Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2009-10-17 | s4-security: honor more of the privilege access bits | Andrew Tridgell | 1 | -4/+12 | |
2009-10-17 | s4-torture: add a special check for administrators and privileges | Andrew Tridgell | 4 | -18/+57 | |
lsa privileges calls don't expand groups. darn. | |||||
2009-10-17 | s4-lsasrv: make sure only admins can alter privileges | Andrew Tridgell | 1 | -0/+6 | |
2009-10-17 | s4-provision: added the default privileges db | Andrew Tridgell | 2 | -0/+99 | |
privileges are now stored in a separate database | |||||
2009-10-17 | s4-provision: removed the old privilege attributes | Andrew Tridgell | 2 | -53/+14 | |
Our schema is getting a bit cleaner :-) | |||||
2009-10-17 | s4-torture: show the sid we are basing privilege tests on | Andrew Tridgell | 1 | -2/+6 | |
2009-10-17 | s4-privileges: moved privileges to private/privilege.ldb | Andrew Tridgell | 4 | -38/+70 | |
We were storing privileges in the sam, which was OK when we were a standalone DC, but is no good when we replicate with a windows DC. This moves the privileges to a separate (local) database | |||||
2009-10-17 | added NT_STATUS_NOT_OK_RETURN_AND_FREE() | Andrew Tridgell | 1 | -0/+7 | |
Try to make it a bit easier to avoid leaks in common code | |||||
2009-10-16 | Add comment explaining about symlink following & posix. | Jeremy Allison | 1 | -1/+6 | |
Jeremy. | |||||
2009-10-16 | Last 2 VFS_STAT -> LSTAT fixes I can see in the modules code. | Jeremy Allison | 2 | -2/+14 | |
Jeremy. | |||||
2009-10-16 | Fix one missing STAT -> LSTAT with POSIX pathnames in vfs_xattr_tdb.c. ↵ | Jeremy Allison | 2 | -1/+9 | |
Caught by the torture tester. I love unit tests :-). Jeremy. | |||||
2009-10-16 | s3: build pam_smbpass when possible | Björn Jacke | 1 | -20/+34 | |
2009-10-16 | s3-netlogon: fix updating trust accout passwords with downlevel domains. | Günther Deschner | 1 | -2/+2 | |
When choosing the netlogon password set function, make sure to look at the *negotiated* flags in the cli->dc state, not the ones we start the negotiation with. Guenther | |||||
2009-10-16 | nsswitch: increase libwbclient version after adding wbcChangeTrustCredentials(). | Günther Deschner | 1 | -1/+2 | |
Guenther | |||||
2009-10-16 | s3:packaging: Fix building RHEL packages. | Karolin Seeger | 2 | -6/+23 | |
Fix bug #6721. Thanks to Eero Volotinen <eero.volotinen@medicel.com> for providing the patch! Karolin | |||||
2009-10-16 | s3:srv_samr_nt - another fix for the reject reason | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
2009-10-16 | s4-smbtorture: extend netr_LogonControl test in RPC-NETLOGON. | Günther Deschner | 1 | -3/+109 | |
Guenther | |||||
2009-10-16 | s3-netlogon: Fix _netr_ServerPasswordSet2 cleartext blob handling. | Günther Deschner | 1 | -1/+4 | |
Following Andrew's advice, let's straight md4 the plaintext blob and avoid trying to get a paintext string out of the input the client sends. Guenther | |||||
2009-10-16 | s4-smbtorture: test wbcLookupUserSids in WINBIND-WBCLIENT as well. | Günther Deschner | 1 | -1/+4 | |
Guenther | |||||
2009-10-16 | s4-smbtorture: test wbcGuidToString and friends as well in WINBIND-WBCLIENT. | Günther Deschner | 1 | -0/+34 | |
Guenther | |||||
2009-10-16 | s4:provision - fixed invalid creationTime format | Endi S. Dewata | 1 | -2/+2 | |
2009-10-16 | s4:ldb - fixed dangling pointer in ldb_request_add_control() | Endi S. Dewata | 1 | -2/+7 | |
2009-10-16 | s4:auth - fixed problem reading bind DN from secrets database | Endi S. Dewata | 2 | -0/+8 | |
2009-10-16 | s4:provision - replaced linked_attributes with FDS plugins | Endi S. Dewata | 7 | -3/+100 | |
When FDS is used as a backend, Samba should not use the linked_attributes LDB module, but instead use the built-in DS plugins for attribute linking, indexing, and referential integrity. | |||||
2009-10-16 | s4:auth_sam: Restructure tail in "authsam_get_server_info_principal" and fix ↵ | Matthias Dieter Wallnöfer | 1 | -3/+8 | |
a memory leak | |||||
2009-10-16 | s4:winsdb - Substitute LDB result numbers with constants | Matthias Dieter Wallnöfer | 1 | -19/+20 | |
2009-10-16 | s3: Try to fix the build on Solaris & AIX regarding the password change ↵ | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
reject reason | |||||
2009-10-16 | s4/drs(tort): prefixMap unit test initial implementatoin | Kamen Mazdrashki | 3 | -1/+84 | |
2009-10-16 | s4/drs: prefixMap module initial definition | Kamen Mazdrashki | 3 | -1/+69 | |
2009-10-16 | s4/drs(tort): fix compile time warning | Kamen Mazdrashki | 1 | -0/+1 | |
2009-10-16 | s4/drs(tort): _drs_util_verify_attids() to verify ATTIDs in objects received | Kamen Mazdrashki | 1 | -0/+50 | |
2009-10-16 | s4/drs(tort): drs_util_DsAttributeId_to_string() function | Kamen Mazdrashki | 1 | -0/+74 | |
2009-10-16 | s4/drs(tort): _drs_ldap_attr_by_oid() implementation | Kamen Mazdrashki | 1 | -0/+49 | |
Utility function to be used to fetch Attribute name and DN giving attribute OID | |||||
2009-10-16 | s4/drs(tort): ignore drs/proto.h file | Kamen Mazdrashki | 1 | -0/+1 | |
2009-10-16 | s4/drs(tort): oid_from_attid() reference implementation | Kamen Mazdrashki | 2 | -1/+96 | |
Decode Attribute OID using prefixMap and ATTID received during replication Based on MS documentation. See MS-DRSR.pdf - 5.16.4 | |||||
2009-10-16 | s4/drs(tort): TORTURE_DRS torture module - initial implementation | Kamen Mazdrashki | 4 | -0/+95 | |
Drsuapi tests module registers two suites: - DRS-RPC - tests to be executed against remote machine - DRS-UNIT - unit test for internal testing | |||||
2009-10-16 | s4/drs: Propagate redefinition of drsuapi_DsReplicaOID into code base | Kamen Mazdrashki | 2 | -69/+134 | |
The biggest change is that 'oid' field is transmited in binary format. Also the field name is changed to 'binary_oid' so that field format to be clear for callers. After those changes, Samba4 should work the way it works before - i.e. no added value here but we should not fail when partial-oid is part of prefixMap transmited from Win server. Also, thre is a bug in this patch - partial-binary-OIDs are not handled correctly. Partial-binary-OIDs received during replication will be encoded, but not handled correctly. | |||||
2009-10-16 | s4/drs(NDR): Print implementation for drsuapi_DsReplicaOID | Kamen Mazdrashki | 1 | -0/+19 | |
Custom ndr_print functions is implemented so that transmited partia-binary-oid to be printed both in hex and partial-oid formats | |||||
2009-10-16 | s4/drs(NDR): Remove push/pull code for drsuapi_DsReplicaOID struct | Kamen Mazdrashki | 2 | -100/+0 | |
New structure definition is automarshaled so custom marshaling code is not used anymore | |||||
2009-10-16 | s4/asn1: Use explicite TALLOC_CTX in ber_write_OID functions | Kamen Mazdrashki | 3 | -16/+16 | |
2009-10-16 | s4/drs(idl): Regenerate idl | Kamen Mazdrashki | 3 | -15/+50 | |
2009-10-16 | s4/drs(idl): Redefine drsuapi_DsReplicaOID in drsuapi.idl | Kamen Mazdrashki | 1 | -3/+3 | |
Structure redefined to be more similar with OID_t structure defined in [ref. MS-DRSR.pdf - p.496]. | |||||
2009-10-16 | s3-libnetapi: add nltest tool. | Günther Deschner | 2 | -1/+258 | |
Guenther | |||||
2009-10-16 | s3-libnetapi: add I_NetLogonControl{2} example code. | Günther Deschner | 3 | -1/+303 | |
Guenther | |||||
2009-10-16 | s3-libnetapi: add I_NetLogonControl{2} to public headers. | Günther Deschner | 1 | -1/+91 | |
Guenther | |||||
2009-10-16 | s3-libnetapi: fill in I_NetLogonControl{2}_r. | Günther Deschner | 1 | -2/+181 | |
Guenther | |||||
2009-10-16 | s3-libnetapi: add I_NetLogonControl{2} skeleton. | Günther Deschner | 4 | -1/+174 | |
Guenther | |||||
2009-10-16 | s3-libnetapi: add I_NetLogonControl{2} to IDL. | Günther Deschner | 4 | -1/+188 | |
Guenther | |||||
2009-10-16 | s4-winsrepl: don't put in attributes with no elements | Andrew Tridgell | 1 | -2/+2 | |
Empty attributes are no longer allowed by ldb. This also fixes the error checking in winsdb_message() This fixes the samba4.nbt.winsreplication test | |||||
2009-10-16 | s3-selftest: enable WINBIND-WBCLIENT against s3. | Günther Deschner | 1 | -1/+3 | |
Guenther |