samba.git
10 years agoMerge branch 'master' of /home/tridge/samba/git/combined
Andrew Tridgell [Fri, 18 Sep 2009 21:12:02 +0000 (14:12 -0700)]
Merge branch 'master' of /home/tridge/samba/git/combined

10 years agos4-drs: cope with dupliate linked attributes
Andrew Tridgell [Fri, 18 Sep 2009 21:10:42 +0000 (14:10 -0700)]
s4-drs: cope with dupliate linked attributes

With a w2k8-R2 DC, we sometimes get linked attribute updates via DRS
which are duplicates of entries that we already have. We need to cope
with this by using a remove/add pair in the ldb_modify() to avoid a
"entry already exists" error

10 years agos4:provision_configuration - "sPNMappings": "http" missed on regeneration
Matthias Dieter Wallnöfer [Fri, 18 Sep 2009 19:06:19 +0000 (21:06 +0200)]
s4:provision_configuration - "sPNMappings": "http" missed on regeneration

10 years agos4/provision_configuration - re-add the "sPNMappings"
Matthias Dieter Wallnöfer [Fri, 18 Sep 2009 18:57:57 +0000 (20:57 +0200)]
s4/provision_configuration - re-add the "sPNMappings"

Accidentally removed by a previous commit.

10 years agos4:scripts - Cleans also the rest under the "setup" directory up
Matthias Dieter Wallnöfer [Fri, 18 Sep 2009 18:40:57 +0000 (20:40 +0200)]
s4:scripts - Cleans also the rest under the "setup" directory up

- I removed also the "-H" parameter since those scripts are all thought for the
  use on a local s4 domain controller. Another reason is also the bind as SYSTEM
  account which itself is only possible on local binds.

10 years agos3-rpc_client: fix non initialized structure in rpccli_lsa_lookup_sids_noalloc.
Günther Deschner [Thu, 17 Sep 2009 07:42:49 +0000 (09:42 +0200)]
s3-rpc_client: fix non initialized structure in rpccli_lsa_lookup_sids_noalloc.

Guenther

10 years agos3-smbd: fix get_ea_names_from_file() and check for pnames pointer.
Günther Deschner [Fri, 18 Sep 2009 19:27:55 +0000 (21:27 +0200)]
s3-smbd: fix get_ea_names_from_file() and check for pnames pointer.

This fixes smbd from crashing all the time.

Jeremy, Volker, please check.

Guenther

10 years agos4:various scripts under "setup" - Unification
Matthias Dieter Wallnöfer [Fri, 18 Sep 2009 18:22:03 +0000 (20:22 +0200)]
s4:various scripts under "setup" - Unification

- This unified the shape of those four scripts (comments, command sequence, call
  of SamDB)
- To consider the samdb.py changes regarding the filter: there is now always the
  possibility either to specify the username or the search filter

10 years agos4:domainlevel/pwsettings - Remove unused import
Matthias Dieter Wallnöfer [Fri, 18 Sep 2009 18:21:29 +0000 (20:21 +0200)]
s4:domainlevel/pwsettings - Remove unused import

10 years agos4:samdb.py - Unification of the interfaces
Matthias Dieter Wallnöfer [Fri, 18 Sep 2009 18:16:05 +0000 (20:16 +0200)]
s4:samdb.py - Unification of the interfaces

- When a user account is requested by a call always the search filter will be
  passed as argument. This helps us to unify the API
- Add/fix some comments; in particular new comments inform the developer which
  requirements exist if he wants to use calls which manipulate the
  "userPassword" attribute (On s4 no problem - but on certain domain levels on
  Windows Server)

10 years agos4:minschema/fullschema - add correct header comments
Matthias Dieter Wallnöfer [Fri, 18 Sep 2009 18:15:12 +0000 (20:15 +0200)]
s4:minschema/fullschema - add correct header comments

10 years agos4:rpc_server: remove some now unused code
Stefan Metzmacher [Fri, 18 Sep 2009 09:32:46 +0000 (11:32 +0200)]
s4:rpc_server: remove some now unused code

metze

10 years agos4:ntvfs_ipc: add real named pipe support
Stefan Metzmacher [Tue, 11 Aug 2009 12:50:36 +0000 (14:50 +0200)]
s4:ntvfs_ipc: add real named pipe support

We now open a named via the named_pipe_auth
code and process IO via the tstream interface.

This means we support byte mode and message mode
named pipes.

We also correctly issue NT_STATUS_PIPE_BUSY
when a smb_trans request comes in and a read or smb_trans
is already pending.

We also have support for async dcerpc over ncacn_np now,
and we now can remove the ncacn_np specific hacks from the
rpc_server/ code.

metze

10 years agos4:torture: the spoolss notify test should listen on the ncacn_np endpoint
Stefan Metzmacher [Fri, 1 May 2009 16:19:34 +0000 (18:19 +0200)]
s4:torture: the spoolss notify test should listen on the ncacn_np endpoint

metze

10 years agos4:rpc_server: export dcesrv_add_ep() so that torture tests can use it
Stefan Metzmacher [Fri, 1 May 2009 16:17:10 +0000 (18:17 +0200)]
s4:rpc_server: export dcesrv_add_ep() so that torture tests can use it

metze

10 years agolibcli/named_pipe_auth: pass gssapi delegated credentials through the named pipe
Stefan Metzmacher [Thu, 17 Sep 2009 16:43:41 +0000 (18:43 +0200)]
libcli/named_pipe_auth: pass gssapi delegated credentials through the named pipe

metze

10 years agos4:service_named_pipe: accept delegated credentials
Stefan Metzmacher [Thu, 17 Sep 2009 16:41:00 +0000 (18:41 +0200)]
s4:service_named_pipe: accept delegated credentials

metze

10 years agolibrpc: rerun 'make idl'
Stefan Metzmacher [Thu, 17 Sep 2009 16:33:21 +0000 (18:33 +0200)]
librpc: rerun 'make idl'

metze

10 years agonamed_pipe_auth.idl: add infrastructure to pass delegated credentials
Stefan Metzmacher [Thu, 17 Sep 2009 16:26:57 +0000 (18:26 +0200)]
named_pipe_auth.idl: add infrastructure to pass delegated credentials

metze

10 years agos4:torture: don't use 'pipe' as variable name it's a system call
Stefan Metzmacher [Fri, 1 May 2009 16:20:53 +0000 (18:20 +0200)]
s4:torture: don't use 'pipe' as variable name it's a system call

metze

10 years agos4:heimdal/gssapi/krb5: set cred_handle in _gsskrb5_import_cred
Stefan Metzmacher [Fri, 18 Sep 2009 00:44:49 +0000 (02:44 +0200)]
s4:heimdal/gssapi/krb5: set cred_handle in _gsskrb5_import_cred

metze

10 years agoMerge branch 'master' of /home/tridge/samba/git/combined
Andrew Tridgell [Fri, 18 Sep 2009 18:22:32 +0000 (11:22 -0700)]
Merge branch 'master' of /home/tridge/samba/git/combined

10 years agos3: Fix Coverity ID 581 -- NEGATIVE_RETURNS
Volker Lendecke [Fri, 18 Sep 2009 18:20:07 +0000 (20:20 +0200)]
s3: Fix Coverity ID 581 -- NEGATIVE_RETURNS

10 years agos3:smbstatus: Fix bug 6703, allow smbstatus as non-root
Volker Lendecke [Fri, 18 Sep 2009 16:27:16 +0000 (18:27 +0200)]
s3:smbstatus: Fix bug 6703, allow smbstatus as non-root

We only require a ctdb connection when clustering is enabled. This limits the
restriction for only-root smbstatus to the clustering case.

10 years agos3:smbstatus: Fix some nonempty blank lines
Volker Lendecke [Fri, 18 Sep 2009 16:10:54 +0000 (18:10 +0200)]
s3:smbstatus: Fix some nonempty blank lines

10 years agos4:domainlevel - fix indentations
Matthias Dieter Wallnöfer [Fri, 18 Sep 2009 15:53:23 +0000 (17:53 +0200)]
s4:domainlevel - fix indentations

10 years agos4:domainlevel - Add a script which allows raising the domain/forest level
Matthias Dieter Wallnöfer [Fri, 18 Sep 2009 15:34:02 +0000 (17:34 +0200)]
s4:domainlevel - Add a script which allows raising the domain/forest level

This simple script allows raising the domain and/or forest level for s4.
I integrated also the basic checks (since we don't perform them in LDB yet):
e.g. the forest level can't be higher than the domain level(s).

10 years agos4:pwsettings - Simplify the error handling a bit
Matthias Dieter Wallnöfer [Fri, 18 Sep 2009 15:33:24 +0000 (17:33 +0200)]
s4:pwsettings - Simplify the error handling a bit

10 years agopython: create a script for reorgnizing an LDB file.
Matthieu Patou [Fri, 18 Sep 2009 11:55:57 +0000 (15:55 +0400)]
python: create a script for reorgnizing an LDB file.

  This script helps to reclaim waisted place.

10 years agos4:provision - Bump down the domain and forest level to Windows 2000
Matthias Dieter Wallnöfer [Fri, 18 Sep 2009 14:21:29 +0000 (16:21 +0200)]
s4:provision - Bump down the domain and forest level to Windows 2000

- The DC level we keep on Windows Server 2008 R2 (we should call ourself
  always the newest server type)
- The domain/forest level we set to the minimum (Windows 2000 native) to
  allow all AD DC types (from Windows 2000 on) in our domain - the NT4 "mixed"
  mode isn't supported by us (discussed on mailing list) -> "nTMixedDomain" is
  set always to 0
- I'll add a script which allows to bump the DC level (basically sets the
  "msDS-Behaviour-Version" attributes on the "Partitions/Configuration/DC" and
  on the "DC" object)

10 years agotalloc: don't crash if f is NULL in talloc_report_*
Andrew Tridgell [Thu, 17 Sep 2009 23:42:11 +0000 (16:42 -0700)]
talloc: don't crash if f is NULL in talloc_report_*

It's annoying when you use
  p talloc_report_full(ctx, fopen("/tmp/xx","w"))
in gdb, and if you don't have write permission on the file then
you get a segv.

10 years agos3-rpc: samba3 needs the DCERPC_NDR64 define
Andrew Tridgell [Thu, 17 Sep 2009 23:02:14 +0000 (16:02 -0700)]
s3-rpc: samba3 needs the DCERPC_NDR64 define

10 years agos4-sam: add a note about the solaris client
Andrew Tridgell [Thu, 17 Sep 2009 22:15:58 +0000 (15:15 -0700)]
s4-sam: add a note about the solaris client

10 years agondrdump: fixed help
Andrew Tridgell [Thu, 17 Sep 2009 22:15:36 +0000 (15:15 -0700)]
ndrdump: fixed help

10 years agondr: num_auths is an array size, thus a uint3264
Andrew Tridgell [Thu, 17 Sep 2009 22:15:24 +0000 (15:15 -0700)]
ndr: num_auths is an array size, thus a uint3264

10 years agondr: split out ndr enum functions
Andrew Tridgell [Thu, 17 Sep 2009 22:14:31 +0000 (15:14 -0700)]
ndr: split out ndr enum functions

This allows for easier implementation of the NDR32/NDR64 split

10 years agoidl: recompile our IDL
Andrew Tridgell [Thu, 17 Sep 2009 16:59:50 +0000 (09:59 -0700)]
idl: recompile our IDL

The NDR64 change affects every IDL file

10 years agos4-pidl: add support for NDR64
Andrew Tridgell [Thu, 17 Sep 2009 16:10:21 +0000 (09:10 -0700)]
s4-pidl: add support for NDR64

Added support for NDR64 to the samba4 pidl generator

10 years agos4-rpc: added NDR64 support
Andrew Tridgell [Thu, 17 Sep 2009 16:09:48 +0000 (09:09 -0700)]
s4-rpc: added NDR64 support

This adds support for the nd464 binding string option

10 years agondr: added support for NDR64
Andrew Tridgell [Thu, 17 Sep 2009 16:08:47 +0000 (09:08 -0700)]
ndr: added support for NDR64

This adds NDR64 support for the push functions in libndr

10 years agoutil: use likely/unlikely for NT_STATUS_* macros
Andrew Tridgell [Thu, 17 Sep 2009 16:07:44 +0000 (09:07 -0700)]
util: use likely/unlikely for NT_STATUS_* macros

10 years agolibreplace: added likely()/unlikely() macros for gcc
Andrew Tridgell [Thu, 17 Sep 2009 16:07:17 +0000 (09:07 -0700)]
libreplace: added likely()/unlikely() macros for gcc

These macros allow the compile to better optimise code that has a lot
of if statements. I particularly want to use this for our low level
generated NDR code.

10 years agos3:smbd: Attempt to fix the build on HP/UX
Volker Lendecke [Fri, 18 Sep 2009 01:42:23 +0000 (03:42 +0200)]
s3:smbd: Attempt to fix the build on HP/UX

10 years agos3:smbd: Fix an inappropriate pointer return in a bool fn
Volker Lendecke [Fri, 18 Sep 2009 01:34:55 +0000 (03:34 +0200)]
s3:smbd: Fix an inappropriate pointer return in a bool fn

10 years agos3:winbind: Fix some enum type mismatches found by the Solaris compiler
Volker Lendecke [Fri, 18 Sep 2009 01:28:51 +0000 (03:28 +0200)]
s3:winbind: Fix some enum type mismatches found by the Solaris compiler

10 years agoMerge branch 'master' of /home/tridge/samba/git/combined
Andrew Tridgell [Thu, 17 Sep 2009 22:24:20 +0000 (15:24 -0700)]
Merge branch 'master' of /home/tridge/samba/git/combined

10 years agoidl: regenerate IDL for NDR64 changes
Andrew Tridgell [Thu, 17 Sep 2009 22:16:21 +0000 (15:16 -0700)]
idl: regenerate IDL for NDR64 changes

10 years agos4-sam: add a note about the solaris client
Andrew Tridgell [Thu, 17 Sep 2009 22:15:58 +0000 (15:15 -0700)]
s4-sam: add a note about the solaris client

10 years agondrdump: fixed help
Andrew Tridgell [Thu, 17 Sep 2009 22:15:36 +0000 (15:15 -0700)]
ndrdump: fixed help

10 years agondr: num_auths is an array size, thus a uint3264
Andrew Tridgell [Thu, 17 Sep 2009 22:15:24 +0000 (15:15 -0700)]
ndr: num_auths is an array size, thus a uint3264

10 years agondr: split out ndr enum functions
Andrew Tridgell [Thu, 17 Sep 2009 22:14:31 +0000 (15:14 -0700)]
ndr: split out ndr enum functions

This allows for easier implementation of the NDR32/NDR64 split

10 years agoidl: recompile our IDL
Andrew Tridgell [Thu, 17 Sep 2009 16:59:50 +0000 (09:59 -0700)]
idl: recompile our IDL

The NDR64 change affects every IDL file

10 years agos4-pidl: add support for NDR64
Andrew Tridgell [Thu, 17 Sep 2009 16:10:21 +0000 (09:10 -0700)]
s4-pidl: add support for NDR64

Added support for NDR64 to the samba4 pidl generator

10 years agos4-rpc: added NDR64 support
Andrew Tridgell [Thu, 17 Sep 2009 16:09:48 +0000 (09:09 -0700)]
s4-rpc: added NDR64 support

This adds support for the nd464 binding string option

10 years agondr: added support for NDR64
Andrew Tridgell [Thu, 17 Sep 2009 16:08:47 +0000 (09:08 -0700)]
ndr: added support for NDR64

This adds NDR64 support for the push functions in libndr

10 years agoutil: use likely/unlikely for NT_STATUS_* macros
Andrew Tridgell [Thu, 17 Sep 2009 16:07:44 +0000 (09:07 -0700)]
util: use likely/unlikely for NT_STATUS_* macros

10 years agolibreplace: added likely()/unlikely() macros for gcc
Andrew Tridgell [Thu, 17 Sep 2009 16:07:17 +0000 (09:07 -0700)]
libreplace: added likely()/unlikely() macros for gcc

These macros allow the compile to better optimise code that has a lot
of if statements. I particularly want to use this for our low level
generated NDR code.

10 years agos4:provision - Some rework (continuation)
Matthias Dieter Wallnöfer [Thu, 17 Sep 2009 19:19:24 +0000 (21:19 +0200)]
s4:provision - Some rework (continuation)

- Fix up "servicePrincipalNames" attributes on the DC object
- Add some informative comments (most in "provision_self_join.ldif")
- Add also comments where objects are missing which we may add later when we
  support the feature (mainly for FRS)
- Add "domain updates" objects also under "CN=Configuration" (they exist twice)
- Add the default services under "Services" to allow interoperability with some
  MS client tools
- Smaller changes

10 years agos3: build with pam support when possible
Björn Jacke [Thu, 17 Sep 2009 19:04:52 +0000 (21:04 +0200)]
s3: build with pam support when possible

10 years agoRe-generated idl files with () for enum values.
Jeremy Allison [Thu, 17 Sep 2009 18:28:37 +0000 (11:28 -0700)]
Re-generated idl files with () for enum values.
Jeremy.

10 years agoEnsure we enclose the enum values in brackets to make the cast work.
Jeremy Allison [Thu, 17 Sep 2009 18:27:51 +0000 (11:27 -0700)]
Ensure we enclose the enum values in brackets to make the cast work.
Jeremy.

10 years agoCheck in modified generated files for systems where pidl can't run.
Jeremy Allison [Thu, 17 Sep 2009 18:16:54 +0000 (11:16 -0700)]
Check in modified generated files for systems where pidl can't run.
Jeremy.

10 years agoMerge branch 'master' of ssh://jra@git.samba.org/data/git/samba
Jeremy Allison [Thu, 17 Sep 2009 18:11:23 +0000 (11:11 -0700)]
Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba

10 years agoFix the problem with pidl generating invalid C for enums. According
Jeremy Allison [Thu, 17 Sep 2009 18:08:42 +0000 (11:08 -0700)]
Fix the problem with pidl generating invalid C for enums. According
to the C standard an enum is guarenteed to be an (int), which means
for 4 byte ints specifying a type of 0x80000000 is an invalid value.
The Solaris compiler complains about this. Fix by adding an (int)
cast in front of the value generation.
Jeremy.

10 years agospnego: Support ASN.1 BIT STRING and use it in SPNEGO.
Kouhei Sutou [Thu, 13 Aug 2009 06:12:01 +0000 (15:12 +0900)]
spnego: Support ASN.1 BIT STRING and use it in SPNEGO.

Signed-off-by: Günther Deschner <gd@samba.org>
10 years agopyldb: Don't segfault when invalid type is specified to as_sddl and from_sddl.
Matthieu Patou [Thu, 17 Sep 2009 15:56:02 +0000 (19:56 +0400)]
pyldb: Don't segfault when invalid type is specified to as_sddl and from_sddl.

  Fix bug #6723

10 years agos4:descriptor module - Revert and const fixups
Matthias Dieter Wallnöfer [Thu, 17 Sep 2009 16:37:46 +0000 (18:37 +0200)]
s4:descriptor module - Revert and const fixups

- Revert a change introduced by me since I didn't understood the meaning of the
  version check
- Added some "const" to suppress compiler warnings

10 years agos4:descriptor - cosmetic
Matthias Dieter Wallnöfer [Thu, 17 Sep 2009 16:17:55 +0000 (18:17 +0200)]
s4:descriptor - cosmetic

10 years agos4:libnet_become_dc - Fix some uninitialised variables
Matthias Dieter Wallnöfer [Thu, 17 Sep 2009 16:05:58 +0000 (18:05 +0200)]
s4:libnet_become_dc - Fix some uninitialised variables

10 years agos4:provision - Some rework
Matthias Dieter Wallnöfer [Thu, 17 Sep 2009 14:00:55 +0000 (16:00 +0200)]
s4:provision - Some rework

- Add/change "wellKnownObjects" attributes
- Order entries in "provision_basedn_modify.ldif"
- Add/change "delete entries" object under BASEDN and CONFIGDN
- Fix default version number of "Default domain policy" group policy
- Add "domain updates" objects for interoperability with MS AD maintaining tools
- Show version number in the "oEMInformation" attribute (suggested by ekacnet)
- Smaller fixups

10 years agovoid functions can't return a value. Found by the Solaris compiler.
Jeremy Allison [Thu, 17 Sep 2009 17:04:19 +0000 (10:04 -0700)]
void functions can't return a value. Found by the Solaris compiler.
Jeremy.

10 years agovoid functions can't return a value. Found by the Solaris compiler.
Jeremy Allison [Thu, 17 Sep 2009 17:03:14 +0000 (10:03 -0700)]
void functions can't return a value. Found by the Solaris compiler.
Jeremy.

10 years agovoid functions can't return a value. Found by the Solaris compiler.
Jeremy Allison [Thu, 17 Sep 2009 17:00:31 +0000 (10:00 -0700)]
void functions can't return a value. Found by the Solaris compiler.
Jeremy.

10 years agoWe now pass the Microsoft SMB2 fileio test with EA's and streams...
Jeremy Allison [Thu, 17 Sep 2009 16:29:07 +0000 (09:29 -0700)]
We now pass the Microsoft SMB2 fileio test with EA's and streams...
Jeremy.

10 years agoRemove ununsed variable warning.
Jeremy Allison [Thu, 17 Sep 2009 16:25:25 +0000 (09:25 -0700)]
Remove ununsed variable warning.
Jeremy.

10 years agos4/domain behaviour flags: Fix them up in various locations
Matthias Dieter Wallnöfer [Sun, 13 Sep 2009 10:37:41 +0000 (12:37 +0200)]
s4/domain behaviour flags: Fix them up in various locations

Additional notes:
- Bump the level to Windows Server 2008 R2 (we should support always the latest
  version - if we provision ourself)
- In "descriptor.c" the check for the "domainFunctionality" level shouldn't be
  needed: ACL owner groups (not owner user) are supported since Windows 2000
  Server (first AD edition)
  - I took the argument from: http://support.microsoft.com/kb/329194

10 years agos4/python: flags
Matthias Dieter Wallnöfer [Wed, 9 Sep 2009 19:24:34 +0000 (21:24 +0200)]
s4/python: flags

- Introduce the "userAccountControl", "groupType" and "sAMAccountType" flags
- Corrects the "domain/forestFunctionality" and "domainControllerFunctionality" flags

10 years agolibds/common/flags: various
Matthias Dieter Wallnöfer [Sun, 13 Sep 2009 09:01:44 +0000 (11:01 +0200)]
libds/common/flags: various

- Reorders the header file to have the order "userAccountFlags", "groupType",
  "sAMAccountType" (matches the order in the flag_mapping.c and samldb module)
- Fixes the group account flags properly up
- Fixes the flags for "domain/forestFunctionality" and "domainControllerFunctionality"
  up

10 years agoMerge branch 'master' of /home/tridge/samba/git/combined
Andrew Tridgell [Wed, 16 Sep 2009 10:58:21 +0000 (03:58 -0700)]
Merge branch 'master' of /home/tridge/samba/git/combined

10 years agos4-repl: raise a debug level
Andrew Tridgell [Wed, 16 Sep 2009 10:57:56 +0000 (03:57 -0700)]
s4-repl: raise a debug level

10 years agos4-dsdb: treat uSNHighest as 0 if @REPLCHANGED doesn't exist
Andrew Tridgell [Wed, 16 Sep 2009 10:43:37 +0000 (03:43 -0700)]
s4-dsdb: treat uSNHighest as 0 if @REPLCHANGED doesn't exist

When a partition is first created it still needs a uSNHighest value

10 years agoMerge branch 'master' of /home/tridge/samba/git/combined
Andrew Tridgell [Wed, 16 Sep 2009 10:58:13 +0000 (03:58 -0700)]
Merge branch 'master' of /home/tridge/samba/git/combined

10 years agos4-repl: raise a debug level
Andrew Tridgell [Wed, 16 Sep 2009 10:57:56 +0000 (03:57 -0700)]
s4-repl: raise a debug level

10 years agoMerge branch 'master' of ssh://git.samba.org/data/git/samba
Andrew Tridgell [Wed, 16 Sep 2009 10:57:09 +0000 (03:57 -0700)]
Merge branch 'master' of ssh://git.samba.org/data/git/samba

10 years agoMerge branch 'master' of /home/tridge/samba/git/combined
Andrew Tridgell [Wed, 16 Sep 2009 10:56:07 +0000 (03:56 -0700)]
Merge branch 'master' of /home/tridge/samba/git/combined

10 years agos4-dsdb: treat uSNHighest as 0 if @REPLCHANGED doesn't exist
Andrew Tridgell [Wed, 16 Sep 2009 10:43:37 +0000 (03:43 -0700)]
s4-dsdb: treat uSNHighest as 0 if @REPLCHANGED doesn't exist

When a partition is first created it still needs a uSNHighest value

10 years agolibcli/auth: rewrite schannel sign/seal code to be more generic
Stefan Metzmacher [Wed, 16 Sep 2009 00:03:46 +0000 (02:03 +0200)]
libcli/auth: rewrite schannel sign/seal code to be more generic

This prepares support for HMAC-SHA256/AES.

metze

10 years agolib/crypto: include aes.h into crypto.h
Stefan Metzmacher [Wed, 16 Sep 2009 00:36:49 +0000 (02:36 +0200)]
lib/crypto: include aes.h into crypto.h

metze

10 years agoMerge branch 'master' of /home/tridge/samba/git/combined
Andrew Tridgell [Wed, 16 Sep 2009 03:51:30 +0000 (20:51 -0700)]
Merge branch 'master' of /home/tridge/samba/git/combined

10 years agos4-repl: take advantage of async RPC forwarding
Andrew Tridgell [Wed, 16 Sep 2009 03:51:10 +0000 (20:51 -0700)]
s4-repl: take advantage of async RPC forwarding

This uses async RPC forwarding for the DsReplicaSync call

10 years agos4-rpc: added a module for forwarding RPC requests
Andrew Tridgell [Wed, 16 Sep 2009 03:50:30 +0000 (20:50 -0700)]
s4-rpc: added a module for forwarding RPC requests

dcesrv_irpc_forward_rpc_call() can be used to forward an arbitrary RPC
request to another task in Samba4, with the return being handled
asynchronously.

This is useful for forwarding DRS requests to the repl or kcc tasks

10 years agoMerge branch 'master' of /home/tridge/samba/git/combined
Andrew Tridgell [Wed, 16 Sep 2009 02:53:05 +0000 (19:53 -0700)]
Merge branch 'master' of /home/tridge/samba/git/combined

10 years agos4-drs: lock down key DRS calls
Andrew Tridgell [Wed, 16 Sep 2009 02:26:33 +0000 (19:26 -0700)]
s4-drs: lock down key DRS calls

The key DRS calls should only be allowed by administrators or domain
controllers

10 years agos4-security: added a new security level SECURITY_DOMAIN_CONTROLLER
Andrew Tridgell [Wed, 16 Sep 2009 02:25:45 +0000 (19:25 -0700)]
s4-security: added a new security level SECURITY_DOMAIN_CONTROLLER

This will be used as a simple way to lock down DRS replication to
administrators and domain controllers

10 years agoMerge branch 'master' of /home/tridge/samba/git/combined
Andrew Tridgell [Wed, 16 Sep 2009 01:46:18 +0000 (18:46 -0700)]
Merge branch 'master' of /home/tridge/samba/git/combined

10 years agos4-ldb: ldap attribute names can contain a '.'
Andrew Tridgell [Tue, 15 Sep 2009 21:07:43 +0000 (14:07 -0700)]
s4-ldb: ldap attribute names can contain a '.'

When they are of the form of OIDs

10 years agos4-ldb: expose ldb_transaction_prepare_commit() in ldb
Andrew Tridgell [Tue, 15 Sep 2009 21:07:06 +0000 (14:07 -0700)]
s4-ldb: expose ldb_transaction_prepare_commit() in ldb

It is useful to be able to control the 2 phase commit from application
code (s4 replication uses it)

10 years agos4-repl: don't do double replication
Andrew Tridgell [Tue, 15 Sep 2009 21:06:07 +0000 (14:06 -0700)]
s4-repl: don't do double replication

When we replicate from a remote DC, we need to note the new uSN that
the local changes have resulted in, and modify the uSN that the notify
task uses to determine if it should send a ReplicaSync message back to
the remote DC. Otherwise we end up always triggering a ReplicaSync
every time we replicate from another DC

10 years agotdb: allow reads after prepare commit
Andrew Tridgell [Tue, 15 Sep 2009 21:04:22 +0000 (14:04 -0700)]
tdb: allow reads after prepare commit

We previously only allowed a commit to happen after a prepare
commit. It is in fact safe to allow reads between a prepare and a
commit, and the s4 replication code can make use of that, so allow it.

10 years agos4-drs: filter based on local_usn
Andrew Tridgell [Tue, 15 Sep 2009 18:47:42 +0000 (11:47 -0700)]
s4-drs: filter based on local_usn

The getncchanges uSN is in our local space, so we must compare it to
the local_usn in replPropertyMetaData