Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2011-05-21 | s4:sam.py - add tests to check that setting "userAccountValue" on usersdon't ↵ | Matthieu Patou | 1 | -2/+40 | |
impact the "primaryGroupID" attribute Notice: The domain administrators groups isn't referenced as "Domain Admins" since this name could differ. Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sat May 21 19:19:57 CEST 2011 on sn-devel-104 | |||||
2011-05-21 | s4:samldb LDB module - don't change the "primaryGroupId" on LDB ↵ | Matthieu Patou | 1 | -1/+16 | |
modifications unless we are a computer/dc/rodc Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org> | |||||
2011-05-21 | s4:lsa RPC server - handle LDB flags as "unsigned" | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
Signed-off-by: Metze | |||||
2011-05-21 | s4:ldb-samba/ldb_wrap.*-dsdb/samdb/samdb.c - handle LDB connection flags as ↵ | Matthias Dieter Wallnöfer | 3 | -7/+7 | |
unsigned The LDB API ("ldb_connect") prescribes that they should be "unsigned". Signed-off-by: Metze | |||||
2011-05-21 | ldb:pyldb.c - all flags should be unsigned | Matthias Dieter Wallnöfer | 1 | -10/+10 | |
Adapt it to the previous commits Reviewed-by: Jelmer + Metze | |||||
2011-05-21 | ldb:ldb_sqlite3.c - all LDB flags should be handled as "unsigned" | Matthias Dieter Wallnöfer | 1 | -2/+3 | |
Signed-off-by: Metze | |||||
2011-05-21 | ldb:tools/cmdline.c + tools/ldbtest.c - the connection flags are typed as ↵ | Matthias Dieter Wallnöfer | 2 | -2/+2 | |
"unsigned" Signed-off-by: Metze | |||||
2011-05-21 | ldb:ldbtest.c - make more use of LDB constants | Matthias Dieter Wallnöfer | 1 | -4/+4 | |
Signed-off-by: Metze | |||||
2011-05-21 | s4:torture - always cast correctly when using the "%x" format string argument | Matthias Dieter Wallnöfer | 2 | -6/+6 | |
Signed-off-by: Metze | |||||
2011-05-21 | s4:auth/ntlmssp/ntlmssp_server.c - add "const" in front of "dnsdomain" | Matthias Dieter Wallnöfer | 1 | -1/+1 | |
Signed-off-by: Metze | |||||
2011-05-21 | add a demo script for dirsync | Matthieu Patou | 1 | -0/+156 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sat May 21 15:40:26 CEST 2011 on sn-devel-104 | |||||
2011-05-21 | s4-dsdb: add unit tests for dirsync control | Matthieu Patou | 3 | -0/+716 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2011-05-21 | s4-dsdb: implementation of the dirsync control | Matthieu Patou | 3 | -0/+1369 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2011-05-21 | s4-dsdb: introduce dsdb_module_search_tree | Matthieu Patou | 1 | -24/+63 | |
With this function your own search tree can be specified This function is similar to ldb_build_search_req_ex as it allows to pass a parse tree structure. Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2011-05-21 | s4-dsdb: relax a bit the checks on read acl when dirsync control is specified | Matthieu Patou | 1 | -12/+42 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2011-05-21 | s4-dsdb: create flag for requesting ACL relax in case of DIRSYNC request | Matthieu Patou | 1 | -0/+1 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2011-05-21 | s4: do not change the critical flag when it's on a dirsync control | Matthieu Patou | 1 | -1/+5 | |
Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2011-05-21 | s4: add blackbox test for rename | Matthieu Patou | 1 | -0/+3 | |
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sat May 21 09:50:34 CEST 2011 on sn-devel-104 | |||||
2011-05-21 | upgradeprovision: add hostname in the blackbox tests | Matthieu Patou | 1 | -1/+1 | |
2011-05-21 | Make the purge first so that the provision can reused during tests | Matthieu Patou | 1 | -3/+3 | |
2011-05-21 | Add a script for renaming a DC | Matthieu Patou | 1 | -0/+200 | |
2011-05-21 | s4-python: Remove not used imports | Matthieu Patou | 2 | -7/+4 | |
2011-05-21 | s4-python: move function find_provision_key_parameters to provision ↵ | Matthieu Patou | 5 | -113/+112 | |
namespace as it can be used not only for upgradeprovision | |||||
2011-05-20 | torture-dfs: fix a typo that was causing the test to be flacky | Matthieu Patou | 1 | -1/+1 | |
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Fri May 20 09:39:12 CEST 2011 on sn-devel-104 | |||||
2011-05-18 | selftest: Re-enable strings.py from source3/stf as a python subunit test | Andrew Bartlett | 5 | -0/+170 | |
2011-05-18 | s4-libnet: Remove libnet_Join and create libnet_Join_member | Andrew Bartlett | 4 | -49/+21 | |
libnet_Join conflicts with a function in the source3 netapi of the same name, and the ability to join as a DC via this particular method is unused. Andrew Bartlett | |||||
2011-05-18 | build: Expand dcerpc-samba grouping library | Andrew Bartlett | 1 | -1/+1 | |
This is possible in common now because the generated RPC code does not rely on a particular dcerpc layer. Andrew Bartlett | |||||
2011-05-18 | waf-build: Add more libraries to avoid duplicate symbols | Andrew Bartlett | 1 | -2/+3 | |
The new source of duplicates is calling libnetapi from inside smbtorture. Andrew Bartlett | |||||
2011-05-18 | s4-selftest: gensec test is finished, don't skip | Andrew Bartlett | 1 | -1/+0 | |
2011-05-18 | selftest: Don't skip Samba3 tests in the top level build | Andrew Bartlett | 1 | -56/+64 | |
The regular expressions here were not specific enough, they matched the samba3. names from the source3/selftest/tests.py Found by Andreas Schneider Andrew Bartlett | |||||
2011-05-18 | torture: desactivate the level 4 tests for DFS referral | Matthieu Patou | 1 | -2/+17 | |
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Wed May 18 13:04:00 CEST 2011 on sn-devel-104 | |||||
2011-05-18 | s4-dfs: Add workaround so that XP really works well | Matthieu Patou | 1 | -13/+18 | |
XP seems to have problems working at a correct speed (or even working at all if we return referral of level 4). | |||||
2011-05-18 | s4:ntvfs/cifs: return NT_STATUS_INTERNAL_ERROR if no credentials are available | Stefan Metzmacher | 1 | -1/+1 | |
This is a configuration problem on the server, no invalid parameter from the client. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed May 18 08:49:00 CEST 2011 on sn-devel-104 | |||||
2011-05-18 | s4:kdc: split s4u2self and s4u2proxy checks | Stefan Metzmacher | 4 | -23/+55 | |
metze | |||||
2011-05-18 | s4:kdc: UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION => ↵ | Stefan Metzmacher | 1 | -0/+14 | |
flags.trusted_for_delegation metze | |||||
2011-05-18 | s4:auth/credentials: S4U2Self should force CRED_MUST_USE_KERBEROS | Stefan Metzmacher | 1 | -0/+1 | |
Otherwise we would not impersonate the desired principal. This still doesn't work for plaintext auth, but should avoid ntlmssp. metze | |||||
2011-05-18 | s4:auth/credentials: pass 'self_service' to ↵ | Stefan Metzmacher | 5 | -10/+36 | |
cli_credentials_set_impersonate_principal() This also adds a cli_credentials_get_self_service() helper function. In order to support S4U2Proxy we need to be able to set the service principal for the S4U2Self step independent of the target principal. metze | |||||
2011-05-18 | s4:gensec_gssapi: avoid delegation if s4u2self/proxy is used | Stefan Metzmacher | 1 | -0/+4 | |
metze | |||||
2011-05-18 | HEIMDAL:kdc: check and regenerate the PAC in the s4u2proxy case | Stefan Metzmacher | 1 | -13/+38 | |
TODO: we need to add a S4U_DELEGATION_INFO to the PAC later. metze | |||||
2011-05-18 | HEIMDAL:kdc: pass the correct principal name for the resulting service ticket | Stefan Metzmacher | 1 | -38/+36 | |
Depending on S4U2Proxy the principal name for the resulting ticket is not the principal of the client ticket. metze | |||||
2011-05-18 | HEIMDAL:kdc: let check_PAC() to verify the incoming server and krbtgt cheksums | Stefan Metzmacher | 1 | -4/+7 | |
For a normal TGS-REQ they're both signed with krbtgt key. But for S4U2Proxy requests which ask for contrained delegation, the keys differ. metze | |||||
2011-05-17 | s4-dfs: Use a workaround for ndr relative pointer bug/limitation | Matthieu Patou | 1 | -11/+8 | |
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Tue May 17 01:33:27 CEST 2011 on sn-devel-104 | |||||
2011-05-17 | s4-torture: Add more tests to DFS referral suite | Matthieu Patou | 1 | -4/+30 | |
2011-05-17 | torture: adapt to idl evolution | root | 2 | -48/+48 | |
2011-05-17 | s4-dfs: clean the code | Matthieu Patou | 1 | -44/+50 | |
2011-05-17 | s4-dfs: fix bugs in idl and adapt code accordingly | Matthieu Patou | 1 | -17/+23 | |
2011-05-17 | s4-python: add an option for just fixing gpo folders | Matthieu Patou | 1 | -189/+196 | |
2011-05-17 | s4-python: keep wheel_gid as an integer | Matthieu Patou | 1 | -1/+1 | |
2011-05-17 | s4-python: raise an error if unable to bind remote ldap while joining | Matthieu Patou | 1 | -0/+11 | |
2011-05-16 | waf: Enable Samba3 torture tests in top level build. | Andreas Schneider | 1 | -12/+12 | |
Signed-off-by: Günther Deschner <gd@samba.org> Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Mon May 16 13:57:01 CEST 2011 on sn-devel-104 |