Age | Commit message (Collapse) | Author | Files | Lines |
|
(This used to be commit ebe5e8399422eb7e2ff4deb546338823e2718907)
|
|
(This used to be commit 977dbdeaf363c8905ed9fd0570eba4be80582833)
|
|
Rather than killing off the nasty 'kludge ACLs' stuff, this patch
extends it, to ensure that LSA secrets and the registry are also
protected.
Andrew Bartlett
(This used to be commit 2f2b110fb870132099bad1d4c16ed8962affb3ce)
|
|
Andrew Bartlett
(This used to be commit d2b5f40d80008ca3269118915409333755b6eac3)
|
|
Andrew Bartlett
(This used to be commit db3b5f16ec8d9b83d8a82a535a4847dce5923663)
|
|
or in AD.
Andrew Bartlett
(This used to be commit a3e1f2830679a56366f0080115de504cdb0144f7)
|
|
Andrew Bartlett
(This used to be commit 7e85f318b571d1a909dffad0ecd661468ed497ca)
|
|
Fixing this simple typo allows more of the ldap.js test to pass.
Andrew Bartlett
(This used to be commit 7c80cd18d5cd9cbf32dac15a4734f5a3c67cd0e7)
|
|
This reworks quite a few parts of our provision system to use
CN=NETBIOSNAME as the domain for member servers.
This makes it clear that these domains are not in the DNS structure,
while complying with our own schema (found by OpenLDAP's schema
validation).
Andrew Bartlett
(This used to be commit bda6a38b055fed2394e65cdc0b308a1442116402)
|
|
If the objectClass found does not include a defaultSecurityDescriptor,
then we should not segfault in the SDDL parser.
Andrew Bartlett
(This used to be commit 5a92771fb55149fcf24f21f30e4c6a622bef44f8)
|
|
(This used to be commit e4da851bd7e7620bbf99efe20a496b1be78ba4e2)
|
|
To make Samba4, using the python provision system, pass this test
required some major rework. Untested code is broken code, and some of
the refactoring for a seperate provision test (which also now passes)
broke things.
Similarly, the iconv work has compiled, but these codepaths have never
been run (NULL pointer de-reference).
In working to use a local, rather than global, loadparm context, and
to support using a target directory, a few things needed to be
reworked, particularly around path handling.
Andrew Bartlett
(This used to be commit 1169e8d7bee20477b0efbfea3534ac63c83fb3d6)
|
|
Conflicts:
source/build/smb_build/makefile.pm
(This used to be commit 391fea450b2e6664fcd4e4419858997c6094cf3e)
|
|
This avoids going via the canonicalise_fn(), which will upper case the DN
Andrew Bartlett
(This used to be commit cdff1b0802437d713652b89f4522d3cce97c30ec)
|
|
(This used to be commit 10cf48591e8d6bfb750a6ff187f04ea24a1f8cd7)
|
|
(This used to be commit a7e6d2a1832db388fdafa1279f84c9a8bbfc87d6)
|
|
Conflicts:
source/scripting/python/config.mk
(This used to be commit 0ac0ea660ab63eca764149f1d2828d0238a57289)
|
|
Slowly work away at the samldb module again, it is clear that AD does
not use much of a templating system. samAccountType is managed, as
far as I can tell, when groupType or userAccountControl changes.
Andrew Bartlett
(This used to be commit 447d5a795441aa6beab2f057c5ac1bc3c04e08c4)
|
|
(This used to be commit ca510136d2c4cae8f520c76df6aaadb5d412bea1)
|
|
(This used to be commit ce332130ea77159832da23bab760fa26921719e2)
|
|
everywhere.
(This used to be commit 85c96a325867f7bcdb412ebc53f8a47dbf7cd89b)
|
|
Andrew Bartlett
(This used to be commit 69af290c91c61cdaf821750d0d2dddf9cb1b8255)
|
|
Andrew Bartlett
(This used to be commit 26108eb66b4b5d4b339dfc845e8a018190068e81)
|
|
Avoid leaking error strings up to the application, when we are ignoring them.
(This used to be commit 57b4b43b6548d1cd81cfaebc5ea8abc88aaca989)
|
|
(This used to be commit 1163c2ad54b122487fa25960b8989f0f6d0b8c64)
|
|
metze
(This used to be commit ba495f9d19e7c7cfc9135a5d40e1050dd8f9ebc6)
|
|
This means that, except when we back onto LDAP, when it will be
replaced with the mapping backend, we will keep this codepath tested.
Andrew Bartlett
(This used to be commit e8fb5da5a18c1c3bd788b1ab3f814ffb847b00fd)
|
|
The main change here is to work with the current module stack,
replacing only the objectGUID module, rather than a number of modules.
However, two changes were key:
- Fixing a typo search_req->handle -> change_req->handle
- Allowing an error of NO_SUCH_OBJECT - it is quite valid
for the object not to exist when being replicated in.
Other small changes were required to the ejs provision to match
changes in that code.
Andrew Bartlett
(This used to be commit 7b87a58502a052de391f4e1c56ac78a8d35b4e34)
|
|
This matches the range parsing in the search and callback - end was
uninitilaised, causing occasional failures in make test.
Andrew Bartlett
(This used to be commit 669f137f0ecad10248a51b337c8f115d14d55b05)
|
|
False is the default, so only set this when the schema requires the
hiding behaviour.
Andrew Bartlett
(This used to be commit 45f6ccefda39e8f0a9820ba55b1924b7cfb12262)
|
|
(This used to be commit 51422414bed28f425197519298c6b04a9f4e2c4e)
|
|
Unless already set, the default value for this comes from the
defaultHidingValue in the schema.
Andrew Bartlett
(This used to be commit 673f1805006f879fa5302aab8411767a22488e64)
|
|
The memberOf module in OpenLDAP make this attribute operational, so we
need to add it here or clients won't get it when using *.
Andrew Bartlett
(This used to be commit 35148fd51f22d81fe9f590b7d6f13285c35656a7)
|
|
Andrew Bartlett
(This used to be commit d427cf4fa67e84ccdece9a3fb31d8e89379a86e7)
|
|
This code raided from the repl_meta_data module, which probably needs
to be downsized to just handling the replication data.
Andrew Bartlett
(This used to be commit 2a418f33705a792d9d16cf1d4aa3dcda467e6e04)
|
|
This allows objectClass munging to be removed, or modified to not
include adding an objectClass, or for that objectClass to be something
different.
Andrew Bartlett
(This used to be commit ee93b4e2ee1dd1cd38bcf14b2bb62556a13cec4a)
|
|
This moves to a smarter 'find the delta' based operation of the linked
attributes module, when the caller asks for a 'replace' of the link
source. Previously we would spray operations all over the database,
even if the net result was just to modify one record.
This also means we need the transaction safety less, which may be
useful for some LDAP backends that don't provide this functionality on
the LDAP server.
Andrew Bartlett
(This used to be commit 8c88e4eb1c0a606e7899091525260e8d6558ffd0)
|
|
Also remove the search_options control earlier, before, rather than
after duplicating the request.
When we generate referalls in the partition module, the domain_scope
control with suppress them.
Andrew Bartlett
(This used to be commit fc57a119f53a7bc0a0eb76b868bbd7386b3c5008)
|
|
problems with ldap.js test with OpenLDAP as the backend.
Likewise, remove it from the template lookup (for consistancy).
TODO: see if it can be removed from ldb
Andrew Bartlett
(This used to be commit 47a1b76f7fff30229d3f23c6723f047923faf196)
|
|
fixes the case of the attribute in teh DN.
Fix option spelling for example re-provision
Andrew Bartlett
(This used to be commit e3a76be04760a81a9c1b7ad9b139f088decc9ee6)
|
|
(This used to be commit 7d14b657b3d59924b15f4f84bbd5745cd7f759ef)
|
|
(This used to be commit c863f4ebde8efa1a695b4469142d6719e30bc419)
|
|
library, so it can be overridden by OpenChange.
(This used to be commit 2f29f80e07adef1f020173f2cd6d947d0ef505ce)
|
|
ndr_struct_push_blob().
(This used to be commit 61ad78ac98937ef7a9aa32075a91a1c95b7606b3)
|
|
(This used to be commit 84f1e82d8fe5ecca75e2d7048d1b8b409abcb9b7)
|
|
to debug.
(This used to be commit 4be116133724ac52f9df8adb3feeb93ea616a990)
|
|
Andrew Bartlett
(This used to be commit 66cb9601e75935c35fb432655e840a0d9022cbe1)
|
|
(This used to be commit d649f73431fc993e31522e7fc8e1e35e0a4421d8)
|
|
tests.
- Initial work converting the upgrade code to Python.
- Removed the old EJS upgrade code because it has been broken for a long time.
(This used to be commit 150cf39fbd4fe088546870fb0d8f20c0d9eb4aca)
|
|
(This used to be commit 874f0ac0561e38a8c0ceda983f6c88c75ee29e9c)
|