summaryrefslogtreecommitdiff
path: root/source4
AgeCommit message (Collapse)AuthorFilesLines
2011-12-14s4-smbtorture: make sure we can successfully run the schannel test against ↵Günther Deschner1-16/+30
windows. lsa lookupsids3/lookupnames4 is only available over schannel sealed ncacn_ip_tcp. Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Dec 14 17:28:29 CET 2011 on sn-devel-104
2011-12-14s4-torture: LookupSids3 is only available over NCACN_IP_TCP.Andreas Schneider1-1/+2
Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Wed Dec 14 15:39:58 CET 2011 on sn-devel-104
2011-12-14s4-torture: Fix schannel test against win2k8.Andreas Schneider1-4/+4
2011-12-14s4-librpc: Fix NETLOGON credential chain with Windows 2008.Andreas Schneider2-11/+42
Windows Server 2008 returns NT_STATUS_DOWNGRADE_DETECTED if you call netrServerAuthenticate2 during a domain join without setting the strong keys flag (128bit crypto). Only for NT4 we need to do a downgrade to the returned negotiate flags. See also 0970369ca0cb9ae465cff40e5c75739824daf1d0.
2011-12-14s4-netlogon: Revert patch f02e4ebfafa6e5911e3fe744b1780527ab12c970Amitay Isaacs1-5/+0
DS_DNS_CONTROLLER bit is set if DC's domain name is dns name. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Wed Dec 14 07:31:05 CET 2011 on sn-devel-104
2011-12-14samba-tool: Fix DN for GPO entriesAmitay Isaacs1-8/+2
2011-12-14samba-tool: gpo: fix a typoAmitay Isaacs1-1/+1
2011-12-14samba-tool: Remove duplicate code of dsacl to fsacl conversionAmitay Isaacs1-38/+10
Use samba.ntacls.dsacl2fsacl() instead.
2011-12-14setup: Fix phpldapadmin configuration for version 1.2.xAmitay Isaacs1-18/+10
2011-12-14s4-smbtorture: fix some typos in schannel test.Günther Deschner1-3/+3
Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Dec 14 02:52:54 CET 2011 on sn-devel-104
2011-12-14s4-smbtorture: avoid printf(); in schannel test.Günther Deschner1-13/+13
Guenther
2011-12-14s4-smbtorture: remove trailing whitespace from schannel test.Günther Deschner1-41/+41
Guenther
2011-12-14s4-resolv: fix dns_ex so as to fail correctly when a name does not existAndrew Bartlett1-0/+9
Without this, netbios name lookups do not work, as we never fall back to them. This caused segfaults from e38d97e0424f7e5b21c8b7ac0b1f1bac33f19d69 to 251209bd6f6e66ca9bcf28cd652d85d1cd729fdc and then name lookup failure or timeouts until this patch. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Dec 14 01:16:37 CET 2011 on sn-devel-104
2011-12-13s4-selftest: Add test of RPC to a netbios aliasAndrew Bartlett1-0/+1
This tries to ensure our netbios lookup code is still run. Andrew Bartlett
2011-12-13s4-selftest Give local.resolve a real name to look upAndrew Bartlett1-1/+2
2011-12-13s4:pydsdb: remove unused variable from py_dsdb_am_pdc()Stefan Metzmacher1-1/+0
metze
2011-12-13s4-provision: Do not guess partition file names, use @PARTITION recordAmitay Isaacs1-59/+76
This is to avoid duplicating the logic of generating partition file names. (partition file names are encoded partially as per RFC1738). Also, use tdb_copy() instead of filesystem copy function to copy database files, which guarantees correct database copy. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Tue Dec 13 03:28:03 CET 2011 on sn-devel-104
2011-12-13s4-param: Added bin_dir(),sbin_dir() methods to get compiled in dirsAmitay Isaacs1-3/+17
2011-12-13s4-provision: Extract common utility routines in separate fileAmitay Isaacs3-92/+106
2011-12-13s4-provision: CN=MicrosoftDNS,CN=System container is in forest and not domainAmitay Isaacs1-10/+10
2011-12-13s4-cldap: Set DS_DNS_CONTROLLER bit if we are running RPC dnsserverAmitay Isaacs1-0/+5
Till we have internal DNS server which appears in services, use endpoint services to find out if we are running dns server.
2011-12-12s4:python/samba/join: set msDS-Behavior-Version to '4' 2008_R2 on the nTDSA ↵Stefan Metzmacher1-1/+1
object This matches the values we set in provision. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Dec 12 19:16:13 CET 2011 on sn-devel-104
2011-12-12HEIMDAL: Supply krb5_context to _krb5_internal_hmac to allow loggingAndrew Bartlett1-6/+6
Without this, log messages from any abort are not printed to the samba logs. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Dec 12 14:34:16 CET 2011 on sn-devel-104
2011-12-12s4-torture Do not use a fixed password for forest trust testsAndrew Bartlett1-7/+13
It is much better to always use random passwords. Andrew Bartlett
2011-12-12s4-torture cope with servers earlier than Windows 2008Andrew Bartlett1-0/+5
Only Win2008 started to support new encryption types. Andrew Bartlett
2011-12-12s4-torture Modify rpc.lsa.forest.trust test to progress further FL Win2003 R2Andrew Bartlett1-3/+9
This modification is required to pass against a domain in functional level Windows 2003 or later. Andrew Bartlett
2011-12-12s4-torture: Fix commentAndrew Bartlett1-1/+1
2011-12-12s4-lsarpc handle more info levels in SetInfoTrustedDomain callsAndrew Bartlett2-4/+20
This uses the very helpful conversion functions written for the s3 lsa server and places these in common. Andrew Bartlett
2011-12-12torture: do not reuse bindings between pipesAndrew Bartlett1-6/+10
This avoids connecting to the netlogon server over \pipe\lsarpc This works against windows because all pipes are implemented in the same process, but not Samba4, and relying on this is not recommended in the WSPP docs. Andrew Bartlett
2011-12-12s4-lsarpc Fix segfaults found by the samba4.rpc.lsa.forest testAndrew Bartlett1-14/+17
This allows us to move this test to knownfail from skip
2011-12-12tdb2: don't use TDB2 versions of test tdb files.Rusty Russell1-5/+2
Now tdb2 handles tdb1 files, we don't need most of commit 5eecc854236f0b943aaa89e0c3a46f9fbd208ca9 which added TDB2 versions of all the testing tdbs. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au> Autobuild-User: Rusty Russell <rusty@rustcorp.com.au> Autobuild-Date: Mon Dec 12 06:33:44 CET 2011 on sn-devel-104
2011-12-09s4:libcli/smb2: mark a request as error if we can't ship itStefan Metzmacher1-0/+2
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Dec 9 15:13:11 CET 2011 on sn-devel-104
2011-12-09s4:libcli/raw: mark a request as error if we can't ship itStefan Metzmacher1-0/+2
metze
2011-12-09s4:dsdb/common/util.c - test LDB result against LDB_SUCCESS as we are always ↵Matthias Dieter Wallnöfer1-1/+1
doing Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Fri Dec 9 12:00:03 CET 2011 on sn-devel-104
2011-12-09s4 dns: Update requests with QCLASS != IN or ALL trigger NOTIMPLEMENTED errorsKai Blin2-0/+17
Autobuild-User: Kai Blin <kai@samba.org> Autobuild-Date: Fri Dec 9 03:32:28 CET 2011 on sn-devel-104
2011-12-09s4 dns: Add test to prove two updates in one packet are a FORMERRKai Blin1-0/+18
2011-12-09s4 dns: More explicitly use the first question of an update packet onlyKai Blin1-1/+1
2011-12-09s4 dns: Get rid of const qualifier for prereqs, we do need to allocate thoseKai Blin2-6/+6
2011-12-09Revert "Install (platform-independent) python scripts to the PYTHONDIR ↵Jelmer Vernooij1-1/+1
rather than PYTHONARCHDIR." This reverts commit de4b8943bfb40e2f50c9e4e2ee5d39e986317d08. PYTHONDIR and PYTHONARCHDIR are both incorrect - they're the distribution's python locations, rather than the python locations for third party applications. For the moment, using PYTHONARCHDIR seems better though, because it works around an issue on Fedora/RedHat. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Fri Dec 9 01:58:50 CET 2011 on sn-devel-104
2011-12-08Add test for PEP8 - currently all errors are ignored, but we warn about them ↵Jelmer Vernooij1-0/+50
- and can ratchet if we want to. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Thu Dec 8 23:44:10 CET 2011 on sn-devel-104
2011-12-08samba.drs_utils: Use new style classes and exceptions, fix formatting of ↵Jelmer Vernooij1-13/+19
docstrings to make pydoctor happy.
2011-12-08samba.kcc_utils: Fix formatting to match PEP8, make pydoctor happy.Jelmer Vernooij1-246/+214
2011-12-08Add tests for srvsvc python interface. Thanks Dhananjay SatheJelmer Vernooij2-0/+70
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Thu Dec 8 04:57:52 CET 2011 on sn-devel-104
2011-12-08selftest: Some extra assertions.Jelmer Vernooij1-0/+4
2011-12-08dbcheck: cope with objects disappearing during checkingAndrew Tridgell2-6/+16
Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Thu Dec 8 03:23:49 CET 2011 on sn-devel-104
2011-12-08samba_kcc NTDSConnection translationDave Craft2-218/+1292
This is an advancement of samba_kcc to compute and commit the modification of a repsFrom on an NC Replica. The repsFrom is computed according to the MS tech spec for implied replicas of NTDSConnections. Proper maintenance of (DRS options, schedules, etc) from a NTDSConnection are now all present. New classes for inter-site transports, sites, and repsFrom) are now present in kcc_utils.py. Substantively this gets intra-site topology generation functional by committing the repsFrom that were computed from the DSA graph implemented in prior drops of samba_kcc Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-12-08Invocation of samba_kcc from KCC taskDave Craft3-21/+89
Modification to periodic and explicit invocation paths of the KCC topology generation code. Managed via samba_runcmd_send() API. The samba_kcc script is invoked if (kccsrv:samba_kcc = true) appears in smb.conf Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-12-08Add subreq and status to kcc_service structDave Craft1-2/+9
The subreq and status fields in the kcc_service struct are added for execution management of the external samba_kcc python script. Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-12-07s4-selftest re-enable nsstest on libnss_winbind.soAndrew Bartlett1-1/+1
2011-12-07s4-kdc: only build hdb plugin if we build against system HeimdalAndrew Bartlett1-0/+1
It is not safe to have a system kadmin use our plugin if we do not share the same libkrb5. Andrew Bartlett