summaryrefslogtreecommitdiff
path: root/source4
AgeCommit message (Collapse)AuthorFilesLines
2010-09-11s4:dcesrv_samr_GetGroupsForUser - also universal group memberships are ↵Matthias Dieter Wallnöfer1-2/+3
returned here Tested using User Manager for Domains against Windows Server 2008. MS-SAMR 3.1.5.9.1 is wrong in this case therefore I've informed the dochelp team.
2010-09-11s4-privs Fix enum privileges in LSARPC serverAndrew Bartlett1-1/+1
We were returning the index, not the LUID value Andrew Bartlett
2010-09-11s4:gensec Put the "NTLM" string for NTLMSSP's SASL name in a headerAndrew Bartlett2-1/+3
2010-09-11s4-param: removed the lp_ varients of the functionsAndrew Tridgell1-18/+9
these made debugging much harder. We should replace these with generated macros
2010-09-11s4-param: move back to auto-generation of loadparm prototypesAndrew Tridgell3-161/+7
2010-09-11s4-credentials: get all attributes in cli_credentials_set_secrets()Andrew Tridgell1-17/+1
This ensures we get whenChanged, which is needed by the s3 winbind code to ensure we don't repeatedly try to change the password
2010-09-11libcli/security Use talloc_zero when making a struct security_tokenAndrew Bartlett2-7/+1
2010-09-11s4-privs Seperate rights and privilegesAndrew Bartlett2-39/+55
These are related, but slightly different concepts. The biggest difference is that rights are not enumerated as a system-wide list. This moves the rights to security.idl due to dependencies. Andrew Bartlett
2010-09-11s4-rpc_server Put all 'logon failure' messages at the same debug level 4Andrew Bartlett1-4/+6
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s4-lsa: privilege IDs should use the enum, not an intAndrew Tridgell1-1/+1
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-11libcli/security Make sec_privilege_from_index() return SEC_PRIV_INVALID on ↵Andrew Bartlett1-1/+1
failure This is clearer and more consistent than using a magic -1 return Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11libcli/security make sec_privilege_id() return SEC_PRIV_INVALID on failure.Andrew Bartlett2-6/+6
Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11libcli/security Move source4/ privileges code into the common libcli/securityAndrew Bartlett3-310/+2
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s4-privs Add a lookup by index of privilagesAndrew Bartlett2-3/+14
Now that privileges are no longer given luid values sequentially, we need another way to look them up for enumeration. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11privs Add my CopyrightAndrew Bartlett1-0/+1
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-11s4-privs Remove link between enum sec_privilege and the privilege bitmapAndrew Bartlett1-17/+69
This allows us to set the enum sec_privilege constants to the LUID values that are seen from windows, which we need to match, in order to preserve the support for the NT Print Migrator tool after a merge with the source3/ privileges code. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-10s4/pvfs: use monotonic time for this timeoutBjörn Jacke2-4/+4
2010-09-10s4/ldap: use time_mono for reconnect timeoutBjörn Jacke1-2/+2
2010-09-10s4/torture: use time_mono for timeoutsBjörn Jacke1-2/+2
2010-09-10s4/torture: use time_mono for delta timeBjörn Jacke1-2/+2
2010-09-10s4:client/client.c - fix wrong return codes in "do_connect"Matthias Dieter Wallnöfer1-2/+2
Detected by the Solaris cc compiler.
2010-09-10s4:lib/policy/gp_filesys.c - remove dead codeMatthias Dieter Wallnöfer1-2/+0
Found out by Solaris cc
2010-09-10s4:torture/locktest.c - add a cast in order to quiet a warning on Solaris ccMatthias Dieter Wallnöfer1-1/+1
2010-09-10s4:libcli/wrepl/winsrepl.c - add more "char *" casts in order to suppress ↵Matthias Dieter Wallnöfer1-1/+1
Solaris warnings
2010-09-10s4:torture/ntp/ntp_signd.c - add more "char *" casts in order to suppress ↵Matthias Dieter Wallnöfer1-2/+2
Solaris warnings
2010-09-10s4:torture/rpc/winreg.c - hopefully this attempt fixes Solaris "cc" on the ↵Matthias Dieter Wallnöfer1-27/+10
buildfarm The Solaris "cc" incompatiblity on this codepart seems to be harder to fix than it looks like.
2010-09-10s4:getncchanges_change_master - also in this call "i" needs to be unsignedMatthias Dieter Wallnöfer1-1/+2
2010-09-10s4-errormap: map ERRSRV/ERRbaduid to NT_STATUS_USER_SESSION_DELETEDStefan Metzmacher1-0/+1
metze
2010-09-10s4:provision: remember the setup directory if it wasn't the defaultStefan Metzmacher4-0/+11
This fixes make test without a make install. metze
2010-09-10s4/fsmo: Change return type from NTSTATUS to WERROR for drepl_takeFSMOroleAnatoliy Atanasov3-4/+5
This removed an unnecessary conversion of the return type in drepl_take_FSMO_role.
2010-09-10s4/fsmo: Fix callback declarationAnatoliy Atanasov1-1/+2
2010-09-10s4-drs: return DRSUAPI_EXOP_ERR_SUCCESS in extended_retKamen Mazdrashki1-0/+1
in case we are handling extended operation. It seems that windows accept both DRSUAPI_EXOP_ERR_SUCCESS and DRSUAPI_EXOP_ERR_NONE, but Samba is a little bit more picky on this.
2010-09-10s4-drs: Hanlde extended operations only onceKamen Mazdrashki1-40/+45
Most of extended operations I know of work like: 1. do extended operation 2. collect a set of objects to return and start replication cycle 3. continue returning object as we have no more to give This way we ensure we are doing 1. only once
2010-09-10s4-dreplsrv: fix 'dn' for partition object being createdKamen Mazdrashki1-1/+9
2010-09-10s4-drs-fsmo: try to dispatch ops in queue as soon as possibleKamen Mazdrashki1-1/+9
In most cases this will transfer of schema master role to look like a synchronous operation.
2010-09-10s4/fsmo: Added python tests for schema master transfer opAnatoliy Atanasov2-0/+153
2010-09-10s4-fsmo: update FSMO changes for recent IRPC workAndrew Tridgell2-7/+13
the IRPC API has changed Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-10s4/drs: update repsFrom only when we are not in getncchanges extended opAnatoliy Atanasov1-4/+4
2010-09-10s4-ldap: Added support for FSMO role transfer via LDAP by modify on rootDSENadezhda Ivanova1-1/+46
GetNCChanges with the corresponding extended operation is initiated and added to the queue when a modify request is received on becomeSchemaMaster, becomeRidMaster, becomeNamingMaster, becomeInfrastructureMaster and becomePDC attributes in rootDSE.
2010-09-10s4-rpc: Added handling of fsmo role transfer to GetNCChangesNadezhda Ivanova1-0/+108
This adds support for DRSUAPI_EXOP_FSMO_REQ_ROLE, DRSUAPI_EXOP_FSMO_RID_REQ_ROLE and DRSUAPI_EXOP_FSMO_REQ_PDC. Developed in collaboration with Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
2010-09-10s4-irpc: Added internal rpc call DREPL_TAKEFSMOROLENadezhda Ivanova1-1/+10
It schedules a getncchanges with extended op 6, to be used when a modify request on becomeROLEMaster atteibute on rootDSE is received.
2010-09-10s4-drs: Implementation of GetNCChanges extended op 6 - fsmo role transferNadezhda Ivanova4-2/+170
Basically the candidate owner makes a getncchanges call with extended op 6 when they want to become the new owner. The current owner then updates the corresponding fSMORoleOwner attribute in its database with the new owner, and replicates the change to the candidate, who then becomes the owner. The patch was made in cooperation with Anatoliy Atanasov <anatoliy.atanasov@postpath.com> who kindly helped to debug it.
2010-09-10s4-drs: Refactored drepl_service and send_ridalloc_request so that the ↵Nadezhda Ivanova2-27/+48
structures can be used for other extended ops
2010-09-10s4/torture: use time_mono for deltas in lock testBjörn Jacke1-22/+22
2010-09-10s4-smbtorture: add spoolss_OpenPrinter with unc and printername in ↵Günther Deschner1-4/+18
RPC-SPOOLSS-PRINTSERVER. Guenther
2010-09-09s4:client/cifsdd.c - restore Solaris cc compatibilityMatthias Dieter Wallnöfer1-11/+10
"static const struct"s need to be global in order to work with Solaris cc.
2010-09-09s4:torture/rpc/winreg.c - restore Solaris cc compatibilityMatthias Dieter Wallnöfer1-71/+72
"static const struct"s need to be global in order to work with Solaris cc.
2010-09-09s4:libcli/security/*.c - fix some wrong typed countersMatthias Dieter Wallnöfer3-10/+7
According to "librpc/gen_ndr/security.h" they need to be "uint32_t".
2010-09-09s4-dreplsrv: Do allocations on long-living context so that callback gets calledKamen Mazdrashki1-1/+1
2010-09-09s4-drs-test: Add 'reset' and 'replace' tests for drsuapi_DsReplicaUpdateRefsKamen Mazdrashki1-4/+28
At first I got the impression we are not handling those cases, but after those tests surprisingly passed I saw that we have correct behavior implemented in a helper function. So I decided to commit those tests in case someone change the strange-looking check for DRSUAPI_DRS_ADD_REF flag in a function that handles delete operation :)