summaryrefslogtreecommitdiff
path: root/source4
AgeCommit message (Collapse)AuthorFilesLines
2010-01-10s4:provision_users.ldif - Remove foreign security principal S-1-5-17 for nowMatthias Dieter Wallnöfer1-5/+0
This belongs to the AD IIS stuff where I don't know yet if we should import it.
2010-01-10s4:provision_users.ldif - Import all essential groups for Windows Server ↵Matthias Dieter Wallnöfer1-85/+113
2008 mode Additionally I had to fix some bugs (especially wrong "groupTypes") and reordered the objects using the SID (this is easier when enhancing the file).
2010-01-10s4-ldb: display security descriptors with correct SDL for known SIDsAndrew Tridgell2-1/+7
This makes it much easier to compare SDs
2010-01-10s4-dsdb: added samdb_domain_sid_cache_only()Andrew Tridgell1-1/+8
2010-01-09s4-drs: instanceType is always sent, regardless of UDV valuesAndrew Tridgell1-4/+6
2010-01-09s4-debug: lower the verbosity of a couple of common log messagesAndrew Tridgell2-2/+2
2010-01-09s4-samldb: fixed primaryGroupID when promoting a machine to a DCAndrew Tridgell1-17/+30
The machine gets a primaryGroupID of DOMAIN_RID_DCS. This is done without changing the member attributes of its groups.
2010-01-09s4-schema: fixed the SDDL for the schema root security descriptorAndrew Tridgell1-10/+14
This was preventing a DCPROMO client from allowing outgoing replication
2010-01-09s4-drs: add a local UDV entry even when no replUpToDateVector present on NCAndrew Tridgell1-3/+3
This allows us to filter correctly for a NC that we have created but not pulled from anyone.
2010-01-09s4-drs: give DN of failed replication partitionAndrew Tridgell1-4/+5
2010-01-09s4-drs: base is_nc_prefix on instanceTypeAndrew Tridgell1-1/+3
for extended operations comparing to the ncRoot_dn is not correct
2010-01-09s4-drs: having no SPNs to change is not an errorAndrew Tridgell1-0/+7
2010-01-09s4-drs: fixed writespn to ignore add/delete errorsAndrew Tridgell1-3/+40
When a SPN is added and already exists, it is ignored. Similarly, when a SPN is deleted and doesn't exist, it is ignored.
2010-01-09s4-dsdb: added samdb_ldb_val_case_cmp()Andrew Tridgell1-0/+16
2010-01-09s4-drs: moved the DsWriteAccountSpn call to its own fileAndrew Tridgell4-75/+104
2010-01-09s4-libnet: dsdb_wellknown_dn() in vampire codeAndrew Tridgell1-60/+17
2010-01-09s4-drs: need to set the getncchanges extended_ret on success tooAndrew Tridgell1-0/+3
2010-01-09s4-drs: calculate and send a uptodateness_vector with replication requestsAndrew Tridgell2-7/+82
This stops us getting objects changes twice if they came via an indirect path.
2010-01-09s4-drs: be less verbose when we filter objects by UDVAndrew Tridgell1-5/+5
2010-01-09s4-drs: added filtering by udv in getncchangesAndrew Tridgell2-9/+63
When a client supplied an uptodateness_vector, we can use it to filter what objects we return. This greatly reduces the amount of replication traffic between DCs.
2010-01-09s4-drs: fixed the NC in the getncchanges RID alloc replyAndrew Tridgell1-11/+13
the search happens on a different DN to the NC of the request, but the reply is with the original NC
2010-01-09s4-messaging: remove only usage of debug_ctx()Andrew Tridgell1-2/+4
2010-01-09s4-messaging: fixed a memory leak in messaging_path()Andrew Tridgell1-2/+9
It is a bit convoluted to fix, as cluster_id_string() may return a const string.
2010-01-09s4-drs: fixed usage of ldb_dn_new()Andrew Tridgell1-1/+1
2010-01-09s4-ldb: validate the type of the ldb argument to ldb_dn_new()Andrew Tridgell1-1/+7
It has been a common bug to get the first two arguments the wrong way around
2010-01-08Fix commentSimo Sorce1-1/+1
2010-01-08s4:provision_self_join.ldif - Adapt comment after implementation of ↵Matthias Dieter Wallnöfer1-2/+2
distributed RIDs
2010-01-08s4-kdc: Migrate tcp connections to tsocket.Andreas Schneider1-89/+188
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-01-08s4:kdc: use LIBSAMBA_TSOCKETStefan Metzmacher1-1/+1
metze
2010-01-08s4:kdc: the ->process function returns "bool"Stefan Metzmacher1-9/+9
metze
2010-01-08libcli/util: add tstream_read_pdu_blob_send/recvStefan Metzmacher1-0/+5
This will take the some full_request callback function as the Samba4 packet code. metze
2010-01-08s4-drs: added two more SPNs in addentryAndrew Tridgell1-13/+32
w2k8r2 wants these after a DCPROMO Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08s4-schema: fixes for W2K8-R2 schemaAndrew Tridgell2-35/+143
The schema from WSPP had a number of typos that prevented it from working. These changes allow it to work with Samba, and allow w2k8r2 to run DCPROMO against Samba successfully Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08s4-schema: added msDS-NcType to schema containerAndrew Tridgell1-0/+1
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08s4-schema: fixed attributes of aggregate schemaAndrew Tridgell1-0/+2
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08s4-schema: switch to W2K8-R2 schemaAndrew Tridgell1-2/+2
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08s4-schema: added adminDisplayName and adminDescriptionAndrew Tridgell1-0/+2
These are missing from the WSPP schemas Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08s4-schema: added some debug for bad attributesAndrew Tridgell1-0/+8
2010-01-08s4-provision: added W2K8-R2 schema as provided by WSPPAndrew Tridgell2-0/+19529
2010-01-08s4-samba3samtest: we need to force netbios name as wellAndrew Tridgell1-0/+1
needed for when run in CLIENT context
2010-01-08s4-samba3sid: fixed error returns when res->count != 1 and oomAndrew Tridgell1-3/+3
2010-01-08s4-samba3samtest: force workgroup so the domain is rightAndrew Tridgell1-0/+1
the samba3sid backend looks at lp_sam_name() which is based on the workgroup
2010-01-08s4-samba3sid: the sambaNextRid attribute is actually the previous RIDAndrew Tridgell1-3/+6
Not well named .... though same mistake that MS made with rIDNextRid
2010-01-08s4-samba3sam: use samba3sid moduleAndrew Tridgell1-1/+3
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08s4-dsdb: added a samba3sid moduleAndrew Tridgell2-1/+208
This module allocates SIDs using the Samba3 algorithm, for use with the samba3sam module. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08s4-acl: fixed acl.py test to use correct ldifAndrew Tridgell1-1/+2
same problem as sec_descriptor.py
2010-01-08s4-secdesc: fixed the sec_descriptor.py testAndrew Tridgell1-42/+74
The test was using a "changetype: add" to try and add a member to a group, where it should use a "changetype: modify" with a "add: member" Also fixed the recovery when the test fails part way through (delete the test users at the start as well as the end) Nadya, please check!
2010-01-08s4-samba3samtest: use system credentials for creating usersAndrew Tridgell1-5/+6
2010-01-08s4-dsdb: fixed const misuse in acl moduleAndrew Tridgell1-4/+4
2010-01-08s4-dsdb: use dsdb_module_am_system() in acl moduleAndrew Tridgell1-19/+11