summaryrefslogtreecommitdiff
path: root/source4
AgeCommit message (Collapse)AuthorFilesLines
2008-08-19Fix up new OpenLDAP MMR code.Andrew Bartlett5-47/+36
This changes the MMR password from hard-coded value of 'linux', adds tests and fixes the Fedora DS backend. Currently the MMR password matches the admin password, but we can change this to be another random value if required. Also require the port to be specified on the command line, so we don't hard-code a port of 9000. Andrew Bartlett (This used to be commit 08257c6d6ce809fcd53f9b2b4d558fef616b74ce)
2008-08-19Generate Multi-Master Replication configuration for OpenLDAPOliver Liebel5-12/+128
This patches provision-backend and the related scripts to generate the correct configuration blobs for N-way multi-master replication using OpenLDAP. Signed-off-by: Andrew Bartlett <abartlet@samba.org> (This used to be commit 6ed0b3f2475022288f636605492ca27fde97cd52)
2008-08-15Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartletAndrew Bartlett18-130/+312
(This used to be commit b4b14b748e6babc93faee23fe8f5c03ec2d25cbb)
2008-08-15Generate the subSchema in cn=AggregateAndrew Bartlett12-1006/+652
This reads the schema from the in-memory structure, when the magic attributes are requested. The code is a modified version of that used in the ad2oLschema tool (now shared). The schema_fsmo module handles the insertion of the generated result. As such, this commit also removes these entries from the setup/schema.ldif Metze's previous stub of this functionality is also removed. Andrew Bartlett (This used to be commit c7c32ec7b42bdf0f7b669644516438c71b364e60)
2008-08-15Rework generation of the objectClass and attributeType lines.Andrew Bartlett1-169/+209
Now that these are subroutines, we can factor them out into a file the CN=Aggregate schema code can also use. Andrew Bartlett (This used to be commit e3591a6a35ddb60398a03a4fa0545cc6158946ef)
2008-08-15Paramaterise the seperator in ad2OLschemaAndrew Bartlett1-67/+82
This will allow me to add a new mode, with the CN=Aggregate schema format automatically generated. Andrew Bartlett (This used to be commit 7d2a890a7077e446e45527847f78bba84d22bc4c)
2008-08-15Don't segfault in RPC-ATSVC.Andrew Bartlett1-1/+3
(This used to be commit e711f7d26a632ec93c1e2a3db52c37e1c0de4214)
2008-08-14RAW-OPEN: be more strict in create_option checkingStefan Metzmacher1-2/+11
metze (This used to be commit d548f5dee5980eae0aea25f1314238eb4f963568)
2008-08-14Revert "krb5: always generate the acceptor subkey as the same enctype as the ↵Stefan Metzmacher1-3/+0
used service key" This reverts commit dbb94133e0313cae933d261af0bf1210807a6d11. As we fixed gensec_gssapi to only return a session key when it's have the correct session key, this hack isn't needed anymore. metze (This used to be commit 697cd1896bccaa55ee422f17d9312d787ca699ed)
2008-08-14gsskrb5: always return an acceptor subkeyStefan Metzmacher1-4/+18
For non cfx keys it's the same as the intiator subkey. This matches windows behavior. metze (This used to be commit 6a8b07c39558f240b89e833ecba15d8b9fc020e8)
2008-08-14gensec_gssapi: only cache the session key in STAGE_DONEStefan Metzmacher1-5/+9
The key may change because we switch from initiator to acceptor subkey. metze (This used to be commit 66244092a457b2cde6339cb31dcfa73b122ba9b5)
2008-08-14SMB2-CREATE: add a special test for FILE_ATTRIBUTE_ENCRYPTEDStefan Metzmacher1-2/+21
Some standalone server (and samba4) doesn't support this. metze (This used to be commit 6d8fd4c0089d7e632ec91027a77321aca8c6acc7)
2008-08-14SMB2-CREATE: be more strict in checking file attributesStefan Metzmacher1-12/+20
metze (This used to be commit ba9d0f6b3c60346df757e7c4c3f5704c0bf26d11)
2008-08-14SMB2-CREATE: be more strict in error checkingStefan Metzmacher1-1/+11
metze (This used to be commit d7d4df78c1de19d0cd7a63daaa2fa0863a243a12)
2008-08-14ntvfs_generic: fix handling of create_options for SMB2Stefan Metzmacher1-6/+4
metze (This used to be commit cbd585d2a1e179615eba773cb07385524369c686)
2008-08-14libcli/smb2: add SMB2_CREATE_OPTIONS_NOT_SUPPORTED_MASKStefan Metzmacher1-1/+3
SMB2 returns NOT_SUPPORTED to some more NTCREATE_OPTIONS. metze (This used to be commit 3ea08d430370717463ffab44fed9c42db1002d97)
2008-08-14pvfs: fix handling of create_option flagsStefan Metzmacher1-2/+12
metze (This used to be commit 3c6cadf76861d6522c5ec41953df1ba2fac4910d)
2008-08-14libcli/raw: fix the special NTCREATE_OPTIONS_*_MASK valuesStefan Metzmacher1-7/+20
We now reuse ignored values for the ntvfs backend private flags. metze (This used to be commit 14eda93aeface307e1ffd1ea012d8f236fa78290)
2008-08-14smb2srv: async replies with STATUS_PENDING are not signedStefan Metzmacher1-2/+29
..., but the they may have the sign flag set. metze (This used to be commit 43e43dead030f6bffd06631007fdb162c3c6b2b5)
2008-08-14smb2srv: sign replies when the request was also signedStefan Metzmacher2-7/+4
metze (This used to be commit dd2f4f7a491debcc30e590f571272afd99e52940)
2008-08-14smb2srv: use defines instead of hex valuesStefan Metzmacher1-3/+3
metze (This used to be commit 7c4abf6614c47471ae005a12abe27d85890d867f)
2008-08-14libcli/smb2: use smb2 signing in auto mode if the server supports itStefan Metzmacher1-1/+7
metze (This used to be commit fe74faf13dc64eaa58d757de156aedcb24abed1f)
2008-08-14libcli/smb2: we don't need check the same thing twice...Stefan Metzmacher1-6/+0
metze (This used to be commit 1380fb954a7d9d4b543c4650a060fef9f357af7b)
2008-08-14libcli/smb2: async replies with STATUS_PENDING are not signedStefan Metzmacher1-13/+11
metze (This used to be commit 3f6cbece4a199a42ad6583ea4bd4302629399625)
2008-08-14pidl: fix samba4.pidl.samba3-cli testStefan Metzmacher1-2/+0
metze (This used to be commit 0449a5c8267873d7986c7c50adce57029192c456)
2008-08-14NBT-WINSREPLICATION: be more robust to timing errorsStefan Metzmacher1-6/+6
Also reenable disabled tests. metze (This used to be commit 76878a9c798e0acb0387b8352972d66db989c09a)
2008-08-14expanded the SMB2-CREATE and RAW-OPEN tests to explore more of how theAndrew Tridgell2-8/+67
create options fields are supposed to work (This used to be commit 0576875eccaa21ad529c9db41db91781ad400d0f)
2008-08-14cope with arbitrary unknown pac buffer types, so when MS adds Andrew Tridgell1-1/+5
a new one we don't break our server (This used to be commit 5e08b285319e35afd3a9a6e6f5f59145350f2d80)
2008-08-14cope with not knowing the kdc keyAndrew Tridgell1-41/+56
(This used to be commit 7e48dad4c7724f3f11236171a777603574224c42)
2008-08-12gensec_gssapi: add support for GENSEC_FEATURE_NEW_SPNEGOStefan Metzmacher1-0/+25
metze (This used to be commit 9246924effd4d0b08ca1ef87e45ad510020df93e)
2008-08-12gensec_gssapi: fix compiler warningsStefan Metzmacher1-2/+2
metze (This used to be commit f4f4bb7fe977301e468ab164ba750b69d9a92306)
2008-08-12gensec_gssapi: add a function to load the lucid structure onceStefan Metzmacher1-15/+44
metze (This used to be commit daa986d1d04e59550bb5d33b5075daa414d087ba)
2008-08-12gensec: add support for new style spnego and correctly handle mechListMICStefan Metzmacher3-7/+135
metze (This used to be commit 05a3403967d3cf64bca8b06536dc1b20cf835396)
2008-08-11dcerpc.idl: remove used DCERPC_MAX_SIGN_SIZEStefan Metzmacher1-1/+0
metze (This used to be commit 54b873e49ff363609632fa2862208bf6b4c1b6ed)
2008-08-11rpc_server: correct the chunk_size depending on the signature sizeStefan Metzmacher2-6/+14
metze (This used to be commit 20fc0d7bfdaa60d6a8ac939dc64733a91652587e)
2008-08-11librpc/rpc: correct the chunk_size depending on the signature sizeStefan Metzmacher1-4/+13
metze (This used to be commit 50eb0e726405580dc5ca3a8a3b15f3bd674f722a)
2008-08-11dcerpc.idl: add DCERPC_AUTH_TRAILER_LENGTHStefan Metzmacher1-0/+2
metze (This used to be commit ce36448d74b0c6cdf8928e10c088bf0248a95cf7)
2008-08-08gensec_gssapi: use the correct signature size for cfx/rfc4121 style signaturesStefan Metzmacher1-1/+1
metze (This used to be commit fcabe24f96c9677146ca754a502f336c23050339)
2008-08-08gsskrb5: try to be compatible with windows for gss_wrap* and cfxStefan Metzmacher2-11/+39
The good thing is that windows and heimdal both use EC=0 in the non DCE_STYLE case, so we need the windows compat hack only in DCE_STYLE mode. metze (This used to be commit 0fa41a94e466d5e11bcf362ccd8ff41b72733d1a)
2008-08-08gensec_gssapi: use gsskrb5_get_subkey() to get the session keyStefan Metzmacher1-3/+3
This is needed to get the correct key, when aes keys are used. metze (This used to be commit 7587a7d8b65f27a5865d6873f63a450488da02c9)
2008-08-08krb5: always generate the acceptor subkey as the same enctype as the used ↵Stefan Metzmacher1-0/+3
service key With this patch samba4 can use gsskrb5_get_subkey() to get the session key. metze (This used to be commit dbb94133e0313cae933d261af0bf1210807a6d11)
2008-08-08gsskrb5: add support for DCE_STYLE and des and des3 keysStefan Metzmacher2-22/+64
Only the des keys are tested as windows doesn't support des3 metze (This used to be commit 86848dd0f217774faed81af8fbf68618013e20a1)
2008-08-08Always set a session key, even for the 'no password' case.Andrew Bartlett1-0/+2
This is for bug 5664 reported by Tom <hto@arcor.de>. Andrew Bartlett (This used to be commit b345c9cf535af35c83da040ac965d9690dc802fe)
2008-08-08Clarify commentAndrew Bartlett1-2/+2
(This used to be commit 580cce9de38ddd9d59b272b58caadce528321d09)
2008-08-08We can't use ndr_pull_struct_blob_all in combinatin with relative pointersAndrew Bartlett1-3/+4
(This used to be commit d0a128f35b259d4891edc68fc24aa04a6da7aab7)
2008-08-07lib: prepare the build of zlibStefan Metzmacher4-0/+33
metze (This used to be commit 159df68c04c9ae437ab48991154e91161ef72754)
2008-08-07zlib: add inflateReset2()...Stefan Metzmacher3-3/+28
metze (This used to be commit 2a4fb661d7e3d601a5eb9ccecb4d4f2b07073097)
2008-08-07import of zlib-1.2.3Stefan Metzmacher200-0/+54035
We want to use zlib for the mszip ndr (de)compression later, we'll need to add some new functions to zlib. metze (This used to be commit 65c9e91a1bb24851a030a304d011558562cc50d6)
2008-08-07drsuapi: fix callers after idl changeStefan Metzmacher3-3/+3
metze (This used to be commit 7dee6fb62d5adbd2eaaaf4d8ba9e87a72ef9f94b)
2008-08-07drsuapi.idl: directly use mszip in level 2Stefan Metzmacher1-7/+1
This fixes the push because the switch_level doesn't work otherwise because the pointer is the same as for the outer switch_level. metze (This used to be commit a4c81ee68c91b2d7a9abe668e8b23246c5c9b00d)