Age | Commit message (Collapse) | Author | Files | Lines |
|
(This used to be commit 3cc299dbbe278936281f8e7071e6de8ec1bb219c)
|
|
metze
(This used to be commit 6ce994720cdd8b7dd0b789460b5ae7da19261696)
|
|
for ADS style ace's
metze
(This used to be commit 161fea1a141de085eb6c84efc5b120e00cf95943)
|
|
metze
(This used to be commit e85a4bfbf3309019e31c2b598b3a564daad0df98)
|
|
(This used to be commit 2ba225ee12180d40a957e4e9a824a544c803a265)
|
|
as w2k3 doesn't return it when you ask for we don't know
the exact format, but we assume that it starts with a uint32 version
and as this attribute is not replicated we can chosse our own version...
metze
(This used to be commit cf546b7c182f6a9b636023377b5260d155bc15dd)
|
|
metze
(This used to be commit 6237d9f0b575ccb739b96d2a9f4c3643a727c4b7)
|
|
metze
(This used to be commit dd2832b37a8cb82d62b4974b779a178bb2872839)
|
|
metze
(This used to be commit 352d88c8a8ebe4d0ab9f89c9e7eadc3c29d5cdd2)
|
|
(This used to be commit 1afcf850679b6752935455a8f9198679649922b8)
|
|
uint32_t server_id
to
struct server_id server_id;
which allows a server ID to have an node number. The node number will
be zero in non-clustered case. This is the most basic hook needed for
clustering, and ctdb.
(This used to be commit 2365abaa991d57d68c6ebe9be608e01c907102eb)
|
|
This patch updates our build system and glue to support a new snapshot
of lorikeet-heimdal.
We now procude a [SUBSYTEM] in the ans1_deps.pl script, and can depend
on that in the heimdal_build/config.mk. This is much easier than
listing every generated .o file individually.
This required some small changes to the build system, due to the way
the parent directory was handled for the output of scripts. I've also
cleaned up et_deps.pl to handle cleaning up it's generated files on
clean.
The PAC glue in Heimdal has changed significantly: we no longer have a
custom hack in the KDC, instead we have the windc plugin interface.
As such, pac-glue.c is much smaller. In the future, when I'm
confident of the new code, we will also be able to 'downsize'
auth/kerberos/kerberos_pac.c.
(I'll include the updated copy of heimdal in the next chekin, to make
it clearer what's changed in Samba4 itself).
Andrew Bartlett
(This used to be commit 75fddbbc0811010a28ca5bb597b573b3f10ef6d6)
|
|
(This used to be commit 1df96af3103795f609165e7a7344e1bf6046be79)
|
|
for NT4 DC's in mixed mode domains.
This call is triggered by tranferring the PDC FSMO Role to another DC
the real meta data is encoded in the user buffer which is just a DATA_BLOB in idl
metze
(This used to be commit d883815c8d64429e4dac26a93a15e67d31dc263e)
|
|
the extra binary blob
metze
(This used to be commit 89f5389e8d9046a2bc96f76297cab5ffef847a25)
|
|
metze
(This used to be commit 58066e2252001b7689705d296a16438733cfdfc4)
|
|
- I also found the meaning of the time field
- and the uint32 field
metze
(This used to be commit f3c83dfb0199c8914f9c0ce53b045268b7e0e88f)
|
|
don't need the union with the attribute id as switch anymore
metze
(This used to be commit d47c81923d0731edd314215c6f0b2eb3d1ee252d)
|
|
Fedora DS.
Andrew Bartlett
(This used to be commit 918e52fa5f527c427b46c1e1794131bcddab38f1)
|
|
metze
(This used to be commit 4c2addf2dd5b74fa0026249ce373ff4becaaef40)
|
|
metze
(This used to be commit ececda44c74ae4ccbaa0492acb67a88aa5c05126)
|
|
metze
(This used to be commit 13ccd405b5dbb595e5ab67879260462e5a767a8b)
|
|
metze
(This used to be commit b7ab1c0039cd8000861cd89ca072d9d2b0bbf9de)
|
|
metze
(This used to be commit 8d80629c5dde44a06b597e1247ec96ef1cd3f2e1)
|
|
the ldb_to_drsuapi version need to be completed, but it's
currently not used...
metze
(This used to be commit 9b31e8c1f73aaf71522e33174c8c5415a95ac626)
|
|
metze
(This used to be commit a801041f1f03b97154d79139d764010453bd9263)
|
|
specific attribute values.
start with ntSecurityDescriptor
metze
(This used to be commit c72f5a16b4de2b8cc4f4a9c21b0dc3915a1d6c9f)
|
|
- make drsuapi_DsReplicaAttribute public so that the ndr_print_*
function can be used from the outside
metze
(This used to be commit f12776b9a9de55d5c67335d5e59c0d83a74ac939)
|
|
call between 2 w2k3 boxes nicely, but I'm not sure if the amount
of 9 chunks is fixed...
metze
(This used to be commit adceac88519b5d61b759eac6e0b152da0529f85c)
|
|
Try to pass more of the CrackNames test. Make the test quieter.
Andrew Bartlett
(This used to be commit a6bbfebf52f53f99b0edf52d3c23b72785b97469)
|
|
there's a blob containing the real data,
but that needs handwritten code
metze
(This used to be commit dcb0ea99ba7589a3204d19f54c75a464f97bd1fd)
|
|
metze
(This used to be commit f7f9f174d77ddf7d4880b430b5dc7154ea1ddb3b)
|
|
returned by DsBind() on all drsuapi connection also contains the client
ip address. Also the u1 value of the clients DsBindInfoX structure is returned
in u5 here...
metze
(This used to be commit 1adb0fb291d788d0bf10a49b05970ac72eb4764e)
|
|
of all active connections to the Directory Service Agent (DSA)
(This can be LDAP or DRSUAPI connections)
abartlet: you had just luck by using flag(BIG_ENDIAN) as BIG_ENDIAN is
defined in <endian.h>, it should be flag(NDR_BIG_ENDIAN)...
metze
(This used to be commit c7e639763de1f8ddccfb954227feeaddb7386edc)
|
|
usual things are more complex than they appear.
Also remove the incorrect server-side implementation, which blindly
assumed some sense of consistancy across the API switch levels.
Andrew Bartlett
(This used to be commit 79941adbff843f5027dacd31b972deca4a1557ec)
|
|
we crashed before trying ncacn_np: for frsrpc
as frsrpc doesn't have a ncacn_np endpoint listed
in the idl header and the endpoint mapping code
was trying our smbcli lib with a
NULL target_hostname -> called_name
metze
(This used to be commit ed49e4b1f87db483768dec36732b0c9765d1d4bc)
|
|
metze
(This used to be commit bbd086f2edf81028f2370be8ce0739144cd64b02)
|
|
supprisingly complex call...
It turns out that the in/out parameter 'level' is not in/out, but set
seperatly by the server-side code from r->req.req1.level.
This commit also breaks out some common code from samldb into samdb.
Andrew Bartlett
(This used to be commit 2eb9e6445c64840399171f4f56b1e43786dbcfa7)
|
|
(This used to be commit 40406355135d5bebd9dad27168ab695657271f4f)
|
|
metze
(This used to be commit 6d0c788f3dffb7a553464404ebd9c0487d668bc5)
|
|
metze
(This used to be commit 0777a8e749e8df88dd1b9f7be9e4f3012559243b)
|
|
Do not require an artificial ASN.1 context to be setup.
Simo.
(This used to be commit 14b3b9861ae47498c74a6643e6979b3d85260a61)
|
|
metze
(This used to be commit ebbd6263bbc30001e25603c5e4f45393b5fadb3d)
|
|
and we return the array as hexstring. this is always in the last
array member of the meppings array, and I is always 21 bytes long
w2k in mixed mode: FF0000000000000000000000000000000000000000
w2k3 in mixed mode: FF00000002A5DA73B101C43B449028E2F832FE466F
w2k3 in native mode: FF00000001635D94BDE62E2C4C9BAC9D6AFA4F69F8
I assume it's some kind of schema version...
metze
(This used to be commit db16f6382da50167b6cefdaeb8488b00a45fb928)
|
|
uint8_t arrays
with ber encoded oid's
metze
(This used to be commit bc13b3690166b29df246cc4778b378e9cf2a22d7)
|
|
transferred
in replication replies, but I don't know the exact encoding.
for example the oids are transferred as:
2.5.4 => uint8_t v[] = { 0x55, 0x04 };
2.5.5 => uint8_t v[] = { 0x55, 0x05 };
2.5.6 => uint8_t v[] = { 0x55, 0x06 };
2.5.18 => uint8_t v[] = { 0x55, 0x12 };
2.5.20 => uint8_t v[] = { 0x55, 0x14 };
2.5.21 => uint8_t v[] = { 0x55, 0x15 };
1.2.840.113556.1.2 => uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x14, 0x01, 0x02 };
1.2.840.113556.1.3 => uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x14, 0x01, 0x03 };
1.2.840.113556.1.4 => uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x14, 0x01, 0x04 };
1.2.840.113556.1.5 => uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x14, 0x01, 0x05 };
1.2.840.113556.1.5.7000 => uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x14, 0x01, 0x05, 0xb6, 0x58 };
1.2.840.113549.1.9 => uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x09 };
2.16.840.1.113730.3 => uint8_t v[] = { 0x60, 0x86, 0x48, 0x01, 0x86, 0xf8, 0x42, 0x03 };
2.16.840.1.113730.3.1 => uint8_t v[] = { 0x60, 0x86, 0x48, 0x01, 0x86, 0xf8, 0x42, 0x03, 0x01 };
2.16.840.1.113730.3.2 => uint8_t v[] = { 0x60, 0x86, 0x48, 0x01, 0x86, 0xf8, 0x42, 0x03, 0x02 };
0.9.2342.19200300.100.1 => uint8_t v[] = { 0x09, 0x92, 0x26, 0x89, 0x93, 0xf2, 0x2c, 0x64, 0x01 };
0.9.2342.19200300.100.4 => uint8_t v[] = { 0x09, 0x92, 0x26, 0x89, 0x93, 0xf2, 0x2c, 0x64, 0x04 };
1.3.6.1.4.1.250.1 => uint8_t v[] = { 0x2b, 0x06, 0x01, 0x04, 0x01, 0x81, 0x7a, 0x01 };
1.3.6.1.4.1.1466.101.119=> uint8_t v[] = { 0x2b, 0x06, 0x01, 0x04, 0x01, 0x8b, 0x3a, 0x65, 0x77 };
if someone knows how the encoding works, please tell me:-)
I assume some ASN.1 encoding...
metze
(This used to be commit aa720a15319392fee5c532959192d0df5bf4c718)
|
|
metze
(This used to be commit 3d51ce92c272582e19046337ea6b8b2acd60997d)
|
|
metze
(This used to be commit 38ae6ce7b9b5dd733e4e838da04d1c570c450c97)
|
|
way to setup a Samba4 DC is to set 'server role = domain controller'.
We use the fSMORoleOwner attribute in the base DN to determine the PDC.
This patch is quite large, as I have corrected a number of places that
assumed taht we are always the PDC, or that used the smb.conf
lp_server_role() to determine that.
Also included is a warning fix in the SAMR code, where the IDL has
seperated a couple of types for group display enumeration.
We also now use the ldb database to determine if we should run the
global catalog service.
In the near future, I will complete the DRSUAPI
DsGetDomainControllerInfo server-side on the same basis.
Andrew Bartlett
(This used to be commit 67d8365e831adf3eaecd8b34dcc481fc82565893)
|
|
metze
(This used to be commit 4daa45f98a3bb6f3c245fe61e05681335ef8b5c6)
|