summaryrefslogtreecommitdiff
path: root/source4/rpc_server/drsuapi/dcesrv_drsuapi.h
AgeCommit message (Collapse)AuthorFilesLines
2010-08-20s4-drs: added sam_ctx_system on DRS bind stateAndrew Tridgell1-0/+1
The getncchanges call needs to be able to access the sam as the system user for RODC clients. To do this it needs a sam_ctx connection with system credentials Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-08-17s4-drs: added domain_sid to DRS security checksAndrew Tridgell1-1/+2
we need the domain_sid to determine if the account is a RODC for our domain Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-04-22s4-drs: added new SECURITY_RO_DOMAIN_CONTROLLER levelAndrew Tridgell1-1/+2
This is used for allowing operations by RODCs, and denying them operations that should only be allowed for a full DC This required a new domain_sid argument to security_session_user_level() Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Rusty Russell <rusty@samba.org>
2010-01-09s4-drs: moved the DsWriteAccountSpn call to its own fileAndrew Tridgell1-0/+2
2010-01-02s4-drs: we are doing the sorting for getncchanges in the app code nowAndrew Tridgell1-1/+0
the sorting is quite delicate, and easier to get right in the getncchanges code Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2009-10-15s4-drs: implement more of DsUpdateRefsAndrew Tridgell1-0/+2
The DsUpdateRefs calls takes a set of flags that indicates if the server should ignore specific add/delete error codes. This patch also exposes the core UpdateRefs call into a public function, so that it can be called from DsGetNCChanges
2009-09-28s4-drsuapi: state variable for getncchangesAndrew Tridgell1-0/+1
2009-09-23s4: Handle DRSUAPI_DS_REPLICA_NEIGHBOUR_SPECIAL_SECRET_PROCESSING in ↵Anatoliy Atanasov1-0/+3
getncchanges When this flag is specified in the request these attributes are treated as secret: currentValue, dBCSPwd, initialAuthIncoming, initialAuthOutgoing, lmPwdHistory, ntPwdHistory, priorValue, supplementalCredentials, trustAuthIncoming, trustAuthOutgoing, unicodePwd Their value is changed to NULL and the meta_data.originating_change_time to 0
2009-09-23s4: Handle DRSUAPI_DS_REPLICA_NEIGHBOUR_CRITICAL_ONLY req in getncchangesAnatoliy Atanasov1-1/+1
2009-09-22s4-drsserver: sort by DN to give tree orderAndrew Tridgell1-1/+2
This might help the windows client with ordered requests. Later we need to support the "ancestors" mode flag.
2009-09-19Add drs_security_level_check for dcesrv calls security checksAnatoliy Atanasov1-0/+2
There is also an option to disable the security check by specifying in the smb.conf file: drs:disable_sec_check = true
2009-09-09s4:drs split addentry and getncchanges into separate filesAndrew Tridgell1-0/+12
These will get quite complex eventually, I think we are better separating them so the code is a bit easier to follow
2009-09-08s4: implemented server side of DSUpdateRefs callAndrew Tridgell1-0/+9
This call is made by DCs to tell us we should notify them of directory changes
2007-10-10r23792: convert Samba4 to GPLv3Andrew Tridgell1-3/+2
There are still a few tidyups of old FSF addresses to come (in both s3 and s4). More commits soon. (This used to be commit fcf38a38ac691abd0fa51b89dc951a08e89fdafa)
2007-10-10r21512: finish DsBind() in the DRSUAPI server:Stefan Metzmacher1-1/+4
- fill in our on bind_info struct correctly - remember the local and remote DsBindInfo28 struct - remember the remote bind_buid w2k3 now tries replicate using DsGetNCChanges() from us, after the NET-API-BECOME-DC test created the domain controller and replicated all data. (But we still give a DCERPC fault in DsGetNCChanges()...) metze (This used to be commit 33550c063d4e206fce63fdd99dc93a56995db580)
2007-10-10r3784: do a samdb lookup for the DsCrackNames serverStefan Metzmacher1-1/+1
metze (This used to be commit a2776eca83117131f8316ca222a2f385ffa5d7d5)
2007-10-10r2889: add DRSUAPI serverStefan Metzmacher1-0/+35
- with DsBind and DsUnbind implmented :-) the RPC-DRSUAPI test works metze (This used to be commit 536af87ef12024615728ce0060b557f6f504e33f)