Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2009-07-17 | Revert "s4:heimdal_build: predefine GSSAPI_DEPRECATED depending on the ↵ | Andrew Bartlett | 1 | -8/+0 | |
compiler version" This is now handled correctly in the newly imported Heimdal This reverts commit 4a754d029b0eb229b23980aa4a80dae2b485a302. | |||||
2009-07-17 | s4:heimdal: import lorikeet-heimdal-200907162216 (commit ↵ | Andrew Bartlett | 6 | -23/+60 | |
d09910d6803aad96b52ee626327ee55b14ea0de8) This includes in particular changes to the KDC to resolve bug 6272, originally by Matthieu Patou <mat+Informatique.Samba@matws.net>. We need to sort the AuthorizationData elements to put the PAC first, or else WinXP breaks when browsed from Win2k8. Andrew Bartlett | |||||
2009-07-17 | s4:kdc Rework KDC to pull in less attributes for krbtgt lookups | Andrew Bartlett | 3 | -31/+62 | |
Each attribute we request from LDB comes with a small cost, so don't lookup any more than we must for the (very) frequent krbtgt lookup case. Similarly, we don't need to build a PAC for a server (as a target), so don't ask for the PAC attributes here either. Andrew Bartlett | |||||
2009-07-17 | s4:kdc rename functions from LDB_ to hdb_samba4 | Andrew Bartlett | 1 | -71/+71 | |
The LDB_ prefix is misleading, and stomps on the LDB namespace. This is a Samba4 hdb module, and not something generic. Andrew Bartlett | |||||
2009-07-17 | Revert "fix LSA-PRIVILEGES" | Günther Deschner | 1 | -3/+2 | |
This reverts commit 0d9fdbceedddb08dbea8ed84e06a218d3ec562f4. | |||||
2009-07-17 | Revert "fix LSA-TRUSTED-DOMAINS" | Günther Deschner | 1 | -3/+2 | |
This reverts commit 3c9b26276083002124674678ac757e859fb6b20e. | |||||
2009-07-17 | s4-smbtorture: use secinfo flags instead of numbers in lsa test. | Günther Deschner | 1 | -1/+3 | |
Guenther | |||||
2009-07-16 | s4:heimdal_build: predefine GSSAPI_DEPRECATED depending on the compiler version | Stefan Metzmacher | 1 | -0/+8 | |
Otherwise heimdal/lib/gssapi/gssapi/gssapi.h will just define it to __attribute__ ((deprecated)) which is not supported by all compilers we care about. This should fix the build on Tru64 metze | |||||
2009-07-16 | s4:heimdal_build: try to fix the build on systems without ifaddrs.h | Stefan Metzmacher | 2 | -0/+10 | |
metze | |||||
2009-07-16 | s4:heimdal_build: tell heimdal we have inet_aton() | Stefan Metzmacher | 1 | -0/+4 | |
This should fix problems on Solaris. metze | |||||
2009-07-16 | s4-smbtorture: use torture_comment in RPC-LSA tests. | Günther Deschner | 1 | -204/+204 | |
Guenther | |||||
2009-07-16 | fix LSA-PRIVILEGES | Günther Deschner | 1 | -2/+3 | |
2009-07-16 | fix LSA-TRUSTED-DOMAINS | Günther Deschner | 1 | -2/+3 | |
2009-07-16 | s4-smbtorture: move all privilege tests to RPC-LSA-PRIVILEGES. | Günther Deschner | 2 | -12/+54 | |
Guenther | |||||
2009-07-16 | s4-smbtorture: move all trusted domain tests to RPC-LSA-TRUSTED-DOMAINS. | Günther Deschner | 2 | -7/+49 | |
Guenther | |||||
2009-07-16 | s4:heimdal_build: try to fix the build on Solaris | Stefan Metzmacher | 1 | -0/+1 | |
The problem seems to be #define flock rk_flock heimdal/../heimdal_build/replace.c: In function `rk_flock': heimdal/../heimdal_build/replace.c:64: error: storage size of 'lock' isn't known heimdal/../heimdal_build/replace.c:64: warning: unused variable `lock' metze | |||||
2009-07-16 | s4:kdc Initialise new hdb function pointers. | Andrew Bartlett | 1 | -0/+3 | |
Soon we will add implementations for these. | |||||
2009-07-16 | s4:heimdal: import lorikeet-heimdal-200907152325 (commit ↵ | Andrew Bartlett | 67 | -590/+1210 | |
2bef9cd5378c01e9c2a74d6221761883bd11a5c5) | |||||
2009-07-16 | lsa: fix typo in lsa_TrustDomInfoEnum enum in IDL. | Günther Deschner | 1 | -1/+1 | |
Guenther | |||||
2009-07-16 | s4-smbtorture: some work on getprinterdriver and getprinterdriver2 tests. | Günther Deschner | 1 | -23/+46 | |
Guenther | |||||
2009-07-16 | s4:gensec Rework gensec_krb5 mutual authentication defaults | Andrew Bartlett | 1 | -24/+28 | |
When emulating Samba3 (which we do to ensure we don't break compatability), don't do mutual authentication by default, as it breaks the session key with AES and isn't what Samba3 does anyway. Andrew Bartlett | |||||
2009-07-16 | s4:heimdal The implied GSS_C_MUTUAL_FLAG depends on AP_OPTS_MUTUAL_REQUIRED | Andrew Bartlett | 1 | -1/+4 | |
We had previously assumed it was unconditional. Samba3 didn't mind very much, but Samba4's samba3-like client did, and the behaviour differed to Win2008 behaviour. Andrew Bartlett | |||||
2009-07-16 | s4:gensec Allow mutual auth to be turned off in 'fake_gssapi_krb5' | Andrew Bartlett | 1 | -5/+15 | |
This allows the older 'like Samba3' GENSEC krb5 implementation to work against Windows 2008. I'm using this to track down interop issues in this area. Andrew Bartlett | |||||
2009-07-16 | s4:dsdb Handle dc/domain/forest functional levels properly | Andrew Bartlett | 9 | -21/+174 | |
Rather than have the functional levels scattered in 4 different, unconnected locations, the provision script now sets it, and the rootdse module maintains it's copy only as a cached view onto the original values. We also use the functional level to determine if we should store AES Kerberos keys. Andrew Bartlett | |||||
2009-07-16 | Add a way to set an opaque integer onto a samdb | Andrew Bartlett | 2 | -0/+67 | |
This will allow us to set some more flags into ldb during the provision. | |||||
2009-07-16 | Add ad-schema/*.txt and utils to the installmisc.sh | Timur I. Bakeyev | 1 | -3/+7 | |
Install other useful scripts from the setup/ directory, not only provisioning ones. Also install setup/ad-schema/*.txt files to the SETUPDIR. These are necessary for 'provision' to work properly. | |||||
2009-07-15 | s4:winbind: rename uint => uint32_t as uint isn't portable | Stefan Metzmacher | 1 | -1/+1 | |
metze | |||||
2009-07-15 | s4:libnet: rename uint => uint32_t because uint is not portable | Stefan Metzmacher | 4 | -6/+6 | |
metze | |||||
2009-07-15 | s4:heimdal_build: try to fix the build on Solaris | Stefan Metzmacher | 1 | -3/+1 | |
We need the definition of 'struct flock'. metze | |||||
2009-07-15 | s4:ntvfs/ipc: replace unnesessary talloc_reference() by a simple talloc_strdup() | Stefan Metzmacher | 1 | -1/+2 | |
metze | |||||
2009-07-15 | s3:ntvfs/posix: avoid unnesessary talloc_reference() | Stefan Metzmacher | 1 | -1/+4 | |
This caused the panics on the RAW-SETFILEINFO.RENAME test, because we returned an empty strings. The problem was: ERROR: talloc_steal with references at ntvfs/posix/pvfs_setfileinfo.c:215 reference at ntvfs/posix/pvfs_resolve.c:799 metze | |||||
2009-07-15 | s4:heimdal: teach heimdal we have (v)aѕprintf in libreplace | Björn Jacke | 1 | -0/+8 | |
2009-07-15 | ѕ4:heimdal: teach heimdal that we have strnlen via libreplcae | Björn Jacke | 1 | -0/+4 | |
2009-07-15 | torture/smb2: add missing new line to the new SMB2-DIR.FILE-INDEX test | Stefan Metzmacher | 1 | -1/+1 | |
Without this the subunit formated output would be invalid and make test reports: "UNEXPECTED(error): samba4.smb2.dir (dc).FILE-INDEX" metze | |||||
2009-07-15 | SMB2-GETINFO: test SMB2_ALL_EAS | Stefan Metzmacher | 1 | -2/+2 | |
metze | |||||
2009-07-15 | s4:libcli/smb2: add smb2_transport_credits_set_charge() to change the ↵ | Stefan Metzmacher | 3 | -4/+14 | |
CreditsCharge value for the next request metze | |||||
2009-07-15 | SMB2-CONNECT: unlink the test file at startup | Stefan Metzmacher | 1 | -0/+2 | |
This is needed to get reproducable results... metze | |||||
2009-07-15 | torture/smb2: fix crash bugs in the new SMB2-DIR tests | Stefan Metzmacher | 1 | -2/+2 | |
metze | |||||
2009-07-15 | s4-selftest: ok, s4 cant print. add RPC-SPOOLSS-PRINTER to knownfail for now. | Günther Deschner | 1 | -0/+1 | |
Guenther | |||||
2009-07-14 | torture/smb2: Adding SMB2 Directory enumeration torture tests. | Aravind | 3 | -26/+1265 | |
* Most of the tests were ported from SMB torture tests. * Added one new tests which checks the behavior of the file_index field present in SMB2_FIND struct. * Added one new test to check the enumeration of directories containing lots of files (~2000 files) with name lengths varying from 1 to 200 char. | |||||
2009-07-14 | s4-smbtorture: add RPC-SPOOLSS-PRINTER test. | Günther Deschner | 2 | -0/+444 | |
Guenther | |||||
2009-07-14 | s4-smbtorture: add some tests to check spoolss_SetPrinter behavior. | Günther Deschner | 1 | -0/+558 | |
Guenther | |||||
2009-07-14 | s4-smbtorture: restructure test_OpenPrinter_server in RPC-SPOOLSS a bit. | Günther Deschner | 1 | -5/+7 | |
Guenther | |||||
2009-07-14 | remove all '\n' from ldb_debug | Sumit Bose | 19 | -57/+58 | |
2009-07-13 | libds: merge the UF<->ACB flag mapping functions. | Günther Deschner | 8 | -161/+16 | |
Guenther | |||||
2009-07-13 | libds: share UF_ flags between samba3 and 4. | Günther Deschner | 16 | -152/+15 | |
Guenther | |||||
2009-07-09 | s4:dsdb Allow unicodePwd to be set when adding a user | Andrew Bartlett | 1 | -85/+84 | |
Windows 7 sets it's join password using the unicodePwd attribute (as a quoted, utf16 string), and does so during the LDAPAdd of the object. Previously, this code only handled unicodePwd for modifies. Andrew Bartlett | |||||
2009-07-09 | Add const | Andrew Bartlett | 1 | -2/+2 | |
2009-07-08 | s4:auth/ntlmssp: let _unwrap fallback to seal if sign only doesn't work | Stefan Metzmacher | 1 | -6/+57 | |
s4:auth/ntlmssp: let _unwrap fallback to seal if sign only doesn't work Windows always uses SEAL with NTLMSSP on LDAP connection even if not negotiated. metze | |||||
2009-07-08 | Test for schemaUpdateNow command | Anatoliy Atanasov | 1 | -54/+126 | |