15 years agor4541: make use of new enum and bitmap features
Stefan Metzmacher [Wed, 5 Jan 2005 16:48:58 +0000 (16:48 +0000)]
r4541: make use of new enum and bitmap features

(This used to be commit fd96a07c5a1f4969bfd04ffd3b6990a2dad41cf4)

15 years agor4540: sync enum and bitmap code
Stefan Metzmacher [Wed, 5 Jan 2005 16:31:05 +0000 (16:31 +0000)]
r4540: sync enum and bitmap code

(This used to be commit 2f3aea72ee7d9d90f7b910d11bdd1e96f9f0ebe1)

15 years agor4536: make use of the new enum and bitmap feature of pidl
Stefan Metzmacher [Wed, 5 Jan 2005 15:37:43 +0000 (15:37 +0000)]
r4536: make use of the new enum and bitmap feature of pidl

(This used to be commit 7702d0f9775878c4d7535d9135f41d156146f8d1)

15 years agor4535: add full support for
Stefan Metzmacher [Wed, 5 Jan 2005 15:36:26 +0000 (15:36 +0000)]
r4535: add full support for

typedef bitmap {
    FLAG1 = 0x01
} fooflags;

typedef struct {
    fooflags flags;

(This used to be commit 052a7d4f9a3a178149c65a616fdfd87152dff7eb)

15 years agor4534: update the yapp generated code
Stefan Metzmacher [Wed, 5 Jan 2005 15:28:10 +0000 (15:28 +0000)]
r4534: update the yapp generated code

(This used to be commit afef9b10481da3857d3cba598a71c01b827f29de)

15 years agor4533: parsing support for:
Stefan Metzmacher [Wed, 5 Jan 2005 15:26:48 +0000 (15:26 +0000)]
r4533: parsing support for:

typedef [bitmap16bit] bitmap {
FLAG1 = 0x0001,
FLAG2 = 0x8000
} fooflags;

(This used to be commit 192f2495468d5d0c5889d94ca791aa8f371514e8)

15 years agor4532: - rename bitmap -> bits
Stefan Metzmacher [Wed, 5 Jan 2005 15:24:20 +0000 (15:24 +0000)]
r4532: - rename bitmap -> bits

the next commit is support for typedef bitmap {...}; in pidl

(This used to be commit bd06a85cb747aea29a400050cb9d25a3240ef1cc)

15 years agor4531: Include the OID locally, as it seems to be hard to get the includes
Andrew Bartlett [Wed, 5 Jan 2005 10:21:08 +0000 (10:21 +0000)]
r4531: Include the OID locally, as it seems to be hard to get the includes

Andrew Bartlett
(This used to be commit a742ea1e1221058ae6a99e317fbf18c80bc49aed)

15 years agor4530: Start adding a bit of Doxygen compatible documentation comments to GENSEC.
Andrew Bartlett [Wed, 5 Jan 2005 03:21:45 +0000 (03:21 +0000)]
r4530: Start adding a bit of Doxygen compatible documentation comments to GENSEC.

Andrew Bartlett
(This used to be commit c7acea9d5a097b51693f41de93274b857f7be0e3)

15 years agor4526: - much simpler (and more accurate!) ndr_size_*() code generation. It
Andrew Tridgell [Wed, 5 Jan 2005 02:01:19 +0000 (02:01 +0000)]
r4526: - much simpler (and more accurate!) ndr_size_*() code generation. It
  is less efficient, but I really doubt that matters.

- use enum in epmapper.idl for protocol type

- added support for "enum8bit" flag, used in epmapper.idl
(This used to be commit 1a24a50384b7f588844cd012f1218ca242ca4507)

15 years agor4524: converted a few bits of samr.idl to use enum properly
Andrew Tridgell [Wed, 5 Jan 2005 00:41:49 +0000 (00:41 +0000)]
r4524: converted a few bits of samr.idl to use enum properly
(This used to be commit 82313fb79eb361d7cee06ada21c537a7cc57970e)

15 years agor4523: the PROPERTIES change for typedef was not quite as simple as I thought. This...
Andrew Tridgell [Wed, 5 Jan 2005 00:31:28 +0000 (00:31 +0000)]
r4523: the PROPERTIES change for typedef was not quite as simple as I thought. This puts in a workaround
that fixes things for now
(This used to be commit 0939b83a0f07563edc6448fb6a87a573dbaa9f6c)

15 years agor4522: PROPERTIES are now handled at the typedef level
Andrew Tridgell [Wed, 5 Jan 2005 00:14:29 +0000 (00:14 +0000)]
r4522: PROPERTIES are now handled at the typedef level
(This used to be commit 73d5a033e8e9de536239c53e8a063e9be0eff701)

15 years agor4521: fixed up the handling of PROPERTIES elements after the change to support enum
Andrew Tridgell [Wed, 5 Jan 2005 00:09:29 +0000 (00:09 +0000)]
r4521: fixed up the handling of PROPERTIES elements after the change to support enum
(This used to be commit dee8eff2590be58c59b0db089fcca4af3e011c42)

15 years agor4520: added a enum test function to the echo pipe
Andrew Tridgell [Tue, 4 Jan 2005 23:27:12 +0000 (23:27 +0000)]
r4520: added a enum test function to the echo pipe
(This used to be commit f9e0aa1ab1faac039893db241819907c9c4bb510)

15 years agor4519: added the enum print function in ndr_basic.c
Andrew Tridgell [Tue, 4 Jan 2005 23:26:12 +0000 (23:26 +0000)]
r4519: added the enum print function in ndr_basic.c
(This used to be commit 29955004aa256d5ac27b941f48384ab97ff5e4b8)

15 years agor4518: added proper support for "typedef enum" in pidl. We can now use enums as types...
Andrew Tridgell [Tue, 4 Jan 2005 23:25:25 +0000 (23:25 +0000)]
r4518: added proper support for "typedef enum" in pidl. We can now use enums as types in switch
statements and variable types, and the value will be printed with its string name and value
(This used to be commit 1852033f2ec7584657d586e44d25a280959e4d81)

15 years agor4517: Revert previous commit about giving arrays of scalars their own subtree.
Tim Potter [Tue, 4 Jan 2005 23:15:33 +0000 (23:15 +0000)]
r4517: Revert previous commit about giving arrays of scalars their own subtree.
Generate code to display using proto_tree_add_bytes() instead.
(This used to be commit 6e480fab3a0f70ae17dd7c0b39da924361a354d5)

15 years agor4513: add experimental modification attribute checking
Simo Sorce [Tue, 4 Jan 2005 15:18:50 +0000 (15:18 +0000)]
r4513: add experimental modification attribute checking
still not complete but works with add and replace, not tested with delete
lot of duplicated code to remove
(This used to be commit ea051f6cd39d0e729bb425eb08034a0eee0996dc)

15 years agor4512: Give arrays of scalar types their own subtree.
Tim Potter [Tue, 4 Jan 2005 06:35:53 +0000 (06:35 +0000)]
r4512: Give arrays of scalar types their own subtree.
(This used to be commit b9432130959aeaab6d1720ac2c6f99e3d8f9e037)

15 years agor4511: Remove a crapload of dead code.
Tim Potter [Tue, 4 Jan 2005 05:21:24 +0000 (05:21 +0000)]
r4511: Remove a crapload of dead code.
(This used to be commit 0f50ed8260ce37c21d8ad62b5a257f22ab4a5534)

15 years agor4510: Some more tests for RPC-NETLOGON, checking the idea that we could
Andrew Bartlett [Tue, 4 Jan 2005 03:06:23 +0000 (03:06 +0000)]
r4510: Some more tests for RPC-NETLOGON, checking the idea that we could
combine the NTLM and LMv2 responses, for maximum compatability from a
client perspective, allowing access to servers that require NTLMv2, as
well as those that don't support it.

Currently, this is unfortunetly not possible against Win2k3 (and Samba
is being coded to match that behaviour at this point).

Andrew Bartlett
(This used to be commit 93b46ebe0f3cccd26b5ddd213553667e612c3701)

15 years agor4509: Add missing cr.
Tim Potter [Mon, 3 Jan 2005 23:28:45 +0000 (23:28 +0000)]
r4509: Add missing cr.
(This used to be commit 60f266bf6a30eee485c4f498569201ac50f85120)

15 years agor4508: - simplify the code and allocate only in one place
Stefan Metzmacher [Mon, 3 Jan 2005 14:45:17 +0000 (14:45 +0000)]
r4508: - simplify the code and allocate only in one place

- the ZERO_STRUCT(r->out) is useless and wrong if we would have a [ref,out] parameter
  also note the r->out is already initialized by the pidl generated code

(This used to be commit 09727d3d4acdc90165f37ef726ba6f6ef6f77b98)

15 years agor4507: this default is unnneded because the switch level is in the r->in
Stefan Metzmacher [Mon, 3 Jan 2005 14:42:59 +0000 (14:42 +0000)]
r4507: this default is unnneded because the switch level is in the r->in

(This used to be commit d60b2f094e89462b435063142a290034675a1132)

15 years agor4506: fix compiler warnings
Stefan Metzmacher [Mon, 3 Jan 2005 14:38:05 +0000 (14:38 +0000)]
r4506: fix compiler warnings

(This used to be commit 1c6accd7cbf9ccb7f642b85200671b9d4fe23f47)

15 years agor4505: Add a first very basic schema module
Simo Sorce [Mon, 3 Jan 2005 14:05:47 +0000 (14:05 +0000)]
r4505: Add a first very basic schema module
To use it you should provide a schema.ldb file where the schema is stored
and load the module in the ldb you want to have schema check activated

more info soon.

currently schema checks are performed only on new object creation not on modifications

(This used to be commit b8bb62f14419efd434a344606fb3f753384761a0)

15 years agor4504: Setting
Andrew Bartlett [Mon, 3 Jan 2005 09:00:37 +0000 (09:00 +0000)]
r4504: Setting

.enabled = True

on modules we know are good (and we want on be default) seems neater.

Andrew Bartlett
(This used to be commit 18850c66b7c8ac5e8caf08151dbb9b72cf93230f)

15 years agor4503: add an error reporting function (fixes)
Simo Sorce [Mon, 3 Jan 2005 08:59:00 +0000 (08:59 +0000)]
r4503: add an error reporting function (fixes)
(This used to be commit d11732f4f7f9bc535222aa7a6dd2f15cf5002a4d)

15 years agor4502: add an error reporting function
Simo Sorce [Mon, 3 Jan 2005 08:52:39 +0000 (08:52 +0000)]
r4502: add an error reporting function
(This used to be commit 985a58a16d04f3b92b4bbff86f6c466385f01321)

15 years agor4501: when copying files it is common for clients to copy the ACL. When the
Andrew Tridgell [Mon, 3 Jan 2005 07:57:05 +0000 (07:57 +0000)]
r4501: when copying files it is common for clients to copy the ACL. When the
ACL is the default ACL this menas the copied file would have an xattr
but the original would not. Avoid this by checking if the ACL being
set is the original ACL, and avoid the copy.
(This used to be commit 1df985a49b200a41eed39023aa668afb233f2e53)

15 years agor4500: Allow GENSEC modules to be disabled by setting a flag on their module
Andrew Bartlett [Mon, 3 Jan 2005 07:08:14 +0000 (07:08 +0000)]
r4500: Allow GENSEC modules to be disabled by setting a flag on their module
definition, not by hardcoded reference in loadparm.c

Andrew Bartlett
(This used to be commit 43558eaf7604d2bb0187e0d1ba0686935a965ad7)

15 years agor4499: Almost make our Samba4 server pass the RPC-SAMLOGON torture test.
Andrew Bartlett [Mon, 3 Jan 2005 06:23:02 +0000 (06:23 +0000)]
r4499: Almost make our Samba4 server pass the RPC-SAMLOGON torture test.

I just need to fix a couple of NTLMv2 issues before we can fully pass,
and put this in, as a 'should pass' test.

Andrew Bartlett
(This used to be commit 4b52409e385366d87724bb79f4fad4803e8ecfec)

15 years agor4498: arrgh, really fix the typo this time
Andrew Tridgell [Mon, 3 Jan 2005 02:53:06 +0000 (02:53 +0000)]
r4498: arrgh, really fix the typo this time
(This used to be commit fc338f6ce28bb14e31cdf7a5b36af12ade39093a)

15 years agor4497: fixed a typo
Andrew Tridgell [Mon, 3 Jan 2005 02:47:00 +0000 (02:47 +0000)]
r4497: fixed a typo
(This used to be commit 2f6107ea9af125a031479dd863447eeadd8e5cfc)

15 years agor4496: expanded info on testing your filesystem for xattr support
Andrew Tridgell [Mon, 3 Jan 2005 02:26:14 +0000 (02:26 +0000)]
r4496: expanded info on testing your filesystem for xattr support
(This used to be commit bf9dfcc5e2f1b3fb827d4625ebaa2e75b754c76c)

15 years agor4495: Some more regexps for handling stuff in the lsa and samr pipes -
Tim Potter [Mon, 3 Jan 2005 00:26:50 +0000 (00:26 +0000)]
r4495: Some more regexps for handling stuff in the lsa and samr pipes -
various types of arrays and relative structures.
(This used to be commit 9f99d94ff5863b2da05f2283639852306bfbc74d)

15 years agor4494: Allow gensec_gssapi to use the SPNEGO mech provided by Heimdal (off by
Andrew Bartlett [Sun, 2 Jan 2005 23:53:14 +0000 (23:53 +0000)]
r4494: Allow gensec_gssapi to use the SPNEGO mech provided by Heimdal (off by
default at this point), and include the GSSAPI OIDs in our source, per
advice by lha that this is easier than getting the includes right.

Andrew Bartlett
(This used to be commit 9ff8b2b4d12d364084df5c95a752ce2a0546053d)

15 years agor4493: change name of README.gcov so it doesn't get deleted by "make clean" :-)
Andrew Tridgell [Sun, 2 Jan 2005 23:48:07 +0000 (23:48 +0000)]
r4493: change name of README.gcov so it doesn't get deleted by "make clean" :-)
(This used to be commit 209ba7b889823f1badb0337412b2b9b34c5e23de)

15 years agor4492: is a pointer that needs to be allocated before use
Andrew Tridgell [Sun, 2 Jan 2005 23:44:08 +0000 (23:44 +0000)]
r4492: is a pointer that needs to be allocated before use
(This used to be commit f830adc54ada7f38f964a6ccb5270d2791325dd5)

15 years agor4491: don't dereference q1.out.sam unless we know it is not NULL
Andrew Tridgell [Sun, 2 Jan 2005 23:36:02 +0000 (23:36 +0000)]
r4491: don't dereference q1.out.sam unless we know it is not NULL
(This used to be commit 77e14c28584c5917f22672b304cb0f8e37e883fd)

15 years agor4490: when implementing one rpc server call in terms of another call, you
Andrew Tridgell [Sun, 2 Jan 2005 23:31:12 +0000 (23:31 +0000)]
r4490: when implementing one rpc server call in terms of another call, you
must zero r.out before making the 2nd call if the 2nd call has any
non-ref out parameters. This is needed for the case where the 2nd call
fails, and the 1st call would then fill in its out fields based on
uninitialised memory.
(This used to be commit 202470326dcfaa5d36aaaf6be47eec40fed50402)

15 years agor4489: Remove an obsolete file.
Tim Potter [Sun, 2 Jan 2005 23:25:25 +0000 (23:25 +0000)]
r4489: Remove an obsolete file.
(This used to be commit 446b2cf99641956b9bdede4364c93232d914c678)

15 years agor4488: removed an unused variable
Andrew Tridgell [Sun, 2 Jan 2005 23:09:11 +0000 (23:09 +0000)]
r4488: removed an unused variable
(This used to be commit 1dfc41c9a3b6418236a1f04b5cf3f9ef9e8b608e)

15 years agor4487: fixed the use of ldb_msg_add_*() in the samr password backend
Andrew Tridgell [Sun, 2 Jan 2005 23:05:27 +0000 (23:05 +0000)]
r4487: fixed the use of ldb_msg_add_*() in the samr password backend
(This used to be commit d79cc8b901ef273547bab2f66355e075da61ce9b)

15 years agor4486: fixed some memory leaks in the new ldb code, by ensuring that memory is always
Andrew Tridgell [Sun, 2 Jan 2005 23:03:50 +0000 (23:03 +0000)]
r4486: fixed some memory leaks in the new ldb code, by ensuring that memory is always
allocated as a child of the right context
(This used to be commit 1071712cf5951fa2e94f314bd7678cfa51b2dbcd)

15 years agor4485: remove unused TODO comment we already handle the DS_ROLE_STANDALONE_SERVER...
Stefan Metzmacher [Sun, 2 Jan 2005 16:25:30 +0000 (16:25 +0000)]
r4485: remove unused TODO comment we already handle the DS_ROLE_STANDALONE_SERVER case

(This used to be commit 7ab9de14afa8abb44f0f6c16217964618fcaf894)

15 years agor4484: - use the nTMixedDomain attribute to check if our domain is mixed mode or not
Stefan Metzmacher [Sun, 2 Jan 2005 16:24:05 +0000 (16:24 +0000)]
r4484: - use the nTMixedDomain attribute to check if our domain is mixed mode or not

(This used to be commit 7fe9550375a7a922f9fc93944acaf7915ee107c1)

15 years agor4483: - rename same structs, enums and uninons of the dssetup pipe
Stefan Metzmacher [Sun, 2 Jan 2005 16:11:59 +0000 (16:11 +0000)]
r4483: - rename same structs, enums and uninons of the dssetup pipe
  to match the style we are using in other pipes

- first fillin local vars and only set the out parameter on success

- for the server code only to the samdb lookup when it's needed

NOTE: the DsRoleGetPrimaryDomainInformation() code with DS_ROLE_MEMBER_SERVER
      is not tested yet, does someone has a w2k3 member server to test with?

(This used to be commit e6d1136497f501fe0687bfb34a155db6a9d87bde)

15 years agor4482: in ads mixed mode there are also only one PDC and multiple BDC's
Stefan Metzmacher [Sun, 2 Jan 2005 16:06:21 +0000 (16:06 +0000)]
r4482: in ads mixed mode there are also only one PDC and multiple BDC's

(This used to be commit 30980d218495d389d7a5db4b190ed717217c08d4)

15 years agor4481: get rid of the last leak
Andrew Tridgell [Sun, 2 Jan 2005 13:04:32 +0000 (13:04 +0000)]
r4481: get rid of the last leak
(This used to be commit 52de02b2c31eefac75ce0582ed8acae8007e7cc2)

15 years agor4480: autofree the dcom proxy tables
Andrew Tridgell [Sun, 2 Jan 2005 12:56:21 +0000 (12:56 +0000)]
r4480: autofree the dcom proxy tables
(This used to be commit 973acf7bbdb7bd71f052aca15d0189f2e2069fd4)

15 years agor4479: added the function talloc_autofree_context() which returns a talloc context...
Andrew Tridgell [Sun, 2 Jan 2005 12:55:33 +0000 (12:55 +0000)]
r4479: added the function talloc_autofree_context() which returns a talloc context that
will automatically be freed on program exit. This is useful for reducing
clutter in leak reports
(This used to be commit cf73dda652e0a121901f22771104be6751c0fcb9)

15 years agor4477: expanded the test suite to increase code coverage a lot
Andrew Tridgell [Sun, 2 Jan 2005 09:46:59 +0000 (09:46 +0000)]
r4477: expanded the test suite to increase code coverage a lot
(This used to be commit 4edbd1b18ee38e584cf844b64c7fcb2645921837)

15 years agor4476: added a little gcov howto for ldb
Andrew Tridgell [Sun, 2 Jan 2005 08:53:58 +0000 (08:53 +0000)]
r4476: added a little gcov howto for ldb
(This used to be commit 5dc1995118c7d25adf89b6cc6156b1e6fc281e9b)

15 years agor4475: fixed smbd to work with the small changes in the ldb API (the most important
Andrew Tridgell [Sun, 2 Jan 2005 07:51:13 +0000 (07:51 +0000)]
r4475: fixed smbd to work with the small changes in the ldb API (the most important
change was in the ldb_msg_add_*() routines, which now use the msg as a context,
and thus it needs to be a talloc ptr)
(This used to be commit 1a4713bfd0e519f3eb7b3241121ff914a6eeef18)

15 years agor4474: - converted ldb to use talloc internally
Andrew Tridgell [Sun, 2 Jan 2005 07:49:29 +0000 (07:49 +0000)]
r4474: - converted ldb to use talloc internally

- added gcov flags to Makefile.ldb

- expanded ldb test suite to get more coverage
(This used to be commit 0ab98f50a7e0fe15347a99e5c29a6590a87729a0)

15 years agor4473: - moved talloc into its own lib/talloc/ area
Andrew Tridgell [Sun, 2 Jan 2005 07:47:34 +0000 (07:47 +0000)]
r4473: - moved talloc into its own lib/talloc/ area

- added gcov flags to Makefile.talloc

- expanded talloc testsuite to add a test for realloc with a child ptr

- fixed a bug in talloc_realloc() with realloc of a ptr that has child ptrs
(This used to be commit 98b5f73c1ba34d7576c5995069b485c1c5ede324)

15 years agor4472: improve the discard_const() macro for standalone build of talloc
Andrew Tridgell [Sun, 2 Jan 2005 04:21:32 +0000 (04:21 +0000)]
r4472: improve the discard_const() macro for standalone build of talloc
(This used to be commit 310cea15bf01343d9ab8ff7a166f0699c0507816)

15 years agor4471: Running 'make eparser_idl' doesn't need --header anymore.
Tim Potter [Sun, 2 Jan 2005 03:24:57 +0000 (03:24 +0000)]
r4471: Running 'make eparser_idl' doesn't need --header anymore.
(This used to be commit 913630d6e43cda621b36403169544dcbea926153)

15 years agor4470: Try not to have GSSAPI built unless we detected krb5. We should split
Andrew Bartlett [Sun, 2 Jan 2005 03:10:28 +0000 (03:10 +0000)]
r4470: Try not to have GSSAPI built unless we detected krb5.  We should split
these tests out a bit, but for now it's an indicator we can use.

Andrew Bartlett
(This used to be commit 2b0605dbaee18da4ebb676fc292b324d21805ef7)

15 years agor4469: Version n + 1 of the pidl ethereal parser generator. This version is
Tim Potter [Sun, 2 Jan 2005 00:00:43 +0000 (00:00 +0000)]
r4469: Version n + 1 of the pidl ethereal parser generator.  This version is
based on the idea of manipulating the .c and .h files generated by with perl regexps and glueing it all together to make an
ethereal plugin.

I thought this was a pretty crazy idea to start off with but it has
turned out to be not as complicated as I thought and has the huge advantage
of not duplicating any of the difficult code in
(This used to be commit 7007522f83740f41f9a47f5ad5942ea46320d405)

15 years agor4468: Don't be a slacker and leave out parameter names when generating
Tim Potter [Sat, 1 Jan 2005 23:18:59 +0000 (23:18 +0000)]
r4468: Don't be a slacker and leave out parameter names when generating
prototypes for ndr push/pull/print functions.
(This used to be commit 1fe95ad1720f48a353ec77178e303b437bb13fed)

15 years agor4467: - tdb standalone build doesn't need -DSTANDALONE any more
Andrew Tridgell [Sat, 1 Jan 2005 05:08:41 +0000 (05:08 +0000)]
r4467: - tdb standalone build doesn't need -DSTANDALONE any more

- fixed standalone build
(This used to be commit ade0b71e4194f99d807d26276592bc041d46df7b)

15 years agor4466: rather than defining "STANDALONE" for building tdb, ldb and talloc
Andrew Tridgell [Sat, 1 Jan 2005 05:06:22 +0000 (05:06 +0000)]
r4466: rather than defining "STANDALONE" for building tdb, ldb and talloc
outside the tree, instead defined _SAMBA_BUILD_ inside the Samba
build. This makes it easier to pull code out of Samba for external
(This used to be commit 09e98c8745cca7ccb1ad7134c0c09b8e4c0f4f06)

15 years agor4465: remove unused file
Andrew Tridgell [Sat, 1 Jan 2005 04:40:11 +0000 (04:40 +0000)]
r4465: remove unused file
(This used to be commit fee40e110d56c932aeff11178c120f3f4e19ddd2)

15 years agor4464: added pvfs backend support for the special CREATOR_OWNER and CREATOR_GROUP...
Andrew Tridgell [Sat, 1 Jan 2005 04:25:46 +0000 (04:25 +0000)]
r4464: added pvfs backend support for the special CREATOR_OWNER and CREATOR_GROUP inheritance rules
(This used to be commit 0a29fb45c310b4b8c348d187b8ff1833deaac6c3)

15 years agor4463: added testing of the special SID_CREATOR_OWNER inheritance rules
Andrew Tridgell [Sat, 1 Jan 2005 03:46:55 +0000 (03:46 +0000)]
r4463: added testing of the special SID_CREATOR_OWNER inheritance rules
(This used to be commit 5448c72ebe58e264ee772f8e1c4caee2250c328c)

15 years agor4462: - enable DSSETUP on ncalrpc
Andrew Tridgell [Sat, 1 Jan 2005 01:40:45 +0000 (01:40 +0000)]
r4462: - enable DSSETUP on ncalrpc

- add DSSETUP to the list of tests run in
(This used to be commit 73c3cdc8ed8dafd544ce4dcac9141124d2b85670)

15 years agor4461: finished the remaining information levels in the DSSETUP pipe. The pipe is...
Andrew Tridgell [Sat, 1 Jan 2005 01:32:01 +0000 (01:32 +0000)]
r4461: finished the remaining information levels in the DSSETUP pipe. The pipe is now complete!

The only glitch is that I am returning DS_ROLE_MEMBER_SERVER when I
should be returning DS_ROLE_PRIMARY_DC. This is needed for the moment
or ACL editing doesn't work from w2k3. Once we have some more ADS
calls we should be able to fix this.
(This used to be commit 6566dc2805a9f6473ebab70b0dbd381c4dbd42c8)

15 years agor4460: Add a new GENSEC module: gensec_gssapi
Andrew Bartlett [Sat, 1 Jan 2005 00:19:08 +0000 (00:19 +0000)]
r4460: Add a new GENSEC module: gensec_gssapi
(disabled by default, set parametric option: gensec:gssapi=yes to enable).

This module backs directly onto GSSAPI, and allows us to sign and seal
GSSAPI/Krb5 connections in particular.  This avoids me reinventing the
entire GSSAPI wheel.

Currently a lot of things are left as default - we will soon start
specifiying OIDs as well as passwords (it uses the keytab only at the
moment).  Tested with our LDAP-* torture tests against Win2k3.

My hope is to use this module to access the new SPNEGO implementation
in Heimdal, to avoid having to standards-verify our own.

Andrew Bartlett
(This used to be commit 14b650c85db14a9bf97e24682b2643b63c51ff35)

15 years agor4459: GENSEC refinements:
Andrew Bartlett [Fri, 31 Dec 2004 22:45:11 +0000 (22:45 +0000)]
r4459: GENSEC refinements:

In developing a GSSAPI plugin for GENSEC, it became clear that the API
needed to change:
 - GSSAPI exposes only a wrap() and unwrap() interface, and determines
   the location of the signature itself.
 - The 'have feature' API did not correctly function in the recursive
   SPNEGO environment.

As such, NTLMSSP has been updated to support these methods.

The LDAP client and server have been updated to use the new wrap() and
unwrap() methods, and now pass the LDAP-* tests in our smbtorture.
(Unfortunely I still get valgrind warnings, in the code that was
previously unreachable).

Andrew Bartlett
(This used to be commit 9923c3bc1b5a6e93a5996aadb039bd229e888ac6)

15 years agor4458: Create ncalrpc directory with 0755 rather then 0700 so non-root users
Jelmer Vernooij [Fri, 31 Dec 2004 22:38:00 +0000 (22:38 +0000)]
r4458: Create ncalrpc directory with 0755 rather then 0700 so non-root users
can use ncalrpc as well.
(This used to be commit 02340bb6eec394576d23f2c51956f4c47f475452)

15 years agor4457: Fix IDL + add torture test for InqObject
Jelmer Vernooij [Fri, 31 Dec 2004 22:12:44 +0000 (22:12 +0000)]
r4457: Fix IDL + add torture test for InqObject
(This used to be commit dbcaff7c71c9b7ee984a2ed458b6c3ce27772740)

15 years agor4456: NT4 usrmgr.exe asks for 4096 accounts, allow twice that.
Volker Lendecke [Fri, 31 Dec 2004 17:56:05 +0000 (17:56 +0000)]
r4456: NT4 usrmgr.exe asks for 4096 accounts, allow twice that.

(This used to be commit f8588a769c185f871fdcd5db35428ad587bdfad3)

15 years agor4455: LSADS was a duplicate of DSSETUP, and is now gone
Andrew Tridgell [Fri, 31 Dec 2004 13:28:31 +0000 (13:28 +0000)]
r4455: LSADS was a duplicate of DSSETUP, and is now gone
(This used to be commit 05c8fd81ddec969ed5280e2fe9f838ac4399f1c9)

15 years agor4454: This is the patch I use to Samba3 nmbd to allow a WinXP box
Andrew Tridgell [Fri, 31 Dec 2004 13:23:37 +0000 (13:23 +0000)]
r4454: This is the patch I use to Samba3 nmbd to allow a WinXP box
to join a Samba4 domain. It is hard-coded for my GUID, so
you will need to edit it to suit.

I'm committing this so others can experiment. Obviously
what we really need is a new nmbd in Samba4.
(This used to be commit a30be712e5abe81b57f8b1b75ebf152018df0eea)

15 years agor4453: use lp_server_role(), which currently returns 3, for the dssetup
Andrew Tridgell [Fri, 31 Dec 2004 12:10:35 +0000 (12:10 +0000)]
r4453: use lp_server_role(), which currently returns 3, for the dssetup
role. The value '5', which is what my w2k3 DC returns, doesn't
work. I'm not sure why this is.

with this change the GUI ACL editor from w2k3 works properly, with
either server role in the HKLM registry.
(This used to be commit 27a8b270bdd029a850c5ec3d10c1ac42468169cb)

15 years agor4452: the beginnings of a dssetup rpc server.
Andrew Tridgell [Fri, 31 Dec 2004 11:37:26 +0000 (11:37 +0000)]
r4452: the beginnings of a dssetup rpc server.
(This used to be commit 1c2170ae21d60c22ee3053fbf249dba59de576ba)

15 years agor4451: added initial RPC-DSSETUP torture test. It works for level1 of
Andrew Tridgell [Fri, 31 Dec 2004 10:49:35 +0000 (10:49 +0000)]
r4451: added initial RPC-DSSETUP torture test. It works for level1 of
(This used to be commit 7aec3dac6fd5165cfca5c650aaa29234e278d95d)

15 years agor4450: the beginnings of IDL for the dssetup pipe. I need this pipe for ACL editing...
Andrew Tridgell [Fri, 31 Dec 2004 10:47:04 +0000 (10:47 +0000)]
r4450: the beginnings of IDL for the dssetup pipe. I need this pipe for ACL editing from w2k3
when we present ourselves as a DC in the registry
(This used to be commit 9651901791e0553f106ab957c5787c109098248b)

15 years agor4449: fixed the helpstring for LSA IDL
Andrew Tridgell [Fri, 31 Dec 2004 10:45:48 +0000 (10:45 +0000)]
r4449: fixed the helpstring for LSA IDL
(This used to be commit 40a68a160e43b2e5d018e393ddecdfc50bad5360)

15 years agor4448: - fixed access_mask checking on acl set
Andrew Tridgell [Fri, 31 Dec 2004 08:56:32 +0000 (08:56 +0000)]
r4448: - fixed access_mask checking on acl set

- honor the change ownership requests of acl set, changing the underlying
  unix owner/group

- fix the access mask on file create with SEC_FLAG_MAXIMUM_ALLOWED
(This used to be commit 5761fa35ab727b51ef1b52459911bafbdd788755)

15 years agor4447: implement server side of lsa_LookupSids3() and lsa_LookupNames3()
Andrew Tridgell [Fri, 31 Dec 2004 08:54:59 +0000 (08:54 +0000)]
r4447: implement server side of lsa_LookupSids3() and lsa_LookupNames3()
(This used to be commit e535f84504b07a912c2f5dd6eca4c9893c1843db)

15 years agor4446: attempt to fix the build - andrew, can you check I've done this right?
Andrew Tridgell [Fri, 31 Dec 2004 08:54:07 +0000 (08:54 +0000)]
r4446: attempt to fix the build - andrew, can you check I've done this right?
(This used to be commit 9f0bf657aeee86d859742fb4da3a0f806e7060b6)

15 years agor4445: put the unlink test in a subdirectory, and ensure it cleans up
Andrew Tridgell [Fri, 31 Dec 2004 08:44:08 +0000 (08:44 +0000)]
r4445: put the unlink test in a subdirectory, and ensure it cleans up
(This used to be commit 382231ca365eccec8024af9420b1ebe41953bdb5)

15 years agor4444: - initialise registry:HKEY_LOCAL_MACHINE to a reasonable default (where
Andrew Tridgell [Fri, 31 Dec 2004 08:43:34 +0000 (08:43 +0000)]
r4444: - initialise registry:HKEY_LOCAL_MACHINE to a reasonable default (where suggests hklm.ldb be put)

- fix the globals init not to wipe parametic values after initialising
  them (this bug prevented default values for parametric parameters)
(This used to be commit 6a360c52c1723b4c3485a97ebcfeb907f840a051)

15 years agor4443: test lsa_LookupNames3() even when lsa_LookupSids3() fails
Andrew Tridgell [Fri, 31 Dec 2004 07:53:42 +0000 (07:53 +0000)]
r4443: test lsa_LookupNames3() even when lsa_LookupSids3() fails
(This used to be commit d37f556258ba12479e4e9acc5cdb5535ebf41d7f)

15 years agor4442: fix lsa_TranslatedSid3 (its a dom_sid2 not a dom_sid)
Andrew Tridgell [Fri, 31 Dec 2004 07:52:54 +0000 (07:52 +0000)]
r4442: fix lsa_TranslatedSid3 (its a dom_sid2 not a dom_sid)
(This used to be commit 0dd258709554265efaa0d25ad5bc86b559139c2e)

15 years agor4441: gensec_krb5 update:
Andrew Bartlett [Fri, 31 Dec 2004 07:43:08 +0000 (07:43 +0000)]
r4441: gensec_krb5 update:

 - Use more of the clikrb5.c wrapper calls

 - Don't use the session keytab if we kinit for the user.

Andrew Bartlett
(This used to be commit e15dbee00628475d5e1c1f329a7f9b199bc36360)

15 years agor4440: - add a start of srvsvc_NetShareCheck() server code
Stefan Metzmacher [Fri, 31 Dec 2004 07:42:57 +0000 (07:42 +0000)]
r4440: - add a start of srvsvc_NetShareCheck() server code

- filterout hidden shares in NetShareEnum()

- get max_connections right

(This used to be commit c685823c5d75f22177549566866301523a64a1dd)

15 years agor4439: unlimited connections is -1
Stefan Metzmacher [Fri, 31 Dec 2004 07:40:14 +0000 (07:40 +0000)]
r4439: unlimited connections is -1

(This used to be commit e62b36bef193f6a58ee035d581ef0f574f1e2910)

15 years agor4438: the ADMIN$ share is a diskshare but hidden
Stefan Metzmacher [Fri, 31 Dec 2004 07:35:14 +0000 (07:35 +0000)]
r4438: the ADMIN$ share is a diskshare but hidden

(This used to be commit 33a185ec3b211f6137abd6367ccc81d5102e5f4f)

15 years agor4437: added IDL and test code for lsa_LookupSids3() and lsa_LookupNames3().
Andrew Tridgell [Fri, 31 Dec 2004 07:26:26 +0000 (07:26 +0000)]
r4437: added IDL and test code for lsa_LookupSids3() and lsa_LookupNames3().

For some reason I am getting ACCESS_DENIED from w2k3 on
lsa_LookupSids3(). I will investigate.
(This used to be commit c759fa0000e37c3e93a7529a7701998af6727612)

15 years agor4436: add one more flag
Stefan Metzmacher [Fri, 31 Dec 2004 07:22:10 +0000 (07:22 +0000)]
r4436: add one more flag

(This used to be commit 7886000e031622795fecb6ec37990c133b1e66f7)

15 years agor4435: add another error code
Stefan Metzmacher [Fri, 31 Dec 2004 07:21:31 +0000 (07:21 +0000)]
r4435: add another error code

(This used to be commit 02861f63052c48fc85c6694ad8164cc6cc5443d4)

15 years agor4434: - fix some NetShare* idl functions
Stefan Metzmacher [Fri, 31 Dec 2004 06:19:05 +0000 (06:19 +0000)]
r4434: - fix some NetShare* idl functions

- add torture test for NetShareCheck()

(This used to be commit 96000a2261ed56fda613a45e3aa460eb3c87082a)

15 years agor4433: added the boilerplate for the new w2k3 LSA functions in preparation
Andrew Tridgell [Fri, 31 Dec 2004 06:08:43 +0000 (06:08 +0000)]
r4433: added the boilerplate for the new w2k3 LSA functions in preparation
for adding LookupSids3 (needed for ACL editing from w2k3)
(This used to be commit 745bbc0e1717c1e0068be00cff36071dbdc451a6)

15 years agor4432: - add srvsvc_NetShareInfo level 1006 and 1501 idl
Stefan Metzmacher [Fri, 31 Dec 2004 05:34:31 +0000 (05:34 +0000)]
r4432: - add srvsvc_NetShareInfo level 1006 and 1501 idl

- implement srvsvc_NetGetShareInfo()

- add more error checks

- bring the rest of the code in the same layout

(This used to be commit 0dd14d9fc611a33dad4e559321d6c50d82efb5d1)

15 years agor4431: add WERR_NET_NAME_NOT_FOUND
Stefan Metzmacher [Fri, 31 Dec 2004 04:45:13 +0000 (04:45 +0000)]

(This used to be commit 74e65680fa9a6b8f04c6ae62ec1da49659879fb5)