summaryrefslogtreecommitdiff
path: root/source4
AgeCommit message (Collapse)AuthorFilesLines
2009-10-07Merge branch 'master' of ssh://git.samba.org/data/git/sambaAndrew Tridgell5-4/+9410
2009-10-07s4-drs: fixed a memory error introduced yesterdayAndrew Tridgell1-1/+1
ids is retrurned via _ids, so it needs to be on the passed in mem_ctx
2009-10-06s4/torture: Add server target of OneFSSteven Danneman3-2/+51
I've added a "--target=onefs" which lists expected deviation in the OneFS SMB server implementation compared to a Windows machine. I've added this in a generic way using a list of module specific parameters. This list currently only contains the absence of SACL support but will be added to as additional server differences are defined. I'd liked to use this abstraction for defining the differences between a WinXP and Win7 server as well.
2009-10-06s4/torture: Add SMB sharemode/access mask testsAravind Srinivasan3-0/+9355
Test several thousand permutations of create mask and sharemodes on file and directory opens. These tests use a checked-in results table derived from a WinXP server to verify correct server behavior. CREATEX_ACCESS CREATEX_SHAREMODES_FILE CREATEX_SHAREMODES_DIR MAXIMUM_ALLOWED
2009-10-06s4/torture: change comments to torture_failuresAravind Srinivasan1-2/+4
This allows the frameworks that wrap smbtorture to detect errors better.
2009-10-07torture: disable the ValidatePassword testAndrew Tridgell1-1/+5
This test causes problems on non-sealed connections against windows
2009-10-07s4-torture: removed an accidental commit of a local test hackAndrew Tridgell1-1/+0
Sorry about that ....
2009-10-06s4:various LDB modules - "build_request" functions - propagate result codes backMatthias Dieter Wallnöfer7-15/+25
It's very useful to know the exact result code when something fails and not only a generic (by the module) created one. Sure, there are some exception cases with specific results (special message constellations, attributes, values...) which shouldn't be changed at all (examples of them are in the "ldap.py" test). Therefore I looked very carefully to not change them.
2009-10-06s4:rootdse module - intendation fixupMatthias Dieter Wallnöfer1-2/+2
2009-10-06s4:acl module - intendation fix and comment enhancementMatthias Dieter Wallnöfer1-1/+2
2009-10-06s4-provision: match win2003 functional levelAndrew Tridgell3-4/+4
We are now defaulting to win2003 functional level, and see to report the right revisions of our db and schema
2009-10-06s4-drs: added some debug lines to DsAddEntry()Andrew Tridgell1-0/+3
2009-10-06s4-drs: take advantage of system session auth in dsbindAndrew Tridgell2-41/+21
Now that the bind opens samdb with the right credentials, we no longer need the re-open in updaterefs and getncchanges
2009-10-06s4-drs: fixed error message for drs_security_level_checkAndrew Tridgell1-1/+3
2009-10-06s4-drs: open samdb with system credentials when authorisedAndrew Tridgell1-1/+14
When a DC connects to DRS, open the samdb with system session credentials, so that we don't have to re-open it each time on other calls.
2009-10-06s4-ldb: fixed error on single value errorAndrew Tridgell1-1/+1
When you try to add a 2nd value to a single valued attribute you get LDB_ERR_ATTRIBUTE_OR_VALUE_EXISTS. w2k8-r2 join to s4 relies on this error, doing a replace after it sees the error
2009-10-06s4-repl: added RELAX control and fix transactionsAndrew Tridgell1-8/+57
Added the RELAX control to dsdb_origin_objects_commit(), as it needs to modify system objects. This patch also fixes the use of ldb transactions in that function, and fixes a memory leak.
2009-10-06s4:drs-development Scripts to assist testing of DRS replication with ADAndrew Bartlett6-0/+143
These scripts, originally by tridge, allow developers to easily reproduce the same domain join senerio time after time. They need documentation, and the template named.conf and zone files for hosting an AD domain are not provided. However, I hope to have the provision script provide these shortly. They assume a local 'bind' set up to read PREFIX/private/named.conf (as per the provision instructions). Ensure you edit the 'vars' file to match your local setup. Andrew Bartlett
2009-10-06s4:param Remove duplicate argument to python provisionAndrew Bartlett1-2/+0
2009-10-06s4:provision Remove unused parameters from provision scriptsAndrew Bartlett1-6/+4
2009-10-06s4-seftest: skip hold.oplock for SMB2 as wellAndrew Tridgell1-1/+1
This test is not designed to be run automatically. It deliberately blocks forever.
2009-10-03s4:ldap.py - commented out the UTF8 tests (and fixed some deletion DNs)Matthias Dieter Wallnöfer1-10/+12
2009-10-03s4:ldb_tdb - fix memory leaksMatthias Dieter Wallnöfer1-7/+12
2009-10-03heimdal kerberos - fix memory leak (free the plugin list always - not only ↵Matthias Dieter Wallnöfer1-1/+1
in error cases)
2009-10-03s4:objectclass - Free unused memory from responsesMatthias Dieter Wallnöfer1-0/+3
2009-10-03s4:schema_inferiors - Fix wrong checkMatthias Dieter Wallnöfer1-1/+1
2009-10-03s4:ldb.h - add constant for LDAP EXOP password changeMatthias Dieter Wallnöfer1-4/+21
Also enhance some other comments.
2009-10-03heimdal - fix various warningsMatthias Dieter Wallnöfer7-24/+24
- Shadowed variables - "const" related warnings - Parameter names which shadow function declarations - Non-void functions which have no return value (patch also ported upstream)
2009-10-03s4:ldap.py - add tests for valid parent and RDNMatthias Dieter Wallnöfer1-0/+39
2009-10-03s4:dsdb Use possibleInferiors to restrict creation of child objectsAndrew Bartlett1-4/+15
This also uses systemPossibleInferiors when the 'relax' control is specified, which is done by the provision. Andrew Bartlett
2009-10-03s4:dsdb add systemPossibleInferiors to schema codeAndrew Bartlett2-0/+21
This allows us to figure out what the system can add, which will not be in possibleInferiors due to the systemOnly flag. Andrew Bartlett
2009-10-03s4:dsdb Add objectClass and RDN constraints to objectClass moduleAndrew Bartlett1-8/+35
These additional constraints are applied, found by the Microsoft testsuite. - When the parent is not present, we now return 'NO_SUCH_OBJECT'. - Restrict the choice of RDN to the correct one per the schema - Honour the allowedChildClasses attribute from the parent's objectClass. Andrew Bartlett
2009-10-03s4:ldap.py - add a test for the "systemOnly" classesMatthias Dieter Wallnöfer1-1/+16
2009-10-03s4:dsdb Don't allow creation of systemOnly objectclassesMatthias Dieter Wallnöfer2-4/+10
(except as part of the provision, which specifies the 'relax' control) Andrew Bartlett
2009-10-03s4:rdn_name - fix up the rename operationMatthias Dieter Wallnöfer1-4/+4
A function call was wrong ("ldb_request" rathen than "ldb_next_request").
2009-10-03Revert "s4:LDB/LDAP - Re-allow renames"Matthias Dieter Wallnöfer1-49/+4
This reverts commit 767fce6fccf484b547219abd5e6abc941eacaf92. Simo pointed out that the patch generates race conditions. We need to solve this using a new control.
2009-10-02s4:repl_meta_data - variousMatthias Dieter Wallnöfer1-9/+38
- Add more "talloc_free"s and right error values where needed - Add a pre-lookup for entries before searching for metadata attribute (also suggested by TODO list) - Now the most part of "ldap.py" works again
2009-10-02s4:ldap.py - add a very special rename test (with invalid - empty RDN)Matthias Dieter Wallnöfer1-9/+23
2009-10-02s4:ldb_ildap - Don't segfault on a empty RDNMatthias Dieter Wallnöfer1-4/+12
2009-10-02s4:LDB/LDAP - Re-allow renamesMatthias Dieter Wallnöfer2-7/+47
The main problem is that the "rdn_name" module launches on a rename request also a modification one with the "special attributes" which can't be changed directly. An introduced flag helps to bypass the restriction.
2009-10-02s4:ldap.py - major enhancementsMatthias Dieter Wallnöfer1-102/+187
- Clean up and reorder it a bit - Test which adds invalid attributes - Test which makes sure that the 'distinguishedName' attribute cannot be modified - Test which makes sure that we cannot change the RDN/'name' attribute through a modify request
2009-10-02s4:ldb Don't allow RDN to be modified with an LDB modify messageAndrew Bartlett1-1/+30
Found by the Microsoft testsuite at the AD interop event. Andrew Bartlett
2009-10-02s4:rdn_name module - a normal error message should be enough for this failureMatthias Dieter Wallnöfer1-7/+9
I don't think that we really want to have this error printed out on the server console (stdout) since this hasn't serious results as DB or data corruption and similar.
2009-10-02s4:ldb Don't allow modifcation of distinguishedNameAndrew Bartlett1-1/+7
2009-10-02s4:dsdb Return correct error on invalid attributeAndrew Bartlett1-1/+2
This error per the Microsoft testsuite
2009-10-02s4:dsdb Pass down the exact error code on failure in repl_meta_dataAndrew Bartlett1-5/+5
2009-10-02s4:samdb_set_password - Return the maximum password age when requested (not ↵Matthias Dieter Wallnöfer1-2/+3
the minimum one)
2009-10-02s4:samdb_set_password - cosmetic fixesMatthias Dieter Wallnöfer1-44/+58
2009-10-02s4: fix various warnings (not "const" related ones)Matthias Dieter Wallnöfer27-71/+72
2009-10-02s4/srvsvc: deactivate a "ntvfs_connect" with a wrong parameterMatthias Dieter Wallnöfer1-1/+3
In the srvsvc code for s4 (NTVFS module) there exists a call to "ntvfs_connect" which is performed with a totally wrong argument. Since I'm not able to fix this, I commented it out and added a "FIXME" comment.