summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2010-01-09s4-debug: lower the verbosity of a couple of common log messagesAndrew Tridgell2-2/+2
2010-01-09s4-samldb: fixed primaryGroupID when promoting a machine to a DCAndrew Tridgell1-17/+30
The machine gets a primaryGroupID of DOMAIN_RID_DCS. This is done without changing the member attributes of its groups.
2010-01-09s4-schema: fixed the SDDL for the schema root security descriptorAndrew Tridgell1-10/+14
This was preventing a DCPROMO client from allowing outgoing replication
2010-01-09s4-drs: add a local UDV entry even when no replUpToDateVector present on NCAndrew Tridgell1-3/+3
This allows us to filter correctly for a NC that we have created but not pulled from anyone.
2010-01-09s4-drs: give DN of failed replication partitionAndrew Tridgell1-4/+5
2010-01-09s4-drs: base is_nc_prefix on instanceTypeAndrew Tridgell1-1/+3
for extended operations comparing to the ncRoot_dn is not correct
2010-01-09s4-drs: having no SPNs to change is not an errorAndrew Tridgell1-0/+7
2010-01-09s4-drs: fixed writespn to ignore add/delete errorsAndrew Tridgell1-3/+40
When a SPN is added and already exists, it is ignored. Similarly, when a SPN is deleted and doesn't exist, it is ignored.
2010-01-09s4-dsdb: added samdb_ldb_val_case_cmp()Andrew Tridgell1-0/+16
2010-01-09s4-drs: moved the DsWriteAccountSpn call to its own fileAndrew Tridgell4-75/+104
2010-01-09s4-libnet: dsdb_wellknown_dn() in vampire codeAndrew Tridgell1-60/+17
2010-01-09s4-drs: need to set the getncchanges extended_ret on success tooAndrew Tridgell1-0/+3
2010-01-09s4-drs: calculate and send a uptodateness_vector with replication requestsAndrew Tridgell2-7/+82
This stops us getting objects changes twice if they came via an indirect path.
2010-01-09s4-drs: be less verbose when we filter objects by UDVAndrew Tridgell1-5/+5
2010-01-09s4-drs: added filtering by udv in getncchangesAndrew Tridgell2-9/+63
When a client supplied an uptodateness_vector, we can use it to filter what objects we return. This greatly reduces the amount of replication traffic between DCs.
2010-01-09s4-idl: give a enum for attribute cn and a 'NONE' attributeAndrew Tridgell3-2/+10
The 'NONE' attribute has value 0xFFFFFFFF. Adding this ensures the compiler will complain if it is set to use 16 bit enums. We rely on being able to store 32 bits in an attid enum.
2010-01-09s4-drs: fixed the NC in the getncchanges RID alloc replyAndrew Tridgell1-11/+13
the search happens on a different DN to the NC of the request, but the reply is with the original NC
2010-01-09s4-debug: removed debug_ctx(). It didn't catch on :-)Andrew Tridgell1-4/+0
There was only one user, which isn't worth it for the overhead.
2010-01-09s4-messaging: remove only usage of debug_ctx()Andrew Tridgell1-2/+4
2010-01-09s4-messaging: fixed a memory leak in messaging_path()Andrew Tridgell1-2/+9
It is a bit convoluted to fix, as cluster_id_string() may return a const string.
2010-01-09s4-drs: fixed usage of ldb_dn_new()Andrew Tridgell1-1/+1
2010-01-09s4-ldb: validate the type of the ldb argument to ldb_dn_new()Andrew Tridgell1-1/+7
It has been a common bug to get the first two arguments the wrong way around
2010-01-08Fix commentSimo Sorce1-1/+1
2010-01-08Re-fix bug 5202 - cannot change ACLs on writable file with "dos filemode=yes"Jeremy Allison1-0/+3
This bug re-occurred for 3.3.x and above. The reason is that to change a NT ACL we now have to open the file requesting WRITE_DAC and WRITE_OWNER access. The mapping from POSIX "w" to NT permissions in posix_acls doesn't add these bits when "dos filemode = yes", so even though the permission or owner change would be allowed by the POSIX ACL code, the NTCreateX call fails with ACCESS_DENIED now we always check NT permissions first. Added in the mapping from "w" to WRITE_DAC and WRITE_OWNER access. Jeremy.
2010-01-08s4:provision_self_join.ldif - Adapt comment after implementation of ↵Matthias Dieter Wallnöfer1-2/+2
distributed RIDs
2010-01-08s4-kdc: Migrate tcp connections to tsocket.Andreas Schneider1-89/+188
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-01-08s4:kdc: use LIBSAMBA_TSOCKETStefan Metzmacher1-1/+1
metze
2010-01-08s4:kdc: the ->process function returns "bool"Stefan Metzmacher1-9/+9
metze
2010-01-08libcli/util: add tstream_read_pdu_blob_send/recvStefan Metzmacher3-0/+251
This will take the some full_request callback function as the Samba4 packet code. metze
2010-01-08s3-time: fix build warnings after we moved to shared time functions.Günther Deschner1-6/+6
Bjoern, please check. Guenther
2010-01-08s3-docs: mention -K option in pdbedit manpage.Günther Deschner1-0/+1
Guenther
2010-01-08s4-drs: added two more SPNs in addentryAndrew Tridgell1-13/+32
w2k8r2 wants these after a DCPROMO Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08s4-schema: fixes for W2K8-R2 schemaAndrew Tridgell2-35/+143
The schema from WSPP had a number of typos that prevented it from working. These changes allow it to work with Samba, and allow w2k8r2 to run DCPROMO against Samba successfully Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08s4-schema: added msDS-NcType to schema containerAndrew Tridgell1-0/+1
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08s4-schema: fixed attributes of aggregate schemaAndrew Tridgell1-0/+2
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08s4-schema: switch to W2K8-R2 schemaAndrew Tridgell1-2/+2
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08s4-schema: added adminDisplayName and adminDescriptionAndrew Tridgell1-0/+2
These are missing from the WSPP schemas Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08s4-schema: added some debug for bad attributesAndrew Tridgell1-0/+8
2010-01-08s4-provision: added W2K8-R2 schema as provided by WSPPAndrew Tridgell2-0/+19529
2010-01-08s4-samba3samtest: we need to force netbios name as wellAndrew Tridgell1-0/+1
needed for when run in CLIENT context
2010-01-08s4-samba3sid: fixed error returns when res->count != 1 and oomAndrew Tridgell1-3/+3
2010-01-08s4-samba3samtest: force workgroup so the domain is rightAndrew Tridgell1-0/+1
the samba3sid backend looks at lp_sam_name() which is based on the workgroup
2010-01-08s4-samba3sid: the sambaNextRid attribute is actually the previous RIDAndrew Tridgell1-3/+6
Not well named .... though same mistake that MS made with rIDNextRid
2010-01-08s4-samba3sam: use samba3sid moduleAndrew Tridgell1-1/+3
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08s4-dsdb: added a samba3sid moduleAndrew Tridgell2-1/+208
This module allocates SIDs using the Samba3 algorithm, for use with the samba3sam module. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08s4-acl: fixed acl.py test to use correct ldifAndrew Tridgell1-1/+2
same problem as sec_descriptor.py
2010-01-08s4-secdesc: fixed the sec_descriptor.py testAndrew Tridgell1-42/+74
The test was using a "changetype: add" to try and add a member to a group, where it should use a "changetype: modify" with a "add: member" Also fixed the recovery when the test fails part way through (delete the test users at the start as well as the end) Nadya, please check!
2010-01-08s4-samba3samtest: use system credentials for creating usersAndrew Tridgell1-5/+6
2010-01-08s4-dsdb: fixed const misuse in acl moduleAndrew Tridgell1-4/+4
2010-01-08s4-dsdb: use dsdb_module_am_system() in acl moduleAndrew Tridgell1-19/+11
generated by cgit (git 2.34.1) at 2024-07-03 16:56:20 +0000