Stefan Metzmacher [Mon, 23 May 2005 06:54:38 +0000 (06:54 +0000)]
r6938: a minor update, use a better name for the NDR compression subsystem
metze
Stefan Metzmacher [Mon, 23 May 2005 06:49:17 +0000 (06:49 +0000)]
r6937: some minor fixes and updates
metze
Tim Potter [Mon, 23 May 2005 06:02:00 +0000 (06:02 +0000)]
r6936: Have RPC compression depend only on NDR_DRSUAPI instead of NDR_RAW which
pulls it in for everyone.
Simo Sorce [Sun, 22 May 2005 10:40:54 +0000 (10:40 +0000)]
r6935: don't do three things at a time :-)
Simo Sorce [Sun, 22 May 2005 10:27:51 +0000 (10:27 +0000)]
r6934: thanks to HotaruT for pointing out skel.c was not in line with the rest of the code
Tim Potter [Sun, 22 May 2005 10:23:01 +0000 (10:23 +0000)]
r6933: Add a couple of helper functions for creating nbt names.
Tim Potter [Sun, 22 May 2005 10:21:29 +0000 (10:21 +0000)]
r6932: Comment out static function - not used anywhere?
Simo Sorce [Sun, 22 May 2005 10:02:53 +0000 (10:02 +0000)]
r6931: declare this to avoid warnings until we have loadable modules
Tim Potter [Sun, 22 May 2005 09:43:20 +0000 (09:43 +0000)]
r6930: Use NBT_NAME_CLIENT instead of the number 0.
Tim Potter [Sun, 22 May 2005 08:15:10 +0000 (08:15 +0000)]
r6929: LIBCLI_NBT depends on LIB_SECURITY_NDR for various security descriptor
utilities.
Andrew Bartlett [Sat, 21 May 2005 06:31:02 +0000 (06:31 +0000)]
r6928: Add support for printing trusted domain names, sids and passwords in
the Samba4 'net samdump'.
Andrew Bartlett
Andrew Bartlett [Sat, 21 May 2005 05:05:44 +0000 (05:05 +0000)]
r6927: Make it easier to program with the SamSync callback interface, perform
the decryption seperate to the callback functions.
Andrew Bartlett
Jelmer Vernooij [Fri, 20 May 2005 23:19:06 +0000 (23:19 +0000)]
r6926: More build farm fixes:
- Warn about unknown attributes in .mk
- Remove more unused functions
Jelmer Vernooij [Fri, 20 May 2005 14:11:25 +0000 (14:11 +0000)]
r6924: Remove some unused functions.
Stefan Metzmacher [Fri, 20 May 2005 13:58:11 +0000 (13:58 +0000)]
r6922: remove bad file...
metze
Stefan Metzmacher [Fri, 20 May 2005 13:52:40 +0000 (13:52 +0000)]
r6921: preparing for cherry picking merging
Stefan Metzmacher [Fri, 20 May 2005 13:49:14 +0000 (13:49 +0000)]
r6920: display the SVN revision in svk build of tree's directly mirrored from samba.org
metze
Tim Potter [Fri, 20 May 2005 07:46:19 +0000 (07:46 +0000)]
r6919: Jelmer, here is my script for filtering individual binaries/subsystems/etc
out of the samba4-deps.dot file. Use like:
script/depfilter.py regpatch < samba4-deps.dot | dotty -
and then scratch your head and wonder why regpatch has to link with 3/4
of what it does.
Volker Lendecke [Thu, 19 May 2005 15:45:25 +0000 (15:45 +0000)]
r6907: Unixinfo for samba4, not activated by default.
Volker
Stefan Metzmacher [Thu, 19 May 2005 13:35:50 +0000 (13:35 +0000)]
r6904: use "krb5:kdc=yes" in your smb.conf when you have the lorikeet-heimdal kdc running
metze
Andrew Bartlett [Thu, 19 May 2005 11:23:31 +0000 (11:23 +0000)]
r6902: Turn the LDAP server on by default. It is no worse than the others...
(no ACL support)
Andrew Bartlett
Stefan Metzmacher [Wed, 18 May 2005 14:29:23 +0000 (14:29 +0000)]
r6884: the invocationID is only used as objectGUID on the NTDS Settings object on the
first DC in the forest!
metze
Andrew Bartlett [Wed, 18 May 2005 14:19:17 +0000 (14:19 +0000)]
r6883: Move to what simo assures me is the 'correct' way to find the NetBIOS
and long names for a domain.
Add servicePrincipalName mapping table (administrator configurable),
in the same spot as microsoft uses.
Andrew Bartlett
Andrew Bartlett [Wed, 18 May 2005 14:17:53 +0000 (14:17 +0000)]
r6882: Put in configure tests and #ifdef to keep Samba building on older Heimdal.
Andrew Bartlett
Andrew Bartlett [Wed, 18 May 2005 11:50:09 +0000 (11:50 +0000)]
r6879: Another attempt at including the 'right' kerberos headers on
dual-install systems.
Andrew Bartlett
Andrew Tridgell [Wed, 18 May 2005 04:23:12 +0000 (04:23 +0000)]
r6877: added CLDAP testing to test_ldap.sh
Andrew Tridgell [Wed, 18 May 2005 04:18:19 +0000 (04:18 +0000)]
r6876: - fixed a memory leak in the cldap server
- keep the samdb open between requests
Andrew Tridgell [Wed, 18 May 2005 04:17:24 +0000 (04:17 +0000)]
r6875: added a BENCH-CLDAP test. Speed of the cldap server isn't all that important, but it does
help find memory leaks (and in fact, there was one, fixed in next commit)
Jelmer Vernooij [Wed, 18 May 2005 01:11:33 +0000 (01:11 +0000)]
r6874: Fix static library build
Andrew Tridgell [Wed, 18 May 2005 01:03:55 +0000 (01:03 +0000)]
r6873: fixed exec bit
Andrew Tridgell [Tue, 17 May 2005 22:34:38 +0000 (22:34 +0000)]
r6869: removed completely bogus BASE-RW2 test
Simo Sorce [Tue, 17 May 2005 21:46:16 +0000 (21:46 +0000)]
r6868: the @ATTRIBUTES object format has changed
Simo Sorce [Tue, 17 May 2005 21:43:47 +0000 (21:43 +0000)]
r6867: this code will change the way the @ATTRIBUTES object is handled
this object properties are now used as multivalue attributes
now all values inserted are checked against a "valid values table"
eg:
this form is now accepted:
dn: @ATTRIBUTES
uid: CASE_INSENSITIVE
uid: WILDCARD
this form is now rejected:
dn: @ATTRIBUTES
uid: CASE_INSENSITIVE WILDCARD
please update your .ldb files if you make use of @ATTRIBUTES
(sam.ldb heavily uses it)
the code passes all make test tests for both tdb and ldap, it also
passes the new test to check for wrong @ATTRIBUTES attribute values
Simo.
Jelmer Vernooij [Tue, 17 May 2005 20:18:06 +0000 (20:18 +0000)]
r6863: lib-friendlier names + fix some dependencies
Jelmer Vernooij [Tue, 17 May 2005 17:32:25 +0000 (17:32 +0000)]
r6862: Add some more tests
Accept new command-line options --keep, --outputdir and --idl-compiler.
We're currently at 34 IDL tests (...and counting)
Jelmer Vernooij [Tue, 17 May 2005 15:51:35 +0000 (15:51 +0000)]
r6860: Add some allocation and alignment tests, remove uint64 from list of scalars
(it doesn't have any push/pull functions anymore either)
Jelmer Vernooij [Tue, 17 May 2005 13:50:47 +0000 (13:50 +0000)]
r6859: Add ndr_align tests, use environment variables ($CC, $CFLAGS, $LDFLAGS)
where possible.
Jelmer Vernooij [Tue, 17 May 2005 13:19:40 +0000 (13:19 +0000)]
r6857: - Support [public] on functions
- Add some more pidl tests based on ref_notes.txt
We currently fail some tests because we don't default to "ref"
for top-level pointers at the moment. We also fail some of the multi-level
tests.
Jelmer Vernooij [Tue, 17 May 2005 12:17:42 +0000 (12:17 +0000)]
r6856: Add a couple of tests that test for the behaviour described in
tridge's ref_notes.txt document.
Jelmer Vernooij [Tue, 17 May 2005 11:43:46 +0000 (11:43 +0000)]
r6854: Add --quiet option to pidl
Some work on a testsuite for pidl, including one simple test.
Andrew Tridgell [Tue, 17 May 2005 07:38:01 +0000 (07:38 +0000)]
r6853: again fixed SOCKET_WRAPPER_DIR in 'make test'
Andrew Tridgell [Tue, 17 May 2005 07:37:17 +0000 (07:37 +0000)]
r6852: implement an idea from kinkie to make the 'make test' target automatically kill smbd
when finished, using a fifo
this makes 'make test' much safer for build farm usage
Tim Potter [Tue, 17 May 2005 07:15:12 +0000 (07:15 +0000)]
r6851: Typo in comment.
Tim Potter [Tue, 17 May 2005 06:59:29 +0000 (06:59 +0000)]
r6848: Remove some dead/unused code.
Tim Potter [Tue, 17 May 2005 06:39:19 +0000 (06:39 +0000)]
r6847: Fix some unused variable warnings in the libnet torture test.
Andrew Tridgell [Tue, 17 May 2005 06:20:54 +0000 (06:20 +0000)]
r6846: make smbd terminate immediately on EOF from stdin
this will be used to make sure 'make test' kills smbd when finished
Andrew Tridgell [Tue, 17 May 2005 05:48:30 +0000 (05:48 +0000)]
r6845: make the talloc header align to 40 bytes, which costs us an extra 4
bytes per allocation, but makes it much more portable
Jelmer Vernooij [Tue, 17 May 2005 01:13:53 +0000 (01:13 +0000)]
r6842: Move to .mk file
Jelmer Vernooij [Tue, 17 May 2005 00:51:13 +0000 (00:51 +0000)]
r6839: Add support for building subsystems as shared libraries. This can be
done by setting:
OUTPUT_TYPE = SHARED_LIBRARY
in the [SUBSYSTEM::...] section belonging to a subsystem.
The idea is to allow multiple values to OUTPUT_TYPE simultaneously
(e.g. OUTPUT_TYPE = SHARED_LIBRARY, STATIC_LIBRARY, OBJLIST )
Jelmer Vernooij [Tue, 17 May 2005 00:02:55 +0000 (00:02 +0000)]
r6838: Remove unnecessary calls to gensec_gsskrb5
Make the build system give a proper warning about this in the future
Jelmer Vernooij [Mon, 16 May 2005 23:30:34 +0000 (23:30 +0000)]
r6836: Allow optionally passing in a destination filename for NDR parsers
and NDR headers
Andrew Tridgell [Mon, 16 May 2005 22:31:45 +0000 (22:31 +0000)]
r6833: split out the routine that calculates the diff between two ldb messages from ldbedit,
so other progs can use it.
Andrew Tridgell [Mon, 16 May 2005 21:42:11 +0000 (21:42 +0000)]
r6831: talloc now requires config.h (this fixes ldb build)
Andrew Tridgell [Mon, 16 May 2005 21:22:54 +0000 (21:22 +0000)]
r6830: put header checks in config.m4 so when it is included by other projects the right
configure checks are done
Andrew Tridgell [Mon, 16 May 2005 21:09:51 +0000 (21:09 +0000)]
r6829: include the talloc autoconf tests when building ldb standalone
Jelmer Vernooij [Mon, 16 May 2005 21:08:44 +0000 (21:08 +0000)]
r6828: More portability fixes
Jelmer Vernooij [Mon, 16 May 2005 18:57:56 +0000 (18:57 +0000)]
r6825: Fall back to chsize if ftruncate is not available
patch from Steven Edwards
Andrew Bartlett [Mon, 16 May 2005 15:31:02 +0000 (15:31 +0000)]
r6819: More notes on krb5 requirements
Andrew Bartlett
Andrew Tridgell [Mon, 16 May 2005 11:17:57 +0000 (11:17 +0000)]
r6817: - fixed empty ldap search elements in filters
- added support for guids in cldap netlogon searches.
the cldap server now passes the LDAP-CLDAP torture test
Andrew Tridgell [Mon, 16 May 2005 11:16:48 +0000 (11:16 +0000)]
r6816: - fixed debug display of ndr netlogon union
- send a username when scanning to make structure elements clearer
Andrew Tridgell [Mon, 16 May 2005 10:30:51 +0000 (10:30 +0000)]
r6815: fill in values in cldap server as well
Andrew Tridgell [Mon, 16 May 2005 10:21:32 +0000 (10:21 +0000)]
r6814: fill in two more unknown values in cldap responses
Andrew Tridgell [Mon, 16 May 2005 06:33:37 +0000 (06:33 +0000)]
r6812: more talloc portability tweaks
Andrew Bartlett [Mon, 16 May 2005 03:30:18 +0000 (03:30 +0000)]
r6811: Another attempt at better kerberos/gssapi headers.
Andrew Bartlett
Tim Potter [Mon, 16 May 2005 03:17:54 +0000 (03:17 +0000)]
r6810: Rename auth/{ntlmssp,gensec,kerberos} mk and m4 files to be called
config.mk and config.m4 to be consistent with the rest of Samba.
Andrew Tridgell [Mon, 16 May 2005 03:04:58 +0000 (03:04 +0000)]
r6809: ifeq is not portable in make - jelmer, you'll need to find some other way of doing
this if you want detection of socket wrapper :-)
Andrew Tridgell [Mon, 16 May 2005 02:45:36 +0000 (02:45 +0000)]
r6808: - test for gcov not needed
- samba malloc wrapper avoidance not needed now we don't use includes.h
- make testsuite work when BOOL, True, False already defined
Jelmer Vernooij [Mon, 16 May 2005 02:38:50 +0000 (02:38 +0000)]
r6807: Fix in-tree build of talloc testsuite
Andrew Bartlett [Mon, 16 May 2005 02:22:25 +0000 (02:22 +0000)]
r6806: Try again to fix the build on various kerberos libs.
Andrew Bartlett
Jelmer Vernooij [Mon, 16 May 2005 02:18:57 +0000 (02:18 +0000)]
r6805: Remove two remaining references to gensec_gsskrb5
Jelmer Vernooij [Mon, 16 May 2005 01:57:27 +0000 (01:57 +0000)]
r6804: Add config.h for talloc (and use it)
Andrew Bartlett [Mon, 16 May 2005 01:31:22 +0000 (01:31 +0000)]
r6803: Try to bring in the correct GSSAPI headers for the krb5 mech. This
should allow us to ditch the local static storage for OIDs, as well as
fix the build on non-heimdal platforms.
Andrew Bartlett
Andrew Tridgell [Mon, 16 May 2005 01:17:44 +0000 (01:17 +0000)]
r6802: - fixed CFLAGS
- don't fail if we don't have xsltproc
Andrew Bartlett [Mon, 16 May 2005 00:12:39 +0000 (00:12 +0000)]
r6801: It appears that krb5_make_principal, while convenient, is not portable.
Andrew Bartlett
Andrew Bartlett [Sun, 15 May 2005 23:42:11 +0000 (23:42 +0000)]
r6800: A big GENSEC update:
Finally remove the distinction between 'krb5' and 'ms_krb5'. We now
don't do kerberos stuff twice on failure. The solution to this is
slightly more general than perhaps was really required (as this is a
special case), but it works, and I'm happy with the cleanup I achived
in the process. All modules have been updated to supply a
NULL-terminated list of OIDs.
In that process, SPNEGO code has been generalised, as I realised that
two of the functions should have been identical in behaviour.
Over in the actual modules, I have worked to remove the 'kinit' code
from gensec_krb5, and placed it in kerberos/kerberos_util.c.
The GSSAPI module has been extended to use this, so no longer requires
a manual kinit at the command line. It will soon loose the
requirement for a on-disk keytab too.
The general kerberos code has also been updated to move from
error_message() to our routine which gets the Heimdal error string
(which may be much more useful) when available.
Andrew Bartlett
Andrew Bartlett [Sun, 15 May 2005 23:40:22 +0000 (23:40 +0000)]
r6799: Remove a rudundent variable from the context structure - we can figure
this out by asking GENSEC, just like everybody else.
Andrew Bartlett
Andrew Bartlett [Sun, 15 May 2005 23:20:58 +0000 (23:20 +0000)]
r6798: Valgrind pain is not something I look forward to - if we ever fall
back to the 'not /dev/urandom' method of random number generation, I
don't want to be chasing down 'use of uninitialised value' though all
the crypto code.
Andrew Bartlett
Rafal Szczesniak [Sun, 15 May 2005 23:15:03 +0000 (23:15 +0000)]
r6797: Typo fix.
rafal
Andrew Bartlett [Sun, 15 May 2005 22:21:34 +0000 (22:21 +0000)]
r6796: Remove the gensec_gsskrb5 module, which had had all of it's special
features merged back into gensec_gssapi.
(Removed because I've made some API changes, and it isn't worth
'fixing' the rudundent code to cope with changes)
Andrew Bartlett
Jelmer Vernooij [Sun, 15 May 2005 20:16:26 +0000 (20:16 +0000)]
r6795: Make some functions static and remove some unused ones.
Simo Sorce [Sun, 15 May 2005 08:10:48 +0000 (08:10 +0000)]
r6794: spellfix
Andrew Bartlett [Sun, 15 May 2005 03:24:48 +0000 (03:24 +0000)]
r6793: Move auth_sam to use the dnsDomain rather than the
soon-to-be-depricated 'realm'.
Add torture test for this behaviour.
Andrew Bartlet
Andrew Bartlett [Sun, 15 May 2005 03:07:20 +0000 (03:07 +0000)]
r6792: Allow a mech to fail on the first pass at the packet, and still fall
back to the other options.
Andrew Bartlett
Andrew Bartlett [Sun, 15 May 2005 02:51:39 +0000 (02:51 +0000)]
r6791: My early notes on the particular things I have discovered as I learn
kerberos, and how Microsoft constructs their kerberos implementation.
Andrew Bartlett
Jelmer Vernooij [Sat, 14 May 2005 22:16:02 +0000 (22:16 +0000)]
r6790: Use config.h file for ldb and add test for stdint.h
Jelmer Vernooij [Sat, 14 May 2005 16:41:53 +0000 (16:41 +0000)]
r6787: Use debhelper for the debian packages
Stefan Metzmacher [Fri, 13 May 2005 12:22:21 +0000 (12:22 +0000)]
r6781: -add some comments on how attributes and objectClasses are identified in DRSUAPI
-and some comments on what the attribute syntaxes matches what internal datatypes
metze
Andrew Tridgell [Fri, 13 May 2005 11:56:36 +0000 (11:56 +0000)]
r6776: make the cldap torture test not dependent on the realm being set
correctly - it gets the realm from an initial no-attribute search
Simo Sorce [Fri, 13 May 2005 07:41:13 +0000 (07:41 +0000)]
r6768: Fix wrong comment
Tim Potter [Fri, 13 May 2005 06:41:42 +0000 (06:41 +0000)]
r6767: Fix compiler warning.
Andrew Tridgell [Fri, 13 May 2005 06:28:22 +0000 (06:28 +0000)]
r6766: some more cldap tests ...
my best guess now is that w2k3 converts the & in the cldap query to an |
for the ldap search. at least it behaves roughly like that.
Andrew Tridgell [Fri, 13 May 2005 06:10:10 +0000 (06:10 +0000)]
r6765: expanded the cldap test suite to test the usage of the DomainGuid,
AAC, and User attributes in cldap netlogon queries
interestingly, while WinXP generated cldap filters with these set, the
w2k3 cldap server seems to completely ignore them, so I didn't need to
alter our cldap server at all to pass the test :-)
Andrew Tridgell [Fri, 13 May 2005 06:08:49 +0000 (06:08 +0000)]
r6764: added support for DomainGuid, DomainSid, AAC, and User attributes in
cldap netlogon queries
Andrew Tridgell [Fri, 13 May 2005 06:07:53 +0000 (06:07 +0000)]
r6763: added functions in libcli/ldap/ to binary encode some NDR structures into
ldap friendly filter strings
Andrew Tridgell [Fri, 13 May 2005 06:06:19 +0000 (06:06 +0000)]
r6762: with the zone right we don't need a fully qualified site name at all
Andrew Tridgell [Fri, 13 May 2005 05:29:41 +0000 (05:29 +0000)]
r6761: - not everyone is in my domain :-)
- started adding support for the other cldap attributes that XP uses
Jelmer Vernooij [Thu, 12 May 2005 19:31:50 +0000 (19:31 +0000)]
r6760: Update debian packages
Simo Sorce [Thu, 12 May 2005 14:39:03 +0000 (14:39 +0000)]
r6759: let us have a wildcard attribute so that we can set a default for all attributes
example:
*: CASE_INSENSITIVE
by placing it in the @ATTRIBUTES object you make all the matching be case insensitive
to make an excepion to the general rule now you just need to create an entry like:
name: CASE_SENSITIVE
the key CASE_SENSITIVE currently does not exist but has the effect of making the code
ignore the wildcard default flag and being ldb case sensitive by default it let the
"name" attribute be case sensitive again
Tridge, can you look at this commit?
Should we introduce a CASE_SENSITVE/BINARY flag and handle it in the code ?
Simo.
Jelmer Vernooij [Thu, 12 May 2005 10:46:57 +0000 (10:46 +0000)]
r6752: Patch by Steven Edwards to improve portability to mingw32
Andrew Tridgell [Thu, 12 May 2005 09:13:53 +0000 (09:13 +0000)]
r6751: dnsDomain should be CASE_INSENSITIVE (winxp will sometimes do a cldap query with this
in uppercase)