13 years agos4:provision Add comments to the provision script
Andrew Bartlett [Mon, 17 Aug 2009 01:41:58 +0000 (11:41 +1000)]
s4:provision Add comments to the provision script

Hopefully this will explain a bit more whey things are done the way
that they are done.

Andrew Bartlett

13 years agos4:provision Avoid one more call to ltdb_reindex
Andrew Bartlett [Mon, 17 Aug 2009 01:33:25 +0000 (11:33 +1000)]
s4:provision Avoid one more call to ltdb_reindex

The Samba4 schema code (called via
samdb.set_schema_from_ldb(schema.ldb)) manages the @ATTRIBUTES and
@INDEXLIST records, so don't wipe them early.  The chances are that we
will not change them anyway.

Andrew Bartlett

13 years agos4:ldb Remove obsolete comment about ldb_tdb's sequence num
Andrew Bartlett [Mon, 17 Aug 2009 01:20:29 +0000 (11:20 +1000)]
s4:ldb Remove obsolete comment about ldb_tdb's sequence num

13 years agomake sure we update the current schema->prefixes when we add a new prefix
Andrew Tridgell [Mon, 17 Aug 2009 01:13:23 +0000 (11:13 +1000)]
make sure we update the current schema->prefixes when we add a new prefix

This triggered a failure in the updateNow schema test, as the current
global schema was not being updated when a new schema element was

13 years agofixed the updateNow schema test to use a canonical OID
Andrew Tridgell [Mon, 17 Aug 2009 01:12:10 +0000 (11:12 +1000)]
fixed the updateNow schema test to use a canonical OID

The expression time.strftime("%s", time.gmtime())[3:] leads to a
string with a leading 0. When added then read back from the prefix map
this leads to a different string, so it is never found.

Use the simpler str(random.randint(a,b)) expression instead

13 years agos4:selftest Remove the 'subunit filter' from make testenv etc
Andrew Bartlett [Fri, 14 Aug 2009 07:51:14 +0000 (17:51 +1000)]
s4:selftest Remove the 'subunit filter' from make testenv etc

The extra filter is no use for 'testenv', as we are not running tests,
but an xterm.  The filter also breaks running 'GDB_PROVISION=yes make
test', but at least if we can run 'GDB_PROVISION=yes make testenv'
then we can debug provision.

Andrew Bartlett

13 years agos4:libcli/ldap Explain why we set a hostname for ldapi:// connections
Andrew Bartlett [Fri, 14 Aug 2009 07:50:18 +0000 (17:50 +1000)]
s4:libcli/ldap Explain why we set a hostname for ldapi:// connections

It is a pretty odd thing to do, and it's only because of the
restrictions of DIGEST-MD5 in Cyrus SASL that we do it.

Andrew Bartlett

13 years agos4:provision Fix existing ldapi:// backend detection exception
Andrew Bartlett [Sun, 16 Aug 2009 23:52:09 +0000 (09:52 +1000)]
s4:provision Fix existing ldapi:// backend detection exception

Found by Oliver Liebel <>

Andrew Bartlett

13 years agos4:install Remove provision-backend script from 'make install'
Andrew Bartlett [Sun, 16 Aug 2009 23:46:47 +0000 (09:46 +1000)]
s4:install Remove provision-backend script from 'make install'

Spotted by MICHAEL BROWN <>

Andrew Bartlett

13 years agos4:provision Make sure that we don't use Kerberos to our LDAP backend
Andrew Bartlett [Fri, 14 Aug 2009 04:51:44 +0000 (14:51 +1000)]
s4:provision Make sure that we don't use Kerberos to our LDAP backend

This makes no sense, and just causes trouble - we are aiming for

Andrew Bartlett

13 years agos4:provison Print the LDAP backend admin username/password
Andrew Bartlett [Fri, 14 Aug 2009 00:28:56 +0000 (10:28 +1000)]
s4:provison Print the LDAP backend admin username/password

13 years agos4:selftest Confirm that there isn't a listener on the ldapi:// socket
Andrew Bartlett [Fri, 14 Aug 2009 00:21:04 +0000 (10:21 +1000)]
s4:selftest Confirm that there isn't a listener on the ldapi:// socket

This should help debug problems with 'make test' of the LDAP backend,
if a stray listener is still around.

Andrew Bartlett

13 years agos4: Re-add --ldapadminpass as an option to provision
Andrew Bartlett [Thu, 13 Aug 2009 23:37:50 +0000 (09:37 +1000)]
s4: Re-add --ldapadminpass as an option to provision

This should make setting up LDAP servers more predictable.

When not specified, it is random

Andrew Bartlett

13 years agos4:python Allow 'no such object' on the delete of the DN
Andrew Bartlett [Thu, 13 Aug 2009 22:46:13 +0000 (08:46 +1000)]
s4:python Allow 'no such object' on the delete of the DN

This fixes the recursive delete in erase_partitions()

For reasons I cannot understand, it is possible to get 'no such
object' trying to delete a DN I just search for without error.  Oh

Andrew Bartlett

13 years agos4:provision Keep a single transaction for the erase and rebuild
Andrew Bartlett [Thu, 13 Aug 2009 22:29:19 +0000 (08:29 +1000)]
s4:provision Keep a single transaction for the erase and rebuild

Using a single transaction to both erase the bulk of the data and the
rebuild of that data means that the in-memory index list is
maintained, and not written out to disk until it is all compleated.
All the writes then occour at the end.

Andrew Bartlett

13 years agos4:provision A crude update of the OpenLDAP backend HOWTO
Andrew Bartlett [Thu, 13 Aug 2009 09:24:38 +0000 (19:24 +1000)]
s4:provision A crude update of the OpenLDAP backend HOWTO

13 years agos4:provision Fixes for Fedora DS schema mapping with full AD schema
Endi Sukma Dewata [Thu, 13 Aug 2009 09:12:28 +0000 (19:12 +1000)]
s4:provision Fixes for Fedora DS schema mapping with full AD schema

13 years agos4:provision Rework provision-backend into provision
Andrew Bartlett [Thu, 13 Aug 2009 07:01:27 +0000 (17:01 +1000)]
s4:provision Rework provision-backend into provision

This removes a *lot* of duplicated code and the cause of much
administrator frustration.  We now handle starting and stopping the
slapd (at least for the provision), and ensure that there is only one
'right' way to configure the OpenLDAP and Fedora DS backend

We now run OpenLDAP in 'cn=config' mode for online configuration.

To test what was the provision-backend code, a new --ldap-dryrun-mode
option has been added to provision.  It quits the provision just
before it would start the LDAP binaries

Andrew Bartlett

13 years agos4:provision Move helper functions back to provision
Andrew Bartlett [Thu, 13 Aug 2009 06:59:49 +0000 (16:59 +1000)]
s4:provision Move helper functions back to provision

(These will be added back in a future commit)

13 years agos4:setup Don't manually set @ATTRIBUTES any more
Andrew Bartlett [Thu, 13 Aug 2009 06:32:34 +0000 (16:32 +1000)]
s4:setup Don't manually set @ATTRIBUTES any more

We now set these as part of the schema load, and we now load the
schema before the provision loads the DB, so setting them here is

Andrew Bartlett

13 years agos4:python Push some helper functions from SamDB into samba.Ldb
Andrew Bartlett [Thu, 13 Aug 2009 04:37:06 +0000 (14:37 +1000)]
s4:python Push some helper functions from SamDB into samba.Ldb

This makes it possible to do a bit more of the provision with Samba
helpers, but without some of the otherwise useful things (such as
loading in the global schema) that SamDB does.

Rewrite provision_erase to use a recursive search, rather than a
looping subtree search.  This is much more efficient, particularly now
we have one-level indexes enabled.

Delete the @INDEX and similar records *after* deleting all other
visible records, this hopefully also assists performance.

Andrew Bartlett

13 years agos4:schema Allow a schema load on an unconnected database
Andrew Bartlett [Thu, 13 Aug 2009 04:33:57 +0000 (14:33 +1000)]
s4:schema Allow a schema load on an unconnected database

This helps ensure we don't load the schema too often in the provision
(allowing a reference in of the schema before the modules load).

Andrew Bartlett

13 years agos4:provision Remove the ACI element from the provision templates
Andrew Bartlett [Thu, 13 Aug 2009 00:01:00 +0000 (10:01 +1000)]
s4:provision  Remove the ACI element from the provision templates

We need to find a better way to apply this (used in the Fedora DS LDAP
backend), not by trying to tunnel this down the module stack.

Andrew Bartlett

13 years agos4:schema Provide a way to reference a loaded schema between ldbs
Andrew Bartlett [Wed, 12 Aug 2009 23:58:38 +0000 (09:58 +1000)]
s4:schema Provide a way to reference a loaded schema between ldbs

This allows us to load the schema against one ldb context, but apply
it to another.  This will be useful in the provision script, as we
need the schema before we start the LDAP server backend.

Adnrew Bartlett

13 years agos3:winbind: The get[gr|pw]end functions need access to the client state
Volker Lendecke [Sun, 16 Aug 2009 10:46:55 +0000 (12:46 +0200)]
s3:winbind: The get[gr|pw]end functions need access to the client state

13 years agos3:winbind: Convert WINBINDD_GETGRNAM to the new API
Volker Lendecke [Sun, 16 Aug 2009 10:23:31 +0000 (12:23 +0200)]
s3:winbind: Convert WINBINDD_GETGRNAM to the new API

13 years agos3:winbind: Convert WINBINDD_GETGRGID to the new API
Volker Lendecke [Sun, 16 Aug 2009 10:13:00 +0000 (12:13 +0200)]
s3:winbind: Convert WINBINDD_GETGRGID to the new API

13 years agos3:winbind: Add winbindd_print_groupmem
Volker Lendecke [Sun, 16 Aug 2009 10:09:37 +0000 (12:09 +0200)]
s3:winbind: Add winbindd_print_groupmem

This converts a talloc_dict retrieved from wb_group_members to the string
that the pipe protocol expects

13 years agos3:winbind: Make fill_grent publically available
Volker Lendecke [Sun, 16 Aug 2009 10:08:52 +0000 (12:08 +0200)]
s3:winbind: Make fill_grent publically available

13 years agos3:winbind: Add const to normalize_name_map
Volker Lendecke [Sun, 16 Aug 2009 10:07:32 +0000 (12:07 +0200)]
s3:winbind: Add const to normalize_name_map

13 years agos3:winbind: Add async wb_getgrsid
Volker Lendecke [Sun, 16 Aug 2009 09:25:31 +0000 (11:25 +0200)]
s3:winbind: Add async wb_getgrsid

13 years agos3:winbind: Add async wb_group_members
Volker Lendecke [Sun, 16 Aug 2009 08:58:43 +0000 (10:58 +0200)]
s3:winbind: Add async wb_group_members

13 years agos3:winbind: Make wcache_lookup_groupmem available publically
Volker Lendecke [Sat, 8 Aug 2009 14:24:29 +0000 (16:24 +0200)]
s3:winbind: Make wcache_lookup_groupmem available publically

13 years agos3: Add talloc_dict.[ch]
Volker Lendecke [Sun, 16 Aug 2009 08:44:06 +0000 (10:44 +0200)]
s3: Add talloc_dict.[ch]

13 years agos3:winbind: Fix a potential segfault in libwbclient
Volker Lendecke [Sat, 15 Aug 2009 20:04:13 +0000 (22:04 +0200)]
s3:winbind: Fix a potential segfault in libwbclient

13 years agos3:winbind: Convert winbindd_show_sequence to the new API
Volker Lendecke [Sat, 15 Aug 2009 11:23:57 +0000 (13:23 +0200)]
s3:winbind: Convert winbindd_show_sequence to the new API

13 years agos3:winbind: Add async wb_seqnums
Volker Lendecke [Sat, 15 Aug 2009 09:21:16 +0000 (11:21 +0200)]
s3:winbind: Add async wb_seqnums

This is something that would have been very difficult with the old style of
async requests: Send the request to all children simultaneously.

13 years agos3:winbind: Add async wb_seqnum
Volker Lendecke [Sat, 15 Aug 2009 09:16:28 +0000 (11:16 +0200)]
s3:winbind: Add async wb_seqnum

13 years agos3:winbind: WINBIND_USERINFO -> wbint_userinfo
Volker Lendecke [Sun, 9 Aug 2009 11:31:31 +0000 (07:31 -0400)]
s3:winbind: WINBIND_USERINFO -> wbint_userinfo

13 years agos3:winbind: Simplify _wbint_[GU]id2Sid
Volker Lendecke [Sun, 9 Aug 2009 11:17:35 +0000 (07:17 -0400)]
s3:winbind: Simplify _wbint_[GU]id2Sid

13 years agotevent: add some more doxygen comments for tevent_req functions
Stefan Metzmacher [Sat, 15 Aug 2009 07:45:39 +0000 (09:45 +0200)]
tevent: add some more doxygen comments for tevent_req functions


13 years agos3:Makefile: build ../libcli/smb/smb2_create_blob.o as part of smbd
Stefan Metzmacher [Wed, 12 Aug 2009 18:39:11 +0000 (20:39 +0200)]
s3:Makefile: build ../libcli/smb/smb2_create_blob.o as part of smbd


13 years agolibcli/smb: add smb2_create_blob_find()
Stefan Metzmacher [Wed, 12 Aug 2009 18:38:45 +0000 (20:38 +0200)]
libcli/smb: add smb2_create_blob_find()


13 years agoUse defined names rather than numeric constants to make code
Jeremy Allison [Fri, 14 Aug 2009 22:06:11 +0000 (15:06 -0700)]
Use defined names rather than numeric constants to make code

13 years map the file_inherit and dir_inherit flags away for files
Michael Adam [Mon, 10 Aug 2009 16:18:19 +0000 (18:18 +0200)] map the file_inherit and dir_inherit flags away for files

GPFS sets inherits dir_inhert and file_inherit flags
to files, too, which confuses windows, and seems to
be wrong anyways.

So when mapping a nfs4 acl to a windows acl, we map these
flags away for files.


13 years agocifs.upcall: fix IPv6 addrs sent to upcall to have colon delimiters
Jeff Layton [Fri, 14 Aug 2009 11:59:51 +0000 (07:59 -0400)]
cifs.upcall: fix IPv6 addrs sent to upcall to have colon delimiters

Current kernels don't send IPv6 addresses with the colon delimiters, add
a routine to add them when they're not present.

Signed-off-by: Jeff Layton <>
13 years agocifs.upcall: use ip address passed by kernel to get server's hostname
Jeff Layton [Fri, 14 Aug 2009 11:59:50 +0000 (07:59 -0400)]
cifs.upcall: use ip address passed by kernel to get server's hostname

Instead of using the hostname given by the upcall to get the server's
principal, take the IP address given in the upcall and reverse resolve
it to a hostname.

Signed-off-by: Jeff Layton <>
13 years agocifs.upcall: clean up flag handling
Jeff Layton [Fri, 14 Aug 2009 11:59:50 +0000 (07:59 -0400)]
cifs.upcall: clean up flag handling

Add a new stack var to hold the flags returned by the decoder routine
so that we don't need to worry so much about preserving "rc".

With this, we can drop privs before trying to find the location of
the credcache.

Signed-off-by: Jeff Layton <>
13 years agocifs.upcall: try getting a "cifs/" principal and fall back to "host/"
Jeff Layton [Fri, 14 Aug 2009 11:59:50 +0000 (07:59 -0400)]
cifs.upcall: try getting a "cifs/" principal and fall back to "host/"

cifs.upcall takes a "-c" flag that tells the upcall to get a principal
in the form of "cifs/" instead of
"host/". This has turned out to be a source of
great confusion for users.

Instead of requiring this flag, have the upcall try to get a "cifs/"
principal first. If that fails, fall back to getting a "host/"

Signed-off-by: Jeff Layton <>
13 years agocifs.upcall: declare a structure for holding decoded args
Jeff Layton [Fri, 14 Aug 2009 11:59:49 +0000 (07:59 -0400)]
cifs.upcall: declare a structure for holding decoded args

The argument list for the decoder is becoming rather long. Declare an
args structure and use that for holding the args. This also simplifies
pointer handling a bit.

Signed-off-by: Jeff Layton <>
13 years agocifs.upcall: formatting cleanup
Jeff Layton [Fri, 14 Aug 2009 11:59:49 +0000 (07:59 -0400)]
cifs.upcall: formatting cleanup

Clean up some unneeded curly braces, and fix some indentation.

Signed-off-by: Jeff Layton <>
13 years agocifs.upcall: clean up logging and add debug messages
Jeff Layton [Fri, 14 Aug 2009 11:59:49 +0000 (07:59 -0400)]
cifs.upcall: clean up logging and add debug messages

Change the log levels to be more appropriate to the messages being
logged. Error messages should be LOG_ERR and not LOG_WARNING, for

Add some LOG_DEBUG messages that we can use to diagnose problems with
krb5 upcalls. With these, someone can set up syslog to log daemon.debug
and should be able to get more info when things aren't working.

Signed-off-by: Jeff Layton <>
13 years agos3:smbd: allow SMB2 Cancel to have the async flag set
Stefan Metzmacher [Fri, 14 Aug 2009 09:24:30 +0000 (11:24 +0200)]
s3:smbd: allow SMB2 Cancel to have the async flag set


13 years agos3:smbd: fix parsing of the SMB2 body
Stefan Metzmacher [Fri, 14 Aug 2009 09:14:42 +0000 (11:14 +0200)]
s3:smbd: fix parsing of the SMB2 body

Maybe there's no dynamic part on the wire.


13 years agos4:samdb python bindings - we don't need the attributes here
Matthias Dieter Wallnöfer [Thu, 13 Aug 2009 23:42:12 +0000 (01:42 +0200)]
s4:samdb python bindings - we don't need the attributes here

13 years agos4:ldb - Free the asynchronous result
Matthias Dieter Wallnöfer [Thu, 13 Aug 2009 23:39:56 +0000 (01:39 +0200)]
s4:ldb - Free the asynchronous result

13 years agos4: Correct the parameter logic of the "setpassword" script
Matthias Dieter Wallnöfer [Thu, 13 Aug 2009 21:04:34 +0000 (23:04 +0200)]
s4: Correct the parameter logic of the "setpassword" script

Either the username or the filter are allowed. If both are given the filter is
going to be used due to a higher precedence.

13 years agos4: Better way to call "dom_sid_to_rid" from
Matthias Dieter Wallnöfer [Thu, 13 Aug 2009 09:37:38 +0000 (11:37 +0200)]
s4: Better way to call "dom_sid_to_rid" from

13 years agos4: Remove obsolete "samdb_password_quality_ok" function (it's just a one-line wrapper)
Matthias Dieter Wallnöfer [Thu, 13 Aug 2009 08:43:42 +0000 (10:43 +0200)]
s4: Remove obsolete "samdb_password_quality_ok" function (it's just a one-line wrapper)

13 years agos4: cracknames.c: Change the handling of the NT_STATUS_NO_MEMORY status results
Matthias Dieter Wallnöfer [Thu, 13 Aug 2009 07:50:19 +0000 (09:50 +0200)]
s4: cracknames.c: Change the handling of the NT_STATUS_NO_MEMORY status results

With the previous check I got random failures when trying to connect to the
LDAP server.

13 years agos4:ldap_server Correct removal of talloc_steal()
Andrew Bartlett [Fri, 14 Aug 2009 03:10:42 +0000 (13:10 +1000)]
s4:ldap_server Correct removal of talloc_steal()

This corrects commit 7a82aed71b74af8bc2a8a4381541adbb22452d20.  The
steal did not set ent->attributes, so it was incorrect to assign to

Andrew Bartlett

13 years agofixed TESTS= in make test to allow multiple tests
Andrew Tridgell [Fri, 14 Aug 2009 03:04:21 +0000 (13:04 +1000)]
fixed TESTS= in make test to allow multiple tests

Now you can do: make test TESTS="test1 test2" and it will run those
two tests, each matching tests using a case insensitive substring

13 years agos4:ldap_server Remove another talloc_steal (with references)
Andrew Bartlett [Fri, 14 Aug 2009 02:57:46 +0000 (12:57 +1000)]
s4:ldap_server Remove another talloc_steal (with references)

This talloc_steal also conflicts with the ldb_map code, and like the
previous commit, is rudundent given the talloc_steal of the whole msg

Andrew Bartlett

13 years agos4:ldap_server Don't talloc_steal (with references) in ldap_backend
Andrew Bartlett [Fri, 14 Aug 2009 02:48:10 +0000 (12:48 +1000)]
s4:ldap_server Don't talloc_steal (with references) in ldap_backend

There may or may not be a need to take a reference to the 'name' in
the ldb_map code, but given we seal the whole msg just above here, it
makes no senst to steal the name, but not the values.

Andrew Bartlett

13 years agoFix EVERY SINGLE build on the buildfarm that doesn't have
Jeremy Allison [Thu, 13 Aug 2009 00:44:48 +0000 (17:44 -0700)]
Fix EVERY SINGLE build on the buildfarm that doesn't have
bindtextdomain or textdomain. C'mon, this is what
is *FOR*.

13 years agoMove build over to storing DOS attributes in EA's.
Jeremy Allison [Thu, 13 Aug 2009 00:07:13 +0000 (17:07 -0700)]
Move build over to storing DOS attributes in EA's.
Turn off "map to" directives. I've now fixed the
issues with the build tests running this way. I think
this is how most people run these days - please raise this on
the list (or revert) if you disagree.

13 years agoWhen mapping EA's into a TDB, don't remove the EA
Jeremy Allison [Wed, 12 Aug 2009 23:27:17 +0000 (16:27 -0700)]
When mapping EA's into a TDB, don't remove the EA
until the last link to the file is gone (fixes the
build farm RAW-RENAME test with xattr's in tdb's).

13 years agoFix BASE-DELAYWRITE test by removing const from struct smb_filename
Jeremy Allison [Wed, 12 Aug 2009 22:08:23 +0000 (15:08 -0700)]
Fix BASE-DELAYWRITE test by removing const from struct smb_filename
in smbd_do_qfilepathinfo(). update_stat_ex_mtime() modifies the
stat struct inside the smb_fname so don't make a copy of that
stat struct, use it directly - it's meant to be updated and
represent the state of the file we're returning.

13 years agoDocumentation for "store create time".
Jeremy Allison [Wed, 12 Aug 2009 20:54:38 +0000 (13:54 -0700)]
Documentation for "store create time".

13 years agoAdd "store create time" parameter (docs to follow)
Jeremy Allison [Wed, 12 Aug 2009 20:00:54 +0000 (13:00 -0700)]
Add "store create time" parameter (docs to follow)
that stores the create time in the user.DosTimestamps EA.

13 years agoFix some warnings in the AIX ACL code.
Jeremy Allison [Wed, 12 Aug 2009 17:58:00 +0000 (10:58 -0700)]
Fix some warnings in the AIX ACL code.

13 years agolibcli/smb: move smb2_create_blob code to libcli/smb/
Stefan Metzmacher [Wed, 12 Aug 2009 15:43:03 +0000 (17:43 +0200)]
libcli/smb: move smb2_create_blob code to libcli/smb/

I want to use this in source3/smbd/


13 years agolibcli: move some common SMB and SMB2 stuff into libcli/smb/
Stefan Metzmacher [Wed, 12 Aug 2009 15:52:55 +0000 (17:52 +0200)]
libcli: move some common SMB and SMB2 stuff into libcli/smb/

This will hold code that's shared between source3 and source4.


13 years agolibrpc: rerun "make idl_full"
Kai Blin [Wed, 12 Aug 2009 15:59:46 +0000 (17:59 +0200)]
librpc: rerun "make idl_full"

13 years agos3:smbd: as check_path_syntax() changes the string, we need to copy the string before
Stefan Metzmacher [Tue, 11 Aug 2009 16:31:27 +0000 (18:31 +0200)]
s3:smbd: as check_path_syntax() changes the string, we need to copy the string before


13 years agos3:smbd: avoid 'goto out' in smbd_smb2_create_send()
Stefan Metzmacher [Tue, 11 Aug 2009 16:29:06 +0000 (18:29 +0200)]
s3:smbd: avoid 'goto out' in smbd_smb2_create_send()


13 years agos3:smbd: make sure we don't call conn_free() with a NULL pointer for SMB2
Stefan Metzmacher [Tue, 11 Aug 2009 16:09:05 +0000 (18:09 +0200)]
s3:smbd: make sure we don't call conn_free() with a NULL pointer for SMB2


13 years agos3:smbd: correctly invalidate vuids when SMB2 is used
Stefan Metzmacher [Tue, 11 Aug 2009 16:08:26 +0000 (18:08 +0200)]
s3:smbd: correctly invalidate vuids when SMB2 is used


Stefan Metzmacher [Tue, 11 Aug 2009 11:52:07 +0000 (13:52 +0200)]


13 years agolibreplace: undef AI_ADDRCONFIG on QNX 6.3.0 (fix bug #6630)
Matt Kraai [Wed, 12 Aug 2009 06:49:24 +0000 (08:49 +0200)]
libreplace: undef AI_ADDRCONFIG on QNX 6.3.0 (fix bug #6630)

Some of the functions in source3/lib/util_sock.c use AI_ADDRCONFIG.  On QNX
6.3.0, this macro is defined but, if it's used, getaddrinfo will fail.  This
prevents smbd from opening any sockets.

If I undefine AI_ADDRCONFIG on such systems and allow
lib/replace/system/network.h to define it to be 0, this works around the issue.

Signed-off-by: Stefan Metzmacher <>
13 years agos4:operational - Remove some outdated comments
Matthias Dieter Wallnöfer [Tue, 11 Aug 2009 09:08:05 +0000 (11:08 +0200)]
s4:operational - Remove some outdated comments

13 years agoldb: Don't break the standalone LDB build (operational module removed)
Matthias Dieter Wallnöfer [Tue, 11 Aug 2009 09:02:03 +0000 (11:02 +0200)]
ldb: Don't break the standalone LDB build (operational module removed)

13 years agos4:test for "primaryGroupToken"
Matthias Dieter Wallnöfer [Tue, 11 Aug 2009 10:25:13 +0000 (12:25 +0200)]
s4:test for "primaryGroupToken"

Tests for the right behaviour of this introduced constructed attribute.
Since we don't support the read-only-ness of those attributes yet, I commented
some lines out.
Also I had to add a function for python which converts domain SIDs in RIDs.
And a small fix for the "groupType" test.

13 years agos4:samldb module - Remove duplicate line
Matthias Dieter Wallnöfer [Mon, 10 Aug 2009 11:19:18 +0000 (13:19 +0200)]
s4:samldb module - Remove duplicate line

13 years agos4:operational module - move and enhancements
Matthias Dieter Wallnöfer [Mon, 10 Aug 2009 11:16:41 +0000 (13:16 +0200)]
s4:operational module - move and enhancements

This moves the "operational" LDB module to the right place under "dsdb/samdb/ldb_modules"
(suggested by abartlet) and enhances it for supporting dynamic generated
"primaryGroupToken" for AD groups. This should fix bug #6466.

13 years agos4:pwsettings script - Fix a small glitch
Matthias Dieter Wallnöfer [Mon, 10 Aug 2009 09:06:33 +0000 (11:06 +0200)]
s4:pwsettings script - Fix a small glitch

This fixes the problem with the setting and getting of the "minPwdAge" and
"maxPwdAge" attributes. I wanted to handle them in days but forgot to add
conversions (from "ticks" (tenth of microsecond) -> "days" and backwards).

13 years agoRename ASN1_BITFIELD to ASN1_BIT_STRING.
Kouhei Sutou [Mon, 10 Aug 2009 03:18:58 +0000 (12:18 +0900)]

X.690 uses "BIT STRING" not "BIT FIELD".

13 years agotorture/basic: in run_derefopen() the file could have been deleted before the last...
Matthias Dieter Wallnöfer [Mon, 10 Aug 2009 08:12:51 +0000 (10:12 +0200)]
torture/basic: in run_derefopen() the file could have been deleted before the last unlink

Through a suggestion pointed out in bug #6622 the test file sometimes doesn't exist on
the last turn anymore. So we haven't to fail here since it could have been deleted by
a concurrent process (e.g. when the same test runs multiple times). Therefore also
NT_STATUS_OBJECT_NAME_NOT_FOUND is an acceptable result.

13 years agos4:AD LDIFs - More refactoring
Matthias Dieter Wallnöfer [Sat, 8 Aug 2009 11:50:10 +0000 (13:50 +0200)]
s4:AD LDIFs - More refactoring

This commit includes:
- Additional static object data in SAMBA 4's AD to start supporting of
  - forest updates, - lost and found, - quotas on DS, - physical locations,
  - licensing of sites, - subnets, - policies for WMI, - DNS entries in AD
- Reordering of provision*.ldif files to be able to find entries and make future
  additions easier
- Add comments in provision*.ldif files to point out where subentries are located
  when they are based in other LDIFs
- Removations of autogenerated "cn" attributes

13 years agopidl: fix parse_idl test after idl.yp changes
Stefan Metzmacher [Wed, 12 Aug 2009 08:24:01 +0000 (10:24 +0200)]
pidl: fix parse_idl test after idl.yp changes

We now generate 'FILE' and 'LINE' elements for each layer.

This change makes the expected PIDL trees human readable:-)


13 years agopidl: fix samba3-cli test after the async function were added
Stefan Metzmacher [Wed, 12 Aug 2009 08:01:12 +0000 (10:01 +0200)]
pidl: fix samba3-cli test after the async function were added


13 years agotry to give some hint as to what is causing NDR string errors
Andrew Tridgell [Wed, 12 Aug 2009 05:34:03 +0000 (15:34 +1000)]
try to give some hint as to what is causing NDR string errors

13 years agowhen we get an NDR error in the logs, it is useful to know where it happened
Andrew Tridgell [Wed, 12 Aug 2009 05:33:37 +0000 (15:33 +1000)]
when we get an NDR error in the logs, it is useful to know where it happened

13 years agono need to shout about getting an oplock
Andrew Tridgell [Wed, 12 Aug 2009 05:20:02 +0000 (15:20 +1000)]
no need to shout about getting an oplock

13 years agoraise the debug level for a common message
Andrew Tridgell [Wed, 12 Aug 2009 05:19:42 +0000 (15:19 +1000)]
raise the debug level for a common message

when a client disconnects we expect this to happen, so don't print an
error each time

13 years agoAllow selection of the samba4 process model for 'make test'
Andrew Tridgell [Wed, 12 Aug 2009 04:41:44 +0000 (14:41 +1000)]
Allow selection of the samba4 process model for 'make test'

To choose the process model, set the environment variable
SAMBA_PROCESS_MODEL to the desired model. This will allow us to enable
the standard process model for some machines in the build farm without
enabling it for all of them. I don't want to just enable it
universally as I am concerned with total memory using during some of
the tests.

13 years agoprint server log on stderr as well as to log file
Andrew Tridgell [Wed, 12 Aug 2009 04:38:55 +0000 (14:38 +1000)]
print server log on stderr as well as to log file

I think we are missing some important messages from the server during
'make test' because we don't show the log file contents during
runs. This patch uses tee to put the log messages to stderr so we can
see any server messages associated with the test that caused them.

13 years agos4:provision Allow provision-backend to not run slapd for 'make test'
Andrew Bartlett [Wed, 12 Aug 2009 01:09:50 +0000 (11:09 +1000)]
s4:provision Allow provision-backend to not run slapd for 'make test'

As the version of OpenLDAP required for Samba4 is fairly new, we don't
want to make it a requirement before this python code is run in 'make

As such, skip over the actual starting of slapd, but check the rest
runs alright (which still validates syntax and other modules).

Andrew Bartlett

13 years agos4:selftest Don't start the slapd for the provision, only for the run
Andrew Bartlett [Mon, 10 Aug 2009 12:01:28 +0000 (22:01 +1000)]
s4:selftest Don't start the slapd for the provision, only for the run

The provision-backend script now starts slapd for us

Andrew Bartlett

13 years agos4:selftest Make OpenLDAP guess it's own modules from now on
Andrew Bartlett [Mon, 10 Aug 2009 11:51:08 +0000 (21:51 +1000)]
s4:selftest Make OpenLDAP guess it's own modules from now on

In the releases of OpenLDAP we require (2.4.17) it can guess this much
itself, so no need for us to do it.

Andrew Bartlett