Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-09-26 | s4-dsdb: Added a function to check access on a particular object by its guid | Nadezhda Ivanova | 1 | -0/+37 | |
Similar to dsdb_check_access_on_dn, only it searches by guid. | |||||
2010-09-26 | s4-dsdb: A helper to determine if an attribute is part of the search filter | Nadezhda Ivanova | 1 | -0/+46 | |
2010-09-26 | s4-dsdb: Moved some helper functions to a separate file | Nadezhda Ivanova | 5 | -222/+260 | |
We need these to be accessible to the aclread module as well. | |||||
2010-09-26 | s4-ldap: Added a control to apply the access checks on read via LDAP | Nadezhda Ivanova | 1 | -0/+3 | |
2010-09-26 | s4-auth: fixed the SID list for DCs in the PAC | Andrew Tridgell | 1 | -10/+0 | |
the S-1-5-9 SID is added in the PAC by the KDC, not on the server that receives the PAC Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Stefan Metzmacher <metze@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Sun Sep 26 07:09:08 UTC 2010 on sn-devel-104 | |||||
2010-09-26 | s4-possibleinferiors.py: Fix usage of 'paged_search' module for remote LDB ↵ | Kamen Mazdrashki | 1 | -1/+7 | |
connections | |||||
2010-09-26 | s4-sec_descriptor.py: Fix usage of 'paged_search' module for remote LDB ↵ | Kamen Mazdrashki | 1 | -1/+9 | |
connections | |||||
2010-09-26 | s4-ldap_schema.py: Remove unused LDB connection to GC port | Kamen Mazdrashki | 1 | -5/+0 | |
2010-09-26 | s4-dsdb_schema_info.py: Fix usage of 'paged_search' module for remote LDB ↵ | Kamen Mazdrashki | 1 | -6/+7 | |
connections | |||||
2010-09-25 | ldb: mark the location of a lot more ldb requests | Andrew Tridgell | 28 | -15/+109 | |
2010-09-25 | s4-dsdb: added tagging of requests in dsdb modules | Andrew Tridgell | 8 | -0/+30 | |
this allows you to call dsdb_req_chain_debug() in gdb or when writing debug code to see the request chain | |||||
2010-09-25 | s4-repl: don't store repsFrom on DNs other than NC heads | Andrew Tridgell | 1 | -0/+9 | |
we don't want a refsFrom on the Rid Manage$ DN Pair-Programmed-With: Anatoliy Atanasov <anatoliy.atanasov@postpath.com> | |||||
2010-09-25 | s4-repl: use namingContexts from rootDSE to initialise partition list | Andrew Tridgell | 1 | -53/+36 | |
this is preferable to looking for the hasMasterNCs attribute on nTDSDSA objects. | |||||
2010-09-25 | s4-repl: force on WRIT_REP when we are a writable replica | Andrew Tridgell | 1 | -4/+3 | |
this ensures we always mark ourselves as writeable when we are not an RODC | |||||
2010-09-25 | s4-repl: use dreplsrv_partition_source_dsa_by_guid to find source dsa | Andrew Tridgell | 1 | -5/+6 | |
this avoids a list walk in the calling code | |||||
2010-09-25 | s4-dsdb: Fixed a call to the wrong ops function in dsdb_module_search_dn. | Nadezhda Ivanova | 1 | -1/+1 | |
2010-09-24 | s4-kerberos Rework keytab handling to export servicePrincipalName entries | Andrew Bartlett | 1 | -2/+6 | |
This creates keytab entries with all the servicePrincipalNames listed in the secrets.ldb entry. Andrew Bartlett | |||||
2010-09-24 | s4-kerberos Move 'set key into keytab' code out of credentials. | Andrew Bartlett | 1 | -31/+23 | |
This code never really belonged in the credentials layer, and is easier done with direct access to the ldb_message that is in secrets.ldb. Andrew Bartlett | |||||
2010-09-24 | s4:repl_meta_data - also on delete operations the new RDN attribute has to ↵ | Matthias Dieter Wallnöfer | 1 | -1/+10 | |
be casefolded correctly Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-24 | s4:lazy_commit LDB module - the "show_deleted" control is initialised by the ↵ | Matthias Dieter Wallnöfer | 1 | -17/+0 | |
"show_deleted" LDB module Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-24 | s4:rootdse LDB module - make use of "dsdb_forest_functional_level" | Matthias Dieter Wallnöfer | 1 | -3/+2 | |
Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-24 | s4:ldap.py - add tests for the "dsServiceName", "serverName", "dnsHostName" ↵ | Matthias Dieter Wallnöfer | 1 | -0/+34 | |
and "ldapServiceName" rootDSE attributes Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-24 | s4:rootdse LDB module - introduce dynamic "ldapServiceName" | Matthias Dieter Wallnöfer | 1 | -0/+25 | |
Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-24 | s4:rootdse LDB module - introduce dynamic "dnsHostName" attribute | Matthias Dieter Wallnöfer | 1 | -0/+8 | |
Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-24 | s4:rootdse LDB module - make "serverName" dynamic | Matthias Dieter Wallnöfer | 1 | -0/+7 | |
This helps to fix bug #7347. "dsServiceName" cannot be made dynamic in such a simple way since it's already needed on LDB initialisation time. Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-24 | s4:rootdse LDB module - remove "priv" checks where not needed | Matthias Dieter Wallnöfer | 1 | -3/+3 | |
Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-24 | s4:rootdse LDB module - better that the "edn" control handling is done last | Matthias Dieter Wallnöfer | 1 | -20/+20 | |
Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-24 | s4:samldb LDB module - it isn't allowed to create user/computer accounts ↵ | Matthias Dieter Wallnöfer | 2 | -10/+13 | |
with a primary group specified It can only be changed afterwards. We allow a "relax"ed exception for the provision state since we need this for the guest account. Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-24 | s4:dsdb/common/util_samr.c - remove the primary group specifications | Matthias Dieter Wallnöfer | 1 | -4/+0 | |
Now also the primary group detection/change on modify operations does work Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-24 | s4:ldap.py - test default primary groups on modify operations | Matthias Dieter Wallnöfer | 1 | -0/+70 | |
Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-24 | s4:samldb LDB module - support the "userAccountControl" -> "primaryGroupID" ↵ | Matthias Dieter Wallnöfer | 1 | -16/+11 | |
detection also on modify operations Also requested by MS-SAMR 3.1.1.8.1. Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-24 | s4:ldap.py - enhance SAM user/groups behaviour test regarding default ↵ | Matthias Dieter Wallnöfer | 1 | -5/+34 | |
primary groups Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-24 | s4:rootdse LDB module - make more use of LDB result constants | Matthias Dieter Wallnöfer | 1 | -17/+17 | |
Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-24 | s4:rootdse LDB module - fix comment typo | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-24 | s4:password_hash LDB module - don't assign "lp_ctx" twice | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-24 | s4:rootdse LDB module - fix counter types | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-24 | s4:extended_dn_in LDB module - fix a counter type | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-24 | s4:drepl_out_helpers.c - fix a counter type | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-23 | s4/dsdb:kcc: cleanup and improve readability | Anatoliy Atanasov | 1 | -4/+5 | |
2010-09-23 | s4:dsdb/kcc: we don't need to manually allocate [out,ref] pointers anymore | Stefan Metzmacher | 1 | -6/+1 | |
metze Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com> | |||||
2010-09-23 | s4-kcc: the kcc should not be setting the repsTo attribute | Andrew Tridgell | 1 | -32/+2 | |
repsTo is set by other DCs, when they ask to be notified about changes in a partition | |||||
2010-09-23 | s4-kcc: added service->am_rodc | Andrew Tridgell | 4 | -21/+14 | |
use a rodc flag on the service instead of calling samdb_rodc each time | |||||
2010-09-23 | s4-kcc: pass the service context into the kcc connection code | Andrew Tridgell | 2 | -64/+65 | |
this will be used for the RODC changes needed for the kcc | |||||
2010-09-22 | s4-selftest: Move samba3sam test to standard python directory. | Jelmer Vernooij | 1 | -1092/+0 | |
2010-09-22 | dsdb: Use short path for ldb_handlers.h, in case ldb is installed in the | Jelmer Vernooij | 1 | -1/+1 | |
system. | |||||
2010-09-21 | s4-ldap: Fixed a problem with NC's having a parentGUID attribute | Nadezhda Ivanova | 2 | -14/+48 | |
NC's other than default NC had a parentGUID, due to an incorrect check of whether the object has a parent. Fixed by checking object's instanceType instead. | |||||
2010-09-20 | s4-drepl: use the partition UDV and hwm for extended getncchanges ops | Andrew Tridgell | 3 | -28/+75 | |
we find the NC root then load the uptodateness vector and highwater mark, if available, from there | |||||
2010-09-20 | s4-rodc: fixed repsFrom store on RODC | Andrew Tridgell | 1 | -14/+11 | |
We were disallowing repsFrom store as a RODC on the basis that it is a write to the directory. It should be allowed, as its is a non-replicated attribute. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-20 | s4-kcc: a bit more debug info on repsFrom creation | Andrew Tridgell | 1 | -1/+7 | |
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-21 | s4-dsdb-schema_prefixmap: return WERR_DS_NO_ATTRIBUTE_OR_VALUE when ATTID is ↵ | Kamen Mazdrashki | 1 | -1/+1 | |
not found rather than WERR_INTERNAL_ERROR - it is not internal error! |