summaryrefslogtreecommitdiff
path: root/source4
AgeCommit message (Collapse)AuthorFilesLines
2012-07-06s4-torture: Add a lsarpc test_LookupSids3_fail function.Andreas Schneider1-15/+68
2012-07-06s4-torture: Test LookupSids3/LookupNames4 over np and tcpip.Andreas Schneider1-8/+26
2012-07-06s4-torture: Make sure lsa_OpenPolicy2 fails over TCP/IP.Andreas Schneider2-8/+16
2012-07-06s4-torture: Make sure lsa_OpenPolicy fails over TCP/IP.Andreas Schneider1-9/+20
2012-07-06s4-torture: Make sure ncacn_np tests are only called over the a pipe.Andreas Schneider2-1/+43
2012-07-06s4-torture: Test LookupSids3 and LookupNames4 only over tcpip.Andreas Schneider1-13/+36
LookupSids3 and LookupNames4 are only available over tcpip and MUST fail over named pipes.
2012-07-06s4-torture: Use test_LookupSids3 function.Andreas Schneider1-32/+1
2012-07-06s4-torture: Fix build warnings in lsa test.Andreas Schneider1-10/+2
2012-07-06s4-classicupgrade: Demote any other 'BDC' accounts back to a member server ↵Andrew Bartlett1-2/+12
during upgrade This makes it clear that they cannot be a DC until they are upgraded with samba-tool domain dcpromo. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri Jul 6 09:59:13 CEST 2012 on sn-devel-104
2012-07-06s4-selftest: Test samba-tool domain dcpromoAndrew Bartlett1-1/+2
This needs a new environment to test it properly. This requires a raise in the number of socket wrapper interfaces. Andrew Bartlett
2012-07-06s4-samba-tool: Provide a samba-tool domain dcpromo that upgrades a member to ↵Andrew Bartlett2-10/+121
a DC This command is like dcpromo in that it upgrades the existing workstation account to be a domain controller. The SID (and therefore any file ownerships) is preserved. Andrew Bartlett
2012-07-06s4-dsdb: Give a much better error message when parentGUID generation failsAndrew Bartlett1-3/+3
2012-07-06s4-dsdb: Use parent_object_guid to find the correct parent for new objectsAndrew Bartlett3-1/+129
This allows the parent to be renmaed while a new object is added on another replica. This rename may also be a delete, in which case we must move it to lostandfound. Andrew Bartlett
2012-07-04s4/heimdal: fix make-proto.pl with perl 5.16Björn Jacke1-3/+2
Thanks to Torsten Kurbad. This fixes #9025. Autobuild-User(master): Björn Jacke <bj@sernet.de> Autobuild-Date(master): Wed Jul 4 13:51:07 CEST 2012 on sn-devel-104
2012-07-03samba-tool: gpo: Update copyrightAmitay Isaacs1-1/+1
Autobuild-User(master): Amitay Isaacs <amitay@samba.org> Autobuild-Date(master): Tue Jul 3 09:10:21 CEST 2012 on sn-devel-104
2012-07-03samba-tool: gpo: Improve error messagesAmitay Isaacs1-26/+28
Signed-off-by: Amitay Isaacs <amitay@gmail.com>
2012-07-03samba-tool: gpo: Add del subcommand to delete GPOAmitay Isaacs1-0/+79
Thanks to Denis Bonnenfant <denis.bonnenfant@diderot.org> for patch.
2012-07-03samba-tool: gpo: Add listcontainers subcommand to list containers using ↵Amitay Isaacs1-0/+37
given GPO Thanks to Denis Bonnenfant <denis.bonnenfant@diderot.org> for patch.
2012-07-03samba-tool: gpo: Use utility function dc_url() to set the connection urlAmitay Isaacs1-9/+18
In create and fetch subcommands, we also need to know DC hostname. So first find a DC and use DC hostname to construct connection url. If ldap:// url is specified with -H, then use that to construct DC hostname.
2012-07-03samba-tool: gpo: Refactor code using utility functionsAmitay Isaacs1-40/+8
2012-07-03samba-tool: gpo: Add utility functions get_gpo_containers and del_gpo_linkAmitay Isaacs1-0/+50
Thanks to Denis Bonnenfant <denis.bonnenfant@diderot.org> for patch
2012-07-03s4-pysmb: Add deltree() method to remove directory and its contentsAmitay Isaacs1-0/+25
Thanks to Denis Bonnenfant <denis.bonnenfant@diderot.org> for patch.
2012-07-03samba-tool: Fix indentationAmitay Isaacs2-4/+4
Thanks to Denis Bonnenfant <denis.bonnenfant@diderot.org> for patch.
2012-07-03samba-tool: gpo: Use gpo (id) instead of gpo_dn (DN)Amitay Isaacs1-3/+3
Thanks to Denis Bonnenfant <denis.bonnenfant@diderot.org> for patch.
2012-07-03samba-tool: gpo: Correct the attribute name from gPlink to gPLinkAmitay Isaacs1-3/+3
Thanks to Denis Bonnenfant <denis.bonnenfant@diderot.org> for patch.
2012-07-03samba-tool: gpo: Fix policy DNAmitay Isaacs1-1/+1
Thanks to Denis Bonnenfant <denis.bonnenfant@diderot.org> for patch.
2012-07-03s4-dns: Remove refernece to BIND 9.7 supporting GSS-TSIGAndrew Bartlett1-1/+1
This support is too painful to use. Andrew Bartlett
2012-07-03s4-dns: Remove dynamic DNS instructions for bind 9.7Andrew Bartlett1-22/+1
This version of BIND only ever caused pain when trying to do dynamic DNS. If users are using this version, simply treat it as a static server. Andrew Bartlett
2012-07-03auth: Remove .get_challenge (only used for security=server)Andrew Bartlett7-97/+0
With NTLMSSP, for NTLM2 we need to be able to set the effective challenge, so if we ever did use a module that needed this functionlity, we would downgrade to just NTLM. Now that security=server has been removed, we have no such module. This will make it easier to make the auth subsystem async, as we will not need to consider making .get_challenge async. Andrew Bartlett
2012-07-02s4-torture: more printf removal from samlogon torture test.Günther Deschner1-29/+25
Guenther Autobuild-User(master): Günther Deschner <gd@samba.org> Autobuild-Date(master): Mon Jul 2 17:19:55 CEST 2012 on sn-devel-104
2012-06-28Replace all uses of setXX[ug]id() and setgroups with samba_setXX[ug]id() calls.Jeremy Allison2-5/+9
Will allow thread-specific credentials to be added by modifying the central definitions. Deliberately left the setXX[ug]id() call in popt as this is not used in Samba.
2012-06-28selftest: run pdbtest against s3dc as wellAndrew Bartlett1-1/+1
This validates the password expiry, account disable in the s3 auth code and the save/restore of values in tdbsam. It also provides the first test of some net sam set subcommands. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Thu Jun 28 20:39:38 CEST 2012 on sn-devel-104
2012-06-28selftest: use a loop rather than declare tests for both dc and s3dcAndrew Bartlett1-16/+16
2012-06-28s4-torture: fix typo in samlogon test.Günther Deschner1-1/+1
Guenther Autobuild-User(master): Günther Deschner <gd@samba.org> Autobuild-Date(master): Thu Jun 28 18:43:46 CEST 2012 on sn-devel-104
2012-06-28s4-torture: use torture context for printing debug output.Günther Deschner1-111/+97
Guenther
2012-06-28source4/smbd/pidfile: don't panic if pid file is corrupt.Rusty Russell1-0/+3
In particular, on a virtual machine after a forced reboot, it contained "Ille" instead of a valid PID. Given it was the right length, I'm assuming it was filesystem corruption. process_exists_by_pid() then panics, when given a pid < 1. Reported-by: lostogre on #samba-technical Signed-off-by: Rusty Russell <rusty@rustcorp.com.au> Autobuild-User(master): Rusty Russell <rusty@rustcorp.com.au> Autobuild-Date(master): Thu Jun 28 05:19:24 CEST 2012 on sn-devel-104
2012-06-27s4-selftest: expand passdb testingAndrew Bartlett1-0/+1
This tests pdb_samba4 in the first instance
2012-06-27s4-dsdb when setting DSDB_CONTROL_PASSWORD_BYPASS_LAST_SET_OID make it ↵Andrew Bartlett1-1/+7
non-critical
2012-06-27s4-dsdb: Remove hooks for non-directory password handlingAndrew Bartlett1-12/+0
This was an interesting hack, and the local_password module still exists, but until it has a use case and a test case, remove the bypass of password_hash. Andrew Bartlett
2012-06-26s3-torture: Use static printer for smbd spooler testDavid Disseldorp1-1/+9
Autobuild-User(master): David Disseldorp <ddiss@samba.org> Autobuild-Date(master): Tue Jun 26 18:04:43 CEST 2012 on sn-devel-104
2012-06-26torture: add test for smbd print job spoolingDavid Disseldorp1-0/+73
Clients can print by performing file IO on a printer share, rather than issuing spoolss RPCs. This commit attempts to reproduce bug 8719.
2012-06-26s4-samldb: do not talloc_steal() the elements of the original requestAndrew Bartlett1-4/+10
2012-06-24s4-join: Setup correct DNS configurationAndrew Bartlett2-28/+76
This means we do not need to run samba_upgradedns any more. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Sun Jun 24 18:10:10 CEST 2012 on sn-devel-104
2012-06-25s4-samba_upgradedns: Do not set DNS account for internal serverAndrew Bartlett1-32/+32
The internal DNS server does not need the samba-only NAME-dns account. Andrew Bartlett
2012-06-25s4-join: Import DNS zones in AD DC joinAndrew Bartlett3-20/+59
2012-06-24selftest: Test unix.whoami with kerberos on plugin_s4_dcAndrew Bartlett1-16/+4
This also tests the comparison with LDAP on anonymous connections and marks this as knownfail, while we investigate the correct behaviour here. Andrew Bartlett
2012-06-24s4-classicupgrade: Allow DNS backend to be specifiedAndrew Bartlett2-6/+12
2012-06-24s4-drepl: Ensure that the op->source does not get deallocated too earlyAndrew Bartlett2-9/+25
We need to have the struct dreplsrv_partition_source_dsa around until the end of the async op, so we use talloc_reference after carefully checking the callers and making the modifications required. This prevents a crash when replicating partitions in the vampire_dc test after adding DNS replication at join time. Andrew Bartlett
2012-06-23selftest: schema is not automatically reloaded now so if you modify it you ↵Matthieu Patou1-0/+9
have to reload it Autobuild-User(master): Matthieu Patou <mat@samba.org> Autobuild-Date(master): Sat Jun 23 10:48:13 CEST 2012 on sn-devel-104
2012-06-22s4-dsdb: operational handle modifyTimeStamp on the CN=aggregate DNMatthieu Patou1-1/+37
modifyTimeStamp is a generated attribute, for most object it's generated directly from the whenChanged attribute. But for the CN=aggregate object in the schema we have to handle it in a different way, that's because for this object whenChanged!=modifyTimeStamp (as checked against Windows 2003R2 DCs) instead the modifyTimeStamp reflect the timestamp of the most recently modified and loaded schema object (that is to the one with the highest USN before the schema was reload due to timeout or by the reloadSchemaNow command). Some third party are using this information to know if they have to update their schema cache and also to check that schema updates have been correctly reloaded by the DC, a good example of this behavior is exchange 2010.