summaryrefslogtreecommitdiff
path: root/source4
AgeCommit message (Collapse)AuthorFilesLines
2010-10-21s4-waf: don't depend directly on python modulesAndrew Tridgell4-9/+9
build rules should not list dependencies on python modules. Instead, if code needs the module it should use the python API import calls to access the module. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-21s4-waf: removed the XATTR and SASL aliasesAndrew Tridgell2-6/+1
these were hangovers from the old build system names Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-21s4-libcli: make LIBSECURITY_SESSION a private libraryAndrew Tridgell1-5/+6
2010-10-21s4-socket: make LIBNETIF a private libraryAndrew Tridgell1-5/+6
2010-10-21s4-events: make LIBEVENTS a private libraryAndrew Tridgell1-4/+5
2010-10-21s4-kdc: make DB_GLUE a private libraryAndrew Tridgell1-2/+3
2010-10-21s4-dsdb: make ldb_password_hash depend on hdb not HEIMDAL_HDB_KEYSAndrew Tridgell1-1/+1
this prevents a duplicate object file
2010-10-21s4-libcli: make LIBSAMBA-ERRORS a private libraryAndrew Tridgell1-6/+7
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-21s4-lib: make SMBPASSWD a private libraryAndrew Tridgell1-4/+5
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-21s4-dsdb: moved a bunch of fuctions from schema/schema_info_attr.c to ↵Andrew Tridgell7-295/+367
samdb/ldb_modules/schema_util.c these functions operate on ldb_modules, so they should be in the ldb_modules directory. They also should return ldb errors codes, not WERROR codes, as otherwise the error can be hidden from the ldap caller This re-arrangement fixes a dependency loop in the schema/samdb code. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Kamen Mazdrashki <kamenim@samba.org>
2010-10-21s4-waf: make NDR_STANDARD a grouping library and add NDR_SAMBA4Andrew Tridgell1-1/+10
this collects a number of subsystems into logical groups Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-21s4-build: make LIBSAMBA-NET a private libraryAndrew Tridgell1-2/+3
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-21s4-waf: removed dependencies on missing subsystemsAndrew Tridgell8-30/+10
these were left over from the old config.mk system
2010-10-21waf: replace the is_bundled option with private_libraryAndrew Tridgell2-4/+4
'private_library' better captures what we are trying to get at when we bundle a library
2010-10-21s4-libcli: make LIBCLI_LDAP a private libraryAndrew Tridgell1-7/+8
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-21s4-auth: make auth a private libraryAndrew Tridgell1-5/+6
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-21s4-ndr: make NDR_TABLE a private libraryAndrew Tridgell1-1/+2
this greatly reduces the size of ndrdump, and saves us a fair bit of duplication Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-21s4-dsdb: make SAMDB_COMMON into a private libraryAndrew Tridgell1-5/+6
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-21ldb:ldb_modules.c - if we don't find the associated dynamic object then ↵Matthias Dieter Wallnöfer1-0/+1
please close the handle Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Thu Oct 21 07:52:44 UTC 2010 on sn-devel-104
2010-10-21ldb:ldb_tdb/ldb_cache.c - remove a superflous "talloc_free"Matthias Dieter Wallnöfer1-3/+1
Didn't realise that this is already called by "ltdb_attributes_unload".
2010-10-21ldb:ldb_tdb/ldb_cache.c - in this function we don't use LDB return codesMatthias Dieter Wallnöfer1-1/+1
2010-10-20smbtorture: Fix typo in status message.James Peach1-1/+1
2010-10-20s4-schema_init: Print more info about syntax we fail to recognizeKamen Mazdrashki1-2/+4
Autobuild-User: Kamen Mazdrashki <kamenim@samba.org> Autobuild-Date: Wed Oct 20 13:54:01 UTC 2010 on sn-devel-104
2010-10-20ldb:ldb_index.c - fix some memory leaksMatthias Dieter Wallnöfer1-1/+6
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Wed Oct 20 13:11:49 UTC 2010 on sn-devel-104
2010-10-20ldb:ldb_index.c - let "ldb_module_oom" generate the return codeMatthias Dieter Wallnöfer1-15/+8
2010-10-20ldb:ldb_cache.c - fix memory contexts and memory leaksMatthias Dieter Wallnöfer1-3/+4
2010-10-20ldb:ldb_tdb submodule - use "ldb_msg_new" where appropriateMatthias Dieter Wallnöfer2-12/+12
It is saver than a manual "talloc".
2010-10-20ldb:ldb_pack.c - remove superflous "message->elements = NULL"Matthias Dieter Wallnöfer1-1/+0
It's already marked at this at the beginning of the call.
2010-10-19s4-mailslot: fixed handling of random collision in temporary mailslot namesAndrew Tridgell1-1/+1
we could get occasional failures in the samba4.nbt.dgram test if we happened to get a collision in the random mailslot names. Thanks to Jeremy for spotting this! (his autobuild failed) Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-19s4:nbt_server - fix a LDB counter typeMatthias Dieter Wallnöfer1-1/+1
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue Oct 19 14:05:13 UTC 2010 on sn-devel-104
2010-10-19s4-dsdb Reset the error string after 'expected' errors.Andrew Bartlett1-0/+1
This helps ensure that we don't get confusing error strings in the logs on other error cases. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 19 12:16:07 UTC 2010 on sn-devel-104
2010-10-19s4-dsdb Add module to send only 'simple' DNs to OpenLDAP backendsAndrew Bartlett3-2/+83
If we send the full extended DN, then we risk standards-complient LDAP servers rejecting it as invalid. Only the DN portion is needed to resolve the record in any case, and any SID or GUID componenets have already been evaluated into the DN. Andrew Bartlett
2010-10-19s4-dsdb Allow LDB_ERR_INVALID_DN_SYNTAX in dsdb_load_partition_usnAndrew Bartlett1-1/+1
This will happen on an OpenLDAP backend, because @ records are invalid in LDAP. We don't have these sequence numbers in this case. Andrew Bartlett
2010-10-19s4-auth Add DEBUG() for invalid DNs and errors expanding user groups.Andrew Bartlett1-0/+5
Against the OpenLDAP backend, I currently get failures. This makes it possible to debug those failures. Andrew Bartlett
2010-10-19ldb:"ldb_schema_attribute_by_name_internal" - support the whole unsigned int ↵Matthias Dieter Wallnöfer1-7/+5
range Commit 8556602b048e825b35df314d6865f997823ec2bb wasn't quite right - it only restored the functionality on the positive integer range. This one however should now really support the whole unsigned range. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue Oct 19 10:52:08 UTC 2010 on sn-devel-104
2010-10-19s4:dsdb/schema/schema_init.c - remove a duplicated "talloc_free"Matthias Dieter Wallnöfer1-1/+0
2010-10-19s4:samdb.py - remove a pointless commentMatthias Dieter Wallnöfer1-1/+0
We are only looking for the default DN - but the method name already tells us this. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Tue Oct 19 10:03:12 UTC 2010 on sn-devel-104
2010-10-19s4:samdb.py - use a more standard way to get to the domain realm/dns nameMatthias Dieter Wallnöfer1-1/+2
We do always use the canonical name as a base if we don't have it around yet.
2010-10-19Addition of userPrincipalName attribute when new account is createdLukasz Zalewski1-0/+2
2010-10-19s4-gensec Don't give more to sasl_encode() than it will permitAndrew Bartlett1-3/+10
We need to ask the library how much data to pass in at any time. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 19 08:37:45 UTC 2010 on sn-devel-104
2010-10-19s4-gensec Don't upgrade all DIGEST-MD5 connections to sealAndrew Bartlett1-12/+21
The issue here is that when props.max_ssf = UINT_MAX was always set, as was the maxbufsize, and the connection would always be upgraded, regardless of the callers wishes. Andrew Bartlett
2010-10-19s4-provisionbackend Allow a fixed URI to be specified for LDAP backendAndrew Bartlett3-54/+72
This is added to make the 'existing' LDAP backend class more useful, and to allow debuging of our OpenLDAP backend class with wireshark, by forcing the traffic over loopback TCP, which is much easier to sniff. Andrew Bartlett
2010-10-19s4-provision Remove serverdn parameter from Schema()Andrew Bartlett4-14/+7
We don't need to know the server DN here any more, and it makes no sense for many callers. Andrew Bartlett
2010-10-19s4-dsdb: register the DCPROMO_OID control with the rootdseAndrew Tridgell1-0/+7
this is needed to allow it over ldap Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Tue Oct 19 04:44:23 UTC 2010 on sn-devel-104
2010-10-19s4-ldb: increase minor version for 2 new functionsAndrew Tridgell2-1/+229
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Tue Oct 19 01:27:44 UTC 2010 on sn-devel-104
2010-10-19s4-ldap: mark all ldap:// requests as untrustedAndrew Tridgell1-0/+21
this allows the rootdse module to filter unregistered controls Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-19s4-dsdb: filter unregistered controls in the rootdse moduleAndrew Tridgell1-19/+84
if we get an unregistered control in the rootdse module, and the request comes from an untrusted source (eg. ldap://) then we need to: 1) filter the control out if it is marked non-critical 2) give an error if it is marked critical Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-19s4-ldb: cope with NULL oid in controlsAndrew Tridgell2-9/+11
the ldap server will mark a control with a NULL oid in order to remove it. This prevents a O(n^2) cost in control handling. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-19s4-ldb: added --relax cmdline optionAndrew Tridgell1-0/+9
this adds the relax control
2010-10-19s4-ldb: added ldb_req_mark_untrusted() and ldb_req_is_untrusted()Andrew Tridgell3-0/+30
these will be used to determine if a ldb request comes from an untrusted source. We want requests over ldap:// to be marked untrusted so we can reject unregistered controls Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>