summaryrefslogtreecommitdiff
path: root/source4
AgeCommit message (Collapse)AuthorFilesLines
2012-10-26pysmbd: Add hook for unlink() so python scripts can remove xattr.tdb entriesAndrew Bartlett1-20/+20
If we do not provide a way to remove files from xattr.tdb, we can re-use the inode. Andrew Bartlett
2012-10-25python-ntacls: Cope with ACL revision 4Andrew Bartlett1-0/+2
This is the new revision with the hash of the posix or system ACL. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Thu Oct 25 15:04:39 CEST 2012 on sn-devel-104
2012-10-25selftest: Always unlink the tempf in posixacl testAndrew Bartlett1-1/+4
2012-10-25selftest: Cover the important non-Samba invalidation of the NT ACLAndrew Bartlett1-0/+23
This covers the case where we have a valid hash of the posix ACL (or the NT ACL from the POSIX ACL) and we notice it no longer matches. Andrew Bartlett
2012-10-25selftest: Cover one more NT ACL invalidation case and improve commentsAndrew Bartlett1-8/+7
This tries to show the difference between the cases where we trap the POSIX ACL change and where we actually detect an OS-level change. Andrew Bartlett
2012-10-25selftest: Add many more tests for our posix ACL handlingAndrew Bartlett1-1/+236
This tests the mapping of posix ACLs to NT ACLs, the invalidation of NT ACLs stored as an xattr and ensures this security-critical code continues to work in the long term. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Thu Oct 25 10:05:16 CEST 2012 on sn-devel-104
2012-10-25dsdb-cracknames: Return DRSUAPI_DS_NAME_STATUS_NO_MAPPING when there is no SIDAndrew Bartlett1-3/+7
If there is no SID for an object being mapped, then there is no NT4 name. We need to return DRSUAPI_DS_NAME_STATUS_NO_MAPPING rather than error out with anything other than WERR_OK as the return value. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Thu Oct 25 04:43:25 CEST 2012 on sn-devel-104
2012-10-24s4:dns_server: fix formatting difference compared to v4-0-testStefan Metzmacher1-1/+2
Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Wed Oct 24 10:12:51 CEST 2012 on sn-devel-104
2012-10-24dsdb-cracknames: Always use talloc_zero()Andrew Bartlett1-1/+1
Otherwise, we will return un-initialised values to the caller, which will attempt to push them onto the wire. Found by Greg Dickie <greg@justaguy.ca>. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Oct 24 05:12:04 CEST 2012 on sn-devel-104
2012-10-21pyglue: Make all_interfaces argumen to interface_ips() optional.Jelmer Vernooij1-2/+2
Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org> Autobuild-Date(master): Sun Oct 21 21:26:01 CEST 2012 on sn-devel-104
2012-10-21pyglue: Mention parameters in interface_ips() docstring.Jelmer Vernooij1-0/+2
2012-10-19s3:build: move sessionid_tdb.o and conn_tdb.o to SMBD_OBJ_BASEGregor Beck1-1/+1
and use SMBD_OBJ_BASE for a couple of targets where sessionid_tdb and conn_tdb were used. Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Michael Adam <obnox@samba.org>
2012-10-19samba-tool user test: Fix expected output.Jelmer Vernooij1-1/+1
Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org> Autobuild-Date(master): Fri Oct 19 11:37:44 CEST 2012 on sn-devel-104
2012-10-19samba.tests.docs: Ignore removed parameters.Jelmer Vernooij1-0/+2
2012-10-19samba.tests.docs: Assume docs are generated by waf.Jelmer Vernooij1-2/+6
2012-10-19samba.tests.docs: Write error output from xsltproc to standard out.Jelmer Vernooij1-1/+1
2012-10-19samba.tests.docs: Skip tests if xsltproc is not present.Jelmer Vernooij1-5/+24
2012-10-19smb.conf(5): Consistent spelling of parameter names.Jelmer Vernooij1-3/+3
This includes spacing and casing.
2012-10-19samba.tests.docs: Support spaces before synonyms.Jelmer Vernooij1-1/+1
2012-10-19samba.tests.docs: Support synonyms.Jelmer Vernooij1-0/+4
2012-10-19samba.tests.docs: Distinguish between unknown and undocumened parameters.Jelmer Vernooij1-1/+9
2012-10-19tests: Convert find_missing_doc into a unit test.Jelmer Vernooij1-0/+90
2012-10-18samba-tool user: Fix typos, improve messages.Jelmer Vernooij1-6/+10
2012-10-18Warn when setting UID/GID without idmap_ldb:use rfc2307 = YesAlexander Wuerstlein1-0/+4
Signed-off-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Thu Oct 18 09:51:35 CEST 2012 on sn-devel-104
2012-10-18Tests for 'samba-tool user create' with RFC2307 attributesAlexander Wuerstlein2-8/+139
Check if attributes are correctly set and read from SamDB Test automatic creation of attributes from getpwent (NSS) Check if overriding NSS attributes works getpwent will be skipped if the current UID of the user running the tests has no passwd entry (getpwuid(geteuid())). If a user with the name of the current UID already exists in the directory, the getpwent test will fail. If that should happen, the test would need to be updated to use a nonexistent UID that is visible to the Python 'pwd' module. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-10-18Set RFC2307 attributes in samba-tool createAlexander Wuerstlein2-3/+58
Optionally set RFC2307 (NIS Schema) attributes in samba-tool create. Mainly needed for UID mapping to be usable. Not all attributes are set-able, only harmless and non-overlapping ones (uid, uidNumber, gidNumber, loginShell, gecos). Description and homeDirectory should already be set, userPassword seems problematic. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-10-18provision: No longer use the wheel group in new AD DomainsAndrew Bartlett6-31/+29
The issue here is that if we set S-1-5-32-544 (administrators) to a GID only, then users cannot force a mandetory profile to be owned by administrators (which is a requirement). There is no particularly useful reason for us to enforce this matching a system group. Andrew Bartlett
2012-10-17Removed phpldapadmin inclusion for Samba 4.Ricky Nance3-50/+0
Signed-off-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Oct 17 12:55:44 CEST 2012 on sn-devel-104
2012-10-17dns_server: Try and use the dns-SERVER account if we were configured with itAndrew Bartlett1-14/+47
2012-10-16Revert "provision: Always create DNS user."Stefan Metzmacher1-13/+18
This reverts commit c2d14747d608d406de6410556807d467cd0b85ef. samba_upgradedns handles creates/removed the dns acount. See https://lists.samba.org/archive/samba-technical/2012-October/thread.html#87578 metze
2012-10-13s4-dns: Fix the comments about ignoring zones in internal serverMatthieu Patou1-1/+7
Acked-By: Kai Blin <kai@samba.org> Autobuild-User(master): Kai Blin <kai@samba.org> Autobuild-Date(master): Sat Oct 13 12:37:53 CEST 2012 on sn-devel-104
2012-10-12selftest: Move more tests to common list script.Jelmer Vernooij1-29/+0
Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org> Autobuild-Date(master): Fri Oct 12 02:06:42 CEST 2012 on sn-devel-104
2012-10-11samba.join: Fix multiple spaces.Jelmer Vernooij1-1/+1
Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org> Autobuild-Date(master): Thu Oct 11 20:30:43 CEST 2012 on sn-devel-104
2012-10-11selftest: Move some tests to common test script.Jelmer Vernooij1-2/+0
2012-10-11samba.provision.sambadns: Use == to compare strings, not 'is'.Jelmer Vernooij1-1/+1
2012-10-11provision: Always create DNS user.Jelmer Vernooij1-18/+13
The DNS user is currently only used by the bind9 plugin. This makes it easier to later on switch between the builtin DNS server and bind backend. In addition, ideally the internal DNS server would use that (separate) user too. Autobuild-User(master): Jelmer Vernooij <jelmer@samba.org> Autobuild-Date(master): Thu Oct 11 17:05:40 CEST 2012 on sn-devel-104
2012-10-09samba-tool: Some more unifications...Karolin Seeger15-15/+15
in the usage message. Karolin
2012-10-09samba-tool: skip chown in sysvolreset when it would fail on a GIDAndrew Bartlett2-13/+48
This skips the chown of the files if (for example) the domain Admins group were to own the file and not be able to because the group maps only to a GID. This essentially papers over the problem, but may be enough to get us past the Samba 4.0 release. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Tue Oct 9 15:24:44 CEST 2012 on sn-devel-104
2012-10-09s4-rpc: dnsserver: Ignore DNS zones that are not used by RPC dnsserverAmitay Isaacs1-0/+4
..TrustAnchors zone is not interpreted by RPC dnsserver code. Signed-off-by: Amitay Isaacs <amitay@gmail.com> Autobuild-User(master): Amitay Isaacs <amitay@samba.org> Autobuild-Date(master): Tue Oct 9 03:21:07 CEST 2012 on sn-devel-104
2012-10-09s4-dns: dlz_bind9: Ignore zones that are not used by BIND9 DLZ pluginAmitay Isaacs1-0/+5
Signed-off-by: Amitay Isaacs <amitay@gmail.com>
2012-10-08s4:scripting/python: add '-V' as alias for '--version'Stefan Metzmacher1-1/+1
metze Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Mon Oct 8 17:52:52 CEST 2012 on sn-devel-104
2012-10-08s4:samba-tool: allow 'samba-tool --version'Stefan Metzmacher1-0/+6
metze
2012-10-08s4:samba-tool: use normal option parsing in SuperCommandStefan Metzmacher1-10/+13
We use the epilog to print the subcommands. metze
2012-10-08s4:samba-tool: add optional epilog to _create_parser()Stefan Metzmacher1-2/+7
metze
2012-10-08samba-tool: Unify usage messages.Karolin Seeger13-60/+60
Karolin Autobuild-User(master): Karolin Seeger <kseeger@samba.org> Autobuild-Date(master): Mon Oct 8 14:26:52 CEST 2012 on sn-devel-104
2012-10-08samba-tool: Clarify usage of --help.Karolin Seeger1-1/+1
Karolin
2012-10-08samba-tool: Fix typo in usage.Karolin Seeger1-1/+1
Karolin
2012-10-08s4-dns: fix a warningMatthieu Patou1-2/+1
Autobuild-User(master): Matthieu Patou <mat@samba.org> Autobuild-Date(master): Mon Oct 8 10:45:41 CEST 2012 on sn-devel-104
2012-10-07s4-dns: Ignore zones that shouldn't be returned currentlyMatthieu Patou1-1/+7
RootDNSServers should never be returned (Windows DNS server don't) ..TrustAnchors should never be returned as is, (Windows returns TrustAnchors) and for the moment we don't support DNSSEC so we'd better not return this zone.
2012-10-07s4-join: factorize code, add infoMatthieu Patou1-5/+9