summaryrefslogtreecommitdiff
path: root/source4
AgeCommit message (Collapse)AuthorFilesLines
2010-06-26s4:provision.py - fix comment regarding DNS entriesMatthias Dieter Wallnöfer1-1/+1
I think this should mean partially Samba4 specified (all beside the "dns" account is standard)
2010-06-26s4:provision: add entries for root dns serversStefan Metzmacher1-0/+72
metze
2010-06-26s4:provision: move Samba4 specific DNS stuff to its own fileStefan Metzmacher4-21/+39
metze
2010-06-26s4:provision: add --next-rid optionStefan Metzmacher2-3/+16
Make it possible to provision a domain with a given next rid counter. This will be useful for upgrades, where we want to import users with already given SIDs. metze
2010-06-26s4:dsdb/ridalloc: add comment about windows behavior regarding rIDUsedPoolStefan Metzmacher1-1/+6
metze
2010-06-26s4:provision: don't use hardcoded values for 'nextRid' and 'rIDAvailablePool'Stefan Metzmacher5-6/+24
On Windows dcpromo imports nextRid from the local SAM, which means it's not hardcoded to 1000. The initlal rIDAvailablePool starts at nextRid + 100. I also found that the RID Set of the local dc should be created via provision and not at runtime, when the first rid is needed. (Tested with dcpromo on w2k8r2, while disabling the DNS check box). After provision we should have this (assuming nextRid=1000): rIDAllocationPool: 1100-1599 rIDPrevAllocationPool: 1100-1599 rIDUsedPool: 0 rIDNextRID: 1100 rIDAvailablePool: 1600-1073741823 Because provision sets rIDNextRid=1100, the first created account (typically DNS related accounts) will get 1101 as rid! metze
2010-06-26s4:provision: pass relax control also to modify_ldifStefan Metzmacher1-2/+2
metze
2010-06-26s4/net-drs: Fix error messages typo and formattingKamen Mazdrashki1-7/+7
2010-06-26s4/drs-test: Fix whitespaces and permissions for delete_object.py testKamen Mazdrashki1-5/+5
Sorry I've missed to do this before
2010-06-25s4:schannel Open the schannel_store.tdb at startupAndrew Bartlett1-0/+8
This will allow TDB_CLEAR_IF_FIRST behaviour in future Signed-off-by: Jeremy Allison <jra@samba.org>
2010-06-25s4 python: Add unit tests related to PyLong/PyInt handlingMatthieu Patou1-2/+11
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-25ldb: Fix a wrong changetype in unit testMatthieu Patou1-1/+1
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-25smbtorture: Fix loading of --load-list.Jelmer Vernooij2-10/+13
2010-06-25s4:lib/registry/ldb.c - cosmetic - fix commentMatthias Dieter Wallnöfer1-1/+1
2010-06-25s4:lib/registry/ldb.c - cosmetic - wrap linesMatthias Dieter Wallnöfer1-3/+2
2010-06-25s4 upgradeprovision: Try to support older Pythons.Michael Wood1-1/+1
Use "...".split(sep, 1) instead of "...".partition(sep). Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
2010-06-25s4/drs: DsReplicaSync should search partition to SyncKamen Mazdrashki2-6/+38
by any valid DSName attribute given, be it - partition DN, partition GUID or partition SID
2010-06-25s4/utils: fix few 'net drs replicate' error messagesKamen Mazdrashki1-6/+8
mainly for the output to be more informative
2010-06-25s4/drs-test: Tests Deleted objects replicationKamen Mazdrashki1-0/+222
Tests how deleted objects are replicated between two DCs. Currently the test exploits following vulnerabilities: - DsReplicaSync is not correctly implemented - a 'deleted object' is restored (kind of) in case DC1 replicates from DC2 before the 'deleted object' is replicated
2010-06-25selftest: Store the output of the last test run in st/subunit.Jelmer Vernooij1-3/+10
If a testrepository repository is present, add the test output when it has completed.
2010-06-24s4 torture: Warn on NOT_IMPLEMENTED in addition to NOT_SUPPORTED for ↵Aravind Srinivasan1-3/+9
RAW-QFILEINFO Signed-off-by: Tim Prouty <tprouty@samba.org>
2010-06-24Revert "s4:provision.ldif - fix the number of available RIDs"Matthias Dieter Wallnöfer1-1/+1
This reverts commit 41cdcd54b7b7e3fb70fdb220e74a1daf30e1891a. As per request of metze revert this (cause written on the mailing list).
2010-06-24s4:auth/gensec/gensec_gssapi.c - reorder constructorMatthias Dieter Wallnöfer1-30/+38
To have the same order as in the structure definition.
2010-06-24s4-ldb: use CHECK_XSLTPROC_MANPAGES()Andrew Tridgell1-1/+1
2010-06-24s4-python: python is not always in /usr/binAndrew Tridgell66-66/+66
Using "#!/usr/bin/env python" is more portable. It still isn't ideal though, as we should really use the python path found at configure time. We do that in many places already, but some don't. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-06-24s4:provision.ldif - fix the number of available RIDsMatthias Dieter Wallnöfer1-1/+1
There should be 4611686014132422209 and not 4611686014132422109.
2010-06-24s4:provision.ldif - this Win2003 revision level seems always to be "9" on ↵Matthias Dieter Wallnöfer1-1/+1
Windows Server 2008 machines
2010-06-24s4:provision_users.ldif - change a group description to be correctMatthias Dieter Wallnöfer1-1/+1
2010-06-24s4:upgradeprovision - fix include order for "ldb"Matthias Dieter Wallnöfer1-1/+1
Patch originally posted on the list by Matthieu Patou.
2010-06-24s4/ldb: ldb_msg_el_map_remote() should rename the remote attribute names ↵Endi S. Dewata1-1/+15
into local names as defined in simple_ldap_map.c.
2010-06-24s4:setup/provision.reg - raise version to Windows Server 2008 R2Matthias Dieter Wallnöfer1-1/+1
2010-06-24s4:libnet_join.c - always use LDB constantsMatthias Dieter Wallnöfer1-5/+5
2010-06-23s4-smbtorture: test more valid key names in RPC-WINREG.Günther Deschner1-0/+61
Guenther
2010-06-23s4-smbtorture: more work on test values WINREG test.Günther Deschner1-2/+10
Guenther
2010-06-23Fix to undo nasty hack for for grouptype conversionLukasz Zalewski1-1/+1
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-23Per Andrews request, revertJelmer Vernooij3-626/+579
"heimdal/waf: Initial work on making it possible to use the system" as the hdb_check_s4u2self function handling is incorrect. This reverts commit b099631f428d0ecc641d59bd3c94674e6348dde9.
2010-06-23s4-smbtorture: add test for different winreg SetValue value names.Günther Deschner1-0/+51
Guenther
2010-06-23s4:selftest Fix up netbios names for rpc_echo testAndrew Bartlett1-1/+1
2010-06-23s4:selftest Add 2003 and 2008R2 test environments and testsAndrew Bartlett1-42/+42
These tests were chosen particularly because they are known to test things that vary across the functional levels. Andrew Bartlett
2010-06-23s4:net Remove warnings for 2000 native mode and Samba4.Andrew Bartlett1-5/+5
We now support 2000 native mode, and so we just need to warn about mixed mode. Andrew Bartlett
2010-06-23s4:provision Raise default max functional level to 2008R2Andrew Bartlett2-5/+5
We don't support many of the extra features, but that applies across many other parts of AD. Allow the admin to join a 2008R2 domain if he or she wants. This also makes it possible to test 2008R2 domain code in 'make test' Andrew Bartlett
2010-06-23s4:provision Remove am_rodc from SchemaAndrew Bartlett2-5/+5
The SamDB created in the schema code isn't real enough to care if it's an rodc or not.
2010-06-23s4:libnet When joining a domain, update msDS-SupportedEncryptionTypesAndrew Bartlett1-0/+32
We need this for our DC to have clients use AES keys to us
2010-06-23libds:common Remove DS_DC_* domain functionality flagsAndrew Bartlett5-30/+16
These are just a subset of the DS_DOMAIN_ functionality flags, are compared and often confused with each other. Just make them one set. Andrew Bartlett
2010-06-23s4:kdc Use msDS-SupportedEncTypes in our KDCAndrew Bartlett1-30/+54
We need to honour this, otherwise we will send AES-encrypted tickets to unprepared Kerberos targets. Andrew Bartlett
2010-06-23s4-smbtorture: Fix test_SetPrinterDataEx_keys and test_SetPrinterDataEx_values.Günther Deschner1-6/+6
We want to continue, not to skip here. Guenther
2010-06-23s4:operational LDB module - fix a misleading commentMatthias Dieter Wallnöfer1-1/+2
2010-06-22s4:samr RPC server - make use of LDB constants in macrosMatthias Dieter Wallnöfer1-7/+7
2010-06-22s4:password_hash LDB module - fix another problem regarding the lanman hashMatthias Dieter Wallnöfer1-13/+16
When a user only provides only the lanman hash (and nothing else) and the lanman authentication is deactivated then we end in an account with no password attribute at all! Lock this down.
2010-06-22s4-smbtorture: add "printerdata_values" test to RPC-SPOOLSS-PRINTER.Günther Deschner1-0/+88
Guenther