sfrench/samba-autobuild/.git
11 years agoAdd support in the ldb_dn.c code for MS-ADTS:3.1.1.5.1.2 Naming Constraints
Anatoliy Atanasov [Tue, 22 Sep 2009 00:14:06 +0000 (17:14 -0700)]
Add support in the ldb_dn.c code for MS-ADTS:3.1.1.5.1.2 Naming Constraints

11 years agoAdd tests for MS-ADTS:3.1.1.5.1.2 Naming Constraints
Anatoliy Atanasov [Tue, 22 Sep 2009 00:01:20 +0000 (17:01 -0700)]
Add tests for MS-ADTS:3.1.1.5.1.2 Naming Constraints

11 years agos4:dsdb Run the new 'descriptor' module by default.
Andrew Bartlett [Mon, 21 Sep 2009 23:31:08 +0000 (16:31 -0700)]
s4:dsdb Run the new 'descriptor' module by default.

This code was derived from the objectclass module, and we need the new
code in the default provision, or else no ACL is set on each object.

Andrew Bartlett

11 years agos4-ldb: bit prettier output
Andrew Tridgell [Mon, 21 Sep 2009 23:29:44 +0000 (16:29 -0700)]
s4-ldb: bit prettier output

11 years agos4-ldb: fixed O(n^2) string handling in ldif debug print
Andrew Tridgell [Mon, 21 Sep 2009 23:29:22 +0000 (16:29 -0700)]
s4-ldb: fixed O(n^2) string handling in ldif debug print

11 years agos4-samdb: enable ldb tracing when log level >= 10
Andrew Tridgell [Mon, 21 Sep 2009 22:25:10 +0000 (15:25 -0700)]
s4-samdb: enable ldb tracing when log level >= 10

11 years agos4-schema: don't trace the schema load (too verbose)
Andrew Tridgell [Mon, 21 Sep 2009 22:24:55 +0000 (15:24 -0700)]
s4-schema: don't trace the schema load (too verbose)

11 years agos4-ldb: add --trace command line option to ldb tools
Andrew Tridgell [Mon, 21 Sep 2009 22:24:39 +0000 (15:24 -0700)]
s4-ldb: add --trace command line option to ldb tools

This enabled LDB_FLG_ENABLE_TRACING

11 years agos4-ldb: add a LDB_FLG_ENABLE_TRACING for full ldb tracing
Andrew Tridgell [Mon, 21 Sep 2009 22:24:14 +0000 (15:24 -0700)]
s4-ldb: add a LDB_FLG_ENABLE_TRACING for full ldb tracing

When LDB_FLG_ENABLE_TRACING is set ldb will send full traces
of all operations and results

11 years agos4-ldap: default edn type is 0
Andrew Tridgell [Mon, 21 Sep 2009 01:58:18 +0000 (18:58 -0700)]
s4-ldap: default edn type is 0

11 years agos4-ldb: add support for extended DNs in the rootDSE
Andrew Tridgell [Mon, 21 Sep 2009 01:24:23 +0000 (18:24 -0700)]
s4-ldb: add support for extended DNs in the rootDSE

W2K8 join as a DC relies on being able to ask for the sid component of
extended DNs from the rootDSE DNs

11 years agos4-dsdb: fixed a printf format warning
Andrew Tridgell [Sun, 20 Sep 2009 22:45:53 +0000 (15:45 -0700)]
s4-dsdb: fixed a printf format warning

11 years agos4:kerberos Fix the salt to match Windows 2008.
Andrew Bartlett [Mon, 21 Sep 2009 19:28:38 +0000 (12:28 -0700)]
s4:kerberos Fix the salt to match Windows 2008.

The previous commit changed the wrong end - we must fix our server,
not our client.

Andrew Bartlett

11 years agos4:provision Make our default salt match our server behaviour
Andrew Bartlett [Mon, 21 Sep 2009 18:59:33 +0000 (11:59 -0700)]
s4:provision Make our default salt match our server behaviour

We need to look into salting algorithms further.

Andrew Bartlett

11 years agotdb:tdbtool: fix indentation.
Michael Adam [Sun, 20 Sep 2009 22:08:34 +0000 (00:08 +0200)]
tdb:tdbtool: fix indentation.

Michael

11 years agotdb:tdbtool: add transaction_start/_commit/_cancel commands.
Michael Adam [Sun, 20 Sep 2009 21:58:27 +0000 (23:58 +0200)]
tdb:tdbtool: add transaction_start/_commit/_cancel commands.

So one can perform tdbtool operations protected by transactions.

Michael

11 years agotdb:tdbtool: add the "speed" command to the help text.
Michael Adam [Sun, 20 Sep 2009 21:58:05 +0000 (23:58 +0200)]
tdb:tdbtool: add the "speed" command to the help text.

Michael

11 years agos4:provision - Fix up ProvisioningError class as suggested by Jelmer
Matthias Dieter Wallnöfer [Mon, 21 Sep 2009 15:20:49 +0000 (17:20 +0200)]
s4:provision - Fix up ProvisioningError class as suggested by Jelmer

11 years agos4:samdb/tools - That should fix now the last failures
Matthias Dieter Wallnöfer [Mon, 21 Sep 2009 11:53:47 +0000 (13:53 +0200)]
s4:samdb/tools - That should fix now the last failures

11 years agos4:libnet_become_dc - bump down the level requested by abartlet
Matthias Dieter Wallnöfer [Mon, 21 Sep 2009 09:59:07 +0000 (11:59 +0200)]
s4:libnet_become_dc - bump down the level requested by abartlet

11 years agos4:scripts - Reintroduce "-H" parameter
Matthias Dieter Wallnöfer [Mon, 21 Sep 2009 09:53:19 +0000 (11:53 +0200)]
s4:scripts - Reintroduce "-H" parameter

I removed it since on some scripts it was present, on others not - so I thought
it wouldn't be really needed. This was a bad decision (pointed out by abartlet).
So I reintroduce it on all scripts (to have consistent parameters).

11 years agoRevert "blackbox:test_kinit - Remove the "-H" (hive) parameter"
Matthias Dieter Wallnöfer [Mon, 21 Sep 2009 09:33:13 +0000 (11:33 +0200)]
Revert "blackbox:test_kinit - Remove the "-H" (hive) parameter"

This reverts commit d4389a230b6aea5a0b2a98e255b14a59c8248b0b.

This revert changed the behaviour which I didn't expect. Thanks abartlet to
point this out!

11 years agos4:provision Make us Windows 2008 level by defualt again
Andrew Bartlett [Mon, 21 Sep 2009 04:32:16 +0000 (21:32 -0700)]
s4:provision Make us Windows 2008 level by defualt again

Also add a note to clarify that this should not be changed without
discussion and consensus.  We don't want this bouncing around.

Paramater support to allow optional selection of Win2003 mode welcomed.

Andrew Bartlett

11 years agos3:secrets_schannel: revert to using version 1
Stefan Metzmacher [Mon, 21 Sep 2009 04:26:30 +0000 (06:26 +0200)]
s3:secrets_schannel: revert to using version 1

It doesn't really matter if the entries
have invalid context in it. Older versions of samba
refuse to open the file if the version doesn't match.

If we can't parse individual records, we'll fail schannel binds,
but the clients are supposed to reestablish the netlogon secure channel
by doing ServerReqChallenge/ServerAuthenticate* again. This
will just overwrite the old record.

metze

11 years agos3:winbindd: avoid writing to a closed connection and generate SIGPIPE
Stefan Metzmacher [Mon, 21 Sep 2009 00:42:35 +0000 (02:42 +0200)]
s3:winbindd: avoid writing to a closed connection and generate SIGPIPE

metze

11 years agoasync_sock: return -1/EPIPE if we're getting an end of file on read.
Stefan Metzmacher [Mon, 21 Sep 2009 00:36:06 +0000 (02:36 +0200)]
async_sock: return -1/EPIPE if we're getting an end of file on read.

This makes the error handling in the callers easier.

metze

11 years agos3:lib/select: don't overwrite errno in the signal handler
Stefan Metzmacher [Sun, 20 Sep 2009 21:29:34 +0000 (23:29 +0200)]
s3:lib/select: don't overwrite errno in the signal handler

metze

11 years agotevent: make sure we don't set errno within the signal handler function.
Stefan Metzmacher [Mon, 21 Sep 2009 01:16:18 +0000 (03:16 +0200)]
tevent: make sure we don't set errno within the signal handler function.

metze

11 years agos4:dsdb/resolve_oids: add fast pathes for the common operations without oids
Stefan Metzmacher [Mon, 21 Sep 2009 03:15:59 +0000 (05:15 +0200)]
s4:dsdb/resolve_oids: add fast pathes for the common operations without oids

metze

11 years agos4:dsdb/resolve_oids: check return values in recursion
Stefan Metzmacher [Mon, 21 Sep 2009 03:15:38 +0000 (05:15 +0200)]
s4:dsdb/resolve_oids: check return values in recursion

metze

11 years agos4:py_security Add missing header
Andrew Bartlett [Mon, 21 Sep 2009 03:28:42 +0000 (20:28 -0700)]
s4:py_security Add missing header

11 years agos4:provision Use code to store domain join in 'net join' as well
Andrew Bartlett [Sun, 20 Sep 2009 23:27:24 +0000 (16:27 -0700)]
s4:provision Use code to store domain join in 'net join' as well

This ensures we only have one codepath to store the secret, and
therefore that we have a single choke point for setting the
saltPrincipal, which we were previously skipping.

Andrew Bartlett

11 years agos4:ldb print out which LDB the transaction is still active on.
Andrew Bartlett [Sun, 20 Sep 2009 22:38:29 +0000 (15:38 -0700)]
s4:ldb print out which LDB the transaction is still active on.

11 years agos4:provision split provision of DNS zone and self join keytab
Andrew Bartlett [Sun, 20 Sep 2009 03:40:17 +0000 (20:40 -0700)]
s4:provision split provision of DNS zone and self join keytab

11 years agos4-selftest: disable RAP-SCAN test
Andrew Tridgell [Sun, 20 Sep 2009 22:27:09 +0000 (15:27 -0700)]
s4-selftest: disable RAP-SCAN test

also pointless now we have docs

11 years agos4-selftest: disable RPC-COUNTCALLS
Andrew Tridgell [Sun, 20 Sep 2009 22:23:34 +0000 (15:23 -0700)]
s4-selftest: disable RPC-COUNTCALLS

The RPC-COUNTCALLS was useful when we were working out IDL by hand

11 years agoMerge branch 'master' of git://git.samba.org/samba
Matthias Dieter Wallnöfer [Sun, 20 Sep 2009 22:03:42 +0000 (00:03 +0200)]
Merge branch 'master' of git://git.samba.org/samba

11 years agos4:python tools - try to fix some test problems
Matthias Dieter Wallnöfer [Sun, 20 Sep 2009 21:49:05 +0000 (23:49 +0200)]
s4:python tools - try to fix some test problems

11 years agos4:samba3sam.py test - remove the primary group ID attribute here
Matthias Dieter Wallnöfer [Sun, 20 Sep 2009 21:27:47 +0000 (23:27 +0200)]
s4:samba3sam.py test - remove the primary group ID attribute here

This shouldn't be specified on creation time (Windows Server doesn't allow that).
Hope this also fixes the test (see buildfarm).

11 years agos4:sec_descriptor - fix constant
Matthias Dieter Wallnöfer [Sun, 20 Sep 2009 21:16:04 +0000 (23:16 +0200)]
s4:sec_descriptor - fix constant

11 years agoblackbox:test_kinit - Remove the "-H" (hive) parameter
Matthias Dieter Wallnöfer [Sun, 20 Sep 2009 21:07:22 +0000 (23:07 +0200)]
blackbox:test_kinit - Remove the "-H" (hive) parameter

The "enableaccount" script works only on local LDB anymore - therefore remove
this parameter.

11 years agoDisable descriptor module unless enabled in smb.conf
Nadezhda Ivanova [Sun, 20 Sep 2009 04:45:07 +0000 (21:45 -0700)]
Disable descriptor module unless enabled in smb.conf

Since this code may still have some problems, it is not executed by default.
To enable descriptor inheritance add:
acl:inheritance = true
in your smb.conf

11 years agos4:dsdb/common/util - Check for the right forest/domain function level
Matthias Dieter Wallnöfer [Sun, 20 Sep 2009 20:49:55 +0000 (22:49 +0200)]
s4:dsdb/common/util - Check for the right forest/domain function level

This adds a function which performs the check for the supported forest and
domain function levels. On an unsuccessful result a textual error message can
be created (parameter "errmsg" != NULL) which gives hints for the user to help
him fixing the issue.

11 years agos4:server.c - add linespace (only cosmetic)
Matthias Dieter Wallnöfer [Sun, 20 Sep 2009 20:17:35 +0000 (22:17 +0200)]
s4:server.c - add linespace (only cosmetic)

11 years agotalloc: fixed talloc_disable_null_tracking()
Andrew Tridgell [Sun, 20 Sep 2009 20:14:40 +0000 (13:14 -0700)]
talloc: fixed talloc_disable_null_tracking()

When we disable null tracking, we need to move any existing objects
that are under the null_context to be parented by the true NULL
context.

We also need a new talloc_enable_null_tracking_no_autofree() function,
as the talloc testsuite cannot cope with the moving of the autofree
context under the null_context as it wants to check exact counts of
objects under the null_context, and smbtorture has a large number of
objects in the autofree_context from .init functions

11 years agos4:domainlevel - fixed another error
Matthias Dieter Wallnöfer [Sun, 20 Sep 2009 19:25:49 +0000 (21:25 +0200)]
s4:domainlevel - fixed another error

The second "nTMixedDomain" attribute (under Partitions/Domain-DN) is only a
copy of the one under the directory root object. Therefore there doesn't exist
the "Windows 2000 Mixed" forest level.

11 years agoFixed a difference in domain sid type when SID is provided by user.
Nadezhda Ivanova [Sat, 19 Sep 2009 00:48:26 +0000 (17:48 -0700)]
Fixed a difference in domain sid type when SID is provided by user.

11 years agos4:ldb_parse - Fix the type of an array entry
Matthias Dieter Wallnöfer [Sun, 20 Sep 2009 10:47:52 +0000 (12:47 +0200)]
s4:ldb_parse - Fix the type of an array entry

I found this through a compile warning. Hope that I got this right.

11 years agos4:provision_configuration - fix "sPNMappings"
Matthias Dieter Wallnöfer [Sun, 20 Sep 2009 09:57:54 +0000 (11:57 +0200)]
s4:provision_configuration - fix "sPNMappings"

I reread some docs about this attributes and it seems that this as mapping
attribute isn't host specific but in common for the whole domain. To allow
Windows DCs to join our s4 domain sooner or later we have to provide the full
attribute.

11 years agos4:domainlevel - further improvements
Matthias Dieter Wallnöfer [Sun, 20 Sep 2009 09:44:39 +0000 (11:44 +0200)]
s4:domainlevel - further improvements

- The tool displays now also mixed/interim domain levels and warns about them
  (s4 isn't capable to run on them)
- But it allows now also to raise/step-up from them
- It displays now also levels higher than 2008 R2 (altough we don't support them
  yet) but to be able to get a correct output

11 years agoblackbox/test_ldb.sh: test searching using OIDs instead of names for attributes and...
Stefan Metzmacher [Sun, 20 Sep 2009 04:05:59 +0000 (06:05 +0200)]
blackbox/test_ldb.sh: test searching using OIDs instead of names for attributes and classes

metze

11 years agos4:provision: add the 'resolve_oids' on the top of the module stack
Stefan Metzmacher [Sat, 19 Sep 2009 05:54:59 +0000 (07:54 +0200)]
s4:provision: add the 'resolve_oids' on the top of the module stack

metze

11 years agodsdb/samdb: add resolve_oids module
Stefan Metzmacher [Sat, 19 Sep 2009 05:01:26 +0000 (07:01 +0200)]
dsdb/samdb: add resolve_oids module

Windows Servers allow OID strings to be used instead of
attribute/class names.

For now we only resolve the OIDs in the search expressions,
the rest will follow.

metze

11 years agos4:build: require ldb 0.9.7
Stefan Metzmacher [Sun, 20 Sep 2009 03:42:27 +0000 (05:42 +0200)]
s4:build: require ldb 0.9.7

metze

11 years agos4:ldb: add ldb_parse_tree_copy_shallow() and change version to 0.9.7
Stefan Metzmacher [Sun, 20 Sep 2009 03:41:42 +0000 (05:41 +0200)]
s4:ldb: add ldb_parse_tree_copy_shallow() and change version to 0.9.7

metze

11 years agolibrpc: rerun 'make idl'
Stefan Metzmacher [Sun, 20 Sep 2009 04:37:24 +0000 (06:37 +0200)]
librpc: rerun 'make idl'

metze

11 years agodrsblobs.idl: fix repsFromTo2 blob size calculation
Stefan Metzmacher [Sun, 20 Sep 2009 04:36:39 +0000 (06:36 +0200)]
drsblobs.idl: fix repsFromTo2 blob size calculation

metze

11 years agorerun: make idl
Stefan Metzmacher [Sun, 20 Sep 2009 03:57:37 +0000 (05:57 +0200)]
rerun: make idl

metze

11 years agodrsblobs.idl: add decoding for repsFromTo2
Stefan Metzmacher [Sun, 20 Sep 2009 03:52:14 +0000 (05:52 +0200)]
drsblobs.idl: add decoding for repsFromTo2

This is used in windows 2008.

metze

11 years agos4-auth: add SID_NT_ENTERPRISE_DCS is a server trust account
Andrew Tridgell [Sun, 20 Sep 2009 02:40:03 +0000 (19:40 -0700)]
s4-auth: add SID_NT_ENTERPRISE_DCS is a server trust account

11 years agos4-drs: security checking on DRS needs to default to on
Andrew Tridgell [Sun, 20 Sep 2009 02:39:42 +0000 (19:39 -0700)]
s4-drs: security checking on DRS needs to default to on

11 years agos4-ldb: display an error if we can't decode a NDR blob
Andrew Tridgell [Sun, 20 Sep 2009 01:41:22 +0000 (18:41 -0700)]
s4-ldb: display an error if we can't decode a NDR blob

11 years agos4-repl: need param.h for lp_parm_bool
Andrew Tridgell [Sat, 19 Sep 2009 22:53:22 +0000 (15:53 -0700)]
s4-repl: need param.h for lp_parm_bool

11 years agoHandle dsdb_class_by_lDAPDisplayName returned values in schema_inferiors.c
Anatoliy Atanasov [Fri, 11 Sep 2009 15:57:34 +0000 (18:57 +0300)]
Handle dsdb_class_by_lDAPDisplayName returned values in schema_inferiors.c

11 years agoMove replmd_drsuapi_DsReplicaCursor2_compare to a common place.
Anatoliy Atanasov [Mon, 14 Sep 2009 18:46:59 +0000 (11:46 -0700)]
Move replmd_drsuapi_DsReplicaCursor2_compare to a common place.

11 years agoAdd drs_security_level_check for dcesrv calls security checks
Anatoliy Atanasov [Sat, 19 Sep 2009 22:08:19 +0000 (15:08 -0700)]
Add drs_security_level_check for dcesrv calls security checks

There is also an option to disable the security check
by specifying in the smb.conf file:
drs:disable_sec_check = true

11 years agos4:provision_basedn_modify - fix the "auditPolicy" attribute
Matthias Dieter Wallnöfer [Sat, 19 Sep 2009 22:09:05 +0000 (00:09 +0200)]
s4:provision_basedn_modify - fix the "auditPolicy" attribute

I had to think about how to encode the string 0x0001 (taken from Windows Server).
The problem is due to the "0" byte at the beginning of it. BASE64 encoding
seems a good method to do it.

11 years agos4:utils Remove typo...
Andrew Bartlett [Sat, 19 Sep 2009 21:51:18 +0000 (14:51 -0700)]
s4:utils Remove typo...

11 years agos4:dsdb Print the partition we failed to suggest replication for
Andrew Bartlett [Sat, 19 Sep 2009 21:27:29 +0000 (14:27 -0700)]
s4:dsdb Print the partition we failed to suggest replication for

11 years agolibcli:nbt move prototypes of lmhosts functions to libnbt.h
Andrew Bartlett [Sat, 19 Sep 2009 21:20:43 +0000 (14:20 -0700)]
libcli:nbt move prototypes of lmhosts functions to libnbt.h

11 years agos4:utils Explian fix for testparm -v
Andrew Bartlett [Sat, 19 Sep 2009 18:59:44 +0000 (11:59 -0700)]
s4:utils Explian fix for testparm -v

The problem here was that we take an address of a bool, and then (via
a void*) cast it to a int *, so put this in a comment.

Andrew Bartlett

11 years agos4-ldb: bump minimum version in ldb too
Andrew Tridgell [Sat, 19 Sep 2009 19:42:57 +0000 (12:42 -0700)]
s4-ldb: bump minimum version in ldb too

11 years agomore include minimisation
Andrew Tridgell [Sat, 19 Sep 2009 19:41:32 +0000 (12:41 -0700)]
more include minimisation

11 years agotdb: increase minor version
Andrew Tridgell [Sat, 19 Sep 2009 19:41:00 +0000 (12:41 -0700)]
tdb: increase minor version

we depend on reads in transactions for s4 replication

11 years agos4-smbd: removed unnecessary includes
Andrew Tridgell [Sat, 19 Sep 2009 19:28:32 +0000 (12:28 -0700)]
s4-smbd: removed unnecessary includes

11 years agos4-scripts: make minimal_includes handle our -I overrides
Andrew Tridgell [Sat, 19 Sep 2009 19:28:02 +0000 (12:28 -0700)]
s4-scripts: make minimal_includes handle our -I overrides

11 years agos4-smbd: minimise includes in smbd/ and smb_server
Andrew Tridgell [Sat, 19 Sep 2009 18:49:33 +0000 (11:49 -0700)]
s4-smbd: minimise includes in smbd/ and smb_server

11 years agos4-testparm: fixed -v option
Andrew Tridgell [Sat, 19 Sep 2009 18:47:12 +0000 (11:47 -0700)]
s4-testparm: fixed -v option

never pass a bool pointer to popt

11 years agos4-rpc_server: removed remaining unnecessary #includes
Andrew Tridgell [Sat, 19 Sep 2009 18:38:04 +0000 (11:38 -0700)]
s4-rpc_server: removed remaining unnecessary #includes

11 years agos4-rpc: remove some unnecessary #include lines
Andrew Tridgell [Sat, 19 Sep 2009 18:33:39 +0000 (11:33 -0700)]
s4-rpc: remove some unnecessary #include lines

I should remember to run script/minimal_includes.pl more often

11 years agos4:samdb.py - further rework
Matthias Dieter Wallnöfer [Sat, 19 Sep 2009 19:57:41 +0000 (21:57 +0200)]
s4:samdb.py - further rework

- I added a comment to the "new user" operation to point out that this works
  only on s4, since we add also ID mapping entries for winbind there
- The "new user" operation adds now the password through the "set password"
  operation which I find better due to the re-use principle
- Remove the word "DC" after "SAMBA 4" in the comment over the "set password"
  operation since this note and operation applies also to s4 in standalone mode

11 years agopidl: update expected output for NDR64 changes
Andrew Tridgell [Sat, 19 Sep 2009 18:06:46 +0000 (11:06 -0700)]
pidl: update expected output for NDR64 changes

11 years agos4-netlogon: implement dcesrv_netr_DsRAddressToSitenamesExW
Andrew Tridgell [Sat, 19 Sep 2009 15:25:41 +0000 (08:25 -0700)]
s4-netlogon: implement dcesrv_netr_DsRAddressToSitenamesExW

We don't implement sites properly at the moment so we just return
Default-First-Site-Name

11 years agos4-resolve: fixed a crash bug on timeout
Andrew Tridgell [Sat, 19 Sep 2009 15:23:03 +0000 (08:23 -0700)]
s4-resolve: fixed a crash bug on timeout

We were creating the name resolution context as a child of lp_ctx,
which meant when we gave up on a connection the timer on name
resolution kept running, and when it timed out the callback crashed as
the socket was already removed.

11 years agos4-pipes: convert pipe names to lowercase and validate
Andrew Tridgell [Sat, 19 Sep 2009 05:58:03 +0000 (22:58 -0700)]
s4-pipes: convert pipe names to lowercase and validate

clients may provide arbitrary names, but we only want lowercase alnum
names

11 years agos4-server: kill main daemon if a task fails to initialise
Andrew Tridgell [Sat, 19 Sep 2009 01:05:55 +0000 (18:05 -0700)]
s4-server: kill main daemon if a task fails to initialise

When one of our core tasks fails to initialise it can now ask for the
server as a whole to die, rather than limping along in a degraded
state.

11 years agos4-kdc: ignore unknown keytypes
Andrew Tridgell [Sat, 19 Sep 2009 01:04:15 +0000 (18:04 -0700)]
s4-kdc: ignore unknown keytypes

don't fail hdb operations if one of the key types is unknown

11 years agoMerge branch 'master' of /home/tridge/samba/git/combined
Andrew Tridgell [Fri, 18 Sep 2009 21:12:02 +0000 (14:12 -0700)]
Merge branch 'master' of /home/tridge/samba/git/combined

11 years agos4-drs: cope with dupliate linked attributes
Andrew Tridgell [Fri, 18 Sep 2009 21:10:42 +0000 (14:10 -0700)]
s4-drs: cope with dupliate linked attributes

With a w2k8-R2 DC, we sometimes get linked attribute updates via DRS
which are duplicates of entries that we already have. We need to cope
with this by using a remove/add pair in the ldb_modify() to avoid a
"entry already exists" error

11 years agos4:provision_configuration - "sPNMappings": "http" missed on regeneration
Matthias Dieter Wallnöfer [Fri, 18 Sep 2009 19:06:19 +0000 (21:06 +0200)]
s4:provision_configuration - "sPNMappings": "http" missed on regeneration

11 years agos4/provision_configuration - re-add the "sPNMappings"
Matthias Dieter Wallnöfer [Fri, 18 Sep 2009 18:57:57 +0000 (20:57 +0200)]
s4/provision_configuration - re-add the "sPNMappings"

Accidentally removed by a previous commit.

11 years agos4:scripts - Cleans also the rest under the "setup" directory up
Matthias Dieter Wallnöfer [Fri, 18 Sep 2009 18:40:57 +0000 (20:40 +0200)]
s4:scripts - Cleans also the rest under the "setup" directory up

- I removed also the "-H" parameter since those scripts are all thought for the
  use on a local s4 domain controller. Another reason is also the bind as SYSTEM
  account which itself is only possible on local binds.

11 years agos3-rpc_client: fix non initialized structure in rpccli_lsa_lookup_sids_noalloc.
Günther Deschner [Thu, 17 Sep 2009 07:42:49 +0000 (09:42 +0200)]
s3-rpc_client: fix non initialized structure in rpccli_lsa_lookup_sids_noalloc.

Guenther

11 years agos3-smbd: fix get_ea_names_from_file() and check for pnames pointer.
Günther Deschner [Fri, 18 Sep 2009 19:27:55 +0000 (21:27 +0200)]
s3-smbd: fix get_ea_names_from_file() and check for pnames pointer.

This fixes smbd from crashing all the time.

Jeremy, Volker, please check.

Guenther

11 years agos4:various scripts under "setup" - Unification
Matthias Dieter Wallnöfer [Fri, 18 Sep 2009 18:22:03 +0000 (20:22 +0200)]
s4:various scripts under "setup" - Unification

- This unified the shape of those four scripts (comments, command sequence, call
  of SamDB)
- To consider the samdb.py changes regarding the filter: there is now always the
  possibility either to specify the username or the search filter

11 years agos4:domainlevel/pwsettings - Remove unused import
Matthias Dieter Wallnöfer [Fri, 18 Sep 2009 18:21:29 +0000 (20:21 +0200)]
s4:domainlevel/pwsettings - Remove unused import

11 years agos4:samdb.py - Unification of the interfaces
Matthias Dieter Wallnöfer [Fri, 18 Sep 2009 18:16:05 +0000 (20:16 +0200)]
s4:samdb.py - Unification of the interfaces

- When a user account is requested by a call always the search filter will be
  passed as argument. This helps us to unify the API
- Add/fix some comments; in particular new comments inform the developer which
  requirements exist if he wants to use calls which manipulate the
  "userPassword" attribute (On s4 no problem - but on certain domain levels on
  Windows Server)

11 years agos4:minschema/fullschema - add correct header comments
Matthias Dieter Wallnöfer [Fri, 18 Sep 2009 18:15:12 +0000 (20:15 +0200)]
s4:minschema/fullschema - add correct header comments

11 years agos4:rpc_server: remove some now unused code
Stefan Metzmacher [Fri, 18 Sep 2009 09:32:46 +0000 (11:32 +0200)]
s4:rpc_server: remove some now unused code

metze

11 years agos4:ntvfs_ipc: add real named pipe support
Stefan Metzmacher [Tue, 11 Aug 2009 12:50:36 +0000 (14:50 +0200)]
s4:ntvfs_ipc: add real named pipe support

We now open a named via the named_pipe_auth
code and process IO via the tstream interface.

This means we support byte mode and message mode
named pipes.

We also correctly issue NT_STATUS_PIPE_BUSY
when a smb_trans request comes in and a read or smb_trans
is already pending.

We also have support for async dcerpc over ncacn_np now,
and we now can remove the ncacn_np specific hacks from the
rpc_server/ code.

metze