Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2008-12-17 | Make greater use of 'GUID_from_data_blob' | Andrew Bartlett | 1 | -40/+11 | |
This avoids accidentily running off the end of a string, and uses a single 'guess which type of GUID I have' algorithm. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org> | |||||
2008-12-17 | Fix sequence number generation against OpenLDAP | Andrew Bartlett | 1 | -0/+8 | |
It seems that in 2deeb99fff1a90c79ba1927e1a069362e250a63c adding the partition control to this request was missed out. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org> | |||||
2008-12-05 | s4:password_hash: really catch the clearTextPasswordAttr case... | Stefan Metzmacher | 1 | -1/+1 | |
This fixes the creation of the user object for incoming trusts in dcesrv_lsa_CreateTrustedDomain_base(). And now w2k3 trust samba4 just fine:-) metze | |||||
2008-12-04 | s4:kludge_acl: allow everybody to read the sequence number | Stefan Metzmacher | 1 | -1/+27 | |
metze | |||||
2008-12-02 | Don't treat the DN+binary syntax as a DN. | Andrew Bartlett | 1 | -2/+2 | |
This should fix the OpenLDAP backend | |||||
2008-11-17 | s4:dsdb/samdb: don't allow objects without objectClass | Stefan Metzmacher | 1 | -2/+2 | |
We're using @ROOTDSE instead of CN=ROOTDSE. metze | |||||
2008-11-17 | Run the original operation before we update linked attrs | Andrew Bartlett | 1 | -17/+24 | |
This causes the linked attribute modifies to occour after the original operation is entered in the transaction (any failure still fails the lot). This means (I hope) that we can have another module search the originating record when the backlink is created, filling in the GUID and SID for the extended DN. Andrew Bartlett | |||||
2008-11-17 | The samba3sam test does not really need the extended_dn module | Andrew Bartlett | 1 | -1/+1 | |
(This module has been split up into extended_dn_in, extended_dn_out and extended_dn_store). Andrew Bartlett | |||||
2008-11-16 | s4:dsdb/schema_fsmo: provide "extendedAttributeInfo" and "extendedClassInfo" | Stefan Metzmacher | 1 | -0/+56 | |
metze | |||||
2008-11-16 | s4:dsdb/schema: add a function to generate the "extendedClassInfo" values | Stefan Metzmacher | 1 | -4/+44 | |
metze | |||||
2008-11-16 | s4:dsdb/schema: add a function to generate the "extendedAttributeInfo" values | Stefan Metzmacher | 1 | -7/+83 | |
metze | |||||
2008-11-16 | s4:dsdb/schema: use pointers for rangeLower and rangeUpper. | Stefan Metzmacher | 2 | -6/+41 | |
This makes clear there's an value stored in the schema, as they can be '0'. metze | |||||
2008-11-16 | s4:dsdb/schema: we don't need to use find_syntax_map_by_ad_oid() as the ↵ | Stefan Metzmacher | 1 | -3/+1 | |
syntax is already known metze | |||||
2008-11-16 | s4:librpc/ndr: integrate NDR_MISC into LIBNDR | Stefan Metzmacher | 2 | -5/+5 | |
metze | |||||
2008-11-10 | s4-dsdb: add samdb_msg_add_parameters. | Günther Deschner | 1 | -0/+11 | |
Guenther | |||||
2008-11-10 | s4-dsdb: add samdb_result_parameters. | Günther Deschner | 1 | -0/+22 | |
Guenther | |||||
2008-11-08 | s4: dsdb/schema: fix the equality and comment of DN+String syntax | Stefan Metzmacher | 1 | -3/+2 | |
metze | |||||
2008-11-08 | s4: fix samba4.samba3sam.python test | Stefan Metzmacher | 1 | -2/+2 | |
metze | |||||
2008-11-04 | Give a better error when ldb_dn_from_ldb_val fails | Andrew Bartlett | 1 | -1/+3 | |
2008-11-04 | Use ldb_dn_from_ldb_val to avoid possible over-run of the value. | Andrew Bartlett | 2 | -9/+9 | |
The ldb_val is length-limited, and while normally NULL terminated, this avoids the chance that this particular value might not be, as well as avoiding a cast. Andrew Bartlett | |||||
2008-11-04 | Fix use of wrong union arm in linked_attributes module | Andrew Bartlett | 1 | -1/+1 | |
This bug occours frequenetly in ldb users because the union so happens to be layed out that this works. However, it is still incorrect usage... Andrew Bartlett | |||||
2008-10-31 | use the new CH_UTF16_MUNGED charset for utf16 password buffers | Andrew Tridgell | 1 | -1/+1 | |
now to work out how to test this ... | |||||
2008-10-24 | Remove unused include param/param.h. | Jelmer Vernooij | 3 | -3/+0 | |
2008-10-24 | Remove iconv_convenience argument from convert_string{,talloc}() but | Jelmer Vernooij | 4 | -9/+10 | |
make them wrappers around convert_string{,talloc}_convenience(). | |||||
2008-10-24 | Move charset library to top level. | Jelmer Vernooij | 1 | -1/+1 | |
2008-10-23 | Clarify the linked attribute module behaviour with comments | Andrew Bartlett | 1 | -1/+9 | |
2008-10-20 | Make sure prototypes are always included, make some functions static and | Jelmer Vernooij | 5 | -7/+9 | |
remove some unused functions. | |||||
2008-10-18 | s4-drsuapi: merge drsuapi_DsGetNCChanges from s3 drsuapi idl. | Günther Deschner | 1 | -47/+49 | |
Guenther | |||||
2008-10-18 | Add TALLOC_CTX pointer to strhex_to_data_blob for consistency with Samba | Jelmer Vernooij | 4 | -12/+7 | |
3. | |||||
2008-10-17 | Merge branch 'master' of ssh://git.samba.org/data/git/samba into master-devel | Andrew Bartlett | 3 | -76/+240 | |
2008-10-17 | Fix errrors in new password handling code found by RPC-SAMR. | Andrew Bartlett | 1 | -1/+1 | |
I'm very glad we have such a comprehensive testsuite for the SAMR password change process, as it makes this a much easier task to get right. Andrew Bartlett | |||||
2008-10-16 | Transform the sequence_number operation into a normal extended operation as ↵ | Simo Sorce | 3 | -76/+240 | |
it should always have been. Make it also async so that it is not a special case. | |||||
2008-10-16 | Create a 'straight paper path' for UTF16 passwords. | Andrew Bartlett | 3 | -103/+192 | |
This uses a virtual attribute 'clearTextPassword' (name chosen to match references in MS-SAMR) that contains the length-limited blob containing an allegidly UTF16 password. This ensures we do no validation or filtering of the password before we get a chance to MD4 it. We can then do the required munging into UTF8, and in future implement the rules Microsoft has provided us with for invalid inputs. All layers in the process now deal with the strings as length-limited inputs, incluing the krb5 string2key calls. This commit also includes a small change to samdb_result_passwords() to ensure that LM passwords are not returned to the application logic if LM authentication is disabled. The objectClass module has been modified to allow the clearTextPassword attribute to pass down the stack. Andrew Bartlett | |||||
2008-10-14 | The ldb async merge broke all MMC management utilties | Matthias Dieter Wallnöfer | 1 | -4/+4 | |
Commit 51baa8deec00244cc0a6e3d29c53932427800610 included a copy-and-paste bug which caused all MMC mangement utilities to break. Because of the typo Samba4 would no longer include the magic 'you may write to these attributes/create these classes' attributes, these tools would display all fields greyed out or 'read only', and not allow the creation of child objects. Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2008-10-13 | DSDB cosmetic patches: Some enhancements | Matthias Dieter Wallnöfer | 2 | -6/+6 | |
Also, use the constants more in the "ldif_handlers" module. | |||||
2008-10-13 | Cosmetic corrections for the DSDB module | Matthias Dieter Wallnöfer | 4 | -13/+13 | |
This commit applies some cosmetic corrections for the DSDB (Directory Server Database). | |||||
2008-10-12 | Use common strlist implementation in Samba 3 and Samba 4. | Jelmer Vernooij | 1 | -1/+1 | |
2008-10-11 | Fix include paths to new location of libutil. | Jelmer Vernooij | 18 | -18/+18 | |
2008-10-06 | Implement 'type unknown' names in the CrackNames code. | Andrew Bartlett | 1 | -10/+48 | |
This guesses the type by running each of the possible options. Andrew Bartlett | |||||
2008-10-06 | Remove compleatly bogus rename test in partitions module. | Andrew Bartlett | 1 | -17/+0 | |
2008-10-06 | Remove DESCRIPTION from generated schema lines. | Andrew Bartlett | 1 | -20/+1 | |
This is not permitted in the AD aggregate schema, and more trouble than it is worth in the OpenLDAP schema due to escaping issues. Andrew Bartlett | |||||
2008-10-06 | Fix Domain Trust creation with Windows 2008 (and many other tools) | Andrew Bartlett | 1 | -1/+5 | |
A dITConentRules attribute (unlike objectClasses) must not contain a 'SUP'. The ADSI layer in Windows would download the whole schema, and validate it. Thanks to the team at Microsoft for very long debugging session to find this. Andrew Bartlett | |||||
2008-10-03 | Merge commit 'master/master' | Andrew Tridgell | 5 | -48/+424 | |
2008-10-03 | fixed the partition module and the GC handling | Andrew Tridgell | 1 | -4/+38 | |
- when multiple partitions are searched, consider the search a success if any of the partitions return success - only search the right subset of partitions, looking at the scope and basedn of the search This fixes several errors with GC searches | |||||
2008-10-02 | fixed the sense of ldb base dn comparisons in two places, and use a | Andrew Tridgell | 2 | -4/+4 | |
direct comparison instead of a sub-tree comparison in another this fixes basedn searches on the global catalog port | |||||
2008-10-02 | Fix crash bugs in error paths: ac is not yet initialized here, and we don't | Simo Sorce | 1 | -27/+18 | |
need to call ldb_module_done in the main module functions, we can directly return an error. ldb_module_done() is for callbacks | |||||
2008-10-02 | s4:rootdse: for now don't pass down controls for the rootdse search | Stefan Metzmacher | 1 | -1/+1 | |
metze | |||||
2008-10-02 | s4:partition: register DOMAIN_SCOPE and SEARCH_OPTIONS controls | Stefan Metzmacher | 1 | -0/+14 | |
metze | |||||
2008-10-02 | s4:partition: pass down the SEARCH_OPTIONS control as uncritical | Stefan Metzmacher | 1 | -0/+8 | |
metze | |||||
2008-10-02 | s4:linked_attributes: fix a crash bug when the definition of a target ↵ | Stefan Metzmacher | 1 | -3/+35 | |
attribute is missing Windows 2003 has a broken schema where the definition of msDS-IsDomainFor is missing (which is supposed to be the backlink of the msDS-HasDomainNCs attribute. Our schema is extracted from windows 2003, so we have the problem. As the NET-API-BECOME-DC test triggers this bug, windows 2003 seems to just skip creating a backlink. metze |