summaryrefslogtreecommitdiff
path: root/source4
AgeCommit message (Collapse)AuthorFilesLines
2010-08-07s4:ldap.py - comment a test part which fails with another error code on WindowsMatthias Dieter Wallnöfer1-5/+6
2010-08-07s4:ldap.py - test the new "systemFlags" constraintMatthias Dieter Wallnöfer1-1/+11
2010-08-07s4:objectclass LDB module - "add operation" - enhance and clean the ↵Matthias Dieter Wallnöfer1-8/+20
"systemFlags" section Also here we have to test for single-valueness.
2010-08-07s4:ldap.py - test for an invalid "objectCategory" attributeMatthias Dieter Wallnöfer1-0/+10
2010-08-07s4:objectclass LDB module - "add operation" - implement "objectCategory" ↵Matthias Dieter Wallnöfer1-5/+34
validation
2010-08-07s4:ldap.py - proof for the impossibility to add a LSA-specific object over LDAPMatthias Dieter Wallnöfer1-0/+11
2010-08-07s4:urgent_replication.py - relax also here the add of a secrets objectMatthias Dieter Wallnöfer1-2/+1
2010-08-07s3:dcesrv_lsa.c - use the RELAX control in order to create LSA objectsMatthias Dieter Wallnöfer1-3/+3
2010-08-07s4:dsdb/common/util.c - add a function "dsdb_add"Matthias Dieter Wallnöfer1-0/+30
2010-08-07s4:objectclass LDB module - "add operation" - reject creation of LSA ↵Matthias Dieter Wallnöfer1-0/+8
specific objects (only using the RELAX flag allowed)
2010-08-07s4:objectclass LDB module - "add operation" - move two checksMatthias Dieter Wallnöfer1-17/+12
To be more consistent with the MS-ADTS doc.
2010-08-07s4:objectclass LDB module - "add operation" - deny multiple "objectclass" ↵Matthias Dieter Wallnöfer1-5/+14
message elements Requested by MS-ADTS 3.1.1.5.2.2
2010-08-07s4:objectclass LDB module - "add" operation - free "mem_ctx" as soon as possibleMatthias Dieter Wallnöfer1-4/+2
We don't need to have it around until the end of the function.
2010-08-07s4:ntlmssp Merge more aspects of the source3/ NTLMSSP layerAndrew Bartlett1-20/+21
This changes the talloc treatment of the session keys to avoid memory duplication - the session key has always been allocated onto the ntlmssp_context by the auth subsystem callback. The remainder of the changes are cosmetics, such as avoiding using lm_session_key as a pointer (and avoiding then doing an if statement on something that is always true). Andrew Bartlett
2010-08-07s4:ntlmssp Re-add gensec_ntlmssp wrapper to allow merge with source3/Andrew Bartlett2-20/+54
By re-adding this wrapper, the actual guts of these functions are now very similar to that found in source3/libsmb/ntlmssp.c This should make it easier to merge the implementations. Andrew Bartlett
2010-08-07s4:ntlmssp Always setup the session keys and signing stateAndrew Bartlett1-9/+1
While it would save some CPU to only setup the session key when requested (like windows does), this instead matches the implementation in source3/libsmb/ntlmssp.c We could re-add this later after the codebase is merged. Andrew Bartlett
2010-08-06s4:ntlmssp Adjust Samba4 ntlmssp code to look more like the code in Samba3.Andrew Bartlett2-71/+119
This does not change behaviour, and some of the whitespace isn't ideal, but at the moment making this code more similar, even in cosmetics, will assist later merge efforts. Andrew Bartlett
2010-08-05s3-torture: Improve the winreg deletekey torture comments.Andreas Schneider1-5/+6
2010-08-05s3-torture: Correctly cleanup the winreg volatile key test.Andreas Schneider1-8/+13
Günther please check!
2010-08-05s4-torture: Fixed the winreg EnumValue test against Windows.Andreas Schneider1-8/+34
Günther please check!
2010-08-05s4-dns: fix dnsp for old buildAndrew Tridgell2-2/+7
2010-08-05s4-dns: expanded the DNSP code to handle more record typeAndrew Tridgell1-1/+1
2010-08-05s4-ldb: added ldif handler for the dnsRecord attributeAndrew Tridgell3-2/+25
2010-08-05dns: first version of dsnRecord parserAndrew Tridgell1-1/+6
2010-08-04s4:LDB modules - remove the "kludge_acl" module codeMatthias Dieter Wallnöfer1-516/+0
Obviously this has been forgotten by Nadya.
2010-08-04s4-dsdb: Removed kludge_acl as it is no longer necessaryNadezhda Ivanova5-23/+47
Moved the access check on extended operations to acl module and removed kludge_acl
2010-08-03s4/vampire: update dNSHostName for the Server objectAnatoliy Atanasov1-1/+61
2010-08-03s4-schema: More verbose error log when subClassOf is not found in schemaKamen Mazdrashki1-1/+3
Error message show failing classSchema object but not the specific value for the failure, which makes diagnostics by log files really hard.
2010-08-03s4: fix comment typosKamen Mazdrashki1-3/+3
2010-08-02s4:librpc/rpc: avoid using DCERPC_NDR_REF_ALLOC for epm_Map()Stefan Metzmacher1-2/+2
metze
2010-08-02s4:torture/libnet: avoid dereferencing dcerpc_binding_handle internalsStefan Metzmacher1-4/+5
metze
2010-08-02s4-smbtorture: remove another old and now invalid s3 special case during ↵Günther Deschner1-7/+0
spoolss testing. Guenther
2010-08-01s4:ldap.py - remove superflous spacesMatthias Dieter Wallnöfer1-2/+0
Sorry, forgot to delete them in the last commit
2010-08-01s4:ldap.py - additional "instanceType" checksMatthias Dieter Wallnöfer1-0/+23
2010-08-01s4:instancetype LDB module - add checks requested by MS-ADTS 3.1.1.5.2.2Matthias Dieter Wallnöfer1-6/+20
We've to test for the WRITE flag if we are performing an NC add. And if it isn't an NC add then only the WRITE or no flag is allowed.
2010-08-01s4:objectclass LDB module - consider the "instanceType" when adding NCsMatthias Dieter Wallnöfer1-10/+18
This is requested by MS-ADTS 3.1.1.5.2.2 (NC add operation).
2010-08-01s4:descriptor LDB module - remove the "forest DN" checkMatthias Dieter Wallnöfer1-4/+3
Also here we have to work with the default base DN. After some reading I've discovered that this isn't really true. The forest partition does exist on one or more DCs and is there the same as the default base DN (which is already checked by the module). And if we have other DCs which contain child domains then they never contain data of the forest domain beside the schema and the configuration partition (which are checked anyway) since a DC can always contain only one domain! Link: http://www.informit.com/articles/article.aspx?p=26896&seqNum=5
2010-08-01s4:acl LDB module - remove the "forest DN" checkMatthias Dieter Wallnöfer1-6/+3
After some reading I've discovered that this isn't really true. The forest partition does exist on one or more DCs and is there the same as the default base DN (which is already checked by the module). And if we have other DCs which contain child domains then they never contain data of the forest domain beside the schema and the configuration partition (which are checked anyway) since a DC can always contain only one domain! Link: http://www.informit.com/articles/article.aspx?p=26896&seqNum=5
2010-08-01s4:acl LDB module - remove unused call "is_root_base_dn"Matthias Dieter Wallnöfer1-8/+0
2010-08-01s4:urgent_replication.py test - adapt the test for the harder delete ↵Matthias Dieter Wallnöfer1-1/+1
restrictions Otherwise we are not able to delete the "test crossRef" object which points to the default NC anymore.
2010-08-01s4:ldap.py - perform tests on the additional delete constraint checksMatthias Dieter Wallnöfer1-4/+38
2010-08-01s4:objectclass LDB module - implement additional delete constraint checksMatthias Dieter Wallnöfer1-3/+47
MS-ADTS 3.1.1.5.5.3
2010-08-01s4:ldap.py - add a test for "CN=System" object rename behaviourMatthias Dieter Wallnöfer1-0/+8
2010-08-01s4:subtree_rename LDB module - rename "check_system_flags" into ↵Matthias Dieter Wallnöfer1-9/+43
"check_constraints" and perform more checks Always considering MS-ADTS 3.1.1.5.4.1.2.
2010-08-01s4:subtree_rename LDB module - introduce out of memory checksMatthias Dieter Wallnöfer1-0/+4
2010-08-01s4:dsdb/samdb/ldb_modules/util.c - remove unused variablesMatthias Dieter Wallnöfer1-2/+0
2010-08-01s4:torture/rpc/winreg: fix "strict aliasing" compiler warningsStefan Metzmacher1-3/+3
metze
2010-08-01s4:torture/rpc/winreg: fix the build with non gcc compilers (e.g. on solaris)Stefan Metzmacher1-4/+3
metze
2010-08-01s4:ldap.py - performs some "systemFlags" testingMatthias Dieter Wallnöfer1-0/+56
2010-08-01s4:subtree_rename LDB module - introduce the "systemFlags" protection rulesMatthias Dieter Wallnöfer1-2/+122
This is done in a dedicated call "check_system_flags".