on sn-devel-104
2011-09-07s3: Fix Coverity ID 2612, UNINITVolker Lendecke1-0/+1
2011-09-07s3:smb2cli: let smb2cli_req_create() use the give pid, uid and tid valuesStefan Metzmacher1-3/+3
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Sep 7 18:19:43 CEST 2011 on sn-devel-104
2011-09-07s3:smb2cli: pass the uid to the SMB2_SESSION_SETUP to support multi-leg-authStefan Metzmacher1-1/+2
metze
2011-09-07talloc: Remove an unused variableVolker Lendecke1-1/+0
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Wed Sep 7 16:47:26 CEST 2011 on sn-devel-104
2011-09-07s3:idmap/autorid add a small alloc pool to autoridChristian Ambach1-0/+52
this is needed to allocate gids for BUILTIN\Users and BUILTIN\Administrators gids are stored at the start of the first domain as RIDs start with values over 500, we have some room there so we do not need to allocate a range Autobuild-User: Christian Ambach <ambi@samba.org> Autobuild-Date: Wed Sep 7 15:15:09 CEST 2011 on sn-devel-104
2011-09-07s4-s3-upgrade: convert password age policies to the negative NTTIME formatAndrew Bartlett1-8/+21
This previously caused all accounts to be locked out. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Sep 7 13:44:44 CEST 2011 on sn-devel-104
2011-09-07lib/addns: Remove unused TALLOC_ macrosAndrew Bartlett1-42/+0
2011-09-07build: Replace mkbuildoptions-waf awk script with waf targetAmitay Isaacs3-277/+175
2011-09-07samba-tool: Add --filter option to ldapcmp to ignore specified attributesAmitay Isaacs1-9/+20
2011-09-07s4-kcc: Fix the list of NCs for DRS replica informationAmitay Isaacs1-3/+21
AD DNS partitions (DomainDnsZones and ForestDnsZones) are listed under msDs-hasMasterNCs attribute for post-2003 windows servers.
2011-09-07s3:smb2_server: return OBJECT_NAME_INVALID if the path is terminated in ↵Stefan Metzmacher1-0/+8
SMB2_FIND/QUERY_DIRECTORY metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Sep 7 12:15:51 CEST 2011 on sn-devel-104
2011-09-07s3:smb2_server: return OBJECT_NAME_INVALID if the path is terminated in ↵Stefan Metzmacher1-0/+8
SMB2_CREATE metze
2011-09-07s3:smb2_server: return BAD_NETWORK_NAME if the path is terminated in SMB2_TCONStefan Metzmacher1-0/+8
metze
2011-09-07s3:smb2_server: use smbd_smb2_request_verify_sizes() in smb2_write.cStefan Metzmacher1-12/+6
metze
2011-09-07s3:smb2_server: use smbd_smb2_request_verify_sizes() in smb2_setinfo.cStefan Metzmacher1-13/+5
metze
2011-09-07s3:smb2_server: use smbd_smb2_request_verify_sizes() in smb2_read.cStefan Metzmacher1-11/+5
metze
2011-09-07s3:smb2_server: use smbd_smb2_request_verify_sizes() in smb2_notify.cStefan Metzmacher1-12/+4
metze
2011-09-07s3:smb2_server: use smbd_smb2_request_verify_sizes() in smb2_lock.cStefan Metzmacher1-11/+5
metze