Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2009-09-08 | ntlmssp: add some void decode calls (useful for ndrdump). | Günther Deschner | 1 | -1/+7 | |
Guenther | |||||
2009-09-08 | s4:repl_meta_data: remove unused code | Stefan Metzmacher | 1 | -11/+0 | |
metze | |||||
2009-09-08 | s3:drsuapi: add a simple DsRemoveDSServer() implementation | Stefan Metzmacher | 1 | -1/+42 | |
metze | |||||
2009-09-08 | s4:drsuapi: add an incomplete DsAddEntry implementation | Stefan Metzmacher | 2 | -10/+194 | |
metze | |||||
2009-09-08 | schannel: add NL_AUTH_MESSAGE and both NL_AUTH_SIGNATURE structs. | Günther Deschner | 1 | -1/+1 | |
These actually belong netlogon but we for now want to keep netlogon as a security providor separate. Guenther | |||||
2009-09-08 | Return a correct value for Supported Encryption Type | Matthieu Patou | 1 | -1/+6 | |
Vista and upper version use this value to check wether they should ask the DC to change the msDS-SupportedEncryptionTypes attribute or not. Declare the different value as a bitmap in Netlogon idl | |||||
2009-09-08 | tort: RPC-CRACKNAMES test case refactored | Kamen Mazdrashki | 2 | -1/+18 | |
2009-09-08 | tort: DsCrackNames - propagate torture context to all tests. | Kamen Mazdrashki | 2 | -208/+166 | |
2009-09-08 | tort: Helper function to get DC info for testing | Kamen Mazdrashki | 1 | -0/+53 | |
2009-09-08 | tort: Implement 'setup' and 'teardown' for DRSUAPI test cases. | Kamen Mazdrashki | 2 | -0/+44 | |
2009-09-08 | s4/ldb: support NDR printing for 2 more replication types | Andrew Tridgell | 2 | -0/+40 | |
print replUpToDateVector and replPropertyMetaData using NDR format if --show-binary is given. | |||||
2009-09-08 | s4/ldb: allow prefixMap to be shown as NDR | Andrew Tridgell | 1 | -0/+8 | |
2009-09-08 | s4/ldb: allow printing ntSecurityDescriptor in full | Andrew Tridgell | 1 | -33/+39 | |
print security descriptors in NDR format if --show-binary is given. This is easier to read than sddl format. | |||||
2009-09-08 | s4/ldb: added ldif handler for repsFrom/repsTo | Andrew Tridgell | 2 | -2/+57 | |
In normal usage this makes no difference, but if you add --show-binary then you can see the NDR printed out in the usual ndr_print_*() format | |||||
2009-09-08 | s4/ldb: expose the ldb flags with ldb_get_flags() | Andrew Tridgell | 2 | -0/+11 | |
2009-09-08 | s4/ldb: don't line wrap ldif when --show-binary is used | Andrew Tridgell | 1 | -4/+9 | |
2009-09-08 | s4/ldb: added --show-binary command line option | Andrew Tridgell | 6 | -4/+20 | |
This add --show-binary to ldbsearch. When this flag is set, binary blobs will be shown as-is, instead of base64 encoded. This is useful for some XML encoded attributes, and will also be used as part of some NDR print formatting for attributes like repsTo. | |||||
2009-09-08 | s4:setpassword script - Passwords set by this script are set by the ↵ | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
administrator not the user | |||||
2009-09-08 | s4:provision - Cosmetic: Indent the parameters better | Matthias Dieter Wallnöfer | 1 | -36/+60 | |
2009-09-07 | s4:templates - Remove the latest relics (in "dcesrv_lsa_CreateSecret") | Matthias Dieter Wallnöfer | 2 | -114/+0 | |
2009-09-07 | s4:wmic - Output enhancements | Dmitry Karasik | 1 | -58/+105 | |
Outputs shouldn't clash with metadata characters (|,()), special characters should be escaped, "NULL" values should be reported as "(null)" string. For the full explaination look at bug #6076. | |||||
2009-09-08 | s4: fixed updaterefs options bitmap | Andrew Tridgell | 1 | -1/+1 | |
2009-09-08 | s4: implemented server side of DSUpdateRefs call | Andrew Tridgell | 5 | -11/+340 | |
This call is made by DCs to tell us we should notify them of directory changes | |||||
2009-09-08 | s4/ldb: fixed spelling | Andrew Tridgell | 1 | -2/+2 | |
2009-09-08 | s4: 'index' is a libc function | Andrew Tridgell | 1 | -2/+2 | |
2009-09-08 | s4: fixed a unsigned printf warnings | Andrew Tridgell | 1 | -3/+3 | |
2009-09-08 | s4: removed an unused variable | Andrew Tridgell | 1 | -2/+0 | |
2009-09-08 | s4: fixed some shadowed variable warnings | Andrew Tridgell | 3 | -9/+9 | |
2009-09-08 | Fill the meta data vector in the responce struct. | Anatoliy Atanasov | 1 | -4/+32 | |
2009-09-08 | s4:selftest Fix 'make testenv-gdb' and 'make valgrindtest' etc | Andrew Bartlett | 1 | -28/+22 | |
The problem here was that tridge's changes to ensure that test results were always propogated didn't merge well with the addition of extra environment variables for the 'make valgrindtest' and similar environments. By splitting out the macro further, we keep the build farm reporting accurate, but allow these other test modes to work. Andrew Bartlett | |||||
2009-09-07 | s4:pwsettings: Correct off by factor of 10 for ticks. | Andrew Kroeger | 1 | -4/+4 | |
The tick conversion math was off by a factor of 10 due to the incorrect usage of the "e" notation. The expression "XeY" means "X * (10^Y)", so the correct expression is 1e7 to get the correct adjustment for ticks. | |||||
2009-09-07 | s4: Let the "setpassword" script finally use the "samdb_set_password" routine | Matthias Dieter Wallnöfer | 2 | -9/+70 | |
The "setpassword" script should use the "samdb_set_password" call to change the NT user password. Windows Server tests show that "userPassword" is not the right place to save the NT password and does not inherit the password complexity. | |||||
2009-09-07 | s4:dsdb: correctly implement _dsdb_syntax_OID_oid_ldb_to_drsuapi() | Stefan Metzmacher | 1 | -1/+31 | |
Here we just need to map the oid string in the ldb value to the ATTRTYP id. metze | |||||
2009-09-07 | s4:LogonGetDomainInfo - add a basic check for the hostname | Matthias Dieter Wallnöfer | 1 | -2/+17 | |
This check is specified in Windows Server after release 2003. The parameter "hostname" should match as prefix of the dns hostname given as parameter in the "workstation" structure. | |||||
2009-09-07 | s4: Exceptions in "provision.py" | Michael Ströder | 1 | -11/+15 | |
This looks much nicer than "normal" string exceptions - and fits better in the OO programming style. | |||||
2009-09-07 | s4:simple_ldap_map - "primaryGroupId" | Matthias Dieter Wallnöfer | 1 | -4/+15 | |
Previous patch was incomplete regarding the "primaryGroupId" attribute. Complete it. | |||||
2009-09-07 | s4:samldb - Fix typo | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
2009-09-07 | s4:Foreign security principals - Fix them up | Matthias Dieter Wallnöfer | 3 | -19/+31 | |
I fixed them up to match with Windows Server 2003. I don't think that the creation of them in the provision script is needed so I put them in the "provision_users.ldif" file. | |||||
2009-09-07 | s4:subtree delete module - Cosmetic adaptions | Matthias Dieter Wallnöfer | 1 | -11/+16 | |
2009-09-07 | s4:ldap.py - Adds a test for the primary group behaviour | Matthias Dieter Wallnöfer | 1 | -12/+132 | |
This passes the Windows Server behaviour. Also SAMBA 4 should match it. Also some small enhancement. | |||||
2009-09-07 | s4:provision - Change the module order to match Windows Server | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
Tests show that Windows Server seems to do the access checks on the very last moment. | |||||
2009-09-07 | s4:sam - Implement also here the right primary group behaviour | Matthias Dieter Wallnöfer | 1 | -46/+71 | |
We have not only to expand the additional groups but *also* the primary group to gain all rights of a user account. Also, remove an unneeded context (tmp_ctx) and "talloc_steal". | |||||
2009-09-07 | s4:samr - Fix up the SAMR server to support the primary group of a user in ↵ | Matthias Dieter Wallnöfer | 1 | -128/+189 | |
the right way When doing some tests with the NT User Manager for Domains on s4 I noticed that the handling of the primary group for a user wasn't correct. So I fixed this. Also some cosmetic changes (tab indent corrections). | |||||
2009-09-07 | s4:samldb - Major rework | Matthias Dieter Wallnöfer | 4 | -328/+1000 | |
This fixes up the change of the primary group of a user when using the ADUC console: - When the "primaryGroupId" attribute changes, we have to delete the "member"/"memberOf" attribute reference of the new primary group and add one for the old primary group. - Deny deletion of primary groups according to Windows Server (so we cannot have invalid "primaryGroupID" attributes in our AD). - We cannot add a primary group directly before it isn't a secondary one of a user account. - We cannot add a secondary reference ("member" attribute) when the group has been chosen as primary one. This also removes the LDB templates which are basically overhead now. This should also fix bug #6599. | |||||
2009-09-07 | s4:provision - Add a new delete function only for users and computers | Matthias Dieter Wallnöfer | 1 | -0/+25 | |
We need this new function to delete users and computers before other objects on reprovisioning. Otherwise primary groups could be deleted before user/computer accounts (which isn't allowed anymore by the reworked "samldb" module). | |||||
2009-09-07 | s4:provision - Change the "provision_users.ldif" file to support the ↵ | Matthias Dieter Wallnöfer | 1 | -26/+35 | |
"samldb" changes The "provision_users.ldif" file needs some rework to pass against the changed and improved "samldb" module (see next commit). | |||||
2009-09-07 | s4:setup_dns.sh fixed the update of the GUID CNAME | Andrew Tridgell | 1 | -8/+14 | |
2009-09-07 | s4:nsupdate-gss allow forcing of the realm | Andrew Tridgell | 1 | -35/+37 | |
this is needed for the _msdcs zone | |||||
2009-09-07 | s4:setup: Remove display_specifiers.ldif. | Andrew Kroeger | 1 | -482/+0 | |
This file is no longer needed as the DisplaySpecifiers are now generated from files provided by Microsoft. | |||||
2009-09-07 | s4:setup: Updated comment to reflect new DisplaySpecifiers location. | Andrew Kroeger | 1 | -1/+3 | |