Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2011-05-25 | selftest: Make knowfail/skip files consistent, always use ^prefix | Andrew Bartlett | 1 | -80/+80 | |
Except in one case (where we mark printing tests as knownfail), this has all our regular expressions start with ^, which ensures we don't accidentially mix up the samba3/samba4 prefix here. Because of the particular values in these files at the moment, this should not change the set of tests, but it will help to ensure that future edits follow the correct pattern. Andrew Bartlett | |||||
2011-05-21 | s4:sam.py - add tests to check that setting "userAccountValue" on usersdon't ↵ | Matthieu Patou | 1 | -2/+40 | |
impact the "primaryGroupID" attribute Notice: The domain administrators groups isn't referenced as "Domain Admins" since this name could differ. Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat May 21 19:19:57 CEST 2011 on sn-devel-104 | |||||
2011-05-21 | s4:samldb LDB module - don't change the "primaryGroupId" on LDB ↵ | Matthieu Patou | 1 | -1/+16 | |
modifications unless we are a computer/dc/rodc Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org> | |||||
2011-05-21 | s4:lsa RPC server - handle LDB flags as "unsigned" | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
Signed-off-by: Metze | |||||
2011-05-21 | s4:ldb-samba/ldb_wrap.*-dsdb/samdb/samdb.c - handle LDB connection flags as ↵ | Matthias Dieter Wallnöfer | 3 | -7/+7 | |
unsigned The LDB API ("ldb_connect") prescribes that they should be "unsigned". Signed-off-by: Metze | |||||
2011-05-21 | ldb:pyldb.c - all flags should be unsigned | Matthias Dieter Wallnöfer | 1 | -10/+10 | |
Adapt it to the previous commits Reviewed-by: Jelmer + Metze | |||||
2011-05-21 | ldb:ldb_sqlite3.c - all LDB flags should be handled as "unsigned" | Matthias Dieter Wallnöfer | 1 | -2/+3 | |
Signed-off-by: Metze | |||||
2011-05-21 | ldb:tools/cmdline.c + tools/ldbtest.c - the connection flags are typed as ↵ | Matthias Dieter Wallnöfer | 2 | -2/+2 | |
"unsigned" Signed-off-by: Metze | |||||
2011-05-21 | ldb:ldbtest.c - make more use of LDB constants | Matthias Dieter Wallnöfer | 1 | -4/+4 | |
Signed-off-by: Metze | |||||
2011-05-21 | s4:torture - always cast correctly when using the "%x" format string argument | Matthias Dieter Wallnöfer | 2 | -6/+6 | |
Signed-off-by: Metze | |||||
2011-05-21 | s4:auth/ntlmssp/ntlmssp_server.c - add "const" in front of "dnsdomain" | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
Signed-off-by: Metze | |||||
2011-05-21 | add a demo script for dirsync | Matthieu Patou | 1 | -0/+156 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sat May 21 15:40:26 CEST 2011 on sn-devel-104 | |||||
2011-05-21 | s4-dsdb: add unit tests for dirsync control | Matthieu Patou | 3 | -0/+716 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2011-05-21 | s4-dsdb: implementation of the dirsync control | Matthieu Patou | 3 | -0/+1369 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2011-05-21 | s4-dsdb: introduce dsdb_module_search_tree | Matthieu Patou | 1 | -24/+63 | |
With this function your own search tree can be specified This function is similar to ldb_build_search_req_ex as it allows to pass a parse tree structure. Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2011-05-21 | s4-dsdb: relax a bit the checks on read acl when dirsync control is specified | Matthieu Patou | 1 | -12/+42 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2011-05-21 | s4-dsdb: create flag for requesting ACL relax in case of DIRSYNC request | Matthieu Patou | 1 | -0/+1 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2011-05-21 | s4: do not change the critical flag when it's on a dirsync control | Matthieu Patou | 1 | -1/+5 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2011-05-21 | s4: add blackbox test for rename | Matthieu Patou | 1 | -0/+3 | |
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sat May 21 09:50:34 CEST 2011 on sn-devel-104 | |||||
2011-05-21 | upgradeprovision: add hostname in the blackbox tests | Matthieu Patou | 1 | -1/+1 | |
2011-05-21 | Make the purge first so that the provision can reused during tests | Matthieu Patou | 1 | -3/+3 | |
2011-05-21 | Add a script for renaming a DC | Matthieu Patou | 1 | -0/+200 | |
2011-05-21 | s4-python: Remove not used imports | Matthieu Patou | 2 | -7/+4 | |
2011-05-21 | s4-python: move function find_provision_key_parameters to provision ↵ | Matthieu Patou | 5 | -113/+112 | |
namespace as it can be used not only for upgradeprovision | |||||
2011-05-20 | torture-dfs: fix a typo that was causing the test to be flacky | Matthieu Patou | 1 | -1/+1 | |
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Fri May 20 09:39:12 CEST 2011 on sn-devel-104 | |||||
2011-05-18 | selftest: Re-enable strings.py from source3/stf as a python subunit test | Andrew Bartlett | 5 | -0/+170 | |
2011-05-18 | s4-libnet: Remove libnet_Join and create libnet_Join_member | Andrew Bartlett | 4 | -49/+21 | |
libnet_Join conflicts with a function in the source3 netapi of the same name, and the ability to join as a DC via this particular method is unused. Andrew Bartlett | |||||
2011-05-18 | build: Expand dcerpc-samba grouping library | Andrew Bartlett | 1 | -1/+1 | |
This is possible in common now because the generated RPC code does not rely on a particular dcerpc layer. Andrew Bartlett | |||||
2011-05-18 | waf-build: Add more libraries to avoid duplicate symbols | Andrew Bartlett | 1 | -2/+3 | |
The new source of duplicates is calling libnetapi from inside smbtorture. Andrew Bartlett | |||||
2011-05-18 | s4-selftest: gensec test is finished, don't skip | Andrew Bartlett | 1 | -1/+0 | |
2011-05-18 | selftest: Don't skip Samba3 tests in the top level build | Andrew Bartlett | 1 | -56/+64 | |
The regular expressions here were not specific enough, they matched the samba3. names from the source3/selftest/tests.py Found by Andreas Schneider Andrew Bartlett | |||||
2011-05-18 | torture: desactivate the level 4 tests for DFS referral | Matthieu Patou | 1 | -2/+17 | |
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Wed May 18 13:04:00 CEST 2011 on sn-devel-104 | |||||
2011-05-18 | s4-dfs: Add workaround so that XP really works well | Matthieu Patou | 1 | -13/+18 | |
XP seems to have problems working at a correct speed (or even working at all if we return referral of level 4). | |||||
2011-05-18 | s4:ntvfs/cifs: return NT_STATUS_INTERNAL_ERROR if no credentials are available | Stefan Metzmacher | 1 | -1/+1 | |
This is a configuration problem on the server, no invalid parameter from the client. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed May 18 08:49:00 CEST 2011 on sn-devel-104 | |||||
2011-05-18 | s4:kdc: split s4u2self and s4u2proxy checks | Stefan Metzmacher | 4 | -23/+55 | |
metze | |||||
2011-05-18 | s4:kdc: UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION => ↵ | Stefan Metzmacher | 1 | -0/+14 | |
flags.trusted_for_delegation metze | |||||
2011-05-18 | s4:auth/credentials: S4U2Self should force CRED_MUST_USE_KERBEROS | Stefan Metzmacher | 1 | -0/+1 | |
Otherwise we would not impersonate the desired principal. This still doesn't work for plaintext auth, but should avoid ntlmssp. metze | |||||
2011-05-18 | s4:auth/credentials: pass 'self_service' to ↵ | Stefan Metzmacher | 5 | -10/+36 | |
cli_credentials_set_impersonate_principal() This also adds a cli_credentials_get_self_service() helper function. In order to support S4U2Proxy we need to be able to set the service principal for the S4U2Self step independent of the target principal. metze | |||||
2011-05-18 | s4:gensec_gssapi: avoid delegation if s4u2self/proxy is used | Stefan Metzmacher | 1 | -0/+4 | |
metze | |||||
2011-05-18 | HEIMDAL:kdc: check and regenerate the PAC in the s4u2proxy case | Stefan Metzmacher | 1 | -13/+38 | |
TODO: we need to add a S4U_DELEGATION_INFO to the PAC later. metze | |||||
2011-05-18 | HEIMDAL:kdc: pass the correct principal name for the resulting service ticket | Stefan Metzmacher | 1 | -38/+36 | |
Depending on S4U2Proxy the principal name for the resulting ticket is not the principal of the client ticket. metze | |||||
2011-05-18 | HEIMDAL:kdc: let check_PAC() to verify the incoming server and krbtgt cheksums | Stefan Metzmacher | 1 | -4/+7 | |
For a normal TGS-REQ they're both signed with krbtgt key. But for S4U2Proxy requests which ask for contrained delegation, the keys differ. metze | |||||
2011-05-17 | s4-dfs: Use a workaround for ndr relative pointer bug/limitation | Matthieu Patou | 1 | -11/+8 | |
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Tue May 17 01:33:27 CEST 2011 on sn-devel-104 | |||||
2011-05-17 | s4-torture: Add more tests to DFS referral suite | Matthieu Patou | 1 | -4/+30 | |
2011-05-17 | torture: adapt to idl evolution | root | 2 | -48/+48 | |
2011-05-17 | s4-dfs: clean the code | Matthieu Patou | 1 | -44/+50 | |
2011-05-17 | s4-dfs: fix bugs in idl and adapt code accordingly | Matthieu Patou | 1 | -17/+23 | |
2011-05-17 | s4-python: add an option for just fixing gpo folders | Matthieu Patou | 1 | -189/+196 | |
2011-05-17 | s4-python: keep wheel_gid as an integer | Matthieu Patou | 1 | -1/+1 | |
2011-05-17 | s4-python: raise an error if unable to bind remote ldap while joining | Matthieu Patou | 1 | -0/+11 | |