Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-04-22 | s4-drs: added new SECURITY_RO_DOMAIN_CONTROLLER level | Andrew Tridgell | 1 | -2/+2 | |
This is used for allowing operations by RODCs, and denying them operations that should only be allowed for a full DC This required a new domain_sid argument to security_session_user_level() Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Rusty Russell <rusty@samba.org> | |||||
2010-03-24 | s4/drs: drsuapi_DsAddEntry_ErrData propagate structure def in source code | Kamen Mazdrashki | 1 | -4/+4 | |
2010-02-16 | s4-dsdb: replace dsdb_modify_permissive() with dsdb_modify() and dsdb_flags | Andrew Tridgell | 1 | -1/+2 | |
2010-02-15 | s4-drs: use a permissive modify in addentry | Andrew Tridgell | 1 | -1/+1 | |
It is not an error if entries already exist. | |||||
2010-01-08 | s4-drs: added two more SPNs in addentry | Andrew Tridgell | 1 | -13/+32 | |
w2k8r2 wants these after a DCPROMO Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-01-02 | s4-drs: give a reason when an AddEntry commit fails | Andrew Tridgell | 1 | -1/+2 | |
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2009-10-20 | s4: ran minimal_includes.pl on source4/rpc_server | Andrew Tridgell | 1 | -6/+0 | |
2009-10-14 | s4: Changes the old occurences of "lp_realm" in "lp_dnsdomain" where needed | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
For KERBEROS applications the realm should be upcase (function "lp_realm") but for DNS ones it should be used lowcase (function "lp_dnsdomain"). This patch implements the use of both in the right way. | |||||
2009-10-06 | s4-drs: added some debug lines to DsAddEntry() | Andrew Tridgell | 1 | -0/+3 | |
2009-09-24 | s4-drs: el may not be a talloc pointer | Andrew Tridgell | 1 | -1/+1 | |
Use msg->elements for the new element values | |||||
2009-09-22 | s4-ldb: added a bunch more debug for DC join | Andrew Tridgell | 1 | -0/+6 | |
These additional debug messages were added to help us track down w2k8->s4 domain join | |||||
2009-09-19 | Add drs_security_level_check for dcesrv calls security checks | Anatoliy Atanasov | 1 | -4/+3 | |
There is also an option to disable the security check by specifying in the smb.conf file: drs:disable_sec_check = true | |||||
2009-09-19 | more include minimisation | Andrew Tridgell | 1 | -1/+0 | |
2009-09-19 | s4-rpc_server: removed remaining unnecessary #includes | Andrew Tridgell | 1 | -0/+2 | |
2009-09-15 | s4-drs: lock down key DRS calls | Andrew Tridgell | 1 | -0/+7 | |
The key DRS calls should only be allowed by administrators or domain controllers | |||||
2009-09-11 | s4-drs: fixed the ldap SPN in AddEntry | Andrew Tridgell | 1 | -1/+1 | |
2009-09-11 | s4-drs: actually call the new drsuapi_add_SPNs() code | Andrew Tridgell | 1 | -2/+2 | |
An early return here didn't do any good :-) | |||||
2009-09-11 | s4-drs: add the magic DRS SPNs on AddEntry | Andrew Tridgell | 1 | -4/+120 | |
When a DsAddEntry is used to create a nTDSDSA object we need to also create the SPNs for the NTDS GUID in the servers machine account. | |||||
2009-09-09 | s4:drs level_out is a pointer | Andrew Tridgell | 1 | -1/+1 | |
DsAddEntry now seems to work for simple tests | |||||
2009-09-09 | s4:drs split addentry and getncchanges into separate files | Andrew Tridgell | 1 | -0/+81 | |
These will get quite complex eventually, I think we are better separating them so the code is a bit easier to follow |