Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-04-27 | s4-dns: install samba_spnupdate | Andrew Tridgell | 2 | -2/+2 | |
2010-04-27 | s4-dns: call spn update command alongside dns update | Andrew Tridgell | 1 | -0/+46 | |
call samba_spnupdate at the same time as samba_spnupdate | |||||
2010-04-27 | s4-param: added a "spn update command" option | Andrew Tridgell | 2 | -0/+5 | |
used by SPN update code | |||||
2010-04-27 | s4-dsdb: added samba_spnupdate | Andrew Tridgell | 2 | -0/+164 | |
this script adds all our required servicePrincipalName entries at runtime. The admin can add more entries to spn_update_list as needed | |||||
2010-04-27 | s4-dns: explain what the file is for | Andrew Tridgell | 1 | -0/+2 | |
2010-04-27 | s4-dns: cope better with comments in dns_update_list | Andrew Tridgell | 1 | -7/+4 | |
2010-04-27 | s4:gensec Use a different form of 'name' in GSSAPI import_name() | Andrew Bartlett | 1 | -3/+3 | |
The idea here is to make it not dependent on the system's default realm. Andrew Bartlett | |||||
2010-04-27 | Simple fix to prevent crash for non-pac principals | Marcel Ritter | 1 | -0/+5 | |
Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-27 | s4:kerberos Give a better error message than "Could not allocate memory" | Andrew Bartlett | 1 | -3/+3 | |
Andrew Bartlett | |||||
2010-04-27 | s4:kcc_periodic.c - fix counter types | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
We are counting LDB objects here -> therefore "unsigned" | |||||
2010-04-27 | s4:wb_cmd_getdcname.c - fix s4 winbind up regarding the new correct ↵ | Matthias Dieter Wallnöfer | 1 | -0/+5 | |
"GetAnyDCName" behaviour We get back "NO_SUCH_DOMAIN" when we query the PDC. This is fine and therefore we use the "logon_server" variable as "dcname". | |||||
2010-04-27 | s4:netr_DsRAddressToSitenames[Ex]W calls - implement them correctly with the ↵ | Matthias Dieter Wallnöfer | 1 | -16/+98 | |
client site information This behaviour should be similar to the one of Windows Server (in my case 2008) | |||||
2010-04-27 | Revert "s4:netr_DsRAddressToSitenames[Ex]W calls - implement them correctly ↵ | Matthias Dieter Wallnöfer | 1 | -93/+16 | |
with the client site information" This reverts commit 908d982980846257b65ab576d31131e8793e9399. I need to merge the improved version of this commit. | |||||
2010-04-27 | Revert "s4-netlogon: fixed breakage of dcesrv_netr_GetAnyDCName in sites patch" | Matthias Dieter Wallnöfer | 1 | -0/+6 | |
This reverts commit e88a54a87e185b44e2d216bd853e6a87bf950be6. This isn't the correct behaviour. See MS-NRPC documentation under the "GetAnyDCName" section. | |||||
2010-04-27 | s4-libnet: cope with an empty client site name from CLDAP | Andrew Tridgell | 1 | -0/+5 | |
We fall back to the server site name in a vampire Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-27 | s4-netlogon: fixed breakage of dcesrv_netr_GetAnyDCName in sites patch | Andrew Tridgell | 1 | -6/+0 | |
We should respond when we are the PDC Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-27 | s4:knownfail - remove tests which should pass | Matthias Dieter Wallnöfer | 1 | -4/+0 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-27 | s4:netlogon RPC server - we don't need "are we DC" proofs | Matthias Dieter Wallnöfer | 1 | -8/+0 | |
When we aren't a DC we shouldn't have the netlogon pipe available. [MS-NRPC 1.3] says that we can only have DCs on the server side. Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-27 | s4:torture - DsRGetDcSiteCoverageW - adapt test to check for the sitename | Matthias Dieter Wallnöfer | 1 | -0/+24 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-27 | s4:dcesrv_netr_DsrGetDcSiteCoverageW - provide a basic implementation | Matthias Dieter Wallnöfer | 1 | -1/+23 | |
Does for now only return DC's primary site. Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-27 | s4:torture - DsRGetSiteName - move "skip" statement before the ↵ | Matthias Dieter Wallnöfer | 1 | -3/+3 | |
"computer_name" check We don't support the check for the computer name on the RPC server side. Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-27 | s4:dcesrv_netr_DsRGetSiteName - provide an implementation according to the ↵ | Matthias Dieter Wallnöfer | 1 | -1/+13 | |
MS-NRPC docs Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-27 | s4:torture - GetAnyDCName - adaptions | Matthias Dieter Wallnöfer | 1 | -2/+23 | |
- Check for the various domainname set modes (on NULL and "" the domain should be the default domain on the server) - support return value "WERR_NO_SUCH_DOMAIN" (the server is the PDC of the domain) Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-27 | s4:dcesrv_netr_GetAnyDCName - improve the call according to the MS-NRPC ↵ | Matthias Dieter Wallnöfer | 1 | -7/+55 | |
documentation This implementation checks if the domainname is valid for us or a trusted domain. Then I've also added the PDC location functionality. That means that we should return "WERR_NO_SUCH_DOMAIN" (MS-NRPC 3.5.5.2.5). Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-27 | s4:torture - DsRAddressesToSitenames - enhance the testsuite | Matthias Dieter Wallnöfer | 1 | -24/+264 | |
This shows the Windows behaviour of these two calls which we should match. Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-27 | s4:netr_DsRAddressToSitenames[Ex]W calls - implement them correctly with the ↵ | Matthias Dieter Wallnöfer | 1 | -16/+93 | |
client site information This behaviour should be similar to the one of Windows Server (in my case 2008) Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-27 | s4:CLDAP server - make use of the new "samdb_client_site_name" call | Matthias Dieter Wallnöfer | 1 | -2/+3 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-27 | s4:util - add a function which finds the matching client site using the ↵ | Matthias Dieter Wallnöfer | 1 | -0/+90 | |
client address The lookup of the client site is done using the subnets in the configuration partition. If no one matches we use the Windows Server fallback mechansim. This means: if only one site is available just use it. If they're more set the output variable to "". Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-04-27 | s4-drsdevel: support sites in drs developer scripts | Andrew Tridgell | 3 | -3/+7 | |
2010-04-27 | s4-vampire: show main CLDAP response attributes during vampire | Andrew Tridgell | 1 | -0/+4 | |
2010-04-27 | s4-repl: added a workaround for WERR_DS_DRA_NO_REPLICA DsReplicaSync errors | Andrew Tridgell | 2 | -2/+19 | |
The 0xc0002104/WERR_DS_DRA_NO_REPLICA seems to be spurious, and can be avoided by setting DRSUAPI_DRS_SYNC_ALL in the DsReplicaSync request. We need to investigate this further, and find out from MS why this is sometimes being sent, even when the target DC has the right repsFrom entries | |||||
2010-04-27 | s4-dns: fixed dc.dc duplication in DNS update list | Andrew Tridgell | 1 | -2/+2 | |
2010-04-27 | s4-drs: add entries to repsTo based on calculated repsFrom | Andrew Tridgell | 1 | -2/+30 | |
This is based on the documentation: "the KCC will automatically create the Reps-To attributes on destination DSAs based on other DSAs Reps-From entries." | |||||
2010-04-27 | s4-drepl: don't setup a repsFrom from a DC that isn't a master for a NC | Andrew Tridgell | 1 | -5/+50 | |
use hasMasterNCs to see what NCs we should be pulling from each DC | |||||
2010-04-27 | s4-getncchanges: honor DRSUAPI_DRS_REF_GCSPN | Andrew Tridgell | 1 | -1/+3 | |
this is an alternative way of establishing repsTo | |||||
2010-04-27 | s4-repl: these messages are common, and don't deserve debug level 1 | Andrew Tridgell | 1 | -2/+2 | |
getting older attributes is quite common | |||||
2010-04-27 | s4-repl: on a failed request, clear the current ptr | Andrew Tridgell | 1 | -0/+1 | |
this prevents the queue being stuck on failure | |||||
2010-04-27 | s4-repl: end repl request when not doing an UpdateRefs | Andrew Tridgell | 1 | -0/+2 | |
otherwise the queue is stuck forever | |||||
2010-04-27 | s4-repl: don't delete repsTo entry on DsReplicaSync | Andrew Tridgell | 1 | -46/+12 | |
we rely on the highestUSN counters instead. W2K8 does not resend DsUpdateRefs each time, and the WSPP docs do not indicate that repsTo should be deleted | |||||
2010-04-26 | s4: remove unused rap.h. | Günther Deschner | 1 | -358/+0 | |
Guenther | |||||
2010-04-26 | s4: fix some build warnings. | Günther Deschner | 3 | -5/+5 | |
Guenther | |||||
2010-04-26 | s4: use generated rap header. | Günther Deschner | 6 | -6/+6 | |
Guenther | |||||
2010-04-26 | s4: rename RAP share_enum_info to share_info. | Günther Deschner | 4 | -28/+28 | |
Guenther | |||||
2010-04-26 | s4-ddb: don't create partitions with the UNINSTANT flag set | Andrew Tridgell | 1 | -1/+14 | |
these partitions and not on the server we are replicating from. Also check for deleted partitions. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-26 | s4-drs: allow getncchanges requests to non WRIT_REP partitions for extended ops | Andrew Tridgell | 1 | -1/+2 | |
Needed for RID allocation Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-26 | s4-drs: don't send uninstantiated objects in getncchanges | Andrew Tridgell | 1 | -0/+5 | |
This includes deleted partitions Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-26 | s4-drepl: don't send an UpdateRefs unless its a plain replication | Andrew Tridgell | 1 | -1/+3 | |
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-26 | s4-drs: make links to foreign partitions non-fatal | Andrew Tridgell | 1 | -8/+6 | |
DN links outside the set of partitions we are replication should be allowed. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-04-26 | s4-heimdalbuild: remove LIBNETIF dependency from HEIMDAL_GSSAPI | Andrew Tridgell | 1 | -1/+1 | |
this avoids the s3compat layer from getting duplicate interfaces code | |||||
2010-04-24 | s4 dns: Allow to specify static grant entries to be added to the dynamicaly ↵ | Matthieu Patou | 1 | -3/+17 | |
generated named.conf.update Signed-off-by: Stefan Metzmacher <metze@samba.org> |