summaryrefslogtreecommitdiff
path: root/source4
AgeCommit message (Collapse)AuthorFilesLines
2010-11-08heimdal Add clock-skew handling to DCE-style GSSAPIAndrew Bartlett1-39/+65
The clock skew handling was previously only on properly wrapped GSSAPI, and was skipped for DCE-style. This allows the ASN.1 errors from the krb5_rd_req to suggest parsing as a kerberos error packet. Andrew Bartlett Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 07:58:09 UTC 2010 on sn-devel-104
2010-11-08s4-auth Supply more useful error messages on Kerberos failureAndrew Bartlett3-13/+28
The practice of returning only NT_STATUS_INVALID_PARAMETER hasn't helped our users to debug problems effectivly, and so we now return more errors and try and give a more useful debug message when then happen. Andrew Bartlett
2010-11-08s4-auth Fix typos in samba4 auth codeBrad Hards1-7/+7
2010-11-08s4-dsdb Explain why we may not use the GC name in some situations.Andrew Bartlett1-0/+8
This delicate balance caused us a bit of a puzzle when we could not work out why an DC join failed with the new python scripts. Andrew Bartlett
2010-11-08s4-repl: fixed replication notifications to RODCsAndrew Tridgell3-7/+58
We need a separate source dsa list for RODCs, as they are not in the repsFrom for our partitions, but are in the repsTo. This adds a new 'notifies' list, which contains all the source dsas for the DCs that we should send notifies to, but which we don't replicate from Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 06:57:43 UTC 2010 on sn-devel-104
2010-11-08fixAndrew Tridgell2-4/+4
2010-11-08s4-debug: lowered the debug level of some unimportant messagesAndrew Tridgell3-4/+4
2010-11-08s4-ldb: don't give an error if a module is already registeredAndrew Tridgell1-0/+7
this can happen when both the build and install paths are used to load ldb modules Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 05:28:14 UTC 2010 on sn-devel-104
2010-11-08s4-dns: ensure we get the right case on the grant rule for administratorAndrew Tridgell1-2/+1
it may be 'Administrator' in the database, and bind match rules are case sensitive Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Mon Nov 8 01:41:43 UTC 2010 on sn-devel-104
2010-11-08s4-ldb: better error message when we try to register a module twiceAndrew Tridgell1-2/+3
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-08s4-pydrs: validate the DsGetNCChanges responseAndrew Tridgell1-0/+2
check that object_count matches up with first_object
2010-11-07s4-join: modify join behaviour according to domain levelAndrew Tridgell4-43/+112
Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Sun Nov 7 23:32:16 UTC 2010 on sn-devel-104
2010-11-07s4-drs: allow override of the replica_flagsAndrew Tridgell1-2/+7
2010-11-07s4-dsdb: give the DN on a shema attribute failureAndrew Tridgell1-1/+1
2010-11-07s4:ldap.py - add more "objectGUID" related testsMatthias Dieter Wallnöfer1-2/+76
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Nov 7 21:12:03 UTC 2010 on sn-devel-104
2010-11-07s4:objectguid LDB module - fix typo in output messageMatthias Dieter Wallnöfer1-1/+1
2010-11-07s4:objectguid LDB module - objectGUIDs cannot be specified on add operationsMatthias Dieter Wallnöfer1-2/+6
2010-11-07s4:upgradeprovision - remove some "recalculate_sd" usesMatthias Dieter Wallnöfer1-3/+3
We need "recalculate_sd" only when no external "nTSecurityDescriptor" change is performed. Otherwise the recalculation is performed automatically. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Nov 7 18:52:42 UTC 2010 on sn-devel-104
2010-11-07s4:descriptor LDB module - make the "nTSecurityDescriptor" attribute fully ↵Matthias Dieter Wallnöfer2-52/+117
behave as in AD - fix crash when provided "nTSecurityDescriptor" attribute is empty - print out the correct error codes if it's provided multi-valued - simplify the "recalculate_sd" control handling
2010-11-07s4:ldb_modules/util.c - "dsdb_get_single_valued_attr" - support the ↵Matthias Dieter Wallnöfer2-10/+20
attribute fetch also on LDB add operations We've to completely ignore the flags in that case. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Nov 7 11:10:23 UTC 2010 on sn-devel-104
2010-11-07ldb:ldb_pack.c - the "dn" attribute isn't allowed in the message part, only ↵Matthias Dieter Wallnöfer1-2/+0
the "distinguishedName" one Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Nov 7 10:11:02 UTC 2010 on sn-devel-104
2010-11-07s4:torture/dssync.c - remove unused variableMatthias Dieter Wallnöfer1-1/+0
2010-11-07s4:descriptor LDB module - save a pointer to the request message on the ↵Matthias Dieter Wallnöfer1-33/+33
temporary "ac" context This prevents two calls of "ldb_msg_copy_shallow".
2010-11-07s4:descriptor LDB module - by "dsdb_next_callback" we don't need anymore the ↵Matthias Dieter Wallnöfer1-33/+2
default operation callback implementations Only customised ones still need to remain.
2010-11-07s4:descriptor LDB module - remove a bit pointless memory contextMatthias Dieter Wallnöfer1-9/+1
For only one operation we do not need an additional "mem_ctx". "ac" should be enough (see for example the samldb LDB module).
2010-11-07s4:descriptor LDB module - remove a "ldb_msg_sanity_check" callMatthias Dieter Wallnöfer1-7/+0
This check (the structural objectclass) is performed in the objectclass LDB module.
2010-11-07s4:descriptor LDB module - don't ignore referrals if we are executing an ↵Matthias Dieter Wallnöfer1-4/+2
ordinary external search operation Referrals are valid results.
2010-11-07credentials: Lowercase library name,Jelmer Vernooij19-45/+45
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Nov 7 01:48:44 UTC 2010 on sn-devel-104
2010-11-07ldbsamba: Lowercase library name.Jelmer Vernooij14-21/+21
2010-11-07samdb: Lowercase library name.Jelmer Vernooij13-109/+109
2010-11-07samdb: Make private (at least for the moment).Jelmer Vernooij1-1/+1
2010-11-06ldb:ldb_parse.c - "ldb_parse_hex2char" - always initialise "c"Matthias Dieter Wallnöfer1-1/+1
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Nov 6 21:04:58 UTC 2010 on sn-devel-104
2010-11-06s4:ldap.py - enhance the "distinguishedName" testsMatthias Dieter Wallnöfer1-0/+24
The "dn" shortcut isn't supported by AD.
2010-11-06s4:update_keytab LDB module - we don't need to search for the ↵Matthias Dieter Wallnöfer1-2/+2
"distinguishedName" attribute Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Nov 6 20:08:28 UTC 2010 on sn-devel-104
2010-11-06s4:operational LDB module - "canonicalName" doesn't make use of the ↵Matthias Dieter Wallnöfer1-2/+2
"distinguishedName" attribute It uses the DN from the returned message
2010-11-06ldb:ldb_tdb.c - ltdb_check_special_dn - fix indentationMatthias Dieter Wallnöfer1-1/+1
2010-11-06ldb:ldb_tdb.c - make "ltdb_add" more similar to "ltdb_modify"Matthias Dieter Wallnöfer1-9/+5
And remove in "ltdb_add_internal" a cache loading call which has been present twice.
2010-11-06s4:samr RPC server - "dcesrv_samr_RemoveMemberFromForeignDomain"Matthias Dieter Wallnöfer1-12/+6
- Remove TODO comment: MS-SAMR 3.1.5.8.7 explicitly states: "The SamrRemoveMemberFromForeignDomain method removes a member from all aliases." - Remove the search attributes since they aren't strictly needed. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat Nov 6 18:07:57 UTC 2010 on sn-devel-104
2010-11-06s4:DRS-RPC-DSSYNC: don't try to decrypt secret attributes twiceStefan Metzmacher1-19/+3
dsdb_extended_replicated_objects_convert() already decrypts the attributes in place. This fixes the usage of --option="dssync:print_pwd_blobs=yes". metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sat Nov 6 13:30:16 UTC 2010 on sn-devel-104
2010-11-06s4-cldap: fixed debug message to match contentAndrew Tridgell1-1/+1
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Sat Nov 6 04:26:45 UTC 2010 on sn-devel-104
2010-11-06s4-join: fixed SPNs, invocationId and dnshostname and python joinAndrew Tridgell1-3/+4
- we need the GN/ SPN for replication. - fixed the string form of the invocationId - lowercase the dnshostname Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-06s4-join: switch over to the new DC join in make testAndrew Tridgell1-1/+1
2010-11-06samba-tool: deprecate samba-tool vampire commandAndrew Tridgell1-1/+5
2010-11-05s4-join: fixed secure_channel_typeAndrew Tridgell1-1/+3
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Fri Nov 5 13:24:32 UTC 2010 on sn-devel-104
2010-11-05s4-join: don't print all the NDR packets by defaultAndrew Tridgell1-1/+1
2010-11-05s4-cldap: print all the DNS servers foundAndrew Tridgell1-0/+5
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-05s4-ldb: much more memory efficient msg filteringAndrew Tridgell1-3/+20
this ensures we don't leave unnecessary attributes in returned ldb objects Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-05s4-drs: reduce the memory usage of the getncchanges serverAndrew Tridgell1-21/+69
we now keep just a list of GUIDs around between getncchanges calls, instead of an entire db search. This makes the overhead of having a pending getncchanges call much smaller. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-05s4-kerberos Mention the remote address we fail to contact the KDC onAndrew Bartlett1-1/+10
2010-11-05s4-ldb: show the reason for module initialization failureAndrew Tridgell1-1/+2
generated by cgit (git 2.34.1) at 2024-12-28 11:59:49 +0000