summaryrefslogtreecommitdiff
path: root/source4
AgeCommit message (Collapse)AuthorFilesLines
2012-05-04s4-dsdb: Use strcasecmp_m() to compare possibly multibyte strings in samldbAndrew Bartlett1-5/+5
2012-05-04s4:samldb LDB module - make sure to not add identical ↵Matthias Dieter Wallnöfer2-16/+88
"servicePrincipalName"s more than once The service principal names need to be case-insensitively unique, otherwise we end up in a LDB ERR_ATTRIBUTE_OR_VALUE_EXISTS error. This issue has been discovered on the technical mailing list (thread: cannot rename windows xp machine in samba4) when trying to rename a AD client workstation.
2012-05-03UTIL_TDB: lowercase name.Jelmer Vernooij3-3/+3
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Thu May 3 20:18:22 CEST 2012 on sn-devel-104
2012-05-03s4:torture: add a new smb2.session.reauth3 test - getting security descriptorMichael Adam1-0/+100
Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Thu May 3 17:38:14 CEST 2012 on sn-devel-104
2012-05-03provision: remove reference to no longer existing template files.Jelmer Vernooij2-9/+6
2012-05-03s4-samba-tool: make new samba-tool group listmembers use samAccountNameAndrew Bartlett2-4/+4
This is the unique username value. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu May 3 01:57:41 CEST 2012 on sn-devel-104
2012-05-03s4-s3upgrade: Force ldapsam:trusted = yesAndrew Bartlett1-0/+3
While this setting is not the default in Samba3, any domain that is in a suitable condition to upgrade to Samba4 should already be in the layout that ldapsam:trusted uses. It can be turned off by setting ldapsam:trusted=false in the smb.conf. Many upgrades to Samba4 happen on a different host to the old Samba3 domain and this avoids the need to configure nss_ldap only for the duration of the upgrade. Andrew Bartlett
2012-05-03Extension to the samba-tool group subcommand functionality to allow listing ↵Lukasz Zalewski3-0/+91
of the members of an AD group
2012-05-03s4-s3upgrade: Try harder to get group memberships on upgradeAndrew Bartlett1-5/+20
This fixes an issue where some group types were not upgraded, as we did not upgrade alias memberships. It also uses enum_group_memberships() to try and find the memberships from the other direction, by asking which groups a user is a member of. As Samba3 (and NT4) does not implement nested groups, this should be safe. Andrew Bartlett
2012-05-02s4:torture:rpc: add a new test samba3.smb2-pipe-read-logoffMichael Adam1-0/+85
- open a pipe via smb2 - trigger a read which hangs since there is nothing to read - do a logoff - wait for the read to return and check the status (STATUS_PIPE_BROKEN) Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Wed May 2 19:57:45 CEST 2012 on sn-devel-104
2012-05-02s4:torture:rpc: add a new test samba3.smb2.pipe-read-tdisMichael Adam1-0/+85
- open a pipe via smb2 - trigger a read which hangs since there is nothing to read - do a tree disconnect - wait for the read to return and check the status (STATUS_PIPE_BROKEN)
2012-05-02s4:torture:rpc: add a test samba3.smb2-pipe-read-closeMichael Adam1-0/+87
* open a pipe via smb2 * trigger a read which hangs since there is nothing to read * close the pipe file handle * wait for the read to reaturn and check the status (NT_STATUS_PIPE_BROKEN)
2012-05-02s4:torture:rpc: fix a comment typo in samba3.smb2-reauth2Michael Adam1-1/+1
2012-05-02s4:torture:rpc: remove an accidentially committed character (in a comment)Michael Adam1-1/+1
2012-05-02s4-provision: Fix up --use-s3fs to create the directory for xattr.tdbAndrew Bartlett1-4/+8
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed May 2 04:45:05 CEST 2012 on sn-devel-104
2012-05-02s4-provision: Fix --use-s3fs to parse correctlyAndrew Bartlett1-1/+1
2012-05-02s4-provision: set 'dcerpc endpoint servers' but not 'vfs objects'Andrew Bartlett1-1/+1
The VFS objects are now set in the fileserver.conf, but this is only read by smbd, so the provision-time smb.conf needs to turn off the extra Samba4 DCE/RPC services. Andrew Bartlett
2012-05-01s4-upgradedns: Update serverdn with only the attributes that have changedAmitay Isaacs1-11/+21
This fixes the issue of ldb 'Operations Error' when trying to modify hasPartialReplicaNCs attribute. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Tue May 1 05:28:04 CEST 2012 on sn-devel-104
2012-04-30s4:samldb LDB module - homogenize LDB search attributes arraysMatthias Dieter Wallnöfer1-13/+13
First they do not need to be "static" any longer since we have abandoned asynchronous result handling (where global variables have been important). In addition add some "const" in order to protect us from unwanted writes. Reviewed-by: Andrew Bartlett Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Apr 30 16:46:20 CEST 2012 on sn-devel-104
2012-04-30s4-libnet: Add mem_ctx to libnet_rpc_groupdel calls (bug #8889)Andrew Bartlett1-2/+3
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Apr 30 14:41:36 CEST 2012 on sn-devel-104
2012-04-30s4-libnet: Add mem_ctx to libnet_rpc_groupadd calls (bug #8889)Andrew Bartlett2-4/+5
2012-04-30s4-libnet: Add mem_ctx to libnet_rpc_usermod calls (bug #8889)Andrew Bartlett2-3/+4
2012-04-30s4-libnet: Add mem_ctx to libnet_rpc_userdel calls (bug #8889)Andrew Bartlett2-4/+5
2012-04-30s4-libnet: Add mem_ctx to libnet_rpc_useradd calls (bug #8889)Andrew Bartlett3-5/+6
2012-04-30s4-libnet: Add mem_ctx to libnet_rpc_groupinfo calls (bug #8889)Andrew Bartlett2-5/+6
2012-04-30s4-libnet: Add mem_ctx to libnet_DomainClose calls (bug #8889)Andrew Bartlett1-5/+8
2012-04-30s4-libnet: Add mem_ctx to libnet_DomainOpen calls (bug #8889)Andrew Bartlett5-20/+25
2012-04-30s4-libnet: Add mem_ctx to libnet_Lookup calls (bug #8889)Andrew Bartlett1-4/+6
2012-04-30s4-messaging: Fill in the whole server_id in all use casesAndrew Bartlett2-1/+9
This started per https://bugzilla.samba.org/show_bug.cgi?id=8872#c4 and avoids any possible collision with a different process. We also need to ensure that across a Samba installation on a single node that id.vnn is the same. Samba4 previously used 0, while Samba3 used NONCLUSTER_VNN. When a message is sent between these 'different' nodes, the error NT_STATUS_INVALID_DEVICE_REQUEST is raised. Andrew Bartlett
2012-04-30s4-torture: convert samba3misc tests to use torture_failure and torture_assertAndrew Bartlett1-148/+105
This helps us when these tests fail, as subunit-formatted failures can be declared as knownfail entries, and show up correctly in the make test output. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Apr 30 08:34:52 CEST 2012 on sn-devel-104
2012-04-30s4-torture: move samba3 tests to use torture helper functionsAndrew Bartlett1-33/+4
2012-04-30s4-torture: Move various samba3 tests to the torture_suite_add_1smb_test wrapperAndrew Bartlett3-63/+14
2012-04-30s4:samldb LDB module - implement "fSMORoleOwner" attribute protectionMatthias Dieter Wallnöfer2-0/+153
This is a very essential attribute since it references to various domain master roles (PDC emulator, schema...) depending on which entry it has been set. Incautious modifications can cause severe problems. Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Apr 30 02:04:24 CEST 2012 on sn-devel-104
2012-04-29s4:dsdb/common/util.c - samdb_is_pdc() - fail if the "fSMORoleOwner" ↵Matthias Dieter Wallnöfer1-1/+5
attribute has not been set
2012-04-29Add some debug for FOOBAR return case as they are hard to diagnoseMatthieu Patou2-2/+8
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sun Apr 29 09:08:15 CEST 2012 on sn-devel-104
2012-04-29dsdb: more RELAX to DBCHECK control shift so that only dbcheck can do ↵Matthieu Patou1-2/+2
uncontrolled changes
2012-04-29dsdb: change control from relax to dbcheckMatthieu Patou1-1/+1
Comment indicate that this is needed by dbcheck only and it permits other projects to push broken schema and remain undetected
2012-04-29dns server: move very verbose debug to higher level 2 -> 8Matthieu Patou1-4/+4
2012-04-28s4:torture: add a check for talloc success in rpc.samba3.randomauth2Michael Adam1-1/+1
Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Sat Apr 28 02:10:39 CEST 2012 on sn-devel-104
2012-04-28s4:torture: add a check for talloc success in the rpc.samba3 suiteMichael Adam1-0/+1
2012-04-28s4:torture: add a rpc.samba3.smb2-reauth2 testMichael Adam1-0/+136
like smb-reauth2, only for smb2
2012-04-27s4:torture: add a rpc.samba3.smb2-reauth1 testMichael Adam1-1/+161
2012-04-27s4:librpc: create a binding on the pipe if necessary in ↵Stefan Metzmacher1-0/+15
dcerpc_pipe_open_smb2_send() Pair-Programmed-With: Michael Adam <obnox@samba.org>
2012-04-27libcli/smb: move SMB2_IOCTL_FLAG_IS_FSCTL to smb2_constants.hStefan Metzmacher1-3/+0
metze
2012-04-27s4:ntvfs/ipc: don't echo back the smb2 ioctl input_bufferStefan Metzmacher1-1/+1
metze
2012-04-26torture: change dfs tests now that we return a level 4 when level 4 is requestedMatthieu Patou1-3/+2
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Thu Apr 26 21:25:37 CEST 2012 on sn-devel-104
2012-04-26s4-torture: never return false in the raw.composite torture testAndrew Bartlett1-39/+7
We must use torture_assert() macros to ensure that the failure is recorded in the subunit stream correctly, rather than being returned as an unknown 'error'. (We cannot handle error results as knownfail). Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Apr 26 04:00:16 CEST 2012 on sn-devel-104
2012-04-26s4:torture: add a rpc.samba3.smb-reauth2 testMichael Adam1-0/+145
* Open session. * Reauth to anon. * Open lsa pipe. * Do lsa get username. * Rauth to original user. * Do lsa get username again. expected result: the getusername works and shows 'NT AUTHORITY\ANONYMOUS LOGON' in both calls. Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Thu Apr 26 02:27:12 CEST 2012 on sn-devel-104
2012-04-25s4:torture: add a rpc.samba3.smb-reauth1 testMichael Adam1-0/+165
It does reauth while using an rpc pipe: * open session * open lsa pipe * do lsa getusername * reauth to anonymous * do lsa getusername again * reauth back to original user * do reauth again result: lsa getusername is always possible and always gives the first (authenticated user)
2012-04-25s4:torture: add a raw.session suite with a raw.session.reauth testGregor Beck3-1/+92
Signed-off-by: Michael Adam <obnox@samba.org>