Age | Commit message (Collapse) | Author | Files | Lines |
|
(This used to be commit 2b39736c35168b2e6b1ef094de4d83b604ea39f1)
|
|
(This used to be commit 54d698c4888ce453926aed6102621d20fe744031)
|
|
so re-enable
indexing on objectSid
(This used to be commit 5781c83ba4ef919520e9668a40aafc8f74fe5700)
|
|
I'm looking forward to deleting this file when we can add users using
the web intgerface (and maybe ejs scripts for the command line)
(This used to be commit 836e5782fda9edef6746adc6453d8a40df2a1765)
|
|
quite a large change as we had lots of code that assumed that
objectSid was a string in S- format.
metze and simo tried to convince me to use NDR format months ago, but
I didn't listen, so its fair that I have the pain of fixing all the
code now :-)
This builds on the ldb_register_samba_handlers() and ldif handlers
code I did earlier this week. There are still three parts of this
conversion I have not finished:
- the ltdb index records need to use the string form of the objectSid
(to keep the DNs sane). Until that it done I have disabled indexing on
objectSid, which is a big performance hit, but allows us to pass
all our tests while I rejig the indexing system to use a externally
supplied conversion function
- I haven't yet put in place the code that allows client to use the
"S-xxx-yyy" form for objectSid in ldap search expressions. w2k3
supports this, presumably by looking for the "S-" prefix to
determine what type of objectSid form is being used by the client. I
have been working on ways to handle this, but am not happy with
them yet so they aren't part of this patch
- I need to change pidl to generate push functions that take a
"const void *" instead of a "void*" for the data pointer. That will
fix the couple of new warnings this code generates.
Luckily it many places the conversion to NDR formatted records
actually simplified the code, as it means we no longer need as many
calls to dom_sid_parse_talloc(). In some places it got more complex,
but not many.
(This used to be commit d40bc2fa8ddd43560315688eebdbe98bdd02756c)
|
|
that w2k does work. For example, w2k asks for sAMAccountType=805306369 which
will only match if we know its an integer
(This used to be commit 941509ee58253b671bb74b2d8d8667cc6a1a4328)
|
|
unixName that we are running as in the test suite. Otherwise files are
created as a user without any entry in the sam, so the ACL doesn't
allow that user read permission when it should. This should fix the
RAW-ACLS test in the build farm.
(This used to be commit 30445483e4facb0a1d8a5979a2eac6c166193c09)
|
|
object on the
first DC in the forest!
metze
(This used to be commit 8ea59f23728450cd42c221e69f375d6e390c4a79)
|
|
and long names for a domain.
Add servicePrincipalName mapping table (administrator configurable),
in the same spot as microsoft uses.
Andrew Bartlett
(This used to be commit c25e78b4b34384a3a79a920f50f01be696a048ba)
|
|
(This used to be commit 4401c74fbc630d7ab7983c5f901483f3d7ddd8fb)
|
|
query with this
in uppercase)
(This used to be commit f0c37555ff30c3e5ff4680d0b33bc105ebd3a0b1)
|
|
6 is BDC, which is correct for a self-join.
Andrew Bartlett
(This used to be commit cd61ff80f886bcb4a8c6b681879ee269604e98f3)
|
|
metze
(This used to be commit db2f5619f8114b6454cc2541d80129e1ca5fa1a9)
|
|
metze
(This used to be commit af16ecb7ac6015b2f7fa70fc73e1ab69776c8079)
|
|
We need to pass the 'secure channel type' to the NETLOGON layer, which
must match the account type.
(Yes, jelmer objects to this inclusion of the kitchen sink ;-)
Andrew Bartlett
(This used to be commit 8ee208a926d2b15fdc42753b1f9ee586564c6248)
|
|
- Add options --quiet and --outputdir options to the provisioning script
- Add simple 'make test' and 'make test-swrap'
(This used to be commit 7d2d4a57e0e58a51c76c2e86ea447e81a1d79544)
|
|
Andrew Bartlett
(This used to be commit 1a1f0bd33c8e9ad89df0073aa9c2e42822ec7903)
|
|
(This used to be commit e2f127b4d822c98668e20e724a4ca91b320092b3)
|
|
- move provision stuff to setup/
- remove unused scripts
metze
(This used to be commit c35887ca649675f28ca986713a08082420418d74)
|