summaryrefslogtreecommitdiff
path: root/source4
AgeCommit message (Collapse)AuthorFilesLines
2009-11-06s4/drs: dsdb_verify_oid_mappings_drsuapi() replaced by ↵Kamen Mazdrashki4-74/+3
dsdb_schema_pfm_contains_drsuapi_pfm() dsdb_schema_pfm_contains_drsuapi_pfm() is part of reimplemented prefixMap interface. This name was choosen to clearly show, that this a week verification in case we want to determine if remote schema is changed. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-11-06s4/drs: dsdb_get_oid_mappings_drsuapi() to use new prefixMap interfaceKamen Mazdrashki1-34/+3
dsdb_get_oid_mappings_drsuapi() just need to call dsdb_drsuapi_pfm_from_schema_pfm() to get filled-in DRSUAPI prefixMap. Perhaps it won't be bad to rename this function to have more expressive name in the future Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-11-06s4/drs: dsdb_load_oid_mappings_drsuapi() -> dsdb_load_prefixmap_from_drsuapi()Kamen Mazdrashki3-54/+15
Also, dsdb_load_oid_mappings_drsuapi() was reimplemented to use dsdb_schema_pfm_from_drsuapi_pfm() function to load drsuapi_prefixMap into schema->prefixmap Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-11-06s4/drs: dsdb_schema uses dsdb_schema_prefixmap definitionKamen Mazdrashki1-0/+2
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-11-06s4: DRS-RPC tests added to RPC group of testsKamen Mazdrashki1-1/+4
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-11-06s4: Add DRS-UNIT test suite to LOCAL group of tests to be executedKamen Mazdrashki1-0/+2
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-11-06s4/drs: Move schema_prefixMap allocation in separate functionKamen Mazdrashki1-15/+29
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-11-06s4/drs: schema_prefixMap to/from drsuapi_prefixMap conversion implementationKamen Mazdrashki1-1/+228
Along with this, dsdb_schema_pfm_contains_drsuapi_pfm() function is implemented to replace previous implementation for dsdb_verify_oid_mappings_drsuapi(). Name of the function clearly implies how week this verification is, as currently it is used to indicate "Schema modified on remote" condition. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-11-06s4/drs(tort): test for schema_prefixMap to/from drsuapi_prefixMap conversionKamen Mazdrashki1-0/+51
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-11-06s4/drs(tort): implement prefixMap comparison functionKamen Mazdrashki1-13/+23
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-11-06s4/drs: Implement binary-oid-lookup into prefixMapKamen Mazdrashki1-25/+37
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-11-06s4/drs: Move making of partial-binary-oid to a separate functionKamen Mazdrashki1-20/+45
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-11-06s4/drs: Fix memory leek in prefixMapKamen Mazdrashki1-1/+4
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-11-06s4/ldb: Fix double allocation for "ldb_url"Kamen Mazdrashki1-2/+2
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-11-06s4:torture/drs: move intern/ => unit/Stefan Metzmacher2-1/+1
metze
2009-11-05Fix up some of the timing constants for DELAYWRITE. Add some extra tests up ↵Jeremy Allison1-30/+114
test_delayed_write_update6 to investigate what happens to a sticky write handle after a second handle close. Jeremy.
2009-11-05Python tests for the acl module.Zahari Zahariev2-0/+1105
Signed-off-by: Nadezhda Ivanova <nadezhda.ivanova@postpath.com> Author: Zahari Zahariev <zahari.zahariev@postpath.com>
2009-11-05Version 1.0 of the directory service acls module.Nadezhda Ivanova6-1013/+419
At this point, support for checks on LDAP add, delete, rename and modify. Old kludge_acl is still there to handle the searches. This module is synchronous as the async version was impossible to debug, will be converted to async after some user testing.
2009-11-05s4:torture/rpc/samr - Add a comment for "ValidatePassword" testMatthias Dieter Wallnöfer1-0/+2
2009-11-05s4:dcesrv_samr - Implement "dcesrv_samr_ValidatePassword" using my new check ↵Matthias Dieter Wallnöfer1-7/+49
password call This implements a very basic method for password validation using my new "samdb_check_password" call.
2009-11-05s4:dsdb/common/util - Add a new utility function "samdb_check_password"Matthias Dieter Wallnöfer1-9/+45
This function performs basic password checks and will be used by the "samrValidatePassword" call and the "password_hash" module.
2009-11-05s4:samdb_set_password/samdb_set_password_sid - Better comments and cosmeticsMatthias Dieter Wallnöfer1-28/+34
2009-11-05s4:samdb python bindings - add a wrapper for "dsdb_make_schema_global"Matthias Dieter Wallnöfer1-0/+17
2009-11-05s4:samdb python bindings - make the python wrap connect more like the C oneMatthias Dieter Wallnöfer1-3/+10
Add call for setting the create permissions.
2009-11-05s4:samdb python bindings - Reorder some function bodies to match the order ↵Matthias Dieter Wallnöfer1-25/+24
in "ldb_wrap_connect"
2009-11-05s4:kdc: remove unused struct kpasswd_socketStefan Metzmacher1-10/+0
metze
2009-11-04Added security descriptor for the domain NC to provisioning.Nadezhda Ivanova2-1/+61
Necessary for correct descriptor inheritance. Based on the default state of a single DC. Will be modified later when we support multiple DCs.
2009-11-04s4:provisioning - Fixed minor bugs in provisioning tool and partition module.Endi S. Dewata2-3/+4
2009-11-03s4-smbtorture: skip three info levels while testing s3 with RPC-LSA.Günther Deschner1-3/+14
These are only supported by s3 when running pdb_ads atm. Guenther
2009-11-03s4-smbtorture: skip QueryInfoPolicy2 while running RPC-LSA against s3.Günther Deschner1-0/+4
This is only supported by s3 when running pdb_ads atm. Guenther
2009-11-03s4-smbtorture: skip QueryDomainInformationPolicy test against s3 in RPC-LSA.Günther Deschner1-0/+4
Guenther
2009-11-03s4-smbtorture: simplify some torture_comments in RPC-LSA.Günther Deschner1-20/+6
Guenther
2009-11-03Fixed some missing flags and bugs in the security creation.Nadezhda Ivanova1-11/+47
Also, added some logging. It needs improvement, possibly ability to turn in on and off via configuration file.
2009-11-03Fixed a bug in object specific access checks.Nadezhda Ivanova1-2/+4
2009-11-03Added some dn to the info in the log messages.Nadezhda Ivanova1-3/+3
2009-11-02s4:dsdb Fix up after the MAP_ constants became LDB_MAP_Andrew Bartlett1-13/+13
2009-11-02s4:provision Remove LDB backend files in provisionAndrew Bartlett2-41/+12
Rather than try and remove the records in the LDB files, make the provision remove the whole file. This also removes the need to try and carry forward the old ldb filenames. Andrew Bartlett
2009-11-02s4:provision Split ProvisionBackend out of the main provision scriptAndrew Bartlett3-590/+631
This splits the code, while keeping the original behaviour. The provision.py file had become just too long. Andrew Bartlett
2009-11-02s4:provision Inline 'ldap_backend_shutdown' for clarityAndrew Bartlett1-15/+15
2009-11-02s4:provision Fix samdb test with new provision codeAndrew Bartlett1-3/+12
2009-11-02s4:provision Move 'Schema' into it's own fileAndrew Bartlett5-123/+160
2009-11-02s4:provision Make 'linked_attributes' and 'dnsyntax_attributes' a property ↵Andrew Bartlett1-17/+33
of the Schema
2009-11-02s4:provision Rework provision to always have a ProvisionBackendAndrew Bartlett2-166/+189
Rather than treat the LDAP backend as a special case, treat all backends the same, with different callbacks. Andrew Bartlett
2009-11-02s4 - SID allocation using FDS DNA pluginEndi S. Dewata10-17/+97
2009-11-02s4:dsdb - Removed redundant domain SID filter.Endi S. Dewata1-29/+1
2009-11-02s4:dsdb - Store SID as string in FDS.Endi S. Dewata4-7/+49
2009-11-02s4 - Mapped AD schema to existing FDS schema.Endi S. Dewata5-3/+235
2009-11-02s4:dsdb - Fixed attribute dereferencing for FDSEndi S. Dewata3-20/+126
2009-11-02Remove special case logic in 'samdb_relative_path'.Andrew Bartlett1-3/+0
While this logic (avoiding to prefix a non-filename with a path) is important in the code this was copied from (private_dir()), none of the callers of this function need it. Andrew Bartlett
2009-11-02s4:dsdb Revert back to using DN:filename in the partitions recordAndrew Bartlett2-46/+102
This allows us to change the escaping function without breaking existing installs. The new escaping function (used for new databases) is RFC1738 URI encoding, except for the trivial cases without special characters. The new databases are also placed in a subdirectory, sam.ldb.d per an earlier suggestion by metze. Andrew Bartlett