summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2010-04-22s4-drs: validate RODC credentials via the user_sidAndrew Tridgell1-27/+12
This checks whether a replication client is a RODC by inclusion of the the DOMAIN_RID_ENTERPRISE_READONLY_DCS sid in the users token Pair-Programmed-With: Rusty Russell <rusty@samba.org> Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-22s4-drs: added new SECURITY_RO_DOMAIN_CONTROLLER levelAndrew Tridgell13-37/+69
This is used for allowing operations by RODCs, and denying them operations that should only be allowed for a full DC This required a new domain_sid argument to security_session_user_level() Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Rusty Russell <rusty@samba.org>
2010-04-22s4-net: fixed two compiler warningsAndrew Tridgell1-6/+4
2010-04-22s4-torture: fixed a initialiserAndrew Tridgell1-1/+1
we were not initialising the whole array Pair-Programmed-With: Rusty Russell <rusty@samba.org> Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-22s4-libnet: fixed two compiler warningsAndrew Tridgell1-3/+2
2010-04-22s4-drs: removed dsdb_validate_client_flags()Andrew Tridgell2-37/+0
This test is in the wrong place. We end up validating our own flags. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-22s4-drs: only allow replication with the right invocationIdAndrew Tridgell1-1/+20
Non-administrator replication checks the invocationId matches the sid of the user token being used Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-22s4-dsdb: removed an unused variableAndrew Tridgell1-1/+0
2010-04-22s4-dsdb: added dsdb_validate_invocation_id()Andrew Tridgell1-0/+87
this validates that a invocationID matches an account sid This will be used to ensure that we don't allow DRS replication from someone a non-DC or administrator Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-22s4-dsdb: added dsdb_get_extended_dn_sid()Andrew Tridgell2-12/+34
This will be used by the RODC code Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-22build: we don't need this makefile magic any moreAndrew Tridgell1-2/+2
The waf build now checks for all A=B variables passed via make and sets the same waf internal variable. This means all waf options are available via make. Removing this from the Makefile makes us less reliant on a modern version of make. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-22s4-dsdb: moved rodc schema validation to samldb.cAndrew Tridgell2-33/+37
This means we are only doing the checks for schema changes Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-22s4-drs: Use new samdb_rodc() function in s4 codeFernando J V da Silva2-2/+4
This patch fits the calling to the new samdb_rodc() function and fix a little bug in this function. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-04-22s4-drs: Do not send RODC filtered attributes to RODCs on GetNCChanges replyFernando J V da Silva1-0/+14
During building an object to send it on a GetNCChanges reply, it checks the attributes and if any of them is a RODC filtered and the recipient is a RODC, then such attribute is not sent. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-04-22s40-drs: Do not send GetNCChanges messages to RODCsFernando J V da Silva1-0/+11
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-04-22s4-drs: dsdb_validate_client_flags() functionFernando J V da Silva1-0/+28
This function is intended to check if some client is not lying about his flags. At this moment, it only checks for RODC flags. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-04-22s4-drs: samdb_is_rodc() function and new samdb_rodc() functionFernando J V da Silva6-39/+80
This patch creates the samdb_is_rodc() function, which looks for the NTDSDSA object for a DC that has a specific invocationId and if msDS-isRODC is present on such object and it is TRUE, then consider the DC as a RODC. The new samdb_rodc() function uses the samdb_is_rodc() function for the local server. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-04-22s4-drs: Do not allow system-critical attributes to be RODC filteredFernando J V da Silva2-0/+36
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-04-22s4:provision Make OpenLDAP backend more robustAndrew Bartlett1-1/+11
With the extra moduleload lines (which succeed if it's already staticly linked), we now work with OpenLDAP overlays as modules. Andrew Bartlett
2010-04-22s4:ldap-backend Fix LSA test failures with OpenLDAP backend - convert SIDsAndrew Bartlett1-0/+24
The SIDs in some queries were not being passed as binary, but as strings in comparison with the securityIdentifer object. We need to recognise that these are SIDs in the simple_ldap_map. Andrew Bartlett
2010-04-22s4:provison Pass nosync in for the OpenLDAP cn=config tooAndrew Bartlett1-0/+1
2010-04-22s4:selftest Ensure we don't fsync() all day in the LDAP backend testAndrew Bartlett1-0/+1
Passing this option greatly reduces the time spent in the test. Andrew Bartlett
2010-04-22s4:OpenLDAP-backend Use the new rdnval module in OpenLDAPAndrew Bartlett4-5/+15
This is rather than rdn_name, which tries to do the job on the client side. We need to leave this module in the stack for Fedora DS (and of course the LDB backend). Andrew Bartlett
2010-04-22s4:dsdb Revert accidentilly commited change for LDAP backendsAndrew Bartlett1-1/+1
In the future, LDAP backends will be resposible for maintaining the 'name' attributes. Andrew Bartlett
2010-04-22s4:provision Use more reasonable values for DB_CONFIGAndrew Bartlett1-5/+13
With the OpenLDAP backend, the old DB_CONFIG caused OpenLDAP to abort on startup, and was very inefficient. This new one, kindly supplied by Matthew Backes <mbackes@symas.com> uses a more reasonable set of buffer sizes. Andrew Bartlett
2010-04-22build: added --enable-auto-reconfigureAndrew Tridgell1-1/+13
this is off by default until some issues are resolved. See my mail to samba-technical for details.
2010-04-21s4:netlogon RPC server - fix a counter variable typeMatthias Dieter Wallnöfer1-1/+2
2010-04-21build: recalculate project deps when NONSHARED_BINARIES changesAndrew Tridgell1-0/+10
2010-04-21build: added --nonshared-binary=LIST optionAndrew Tridgell3-0/+25
This allows you to specify some binaries that should be built without shared libs. A non-shared smbtorture will make testing s3 in the build farm easier
2010-04-21s4-waf: python devel headers are mandatory for the source4 buildAndrew Tridgell1-1/+1
2010-04-21build: make python development headers not mandatory in standalone libsAndrew Tridgell2-1/+1
This needed an update to the python tool in waf thanks to Kai for spotting this
2010-04-21waftest: updated the cross compilation environment I test withAndrew Tridgell1-1/+1
2010-04-21s4-server: show build host in samba -b outputAndrew Tridgell1-0/+5
2010-04-21build: fixed uname output to be on target machine when cross compilingAndrew Tridgell4-15/+51
this also makes the output of define_ret configure tests show up in the configure output
2010-04-21s4-upgradeprovision: fixed --realm option duplicate in upgrade_from_s3Andrew Tridgell2-2/+1
2010-04-21s4-drs: accept zero revision in drs selftestAndrew Tridgell1-0/+5
Kamen, please have a look at this. We need to accept revision zero as w2k8r2 sends it during initial schema replication Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-21s4-provision: cope with --realm being in getopt.pyAndrew Tridgell1-1/+2
we still need to allow for interactive querying of the realm Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-21s4-waf: create the smbd.tmp/messaging directoryAndrew Tridgell1-1/+1
this prevents a warning when we run net vampire from the install dir when samba has never been run previously Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-21s4-python: added --realm option to python scriptsAndrew Tridgell1-1/+7
this is needed for net vampire Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-21s4-provision: set "setup_dir" to the right pathAndrew Tridgell1-2/+8
This needs to cope with both running from the build tree or running from the install tree. We use the provision.smb.conf.dc as a sentinal to detect if we are in the build tree. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-21s4-schema: allow revision numbers of zeroAndrew Tridgell1-6/+3
w2k8r2 sends a revision of zero in the initial schema replication during a net vampire Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-21s4-python: accept --option arguments in python cmdline parsingAndrew Tridgell1-10/+17
also fixed the -d option to use lp.set() which calls lp_set_cmdline() Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-21s4-devel: allow extra net command line options and gdbAndrew Tridgell1-1/+1
This allows you to run: GDB="gdb --args" vampire_ad.sh and also to add higher debug levels like this: vampire_ad.sh -d100 Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-21s4-pynet: accept None for target_dir in vampireAndrew Tridgell1-1/+1
2010-04-20Fix i18n of net conf import error message.Jim McDonough1-3/+4
Thanks gd
2010-04-20Display an error on net conf import failures.Jim McDonough1-0/+3
When something goes wrong, such as a typo in a parameter name, we'll now display the failure instead of just returning with -1 and no message.
2010-04-20s4-smbtorture: add spoolss DriverInfo and winreg consistency test.Günther Deschner1-7/+238
Guenther
2010-04-20s4-smbtorture: add function to get a printserver's environment.Günther Deschner1-0/+22
Guenther
2010-04-20s4-smbtorture: simplify macros used in PrinterInfo winreg consistency teste.Günther Deschner1-22/+22
Guenther
2010-04-20s4-smbtorture: refactor test_GetPrinterDriver2().Günther Deschner1-36/+64
Guenther
generated by cgit (git 2.34.1) at 2024-06-30 10:20:39 +0000