Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-08-23 | s4-net: role should be case insensitive for join | Andrew Tridgell | 1 | -1/+4 | |
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-08-23 | s4-drs: show the user sid that does the GetNCChanges call | Andrew Tridgell | 1 | -2/+3 | |
this is useful when debugging replication Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-08-23 | s4-drs: removed the warning on WRIT_REP being set | Andrew Tridgell | 1 | -4/+2 | |
we just need to clear this flag | |||||
2010-08-23 | s4-net: added initial implemention of RODC join | Andrew Tridgell | 2 | -6/+311 | |
This does the join using python code Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-08-23 | libnet-s4: added replicate() command in pynet | Andrew Tridgell | 1 | -0/+60 | |
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-08-23 | s4-libnet: split libnet_Vampire() into two parts | Andrew Tridgell | 2 | -26/+82 | |
libnet_Replicate() will do just the replication portion of libnet_Vampire(). This will be used by the RODC join, where the join part of the operation happens in python, and behaves quite differently to the libnet_Join() code. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-08-23 | s4-libnet: show the DN when DsAddEntry() fails | Andrew Tridgell | 1 | -1/+2 | |
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-08-23 | s4-net: moved the net join command to python | Andrew Tridgell | 5 | -108/+5 | |
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-08-23 | s4-libnet: added join type constants to python interface | Andrew Tridgell | 1 | -0/+4 | |
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-08-23 | s4-python: added ndr_print() method in ndr | Andrew Tridgell | 1 | -0/+3 | |
2010-08-23 | s4:security Change struct security_token->sids from struct dom_sid * to ↵ | Andrew Bartlett | 16 | -59/+60 | |
struct dom_sid This makes the structure much more like NT_USER_TOKEN in the source3/ code. (The remaining changes are that privilages still need to be merged) Andrew Bartlett | |||||
2010-08-22 | s4: Only install testparm to /usr/bin/, no longer to /usr/sbin. | Jelmer Vernooij | 1 | -1/+1 | |
2010-08-22 | s4: Install testparm to /usr/bin, consistent with old behaviour. | Jelmer Vernooij | 1 | -3/+3 | |
2010-08-22 | Avoid use of Samba DTD, which requires net access. | Jelmer Vernooij | 10 | -14/+10 | |
2010-08-22 | s4-net: better error message on net setpassword | Andrew Tridgell | 1 | -3/+5 | |
2010-08-22 | librpc: add python bindings for the netlogon pipe | Andrew Tridgell | 1 | -0/+6 | |
Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org> | |||||
2010-08-22 | pyldb: do type checking on the list form of ldb add | Andrew Tridgell | 1 | -0/+6 | |
Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org> | |||||
2010-08-22 | pidl: give the varible name for bad type in python calls | Andrew Tridgell | 1 | -1/+1 | |
This makes it much clearer which argument to a function had the wrong type | |||||
2010-08-20 | librpc/rpc: move dcerpc_read_ncacn_packet_send/recv() to dcerpc_util.c | Stefan Metzmacher | 2 | -174/+9 | |
metze | |||||
2010-08-20 | Remove place-holders when it is single domain | Zahari Zahariev | 1 | -18/+32 | |
This patch changes the behavior of LDAPCmp in a single domain scenario. No place-holders will be applied during comparison so replication will be fully tested and even the silightest difference will pop up. There is a second smaller fix when we compre hosts in different domains. This fix disables ${SERVERNAME} paace-holder when there are more then one serevr (domain controller) in the given domain. | |||||
2010-08-20 | s4-dsdb: the RODC_JOIN control also changes samAccountName | Andrew Tridgell | 1 | -9/+13 | |
when adding a user with the RODC_JOIN control, the samAccountName is automatically set to the krbtgt_NNNNN form Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-08-20 | s4-pysamdb: fixed get_domain_sid() | Andrew Tridgell | 1 | -1/+1 | |
we need to actually return the SID! Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-08-20 | s4-ldb: added support for rodc_control in ldb | Andrew Tridgell | 1 | -0/+27 | |
this allows you to specify the RODC join control in python ldb calls or on the command line Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-08-20 | s4-drs: fixed the error code for EXOP_REPL_SECRET getncchanges calls | Andrew Tridgell | 1 | -10/+8 | |
when we deny a EXOP_REPL_SECRET call we should set the exop error code to NONE, and the main return code to WERR_DS_DRA_ACCESS_DENIED (based on observing windows server behaviour) Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-08-20 | s4-drs: bring us much closer to the docs for DRS secret replication | Andrew Tridgell | 1 | -9/+241 | |
The rules for when a RODC can replicate secrets are: - it can always replicate its own acct - it can also replicate its krbtgt acct - it can't replicate other krbtgt accts - it can't replicate interdomain trust accounts - it can't replicate users in the denied group list - it can replicate users in the allowed group list otherwise it can't replicate Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-08-20 | s4-dsdb: fixed dsdb_get_extended_dn_sid() | Andrew Tridgell | 1 | -1/+1 | |
it should honor the component_name Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-08-20 | s4-drs: implement RODC attribute filtering override | Andrew Tridgell | 2 | -39/+79 | |
When a RODC uses extended getncchanges operation DRSUAPI_EXOP_REPL_SECRET it gets an override on the ability to replicate the secret attributes. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-08-20 | s4-drs: added sam_ctx_system on DRS bind state | Andrew Tridgell | 2 | -0/+20 | |
The getncchanges call needs to be able to access the sam as the system user for RODC clients. To do this it needs a sam_ctx connection with system credentials Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-08-19 | s4 provision: POLICY_ACL is already an FS acl no need to translate it | Matthieu Patou | 1 | -2/+1 | |
2010-08-19 | s4 provision: Add some documentation to GPO related functions | Matthieu Patou | 2 | -15/+58 | |
2010-08-19 | unit tests: debug to ease locating pb, remove dir if exists to avoid error | Matthieu Patou | 1 | -2/+8 | |
2010-08-19 | s4 upgradeprovision: exit with a non null return code so that it can be ↵ | Matthieu Patou | 1 | -0/+1 | |
trapped in blackbox tests | |||||
2010-08-19 | s4 upgradeprovision: add more attrbutes the ignore list | Matthieu Patou | 2 | -5/+20 | |
Also format in a pretty way the int64 ranges | |||||
2010-08-19 | s4 upgradeprovision: Deal with bootstrap indexing attribute to avoid useless ↵ | Matthieu Patou | 1 | -13/+65 | |
reindexing | |||||
2010-08-19 | s4 upgradeprovision: Add a function for schema reloading | Matthieu Patou | 1 | -1/+31 | |
Full schema reloading is needed when we modify exisiting elements that have attributes that comes from not from the default schema (ie. openchange schema, user schema ..) | |||||
2010-08-19 | s4 upgradeprovision: upgrade_delta_samdb return a msg_diff of @ATTRIBUTES | Matthieu Patou | 1 | -9/+14 | |
This is used by upgradeprovision to readd this delta just before loading a merged schema | |||||
2010-08-19 | s4 upgradeprovision: Fixes for increment_keyversion | Matthieu Patou | 3 | -3/+22 | |
fix | |||||
2010-08-19 | s4 upgradeprovision: fix a typo and pass correct parameter to ↵ | Matthieu Patou | 2 | -4/+5 | |
increment_calculated_keyversion | |||||
2010-08-19 | s4-drs: ATTIDs for deleted attributes should be based on msDs-IntId value if ↵ | Kamen Mazdrashki | 2 | -3/+4 | |
it exists | |||||
2010-08-19 | s4-test: make better error message for ATTID checks | Kamen Mazdrashki | 1 | -4/+20 | |
2010-08-19 | s4-test: Change attribute syntax and value for readability | Kamen Mazdrashki | 1 | -3/+3 | |
When it comes to read logs and dumping data received Octet String syntax comes in handy | |||||
2010-08-19 | s4-test: Enable drs.rpc.msdsintid test case - it should be passing now | Kamen Mazdrashki | 1 | -1/+0 | |
2010-08-19 | s4-dsdb: No need for dsdb_syntax_one_DN_drsuapi_to_ldb() to be public | Kamen Mazdrashki | 1 | -3/+3 | |
It is intended to be used in schema_syntax.c module | |||||
2010-08-19 | s4-drs: GetNCChanges() to return correct (in AD-way) ATTIDs | Kamen Mazdrashki | 1 | -3/+16 | |
Depending on which NC is being replicated, GetNCChanges() returns either ATTID based on local prefixMap or msDs-IntId value of the attributeSchema class for the attribute being replicated. If set, msDs-IntId value is always returned when replicating object form NC other than Schema NC. Objects in Schema NC replica always use prefixMap based ATTIDs. | |||||
2010-08-19 | s4-dsdb-syntax: ATTID should be msDs-IntId value for the attributeSchema object | Kamen Mazdrashki | 2 | -14/+55 | |
in case object replicated is not in Schema NC and attributeSchema object has msDs-IntId attribute value set | |||||
2010-08-19 | s4: fix few comment typos | Kamen Mazdrashki | 2 | -3/+3 | |
2010-08-19 | s4-schema_syntax.c: Fix white spaces and alignment | Kamen Mazdrashki | 1 | -55/+56 | |
2010-08-19 | s4-dsdb: Use dsdb_syntax_ctx in *_drsuapi_to_ldb functions | Kamen Mazdrashki | 4 | -57/+45 | |
2010-08-19 | s4-dsdb: Use dsdb_syntax_ctx in *_ldb_to_drsuapi functions | Kamen Mazdrashki | 4 | -55/+47 | |
2010-08-19 | s4-dsdb: Use dsdb_syntax_ctx in *_validate_ldb functions | Kamen Mazdrashki | 3 | -62/+41 | |