Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2011-05-21 | s4-dsdb: relax a bit the checks on read acl when dirsync control is specified | Matthieu Patou | 1 | -12/+42 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2011-05-21 | s4-dsdb: create flag for requesting ACL relax in case of DIRSYNC request | Matthieu Patou | 1 | -0/+1 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2011-05-21 | s4: do not change the critical flag when it's on a dirsync control | Matthieu Patou | 1 | -1/+5 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2011-05-21 | s4: add blackbox test for rename | Matthieu Patou | 1 | -0/+3 | |
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sat May 21 09:50:34 CEST 2011 on sn-devel-104 | |||||
2011-05-21 | upgradeprovision: add hostname in the blackbox tests | Matthieu Patou | 1 | -1/+1 | |
2011-05-21 | Make the purge first so that the provision can reused during tests | Matthieu Patou | 1 | -3/+3 | |
2011-05-21 | Add a script for renaming a DC | Matthieu Patou | 1 | -0/+200 | |
2011-05-21 | s4-python: Remove not used imports | Matthieu Patou | 2 | -7/+4 | |
2011-05-21 | s4-python: move function find_provision_key_parameters to provision ↵ | Matthieu Patou | 5 | -113/+112 | |
namespace as it can be used not only for upgradeprovision | |||||
2011-05-20 | torture-dfs: fix a typo that was causing the test to be flacky | Matthieu Patou | 1 | -1/+1 | |
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Fri May 20 09:39:12 CEST 2011 on sn-devel-104 | |||||
2011-05-18 | selftest: Re-enable strings.py from source3/stf as a python subunit test | Andrew Bartlett | 5 | -0/+170 | |
2011-05-18 | s4-libnet: Remove libnet_Join and create libnet_Join_member | Andrew Bartlett | 4 | -49/+21 | |
libnet_Join conflicts with a function in the source3 netapi of the same name, and the ability to join as a DC via this particular method is unused. Andrew Bartlett | |||||
2011-05-18 | build: Expand dcerpc-samba grouping library | Andrew Bartlett | 1 | -1/+1 | |
This is possible in common now because the generated RPC code does not rely on a particular dcerpc layer. Andrew Bartlett | |||||
2011-05-18 | waf-build: Add more libraries to avoid duplicate symbols | Andrew Bartlett | 1 | -2/+3 | |
The new source of duplicates is calling libnetapi from inside smbtorture. Andrew Bartlett | |||||
2011-05-18 | s4-selftest: gensec test is finished, don't skip | Andrew Bartlett | 1 | -1/+0 | |
2011-05-18 | selftest: Don't skip Samba3 tests in the top level build | Andrew Bartlett | 1 | -56/+64 | |
The regular expressions here were not specific enough, they matched the samba3. names from the source3/selftest/tests.py Found by Andreas Schneider Andrew Bartlett | |||||
2011-05-18 | torture: desactivate the level 4 tests for DFS referral | Matthieu Patou | 1 | -2/+17 | |
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Wed May 18 13:04:00 CEST 2011 on sn-devel-104 | |||||
2011-05-18 | s4-dfs: Add workaround so that XP really works well | Matthieu Patou | 1 | -13/+18 | |
XP seems to have problems working at a correct speed (or even working at all if we return referral of level 4). | |||||
2011-05-18 | s4:ntvfs/cifs: return NT_STATUS_INTERNAL_ERROR if no credentials are available | Stefan Metzmacher | 1 | -1/+1 | |
This is a configuration problem on the server, no invalid parameter from the client. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed May 18 08:49:00 CEST 2011 on sn-devel-104 | |||||
2011-05-18 | s4:kdc: split s4u2self and s4u2proxy checks | Stefan Metzmacher | 4 | -23/+55 | |
metze | |||||
2011-05-18 | s4:kdc: UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION => ↵ | Stefan Metzmacher | 1 | -0/+14 | |
flags.trusted_for_delegation metze | |||||
2011-05-18 | s4:auth/credentials: S4U2Self should force CRED_MUST_USE_KERBEROS | Stefan Metzmacher | 1 | -0/+1 | |
Otherwise we would not impersonate the desired principal. This still doesn't work for plaintext auth, but should avoid ntlmssp. metze | |||||
2011-05-18 | s4:auth/credentials: pass 'self_service' to ↵ | Stefan Metzmacher | 5 | -10/+36 | |
cli_credentials_set_impersonate_principal() This also adds a cli_credentials_get_self_service() helper function. In order to support S4U2Proxy we need to be able to set the service principal for the S4U2Self step independent of the target principal. metze | |||||
2011-05-18 | s4:gensec_gssapi: avoid delegation if s4u2self/proxy is used | Stefan Metzmacher | 1 | -0/+4 | |
metze | |||||
2011-05-18 | HEIMDAL:kdc: check and regenerate the PAC in the s4u2proxy case | Stefan Metzmacher | 1 | -13/+38 | |
TODO: we need to add a S4U_DELEGATION_INFO to the PAC later. metze | |||||
2011-05-18 | HEIMDAL:kdc: pass the correct principal name for the resulting service ticket | Stefan Metzmacher | 1 | -38/+36 | |
Depending on S4U2Proxy the principal name for the resulting ticket is not the principal of the client ticket. metze | |||||
2011-05-18 | HEIMDAL:kdc: let check_PAC() to verify the incoming server and krbtgt cheksums | Stefan Metzmacher | 1 | -4/+7 | |
For a normal TGS-REQ they're both signed with krbtgt key. But for S4U2Proxy requests which ask for contrained delegation, the keys differ. metze | |||||
2011-05-17 | s4-dfs: Use a workaround for ndr relative pointer bug/limitation | Matthieu Patou | 1 | -11/+8 | |
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Tue May 17 01:33:27 CEST 2011 on sn-devel-104 | |||||
2011-05-17 | s4-torture: Add more tests to DFS referral suite | Matthieu Patou | 1 | -4/+30 | |
2011-05-17 | torture: adapt to idl evolution | root | 2 | -48/+48 | |
2011-05-17 | s4-dfs: clean the code | Matthieu Patou | 1 | -44/+50 | |
2011-05-17 | s4-dfs: fix bugs in idl and adapt code accordingly | Matthieu Patou | 1 | -17/+23 | |
2011-05-17 | s4-python: add an option for just fixing gpo folders | Matthieu Patou | 1 | -189/+196 | |
2011-05-17 | s4-python: keep wheel_gid as an integer | Matthieu Patou | 1 | -1/+1 | |
2011-05-17 | s4-python: raise an error if unable to bind remote ldap while joining | Matthieu Patou | 1 | -0/+11 | |
2011-05-16 | waf: Enable Samba3 torture tests in top level build. | Andreas Schneider | 1 | -12/+12 | |
Signed-off-by: Günther Deschner <gd@samba.org> Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Mon May 16 13:57:01 CEST 2011 on sn-devel-104 | |||||
2011-05-16 | s4-smbtorture: add test_netremotetod. | Günther Deschner | 2 | -0/+18 | |
Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Mon May 16 12:45:52 CEST 2011 on sn-devel-104 | |||||
2011-05-16 | s4-libcli/rap: add smbcli_rap_netremotetod(). | Günther Deschner | 1 | -0/+47 | |
Guenther | |||||
2011-05-13 | do an explicit A record search for SRV entries | Luke Howard | 1 | -4/+22 | |
Signed-off-by: Andrew Bartlett <abartlet@samba.org> | |||||
2011-05-13 | s4/test/getnc_exop: Tune the the test to work against windows | Kamen Mazdrashki | 1 | -17/+27 | |
It turns out that sometimes, w2k8-r2 returns objects even when FSMO extended request has failed. Also verify that target DC returns source_dsa_guid and source_dsa_invocation_id correctly Autobuild-User: Kamen Mazdrashki <kamenim@samba.org> Autobuild-Date: Fri May 13 02:26:04 CEST 2011 on sn-devel-104 | |||||
2011-05-11 | s4/drepl_fsmo: Add an CR so that message is visible in the logs | Kamen Mazdrashki | 1 | -1/+1 | |
Autobuild-User: Kamen Mazdrashki <kamenim@samba.org> Autobuild-Date: Wed May 11 21:03:59 CEST 2011 on sn-devel-104 | |||||
2011-05-11 | s4/getnc_exop: Initial implementation of a testsuite for GetNCChanges ↵ | Kamen Mazdrashki | 1 | -0/+136 | |
extended opeartion handling | |||||
2011-05-11 | s4/getncchanges: Pre-mark extended requests as success in case a ↵ | Kamen Mazdrashki | 1 | -0/+4 | |
sub-function "forget" to do this | |||||
2011-05-11 | s4/getncchanges: Implement placeholder for handling ex-op collection of objects | Kamen Mazdrashki | 1 | -13/+44 | |
Right now it is solely based on function that handles objects in normal DsGetNCChanges calls. | |||||
2011-05-11 | s4/getncchanges: Move the code that collects objects into separate function | Kamen Mazdrashki | 1 | -41/+67 | |
2011-05-11 | s4/getncchanges: Don't mask Extended operation result - callers need it | Kamen Mazdrashki | 1 | -1/+0 | |
2011-05-11 | s4/getncchanges: Fail extended request rather than failing whole request | Kamen Mazdrashki | 1 | -1/+3 | |
in case that destination_dsa_guid is not valid | |||||
2011-05-09 | build: Remove --disable-s3build so we can rely on these subsystems | Andrew Bartlett | 1 | -6/+1 | |
This will make it easier to write code that uses the whole codebase. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon May 9 12:25:33 CEST 2011 on sn-devel-104 | |||||
2011-05-09 | selftest: Test both users created in plugin_s4_dc environment | Andrew Bartlett | 1 | -0/+1 | |
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon May 9 06:10:52 CEST 2011 on sn-devel-104 | |||||
2011-05-08 | selftest: Polish selftest-vars.sh a little so it can be used again | Kamen Mazdrashki | 1 | -10/+14 | |
Autobuild-User: Kamen Mazdrashki <kamenim@samba.org> Autobuild-Date: Sun May 8 22:50:01 CEST 2011 on sn-devel-104 |