Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-04-27 | s4-repl: don't delete repsTo entry on DsReplicaSync | Andrew Tridgell | 1 | -46/+12 | |
we rely on the highestUSN counters instead. W2K8 does not resend DsUpdateRefs each time, and the WSPP docs do not indicate that repsTo should be deleted | |||||
2010-04-26 | s4: remove unused rap.h. | Günther Deschner | 1 | -358/+0 | |
Guenther | |||||
2010-04-26 | s4: fix some build warnings. | Günther Deschner | 3 | -5/+5 | |
Guenther | |||||
2010-04-26 | s4: use generated rap header. | Günther Deschner | 6 | -6/+6 | |
Guenther | |||||
2010-04-26 | s4: rename RAP share_enum_info to share_info. | Günther Deschner | 4 | -28/+28 | |
Guenther | |||||
2010-04-26 | s4-ddb: don't create partitions with the UNINSTANT flag set | Andrew Tridgell | 1 | -1/+14 | |
these partitions and not on the server we are replicating from. Also check for deleted partitions. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-26 | s4-drs: allow getncchanges requests to non WRIT_REP partitions for extended ops | Andrew Tridgell | 1 | -1/+2 | |
Needed for RID allocation Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-26 | s4-drs: don't send uninstantiated objects in getncchanges | Andrew Tridgell | 1 | -0/+5 | |
This includes deleted partitions Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-26 | s4-drepl: don't send an UpdateRefs unless its a plain replication | Andrew Tridgell | 1 | -1/+3 | |
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-26 | s4-drs: make links to foreign partitions non-fatal | Andrew Tridgell | 1 | -8/+6 | |
DN links outside the set of partitions we are replication should be allowed. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-26 | s4-heimdalbuild: remove LIBNETIF dependency from HEIMDAL_GSSAPI | Andrew Tridgell | 1 | -1/+1 | |
this avoids the s3compat layer from getting duplicate interfaces code | |||||
2010-04-24 | s4 dns: Allow to specify static grant entries to be added to the dynamicaly ↵ | Matthieu Patou | 1 | -3/+17 | |
generated named.conf.update Signed-off-by: Stefan Metzmacher <metze@samba.org> | |||||
2010-04-24 | s4-smbd: Fix compiler warning in prefork smbd. | Tim Potter | 1 | -1/+1 | |
My first patch in a while... Tim. Signed-off-by: Stefan Metzmacher <metze@samba.org> | |||||
2010-04-23 | s4-smbtorture: skip tests when no local driver directory is around. | Günther Deschner | 1 | -0/+4 | |
Guenther | |||||
2010-04-23 | s4-smbtorture: use server_name for all printerdriver delete and enum operations. | Günther Deschner | 1 | -12/+16 | |
With this s3 passes the RPC-PRINTER-DRIVER test. Guenther | |||||
2010-04-23 | s4-smbtorture: allow to upload or remove any file belonging to a driver. | Günther Deschner | 1 | -0/+30 | |
Guenther | |||||
2010-04-23 | s4-smbtorture: fix test_EnumPrinterDrivers_findone(). | Günther Deschner | 1 | -8/+8 | |
Guenther | |||||
2010-04-23 | s4-smbtorture: samba currently supports level 3 and 6 driver adds. | Günther Deschner | 1 | -0/+25 | |
Guenther | |||||
2010-04-23 | s4-smbtorture: test both 32bit and 64bit driver uploads in RPC-SPOOLSS-DRIVER. | Günther Deschner | 1 | -61/+71 | |
Guenther | |||||
2010-04-23 | s4-smbtorture: allow to upload and later remove printer driver files in ↵ | Günther Deschner | 1 | -0/+230 | |
RPC-SPOOLSS-DRIVER. Guenther | |||||
2010-04-23 | s4-smbtorture: add RPC-SPOOLSS-DRIVER test. | Günther Deschner | 2 | -0/+752 | |
Guenther | |||||
2010-04-23 | s4-smbtorture: rework EnumPrinterDrivers tests a bit. | Günther Deschner | 1 | -68/+119 | |
Guenther | |||||
2010-04-22 | s4:provision Remove moduleload for 'hdb' (wrong name). | Andrew Bartlett | 1 | -1/+0 | |
The backends are not normally modules anyway | |||||
2010-04-22 | s4-cldap: we should set the w2k8 flags even if not the PDC emulator | Andrew Tridgell | 1 | -3/+4 | |
these two tests are independent Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-22 | s4-drs: validate RODC credentials via the user_sid | Andrew Tridgell | 1 | -27/+12 | |
This checks whether a replication client is a RODC by inclusion of the the DOMAIN_RID_ENTERPRISE_READONLY_DCS sid in the users token Pair-Programmed-With: Rusty Russell <rusty@samba.org> Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-22 | s4-drs: added new SECURITY_RO_DOMAIN_CONTROLLER level | Andrew Tridgell | 13 | -37/+69 | |
This is used for allowing operations by RODCs, and denying them operations that should only be allowed for a full DC This required a new domain_sid argument to security_session_user_level() Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Rusty Russell <rusty@samba.org> | |||||
2010-04-22 | s4-net: fixed two compiler warnings | Andrew Tridgell | 1 | -6/+4 | |
2010-04-22 | s4-torture: fixed a initialiser | Andrew Tridgell | 1 | -1/+1 | |
we were not initialising the whole array Pair-Programmed-With: Rusty Russell <rusty@samba.org> Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-22 | s4-libnet: fixed two compiler warnings | Andrew Tridgell | 1 | -3/+2 | |
2010-04-22 | s4-drs: removed dsdb_validate_client_flags() | Andrew Tridgell | 2 | -37/+0 | |
This test is in the wrong place. We end up validating our own flags. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-22 | s4-drs: only allow replication with the right invocationId | Andrew Tridgell | 1 | -1/+20 | |
Non-administrator replication checks the invocationId matches the sid of the user token being used Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-22 | s4-dsdb: removed an unused variable | Andrew Tridgell | 1 | -1/+0 | |
2010-04-22 | s4-dsdb: added dsdb_validate_invocation_id() | Andrew Tridgell | 1 | -0/+87 | |
this validates that a invocationID matches an account sid This will be used to ensure that we don't allow DRS replication from someone a non-DC or administrator Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-22 | s4-dsdb: added dsdb_get_extended_dn_sid() | Andrew Tridgell | 2 | -12/+34 | |
This will be used by the RODC code Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-22 | s4-dsdb: moved rodc schema validation to samldb.c | Andrew Tridgell | 2 | -33/+37 | |
This means we are only doing the checks for schema changes Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-22 | s4-drs: Use new samdb_rodc() function in s4 code | Fernando J V da Silva | 2 | -2/+4 | |
This patch fits the calling to the new samdb_rodc() function and fix a little bug in this function. Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-22 | s4-drs: Do not send RODC filtered attributes to RODCs on GetNCChanges reply | Fernando J V da Silva | 1 | -0/+14 | |
During building an object to send it on a GetNCChanges reply, it checks the attributes and if any of them is a RODC filtered and the recipient is a RODC, then such attribute is not sent. Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-22 | s40-drs: Do not send GetNCChanges messages to RODCs | Fernando J V da Silva | 1 | -0/+11 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-22 | s4-drs: dsdb_validate_client_flags() function | Fernando J V da Silva | 1 | -0/+28 | |
This function is intended to check if some client is not lying about his flags. At this moment, it only checks for RODC flags. Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-22 | s4-drs: samdb_is_rodc() function and new samdb_rodc() function | Fernando J V da Silva | 6 | -39/+80 | |
This patch creates the samdb_is_rodc() function, which looks for the NTDSDSA object for a DC that has a specific invocationId and if msDS-isRODC is present on such object and it is TRUE, then consider the DC as a RODC. The new samdb_rodc() function uses the samdb_is_rodc() function for the local server. Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-22 | s4-drs: Do not allow system-critical attributes to be RODC filtered | Fernando J V da Silva | 1 | -0/+33 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-22 | s4:provision Make OpenLDAP backend more robust | Andrew Bartlett | 1 | -1/+11 | |
With the extra moduleload lines (which succeed if it's already staticly linked), we now work with OpenLDAP overlays as modules. Andrew Bartlett | |||||
2010-04-22 | s4:ldap-backend Fix LSA test failures with OpenLDAP backend - convert SIDs | Andrew Bartlett | 1 | -0/+24 | |
The SIDs in some queries were not being passed as binary, but as strings in comparison with the securityIdentifer object. We need to recognise that these are SIDs in the simple_ldap_map. Andrew Bartlett | |||||
2010-04-22 | s4:provison Pass nosync in for the OpenLDAP cn=config too | Andrew Bartlett | 1 | -0/+1 | |
2010-04-22 | s4:OpenLDAP-backend Use the new rdnval module in OpenLDAP | Andrew Bartlett | 4 | -5/+15 | |
This is rather than rdn_name, which tries to do the job on the client side. We need to leave this module in the stack for Fedora DS (and of course the LDB backend). Andrew Bartlett | |||||
2010-04-22 | s4:dsdb Revert accidentilly commited change for LDAP backends | Andrew Bartlett | 1 | -1/+1 | |
In the future, LDAP backends will be resposible for maintaining the 'name' attributes. Andrew Bartlett | |||||
2010-04-22 | s4:provision Use more reasonable values for DB_CONFIG | Andrew Bartlett | 1 | -5/+13 | |
With the OpenLDAP backend, the old DB_CONFIG caused OpenLDAP to abort on startup, and was very inefficient. This new one, kindly supplied by Matthew Backes <mbackes@symas.com> uses a more reasonable set of buffer sizes. Andrew Bartlett | |||||
2010-04-21 | s4:netlogon RPC server - fix a counter variable type | Matthias Dieter Wallnöfer | 1 | -1/+2 | |
2010-04-21 | s4-waf: python devel headers are mandatory for the source4 build | Andrew Tridgell | 1 | -1/+1 | |
2010-04-21 | s4-server: show build host in samba -b output | Andrew Tridgell | 1 | -0/+5 | |