summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2012-05-03s4-s3upgrade: Force ldapsam:trusted = yesAndrew Bartlett1-0/+3
While this setting is not the default in Samba3, any domain that is in a suitable condition to upgrade to Samba4 should already be in the layout that ldapsam:trusted uses. It can be turned off by setting ldapsam:trusted=false in the smb.conf. Many upgrades to Samba4 happen on a different host to the old Samba3 domain and this avoids the need to configure nss_ldap only for the duration of the upgrade. Andrew Bartlett
2012-05-03Extension to the samba-tool group subcommand functionality to allow listing ↵Lukasz Zalewski3-0/+91
of the members of an AD group
2012-05-03s4-s3upgrade: Try harder to get group memberships on upgradeAndrew Bartlett1-5/+20
This fixes an issue where some group types were not upgraded, as we did not upgrade alias memberships. It also uses enum_group_memberships() to try and find the memberships from the other direction, by asking which groups a user is a member of. As Samba3 (and NT4) does not implement nested groups, this should be safe. Andrew Bartlett
2012-05-03s3-pypassdb: add wrapper for enum_group_membershipsAndrew Bartlett1-1/+57
This will be used in samba3upgrade to try and get the group memberships by instead asking for the groups each user is in. This reverse lookup may be more reliable, as this is used at login time. Andrew Bartlett
2012-05-03s3-pypassdb: remove unused variableAndrew Bartlett1-2/+0
2012-05-02s4:torture:rpc: add a new test samba3.smb2-pipe-read-logoffMichael Adam1-0/+85
- open a pipe via smb2 - trigger a read which hangs since there is nothing to read - do a logoff - wait for the read to return and check the status (STATUS_PIPE_BROKEN) Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Wed May 2 19:57:45 CEST 2012 on sn-devel-104
2012-05-02s4:torture:rpc: add a new test samba3.smb2.pipe-read-tdisMichael Adam1-0/+85
- open a pipe via smb2 - trigger a read which hangs since there is nothing to read - do a tree disconnect - wait for the read to return and check the status (STATUS_PIPE_BROKEN)
2012-05-02s4:torture:rpc: add a test samba3.smb2-pipe-read-closeMichael Adam1-0/+87
* open a pipe via smb2 * trigger a read which hangs since there is nothing to read * close the pipe file handle * wait for the read to reaturn and check the status (NT_STATUS_PIPE_BROKEN)
2012-05-02s4:torture:rpc: fix a comment typo in samba3.smb2-reauth2Michael Adam1-1/+1
2012-05-02s4:torture:rpc: remove an accidentially committed character (in a comment)Michael Adam1-1/+1
2012-05-02s3-passdb: Add extra debug on ID mapping failuresAndrew Bartlett1-0/+7
Signed-off-by: Michael Adam <obnox@samba.org> Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Wed May 2 15:34:13 CEST 2012 on sn-devel-104
2012-05-02s3-idmap: remove (now) unused function idmap_cache_set_sid2both()Andrew Bartlett2-25/+0
Signed-off-by: Michael Adam <obnox@samba.org>
2012-05-02s3-idmap: convert most idmap_cache callers to unixid APIAndrew Bartlett4-55/+52
This will eventually allow the struct unixid to be passed all the way up and down the stack. Andrew Bartlett Signed-off-by: Michael Adam <obnox@samba.org>
2012-05-02s3-idmap: Rework idmap_cache to store ID_TYPE_BOTH valuesAndrew Bartlett2-176/+240
This required that the lower level cache store a UID/GID and a type, and that we operate on struct unixid rather than just uid/gid. The ID_TYPE_BOTH is then handled as being a positive mapping for both a UID and GID value. Wrapper functions are provided so that callers are not changed in this patch. Andrew Bartlett Signed-off-by: Michael Adam <obnox@samba.org>
2012-05-02s3-winbindd: Do not use WBC_ types internally in winbinddAndrew Bartlett1-3/+5
Use the types from idmap.idl instead Signed-off-by: Michael Adam <obnox@samba.org>
2012-05-02s3:passdb: remove a forward declaration of wbcSidToUnixId that has become ↵Michael Adam1-1/+0
unnecessary
2012-05-02s3:passdb: rename sids_to_unix_ids() --> sids_to_unixids() for consistencyMichael Adam3-4/+4
2012-05-02s3-passdb: Use struct unixid in sids_to_unix_idsAndrew Bartlett3-24/+39
This avoids the union in the struct wbcUnixId and moves us to using only struct unixid internally. Andrew Bartlett Signed-off-by: Michael Adam <obnox@samba.org>
2012-05-02s3-passdb: Rename legacy_sid_to_id -> legacy_sid_to_unixid for clarityAndrew Bartlett1-3/+3
Signed-off-by: Michael Adam <obnox@samba.org>
2012-05-02s3-passdb: Change pdb_sid_to_id() to return struct unixidAndrew Bartlett9-161/+147
This will make it easier to consistantly pass a struct unixid all the way up and down the idmap stack, and allow ID_TYPE_BOTH to be handled correctly. Andrew Bartlett Signed-off-by: Michael Adam <obnox@samba.org>
2012-05-02selftest: make the knownfail patterns for the driver_info_winreg more specificMichael Adam1-2/+2
Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Wed May 2 11:23:26 CEST 2012 on sn-devel-104
2012-05-02s4-provision: Fix up --use-s3fs to create the directory for xattr.tdbAndrew Bartlett1-4/+8
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed May 2 04:45:05 CEST 2012 on sn-devel-104
2012-05-02s4-wintest: --use-s3fs in wintestAndrew Bartlett1-1/+2
2012-05-02s4-provision: Fix --use-s3fs to parse correctlyAndrew Bartlett1-1/+1
2012-05-02testsuite/libsmbclient: Remove unused and expensive-to-link testsuiteAndrew Bartlett149-11526/+0
This testsuite never got off the ground, and unlike the other libsmbclient tests, it is not integrated into make test, has no driver script we could integrate. As it has been in this state for 10 years, and adding it to the compile did not find any link-time issues (particularly in comparison to the link-time cost for so many individual binaries), I am now removing them. The libsmbclient examples are seperate to this, and remain in examples/libsmbclient. Andrew Bartlett
2012-05-02selftest: 'store dos attributes = yes' is now set in fileserver.confAndrew Bartlett1-4/+0
As such, there is no need to set it or the permissions-based mappings here as well. Andrew Bartlett
2012-05-02s4-provision: set 'dcerpc endpoint servers' but not 'vfs objects'Andrew Bartlett1-1/+1
The VFS objects are now set in the fileserver.conf, but this is only read by smbd, so the provision-time smb.conf needs to turn off the extra Samba4 DCE/RPC services. Andrew Bartlett
2012-05-02file_server: set 'store dos attributes = yes'Andrew Bartlett1-0/+5
This means we do not need the old permissions-based mappings. Andrew Bartlett
2012-05-02selftest: run more raw.samba3 against secshare simple file serverAndrew Bartlett1-1/+1
This allows these tests to run in an environment where they can pass, as they fail when ACL support is turned on in smbd. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed May 2 02:51:27 CEST 2012 on sn-devel-104
2012-05-02selftest: Run smbtorture tests being run against s3dc against plugin_s4_dc ↵Andrew Bartlett1-3/+7
as well
2012-05-02selftest: Do not start samba4 srvsvc in plugin_s4_dc modeAndrew Bartlett1-1/+1
2012-05-02selftest: add hooks required for printing to Samba4.pmAndrew Bartlett1-0/+16
2012-05-02selftest: mark samba3.raw.samba3checkfsp as flapping on plugin_s4_dcAndrew Bartlett2-2/+4
This fails on my Fedora 16 workstation, but passes on sn-devel. Andrew Bartlett
2012-05-02selftest: mark samba3.raw.acls.inheritance(plugin_s4_dc) as flappingAndrew Bartlett2-4/+4
This seems to succeed on sn-devel, but fails in a local make test on my workstation. Andrew Bartlett
2012-05-02selftest: add knownfail entries for plugin_s4_dc testsAndrew Bartlett1-0/+112
2012-05-02selftest: change knownfail to cope with running plugin_s4_dc as wellAndrew Bartlett1-1/+1
2012-05-02file_server: use embedded srvsvcAndrew Bartlett1-0/+1
2012-05-02file_server: Use the embedded winreg serverAndrew Bartlett1-0/+1
2012-05-02file_server: use embedded ntsvcs serverAndrew Bartlett1-0/+1
2012-05-02file_server: use embedded eventlog serverAndrew Bartlett1-0/+1
2012-05-02file_server: forward dssetup, but use embedded svcctl for s3fsAndrew Bartlett1-1/+1
2012-05-02selftest: Use same pattern for path to share as Samba3.pmAndrew Bartlett1-13/+15
This helps as we declare tests that were previously targetted at Samba3 only. Andrew Bartlett
2012-05-02selftest: Add hideunread share to plugin_s4_dcAndrew Bartlett1-0/+3
2012-05-02selftest: run plugin_s4_dc with 'acl_xattr xattr_tdb streams_depot' VFS modulesAndrew Bartlett1-0/+1
2012-05-02selftest: prepare to run smbtorture tests against plugin_s4_dcAndrew Bartlett1-10/+47
2012-05-02selftest: attempt to test samba3hide in a different environmentAndrew Bartlett2-0/+5
This should ensure that the samba3hide test is still run and passes, in a non-ACLed environment. Andrew Bartlett
2012-05-02selftest: Enable ACL testing against the s3dc environmentAndrew Bartlett3-10/+5
Previously, ACL tests were skipped and the correct modules for ACL testing were not loaded. The addition of a knownfail entry for raw.samba3* tests is due to an inconsitancy between the behaviour with and without ACL modules loaded - posix chown calls appear to be ignored in this mode. Andrew Bartlett
2012-05-02s3-smbd: Use security_session_user_level() rather than nt_token_check_sid()Andrew Bartlett1-13/+1
This allows the unix.whoami test to pass when configured as part of the AD DC. The struct auth_session_info is slightly different in the AD DC configuration when using auth_samba4. In particular, there is a distinction between Guest and Anonymous logins. Andrew Bartlett
2012-05-02s3:torture fix flakey testcaseChristian Ambach1-6/+20
don't put database into /tmp, use lp_private_dir() to put it into the selftest prefix Autobuild-User: Christian Ambach <ambi@samba.org> Autobuild-Date: Wed May 2 00:57:05 CEST 2012 on sn-devel-104
2012-05-01s3:selftest run LOCAL-IDMAP-TDB-COMMON in make testChristian Ambach1-0/+1
Autobuild-User: Christian Ambach <ambi@samba.org> Autobuild-Date: Tue May 1 11:07:08 CEST 2012 on sn-devel-104