| Age | Commit message (Collapse) | Author | Files | Lines | |
|---|---|---|---|---|---|
| 2009-09-20 | Disable descriptor module unless enabled in smb.conf | Nadezhda Ivanova | 1 | -0/+29 | |
| Since this code may still have some problems, it is not executed by default. To enable descriptor inheritance add: acl:inheritance = true in your smb.conf | |||||
| 2009-09-20 | Fixed a difference in domain sid type when SID is provided by user. | Nadezhda Ivanova | 1 | -1/+4 | |
| 2009-09-20 | s4:ldb_parse - Fix the type of an array entry | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
| I found this through a compile warning. Hope that I got this right. | |||||
| 2009-09-20 | s4:provision_configuration - fix "sPNMappings" | Matthias Dieter Wallnöfer | 1 | -2/+1 | |
| I reread some docs about this attributes and it seems that this as mapping attribute isn't host specific but in common for the whole domain. To allow Windows DCs to join our s4 domain sooner or later we have to provide the full attribute. | |||||
| 2009-09-20 | s4:domainlevel - further improvements | Matthias Dieter Wallnöfer | 1 | -9/+50 | |
| - The tool displays now also mixed/interim domain levels and warns about them (s4 isn't capable to run on them) - But it allows now also to raise/step-up from them - It displays now also levels higher than 2008 R2 (altough we don't support them yet) but to be able to get a correct output | |||||
| 2009-09-20 | s4:provision: add the 'resolve_oids' on the top of the module stack | Stefan Metzmacher | 1 | -1/+2 | |
| metze | |||||
| 2009-09-20 | dsdb/samdb: add resolve_oids module | Stefan Metzmacher | 2 | -0/+438 | |
| Windows Servers allow OID strings to be used instead of attribute/class names. For now we only resolve the OIDs in the search expressions, the rest will follow. metze | |||||
| 2009-09-20 | s4:build: require ldb 0.9.7 | Stefan Metzmacher | 1 | -1/+1 | |
| metze | |||||
| 2009-09-20 | s4:ldb: add ldb_parse_tree_copy_shallow() and change version to 0.9.7 | Stefan Metzmacher | 3 | -1/+65 | |
| metze | |||||
| 2009-09-19 | s4-auth: add SID_NT_ENTERPRISE_DCS is a server trust account | Andrew Tridgell | 1 | -1/+13 | |
| 2009-09-19 | s4-drs: security checking on DRS needs to default to on | Andrew Tridgell | 1 | -1/+2 | |
| 2009-09-19 | s4-ldb: display an error if we can't decode a NDR blob | Andrew Tridgell | 1 | -1/+3 | |
| 2009-09-19 | s4-repl: need param.h for lp_parm_bool | Andrew Tridgell | 1 | -0/+1 | |
| 2009-09-19 | Handle dsdb_class_by_lDAPDisplayName returned values in schema_inferiors.c | Anatoliy Atanasov | 1 | -0/+8 | |
| 2009-09-19 | Move replmd_drsuapi_DsReplicaCursor2_compare to a common place. | Anatoliy Atanasov | 3 | -14/+8 | |
| 2009-09-19 | Add drs_security_level_check for dcesrv calls security checks | Anatoliy Atanasov | 6 | -20/+36 | |
| There is also an option to disable the security check by specifying in the smb.conf file: drs:disable_sec_check = true | |||||
| 2009-09-20 | s4:provision_basedn_modify - fix the "auditPolicy" attribute | Matthias Dieter Wallnöfer | 1 | -1/+2 | |
| I had to think about how to encode the string 0x0001 (taken from Windows Server). The problem is due to the "0" byte at the beginning of it. BASE64 encoding seems a good method to do it. | |||||
| 2009-09-19 | s4:utils Remove typo... | Andrew Bartlett | 1 | -1/+0 | |
| 2009-09-19 | s4:dsdb Print the partition we failed to suggest replication for | Andrew Bartlett | 1 | -1/+2 | |
| 2009-09-19 | s4:utils Explian fix for testparm -v | Andrew Bartlett | 1 | -2/+6 | |
| The problem here was that we take an address of a bool, and then (via a void*) cast it to a int *, so put this in a comment. Andrew Bartlett | |||||
| 2009-09-19 | s4-ldb: bump minimum version in ldb too | Andrew Tridgell | 1 | -1/+1 | |
| 2009-09-19 | more include minimisation | Andrew Tridgell | 12 | -41/+0 | |
| 2009-09-19 | tdb: increase minor version | Andrew Tridgell | 1 | -1/+1 | |
| we depend on reads in transactions for s4 replication | |||||
| 2009-09-19 | s4-smbd: removed unnecessary includes | Andrew Tridgell | 5 | -11/+0 | |
| 2009-09-19 | s4-scripts: make minimal_includes handle our -I overrides | Andrew Tridgell | 1 | -10/+20 | |
| 2009-09-19 | s4-smbd: minimise includes in smbd/ and smb_server | Andrew Tridgell | 21 | -40/+0 | |
| 2009-09-19 | s4-testparm: fixed -v option | Andrew Tridgell | 1 | -1/+1 | |
| never pass a bool pointer to popt | |||||
| 2009-09-19 | s4-rpc_server: removed remaining unnecessary #includes | Andrew Tridgell | 4 | -5/+2 | |
| 2009-09-19 | s4-rpc: remove some unnecessary #include lines | Andrew Tridgell | 4 | -8/+0 | |
| I should remember to run script/minimal_includes.pl more often | |||||
| 2009-09-19 | s4:samdb.py - further rework | Matthias Dieter Wallnöfer | 1 | -12/+9 | |
| - I added a comment to the "new user" operation to point out that this works only on s4, since we add also ID mapping entries for winbind there - The "new user" operation adds now the password through the "set password" operation which I find better due to the re-use principle - Remove the word "DC" after "SAMBA 4" in the comment over the "set password" operation since this note and operation applies also to s4 in standalone mode | |||||
| 2009-09-19 | s4-netlogon: implement dcesrv_netr_DsRAddressToSitenamesExW | Andrew Tridgell | 1 | -2/+24 | |
| We don't implement sites properly at the moment so we just return Default-First-Site-Name | |||||
| 2009-09-19 | s4-resolve: fixed a crash bug on timeout | Andrew Tridgell | 9 | -11/+13 | |
| We were creating the name resolution context as a child of lp_ctx, which meant when we gave up on a connection the timer on name resolution kept running, and when it timed out the callback crashed as the socket was already removed. | |||||
| 2009-09-18 | s4-pipes: convert pipe names to lowercase and validate | Andrew Tridgell | 1 | -0/+19 | |
| clients may provide arbitrary names, but we only want lowercase alnum names | |||||
| 2009-09-18 | s4-server: kill main daemon if a task fails to initialise | Andrew Tridgell | 25 | -77/+159 | |
| When one of our core tasks fails to initialise it can now ask for the server as a whole to die, rather than limping along in a degraded state. | |||||
| 2009-09-18 | s4-kdc: ignore unknown keytypes | Andrew Tridgell | 1 | -0/+6 | |
| don't fail hdb operations if one of the key types is unknown | |||||
| 2009-09-18 | s4-drs: cope with dupliate linked attributes | Andrew Tridgell | 1 | -1/+41 | |
| With a w2k8-R2 DC, we sometimes get linked attribute updates via DRS which are duplicates of entries that we already have. We need to cope with this by using a remove/add pair in the ldb_modify() to avoid a "entry already exists" error | |||||
| 2009-09-18 | s4:provision_configuration - "sPNMappings": "http" missed on regeneration | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
| 2009-09-18 | s4/provision_configuration - re-add the "sPNMappings" | Matthias Dieter Wallnöfer | 1 | -0/+3 | |
| Accidentally removed by a previous commit. | |||||
| 2009-09-18 | s4:scripts - Cleans also the rest under the "setup" directory up | Matthias Dieter Wallnöfer | 3 | -30/+43 | |
| - I removed also the "-H" parameter since those scripts are all thought for the use on a local s4 domain controller. Another reason is also the bind as SYSTEM account which itself is only possible on local binds. | |||||
| 2009-09-18 | s4:various scripts under "setup" - Unification | Matthias Dieter Wallnöfer | 4 | -73/+74 | |
| - This unified the shape of those four scripts (comments, command sequence, call of SamDB) - To consider the samdb.py changes regarding the filter: there is now always the possibility either to specify the username or the search filter | |||||
| 2009-09-18 | s4:domainlevel/pwsettings - Remove unused import | Matthias Dieter Wallnöfer | 2 | -2/+0 | |
| 2009-09-18 | s4:samdb.py - Unification of the interfaces | Matthias Dieter Wallnöfer | 2 | -38/+54 | |
| - When a user account is requested by a call always the search filter will be passed as argument. This helps us to unify the API - Add/fix some comments; in particular new comments inform the developer which requirements exist if he wants to use calls which manipulate the "userPassword" attribute (On s4 no problem - but on certain domain levels on Windows Server) | |||||
| 2009-09-18 | s4:minschema/fullschema - add correct header comments | Matthias Dieter Wallnöfer | 2 | -2/+2 | |
| 2009-09-18 | s4:rpc_server: remove some now unused code | Stefan Metzmacher | 2 | -199/+0 | |
| metze | |||||
| 2009-09-18 | s4:ntvfs_ipc: add real named pipe support | Stefan Metzmacher | 2 | -236/+652 | |
| We now open a named via the named_pipe_auth code and process IO via the tstream interface. This means we support byte mode and message mode named pipes. We also correctly issue NT_STATUS_PIPE_BUSY when a smb_trans request comes in and a read or smb_trans is already pending. We also have support for async dcerpc over ncacn_np now, and we now can remove the ncacn_np specific hacks from the rpc_server/ code. metze | |||||
| 2009-09-18 | s4:torture: the spoolss notify test should listen on the ncacn_np endpoint | Stefan Metzmacher | 1 | -0/+20 | |
| metze | |||||
| 2009-09-18 | s4:rpc_server: export dcesrv_add_ep() so that torture tests can use it | Stefan Metzmacher | 2 | -5/+9 | |
| metze | |||||
| 2009-09-18 | s4:service_named_pipe: accept delegated credentials | Stefan Metzmacher | 2 | -3/+101 | |
| metze | |||||
| 2009-09-18 | s4:torture: don't use 'pipe' as variable name it's a system call | Stefan Metzmacher | 1 | -3/+3 | |
| metze | |||||
| 2009-09-18 | s4:heimdal/gssapi/krb5: set cred_handle in _gsskrb5_import_cred | Stefan Metzmacher | 1 | -0/+1 | |
| metze | |||||
 |
index : samba | |
| Unnamed repository; edit this file 'description' to name the repository. | ben |
| summaryrefslogtreecommitdiff |