summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2009-09-17s4:provision - Some rework (continuation)Matthias Dieter Wallnöfer4-40/+311
- Fix up "servicePrincipalNames" attributes on the DC object - Add some informative comments (most in "provision_self_join.ldif") - Add also comments where objects are missing which we may add later when we support the feature (mainly for FRS) - Add "domain updates" objects also under "CN=Configuration" (they exist twice) - Add the default services under "Services" to allow interoperability with some MS client tools - Smaller changes
2009-09-17s3: build with pam support when possibleBjörn Jacke1-3/+3
2009-09-17Re-generated idl files with () for enum values.Jeremy Allison23-1014/+1014
Jeremy.
2009-09-17Ensure we enclose the enum values in brackets to make the cast work.Jeremy Allison1-0/+2
Jeremy.
2009-09-17Check in modified generated files for systems where pidl can't run.Jeremy Allison24-1066/+1068
Jeremy.
2009-09-17Merge branch 'master' of ssh://jra@git.samba.org/data/git/sambaJeremy Allison6-12/+61
2009-09-17Fix the problem with pidl generating invalid C for enums. AccordingJeremy Allison1-1/+9
to the C standard an enum is guarenteed to be an (int), which means for 4 byte ints specifying a type of 0x80000000 is an invalid value. The Solaris compiler complains about this. Fix by adding an (int) cast in front of the value generation. Jeremy.
2009-09-17spnego: Support ASN.1 BIT STRING and use it in SPNEGO.Kouhei Sutou6-12/+61
Signed-off-by: Günther Deschner <gd@samba.org>
2009-09-17pyldb: Don't segfault when invalid type is specified to as_sddl and from_sddl.Matthieu Patou2-2/+19
Fix bug #6723
2009-09-17s4:descriptor module - Revert and const fixupsMatthias Dieter Wallnöfer1-7/+18
- Revert a change introduced by me since I didn't understood the meaning of the version check - Added some "const" to suppress compiler warnings
2009-09-17s4:descriptor - cosmeticMatthias Dieter Wallnöfer1-1/+1
2009-09-17s4:libnet_become_dc - Fix some uninitialised variablesMatthias Dieter Wallnöfer1-3/+3
2009-09-17s4:provision - Some reworkMatthias Dieter Wallnöfer12-23610/+23878
- Add/change "wellKnownObjects" attributes - Order entries in "provision_basedn_modify.ldif" - Add/change "delete entries" object under BASEDN and CONFIGDN - Fix default version number of "Default domain policy" group policy - Add "domain updates" objects for interoperability with MS AD maintaining tools - Show version number in the "oEMInformation" attribute (suggested by ekacnet) - Smaller fixups
2009-09-17void functions can't return a value. Found by the Solaris compiler.Jeremy Allison1-1/+1
Jeremy.
2009-09-17void functions can't return a value. Found by the Solaris compiler.Jeremy Allison1-1/+1
Jeremy.
2009-09-17void functions can't return a value. Found by the Solaris compiler.Jeremy Allison1-1/+1
Jeremy.
2009-09-17We now pass the Microsoft SMB2 fileio test with EA's and streams...Jeremy Allison5-5/+69
Jeremy.
2009-09-17Remove ununsed variable warning.Jeremy Allison1-1/+0
Jeremy.
2009-09-17s4/domain behaviour flags: Fix them up in various locationsMatthias Dieter Wallnöfer4-16/+10
Additional notes: - Bump the level to Windows Server 2008 R2 (we should support always the latest version - if we provision ourself) - In "descriptor.c" the check for the "domainFunctionality" level shouldn't be needed: ACL owner groups (not owner user) are supported since Windows 2000 Server (first AD edition) - I took the argument from: http://support.microsoft.com/kb/329194
2009-09-17s4/python: flagsMatthias Dieter Wallnöfer2-9/+83
- Introduce the "userAccountControl", "groupType" and "sAMAccountType" flags - Corrects the "domain/forestFunctionality" and "domainControllerFunctionality" flags
2009-09-17libds/common/flags: variousMatthias Dieter Wallnöfer2-28/+36
- Reorders the header file to have the order "userAccountFlags", "groupType", "sAMAccountType" (matches the order in the flag_mapping.c and samldb module) - Fixes the group account flags properly up - Fixes the flags for "domain/forestFunctionality" and "domainControllerFunctionality" up
2009-09-16Merge branch 'master' of /home/tridge/samba/git/combinedAndrew Tridgell0-0/+0
2009-09-16s4-repl: raise a debug levelAndrew Tridgell1-1/+1
2009-09-16s4-dsdb: treat uSNHighest as 0 if @REPLCHANGED doesn't existAndrew Tridgell1-0/+8
When a partition is first created it still needs a uSNHighest value
2009-09-16Merge branch 'master' of /home/tridge/samba/git/combinedAndrew Tridgell19-393/+387
2009-09-16s4-repl: raise a debug levelAndrew Tridgell1-1/+1
2009-09-16Merge branch 'master' of ssh://git.samba.org/data/git/sambaAndrew Tridgell18-392/+386
2009-09-16Merge branch 'master' of /home/tridge/samba/git/combinedAndrew Tridgell1-0/+8
2009-09-16s4-dsdb: treat uSNHighest as 0 if @REPLCHANGED doesn't existAndrew Tridgell1-0/+8
When a partition is first created it still needs a uSNHighest value
2009-09-16libcli/auth: rewrite schannel sign/seal code to be more genericStefan Metzmacher5-229/+263
This prepares support for HMAC-SHA256/AES. metze
2009-09-16lib/crypto: include aes.h into crypto.hStefan Metzmacher1-1/+1
metze
2009-09-15Merge branch 'master' of /home/tridge/samba/git/combinedAndrew Tridgell5-35/+123
2009-09-15s4-repl: take advantage of async RPC forwardingAndrew Tridgell2-26/+7
This uses async RPC forwarding for the DsReplicaSync call
2009-09-15s4-rpc: added a module for forwarding RPC requestsAndrew Tridgell3-9/+116
dcesrv_irpc_forward_rpc_call() can be used to forward an arbitrary RPC request to another task in Samba4, with the return being handled asynchronously. This is useful for forwarding DRS requests to the repl or kcc tasks
2009-09-15Merge branch 'master' of /home/tridge/samba/git/combinedAndrew Tridgell6-22/+64
2009-09-15s4-drs: lock down key DRS callsAndrew Tridgell4-22/+54
The key DRS calls should only be allowed by administrators or domain controllers
2009-09-15s4-security: added a new security level SECURITY_DOMAIN_CONTROLLERAndrew Tridgell2-0/+10
This will be used as a simple way to lock down DRS replication to administrators and domain controllers
2009-09-15Merge branch 'master' of /home/tridge/samba/git/combinedAndrew Tridgell22-439/+1748
2009-09-15s4-ldb: ldap attribute names can contain a '.'Andrew Tridgell1-1/+2
When they are of the form of OIDs
2009-09-15s4-ldb: expose ldb_transaction_prepare_commit() in ldbAndrew Tridgell3-21/+64
It is useful to be able to control the 2 phase commit from application code (s4 replication uses it)
2009-09-15s4-repl: don't do double replicationAndrew Tridgell4-6/+44
When we replicate from a remote DC, we need to note the new uSN that the local changes have resulted in, and modify the uSN that the notify task uses to determine if it should send a ReplicaSync message back to the remote DC. Otherwise we end up always triggering a ReplicaSync every time we replicate from another DC
2009-09-15tdb: allow reads after prepare commitAndrew Tridgell1-8/+0
We previously only allowed a commit to happen after a prepare commit. It is in fact safe to allow reads between a prepare and a commit, and the s4 replication code can make use of that, so allow it.
2009-09-15s4-drs: filter based on local_usnAndrew Tridgell1-1/+1
The getncchanges uSN is in our local space, so we must compare it to the local_usn in replPropertyMetaData
2009-09-15s4-repl: make sure we marshal the replPropertyMetaData after the last changeAndrew Tridgell1-10/+10
we were setting local_usn after the marshall, so it wasn't going into the object
2009-09-15s4-dsdb: use DLIST_ADD() not DLIST_ADD_END()Andrew Tridgell2-4/+4
Using DLIST_ADD_END() to construct a long list is very inefficient (it is O(n^2). These lists are not ordered, so using DLIST_ADD() is much better.
2009-09-15s4-ldb: cope better with corruption of tdb recordsAndrew Tridgell4-5/+30
When doing an indexed search if we hit a corrupt record we abandoned the indexed search and did a full search. The problem was that we might have sent some records to the caller already, which means the caller ended up with duplicate records. Fix this by returning a search error if indexing returns an error and we have given any records to the caller.
2009-09-15talloc: when we enable NULL tracking, reparent the autofree contextAndrew Tridgell1-0/+3
If NULL tracking is enabled after the autofree context is initialised then autofree ends up separate from the null_context. This means that talloc_report_full() doesn't report the autofree context. Fix this by reparenting the autofree context when we create the null_context.
2009-09-15s4-repl: add a debug to make it easier to monitor replicationAndrew Tridgell1-0/+5
2009-09-16s3: Fix reading beyond the end of a named stream in xattr_streamsVolker Lendecke1-2/+1
This was found thanks to a test by Sivani from Microsoft against Samba at the SDC plugfest
2009-09-16s3: Add some debugs to streams_xattrVolker Lendecke1-0/+6
generated by cgit (git 2.34.1) at 2025-02-10 03:58:15 +0000