summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2011-06-23s3: Fix some nonempty blank linesVolker Lendecke1-3/+3
2011-06-23s3: remove prototype of convert_string_error from proto.hMichael Adam1-4/+0
Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Thu Jun 23 12:34:31 CEST 2011 on sn-devel-104
2011-06-23s3: remove prototype of convert_string from proto.hMichael Adam1-4/+0
2011-06-23dfsreferral: search client's site and use itMatthieu Patou1-2/+2
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Thu Jun 23 01:50:39 CEST 2011 on sn-devel-104
2011-06-22s4-dbcheck: fix uninitialized errstr in err_dn_target_mismatchMatthieu Patou1-2/+3
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Wed Jun 22 21:22:27 CEST 2011 on sn-devel-104
2011-06-22s4-dbcheck: remove unused includeMatthieu Patou1-1/+1
2011-06-22s4-schema: avoid segfaulting if id3.guid is NULLMatthieu Patou1-2/+1
2011-06-22s4-samba_dnsupdate: set environment via the env parameterMatthieu Patou1-1/+1
I faced a situation where the os.environ("KRB5CCNAME") = ... didn't seems to be effective
2011-06-22s4-upgradeprovision: Don't forget to populate the non replicated objects, ↵Matthieu Patou1-2/+4
and don't touch rIDPreviousAllocationPool
2011-06-22dbchecker: cope with a broken link to Deleted ObjectsAndrew Tridgell1-2/+9
if a DN link to Deleted Objects has a bad GUID, we need to use show_deleted
2011-06-22dbchecker: fixed argument error for -H and DNAndrew Tridgell1-1/+1
2011-06-22dbchecker: when fixing a bad GUID in a DN, search by the string DNAndrew Tridgell1-1/+1
2011-06-22samba-tool: added --attrs option to dbcheckAndrew Tridgell2-8/+15
this allows checking of a specific list of attributes
2011-06-22samba-tool: make the dbcheck class available outside of samba-toolAndrew Tridgell2-285/+324
this will be used in provision, and probably in upgradeprovision as well
2011-06-22samba-tool: added --quiet option to dbcheckAndrew Tridgell1-35/+43
this will be used to allow for other tools (such as provision) to call into dbcheck without generating a lot of noise
2011-06-22s4:winbind/wb_init_domain: use DCERPC_SCHANNEL_128 in order to work against ↵Stefan Metzmacher1-1/+1
w2k8r2 metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jun 22 19:40:47 CEST 2011 on sn-devel-104
2011-06-22s4:ntvfs/cifs: add option to use S4U2ProxyStefan Metzmacher1-0/+49
Note: this doesn't work against a Samba4 KDC yet. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jun 22 18:17:43 CEST 2011 on sn-devel-104
2011-06-22s4:auth/kerberos: protect kerberos_kinit_password_cc() against old KDCsStefan Metzmacher1-1/+48
If the KDC does not support S4U2Proxy, it might return a ticket for the TGT client principal. metze
2011-06-22s4:auth/kerberos: add S4U2Proxy support to kerberos_kinit_password_cc()Stefan Metzmacher3-5/+134
For S4U2Proxy we need to use the ticket from the S4U2Self stage and ask the kdc for the delegated ticket for the target service. metze
2011-06-22Update eDirectory schemaJim McDonough1-49/+20
Autobuild-User: Jim McDonough <jmcd@samba.org> Autobuild-Date: Wed Jun 22 14:48:09 CEST 2011 on sn-devel-104
2011-06-22s4-dsdb: bypass validation when relax setAndrew Tridgell1-1/+2
this allows dbcheck to fix bad attributes Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Jun 22 12:27:06 CEST 2011 on sn-devel-104
2011-06-22samba-tool: allow for running dbcheck against a remove ldap serverAndrew Tridgell1-5/+14
this is useful for running it against a Windows server
2011-06-22samba-tool: expanded dbcheck DN checkingAndrew Tridgell1-21/+104
this now checks for bad GUID elements in DN links, and offers to fix them when possible Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-06-22s4-dsdb: prioritise GUID in extended_dn_inAndrew Tridgell1-8/+11
if we search with a base DN that has both a GUID and a SID, then use the GUID first. This matters for the S-1-5-17 SID. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-06-22s4-dsdb: catch duplicate matches in extended_dn_inAndrew Tridgell1-0/+12
When searching using extended DNs, if there are multiple matches then return an object not found error. This is needed for the case of a duplicate objectSid, which happens for S-1-5-17 Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-06-22s3: Added missing includes to .clang_complete.Andreas Schneider1-0/+2
Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Wed Jun 22 11:15:56 CEST 2011 on sn-devel-104
2011-06-22s4:auth/kerberos: protect kerberos_kinit_password_cc() against old KDCsStefan Metzmacher1-1/+47
Old KDCs may not support S4U2Self (or S4U2Proxy) and return tickets which belongs to the client principal of the TGT. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jun 22 09:10:55 CEST 2011 on sn-devel-104
2011-06-22s4:auth/kerberos: remove one indentation level in kerberos_kinit_password_cc()Stefan Metzmacher1-94/+99
This will make the following changes easier to review. metze
2011-06-22s4:auth/kerberos: reformat kerberos_kinit_password_cc()Stefan Metzmacher1-32/+41
In order to make the following changes easier to review. metze
2011-06-22s4:auth/kerberos: don't mix s4u2self creds with machine account credsStefan Metzmacher1-24/+76
It's important that we don't store the tgt for the machine account in the same krb5_ccache as the ticket for the impersonated principal. We may pass it to some krb5/gssapi functions and they may use them in the wrong way, which would grant machine account privileges to the client. metze
2011-06-22s4:auth/kerberos: use better variable names in kerberos_kinit_password_cc()Stefan Metzmacher1-27/+41
This will make the following changes easier to review. metze
2011-06-22s4:auth/kerberos: don't ignore return code in kerberos_kinit_password_cc()Stefan Metzmacher1-0/+2
metze
2011-06-22samba-tool: added missing GUID component checks to dbcheckAndrew Tridgell1-4/+93
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Jun 22 07:59:30 CEST 2011 on sn-devel-104
2011-06-22pyldb: added methods to get/set extended components on DNsAndrew Tridgell1-0/+51
this will be used by the dbcheck code Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-06-22pydsdb: added get_syntax_oid_from_lDAPDisplayName()Andrew Tridgell2-0/+45
this gives you access to the syntax oid of an attribute Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-06-22ldb: added extended_str() method to pyldbAndrew Tridgell1-0/+16
this gives access to ldb_dn_get_extended_linearized() from python Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-06-22ldb: expose syntax oids to pythonAndrew Tridgell1-0/+10
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-06-22samba-tool: try to keep dbcheck.py in a logical orderingAndrew Tridgell1-29/+38
keep individual error handlers together and separate from driver code
2011-06-22s4-dsdb: don't add zero GUID to BINARY_DNAndrew Tridgell1-9/+11
When converting from DRS to ldb format for a BINARY_DN, don't add the GUID extended DN element if the GUID is all zeros. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-06-21s3-spoolss: Fix some valgrind warnings.Andreas Schneider2-8/+8
These are in/out values and need to be initialized. Signed-off-by: Günther Deschner <gd@samba.org> Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Tue Jun 21 18:58:30 CEST 2011 on sn-devel-104
2011-06-21s3-rpc_client: Fix some valgrind warnings.Andreas Schneider1-10/+12
These are in/out values and need to be initialized. Signed-off-by: Günther Deschner <gd@samba.org>
2011-06-21s4-smbtorture: rework the spoolss notify test a bit.Günther Deschner1-16/+15
Guenther
2011-06-21s4-smbtorture: use ipv4 addresses for backchannel spoolss change notifyGünther Deschner1-1/+1
connections for now. Guenther
2011-06-21s3: Remove unused codeVolker Lendecke3-127/+0
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Jun 21 15:36:01 CEST 2011 on sn-devel-104
2011-06-21s3: Convert WINBINDD_WINS_BYNAME to the async APIVolker Lendecke5-4/+159
2011-06-21s3-smbd: longer explanation of smbd_shim codeAndrew Tridgell1-2/+7
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Tue Jun 21 09:05:37 CEST 2011 on sn-devel-104
2011-06-21s3-build: Provide a run-time shim to work around duplicate symbolsAndrew Bartlett13-95/+187
The become_root() and similar 'smbd' functions that are used widely in Samba libraries had 'dummy' copies in dummysmbd.c and dummyroot.c. These have been replaced by a runtime plugin mechanim, which ensures that standlone binaries still do nothing, while in smbd the correct function is used. This avoids having these as duplicate symbols in the smbd binary, which can cause unpredictable behaviour. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-06-21lib/util: Restore CH_UNIX as source charset for d_printf()Andrew Bartlett1-1/+1
I'm changed this during the change to use the d_printf() code in common, but should not have. However, there is a puzzle: What is the right source charset? Translated strings in our .mo and .msg files are in UTF8, but strings such as file names on remote servers are in UNIX (whatever that is). I can't see how this actually works properly when either CH_DISPLAY or CH_UNIX are other than UTF8! Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-06-21lib/util Remove display_cd from d_printf()Andrew Bartlett1-7/+0
The setting of the display charset is now done by convert_string_talloc() selecting the right charset based on CH_DISPLAY. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-06-21s4/auth: Trivial spelling fixes.Brad Hards2-6/+6
Signed-off-by: Andrew Tridgell <tridge@samba.org>