Andrew Bartlett [Wed, 11 Nov 2009 21:08:26 +0000 (08:08 +1100)]
s4:torture Remove _drs_util_verify_attids() from RPC-DSSYNC
I'm satisfied that the task this test does is already done by the time
we map the incoming schema, and process the objects. If we have the
OID mapping wrong or incomplete, we will get any errors this test
found errors there.
(And this dramaticly reduces the test time, so we can now add
RPC-DSSYNC to 'make test').
Andrew Bartlett
Andrew Bartlett [Wed, 11 Nov 2009 11:31:06 +0000 (22:31 +1100)]
s4:torture/dsdb Add verification of the push-to-LDB functions in RPC-DSSYNC
This is done by comparing the values against the remote host's LDAP
server.
Andrew Bartlett
Andrew Bartlett [Wed, 11 Nov 2009 08:27:30 +0000 (19:27 +1100)]
s4:torture Add const
Andrew Bartlett [Wed, 11 Nov 2009 08:26:28 +0000 (19:26 +1100)]
s4:ldb Allow ldb_msg_canonicalize to handle empty elements
(These are deliberately there in DRS replication).
Andrew Bartlett
Andrew Bartlett [Wed, 11 Nov 2009 08:25:32 +0000 (19:25 +1100)]
s4:dsdb/schema Allow a schema set when bound against a remote LDAP server
Andrew Bartlett [Wed, 11 Nov 2009 08:24:48 +0000 (19:24 +1100)]
s4:ldb Don't segfault if we somehow get an unknown extended dn element
Andrew Bartlett [Wed, 11 Nov 2009 08:24:08 +0000 (19:24 +1100)]
s4:ldb Change ldb_request_add_control to the normal 'for loop' pattern
Andrew Bartlett [Wed, 11 Nov 2009 01:56:55 +0000 (12:56 +1100)]
s4:torture Convert RPC-DSSYNC test to use LDB rather than raw LDAP
(This should make it easier to do more 'compare DRS with LDAP'
operations, as LDB is an easier interface to program.)
Andrew Bartlett
Stefan Metzmacher [Tue, 10 Nov 2009 11:49:48 +0000 (12:49 +0100)]
NET-API-BECOME-DC: resolve the host name to an address before calling
libnet_BecomeDC and libnet_UnbecomeDC()
We're supposed to pass in source_dsa_address...
metze
Andrew Bartlett [Tue, 10 Nov 2009 04:21:40 +0000 (15:21 +1100)]
s4:dsdb Add expected value tests for most DRS syntax conversions
I've left out those for which I could not find an expected value in my
default Windows 2003 server's database, and the values that rely on
the current prefix map at the time.
Andrew Bartlett
Andrew Bartlett [Tue, 10 Nov 2009 04:20:07 +0000 (15:20 +1100)]
s4:Fix regression in dsdb_dn code - all parses of the DN would be rejected
This is most likely the cause of the DRS replication failures I
observed with my changes.
Andrew Bartlett
Andrew Bartlett [Tue, 10 Nov 2009 04:18:52 +0000 (15:18 +1100)]
s4:provision Add C binding to get at the generate schema
This will allow us to do local tests against that schema
Andrew Bartlett [Tue, 10 Nov 2009 04:18:01 +0000 (15:18 +1100)]
s4:provision Remove unused 'sambadn' parameter
Andrew Bartlett [Mon, 9 Nov 2009 10:26:02 +0000 (21:26 +1100)]
s4:dsdb/repl Split the 'convert' or 'commit' stages in the DRS import
This will allow us in future to do tests on the LDB values we generate
from the DRS replication.
Andrew Bartlett
Andrew Bartlett [Mon, 9 Nov 2009 09:40:21 +0000 (20:40 +1100)]
s4:dsdb/schema Simplify schema loading from ldb messages
It turns out that we always add the class/attribute to the schema.
Andrew Bartlett [Mon, 9 Nov 2009 09:31:42 +0000 (20:31 +1100)]
s4:vampire Print error message when we fail on the CLDAP ping
Andrew Bartlett
Andrew Bartlett [Sat, 7 Nov 2009 01:07:06 +0000 (12:07 +1100)]
s4:dsdb Cosmetic fixes found by metze in review of dsdb_dn changes
These changes include reworking the code to call ldb_module_get_ctx()
less often (avoid the function calls, particularly during the step
into a complex function).
Andrew Bartlett
Andrew Bartlett [Sat, 7 Nov 2009 01:06:11 +0000 (12:06 +1100)]
s4:dsdb Ensure we allow 'odd' lengths for DN+String
(Found in a code review by metze)
Andrew Bartlett
Andrew Bartlett [Fri, 6 Nov 2009 06:00:05 +0000 (17:00 +1100)]
s4:ldb Add Well Known GUID (WKGUID) tests to ldap.py
Andrew Bartlett [Fri, 6 Nov 2009 05:40:07 +0000 (16:40 +1100)]
s4:dsdb Add extensive tests for the behaviour of dsdb_dn
Andrew Bartlett [Thu, 5 Nov 2009 06:06:45 +0000 (17:06 +1100)]
s4:ldb Remove DN+Binary code from the core ldb_dn
This is now in dsdb_dn. Removing this to a specific wrapper avoids a
number of bugs where Binary DNs were being handled incorrectly.
This reverts much of tridge's commit
fd22e0304782e20b9bbb29464b6c745d409ff4c6
Andrew Bartlett
Andrew Bartlett [Thu, 5 Nov 2009 06:04:10 +0000 (17:04 +1100)]
s4:dsdb Use new dsdb_dn code in LDB modules and Samba4 schema
This converts the code from using the binary DN code in ldb_dn to
using a special Samba-specfic wrapper around ldb_dn.
We also use the dsdb_dn code for DN+Binary and DN+String comparisons
(changed from treating them as Binary blobs)
Andrew Bartlett
Andrew Bartlett [Thu, 5 Nov 2009 06:00:20 +0000 (17:00 +1100)]
s4:ldb-samba Use new ldb_any_comparison helper function in ldb-samba
Andrew Bartlett [Thu, 5 Nov 2009 05:57:20 +0000 (16:57 +1100)]
s4:dsdb Add new dsdb_dn to handle DN+Binary and DN+String
This aims to replace (and is based on) the code in ldb_dn.c. It is
however much stricter in the DNs it will accept.
Andrew Bartlett
Andrew Bartlett [Thu, 5 Nov 2009 05:56:05 +0000 (16:56 +1100)]
s4:ldb Add a helper function for 'canonicalise' both strings base compares
This will help simplify boilerplate comparison functions where we
don't have a shortcut way to compare.
Andrew Bartlett
Andrew Bartlett [Wed, 4 Nov 2009 06:42:53 +0000 (17:42 +1100)]
lib/util Split data_blob_hex_string() into upper and lower
Rather than have a repeat of the bugs we found at the plugfest where
hexidecimal strings must be in upper or lower case in particular
places, ensure that each caller chooses which case they want.
This reverts most of the callers back to upper case, as things were
before tridge's patch. The critical call in the extended DN code is
of course handled in lower case.
Andrew Bartlett
Jeremy Allison [Thu, 12 Nov 2009 02:35:18 +0000 (18:35 -0800)]
Second part of bugfix for 6865 - acl_xattr module: Has dependency that inherit acls = yes or xattrs are removed.
We also need dos filemode = true set as well.
Jeremy.
Jeremy Allison [Wed, 11 Nov 2009 20:17:47 +0000 (12:17 -0800)]
Fix bug 6878 - Cannot change ACL's inherit flag.
Based on a patch submitted by Tsukasa Hamano <hamano@osstech.co.jp>,
this is a change in the POSIX ACL mapping to deal with the lossy
mapping for directory ACE entries:
We have a lossy mapping: directory ACE entries
CREATOR_OWNER ------\
(map to) +---> SMB_ACL_USER_OBJ
owning sid ------/
CREATOR_GROUP ------\
(map to) +---> SMB_ACL_GROUP_OBJ
primary group sid --/
on set. And on read of a directory ACL
SMB_ACL_USER_OBJ ----> CREATOR_OWNER
SMB_ACL_GROUP_OBJ ---> CREATOR_GROUP.
Deal with this on set by duplicating
owning sid and primary group sid ACE
entries into the directory ACL.
Jeremy.
Jeff Layton [Wed, 11 Nov 2009 19:04:54 +0000 (14:04 -0500)]
mount.cifs: get rid of CONST_DISCARD
Apparently, we need to strip the "const" attribute off of the mnt_fstype
before passing it to addmntent to prevent a (somewhat bogus) compiler
warning.
Rather than just stripping off the "const" attribute, clarify the code
by declaring a new non-const char pointer that points to the same
string. We can also use that same pointer in the mount(2) call too.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Acked-by: Matthias Dieter Wallnöfer <mdw@samba.org>
Karolin Seeger [Wed, 11 Nov 2009 14:42:21 +0000 (15:42 +0100)]
s3/docs: Document "enable spoolss".
Karolin
Michael Adam [Tue, 10 Nov 2009 23:13:14 +0000 (00:13 +0100)]
s3:vfs_fs_capabilities: fix a debug message
Michael
TAKEDA Yasuma [Mon, 9 Nov 2009 03:18:48 +0000 (12:18 +0900)]
* install setup/display-specifiers files which are needed by provision script
Signed-off-by: TAKEDA Yasuma <yasuma@osstech.co.jp>
Volker Lendecke [Tue, 10 Nov 2009 18:49:41 +0000 (19:49 +0100)]
s3: Convert libsmb/cli_message to the async API
Matthias Dieter Wallnöfer [Tue, 10 Nov 2009 15:26:23 +0000 (16:26 +0100)]
s4:dcesrv_samr - Add more checks for invalid levels
Add more checks on valid levels, mark unimplemented ones as "UNSUPPORTED" and
otherwise as "INVALID_INFO_CLASS" to be safe.
Nadezhda Ivanova [Tue, 10 Nov 2009 13:58:52 +0000 (15:58 +0200)]
Fixes for some tests not eorking against Windows or Samba.
Günther Deschner [Tue, 10 Nov 2009 12:10:12 +0000 (13:10 +0100)]
s3-rpc_client: make sure cli_rpc_pipe_open_schannel() does not always return NT_STATUS_OK.
Guenther
Günther Deschner [Mon, 9 Nov 2009 17:18:44 +0000 (18:18 +0100)]
s3-samr: implement _samr_ValidatePassword().
Guenther
Günther Deschner [Tue, 10 Nov 2009 11:48:52 +0000 (12:48 +0100)]
s3-chgpasswd: split out a check_password_complexity() function.
Guenther
Günther Deschner [Mon, 9 Nov 2009 16:40:28 +0000 (17:40 +0100)]
s4-smbtorture: strip trailing whitespace in RPC-SAMR.
Guenther
Matt Kraai [Mon, 10 Aug 2009 20:50:31 +0000 (13:50 -0700)]
README.Coding: Fix typos.
Jeremy Allison [Mon, 9 Nov 2009 20:44:47 +0000 (12:44 -0800)]
Fix bug 6880 - cannot list workgroup servers
reported by Alban Browaeys <prahal@yahoo.com> with fix.
Revert
2e989bab0764c298a2530a2d4c8690258eba210c
with extra comments - this broke workgroup enumeration.
Jeremy.
Günther Deschner [Mon, 9 Nov 2009 16:34:47 +0000 (17:34 +0100)]
s3-netlogon: enable RPC-NETLOGON-ADMIN test against s3.
Guenther
Günther Deschner [Mon, 9 Nov 2009 16:32:31 +0000 (17:32 +0100)]
s4-smbtorture: re-arrange netlogon LogonControl test.
The LogonControl tests now are split out to a new RPC-NETLOGON-ADMIN test that
tests the behaviour of that call when called by user, dc or workstation.
Guenther
Volker Lendecke [Mon, 9 Nov 2009 16:06:48 +0000 (17:06 +0100)]
s3: Try to avoid dns searches with an empty site
Günther Deschner [Mon, 9 Nov 2009 15:02:24 +0000 (16:02 +0100)]
s3-param: fix set_inherit_acls().
Jeremy, please check.
Guenther
Volker Lendecke [Mon, 9 Nov 2009 13:26:55 +0000 (14:26 +0100)]
pidl: Fix selftest after s3 code changed
Andrew Tridgell [Mon, 9 Nov 2009 11:19:52 +0000 (22:19 +1100)]
s4-samdb: remove the rDN size constraint of 64
This size constraint is not correct in it's current form, as windows
does send us rDN values for CN with lengths longer than 64. Once we
know how this constraint really works we can add it back in.
Andrew Tridgell [Mon, 9 Nov 2009 10:38:49 +0000 (21:38 +1100)]
s4-hdb: go back to a separate samdb for the KDC
The change to use a common system_session broke replication as the KDC
forces CRED_DONT_USE_KERBEROS on session->credentials, which is shared
with other parts of the system.
This should be fixed once we confirm whether the ldap backend actually
relies on CRED_DONT_USE_KERBEROS
Volker Lendecke [Sun, 8 Nov 2009 18:38:09 +0000 (19:38 +0100)]
Revert "s3: Do not directly reference the ndr_table_* in rpcclient"
This reverts commit
70c698fd547c4bc19cf77693608bbb34acac40b5.
Volker Lendecke [Sun, 8 Nov 2009 18:38:01 +0000 (19:38 +0100)]
Revert "s3: Do not reference ndr_table_<pipe> in the cli_ routines directly"
This reverts commit
daa964013bc5d036f4da571ce22c0052ef40943a.
Volker Lendecke [Sun, 8 Nov 2009 18:37:53 +0000 (19:37 +0100)]
Revert "s3: Consolidate getting the name out of a pipes_struct"
This reverts commit
9621306351cdb469ef393a6d8cbeea456bc4bd9f.
Volker Lendecke [Sun, 8 Nov 2009 18:37:42 +0000 (19:37 +0100)]
Revert "s3: Do not reference the ndr_tables in the server calls directly"
This reverts commit
98fb71782e05ae72cd6abeb38b6e0b96a50c1761.
Volker Lendecke [Sun, 8 Nov 2009 18:37:33 +0000 (19:37 +0100)]
Revert "s3: Do not reference ndr_table when calling rpc_srv_register"
This reverts commit
494b2aff8826947e3bd556aecb175746163da485.
Volker Lendecke [Sun, 8 Nov 2009 18:37:26 +0000 (19:37 +0100)]
Revert "s3: Make run_rpc_command take strings instead of a ndr_interface_table"
This reverts commit
53f2a1595e76db9fe1b42db65b51895b73365993.
Volker Lendecke [Sun, 8 Nov 2009 18:37:13 +0000 (19:37 +0100)]
Revert "s3: Make libnetapi_open_pipe take strings instead of a ndr_interface_table"
This reverts commit
5fc9d93408effe75abcd231c45cbc14656692ebe.
Volker Lendecke [Sun, 8 Nov 2009 11:31:38 +0000 (12:31 +0100)]
s3: Make libnetapi_open_pipe take strings instead of a ndr_interface_table
Volker Lendecke [Sun, 8 Nov 2009 11:24:06 +0000 (12:24 +0100)]
s3: Make run_rpc_command take strings instead of a ndr_interface_table
Volker Lendecke [Sun, 8 Nov 2009 10:35:53 +0000 (11:35 +0100)]
s3: Do not reference ndr_table when calling rpc_srv_register
Volker Lendecke [Sun, 8 Nov 2009 09:51:34 +0000 (10:51 +0100)]
s3: Do not reference the ndr_tables in the server calls directly
This involves storing the interface table in the pipes_struct
Volker Lendecke [Sun, 8 Nov 2009 09:43:34 +0000 (10:43 +0100)]
s3: Consolidate getting the name out of a pipes_struct
Volker Lendecke [Sun, 8 Nov 2009 08:53:08 +0000 (09:53 +0100)]
s3: Do not reference ndr_table_<pipe> in the cli_ routines directly
Volker Lendecke [Sun, 1 Nov 2009 19:21:52 +0000 (20:21 +0100)]
s3: Do not directly reference the ndr_table_* in rpcclient
Volker Lendecke [Fri, 6 Nov 2009 13:04:49 +0000 (14:04 +0100)]
tdb: Fix a C++ warning
Matthias Dieter Wallnöfer [Sat, 7 Nov 2009 19:53:28 +0000 (20:53 +0100)]
s4:vfs_ipc - fix "ipc_open" for NTTRANS create requests
Matthias Dieter Wallnöfer [Sat, 7 Nov 2009 18:51:47 +0000 (19:51 +0100)]
torture/basic/denytest - makes the code more compatible for TRU64 (consider buildfarm)
Matthias Dieter Wallnöfer [Sat, 7 Nov 2009 16:57:50 +0000 (17:57 +0100)]
s4:lib/messaging - fix up the python bindings
This fixes up the broken "send" method of the python bindings and corrects some
other parameter lists in parsing functions (this is only cosmetic). The reason
for the bug was a superfluous "|"!
Matthias Dieter Wallnöfer [Sat, 7 Nov 2009 11:15:38 +0000 (12:15 +0100)]
s4:dsdb/common/util - samdb_result_hashes - use "unsigned int" for counters
Volker Lendecke [Sat, 7 Nov 2009 09:28:40 +0000 (10:28 +0100)]
s3: Do the printing for DEBUGLEVEL>=10 centrally
12 insertions(+), 10651 deletions(-)
I think that says it all :-)
Matthias Dieter Wallnöfer [Sat, 7 Nov 2009 09:18:26 +0000 (10:18 +0100)]
ldb_init: use constant for result of "ldb_setup_wellknown_attributes"
Volker Lendecke [Sun, 1 Nov 2009 11:05:14 +0000 (12:05 +0100)]
s3: Register the ndr_interfaces dynamically
Volker Lendecke [Sun, 1 Nov 2009 10:33:59 +0000 (11:33 +0100)]
s3: Get rid of a NULL terminator
Volker Lendecke [Sat, 31 Oct 2009 19:04:54 +0000 (20:04 +0100)]
s3: Get rid of explicit pipe names
Volker Lendecke [Sat, 31 Oct 2009 18:28:16 +0000 (19:28 +0100)]
s3: get_pipe_name_from_iface -> get_pipe_name_from_syntax
Jeremy Allison [Sat, 7 Nov 2009 05:53:07 +0000 (21:53 -0800)]
Fix bug 6865 - acl_xattr module: Has dependency that inherit acls = yes or xattrs are removed.
Jeremy.
Jeremy Allison [Sat, 7 Nov 2009 01:03:29 +0000 (17:03 -0800)]
Fix bug 6841 - "map acl inherit = yes" not working.
The code to read the new V2 SAMBA_PAI entries had
two errors.
Jeremy.
Matthias Dieter Wallnöfer [Fri, 6 Nov 2009 19:39:43 +0000 (20:39 +0100)]
s4:libnet_passwd - fix pointer type
Matthias Dieter Wallnöfer [Fri, 6 Nov 2009 19:39:15 +0000 (20:39 +0100)]
s4:dcerpc - fix DEBUG output warning
Matthias Dieter Wallnöfer [Fri, 6 Nov 2009 14:38:31 +0000 (15:38 +0100)]
s4:samdb_check_password - allow the password string to be NULL
This deactivates the password complexity check, but not the minimum password
length one, since the length is specified.
This change is needed by my password module work.
Matthias Dieter Wallnöfer [Fri, 6 Nov 2009 14:21:56 +0000 (15:21 +0100)]
s4:dcesrv_samr_ValidatePassword - naturally this was only for debugging the failure
Matthias Dieter Wallnöfer [Fri, 6 Nov 2009 14:17:22 +0000 (15:17 +0100)]
s4:dcesrv_samr_ValidatePassword - adapt call to "samdb_check_password"
I've forgotten that PIDL converts UTF16 parameters automatically back to the
UNIX charset (in most cases UTF16). So I don't have to do this here.
Matthias Dieter Wallnöfer [Fri, 6 Nov 2009 14:15:53 +0000 (15:15 +0100)]
s4:samdb_validate_password - Adapt the function to use the UNIX charset for the password data blob
Matthias Dieter Wallnöfer [Fri, 6 Nov 2009 11:32:47 +0000 (12:32 +0100)]
s4:torture/samr - Add status code on "ValidatePassword" test output
Matthias Dieter Wallnöfer [Fri, 6 Nov 2009 11:16:30 +0000 (12:16 +0100)]
s4:torture/samr - Activate "ValidatePassword" test per default
Matthias Dieter Wallnöfer [Fri, 6 Nov 2009 11:10:42 +0000 (12:10 +0100)]
s4:dcesrv_samr_ValidatePassword - I forgot to create an out buffer
Günther Deschner [Fri, 6 Nov 2009 13:46:35 +0000 (14:46 +0100)]
s3-kerberos: let smb_krb5_get_tkt_from_creds() compile with older heimdal libs.
Guenther
Günther Deschner [Wed, 30 Sep 2009 11:40:17 +0000 (13:40 +0200)]
s3-netlogon: implement _netr_GetDcName and _netr_GetAnyDcName.
Guenther
Kamen Mazdrashki [Thu, 29 Oct 2009 16:18:54 +0000 (18:18 +0200)]
s4/drs: Refactor to be more SAMBA.Coding style compliant
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Kamen Mazdrashki [Thu, 29 Oct 2009 14:28:38 +0000 (16:28 +0200)]
s4/drs: Remove unused structures and functions
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Kamen Mazdrashki [Thu, 29 Oct 2009 14:24:00 +0000 (16:24 +0200)]
s4/drs: remove unused num_prefixes and prefixes from dsdb_schema
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Kamen Mazdrashki [Thu, 29 Oct 2009 01:56:50 +0000 (03:56 +0200)]
s4/drs(tort): _torture_drs_pfm_compare_same() should not fail tctx by itself
The responsibility for failing torture_context sould be for the
caller.
This gives better control in for test case driver function.
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Kamen Mazdrashki [Thu, 29 Oct 2009 01:17:33 +0000 (03:17 +0200)]
s4/drs(tort): Test case for dsdb_create_prefix_mapping() implemented
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Kamen Mazdrashki [Thu, 29 Oct 2009 01:54:12 +0000 (03:54 +0200)]
s4/drs: dsdb_create_prefix_mapping() refactored
TODO: this function may be refactored further.
Actually we don't need to look up for the OID supplied,
but just call sdb_schema_pfm_make_attid() - it will
search for the OID anyway and add it if necessary
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Kamen Mazdrashki [Thu, 29 Oct 2009 01:16:30 +0000 (03:16 +0200)]
s4/drs: prefixMap lookup by full_OID implementation
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Kamen Mazdrashki [Wed, 28 Oct 2009 16:33:13 +0000 (18:33 +0200)]
s4/drs(tort): refactor - SCHEMA_INFO_DEFAULT defined on file scope
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Kamen Mazdrashki [Tue, 27 Oct 2009 16:35:29 +0000 (18:35 +0200)]
s4/drs: dsdb_write_prefixes_from_schema_to_ldb() refactored
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Kamen Mazdrashki [Tue, 27 Oct 2009 16:06:58 +0000 (18:06 +0200)]
s4/drs: dsdb_read_prefixes_from_ldb() refactored
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Kamen Mazdrashki [Tue, 27 Oct 2009 16:03:47 +0000 (18:03 +0200)]
s4/drs(tort): prefixMap read/write in LDB test case
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Kamen Mazdrashki [Tue, 27 Oct 2009 14:27:28 +0000 (16:27 +0200)]
s4/drs(tort): Create temporary LDB for testing purposes
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Kamen Mazdrashki [Mon, 26 Oct 2009 22:16:02 +0000 (00:16 +0200)]
s4/drs: refactor dsdb_load_oid_mappings_ldb() to use _dsdb_prefixmap_from_ldb_val()
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Kamen Mazdrashki [Mon, 26 Oct 2009 21:50:50 +0000 (23:50 +0200)]
s4/drs: Load prefixMap from ldb_val moved in separate function
It is to be used later in several places when we need such conversion.
Signed-off-by: Stefan Metzmacher <metze@samba.org>