summaryrefslogtreecommitdiff
path: root/source4
AgeCommit message (Collapse)AuthorFilesLines
2011-09-22samba-tool: use show_recycled in dbcheckerAndrew Tridgell1-13/+16
we need to use show_recycled instead of show_deleted in dbchecker to allow us to see recycled objects
2011-09-22s4-kdc: set NO_GLOBAL_CATALOG control in kdcAndrew Tridgell1-3/+5
the kdc doesn't want to find users who are in partialReplica partitions, as they won't have the needed secret info for the kdc to operate. We need to generate referrals instead Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-22s4-rpc: show binding string in failed rpc bindsAndrew Tridgell1-1/+2
this makes debugging some RPC auth issues easier
2011-09-22s4-ldap-server: set the NO_GLOBAL_CATALOG control on non-GC operationsAndrew Tridgell1-0/+2
this makes us honor GC semantics on the two ldap ports
2011-09-22s4-repl: remove unused principal_name elementAndrew Tridgell1-3/+0
2011-09-22s4-dsdb: load the partialReplica attribute in the @PARTITION objectAndrew Tridgell3-2/+27
this modifies the partition module to honor a partialReplica attribute on the @PARTITION module, marking partiations as partial replicas so the NO_GLOBAL_CATALOG control can be honoured
2011-09-22s4-repl: fill in GUID and SID from partition informationAndrew Tridgell1-2/+9
when we find a NC via a DN string, fill in the GUID and SID so the caller can properly report them
2011-09-22s4-kcc: return partial replica NCs in drs showreplAndrew Tridgell1-24/+20
the showrepl operation should return all our replicated NCs, including partial replicas
2011-09-22s4-dsdb: added NO_GLOBAL_CATALOG controlAndrew Tridgell4-1/+15
this control is used to ask samdb to not return searches with a basedn in partial repica partitions, which is needed to support the difference between a search on the 3268 GC ldap port and the non-GC 389 port
2011-09-22s4-dns: started adding support for auto-creation of NS glue recordAndrew Tridgell1-1/+37
when we create a new subdomain we need to create a NS glue record in the parent domain pointing at our subdomain
2011-09-22s4-dsdb: get GUID and SID for DSA from extended DNAndrew Tridgell1-21/+27
this allows us to use the DN from a hasPartialReplicaNCs attribute to create a reps1 object
2011-09-22s4-dsdb: enable initial replication of partitions via DsReplicaSyncAndrew Tridgell2-0/+52
we need to create a temporary dsa object to allow the replication task to replicate a NC that is not listed in a repsFrom attribute
2011-09-22s4-repl: get NCs to replicate from our NTDS objectAndrew Tridgell1-28/+64
we need to use the hasMasterNCs and hasPartialReplicaNCs attributes on our NTDS object to get the list of NCs to replicate, instead of using the rootDSE. This is needed to support replicating of GC partial replicas, which are not listed in the rootDSE
2011-09-22s4-dsdb: added support for replicating with GC partial attribute setAndrew Tridgell2-3/+51
if we are replicating a partial replica, then we need to supply the partial attribute set we want to replicate to the server
2011-09-22s4-dsdb: failing to find the object is not an error in dsdb_loadreps()Andrew Tridgell1-3/+8
we may not have replicated the partition yet, so this should be considered the same as having no repsFrom/repsTo
2011-09-20s4:ntvfs common - remove two outdated function prototypesMatthias Dieter Wallnöfer2-4/+0
The two functions don't exist anymore. Reviewed-by: Jelmer Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue Sep 20 20:16:29 CEST 2011 on sn-devel-104
2011-09-20s4:ntvfs common - add "UTIL_TDB" and "tdb-wrap" as internal build dependencyMatthias Dieter Wallnöfer1-0/+1
These modules are required for both header and source code files (see bug #8468). Reviewed-by: Jelmer
2011-09-20s4:param/pyparam.c - suppress "P_SEP" compilation warningMatthias Dieter Wallnöfer1-2/+2
Reviewed-by: Jelmer
2011-09-20s4-drs: allow replication of the GC partial attribute setAndrew Tridgell1-5/+95
when a DC has the GUID_DRS_GET_FILTERED_ATTRIBUTES right on a NC, we need to allow it to replicate if all the attributes it is asking for are in the GC partial attribute set Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Tue Sep 20 13:47:38 CEST 2011 on sn-devel-104
2011-09-20lib/util/charset: remove charset module loadingAndrew Bartlett4-10/+12
Now that the 'table' modules are gone, there is no reason for there to be charset modules at all. This builds the macosxfs and weird modules into the binary at the appropriate times, and changes the tests to test instead the difference between the remaining internal handlers and iconv(). Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Sep 20 06:27:06 CEST 2011 on sn-devel-104
2011-09-19s4-client: added close command in smbclientAndrew Tridgell1-4/+62
this matches the existing open command, and also gives you error codes on both open and close useful for testing share mode locking Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Sep 19 23:59:28 CEST 2011 on sn-devel-104
2011-09-19s4:ntvfs/common/brlock.c - remove unnecessary include "tdb_compat.h"Matthias Dieter Wallnöfer1-1/+0
Attempt to fix bug #8468 (https://bugzilla.samba.org/show_bug.cgi?id=8468). Reviewed-by: Jelmer Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Sep 19 18:03:24 CEST 2011 on sn-devel-104
2011-09-19s4:libnet/py_net.c - fix up includes (in order to find all "struct"s)Matthias Dieter Wallnöfer1-3/+2
Reviewed-by: Jelmer
2011-09-19s4:auth - remove unused variablesMatthias Dieter Wallnöfer3-3/+0
Reviewed-by: Jelmer
2011-09-19s4:selftest: run the nbt tests before the smb testsStefan Metzmacher1-3/+4
This hopefully avoids to run into problems with the flakey error in the samba4.nbt.winsreplication test [1071/1154 in 58m58s] samba4.nbt.winsreplication(dc) Test if we always get back the same assoc_ctx Setup wrepl connections Test one pull replication cycle Setup wrepl connections Setup wrepl conflict pull connection UNEXPECTED(error): samba4.nbt.winsreplication.replica REASON: _StringException: _StringException: Unknown error/failure metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Sep 19 16:29:22 CEST 2011 on sn-devel-104
2011-09-19s4-dsdb: cope with out of sync replication attributes in partition moduleAndrew Tridgell1-1/+68
if the @ATTRIBUTES or other objects which are replicated between partions become out of sync, then the ldb would fail to open. This changes ensures that we can always fix those records, by running the operation in the top level partition, and replicating the result to the other partitions Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Sep 19 04:31:48 CEST 2011 on sn-devel-104
2011-09-19pyldb: fixed places where we try to concatenate a Dn with a stringAndrew Tridgell4-22/+22
you need to either use str(dn) or use %s in a format string
2011-09-19s4-provision: use get_config_basedn() in DNS setupAndrew Tridgell1-1/+1
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-19samba-tool: use get_config_basedn() to get configuration NC DNAndrew Tridgell2-9/+7
this allows these commands to work for subdomains Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-19s4-kdc: default kvno for inter-domain trusts to zeroAndrew Tridgell1-1/+9
the exact value doesn't matter, as both Samba and windows check against the latest password, but the old default of -1 caused ASN.1 parsing errors on windows, which prevented it answering TGS requests thanks to Hongwei Sun for finding this from a ttt trace Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-19s4-dsdb: use get_config_basedn() in python testsAndrew Tridgell4-18/+18
we can't just append CN=Configuration to the basedn, as that won't give the right configuration DN for a subdomain of a forest Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-19s4-drs: cope with REPL_OBJ getncchanges call for new objectAndrew Tridgell1-5/+10
when we do a subdomain join we create a new object using a REPL_OBJ getncchanges call for the partitions DN. This has a side effect of creating that object. We need to skip the UDV update in that case Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-19s4-provision Add initial support for joining as a new subdomainAndrew Bartlett2-133/+154
To do this we need to reorganise a lot of the provision code, so that we can create the framework for the inbound replicaton of the config and schema partitions and then add in the new subdomain locally. Andrew Bartlett
2011-09-17s4:selftest: skip flakey samba4.drs.repl_schema.python for nowStefan Metzmacher1-0/+1
UNEXPECTED(error): samba4.drs.repl_schema.python(vampire_dc).repl_schema.DrsReplSchemaTestCase.test_classWithCustomAttribute REASON: _StringException: _StringException: Content-Type: text/x-traceback;charset=utf8,language=python traceback 49F Traceback (most recent call last): File "/usr/lib/python2.6/dist-packages/testtools/runtest.py", line 128, in _run_user return fn(*args) File "/usr/lib/python2.6/dist-packages/testtools/testcase.py", line 368, in _run_test_method testMethod() File "/memdisk/autobuild/flakey/b12973/samba4/source4/torture/drs/python/repl_schema.py", line 179, in test_classWithCustomAttribute self._net_drs_replicate(DC=self.dnsname_dc2, fromDC=self.dnsname_dc1, nc_dn=self.schema_dn) File "/memdisk/autobuild/flakey/b12973/samba4/source4/torture/drs/python/drs_base.py", line 110, in _net_drs_replicate return self.check_output(cmd_line) File "bin/python/samba/tests/__init__.py", line 157, in check_output raise BlackboxProcessError(retcode, line, p.stdout.read(), p.stderr.read()) BlackboxProcessError: Command '/memdisk/autobuild/flakey/b12973/samba4/bin/samba-tool drs replicate -USAMBADOMAIN/Administrator%locDCpass1 --sync-forced LOCALVAMPIREDC.samba.example.com localdc.samba.example.com CN=Schema,CN=Configuration,DC=samba,DC=example,DC=com'; exit status 255; stdout: ''; stderr: 'ERROR(runtime): DsReplicaSync failed - (-1073741807, 'NT_STATUS_END_OF_FILE') ' 0 As this is an error, we have to skip it instead of adding it to the knowfail file metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sat Sep 17 08:43:31 CEST 2011 on sn-devel-104
2011-09-16s4:upgrade_from_s3 - old s3 versions < 3.4.x don't have a "state directory" ↵Matthias Dieter Wallnöfer1-1/+5
param Hence the "lock directory" path has to be used instead. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Fri Sep 16 00:07:30 CEST 2011 on sn-devel-104
2011-09-15waf: restore libsmbclient handling.Günther Deschner2-6/+5
This is a temporary solution to get libsmbclient installed properly as a library (including symlinks and proper symbols). I was not able to make the old internal library name 'libsmb/smbclient' work together with "realname" and/or "link_name". Maybe one of the waf gurus has more ideas here. Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Thu Sep 15 15:31:59 CEST 2011 on sn-devel-104
2011-09-14s4:wrepl_server: return NT_STATUS_CONNECTION_DISCONNECTEDStefan Metzmacher1-1/+1
We should return the same in all places. metze
2011-09-14s4:libcli/wrepl: return NT_STATUS_CONNECTION_DISCONNECTEDStefan Metzmacher1-3/+3
We should return the same in all places. metze
2011-09-14s4:lib/messaging: let irpc handles return NT_STATUS_CONNECTION_DISCONNECTEDStefan Metzmacher1-2/+2
We should return the same in all places. metze
2011-09-14s4:librpc/rpc: return NT_STATUS_CONNECTION_DISCONNECTEDStefan Metzmacher1-2/+2
We should return the same in all places. metze
2011-09-13s4-s3-upgrade Improve samba-tool domain samba3upgrade behaviourAndrew Bartlett3-17/+38
The --realm argument is again optional (the previous code would take the default from the default smb.conf, not the one specified) and --targetdir is now a named argument much like it is to provision. We now test the --testparm option to ensure it behaves the way we expect. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Sep 13 16:30:31 CEST 2011 on sn-devel-104
2011-09-13s4:upgrade_from_s3 - restore "get_testparm_var" methodMatthias Dieter Wallnöfer1-1/+4
This has accidentally been removed by commit 8268c2d4e231b05b439bc70331b75342b35daa4e. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-13script/librelease.sh: automate Samba4 alpha releasesAndrew Bartlett1-19/+0
2011-09-13s4-subdomain: match windows form for trustAuthInOutBlobAndrew Tridgell1-11/+3
Windows does not put a version element in the array Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-13s4-subdomain: fixed domain guid choice for subdomain joinAndrew Tridgell1-4/+13
We need to use the domain GUID that the server choose in the ncName link Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-13s4-subdomain: don't delete account DN not created in subdomain joinAndrew Tridgell1-5/+8
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-13s4-subdomain: use a password length of 128Andrew Tridgell1-1/+1
windows seems to use a fixed size for this password. It is possible that windows servers can only handle one size, given we have observed some strange behaviour from the windows kdc when we setup trusts Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-13s4-join: fixed non-subdomain joinAndrew Tridgell1-0/+2
these two vars need to be initialised for general join Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-13s4-subdomain: fixed invocationID and hostIPs in subdomain joinAndrew Tridgell2-14/+18
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-13s4-subdomain more work on sub-domain joinAndrew Bartlett2-49/+280
we can now create a subdomain of an existing windows domain using: samba-tool domain join sub.domain.dns.name subdomain The ordering of the creation of the key records is quite tricky, especially for the NTDSDSA object Pair-Programmed-With: Andrew Tridgell <tridge@samba.org>