ira/wip.git
12 years agopyldb: Don't segfault when invalid type is specified to as_sddl and from_sddl.
Matthieu Patou [Thu, 17 Sep 2009 15:56:02 +0000 (19:56 +0400)]
pyldb: Don't segfault when invalid type is specified to as_sddl and from_sddl.

  Fix bug #6723

12 years agotalloc: don't crash if f is NULL in talloc_report_*
Andrew Tridgell [Thu, 17 Sep 2009 23:42:11 +0000 (16:42 -0700)]
talloc: don't crash if f is NULL in talloc_report_*

It's annoying when you use
  p talloc_report_full(ctx, fopen("/tmp/xx","w"))
in gdb, and if you don't have write permission on the file then
you get a segv.

12 years agos3-rpc: samba3 needs the DCERPC_NDR64 define
Andrew Tridgell [Thu, 17 Sep 2009 23:02:14 +0000 (16:02 -0700)]
s3-rpc: samba3 needs the DCERPC_NDR64 define

12 years agos4-sam: add a note about the solaris client
Andrew Tridgell [Thu, 17 Sep 2009 22:15:58 +0000 (15:15 -0700)]
s4-sam: add a note about the solaris client

12 years agondrdump: fixed help
Andrew Tridgell [Thu, 17 Sep 2009 22:15:36 +0000 (15:15 -0700)]
ndrdump: fixed help

12 years agondr: num_auths is an array size, thus a uint3264
Andrew Tridgell [Thu, 17 Sep 2009 22:15:24 +0000 (15:15 -0700)]
ndr: num_auths is an array size, thus a uint3264

12 years agondr: split out ndr enum functions
Andrew Tridgell [Thu, 17 Sep 2009 22:14:31 +0000 (15:14 -0700)]
ndr: split out ndr enum functions

This allows for easier implementation of the NDR32/NDR64 split

12 years agoidl: recompile our IDL
Andrew Tridgell [Thu, 17 Sep 2009 16:59:50 +0000 (09:59 -0700)]
idl: recompile our IDL

The NDR64 change affects every IDL file

12 years agos4-pidl: add support for NDR64
Andrew Tridgell [Thu, 17 Sep 2009 16:10:21 +0000 (09:10 -0700)]
s4-pidl: add support for NDR64

Added support for NDR64 to the samba4 pidl generator

12 years agos4-rpc: added NDR64 support
Andrew Tridgell [Thu, 17 Sep 2009 16:09:48 +0000 (09:09 -0700)]
s4-rpc: added NDR64 support

This adds support for the nd464 binding string option

12 years agondr: added support for NDR64
Andrew Tridgell [Thu, 17 Sep 2009 16:08:47 +0000 (09:08 -0700)]
ndr: added support for NDR64

This adds NDR64 support for the push functions in libndr

12 years agoutil: use likely/unlikely for NT_STATUS_* macros
Andrew Tridgell [Thu, 17 Sep 2009 16:07:44 +0000 (09:07 -0700)]
util: use likely/unlikely for NT_STATUS_* macros

12 years agolibreplace: added likely()/unlikely() macros for gcc
Andrew Tridgell [Thu, 17 Sep 2009 16:07:17 +0000 (09:07 -0700)]
libreplace: added likely()/unlikely() macros for gcc

These macros allow the compile to better optimise code that has a lot
of if statements. I particularly want to use this for our low level
generated NDR code.

12 years agos3:smbd: Attempt to fix the build on HP/UX
Volker Lendecke [Fri, 18 Sep 2009 01:42:23 +0000 (03:42 +0200)]
s3:smbd: Attempt to fix the build on HP/UX

12 years agos3:smbd: Fix an inappropriate pointer return in a bool fn
Volker Lendecke [Fri, 18 Sep 2009 01:34:55 +0000 (03:34 +0200)]
s3:smbd: Fix an inappropriate pointer return in a bool fn

12 years agos3:winbind: Fix some enum type mismatches found by the Solaris compiler
Volker Lendecke [Fri, 18 Sep 2009 01:28:51 +0000 (03:28 +0200)]
s3:winbind: Fix some enum type mismatches found by the Solaris compiler

12 years agos3: build with pam support when possible
Björn Jacke [Thu, 17 Sep 2009 19:04:52 +0000 (21:04 +0200)]
s3: build with pam support when possible

12 years agoRe-generated idl files with () for enum values.
Jeremy Allison [Thu, 17 Sep 2009 18:28:37 +0000 (11:28 -0700)]
Re-generated idl files with () for enum values.
Jeremy.

12 years agoEnsure we enclose the enum values in brackets to make the cast work.
Jeremy Allison [Thu, 17 Sep 2009 18:27:51 +0000 (11:27 -0700)]
Ensure we enclose the enum values in brackets to make the cast work.
Jeremy.

12 years agoCheck in modified generated files for systems where pidl can't run.
Jeremy Allison [Thu, 17 Sep 2009 18:16:54 +0000 (11:16 -0700)]
Check in modified generated files for systems where pidl can't run.
Jeremy.

12 years agoMerge branch 'master' of ssh://jra@git.samba.org/data/git/samba
Jeremy Allison [Thu, 17 Sep 2009 18:11:23 +0000 (11:11 -0700)]
Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba

12 years agoFix the problem with pidl generating invalid C for enums. According
Jeremy Allison [Thu, 17 Sep 2009 18:08:42 +0000 (11:08 -0700)]
Fix the problem with pidl generating invalid C for enums. According
to the C standard an enum is guarenteed to be an (int), which means
for 4 byte ints specifying a type of 0x80000000 is an invalid value.
The Solaris compiler complains about this. Fix by adding an (int)
cast in front of the value generation.
Jeremy.

12 years agospnego: Support ASN.1 BIT STRING and use it in SPNEGO.
Kouhei Sutou [Thu, 13 Aug 2009 06:12:01 +0000 (15:12 +0900)]
spnego: Support ASN.1 BIT STRING and use it in SPNEGO.

Signed-off-by: Günther Deschner <gd@samba.org>
12 years agos4:descriptor module - Revert and const fixups
Matthias Dieter Wallnöfer [Thu, 17 Sep 2009 16:37:46 +0000 (18:37 +0200)]
s4:descriptor module - Revert and const fixups

- Revert a change introduced by me since I didn't understood the meaning of the
  version check
- Added some "const" to suppress compiler warnings

12 years agos4:descriptor - cosmetic
Matthias Dieter Wallnöfer [Thu, 17 Sep 2009 16:17:55 +0000 (18:17 +0200)]
s4:descriptor - cosmetic

12 years agos4:libnet_become_dc - Fix some uninitialised variables
Matthias Dieter Wallnöfer [Thu, 17 Sep 2009 16:05:58 +0000 (18:05 +0200)]
s4:libnet_become_dc - Fix some uninitialised variables

12 years agos4:provision - Some rework
Matthias Dieter Wallnöfer [Thu, 17 Sep 2009 14:00:55 +0000 (16:00 +0200)]
s4:provision - Some rework

- Add/change "wellKnownObjects" attributes
- Order entries in "provision_basedn_modify.ldif"
- Add/change "delete entries" object under BASEDN and CONFIGDN
- Fix default version number of "Default domain policy" group policy
- Add "domain updates" objects for interoperability with MS AD maintaining tools
- Show version number in the "oEMInformation" attribute (suggested by ekacnet)
- Smaller fixups

12 years agovoid functions can't return a value. Found by the Solaris compiler.
Jeremy Allison [Thu, 17 Sep 2009 17:04:19 +0000 (10:04 -0700)]
void functions can't return a value. Found by the Solaris compiler.
Jeremy.

12 years agovoid functions can't return a value. Found by the Solaris compiler.
Jeremy Allison [Thu, 17 Sep 2009 17:03:14 +0000 (10:03 -0700)]
void functions can't return a value. Found by the Solaris compiler.
Jeremy.

12 years agovoid functions can't return a value. Found by the Solaris compiler.
Jeremy Allison [Thu, 17 Sep 2009 17:00:31 +0000 (10:00 -0700)]
void functions can't return a value. Found by the Solaris compiler.
Jeremy.

12 years agoWe now pass the Microsoft SMB2 fileio test with EA's and streams...
Jeremy Allison [Thu, 17 Sep 2009 16:29:07 +0000 (09:29 -0700)]
We now pass the Microsoft SMB2 fileio test with EA's and streams...
Jeremy.

12 years agoRemove ununsed variable warning.
Jeremy Allison [Thu, 17 Sep 2009 16:25:25 +0000 (09:25 -0700)]
Remove ununsed variable warning.
Jeremy.

12 years agos4/domain behaviour flags: Fix them up in various locations
Matthias Dieter Wallnöfer [Sun, 13 Sep 2009 10:37:41 +0000 (12:37 +0200)]
s4/domain behaviour flags: Fix them up in various locations

Additional notes:
- Bump the level to Windows Server 2008 R2 (we should support always the latest
  version - if we provision ourself)
- In "descriptor.c" the check for the "domainFunctionality" level shouldn't be
  needed: ACL owner groups (not owner user) are supported since Windows 2000
  Server (first AD edition)
  - I took the argument from: http://support.microsoft.com/kb/329194

12 years agos4/python: flags
Matthias Dieter Wallnöfer [Wed, 9 Sep 2009 19:24:34 +0000 (21:24 +0200)]
s4/python: flags

- Introduce the "userAccountControl", "groupType" and "sAMAccountType" flags
- Corrects the "domain/forestFunctionality" and "domainControllerFunctionality" flags

12 years agolibds/common/flags: various
Matthias Dieter Wallnöfer [Sun, 13 Sep 2009 09:01:44 +0000 (11:01 +0200)]
libds/common/flags: various

- Reorders the header file to have the order "userAccountFlags", "groupType",
  "sAMAccountType" (matches the order in the flag_mapping.c and samldb module)
- Fixes the group account flags properly up
- Fixes the flags for "domain/forestFunctionality" and "domainControllerFunctionality"
  up

12 years agoPort the Samba 3 shm_setup to QNX.
Matt Kraai [Wed, 16 Sep 2009 21:23:16 +0000 (14:23 -0700)]
Port the Samba 3 shm_setup to QNX.

12 years agoutil_smb: For some (unknown) reason the previous patch changed the permissions -...
Matthias Dieter Wallnöfer [Sun, 13 Sep 2009 08:53:30 +0000 (10:53 +0200)]
util_smb: For some (unknown) reason the previous patch changed the permissions - Reset them

12 years agoPort the Samba 4 shm_setup to QNX.
Matt Kraai [Wed, 16 Sep 2009 23:04:02 +0000 (16:04 -0700)]
Port the Samba 4 shm_setup to QNX.

12 years agoidl: added DRS GetNCChanges level 10
Andrew Tridgell [Thu, 17 Sep 2009 07:12:15 +0000 (00:12 -0700)]
idl: added DRS GetNCChanges level 10

12 years agoidl: rebuild drsuapi.idl
Andrew Tridgell [Thu, 17 Sep 2009 07:01:00 +0000 (00:01 -0700)]
idl: rebuild drsuapi.idl

12 years agoidl: added DsExecuteKCC IDL
Andrew Tridgell [Thu, 17 Sep 2009 06:45:05 +0000 (23:45 -0700)]
idl: added DsExecuteKCC IDL

12 years agondr: added --ndr64 flag to ndrdump
Andrew Tridgell [Thu, 17 Sep 2009 06:57:32 +0000 (23:57 -0700)]
ndr: added --ndr64 flag to ndrdump

This only does pull, but it is useful for w2k8-r2 <-> w2k8-r2 ndrdump
usage, which is always 64bit.

12 years agos3-winbindd: add and use winbindd_lookup_names().
Günther Deschner [Thu, 17 Sep 2009 06:06:34 +0000 (08:06 +0200)]
s3-winbindd: add and use winbindd_lookup_names().

Guenther

12 years agos3-winbindd: add and use winbindd_lookup_sids().
Günther Deschner [Thu, 17 Sep 2009 05:59:25 +0000 (07:59 +0200)]
s3-winbindd: add and use winbindd_lookup_sids().

Guenther

12 years agocifs-upcall: fix the build after spnego merge.
Günther Deschner [Thu, 17 Sep 2009 06:52:22 +0000 (08:52 +0200)]
cifs-upcall: fix the build after spnego merge.

Guenther

12 years agow32err: use WERR_DC_NOT_FOUND name instead of WERR_DOMAIN_CONTROLLER_NOT_FOUND
Kamen Mazdrashki [Thu, 17 Sep 2009 03:03:47 +0000 (06:03 +0300)]
w32err: use WERR_DC_NOT_FOUND name instead of WERR_DOMAIN_CONTROLLER_NOT_FOUND

Signed-off-by: Günther Deschner <gd@samba.org>
12 years agow32err: Set hex format values for all errors
Kamen Mazdrashki [Thu, 17 Sep 2009 02:59:08 +0000 (05:59 +0300)]
w32err: Set hex format values for all errors

Signed-off-by: Günther Deschner <gd@samba.org>
12 years agow32err: Re-define errors with numeric values
Kamen Mazdrashki [Thu, 17 Sep 2009 02:53:40 +0000 (05:53 +0300)]
w32err: Re-define errors with numeric values

Signed-off-by: Günther Deschner <gd@samba.org>
12 years agow32err: Sorting error codes in ascending order
Kamen Mazdrashki [Thu, 17 Sep 2009 02:08:34 +0000 (05:08 +0300)]
w32err: Sorting error codes in ascending order

Signed-off-by: Günther Deschner <gd@samba.org>
12 years agow32err: NERR_ codes grouped together
Kamen Mazdrashki [Thu, 17 Sep 2009 01:53:02 +0000 (04:53 +0300)]
w32err: NERR_ codes grouped together

Signed-off-by: Günther Deschner <gd@samba.org>
12 years agow32err: WERR_CLASS_NOT_REGISTERED updated
Kamen Mazdrashki [Thu, 17 Sep 2009 01:28:28 +0000 (04:28 +0300)]
w32err: WERR_CLASS_NOT_REGISTERED updated

Error code move to COM/OLE group.
Error value changed to as REGDB_E_CLASSNOTREG in Windows

Signed-off-by: Günther Deschner <gd@samba.org>
12 years agoTo set file create/birth time in GPFS. Signed-off-by: Abhidnya Chirmule <achirmul...
Abhidnya Chirmule [Wed, 16 Sep 2009 05:22:32 +0000 (07:22 +0200)]
To set file create/birth time in GPFS. Signed-off-by: Abhidnya Chirmule <achirmul@in.ibm.com>

12 years agos3:vfs: Fix the build of vfs_tsmsm after the VFS rewrite
Volker Lendecke [Thu, 17 Sep 2009 00:06:30 +0000 (02:06 +0200)]
s3:vfs: Fix the build of vfs_tsmsm after the VFS rewrite

12 years agospnego: add spnego_proto.h.
Günther Deschner [Wed, 16 Sep 2009 23:39:12 +0000 (01:39 +0200)]
spnego: add spnego_proto.h.

Guenther

12 years agospnego: share spnego_parse.
Günther Deschner [Wed, 16 Sep 2009 22:21:01 +0000 (00:21 +0200)]
spnego: share spnego_parse.

Guenther

12 years agolibcli/auth: remove trailing whitespace.
Günther Deschner [Tue, 15 Sep 2009 00:53:21 +0000 (02:53 +0200)]
libcli/auth: remove trailing whitespace.

Guenther

12 years agos3-netlogon: support validation level 6 in netr_SamLogon calls.
Günther Deschner [Mon, 31 Aug 2009 18:21:40 +0000 (20:21 +0200)]
s3-netlogon: support validation level 6 in netr_SamLogon calls.

Guenther

12 years agos3-netlogon: match all logon levels in netr_SamLogon calls.
Günther Deschner [Mon, 31 Aug 2009 18:20:52 +0000 (20:20 +0200)]
s3-netlogon: match all logon levels in netr_SamLogon calls.

Guenther

12 years agos3-rpcclient: fix netr_LogonGetCapabilities command.
Günther Deschner [Mon, 17 Aug 2009 15:57:47 +0000 (17:57 +0200)]
s3-rpcclient: fix netr_LogonGetCapabilities command.

Guenther

12 years agosecurity:idl Generated files
Nadezhda Ivanova [Wed, 16 Sep 2009 00:39:36 +0000 (17:39 -0700)]
security:idl Generated files

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
12 years agoOwner and group defaulting.
Nadezhda Ivanova [Mon, 14 Sep 2009 16:44:41 +0000 (19:44 +0300)]
Owner and group defaulting.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
12 years agoTests for descriptor inheritance
Zahari Zahariev [Wed, 16 Sep 2009 00:34:42 +0000 (17:34 -0700)]
Tests for descriptor inheritance

Signed-off-by: Nadezhda Ivanova <nadezhda.ivanova@postpath.com>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
12 years agos4:kdc In the kpasswd server, don't use the client address in mk_priv
Andrew Bartlett [Wed, 16 Sep 2009 05:02:36 +0000 (22:02 -0700)]
s4:kdc In the kpasswd server, don't use the client address in mk_priv

This code eventually calls into mk_priv in the Heimdal code, and if
the client is behind NAT, or somehow has an odd idea about it's own
network addresses, it will fail to accept this packet if we set an
address.  It seems easiser not to.  (Found by testing with NetAPP at
plugfest)

Andrew Bartlett

12 years agos4:rpc_server netgotiate max xmit size with RPC client
Andrew Bartlett [Wed, 16 Sep 2009 05:00:45 +0000 (22:00 -0700)]
s4:rpc_server netgotiate max xmit size with RPC client

Testing against NetAPP showed that clients can object to being told a
larger max xmit fragment size than they negotiated.  Choose the
minimum of the server and client values.

Andrew Bartlett

12 years agos3: Don't overwrite password in pam_winbind, subsequent pam modules
Bo Yang [Wed, 16 Sep 2009 14:03:57 +0000 (22:03 +0800)]
s3: Don't overwrite password in pam_winbind, subsequent pam modules
    might use the old password and new password.

Signed-off-by: Bo Yang <boyang@samba.org>
12 years agos4-repl: raise a debug level
Andrew Tridgell [Wed, 16 Sep 2009 10:57:56 +0000 (03:57 -0700)]
s4-repl: raise a debug level

12 years agos4-dsdb: treat uSNHighest as 0 if @REPLCHANGED doesn't exist
Andrew Tridgell [Wed, 16 Sep 2009 10:43:37 +0000 (03:43 -0700)]
s4-dsdb: treat uSNHighest as 0 if @REPLCHANGED doesn't exist

When a partition is first created it still needs a uSNHighest value

12 years agolibcli/auth: rewrite schannel sign/seal code to be more generic
Stefan Metzmacher [Wed, 16 Sep 2009 00:03:46 +0000 (02:03 +0200)]
libcli/auth: rewrite schannel sign/seal code to be more generic

This prepares support for HMAC-SHA256/AES.

metze

12 years agolib/crypto: include aes.h into crypto.h
Stefan Metzmacher [Wed, 16 Sep 2009 00:36:49 +0000 (02:36 +0200)]
lib/crypto: include aes.h into crypto.h

metze

12 years agoIgnore source4/dsdb/kcc/kcc_service_proto.h.
Matt Kraai [Tue, 15 Sep 2009 20:09:10 +0000 (13:09 -0700)]
Ignore source4/dsdb/kcc/kcc_service_proto.h.

12 years agos3-netapi: Fix Coverity #668: FORWARD_NULL.
Günther Deschner [Wed, 16 Sep 2009 08:27:21 +0000 (10:27 +0200)]
s3-netapi: Fix Coverity #668: FORWARD_NULL.

Guenther

12 years agos3-netapi: Fix Coverity #669 FORWARD_NULL.
Günther Deschner [Wed, 16 Sep 2009 08:26:28 +0000 (10:26 +0200)]
s3-netapi: Fix Coverity #669 FORWARD_NULL.

Guenthe

12 years agos3-netapi: Fix Coverity #670: FORWARD_NULL.
Günther Deschner [Wed, 16 Sep 2009 08:24:55 +0000 (10:24 +0200)]
s3-netapi: Fix Coverity #670: FORWARD_NULL.

Guenther

12 years agos3-eventlogadm: Fix Coverity #938: UNINIT.
Günther Deschner [Wed, 16 Sep 2009 08:15:46 +0000 (10:15 +0200)]
s3-eventlogadm: Fix Coverity #938: UNINIT.

Guenther

12 years agos3-rpcclient: Fix Coverity #935: UNINIT.
Günther Deschner [Wed, 16 Sep 2009 08:14:05 +0000 (10:14 +0200)]
s3-rpcclient: Fix Coverity #935: UNINIT.

Guenther

12 years agos3-ntlmssp: add missing prototype.
Günther Deschner [Wed, 16 Sep 2009 06:55:17 +0000 (08:55 +0200)]
s3-ntlmssp: add missing prototype.

Guenther

12 years agos3-dcerpc: remove more obsolete or duplicate headers.
Günther Deschner [Wed, 16 Sep 2009 06:54:31 +0000 (08:54 +0200)]
s3-dcerpc: remove more obsolete or duplicate headers.

Guenther

12 years agos3-schannel: add dump_NL_AUTH_SIGNATURE.
Günther Deschner [Wed, 16 Sep 2009 05:53:26 +0000 (07:53 +0200)]
s3-schannel: add dump_NL_AUTH_SIGNATURE.

Guenther

12 years agos4-repl: take advantage of async RPC forwarding
Andrew Tridgell [Wed, 16 Sep 2009 03:51:10 +0000 (20:51 -0700)]
s4-repl: take advantage of async RPC forwarding

This uses async RPC forwarding for the DsReplicaSync call

12 years agos4-rpc: added a module for forwarding RPC requests
Andrew Tridgell [Wed, 16 Sep 2009 03:50:30 +0000 (20:50 -0700)]
s4-rpc: added a module for forwarding RPC requests

dcesrv_irpc_forward_rpc_call() can be used to forward an arbitrary RPC
request to another task in Samba4, with the return being handled
asynchronously.

This is useful for forwarding DRS requests to the repl or kcc tasks

12 years agos4-drs: lock down key DRS calls
Andrew Tridgell [Wed, 16 Sep 2009 02:26:33 +0000 (19:26 -0700)]
s4-drs: lock down key DRS calls

The key DRS calls should only be allowed by administrators or domain
controllers

12 years agos4-security: added a new security level SECURITY_DOMAIN_CONTROLLER
Andrew Tridgell [Wed, 16 Sep 2009 02:25:45 +0000 (19:25 -0700)]
s4-security: added a new security level SECURITY_DOMAIN_CONTROLLER

This will be used as a simple way to lock down DRS replication to
administrators and domain controllers

12 years agos4-ldb: ldap attribute names can contain a '.'
Andrew Tridgell [Tue, 15 Sep 2009 21:07:43 +0000 (14:07 -0700)]
s4-ldb: ldap attribute names can contain a '.'

When they are of the form of OIDs

12 years agos4-ldb: expose ldb_transaction_prepare_commit() in ldb
Andrew Tridgell [Tue, 15 Sep 2009 21:07:06 +0000 (14:07 -0700)]
s4-ldb: expose ldb_transaction_prepare_commit() in ldb

It is useful to be able to control the 2 phase commit from application
code (s4 replication uses it)

12 years agos4-repl: don't do double replication
Andrew Tridgell [Tue, 15 Sep 2009 21:06:07 +0000 (14:06 -0700)]
s4-repl: don't do double replication

When we replicate from a remote DC, we need to note the new uSN that
the local changes have resulted in, and modify the uSN that the notify
task uses to determine if it should send a ReplicaSync message back to
the remote DC. Otherwise we end up always triggering a ReplicaSync
every time we replicate from another DC

12 years agotdb: allow reads after prepare commit
Andrew Tridgell [Tue, 15 Sep 2009 21:04:22 +0000 (14:04 -0700)]
tdb: allow reads after prepare commit

We previously only allowed a commit to happen after a prepare
commit. It is in fact safe to allow reads between a prepare and a
commit, and the s4 replication code can make use of that, so allow it.

12 years agos4-drs: filter based on local_usn
Andrew Tridgell [Tue, 15 Sep 2009 18:47:42 +0000 (11:47 -0700)]
s4-drs: filter based on local_usn

The getncchanges uSN is in our local space, so we must compare it to
the local_usn in replPropertyMetaData

12 years agos4-repl: make sure we marshal the replPropertyMetaData after the last change
Andrew Tridgell [Tue, 15 Sep 2009 18:46:59 +0000 (11:46 -0700)]
s4-repl: make sure we marshal the replPropertyMetaData after the last change

we were setting local_usn after the marshall, so it wasn't going into
the object

12 years agos4-dsdb: use DLIST_ADD() not DLIST_ADD_END()
Andrew Tridgell [Tue, 15 Sep 2009 17:01:26 +0000 (10:01 -0700)]
s4-dsdb: use DLIST_ADD() not DLIST_ADD_END()

Using DLIST_ADD_END() to construct a long list is very inefficient (it
is O(n^2). These lists are not ordered, so using DLIST_ADD() is much
better.

12 years agos4-ldb: cope better with corruption of tdb records
Andrew Tridgell [Tue, 15 Sep 2009 17:00:24 +0000 (10:00 -0700)]
s4-ldb: cope better with corruption of tdb records

When doing an indexed search if we hit a corrupt record we abandoned
the indexed search and did a full search. The problem was that we
might have sent some records to the caller already, which means the
caller ended up with duplicate records. Fix this by returning a search
error if indexing returns an error and we have given any records to
the caller.

12 years agotalloc: when we enable NULL tracking, reparent the autofree context
Andrew Tridgell [Tue, 15 Sep 2009 16:43:27 +0000 (09:43 -0700)]
talloc: when we enable NULL tracking, reparent the autofree context

If NULL tracking is enabled after the autofree context is initialised
then autofree ends up separate from the null_context. This means that
talloc_report_full() doesn't report the autofree context. Fix this by
reparenting the autofree context when we create the null_context.

12 years agos4-repl: add a debug to make it easier to monitor replication
Andrew Tridgell [Tue, 15 Sep 2009 16:23:14 +0000 (09:23 -0700)]
s4-repl: add a debug to make it easier to monitor replication

12 years agos3: Fix reading beyond the end of a named stream in xattr_streams
Volker Lendecke [Wed, 16 Sep 2009 01:20:49 +0000 (03:20 +0200)]
s3: Fix reading beyond the end of a named stream in xattr_streams

This was found thanks to a test by Sivani from Microsoft against Samba at the
SDC plugfest

12 years agos3: Add some debugs to streams_xattr
Volker Lendecke [Wed, 16 Sep 2009 01:15:53 +0000 (03:15 +0200)]
s3: Add some debugs to streams_xattr

12 years agoschannel: remove last traces of gensec.
Günther Deschner [Wed, 16 Sep 2009 01:23:05 +0000 (03:23 +0200)]
schannel: remove last traces of gensec.

Guenther

12 years agolib/crypto: link in AES crypto for s4 as well.
Günther Deschner [Wed, 16 Sep 2009 00:09:06 +0000 (02:09 +0200)]
lib/crypto: link in AES crypto for s4 as well.

Guenther

12 years agos3-schannel: remove unused schannel_decode/schannel_encode.
Günther Deschner [Tue, 15 Sep 2009 22:52:33 +0000 (00:52 +0200)]
s3-schannel: remove unused schannel_decode/schannel_encode.

Guenther

12 years agoschannel: fully share schannel sign/seal between s3 and 4.
Günther Deschner [Tue, 15 Sep 2009 22:26:17 +0000 (00:26 +0200)]
schannel: fully share schannel sign/seal between s3 and 4.

Guenther

12 years agoschannel: move schannel_sign to main directory.
Günther Deschner [Tue, 15 Sep 2009 16:29:10 +0000 (18:29 +0200)]
schannel: move schannel_sign to main directory.

Guenther

12 years agos4-schannel: try to fix the build.
Günther Deschner [Tue, 15 Sep 2009 23:07:26 +0000 (01:07 +0200)]
s4-schannel: try to fix the build.

Guenther