summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2010-11-26s4-dsdb Remove rootDSE and anonymous checks from acl_readAndrew Bartlett1-15/+0
The rootdse module handles rootDSE requests, and blocks anonymous access, so we on't need to do it again here. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri Nov 26 00:36:19 CET 2010 on sn-devel-104
2010-11-26s4-dsdb Add 'block anonymous' checks to the rootdse moduleAndrew Bartlett1-0/+100
This ensures that one single point checks for and blocks anonymous read access to the database over LDAP. Andrew Bartlett
2010-11-26s4-dsdb Remove mem_ctx argument from dsdb_module_find_dsheuristics().Andrew Bartlett2-4/+3
A function that does not return memory should not take a memory context. Andrew Bartlett
2010-11-25s4-tests: Made acl tests to reconnect if dSHeuristics is being manipulatedNadezhda Ivanova1-28/+25
Also made password tests set dSHeuristics only once rather that once per test. Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Thu Nov 25 20:48:38 CET 2010 on sn-devel-104
2010-11-25s4-tests: Modified create_ou to only accept security.descriptor type for sd ↵Nadezhda Ivanova2-45/+31
to avoid confusion It used to work with sddl as well, but this is confusing and could lead to errors. It also caused a message about tallocing a security descriptor to appear. Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Thu Nov 25 19:46:42 CET 2010 on sn-devel-104
2010-11-25s4-dsdb: Switched to using a dictionary in create_ou for consistency.Nadezhda Ivanova1-4/+2
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Thu Nov 25 14:12:52 CET 2010 on sn-devel-104
2010-11-25s4-dsdb: Fixed wrong assignment of name attribute to description atribute in ↵Nadezhda Ivanova1-1/+1
create_ou.
2010-11-25s4:lsa RPC server / objectclass LDB module - fix the creation of trusted ↵Matthias Dieter Wallnöfer2-9/+3
domain objects Tridge pointed out that it is to dangerous to allow them to be created with SYSTEM permissions. The solution using the "untrusted" flag should be much more viable. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Thu Nov 25 13:05:56 CET 2010 on sn-devel-104
2010-11-25s4-tests: Modified speedtest.py to use samba.tests.delete_forceNadezhda Ivanova1-8/+3
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Thu Nov 25 01:28:19 CET 2010 on sn-devel-104
2010-11-25s4-tests: Modified sec_descriptor.py to use samba.tests.delete_forceNadezhda Ivanova1-71/+66
2010-11-25s4-tests: Modified sam.py to use samba.tests.delete_forceNadezhda Ivanova1-72/+67
2010-11-25s4-tests: Modified passwords.py to use samba.tests.delete_forceNadezhda Ivanova1-12/+7
2010-11-25s4-tests: delete_force was unused, removed it.Nadezhda Ivanova1-5/+0
2010-11-25s4-tests: Modified ldap_schema.py to use samba.tests.delete_forceNadezhda Ivanova1-8/+3
2010-11-25s4-tests: Modified ldap.py to use samba.tests.delete_forceNadezhda Ivanova1-93/+88
2010-11-25s4-tests: Modified deletetest.py to use samba.tests.delete_forceNadezhda Ivanova1-18/+14
2010-11-25s4-tests: Modified bind.py to use samba.tests.delete_forceNadezhda Ivanova1-7/+2
2010-11-25s4-tests: Modified acly.py to use common delete_force instead of defining ↵Nadezhda Ivanova1-60/+55
its own.
2010-11-25s4-tests: Added a common definition of delete_force.Nadezhda Ivanova1-0/+6
2010-11-24s4-smbtorture: pick a better printer in RPC-SPOOLSS-ACCESS.Günther Deschner1-1/+8
Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Nov 24 22:07:33 CET 2010 on sn-devel-104
2010-11-24s4:objectclass LDB module - LSA objects - allow them if the SYSTEM control ↵Matthias Dieter Wallnöfer2-5/+9
is specified This fits better than the RELAX one. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Wed Nov 24 18:23:01 CET 2010 on sn-devel-104
2010-11-24s4:objectclass LDB module - move one checks into the "objectclass derivation ↵Matthias Dieter Wallnöfer1-11/+17
loop" This denies objects created from possible derivated classes from the prohibited ones. Also small cosmetic improvements for another check.
2010-11-24s4:objectclass LDB module - some more or less cosmetic return value macro ↵Matthias Dieter Wallnöfer1-14/+22
changes Sometimes "ldb_module_oom" fits better than "ldb_operr" or "ldb_oom".
2010-11-24s4-tests: Modified sec_descriptor to use samdb.newgroup instead of locally ↵Nadezhda Ivanova1-48/+50
defined method. Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Wed Nov 24 17:38:28 CET 2010 on sn-devel-104
2010-11-24s4-dsdb: Extended samdb.newgroup to set the group's security descriptor.Nadezhda Ivanova1-1/+5
2010-11-24s3:winbind correct a copy&paste errorChristian Ambach1-3/+3
negative results of sid->gid lookups should be stored with idmap_cache_set_sid2gid instead of idmap_cache_set_sid2uid This seems to be a copy&paste error when similar logic from the sid2uid path was copied here in 84b88f4b. Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Wed Nov 24 16:53:01 CET 2010 on sn-devel-104
2010-11-24s3: Correctly calculate the wbinfo -s resultVolker Lendecke1-9/+25
2010-11-24s3-test: try to avoid a problem of CFLAGS propogating to the torture buildAndrew Tridgell1-2/+2
CFLAGS is set by s3 to include -D_SAMBA_BUILD_=3. We need to ensure this does not propogate to the smbtorture4 build Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Nov 24 14:40:16 CET 2010 on sn-devel-104
2010-11-24wintest: added an IPv6 address, and use fully qualified hostnameAndrew Tridgell4-34/+53
this also makes the resolv.conf handling more robust Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Nov 24 11:34:30 CET 2010 on sn-devel-104
2010-11-24s3-libnetapi Load case tables earlierAndrew Bartlett1-2/+3
If we don't load the case tables as the 'first' thing we do, we will segfault on the first case insensitive string comparison. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Nov 24 09:21:05 CET 2010 on sn-devel-104
2010-11-24s3-libnetapi Add function header commentsAndrew Bartlett1-0/+3
Andrew Bartlett
2010-11-24s3-netapi Add libnetapi_net_init(), don't double-init common Samba subsystemsAndrew Bartlett6-19/+70
The issue here is that libnet and net were both trying to load the smb.conf files, the case tables and set the debug levels. The set of the debug levels caused problems, because it would force the level to 0, not (say) 10 as requested on the command line. This regression was apparently introduced in cf4de8ec2c8df2ceabbe3d836d296b058e7b19fb when eliminating AllowDebugChange. Andrew Bartlett
2010-11-24lib/debug Add clarifying commentsAndrew Bartlett1-2/+2
2010-11-24wintest Don't connect to localhost or unqualified hostname, bind interface onlyAndrew Bartlett1-13/+13
Instead, connect to ${INTERFACE_IP} and the fully qualified hostname, so that we talk to the the interface where Samba is (now) bound. Using 'bind interfaces only' means that the other Samba instances (properly configured) can still run while the tests progress. (killall operations that currently terminate other Samba instances still need work). Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Nov 24 08:33:03 CET 2010 on sn-devel-104
2010-11-24s4-setup correct the require BIND version for Dynamic DNSAndrew Bartlett1-1/+1
2010-11-24wintest: fixed cleanup of /etc/resolv.confAndrew Tridgell1-1/+3
Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Nov 24 07:29:49 CET 2010 on sn-devel-104
2010-11-24wintest: remove reliance on hostname in /etc/hostsAndrew Tridgell2-35/+34
- don't setwinvars() in test code - use fully qualified names where possible - don't delete named and rndc config
2010-11-24wintest: fixed interface handling and DNS forwardingAndrew Tridgell4-65/+118
- allow for _IP vars on VMs - resolve IPs using nmblookup - forward DNS requests for windows domains
2010-11-24Add in fsp->access_mask checks. Not required (underlying system does this)Jeremy Allison2-2/+42
but makes logic cleaner. Pointed out by Metze. Jeremy. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Nov 24 01:47:13 CET 2010 on sn-devel-104
2010-11-24s4-devel: we don't need to override these scripts nowAndrew Tridgell1-2/+0
Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Nov 24 01:02:43 CET 2010 on sn-devel-104
2010-11-24s3-torture: remove the merged_build tests for building smbtorture4Andrew Tridgell1-27/+6
s3 now builds smbtorture4 if the required packages (perl, python, ads) are available. This should ensure that smbtorture4 is built in the build farm when possible
2010-11-24s4-dynconfig: override more paths when running from the build directoryAndrew Tridgell4-9/+16
this ensures consistency between binaries and scripts when testing as a developer
2010-11-24s4-kcc: disable the NDR printing of DRS getinfo requestsAndrew Tridgell1-0/+4
2010-11-24Fix bug #7812 - vfs_acl_xattr/vfs_acl_tdb: ACL inheritance cannot be disabledJeremy Allison1-0/+6
We were losing the incoming security descriptor revision number and most importantly the "type" field as sent by the client. Ensure we correctly store these in the xattr object. Jeremy. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Nov 24 00:18:57 CET 2010 on sn-devel-104
2010-11-23pyldb: Fix broken test.Jelmer Vernooij2-1/+2
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Tue Nov 23 23:20:38 CET 2010 on sn-devel-104
2010-11-23Make log level of the server configurable in make testMatthieu Patou1-1/+1
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Tue Nov 23 22:36:37 CET 2010 on sn-devel-104
2010-11-23s4-tests: Modified acl.py to use samdb.newgroup instead of custom methods.Nadezhda Ivanova1-43/+15
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Tue Nov 23 21:46:07 CET 2010 on sn-devel-104
2010-11-23s4-dsdb: Changed filter to find the account of a user by samAccountNameNadezhda Ivanova1-2/+1
In newuser, a filter by dn was given to setpassword to find the account whose password is to be reset. It appears however that if given filter of type (dn=CN=smth) Windows fails to return the entry, and the tests that use newuser fail against it. Changed to use samAccountName instead.
2010-11-23Fix bug #7785 - atime limit.Jeremy Allison1-0/+25
On a 64-bit time_t system make MAX_TIME_T the max value that can be represented in a struct tm. This allows applications to set times in the future beyond the 32-bit time_t limit (2037). This is only in source3/configure.in, needs adding to the waf configure/build system (but I'll need help with that). Jeremy. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Tue Nov 23 21:00:14 CET 2010 on sn-devel-104
2010-11-23s4-test/repl_schema: Refactor the test a little bit toKamen Mazdrashki1-31/+59
- Cleanup imports - make sure we have testtools and subunit imported - use dictionaries instead of LDIFs for schema modification so now callers for _make_class can easily add new attributes for created class - simplify a little bit classSchema creation - test attributeSchema replication Autobuild-User: Kamen Mazdrashki <kamenim@samba.org> Autobuild-Date: Tue Nov 23 18:44:46 CET 2010 on sn-devel-104