15 years agor8790: Finish the migration of aliases and privilages with SamSync, by adding
Andrew Bartlett [Wed, 27 Jul 2005 00:23:09 +0000 (00:23 +0000)]
r8790: Finish the migration of aliases and privilages with SamSync, by adding
templating support for foreignSecurityPrincipals to the samdb module.
This is an extension beyond what microsoft does, and has been very
useful :-)

The setup scripts have been modified to use the new template, as has
the SAMR and LSA code.

Other cleanups in LSA remove the assumption that the short domain name
is the first component of the realm.

Also add a lot of useful debug messages, to make it clear how/why the
SamSync may have gone wrong.  Many of these should perhaps be hooked
into an error string.

Andrew Bartlett

15 years agor8789: Send new monitor messages from userdel routine.
Rafal Szczesniak [Tue, 26 Jul 2005 23:03:37 +0000 (23:03 +0000)]
r8789: Send new monitor messages from userdel routine.


15 years agor8788: New monitor messages.
Rafal Szczesniak [Tue, 26 Jul 2005 23:02:35 +0000 (23:02 +0000)]
r8788: New monitor messages.


15 years agor8784: Install pidl in "vendor" directories (matches debian policy)
Jelmer Vernooij [Tue, 26 Jul 2005 18:20:17 +0000 (18:20 +0000)]
r8784: Install pidl in "vendor" directories (matches debian policy)

15 years agor8781: - fixed a memory leak in BASE-SECLEAK (ironic, isn't it). There is
Andrew Tridgell [Tue, 26 Jul 2005 12:41:29 +0000 (12:41 +0000)]
r8781: - fixed a memory leak in BASE-SECLEAK (ironic, isn't it). There is
  another leak in the ASN.1 code that andrew has volunteered to look at

- make the timelimit controllable with -t

15 years agor8780: make numops controllable in BASE-DISCONNECT
Andrew Tridgell [Tue, 26 Jul 2005 12:40:26 +0000 (12:40 +0000)]
r8780: make numops controllable in BASE-DISCONNECT

15 years agor8779: Add rdn module to makefile and headers
Simo Sorce [Tue, 26 Jul 2005 09:17:46 +0000 (09:17 +0000)]
r8779: Add rdn module to makefile and headers
Search by distinguishedName as if searching by dn

15 years agor8778: index on nCName in sam.ldb. This was costing us about 75% of the time in each...
Andrew Tridgell [Tue, 26 Jul 2005 07:46:21 +0000 (07:46 +0000)]
r8778: index on nCName in sam.ldb. This was costing us about 75% of the time in each smb login

15 years agor8777: make sure that the tree connect is a child of the return cli state structure.
Andrew Tridgell [Tue, 26 Jul 2005 07:23:57 +0000 (07:23 +0000)]
r8777: make sure that the tree connect is a child of the return cli state structure.
This fixes the BASE-DISCONNECT test

15 years agor8776: fixed SMB connections for IP addresses, even when name resolve order
Andrew Tridgell [Tue, 26 Jul 2005 07:23:11 +0000 (07:23 +0000)]
r8776: fixed SMB connections for IP addresses, even when name resolve order
doesn't include 'host'

15 years agor8775: More SamSync work. This is really just mechanical...
Andrew Bartlett [Tue, 26 Jul 2005 06:37:20 +0000 (06:37 +0000)]
r8775: More SamSync work.  This is really just mechanical...

I need to take a grip over the ForiegnSecurityPrincipals, as the
SamSync currently fails on adding some aliases and privilages because
it can't find their entry.

Andrew Bartlett

15 years agor8774: make some gensec errors a bit less verbose
Andrew Tridgell [Tue, 26 Jul 2005 05:07:15 +0000 (05:07 +0000)]
r8774: make some gensec errors a bit less verbose

15 years agor8773: fixed another dependency on directory ordering in RAW-SEARCH
Andrew Tridgell [Tue, 26 Jul 2005 04:47:16 +0000 (04:47 +0000)]
r8773: fixed another dependency on directory ordering in RAW-SEARCH

Thanks to andrew bartlett for helping to track this down (his was the
only system that hit this)

15 years agor8772: Include the ldap ejs test in the standard 'make test'
Andrew Bartlett [Tue, 26 Jul 2005 03:46:41 +0000 (03:46 +0000)]
r8772: Include the ldap ejs test in the standard 'make test'

Andrew Bartlett

15 years agor8771: Extend the SamSync code out to groups and aliases, as well as deleting.
Andrew Bartlett [Tue, 26 Jul 2005 03:11:16 +0000 (03:11 +0000)]
r8771: Extend the SamSync code out to groups and aliases, as well as deleting.

Andrew Bartlett

15 years agor8761: Propagate changes in monitor messaging code.
Rafal Szczesniak [Mon, 25 Jul 2005 22:57:14 +0000 (22:57 +0000)]
r8761: Propagate changes in monitor messaging code.


15 years agor8760: Rework monitor messaging code a bit, as Metze once suggested.
Rafal Szczesniak [Mon, 25 Jul 2005 22:56:28 +0000 (22:56 +0000)]
r8760: Rework monitor messaging code a bit, as Metze once suggested.
enum type has now been replaced with unsigned 32-bit field and
message data is passed as void pointer.

This allows various extension implementers to plug their monitor
messages in more easily.


15 years agor8759: Another couple of fields in usermod routine.
Rafal Szczesniak [Mon, 25 Jul 2005 22:00:56 +0000 (22:00 +0000)]
r8759: Another couple of fields in usermod routine.


15 years agor8758: Use official version numbering standard for debian packages.
Jelmer Vernooij [Mon, 25 Jul 2005 19:30:22 +0000 (19:30 +0000)]
r8758: Use official version numbering standard for debian packages.

15 years agor8753: fixed directory handling on systems that do not return . and .. as the
Andrew Tridgell [Mon, 25 Jul 2005 10:40:17 +0000 (10:40 +0000)]
r8753: fixed directory handling on systems that do not return . and .. as the
first two entries in a directory. This is what caused the FC3 system
shelob in the build farm to fail the RAW-UNLINK and RAW-SEARCH tests.

15 years agor8752: With all the infrustructure done, details like a SamSync migration
Andrew Bartlett [Mon, 25 Jul 2005 06:33:51 +0000 (06:33 +0000)]
r8752: With all the infrustructure done, details like a SamSync migration
into LDB are actually quite easy.

This brings us the users, and sets basic domain information.

You are expected to have provisioned with the settings for the target
domain, and have joined the domain as a BDC.  Then simply 'net

Now we just need to flesh out the delta types.

Andrew Bartlett

15 years agor8750: drat, on some systems dirfd() is a macro
Andrew Tridgell [Mon, 25 Jul 2005 04:39:20 +0000 (04:39 +0000)]
r8750: drat, on some systems dirfd() is a macro

15 years agor8749: for completeness, add rewinddir() and dirfd()
Andrew Tridgell [Mon, 25 Jul 2005 04:34:14 +0000 (04:34 +0000)]
r8749: for completeness, add rewinddir() and dirfd()

15 years agor8748: fixed build. Andrew, please check.
Andrew Tridgell [Mon, 25 Jul 2005 04:15:57 +0000 (04:15 +0000)]
r8748: fixed build. Andrew, please check.

15 years agor8747: remove unused code
Andrew Tridgell [Mon, 25 Jul 2005 04:03:22 +0000 (04:03 +0000)]
r8747: remove unused code

15 years agor8746: replace opendir/readdir/telldir/seekdir/closedir on systems where they
Andrew Tridgell [Mon, 25 Jul 2005 04:03:01 +0000 (04:03 +0000)]
r8746: replace opendir/readdir/telldir/seekdir/closedir on systems where they
are broken (apparently all BSD systems). This breakage leads to unlink
on files in an open directory causing a later seekdir to miss
files. The bug happens due to a block boundary bug in the BSD libc
implementation of these calls.

This replacement code also fixes a severe memory usage problem with
telldir that can cause closedir() to take an arbitrary amount of time.

I have reported the bug in readdir to Greg Lehey (a FreeBSD maintainer)

15 years agor8745: make ldap.js cleanup after itself
Andrew Tridgell [Mon, 25 Jul 2005 02:26:38 +0000 (02:26 +0000)]
r8745: make ldap.js cleanup after itself

15 years agor8744: Split 'net samdump' out into a separate file
Andrew Bartlett [Mon, 25 Jul 2005 02:23:41 +0000 (02:23 +0000)]
r8744: Split 'net samdump' out into a separate file

Work on the talloc memory tree, as I think talloc_reference and other
things were biting me.

Crush unions in the name of code reform. ;-)

Andrew Bartlett

15 years agor8743: automatically find the basedn in ldap.js
Andrew Tridgell [Mon, 25 Jul 2005 02:23:27 +0000 (02:23 +0000)]
r8743: automatically find the basedn in ldap.js

15 years agor8742: fixed handling of zero length names in mprObject()
Andrew Tridgell [Mon, 25 Jul 2005 02:23:04 +0000 (02:23 +0000)]
r8742: fixed handling of zero length names in mprObject()

15 years agor8741: Kill warnings about enums not fully enumerated, as we will never use
Andrew Bartlett [Mon, 25 Jul 2005 01:19:16 +0000 (01:19 +0000)]
r8741: Kill warnings about enums not fully enumerated, as we will never use
all the branches.

Andrew Bartlett

15 years agor8740: Extend the rdn_name module to handle adding the rdn as an attribute. ie:
Andrew Bartlett [Mon, 25 Jul 2005 01:17:09 +0000 (01:17 +0000)]
r8740: Extend the rdn_name module to handle adding the rdn as an attribute.  ie:

dn: cn=foo,ou=bar
objectClass: person


dn: cn=foo,ou=bar
objectClass: person
cn: foo
(as well as a pile more default attributes)

We also correct the case in the attirbute to match that in the DN
(win2k3 behaviour) and I have a testsuite (in ejs) to prove it.

This module also found a bug in our provision.ldif, so and reduces
code complexity in the samdb module.

Andrew Bartlett

15 years agor8738: Test (using ejs!) the basic operation of the ldb modules.
Andrew Bartlett [Sun, 24 Jul 2005 22:18:01 +0000 (22:18 +0000)]
r8738: Test (using ejs!) the basic operation of the ldb modules.

ejs seems to test this stuff very nicely!

Andrew Bartlett

15 years agor8736: this fixes the ldb speed (raises BENCH-WINS from 15 ops/sec to over 4000)
Andrew Tridgell [Sun, 24 Jul 2005 12:38:42 +0000 (12:38 +0000)]
r8736: this fixes the ldb speed (raises BENCH-WINS from 15 ops/sec to over 4000)

simo, we need to be careful to cope with this sort of direct dn query efficiently

15 years agor8735: added NBT and WINS testing to 'make test' so we will know if it breaks again
Andrew Tridgell [Sun, 24 Jul 2005 12:24:34 +0000 (12:24 +0000)]
r8735: added NBT and WINS testing to 'make test' so we will know if it breaks again

15 years agor8734: fixed the wins server for the new ldb DN restrictions.
Andrew Tridgell [Sun, 24 Jul 2005 12:18:11 +0000 (12:18 +0000)]
r8734: fixed the wins server for the new ldb DN restrictions.

This gets it working, but I'm rather worried about the speed. We used
to get more than 5000 ops/sec, but now we are down to around 15
ops/sec. I suspect a bug in ldb.

15 years agor8729: make the RAW-SEARCH test more robust to servers with hash based directory...
Andrew Tridgell [Sun, 24 Jul 2005 01:01:00 +0000 (01:01 +0000)]
r8729: make the RAW-SEARCH test more robust to servers with hash based directory ordering

15 years agor8726: increase default session timeout to 15 minutes to be less painful for developers
Andrew Tridgell [Sat, 23 Jul 2005 11:11:37 +0000 (11:11 +0000)]
r8726: increase default session timeout to 15 minutes to be less painful for developers

15 years agor8725: redirect to the base install page not the provisioning page on first
Andrew Tridgell [Sat, 23 Jul 2005 11:05:32 +0000 (11:05 +0000)]
r8725: redirect to the base install page not the provisioning page on first

15 years agor8724: some boilerplate installation text
Andrew Tridgell [Sat, 23 Jul 2005 11:03:24 +0000 (11:03 +0000)]
r8724: some boilerplate installation text

15 years agor8723: fix esptest menu
Andrew Tridgell [Sat, 23 Jul 2005 10:59:05 +0000 (10:59 +0000)]
r8723: fix esptest menu

15 years agor8722: make the menu handling considerably saner and easier to follow. The whole
Andrew Tridgell [Sat, 23 Jul 2005 10:58:09 +0000 (10:58 +0000)]
r8722: make the menu handling considerably saner and easier to follow. The whole
menu hierarchy is now in /menu.js

15 years agor8721: Further work on libnet_rpc_usermod function. Now it can change
Rafal Szczesniak [Sat, 23 Jul 2005 10:27:45 +0000 (10:27 +0000)]
r8721: Further work on libnet_rpc_usermod function. Now it can change
both account name and full name.


15 years agor8720: split form object out to separate include file, and make it a real
Andrew Tridgell [Sat, 23 Jul 2005 09:05:34 +0000 (09:05 +0000)]
r8720: split form object out to separate include file, and make it a real
object, with a display() method

15 years agor8718: try to improve the 2 level menu a bit.
Andrew Tridgell [Sat, 23 Jul 2005 08:54:09 +0000 (08:54 +0000)]
r8718: try to improve the 2 level menu a bit.

Deryck, if you get a chance, could you see how to make this a little
"left and up" arrow instead of "Main Menu" ?

15 years agor8717: Add monitor message emiting in userdel and usermod calls.
Rafal Szczesniak [Fri, 22 Jul 2005 17:45:42 +0000 (17:45 +0000)]
r8717: Add monitor message emiting in userdel and usermod calls.


15 years agor8715: - revert the %PRIi64 stuff. Tim, we explicitly check for %llu support
Andrew Tridgell [Fri, 22 Jul 2005 11:32:01 +0000 (11:32 +0000)]
r8715: - revert the %PRIi64 stuff. Tim, we explicitly check for %llu support
  in configure, and replace snprintf if the system doesn't support
  it. Our replacement code does not handle the "%PRIi64" stuff, so
  using it would break us on lots of platforms

- fixed constant array initialisers to work on HPUX.

15 years agor8714: Oops - get it right this time!
Tim Potter [Fri, 22 Jul 2005 11:19:55 +0000 (11:19 +0000)]
r8714: Oops - get it right this time!

15 years agor8713: Experiment to try and fix warnings on 64-bit machines without breaking
Tim Potter [Fri, 22 Jul 2005 11:16:32 +0000 (11:16 +0000)]
r8713: Experiment to try and fix warnings on 64-bit machines without breaking
32-bit ones.  Yes, this weird looking macros are part of C99.

15 years agor8712: cleanup old search test code to use talloc
Andrew Tridgell [Fri, 22 Jul 2005 10:58:49 +0000 (10:58 +0000)]
r8712: cleanup old search test code to use talloc

15 years agor8711: add m4 for finding return type for signal handlers
Andrew Tridgell [Fri, 22 Jul 2005 10:48:22 +0000 (10:48 +0000)]
r8711: add m4 for finding return type for signal handlers

this patch brought to you by the continuing saga of HPUX portability

15 years agor8710: another attempt at fixing HPUX
Andrew Tridgell [Fri, 22 Jul 2005 10:01:26 +0000 (10:01 +0000)]
r8710: another attempt at fixing HPUX

15 years agor8709: fixed the assumption in RAW-SEARCH that directories are returned in sorted...
Andrew Tridgell [Fri, 22 Jul 2005 09:49:32 +0000 (09:49 +0000)]
r8709: fixed the assumption in RAW-SEARCH that directories are returned in sorted order

15 years agor8708: fixed an assert that abartlet found
Andrew Tridgell [Fri, 22 Jul 2005 07:21:59 +0000 (07:21 +0000)]
r8708: fixed an assert that abartlet found

15 years agor8707: this typedef isn't used, and breaks the build on HPUX, so I've removed it
Andrew Tridgell [Fri, 22 Jul 2005 06:52:46 +0000 (06:52 +0000)]
r8707: this typedef isn't used, and breaks the build on HPUX, so I've removed it

15 years agor8706: My previous patch oversimplied the previous change to session setup -
Andrew Bartlett [Fri, 22 Jul 2005 05:04:45 +0000 (05:04 +0000)]
r8706: My previous patch oversimplied the previous change to session setup -
we didn't cope with the 'anonymous NTLM under SPNEGO' login.

Andrew Bartlett

15 years agor8703: cope with null string in interpret_addr()
Andrew Tridgell [Fri, 22 Jul 2005 04:32:59 +0000 (04:32 +0000)]
r8703: cope with null string in interpret_addr()

15 years agor8702: fixed ntlm_auth build. Andrew, can you check I got this right?
Andrew Tridgell [Fri, 22 Jul 2005 04:30:11 +0000 (04:30 +0000)]
r8702: fixed ntlm_auth build. Andrew, can you check I got this right?

15 years agor8701: Fix up auth_developer for recent changes.
Andrew Bartlett [Fri, 22 Jul 2005 04:18:16 +0000 (04:18 +0000)]
r8701: Fix up auth_developer for recent changes.

Andrew Bartlett

15 years agor8700: Propmted by tridge's need to do plaintext auth in ejs, rework the
Andrew Bartlett [Fri, 22 Jul 2005 04:10:07 +0000 (04:10 +0000)]
r8700: Propmted by tridge's need to do plaintext auth in ejs, rework the
user_info strcture in auth/

This moves it to a pattern much like that found in ntvfs, with
functions to migrate between PAIN, HASH and RESPONSE passwords.

Instead of make_user_info*() functions, we simply fill in the control
block in the callers, per recent dicussions on the lists.  This
removed a lot of data copies as well as error paths, as we can grab
much of it with talloc.

Andrew Bartlett

15 years agor8699: removed invalid comment
Andrew Bartlett [Fri, 22 Jul 2005 04:06:28 +0000 (04:06 +0000)]
r8699: removed invalid comment

15 years agor8698: attempt to cope with lack of strtoull() on HPUX
Andrew Tridgell [Fri, 22 Jul 2005 03:46:57 +0000 (03:46 +0000)]
r8698: attempt to cope with lack of strtoull() on HPUX

15 years agor8696: fixed ejs to more strictly follow the va_list rules. Might fix that
Andrew Tridgell [Fri, 22 Jul 2005 01:56:51 +0000 (01:56 +0000)]
r8696: fixed ejs to more strictly follow the va_list rules. Might fix that
pesky panic on x86_64

15 years agor8693: Test code for usermod routine.
Rafal Szczesniak [Thu, 21 Jul 2005 22:33:47 +0000 (22:33 +0000)]
r8693: Test code for usermod routine.


15 years agor8692: Starting parts of code to provide user modify functionality.
Rafal Szczesniak [Thu, 21 Jul 2005 22:32:04 +0000 (22:32 +0000)]
r8692: Starting parts of code to provide user modify functionality.
It's more like a placeholder now, than a working code. Just don't
want to hang it around my laptop only.


15 years agor8690: Code cleanups, improvements necessary for dependencies (not added yet)
Jelmer Vernooij [Thu, 21 Jul 2005 21:27:39 +0000 (21:27 +0000)]
r8690: Code cleanups, improvements necessary for dependencies (not added yet)

15 years agor8685: an alpha in the build farm is dying with a floating point
Andrew Tridgell [Thu, 21 Jul 2005 14:04:13 +0000 (14:04 +0000)]
r8685: an alpha in the build farm is dying with a floating point
exception. Catch these in out fault handler, so we get a backtrace

15 years agor8684: this should fix the panic on x86_64, and possibly alpha
Andrew Tridgell [Thu, 21 Jul 2005 14:00:51 +0000 (14:00 +0000)]
r8684: this should fix the panic on x86_64, and possibly alpha

15 years agor8681: if SOCKET_WRAPPER_DIR starts with ./ then strip it internally. This saves...
Andrew Tridgell [Thu, 21 Jul 2005 13:45:07 +0000 (13:45 +0000)]
r8681: if SOCKET_WRAPPER_DIR starts with ./ then strip it internally. This saves us 2 more chars
in the name, which is enough to get IRIX 6.4 working

15 years agor8680: try harder to find the binary for gdb in the backtrace
Andrew Tridgell [Thu, 21 Jul 2005 12:35:00 +0000 (12:35 +0000)]
r8680: try harder to find the binary for gdb in the backtrace

15 years agor8679: only call fault setup once (thanks to andrew for pointing this out)
Andrew Tridgell [Thu, 21 Jul 2005 12:20:18 +0000 (12:20 +0000)]
r8679: only call fault setup once (thanks to andrew for pointing this out)

15 years agor8678: setup for gdb backtrace in 'make test'
Andrew Tridgell [Thu, 21 Jul 2005 12:11:52 +0000 (12:11 +0000)]
r8678: setup for gdb backtrace in 'make test'

15 years agor8677: The first part of the domain name may not be equal to the netbios domain name.
Andrew Bartlett [Thu, 21 Jul 2005 11:28:24 +0000 (11:28 +0000)]
r8677: The first part of the domain name may not be equal to the netbios domain name.

Remove the use of flatname from the main domain object, we no longer
reference it.

Andrew Bartlett

15 years agor8676: attribute lists in ldb searches must be NULL terminated
Andrew Tridgell [Thu, 21 Jul 2005 10:57:52 +0000 (10:57 +0000)]
r8676: attribute lists in ldb searches must be NULL terminated

this is what was causing the panic on the s390 box

15 years agor8674: With the rdn_name module, we don't need this duplication in the samdb
Andrew Bartlett [Thu, 21 Jul 2005 09:19:21 +0000 (09:19 +0000)]
r8674: With the rdn_name module, we don't need this duplication in the samdb
module any more.

Andrew Bartlett

15 years agor8671: use much shorter names for the selftest directory and socket wrapper
Andrew Tridgell [Thu, 21 Jul 2005 08:42:17 +0000 (08:42 +0000)]
r8671: use much shorter names for the selftest directory and socket wrapper
code. I'm afraid this is needed by irix 6.4 which silently truncates
names in unix domain sockets in recvfrom() to 16 chars. My apologies
for having to move to such short names :-(

15 years agor8670: Remove GUID code from SAMR, it is handled lower down now. I notice
Andrew Bartlett [Thu, 21 Jul 2005 08:34:54 +0000 (08:34 +0000)]
r8670: Remove GUID code from SAMR, it is handled lower down now.  I notice
this code also does string SIDs, but I'm not quite sure where that
fits in.

Andrew Bartlett

15 years agor8669: The objectguid module belongs in Samba's ldb module collection, not in
Andrew Bartlett [Thu, 21 Jul 2005 08:32:07 +0000 (08:32 +0000)]
r8669: The objectguid module belongs in Samba's ldb module collection, not in
ldb, as it can't build without the NDR and GUID code.

Also make it properly use the NDR encoding for the GUID (I forgot last
time, and used a string), as well as set the dependencies on the
module correctly.

Andrew Bartlett

15 years agor8668: fixed a segv during upgrade of a very old ldb.
Andrew Tridgell [Thu, 21 Jul 2005 08:06:39 +0000 (08:06 +0000)]
r8668: fixed a segv during upgrade of a very old ldb.
Thanks to volker for finding this one too. Keep them coming!

15 years agor8667: Further simply the provision script, by removing the 'name' attribute.
Andrew Bartlett [Thu, 21 Jul 2005 07:59:01 +0000 (07:59 +0000)]
r8667: Further simply the provision script, by removing the 'name' attribute.

This is now calculated on the fly for every add and modify.

Andrew Bartlett

15 years agor8666: The same fix as the last commit, I was caught out on a move from a
Andrew Bartlett [Thu, 21 Jul 2005 07:57:20 +0000 (07:57 +0000)]
r8666: The same fix as the last commit, I was caught out on a move from a
BOOL to int function return.

Andrew Bartlett

15 years agor8665: fixed a segv at high debug level in the web server
Andrew Tridgell [Thu, 21 Jul 2005 07:52:31 +0000 (07:52 +0000)]
r8665: fixed a segv at high debug level in the web server
thanks to volker for finding this

15 years agor8664: I got caught out not testing...
Andrew Bartlett [Thu, 21 Jul 2005 07:15:55 +0000 (07:15 +0000)]
r8664: I got caught out not testing...

I replaced these function calls, and they went from BOOL to int return
values, so naturally failed.

Andrew Bartlett

15 years agor8663: Since simo constructed the samdb module, he and tridge have worked on
Andrew Bartlett [Thu, 21 Jul 2005 05:24:02 +0000 (05:24 +0000)]
r8663: Since simo constructed the samdb module, he and tridge have worked on
a DN parsing system.  Leverage that in the dsdb module.

Andrew Bartlett

15 years agor8662: Revert change to CN=Cert Publishers, this group still needs to
Andrew Bartlett [Thu, 21 Jul 2005 05:21:27 +0000 (05:21 +0000)]
r8662: Revert change to CN=Cert Publishers, this group still needs to
override the template for these attributes.

Andrew Bartlett

15 years agor8661: added strstr() ejs function in string lib
Andrew Tridgell [Thu, 21 Jul 2005 04:10:35 +0000 (04:10 +0000)]
r8661: added strstr() ejs function in string lib

15 years agor8660: Use templates for the initial provision of user and computer accounts.
Andrew Bartlett [Thu, 21 Jul 2005 02:12:20 +0000 (02:12 +0000)]
r8660: Use templates for the initial provision of user and computer accounts.

This ensures the templating code is used, and also makes it clearer
what I need to duplicate in the vampire area.

Also fix a silly bug in the template application code (the samdb
module) that caused templates to be compleatly unused (my fault, from
my commit last night).

Andrew Bartlett

15 years agor8659: return ldif formatted attributes in the ejs ldb search call, so sids show...
Andrew Tridgell [Thu, 21 Jul 2005 01:56:22 +0000 (01:56 +0000)]
r8659: return ldif formatted attributes in the ejs ldb search call, so sids show up as strings
not binary blobs

15 years agor8658: move use of lp_security() and lp_nt_status_support() into the connection struc...
Andrew Tridgell [Thu, 21 Jul 2005 01:43:26 +0000 (01:43 +0000)]
r8658: move use of lp_security() and lp_nt_status_support() into the connection structure.
This massively reduces the number of lp_*() calls made

15 years agor8652: added a test for the boolean bug just fixed
Andrew Tridgell [Wed, 20 Jul 2005 11:56:07 +0000 (11:56 +0000)]
r8652: added a test for the boolean bug just fixed

15 years agor8651: fixed a boolean expression bug (submitted upstream)
Andrew Tridgell [Wed, 20 Jul 2005 11:55:20 +0000 (11:55 +0000)]
r8651: fixed a boolean expression bug (submitted upstream)

15 years agor8650: Use the timestamps and a new objectguid module rather than placing
Andrew Bartlett [Wed, 20 Jul 2005 11:43:23 +0000 (11:43 +0000)]
r8650: Use the timestamps and a new objectguid module rather than placing
boilerplate attributes in every entry in provision.ldif.

The next step will be to use templates.

Andrew Bartlett

15 years agor8649: added smbscript to the list of binaries to install
Andrew Tridgell [Wed, 20 Jul 2005 11:30:45 +0000 (11:30 +0000)]
r8649: added smbscript to the list of binaries to install

15 years agor8648: automatically redirect to provisioning if not yet provisioned when the
Andrew Tridgell [Wed, 20 Jul 2005 11:26:17 +0000 (11:26 +0000)]
r8648: automatically redirect to provisioning if not yet provisioned when the
home page in swat is accessed

15 years agor8647: no diffrences between the heimdal and no heimdal case when building
Love Hörnquist Åstrand [Wed, 20 Jul 2005 11:18:52 +0000 (11:18 +0000)]
r8647: no diffrences between the heimdal and no heimdal case when building

15 years agor8646: update install howto for new provision code
Andrew Tridgell [Wed, 20 Jul 2005 11:15:52 +0000 (11:15 +0000)]
r8646: update install howto for new provision code

15 years agor8645: updated the ldb esp test for the new ldb ejs syntax
Andrew Tridgell [Wed, 20 Jul 2005 11:13:11 +0000 (11:13 +0000)]
r8645: updated the ldb esp test for the new ldb ejs syntax

simo, when changing ejs syntax, please grep -r through the *.js and *.esp files to
fix all the callers. Thanks :)

15 years agor8644: This is a more useful error than unsuccesful.
Andrew Bartlett [Wed, 20 Jul 2005 10:54:50 +0000 (10:54 +0000)]
r8644: This is a more useful error than unsuccesful.

Andrew Bartlett

15 years agor8643: - make lp_configfile() work again
Andrew Tridgell [Wed, 20 Jul 2005 10:07:48 +0000 (10:07 +0000)]
r8643: - make lp_configfile() work again

- get rid of redundeny dyn_CONFIGFILE argument to lp_load()

- fixed provisioning to work with completely pristine install,
  creating an initial smb.conf is none is present

- added lp.set() and lp.reload() to loadparm ejs object interface

15 years agor8642: - fixed install of new swat files
Andrew Tridgell [Wed, 20 Jul 2005 08:39:53 +0000 (08:39 +0000)]
r8642: - fixed install of new swat files

- removed old provisioning items from esptest menu