Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-06-28 | s4:dcesrv_samr_SetUserInfo - port the "SAMR_FIELD_LAST_PWD_CHANGE" check ↵ | Matthias Dieter Wallnöfer | 1 | -0/+8 | |
from s3 to s4 | |||||
2010-06-28 | s4:dcesrv_samr_SetUserInfo - implement password set level 21 | Matthias Dieter Wallnöfer | 1 | -0/+33 | |
2010-06-28 | s4:dcesrv_samr_SetUserInfo - implement case 18 which allows to reset the ↵ | Matthias Dieter Wallnöfer | 1 | -0/+10 | |
user password | |||||
2010-06-28 | s4:OemChangePasswordUser2 - return "NT_STATUS_WRONG_PASSWORD" when we ↵ | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
haven't activated the the lanman auth This is what s3 does. | |||||
2010-06-28 | s4:samr_password.c - add a function which sets the password through ↵ | Matthias Dieter Wallnöfer | 1 | -0/+48 | |
encrypted password hashes Used for password sets on "samr_SetUserInfo" level 18 and 21. | |||||
2010-06-28 | s4-smbtorture: fix typo. | Günther Deschner | 1 | -1/+1 | |
Not my day... Guenther | |||||
2010-06-28 | s4:torture/rpc/samr.c - test_SetPassword_LastSet - fix "pwdLastSet" test | Matthias Dieter Wallnöfer | 1 | -33/+31 | |
- Remove superflous checks (on level 18, 24, 26 we do always have "pwdLastSet" resets if "password_expired" > 0) - Fixed some bugs Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-06-28 | s4-smbtorture: add trustDomainPasswords blob test to LOCAL-NDR testsuite. | Günther Deschner | 1 | -0/+64 | |
Our parsing of this struct is incorrect atm. and apparently also causes the s4 server to crash. Thanks to Sumit Bose <sbose@redhat.com> for providing the auth data retrieved from a w2k3 domain.msc operation. Guenther | |||||
2010-06-28 | s4:ldap_server: don't start if we can't bind to port 389 | Stefan Metzmacher | 1 | -1/+4 | |
metze | |||||
2010-06-28 | Implementation of self membership validated right. | Nadezhda Ivanova | 3 | -6/+234 | |
When this right is granted, the user can add or remove themselves from a group even if they dont have write property right. | |||||
2010-06-28 | s4/test: Run DrsDeleteObjectTestCase as part of S4 testing | Kamen Mazdrashki | 1 | -0/+3 | |
I put this test in the end of the list of tests as it runs with 'vampire_dc' environment running. Currently there are tests that are failing when we have 2 DCs constantly replicating in the test environment (this, of course, should be fixed in the near future) | |||||
2010-06-28 | s4/drs: re-implement 'renaming' object replication | Kamen Mazdrashki | 1 | -18/+53 | |
We should rename objects only after we make sure, that changes on the partner DC are newer than what we have. This fixes a bug, when we have following situation with 2 DCs: - we have an object O on the two DCs - we rename (delete) object O on DC1 - DC1 replicates from DC2 In the above scenario, object O will be renamed back to its original name (i.e. it will be restored). Now, we check that DC2 state is older than what we have, so nothing happens with object's DN. | |||||
2010-06-28 | s4/drs-test: Add few comments in DrsDeleteObjectTestCase test | Kamen Mazdrashki | 1 | -3/+10 | |
Also remove unused code | |||||
2010-06-26 | s4:rpc_server/srvsvc/dcesrv_srvsvc.c - remove unreachable code | Matthias Dieter Wallnöfer | 1 | -36/+0 | |
2010-06-26 | s4:rpc_server/wkssvc/dcesrv_wkssvc.c - remove unreachable code | Matthias Dieter Wallnöfer | 1 | -4/+0 | |
2010-06-26 | s4:rpc_server/lsa/dcesrv_lsa.c - remove unreachable code | Matthias Dieter Wallnöfer | 1 | -2/+0 | |
2010-06-26 | s4:lsa/lsa_lookup.c - use a better type for the "rtype" of the wellknown SIDs | Matthias Dieter Wallnöfer | 1 | -3/+4 | |
To suppress warnings on Solaris 10 | |||||
2010-06-26 | s4:rpc_server/drsuapi/drsutil.c - remove unreachable code | Matthias Dieter Wallnöfer | 1 | -1/+0 | |
2010-06-26 | s4:rpc_server/dcesrv_auth.c - remove unreachable code | Matthias Dieter Wallnöfer | 1 | -2/+0 | |
2010-06-26 | s4:winbind/wb_samba3_protocol.c - add cast to suppress warnings on Solaris 10 cc | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
2010-06-26 | s4:kdc/kdc.c - add cast to suppress warnings on Solaris 10 cc | Matthias Dieter Wallnöfer | 1 | -2/+2 | |
2010-06-26 | s4:kdc/kpasswdd.c - remove unreachable code | Matthias Dieter Wallnöfer | 1 | -2/+0 | |
2010-06-26 | s4:provision.py - fix comment regarding DNS entries | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
I think this should mean partially Samba4 specified (all beside the "dns" account is standard) | |||||
2010-06-26 | s4:provision: add entries for root dns servers | Stefan Metzmacher | 1 | -0/+72 | |
metze | |||||
2010-06-26 | s4:provision: move Samba4 specific DNS stuff to its own file | Stefan Metzmacher | 4 | -21/+39 | |
metze | |||||
2010-06-26 | s4:provision: add --next-rid option | Stefan Metzmacher | 2 | -3/+16 | |
Make it possible to provision a domain with a given next rid counter. This will be useful for upgrades, where we want to import users with already given SIDs. metze | |||||
2010-06-26 | s4:dsdb/ridalloc: add comment about windows behavior regarding rIDUsedPool | Stefan Metzmacher | 1 | -1/+6 | |
metze | |||||
2010-06-26 | s4:provision: don't use hardcoded values for 'nextRid' and 'rIDAvailablePool' | Stefan Metzmacher | 5 | -6/+24 | |
On Windows dcpromo imports nextRid from the local SAM, which means it's not hardcoded to 1000. The initlal rIDAvailablePool starts at nextRid + 100. I also found that the RID Set of the local dc should be created via provision and not at runtime, when the first rid is needed. (Tested with dcpromo on w2k8r2, while disabling the DNS check box). After provision we should have this (assuming nextRid=1000): rIDAllocationPool: 1100-1599 rIDPrevAllocationPool: 1100-1599 rIDUsedPool: 0 rIDNextRID: 1100 rIDAvailablePool: 1600-1073741823 Because provision sets rIDNextRid=1100, the first created account (typically DNS related accounts) will get 1101 as rid! metze | |||||
2010-06-26 | s4:provision: pass relax control also to modify_ldif | Stefan Metzmacher | 1 | -2/+2 | |
metze | |||||
2010-06-26 | s4/net-drs: Fix error messages typo and formatting | Kamen Mazdrashki | 1 | -7/+7 | |
2010-06-26 | s4/drs-test: Fix whitespaces and permissions for delete_object.py test | Kamen Mazdrashki | 1 | -5/+5 | |
Sorry I've missed to do this before | |||||
2010-06-25 | s4:schannel Open the schannel_store.tdb at startup | Andrew Bartlett | 1 | -0/+8 | |
This will allow TDB_CLEAR_IF_FIRST behaviour in future Signed-off-by: Jeremy Allison <jra@samba.org> | |||||
2010-06-25 | s4 python: Add unit tests related to PyLong/PyInt handling | Matthieu Patou | 1 | -2/+11 | |
Signed-off-by: Jelmer Vernooij <jelmer@samba.org> | |||||
2010-06-25 | ldb: Fix a wrong changetype in unit test | Matthieu Patou | 1 | -1/+1 | |
Signed-off-by: Jelmer Vernooij <jelmer@samba.org> | |||||
2010-06-25 | smbtorture: Fix loading of --load-list. | Jelmer Vernooij | 2 | -10/+13 | |
2010-06-25 | s4:lib/registry/ldb.c - cosmetic - fix comment | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
2010-06-25 | s4:lib/registry/ldb.c - cosmetic - wrap lines | Matthias Dieter Wallnöfer | 1 | -3/+2 | |
2010-06-25 | s4 upgradeprovision: Try to support older Pythons. | Michael Wood | 1 | -1/+1 | |
Use "...".split(sep, 1) instead of "...".partition(sep). Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org> | |||||
2010-06-25 | s4/drs: DsReplicaSync should search partition to Sync | Kamen Mazdrashki | 2 | -6/+38 | |
by any valid DSName attribute given, be it - partition DN, partition GUID or partition SID | |||||
2010-06-25 | s4/utils: fix few 'net drs replicate' error messages | Kamen Mazdrashki | 1 | -6/+8 | |
mainly for the output to be more informative | |||||
2010-06-25 | s4/drs-test: Tests Deleted objects replication | Kamen Mazdrashki | 1 | -0/+222 | |
Tests how deleted objects are replicated between two DCs. Currently the test exploits following vulnerabilities: - DsReplicaSync is not correctly implemented - a 'deleted object' is restored (kind of) in case DC1 replicates from DC2 before the 'deleted object' is replicated | |||||
2010-06-25 | selftest: Store the output of the last test run in st/subunit. | Jelmer Vernooij | 1 | -3/+10 | |
If a testrepository repository is present, add the test output when it has completed. | |||||
2010-06-24 | s4 torture: Warn on NOT_IMPLEMENTED in addition to NOT_SUPPORTED for ↵ | Aravind Srinivasan | 1 | -3/+9 | |
RAW-QFILEINFO Signed-off-by: Tim Prouty <tprouty@samba.org> | |||||
2010-06-24 | Revert "s4:provision.ldif - fix the number of available RIDs" | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
This reverts commit 41cdcd54b7b7e3fb70fdb220e74a1daf30e1891a. As per request of metze revert this (cause written on the mailing list). | |||||
2010-06-24 | s4:auth/gensec/gensec_gssapi.c - reorder constructor | Matthias Dieter Wallnöfer | 1 | -30/+38 | |
To have the same order as in the structure definition. | |||||
2010-06-24 | s4-ldb: use CHECK_XSLTPROC_MANPAGES() | Andrew Tridgell | 1 | -1/+1 | |
2010-06-24 | s4-python: python is not always in /usr/bin | Andrew Tridgell | 66 | -66/+66 | |
Using "#!/usr/bin/env python" is more portable. It still isn't ideal though, as we should really use the python path found at configure time. We do that in many places already, but some don't. Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2010-06-24 | s4:provision.ldif - fix the number of available RIDs | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
There should be 4611686014132422209 and not 4611686014132422109. | |||||
2010-06-24 | s4:provision.ldif - this Win2003 revision level seems always to be "9" on ↵ | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
Windows Server 2008 machines | |||||
2010-06-24 | s4:provision_users.ldif - change a group description to be correct | Matthias Dieter Wallnöfer | 1 | -1/+1 | |