Age | Commit message (Collapse) | Author | Files | Lines |
|
Guenther
|
|
The 'comment' element in a number of domain structures is called
oem_information. This was picked up actually because with OpenLDAP
doing the schema checking, it noticed that 'comment' was not a valid
attribute.
The rename tries to keep this consistant in both the LDB mappings and
IDL, so we don't make the same mistake in future.
This has no real schema impact, as this value isn't actually used for
anything, as 'comment' was not used in the provision.
Andrew Bartlett
(This used to be commit 65dc0d536590d055a5ee775606ac90ee5fcaee9a)
|
|
Tested with nt4 and w2k3.
metze
(This used to be commit 24ec069751ef8db1211c50e7ca1e527adaa6432c)
|
|
Note: this doesn't change the generated output!
metze
(This used to be commit 14ee13c1fe2d17ebfd031a1cd2fbf2a9b72cdfc9)
|
|
Guenther
(This used to be commit 70773be51a568dfc793111044cef93baa343d715)
|
|
(This used to be commit 3fd750bd54f150ff62fd8165406bd26d03d624cf)
|
|
Torture test to follow.
Guenther
(This used to be commit 10ccfb4c8970bdb140aa9daf945caea72a4ab7cd)
|
|
Guenther
(This used to be commit 2b8d7fe16beecf2ea60d6712238527504ccee44c)
|
|
objects on the samr pipe.
8 of these bits :
get name etc
get locale
get loc com
set attributes
change password
set password
get groups
comes from wireshark/ethereal where they were added Aug 21 2002
http://anonsvn.wireshark.org/viewvc/viewvc.py/trunk/epan/dissectors/packet-dcerpc-samr.c?r1=5987&r2=6054
3 bits :
get attributes
get group membership
change group membership
also come from wireshark/ethereal where they were added Jul 24 2003
http://anonsvn.wireshark.org/viewvc/viewvc.py/trunk/epan/dissectors/packet-dcerpc-samr.c?r1=8022&r2=8080
(This used to be commit 1c2729228a341a2d063a444e9546e7e09f23c966)
|
|
domains on the samr pipe
10 of these bits :
lookup info 1
set info 1
lookup info 2
set info 2
create user
create group
create alias
enum account
open account
set info 3
come from wireshark/ethereal and were added to wireshark in Aug 21 2002
http://anonsvn.wireshark.org/viewvc/viewvc.py/trunk/epan/dissectors/packet-dcerpc-samr.c?r1=5987&r2=6054
one bit
lookup alias
also comes from wireshark where it was added in wireshark in Feb 21 2003
http://anonsvn.wireshark.org/viewvc/viewvc.py/trunk/epan/dissectors/packet-dcerpc-samr.c?r1=7173&r2=7178
(This used to be commit 4b2c8e28657b31c606d21946e7949c9cc52613c9)
|
|
to Groups on the samr pipe
the five bits
lookup info
set info
add member
remove member
get members
comes from the wireshark/ethereal sources where they were added in Aug
21 2002
http://anonsvn.wireshark.org/viewvc/viewvc.py/trunk/epan/dissectors/packet-dcerpc-samr.c?r1=5987&r2=6054
(This used to be commit 1f00ac5dbe8f034d845c4e579a3f517311784900)
|
|
these five access mask bits :
add member
remove members
get members
lookup info
set info
come from wireshark/ethereal where they were added to cvs in Aug 21 2002
http://anonsvn.wireshark.org/viewvc/viewvc.py/trunk/epan/dissectors/packet-dcerpc-samr.c?r1=5987&r2=6054
(This used to be commit e39556ba4cc76b2754ef891d5c696bc3a5761310)
|
|
policy handles that are create by Connect?() calls on the samr pipe.
these bits come from the wireshark/ethereal sources where they have
been documented for a long time.
the bits :
connect to server
initialize server
create domain
were added to wireshark/ethereal in svn 8080 Jul 24 2003
the bits :
open domain
enum domain
shutdown server
were added to wireshark/ethereal in svn 6054 Aug 21 2002
(This used to be commit 04e67bb6807c318de44d5434bc4344b24494b4a1)
|
|
- The icons in usermgr were incorrect, because the acct_flags were
not filled in (due to missing attribute in ldb query)
- The Full name was missing, and the description used as the full
name (due to missing attributes in ldb query and incorrect IDL)
To prove the correctness of these fixes, I added a substantial new
test to RPC-SAMR-USERS, to ensure cross-consistancy between
QueryDisplayInfo and QueryUserInfo on each user.
This showed that for some reason, we must add ACB_NORMAL to the
acct_flags on level 2 queries (for machine trust accounts)...
Getting this right is important, because Samba3's RPC winbind methods
uses these queries.
Andrew Bartlett
(This used to be commit 9475d94a61e36b3507e5fd2e6bb6f0667db4a607)
|
|
RPC-SAMBA3-GETUSERNAME tests before the previous password expiration
fixes, because if you create a user and only set the password
administratrively, the "last set time" should not get updated. Needed
to add some more of the fields_present flags to do this.
(This used to be commit ce5637de22c19551c0ce5147658ceae33b976ef1)
|
|
(This used to be commit 2eae55819ec51dc53aa8bdea7b777cb2e8444cea)
|
|
(This used to be commit 0b1e793ed56e3c4c592d8baaf3139e42b01b942b)
|
|
way to setup a Samba4 DC is to set 'server role = domain controller'.
We use the fSMORoleOwner attribute in the base DN to determine the PDC.
This patch is quite large, as I have corrected a number of places that
assumed taht we are always the PDC, or that used the smb.conf
lp_server_role() to determine that.
Also included is a warning fix in the SAMR code, where the IDL has
seperated a couple of types for group display enumeration.
We also now use the ldb database to determine if we should run the
global catalog service.
In the near future, I will complete the DRSUAPI
DsGetDomainControllerInfo server-side on the same basis.
Andrew Bartlett
(This used to be commit 67d8365e831adf3eaecd8b34dcc481fc82565893)
|
|
(This used to be commit 347ae9628202ca4de4318ef8156999239aad9192)
|
|
quite a few of them (not sure if these are used actually).
rafal
(This used to be commit 1622d4608bc738b73d6f51c758828f96602b3e59)
|
|
rafal
(This used to be commit ec59441977205af9a38926b3d432ec0de6379573)
|
|
(This used to be commit d1364ef0cd8f1a64f44476476323ab390ac4de48)
|
|
of interpreting them as samr_AcctFlags.
Guenther
(This used to be commit ed02c1afc82391f5aeb7caa9a6cd942b1b95e630)
|
|
(This used to be commit 3f80b6b87bf4a3ae3a2fce51764ed70bcf0ea497)
|
|
the unknown value in the samr_GroupInfo structures are the group
attributes.
Andrew Bartlett
(This used to be commit c50095efabb62fbed2e4df7e883df1054e4d92c9)
|
|
in having pointers for outgoing data when you can already modify the top-level
element.
This can be overridden (temporarily) by specifying the new "keepref"
attribute. Once we've removed keepref from all IDL files, I'll remove this
attribute as well.
(This used to be commit bdc6dd37503ced8322a671d225122ccffbb8bfec)
|
|
types from .h file that are now in pidls' aliases list.
(This used to be commit fadb9529ec7e1208b9f58a4e8b633d5a50633e82)
|
|
although not automatically tested in smbtorture right now.
Guenther
(This used to be commit 46e191cfa5cc45175b23815017f70d6271e35e23)
|
|
metze
(This used to be commit 9dad1fb7bbc387d10c38334e3393dc9f18f4fa2f)
|
|
sure about.
This finds a new ACB_PW_EXPIRED attribute.
Andrew Bartlett
(This used to be commit 54caf949425cb9a3437bd7051930384167b5e07d)
|
|
Guenther
(This used to be commit cd569446a1bbfca08ff16a06b3af7bb94986a5ad)
|
|
Guenther
(This used to be commit 8e939896822e9727919a49638c818a7d7faabb78)
|
|
Guenther
(This used to be commit 0d918764b1f0c1aa65f826b9a845746c914f87df)
|
|
Administrator, not Domain Admins in general).
Guenther
(This used to be commit abad44a57dfdf492f548c05a897af341ba0f5e68)
|
|
(merge from Samba 3).
Guenther
(This used to be commit fa1127c5456fd112568e929e409953dcd3cb2e21)
|
|
prototype.
Andrew Bartlett
(This used to be commit a3abffc75805c8e333f387a96a1dbc352669d359)
|
|
(This used to be commit 6a8291c80ee814a6bdc092b3ef53f450f30b44a0)
|
|
- fixed winreg_GetKeySecurity() to use a sec_info field correctly
- simplied the winreg torture code, removing the separate opens for
each hive
- added torture cleanup code in winreg test
- added 'create with security descriptor' in the winreg torture test
(This used to be commit f20695decd587f7b6bbdbd4861441bd19ab85078)
|
|
metze
(This used to be commit e601042c07d7b6eed0dc34e5b136d9266b8a0f81)
|
|
We now generate the PAC, and can verifiy both our own PAC and the PAC
from Win2k3.
This commit adds the PAC generation code, spits out the code to get
the information we need from the NETLOGON server back into a auth/
helper function, and adds a number of glue functions.
In the process of building the PAC generation code, some hints in the
Microsoft PAC specification shed light on other parts of the code, and
the updates to samr.idl and netlogon.idl come from those hints.
Also in this commit:
The Heimdal build package has been split up, so as to only link the
KDC with smbd, not the client utils.
To enable the PAC to be veified with gensec_krb5 (which isn't quite
dead yet), the keyblock has been passed back to the calling layer.
Andrew Bartlett
(This used to be commit e2015671c2f7501f832ff402873ffe6e53b89466)
|
|
they slightly changed the semantics of value() in pidl, which broke
a optimisation hack in some of our IDL files.
I've changed the idl files to remove the hack for now. Sometime we
need to find a better way to handle these :-)
(This used to be commit 765f75ea630b13b1605409ff47a52cc11a1e496b)
|
|
us somewhat cleaner IDL.
(This used to be commit b7b01bccd101654d1f5ec83cba9dea7e9431d6ce)
|
|
should
now able to use constructions like these:
[size_is(20)] int *x; -> Pointer to array of 20 ints
[size_is(20)] int x[]; -> Array of 20 ints
[size_is(20)] int *x[]; -> Array of 20 pointers to ints
[size_is(20,)] int *x[] -> Array of 20 pointers to ints
[size_is(,20)] int *x[]; -> Pointer to array of 20 ints
[size_is(,20)] int **x; -> Pointer to pointer to array of 20 ints
[size_is(20)] int x[][30]; -> 20 blocks of 30 ints
(This used to be commit ecf583da71c2f80be124c17fccdcb284b47e0695)
|
|
The main difference in this new version is the extra data structure generated
between the IDL data structure and the NDR parser:
IDL -> NDR -> { ndr_parser, ndr_header, eparser, etc }
This makes the ndr_parser.pm internals much more sane.
Other changes include:
- Remove unnecessary calls with NDR_BUFFERS (for example, GUID doesn't have any buffers, just scalars) as well as some (unnecessary) nested setting of flags.
- Parse array loops in the C code rather then calling ndr_pull_array(). This allows us to have, for example, arrays of pointers or arrays of pointers to arrays, etc..
- Use if() {} rather then if () goto foo; everywhere
- NDR_IN no longer implies LIBNDR_FLAG_REF_ALLOC
- By default, top level pointers are now "ref" (as is the default in
most other IDL compilers). This can be overridden using the
default_pointer_top() property.
- initial work on new ethereal parser generators by Alan DeKok and me
- pidl now writes errors in the standard format used by compilers, which
is parsable by most editors
- ability to warn about the fact that pidl extension(s) have been used,
useful for making sure IDL files work with other IDL compilers.
oh, and there's probably some other things I can't think of right now..
(This used to be commit 13cf227615f6b9e0e5fa62e59197024410254f01)
|
|
Fill out the group list for the SamLogon reply, so clients get the
supplementary groups.
Andrew Bartlett
(This used to be commit d9c31e60a72c345e3a23a7eb742906bcfc18721c)
|
|
(This used to be commit 63dfa9b80649928baf72687381fcfb6dd4d20032)
|
|
Andrew Bartlett
(This used to be commit 7822101cb5213f192f3195648970784a9de4fac4)
|
|
the SAMR server.
Andrew Bartlett
(This used to be commit fd748f9d2f8f354f76587d92b94de83bffe1c6dc)
|
|
- Makes union handling less special
- Allows unions in arrays, etc
- Compatible with midl
- Pidl will warn about switch_type() and the type of the switch_is() variable being different
(This used to be commit dc6b4ffc82a191631bc16a4b93a4916a39183ec6)
|
|
array can now only be :
type *name[];
rather then :
type *name;
which was supported in the past. Warnings will be given when the first
syntax is used. Reasons for this change in behaviour include improved
readability and the fact that the second format makes dealing with multiple
levels of pointers harder.
(This used to be commit a416de5825c540fd3741731c4be05e9a659a6fdb)
|