Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-04-27 | s4:rpc_server: remove 'socket_address' based functions | Stefan Metzmacher | 3 | -23/+0 | |
metze | |||||
2010-04-27 | s4:rpc_server/srvsvc: pass tsocket_address to the ntvfs layer | Stefan Metzmacher | 1 | -13/+5 | |
metze | |||||
2010-04-27 | s4:rpc_server/spoolss: use tsocket_address in dcesrv_spoolss_check_server_name() | Stefan Metzmacher | 1 | -4/+7 | |
metze | |||||
2010-04-27 | s4:rpc_server/netlogon: use tsocket_address in dcesrv_netr_DsRGetDCNameEx2() | Stefan Metzmacher | 1 | -5/+9 | |
metze | |||||
2010-04-27 | s4:rpc_server: remember the local and remote address | Stefan Metzmacher | 3 | -0/+18 | |
metze | |||||
2010-04-27 | s4:netr_DsRAddressToSitenames[Ex]W calls - implement them correctly with the ↵ | Matthias Dieter Wallnöfer | 1 | -16/+98 | |
client site information This behaviour should be similar to the one of Windows Server (in my case 2008) | |||||
2010-04-27 | Revert "s4:netr_DsRAddressToSitenames[Ex]W calls - implement them correctly ↵ | Matthias Dieter Wallnöfer | 1 | -93/+16 | |
with the client site information" This reverts commit 908d982980846257b65ab576d31131e8793e9399. I need to merge the improved version of this commit. | |||||
2010-04-27 | Revert "s4-netlogon: fixed breakage of dcesrv_netr_GetAnyDCName in sites patch" | Matthias Dieter Wallnöfer | 1 | -0/+6 | |
This reverts commit e88a54a87e185b44e2d216bd853e6a87bf950be6. This isn't the correct behaviour. See MS-NRPC documentation under the "GetAnyDCName" section. | |||||
2010-04-27 | s4-netlogon: fixed breakage of dcesrv_netr_GetAnyDCName in sites patch | Andrew Tridgell | 1 | -6/+0 | |
We should respond when we are the PDC Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-27 | s4:netlogon RPC server - we don't need "are we DC" proofs | Matthias Dieter Wallnöfer | 1 | -8/+0 | |
When we aren't a DC we shouldn't have the netlogon pipe available. [MS-NRPC 1.3] says that we can only have DCs on the server side. Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-27 | s4:dcesrv_netr_DsrGetDcSiteCoverageW - provide a basic implementation | Matthias Dieter Wallnöfer | 1 | -1/+23 | |
Does for now only return DC's primary site. Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-27 | s4:dcesrv_netr_DsRGetSiteName - provide an implementation according to the ↵ | Matthias Dieter Wallnöfer | 1 | -1/+13 | |
MS-NRPC docs Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-27 | s4:dcesrv_netr_GetAnyDCName - improve the call according to the MS-NRPC ↵ | Matthias Dieter Wallnöfer | 1 | -7/+55 | |
documentation This implementation checks if the domainname is valid for us or a trusted domain. Then I've also added the PDC location functionality. That means that we should return "WERR_NO_SUCH_DOMAIN" (MS-NRPC 3.5.5.2.5). Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-27 | s4:netr_DsRAddressToSitenames[Ex]W calls - implement them correctly with the ↵ | Matthias Dieter Wallnöfer | 1 | -16/+93 | |
client site information This behaviour should be similar to the one of Windows Server (in my case 2008) Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-27 | s4-getncchanges: honor DRSUAPI_DRS_REF_GCSPN | Andrew Tridgell | 1 | -1/+3 | |
this is an alternative way of establishing repsTo | |||||
2010-04-26 | s4-drs: don't send uninstantiated objects in getncchanges | Andrew Tridgell | 1 | -0/+5 | |
This includes deleted partitions Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-22 | s4-drs: validate RODC credentials via the user_sid | Andrew Tridgell | 1 | -27/+12 | |
This checks whether a replication client is a RODC by inclusion of the the DOMAIN_RID_ENTERPRISE_READONLY_DCS sid in the users token Pair-Programmed-With: Rusty Russell <rusty@samba.org> Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-22 | s4-drs: added new SECURITY_RO_DOMAIN_CONTROLLER level | Andrew Tridgell | 7 | -27/+47 | |
This is used for allowing operations by RODCs, and denying them operations that should only be allowed for a full DC This required a new domain_sid argument to security_session_user_level() Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Rusty Russell <rusty@samba.org> | |||||
2010-04-22 | s4-drs: only allow replication with the right invocationId | Andrew Tridgell | 1 | -1/+20 | |
Non-administrator replication checks the invocationId matches the sid of the user token being used Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-22 | s4-drs: Use new samdb_rodc() function in s4 code | Fernando J V da Silva | 1 | -1/+3 | |
This patch fits the calling to the new samdb_rodc() function and fix a little bug in this function. Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-22 | s4-drs: Do not send RODC filtered attributes to RODCs on GetNCChanges reply | Fernando J V da Silva | 1 | -0/+14 | |
During building an object to send it on a GetNCChanges reply, it checks the attributes and if any of them is a RODC filtered and the recipient is a RODC, then such attribute is not sent. Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-22 | s4-drs: samdb_is_rodc() function and new samdb_rodc() function | Fernando J V da Silva | 2 | -2/+16 | |
This patch creates the samdb_is_rodc() function, which looks for the NTDSDSA object for a DC that has a specific invocationId and if msDS-isRODC is present on such object and it is TRUE, then consider the DC as a RODC. The new samdb_rodc() function uses the samdb_is_rodc() function for the local server. Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-21 | s4:netlogon RPC server - fix a counter variable type | Matthias Dieter Wallnöfer | 1 | -1/+2 | |
2010-04-20 | s4:rpc_server/netlogon: add no memory checks | Stefan Metzmacher | 1 | -1/+2 | |
metze | |||||
2010-04-20 | s4-netlogon: fixed dc_unc and dc_address_type | Andrew Tridgell | 1 | -1/+3 | |
These are needed for dcpromo from w2k8r2 | |||||
2010-04-20 | s4:netlogon RPC - "fill_one_domain_info" - use "lp_workgroup" for the DC ↵ | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
short domainname discovery Here we don't need to use "lp_sam_name" since in this function we are always a DC. | |||||
2010-04-13 | s4:"samdb_server_site_name" uses - proof for out of memory | Matthias Dieter Wallnöfer | 1 | -1/+4 | |
2010-04-13 | s4:dcesrv_netr_DsRGetDCNameEx2 - provide a much better implementation | Matthias Dieter Wallnöfer | 1 | -52/+37 | |
On the base of the "fill_netlogon_samlogon_response" call. This removes duplicated code. | |||||
2010-04-13 | s4:use "samdb_forest_name" for the forest DNS domainname lookup | Matthias Dieter Wallnöfer | 1 | -13/+8 | |
2010-04-13 | Revert "s4:prefer "samdb_*_dn" basedn calls over the "ldb_get_*_dn" functions" | Matthias Dieter Wallnöfer | 3 | -7/+8 | |
We should use the "ldb_get_*_basedn" calls since they are available in the LDB library. | |||||
2010-04-12 | s3/s4:netlogon IDL - fix up "struct netr_SamInfo6" regarding the "forest" ↵ | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
attribute According to MS-NRPC 2.2.1.4.13 this should be the DNS domainname, not the forest one. | |||||
2010-04-12 | s4:prefer "samdb_*_dn" basedn calls over the "ldb_get_*_dn" functions | Matthias Dieter Wallnöfer | 2 | -2/+2 | |
Purely cosmetic change. | |||||
2010-04-11 | s4:auth Remove event context from anonymous_session() | Andrew Bartlett | 2 | -2/+1 | |
This should always return a simple structure with no need to consult a DB, so remove the event context, and simplfy to call helper functions that don't look at privilages. Andrew Bartlett | |||||
2010-04-10 | s4:rpc_server Fix segfault in modified SamLogon handling | Andrew Bartlett | 1 | -0/+1 | |
2010-04-10 | s4:rpc_server Add all SIDs into the netlogon SamLogon reply | Andrew Bartlett | 1 | -32/+52 | |
We were missing the SIDs that are not in the domain. | |||||
2010-04-09 | s4-winreg: Fix dcesrv_winreg_CreateKey after rename. | Günther Deschner | 1 | -1/+1 | |
Guenther | |||||
2010-04-09 | s4-winreg: add winreg_DeleteKeyEx stub. | Günther Deschner | 1 | -0/+9 | |
Guenther | |||||
2010-04-06 | s4-waf: mark the wscript files as python so vim/emacs knows how to highlight ↵ | Andrew Tridgell | 1 | -0/+2 | |
them | |||||
2010-04-06 | s4-waf: install the rest of the headers | Andrew Tridgell | 1 | -4/+1 | |
2010-04-06 | build: waf quicktest nearly works | Andrew Tridgell | 1 | -3/+3 | |
Rewrote wafsamba using a new dependency handling system, and started adding the waf test code | |||||
2010-04-06 | build: commit all the waf build files in the tree | Andrew Tridgell | 1 | -0/+138 | |
2010-03-30 | s4:lsa implement lsaRSetForestTrustInformation | Simo Sorce | 1 | -5/+549 | |
2010-03-29 | s4:registry - move the UTF16 length calculation for "reg_key_get_info" into ↵ | Matthias Dieter Wallnöfer | 1 | -0/+9 | |
the RPC server code It does fit better there. | |||||
2010-03-24 | s4/drs: drsuapi_DsAddEntry_ErrData propagate structure def in source code | Kamen Mazdrashki | 1 | -4/+4 | |
2010-03-22 | s4:lsa Functions to set Domain Trust Information | Simo Sorce | 1 | -7/+592 | |
2010-03-22 | s4:lsa move code to add trusted domain user into its own function | Simo Sorce | 1 | -72/+101 | |
2010-03-22 | s4:lsa Abstract crypto (un)wrapping in separate functions | Simo Sorce | 1 | -81/+89 | |
2010-03-22 | s4:WINREG RPC - add also here a "W_ERROR_HAVE_NO_MEMORY" | Matthias Dieter Wallnöfer | 1 | -0/+1 | |
2010-03-22 | s4:registry - adaptions for "add memory contexts for delete value/key functions" | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
2010-03-21 | s4:WINREG RPC server - don't check for the "name" size in "EnumValue" | Matthias Dieter Wallnöfer | 1 | -5/+0 | |
This isn't needed at all since: 1.) a new name object is created and sent back to the client 2.) the "size" seems to be the size of the "name" pointer. On my test with the "regedt32" program this has always been "4". |