summaryrefslogtreecommitdiff
path: root/source4
AgeCommit message (Collapse)AuthorFilesLines
2011-04-16s4-heimdal: Allow any kvno to match when searching the keytab.Andrew Bartlett1-2/+1
Windows does not use a KVNO when it checks it's passwords, and MIT doesn't check the KVNO when no acceptor identity is specified (looping over all keys in the keytab). Andrew Bartlett
2011-04-16s4-heimdal_build: Add extra HAVE defines needed for the source3 krb5 codeAndrew Bartlett1-0/+3
2011-04-16selftest Remove selftest of the test subsystemAndrew Bartlett1-1/+0
The intereactions between selftest.pl and the target are now too complex to unit test like this any more. Andrew Bartlett
2011-04-16selftest: Move Samba4 selftest wscript to the top levelAndrew Bartlett1-201/+0
2011-04-16selftest: Start using the binary mapping at the python layer as wellAndrew Bartlett2-2/+2
2011-04-16selftest: Remove duplication between BUILDIR and BINDIRAndrew Bartlett9-9/+9
Just have BINDIR, and have it default to ./bin Andrew Bartlett
2011-04-15s4-dsdb: Add more information on why we don't check the SD controlMatthieu Patou1-0/+5
Signed-off-by: Nadezhda Ivanova <nivanova@samba.org> Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Fri Apr 15 16:16:27 CEST 2011 on sn-devel-104
2011-04-15s4-dsdb: If current attribute list is empty use the one from the requestMatthieu Patou1-1/+1
This will avoid overwritting attribute list made by upper modules. Signed-off-by: Nadezhda Ivanova <nivanova@samba.org>
2011-04-14s3-auth Rename smb_krb5_open_keytab to avoid a conflict with s3Andrew Bartlett2-9/+9
The s3 function doesn't use the keytab_container concept. Andrew Bartlett
2011-04-14libcli/auth Move krb5 wrapper functions from s3 into commonAndrew Bartlett4-113/+79
This requires a small rework of the build system to ensure that the correct #define statements are made in both the s3 and top level builds. We now define the various HAVE_ macros in config.h at all times, using heimdal_build/wscript_configure when that is in use. Andrew Bartlett
2011-04-14s4/libcli: do not use netbios name in NTLMv2 blobs w/o spnegoChristian Ambach1-4/+22
I have seen domain controllers rejecting NTLMv2 blobs presented to NetrLogonSamLogonEx with LOGON_FAILURE when the MsvAvNbComputerName was a FQDN or an IP address I have not seen this field in NTLMv2 blobs send by Windows clients when extended security was not available, so omitting the field makes Samba similar to Windows. This prevents errors with some smbtorture testcases that disable spnego and when a target name is specified that is not a valid netbios name. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Apr 14 02:19:08 CEST 2011 on sn-devel-104
2011-04-14s4/libcli: do not announce NT error code support when it is disabledChristian Ambach1-1/+4
when the support of NT error codes has been disabled in the options of a CLI connection, support for them should not be announced during protocol negotiation Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-04-13s4-test: added a test for E_deshash()Andrew Tridgell3-1/+72
this particularly checks the boundary conditions near passwords of length 14 characters Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Apr 13 07:31:55 CEST 2011 on sn-devel-104
2011-04-13lib/util/charset Add many more charset testsAndrew Bartlett1-0/+2
This confirms that the behaviour of the convert_string() API (with the process-wide iconv handle). Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-04-13lib/util/charset Rename convert_string test to allow a 'non_handle' testAndrew Bartlett1-1/+1
A future commit will test (with a subset of tests) the varient of this function without _handle. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-04-13s4/torture Fix calls to charcnv functions to always supply converted_sizeAndrew Bartlett2-2/+3
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-04-13libcli/ldap pull LIBCLI_LDAP_MESSAGE and LIBCLI_LDAP_NDR into a libraryAndrew Bartlett2-3/+3
This reduces symbol duplication Andrew Bartlett
2011-04-08ldb:ldb/common/ldb_modules.c - change the request counter type to be "unsigned"Matthias Dieter Wallnöfer1-1/+1
Just for consistency since all other LDB counters are unsigned as well. And also the debug output specifier has been chosen to be "%u" - so it really should be unsigned. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Fri Apr 8 09:17:47 CEST 2011 on sn-devel-104
2011-04-08ldb:ldb/common/ldb_modules.c - trivial - fix integer output specifiersMatthias Dieter Wallnöfer1-2/+2
2011-04-07ldb:ldb_msg.c - make "ldb_msg_find_attr_as_*" more robust against invalid valuesMatthias Dieter Wallnöfer1-19/+106
- Integer handling was modeled after validate code from "schema_syntax.c". - Double handling was modeled similar, but with a dynamic buffer. I don't know if there is a maximum literal length for double values but an allocation shouldn't a problem here since doubles are rare. - String handlind is enhanced with a terminating "0" test for safety. Reviewed-by: abartlet + metze Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Thu Apr 7 16:38:57 CEST 2011 on sn-devel-104
2011-04-07ldb:ldb_msg_check_sanity - clean it up from unneeded stuffMatthias Dieter Wallnöfer1-4/+0
2011-04-07dsdb:schema/schema_syntax.c - correctly check error code of ↵Matthias Dieter Wallnöfer1-2/+1
"ldb_string_utc_to_time" This one doesn't set ERRNO. An error happens if the result is "0". Reviewed-by: abartlet
2011-04-07dsdb:schema/schema_syntax.c - add some empty value checks on validate functionsMatthias Dieter Wallnöfer1-0/+9
They are needed since the check in "ldb_msg_sanity_check" will be removed. Reviewed-by: abartlet
2011-04-07s4:objectclass LDB module - "ldb_msg_sanity_check" call not really neededMatthias Dieter Wallnöfer1-5/+0
This call should only be performed at the beginning of a request. "ldb_msg_sanity_check" checks for DN validity (which should already have been done at the beginning of the request) and empty attributes (which should be done by the "objectclass_attrs" LDB module). Hence it is superflous here. Reviewed-by: abartlet
2011-04-07ldb:ldbadd/modify tool - return error code when at least one operation has ↵Matthias Dieter Wallnöfer2-5/+8
failed This is required to better detect failures and should raise the compatiblity to "ldapadd"/"ldapmodify". Reviewed-by: abartlet
2011-04-07ldb:tests - "init.ldif" - deactivate empty "seeAlso" attributeMatthias Dieter Wallnöfer1-1/+2
2011-04-07ldb:ldb/common/ldb_modules.c - always use LDB error codes if possibleMatthias Dieter Wallnöfer1-6/+7
The callers do compare against LDB error codes - hence don't give back "-1". Reviewed-by: Tridge + abartlet
2011-04-07ldb:common/*.c - check for some OOM conditionsMatthias Dieter Wallnöfer2-0/+7
Reviewed-by: abartlet
2011-04-07s4:objectclass LDB module - fix a comment - add a ")"Matthias Dieter Wallnöfer1-1/+1
Reviewed-by: abartlet
2011-04-07s4-smbtorture: fix lsa forest trust test.Günther Deschner1-1/+1
lsa_lsaRSetForestTrustInformation takes a policy handle obtained from lsaopenpolicy/lsaopenpolicy2 and not a trusted domain handle (MS-LSAD 3.1.4.7.16 LsarSetForestTrustInformation (Opnum 74)). Sumit, please check. Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Thu Apr 7 14:52:52 CEST 2011 on sn-devel-104
2011-04-07s4-samba_dnsupate Fix syntax errorAndrew Bartlett1-2/+1
This particular sub-part of the script isn't tested in 'make test' due to it making real changes to DNS. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Apr 7 08:51:11 CEST 2011 on sn-devel-104
2011-04-07samba_dnsupdate: Don't use subprocess.check_call, it isn't in python 2.4Andrew Bartlett1-1/+8
RHEL5 and clones use python 2.5
2011-04-07ldb: fixed --paged option in ldb toolsAndrew Tridgell2-2/+2
we were sometimes using 'paged_result' and sometimes using 'paged_results'. The latter seemed to be more common, so I changed the two places that used the 'paged_result' string to 'paged_results'
2011-04-06s4:dsdb/repl_meta_data: update replPropertyMetaData on originating renamesStefan Metzmacher1-6/+122
The version of the "name" attribute needs to change even if the value is the same. This also normalizes the rdn attribute name based on the schema. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Apr 6 19:55:50 CEST 2011 on sn-devel-104
2011-04-06s4:dsdb/repl_meta_data: allow passing an explicit attribute list to ↵Stefan Metzmacher1-4/+15
replmd_update_rpmd() This will be used for renames. metze
2011-04-06s4:dsdb/repl_meta_data: normalize the rdn attribute name based on the schemaStefan Metzmacher1-5/+15
metze
2011-04-06s4-test: fixed a problem with very verbose NDR debugAndrew Tridgell3-4/+4
lp.get("log level") returns a string, not an integer. It needs to be cast to an integer for comparison with a number Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Apr 6 08:58:05 CEST 2011 on sn-devel-104
2011-04-06lib/crypto: rename the SHA256_ functions to samba_SHA256_Andrew Tridgell1-3/+3
this prevents a symbol duplication with the openssl library, which may be linked in via a secondary library dependency Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-04-06tstream: make npa_tstream a private libraryAndrew Tridgell2-2/+2
this prevents symbol duplication of the npa_tstream symbols Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-04-06lib: make asn1_util a private libraryAndrew Tridgell3-3/+3
this prevents symbol duplication of the asn1 symbols in the service and ntvfs subsystems Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-04-06s4: Update/Set local USN only on attribute that have been modified/createdMatthieu Patou1-9/+15
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-04-05kdc: always ldb escape the realmAndrew Bartlett1-1/+11
2011-04-05auth: Move auth_session_info into IDLAndrew Bartlett7-106/+103
This changes auth_session_info_transport to just be a wrapper, rather than a copy that has to be kept in sync. As auth_session_info was already wrapped in python, this required changes to the existing pyauth wrapper and it's users. Andrew Bartlett
2011-04-05s4-auth: Always talloc_zero() the struct auth_session_infoAndrew Bartlett1-1/+1
2011-04-05s4 samba-tool: Implement "testparm" commandKai Blin2-0/+208
This is a port of the existing "testparm" python script to a samba-tool command. Autobuild-User: Kai Blin <kai@samba.org> Autobuild-Date: Tue Apr 5 07:49:13 CEST 2011 on sn-devel-104
2011-04-04s4-credentials Add a command line hook to set the kerberos credentials cacheAndrew Bartlett1-1/+13
This allows this to be specified independent of the KRB5CCNAME environment variable (in this case, it's harder than it should be to set up in the make test for s3 that way). Andrew Bartlett
2011-04-04s4-dsdb: implemented creation of conflict recordsAndrew Tridgell1-48/+356
when a record with the same DN gets created on two DCs at the same time, this creates a replication conflict. To resolve this conflict one of the DCs needs to create a conflict record, which is a rename of one of the two DNs, based on which one is newer. This prevents replication from failing when DCs are temporarily disconnected and then have conflicts when they next replicate Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Apr 4 03:27:07 CEST 2011 on sn-devel-104
2011-04-04s4-samba-tool: give a bit better error on user delete failureAndrew Tridgell1-1/+5
2011-04-04s4-rpc: improved error mapping for several RPC server callsAndrew Tridgell4-26/+22
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-04-04s4-dsdb: added a ldb err -> NTSTATUS mappingAndrew Tridgell1-0/+78
this is not perfect, but its better than always giving NT_STATUS_UNSUCCESSFUL in our RPC servers Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>