Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2011-03-01 | s4:drsuapi RPC server - check for the "SPN" attribute != NULL | Matthias Dieter Wallnöfer | 1 | -0/+6 | |
The SPN attribute could derive from an untrusted source (client). Reviewed-by: Jelmer | |||||
2011-03-01 | s4:remove many invocations of "samdb_msg_add_string" | Matthias Dieter Wallnöfer | 1 | -4/+3 | |
This call can be substituted by "ldb_msg_add_string". We only need to be careful on local objects or talloc'ed ones which live shorter than the message. Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-11-27 | s4:drsuapi RPC server - fix "enum security_user_level" warning on Tru64 | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
2010-11-13 | s4-drs: fixed a crash in writspn | Andrew Tridgell | 1 | -2/+8 | |
sam_ctx_system may be NULL for non-privileged users Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Sat Nov 13 08:52:53 UTC 2010 on sn-devel-104 | |||||
2010-11-08 | s4:drsuapi RPC server - writespn.c - fix indentations | Matthias Dieter Wallnöfer | 1 | -15/+24 | |
2010-11-08 | s4-drs: allow bypass of writespn checking for some SPNs | Andrew Tridgell | 1 | -1/+111 | |
this allows accounts (and in particular RODCs) to make SPN updates on their own account if they take the form SERVICE/hostname we may be able to remove this in the future after some changes in our ACL checking for userPrincipalName Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 08:45:16 UTC 2010 on sn-devel-104 | |||||
2010-10-31 | s4:drsuapi RPC server - fix counter variables | Matthias Dieter Wallnöfer | 1 | -3/+6 | |
2010-02-16 | s4-dsdb: replace dsdb_modify_permissive() with dsdb_modify() and dsdb_flags | Andrew Tridgell | 1 | -1/+2 | |
2010-02-15 | s4-drs: replace manual checks with dsdb_modify_permissive() | Andrew Tridgell | 1 | -32/+1 | |
Much simpler to use the permissive control instead of manually munging the SPN list. | |||||
2010-01-09 | s4-drs: having no SPNs to change is not an error | Andrew Tridgell | 1 | -0/+7 | |
2010-01-09 | s4-drs: fixed writespn to ignore add/delete errors | Andrew Tridgell | 1 | -3/+40 | |
When a SPN is added and already exists, it is ignored. Similarly, when a SPN is deleted and doesn't exist, it is ignored. | |||||
2010-01-09 | s4-drs: moved the DsWriteAccountSpn call to its own file | Andrew Tridgell | 1 | -0/+101 | |