Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-09-11 | s4:dcesrv_samr_GetGroupsForUser - also universal group memberships are ↵ | Matthias Dieter Wallnöfer | 1 | -2/+3 | |
returned here Tested using User Manager for Domains against Windows Server 2008. MS-SAMR 3.1.5.9.1 is wrong in this case therefore I've informed the dochelp team. | |||||
2010-09-11 | s4-privs Fix enum privileges in LSARPC server | Andrew Bartlett | 1 | -1/+1 | |
We were returning the index, not the LUID value Andrew Bartlett | |||||
2010-09-11 | s4:gensec Put the "NTLM" string for NTLMSSP's SASL name in a header | Andrew Bartlett | 2 | -1/+3 | |
2010-09-11 | s4-param: removed the lp_ varients of the functions | Andrew Tridgell | 1 | -18/+9 | |
these made debugging much harder. We should replace these with generated macros | |||||
2010-09-11 | s4-param: move back to auto-generation of loadparm prototypes | Andrew Tridgell | 3 | -161/+7 | |
2010-09-11 | s4-credentials: get all attributes in cli_credentials_set_secrets() | Andrew Tridgell | 1 | -17/+1 | |
This ensures we get whenChanged, which is needed by the s3 winbind code to ensure we don't repeatedly try to change the password | |||||
2010-09-11 | libcli/security Use talloc_zero when making a struct security_token | Andrew Bartlett | 2 | -7/+1 | |
2010-09-11 | s4-privs Seperate rights and privileges | Andrew Bartlett | 2 | -39/+55 | |
These are related, but slightly different concepts. The biggest difference is that rights are not enumerated as a system-wide list. This moves the rights to security.idl due to dependencies. Andrew Bartlett | |||||
2010-09-11 | s4-rpc_server Put all 'logon failure' messages at the same debug level 4 | Andrew Bartlett | 1 | -4/+6 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s4-lsa: privilege IDs should use the enum, not an int | Andrew Tridgell | 1 | -1/+1 | |
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-11 | libcli/security Make sec_privilege_from_index() return SEC_PRIV_INVALID on ↵ | Andrew Bartlett | 1 | -1/+1 | |
failure This is clearer and more consistent than using a magic -1 return Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security make sec_privilege_id() return SEC_PRIV_INVALID on failure. | Andrew Bartlett | 2 | -6/+6 | |
Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | libcli/security Move source4/ privileges code into the common libcli/security | Andrew Bartlett | 3 | -310/+2 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s4-privs Add a lookup by index of privilages | Andrew Bartlett | 2 | -3/+14 | |
Now that privileges are no longer given luid values sequentially, we need another way to look them up for enumeration. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | privs Add my Copyright | Andrew Bartlett | 1 | -0/+1 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-11 | s4-privs Remove link between enum sec_privilege and the privilege bitmap | Andrew Bartlett | 1 | -17/+69 | |
This allows us to set the enum sec_privilege constants to the LUID values that are seen from windows, which we need to match, in order to preserve the support for the NT Print Migrator tool after a merge with the source3/ privileges code. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2010-09-10 | s4/pvfs: use monotonic time for this timeout | Björn Jacke | 2 | -4/+4 | |
2010-09-10 | s4/ldap: use time_mono for reconnect timeout | Björn Jacke | 1 | -2/+2 | |
2010-09-10 | s4/torture: use time_mono for timeouts | Björn Jacke | 1 | -2/+2 | |
2010-09-10 | s4/torture: use time_mono for delta time | Björn Jacke | 1 | -2/+2 | |
2010-09-10 | s4:client/client.c - fix wrong return codes in "do_connect" | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
Detected by the Solaris cc compiler. | |||||
2010-09-10 | s4:lib/policy/gp_filesys.c - remove dead code | Matthias Dieter Wallnöfer | 1 | -2/+0 | |
Found out by Solaris cc | |||||
2010-09-10 | s4:torture/locktest.c - add a cast in order to quiet a warning on Solaris cc | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
2010-09-10 | s4:libcli/wrepl/winsrepl.c - add more "char *" casts in order to suppress ↵ | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
Solaris warnings | |||||
2010-09-10 | s4:torture/ntp/ntp_signd.c - add more "char *" casts in order to suppress ↵ | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
Solaris warnings | |||||
2010-09-10 | s4:torture/rpc/winreg.c - hopefully this attempt fixes Solaris "cc" on the ↵ | Matthias Dieter Wallnöfer | 1 | -27/+10 | |
buildfarm The Solaris "cc" incompatiblity on this codepart seems to be harder to fix than it looks like. | |||||
2010-09-10 | s4:getncchanges_change_master - also in this call "i" needs to be unsigned | Matthias Dieter Wallnöfer | 1 | -1/+2 | |
2010-09-10 | s4-errormap: map ERRSRV/ERRbaduid to NT_STATUS_USER_SESSION_DELETED | Stefan Metzmacher | 1 | -0/+1 | |
metze | |||||
2010-09-10 | s4:provision: remember the setup directory if it wasn't the default | Stefan Metzmacher | 4 | -0/+11 | |
This fixes make test without a make install. metze | |||||
2010-09-10 | s4/fsmo: Change return type from NTSTATUS to WERROR for drepl_takeFSMOrole | Anatoliy Atanasov | 3 | -4/+5 | |
This removed an unnecessary conversion of the return type in drepl_take_FSMO_role. | |||||
2010-09-10 | s4/fsmo: Fix callback declaration | Anatoliy Atanasov | 1 | -1/+2 | |
2010-09-10 | s4-drs: return DRSUAPI_EXOP_ERR_SUCCESS in extended_ret | Kamen Mazdrashki | 1 | -0/+1 | |
in case we are handling extended operation. It seems that windows accept both DRSUAPI_EXOP_ERR_SUCCESS and DRSUAPI_EXOP_ERR_NONE, but Samba is a little bit more picky on this. | |||||
2010-09-10 | s4-drs: Hanlde extended operations only once | Kamen Mazdrashki | 1 | -40/+45 | |
Most of extended operations I know of work like: 1. do extended operation 2. collect a set of objects to return and start replication cycle 3. continue returning object as we have no more to give This way we ensure we are doing 1. only once | |||||
2010-09-10 | s4-dreplsrv: fix 'dn' for partition object being created | Kamen Mazdrashki | 1 | -1/+9 | |
2010-09-10 | s4-drs-fsmo: try to dispatch ops in queue as soon as possible | Kamen Mazdrashki | 1 | -1/+9 | |
In most cases this will transfer of schema master role to look like a synchronous operation. | |||||
2010-09-10 | s4/fsmo: Added python tests for schema master transfer op | Anatoliy Atanasov | 2 | -0/+153 | |
2010-09-10 | s4-fsmo: update FSMO changes for recent IRPC work | Andrew Tridgell | 2 | -7/+13 | |
the IRPC API has changed Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> | |||||
2010-09-10 | s4/drs: update repsFrom only when we are not in getncchanges extended op | Anatoliy Atanasov | 1 | -4/+4 | |
2010-09-10 | s4-ldap: Added support for FSMO role transfer via LDAP by modify on rootDSE | Nadezhda Ivanova | 1 | -1/+46 | |
GetNCChanges with the corresponding extended operation is initiated and added to the queue when a modify request is received on becomeSchemaMaster, becomeRidMaster, becomeNamingMaster, becomeInfrastructureMaster and becomePDC attributes in rootDSE. | |||||
2010-09-10 | s4-rpc: Added handling of fsmo role transfer to GetNCChanges | Nadezhda Ivanova | 1 | -0/+108 | |
This adds support for DRSUAPI_EXOP_FSMO_REQ_ROLE, DRSUAPI_EXOP_FSMO_RID_REQ_ROLE and DRSUAPI_EXOP_FSMO_REQ_PDC. Developed in collaboration with Anatoliy Atanasov <anatoliy.atanasov@postpath.com> | |||||
2010-09-10 | s4-irpc: Added internal rpc call DREPL_TAKEFSMOROLE | Nadezhda Ivanova | 1 | -1/+10 | |
It schedules a getncchanges with extended op 6, to be used when a modify request on becomeROLEMaster atteibute on rootDSE is received. | |||||
2010-09-10 | s4-drs: Implementation of GetNCChanges extended op 6 - fsmo role transfer | Nadezhda Ivanova | 4 | -2/+170 | |
Basically the candidate owner makes a getncchanges call with extended op 6 when they want to become the new owner. The current owner then updates the corresponding fSMORoleOwner attribute in its database with the new owner, and replicates the change to the candidate, who then becomes the owner. The patch was made in cooperation with Anatoliy Atanasov <anatoliy.atanasov@postpath.com> who kindly helped to debug it. | |||||
2010-09-10 | s4-drs: Refactored drepl_service and send_ridalloc_request so that the ↵ | Nadezhda Ivanova | 2 | -27/+48 | |
structures can be used for other extended ops | |||||
2010-09-10 | s4/torture: use time_mono for deltas in lock test | Björn Jacke | 1 | -22/+22 | |
2010-09-10 | s4-smbtorture: add spoolss_OpenPrinter with unc and printername in ↵ | Günther Deschner | 1 | -4/+18 | |
RPC-SPOOLSS-PRINTSERVER. Guenther | |||||
2010-09-09 | s4:client/cifsdd.c - restore Solaris cc compatibility | Matthias Dieter Wallnöfer | 1 | -11/+10 | |
"static const struct"s need to be global in order to work with Solaris cc. | |||||
2010-09-09 | s4:torture/rpc/winreg.c - restore Solaris cc compatibility | Matthias Dieter Wallnöfer | 1 | -71/+72 | |
"static const struct"s need to be global in order to work with Solaris cc. | |||||
2010-09-09 | s4:libcli/security/*.c - fix some wrong typed counters | Matthias Dieter Wallnöfer | 3 | -10/+7 | |
According to "librpc/gen_ndr/security.h" they need to be "uint32_t". | |||||
2010-09-09 | s4-dreplsrv: Do allocations on long-living context so that callback gets called | Kamen Mazdrashki | 1 | -1/+1 | |
2010-09-09 | s4-drs-test: Add 'reset' and 'replace' tests for drsuapi_DsReplicaUpdateRefs | Kamen Mazdrashki | 1 | -4/+28 | |
At first I got the impression we are not handling those cases, but after those tests surprisingly passed I saw that we have correct behavior implemented in a helper function. So I decided to commit those tests in case someone change the strange-looking check for DRSUAPI_DRS_ADD_REF flag in a function that handles delete operation :) |