Stefan Metzmacher [Mon, 9 Jun 2008 19:41:06 +0000 (21:41 +0200)]
libcli/smb2: sign SMB2 Logoff requests
metze
(This used to be commit
35ee165b146b9157b0cff49e1139a0cb37d98926)
Andrew Bartlett [Mon, 28 Jul 2008 10:51:02 +0000 (20:51 +1000)]
We don't use EXTENSIBLEOBJECT any more.
(This used to be commit
4b137085c8b89773d4639372bbffd516a41dfc8f)
Andrew Bartlett [Mon, 28 Jul 2008 10:26:14 +0000 (20:26 +1000)]
Make it even clearer what to do next in the LDAP backend setup
(This used to be commit
bace931ad674b5071d53bf9c99c383f1d8957e1b)
Andrew Bartlett [Mon, 28 Jul 2008 10:18:17 +0000 (20:18 +1000)]
Always print the slapd startup command
(This used to be commit
b1d05e7d14c65133e8ab0ff9d41a26fa7e3d41d3)
Andrew Bartlett [Mon, 28 Jul 2008 08:39:37 +0000 (18:39 +1000)]
Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
(This used to be commit
486891bb5167034e54b7477ba09e8f5f914b93e4)
Stefan Metzmacher [Mon, 28 Jul 2008 07:29:42 +0000 (09:29 +0200)]
auth/credentials: explain why we need to the enctypes for the gssapi layer
metze
(This used to be commit
88970c4d4192635544cf63e79e929e9bb05ecb5f)
Andrew Bartlett [Sun, 27 Jul 2008 22:04:43 +0000 (08:04 +1000)]
Remove unused variable
(This used to be commit
31a303c099e26423160010c48b305434d4cbea25)
Andrew Bartlett [Sun, 27 Jul 2008 22:04:15 +0000 (08:04 +1000)]
Remove unused function and make sensitive directories private.
(This used to be commit
e23333d16397606d38e90684d2d916b5b967cde4)
Andrew Bartlett [Sun, 27 Jul 2008 22:02:18 +0000 (08:02 +1000)]
Fix warnings in new prefixMap code
(This used to be commit
b8770a4fd8408473593fa4c6600bce056183958d)
Jelmer Vernooij [Sun, 27 Jul 2008 17:57:27 +0000 (19:57 +0200)]
Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into manpage
(This used to be commit
7e90cc197c4fb2884f368cd72f391d0d8016fb96)
Jelmer Vernooij [Sun, 27 Jul 2008 17:56:20 +0000 (19:56 +0200)]
Fix location of manpages.
(This used to be commit
6f5b4ef1d0380d265ce27c882072c759ce19c7c3)
Stefan Metzmacher [Fri, 25 Jul 2008 16:26:31 +0000 (18:26 +0200)]
gensec_gssapi: add support for signing RPC messages
metze
(This used to be commit
dc2847c0acb0adaede4db72a7517046b93221162)
Stefan Metzmacher [Fri, 25 Jul 2008 14:02:29 +0000 (16:02 +0200)]
lib/ldb/tools: allow -W and --realm when build from samba4
metze
(This used to be commit
0aa6d63ec571b0ca05fbfe14d2b4e9ba3e1082e9)
Stefan Metzmacher [Fri, 25 Jul 2008 14:00:50 +0000 (16:00 +0200)]
auth/credentials: use the same enctypes when getting a TGT and a TGS
metze
(This used to be commit
9fc5750156467f579ea8d7755987d091f5b579c2)
Stefan Metzmacher [Thu, 24 Jul 2008 08:00:20 +0000 (10:00 +0200)]
dsdb: add a comment about the parameter to DSDB_EXTENDED_SCHEMA_UPDATE_NOW_OID
metze
(This used to be commit
2f06fbe06be2e1b77ea013ddba853ce819e58e88)
Stefan Metzmacher [Thu, 24 Jul 2008 07:55:53 +0000 (09:55 +0200)]
dsdb/schema: make more clear where we create the value for the new prefix mapping
metze
(This used to be commit
c92eb8b776c17f12622837daeb1786862f380269)
Stefan Metzmacher [Thu, 24 Jul 2008 07:53:29 +0000 (09:53 +0200)]
dsdb/schema: dsdb_write_prefixes_to_ldb() should do the reverse of dsdb_read_prefixes_to_ldb()
metze
(This used to be commit
34ea9d4a0b1270a27412bf939d7e897a5d68d0a6)
Stefan Metzmacher [Fri, 25 Jul 2008 19:26:28 +0000 (21:26 +0200)]
dcerpc.idl: add DCERPC_PFC_FLAG_SUPPORT_HEADER_SIGN flag
metze
(This used to be commit
131a1cfdc9a1228d9263c77bcd31b05d2946fd50)
Stefan Metzmacher [Sat, 26 Jul 2008 18:38:20 +0000 (20:38 +0200)]
mamachinepw: add better error handling
metze
(This used to be commit
7ac424137f62ceacf44e477f4e3805267013005b)
Volker Lendecke [Mon, 19 May 2008 21:06:42 +0000 (23:06 +0200)]
Add "mymachinepw" to fetch our machine password out of secrets.ldb
(This used to be commit
4fbe16deb0e06e145f643568a699b80b431d4f42)
Stefan Metzmacher [Wed, 14 May 2008 07:47:18 +0000 (09:47 +0200)]
smbtorture: add --extra-user option
This can we used to pass additional credentials to torture tests
(it can be used multiple times.
metze
(This used to be commit
4d80dbfac27659046e0986a2af3d06999e2cb2f2)
Brad Hards [Fri, 25 Jul 2008 07:43:21 +0000 (17:43 +1000)]
Define HAVE_ASM_BYTEORDER at all times
(This used to be commit
396ea14732d667960091f4a2570341059914ecb6)
Andrew Bartlett [Fri, 25 Jul 2008 04:15:22 +0000 (14:15 +1000)]
Per feedback, remove epoch and ldconfig requires.
See https://bugzilla.redhat.com/show_bug.cgi?id=453083
(This used to be commit
97d02730e8fde56de27aeb51612a4777c2953c9f)
Andrew Bartlett [Fri, 25 Jul 2008 04:11:18 +0000 (14:11 +1000)]
Make a new define to ensure the accoc_group_id we use is always in common.
(This used to be commit
b62490e3e21b606b66e0737a403b0d170b64cddd)
Andrew Bartlett [Fri, 25 Jul 2008 01:58:51 +0000 (11:58 +1000)]
Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
(This used to be commit
b12dd8ee5443ebfc204d1684f541d68ffb351197)
Andrew Bartlett [Fri, 25 Jul 2008 01:58:24 +0000 (11:58 +1000)]
Try to avoid a memory leak if we re-set the global schema
However, try also not to pull a schema out from under a running ldb
session.
Andrew Bartlett
(This used to be commit
7cf9b9dd0bb35835a7c6e9897ea99951a33c63c7)
Andrew Bartlett [Thu, 24 Jul 2008 22:45:16 +0000 (08:45 +1000)]
Complain if we are told to use an ldap backend, without the type
(This used to be commit
e9c3c9ad8289ee48efa998ab6b486250dcd40b52)
Andrew Bartlett [Thu, 24 Jul 2008 22:44:00 +0000 (08:44 +1000)]
Clarify how we are doing the 'this is a rootdse query' check.
(This used to be commit
8dfba3160cc4bc518f3ad8570d104e5baae784ca)
Stefan Metzmacher [Thu, 24 Jul 2008 06:23:15 +0000 (08:23 +0200)]
hdb-ldb: fix the callers after drsblobs.idl changes
metze
(This used to be commit
1223cd17c79d130b46b0e0ccb0f6011c92441173)
Stefan Metzmacher [Thu, 24 Jul 2008 06:22:23 +0000 (08:22 +0200)]
password_hash: fix the callers after drsblobs.idl changes
metze
(This used to be commit
fac7c79afae05a88ecc2a63c8eb9f2fd53ab7ce6)
Stefan Metzmacher [Thu, 24 Jul 2008 06:20:06 +0000 (08:20 +0200)]
drsblobs.idl: unify the Primary:Kerberos and Primary:Kerberos-Newer-Keys structs
metze
(This used to be commit
4b79a7678571ac2f7d5f827913fdcb419f5d2e20)
Stefan Metzmacher [Thu, 24 Jul 2008 05:53:55 +0000 (07:53 +0200)]
drsblobs.idl: give some unknowns a meaning
metze
(This used to be commit
231e6f5ab2dc8a3e991a9872be252cffff6f14c6)
Andrew Tridgell [Thu, 24 Jul 2008 04:26:30 +0000 (14:26 +1000)]
Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
(This used to be commit
24309dbf4d9622fcfafa29ef98bc0459fdaa814b)
Andrew Tridgell [Thu, 24 Jul 2008 04:21:52 +0000 (14:21 +1000)]
we can't query the ACL on a new file till it exists!
(This used to be commit
4f6646f06988b1fb8be9e0c8ae833bb9792184af)
Andrew Tridgell [Thu, 24 Jul 2008 04:21:31 +0000 (14:21 +1000)]
initialise query_maximal_access here too
(This used to be commit
4b3af09450cf33c6785a3d8fddddc68047f2e388)
Andrew Tridgell [Thu, 24 Jul 2008 04:20:02 +0000 (14:20 +1000)]
make sure we initialise query_maximal_access
(This used to be commit
036f73d39a7ef882fd76afcd3c11eef483f6c308)
Andrew Tridgell [Thu, 24 Jul 2008 04:19:49 +0000 (14:19 +1000)]
fixed spelling error
(This used to be commit
341f64834e13cdbc7d4742a4652ae39b70a4231f)
Anatoliy Atanasov [Mon, 21 Jul 2008 14:04:49 +0000 (17:04 +0300)]
dsdb_create_prefix_mapping() implementation checks for existing prefix maping in ldb.
if one not found it creates a mapping for it and updates the prefixMap schema attribute in ldb.
(This used to be commit
bbe895db7144b192981fad9ab6bbd3ebacb8d299)
Anatoliy Atanasov [Wed, 23 Jul 2008 06:59:17 +0000 (09:59 +0300)]
Handle schema reloading request.
The ldif for that operation looks like this:
dn:
changetype: Modify
add: schemaUpdateNow
schemaUpdateNow: 1
It uses the rootdse's object functional attribute schemaUpdateNow.
In rootdse_modify() this command is being recognized and it is send as extended operation with DSDB_EXTENDED_SCHEMA_UPDATE_NOW_OID.
In the partition module its dispatched to the schema_fsmo module.
The request is processed in the schema_fsmo module by schema_fsmo_extended().
(This used to be commit
39f9184ddf215f2b512319211c0a05702218ef87)
Andrew Tridgell [Thu, 24 Jul 2008 01:48:27 +0000 (11:48 +1000)]
fixd a bug in the signal handling code - we could get phantom signals
(signum 64)
(This used to be commit
af7fb2e38ba27cf8058eb1cef1f96bbc7b19849f)
Michael Adam [Wed, 23 Jul 2008 14:23:31 +0000 (16:23 +0200)]
libnet_become_dc: send msDS_Behavior_Version == 3 (win2k8) in DsAddEntry
instead of version 2 (win2k3).
This makes the NET-API-BECOME-DC test work against windows 2003 and 2008.
Michael
(This used to be commit
a7bfa1fb1bc6fb8e412990b7ff4c3ce9bc55099d)
Michael Adam [Wed, 23 Jul 2008 15:54:25 +0000 (17:54 +0200)]
libnet_become_cd: add boolean option "become_dc:force krb5" to control krb5 auth.
This allows controlling whether krb5 auth is forced for the rpc bind in
libnet_become_dc. It defaults to "yes". For Windows 2000, DsGetNCChanges
only krb5 auth works due to a bug in Windows (it returns garbage - a
positive object count is returned along with first object == NULL).
For Windows 2008, on the other hand, krb5 auth does not work currently
due to the lack of support for AES keys. (Metze is working on that.)
Michael
(This used to be commit
af85aad8147b85a0b9ea2ccc66b8f04efdfe5cf3)
Michael Adam [Wed, 23 Jul 2008 13:34:45 +0000 (15:34 +0200)]
drsuapi: always set the pid field of the outgoing DsBindInfo to 0.
This is for debugging and informational purposes only.
The assignment is implementation specific.
(WSPP docs, sec. 5.35).
Michael
(This used to be commit
1f5704e2dee5900e8d1d87699b76f67c0e12854e)
Michael Adam [Wed, 23 Jul 2008 13:21:44 +0000 (15:21 +0200)]
libnet_unbecome_dc: teach unbecomeDC_drsuapi_bind_recv() DsBindInfo48.
..to work agains w2k8.
Michael
(This used to be commit
97e8d5813df19cae294b6de2a880606f0f8c2c59)
Michael Adam [Wed, 23 Jul 2008 13:18:57 +0000 (15:18 +0200)]
libnet_become_cd: teach becomeDC_drsuapi_bind_recv() DsBindInfo48.
To work with w2k8.
Michael
(This used to be commit
7d80fab912576923c7474d77b8ed960b01296914)
Michael Adam [Wed, 23 Jul 2008 12:07:06 +0000 (14:07 +0200)]
dsdb: teach dreplsrv_out_drsuapi_bind_recv() knowledge of DsBindInfo48.
To make it work against w2k8.
Michael
(This used to be commit
a8aea9274170a2b472c45c97a4904bd299d2a92e)
Stefan Metzmacher [Wed, 23 Jul 2008 07:35:19 +0000 (09:35 +0200)]
password_hash: add generation of the Primary:Kerberos-Newer-Keys blob
But it's still of by default until we now what triggers this generation.
It could be that the value is always generated but the KDC only
uses it when in a specific funtional level, but it could also
be that it's only generated in a specific functional level.
metze
(This used to be commit
08618bbd508ede0bb9e1922fae562cffdca41cbd)
Stefan Metzmacher [Tue, 22 Jul 2008 16:47:27 +0000 (18:47 +0200)]
hdb-ldb: try to find Primary:Kerberos-Newer-Keys and fallback to Primary:Kerberos
Now provide AES tickets if we find the keys in the supplementalCredentials attribute
metze
(This used to be commit
8300259f103f8cfe014988fad0f7ee0d49bb1ac2)
Stefan Metzmacher [Tue, 22 Jul 2008 10:28:07 +0000 (12:28 +0200)]
drsblobs.idl: add idl for Primary:Kerberos-Newer-Keys blob in supplementalCredentials
metze
(This used to be commit
97b7901afbccc9647ad2958d4cf12300de2655d1)
Stefan Metzmacher [Tue, 22 Jul 2008 16:54:21 +0000 (18:54 +0200)]
password_hash: order the supplementalCredentials Packages in the same order like windows
metze
(This used to be commit
ca9cd81a1798fb15195566422b3cad7c282fce89)
Stefan Metzmacher [Tue, 22 Jul 2008 16:27:36 +0000 (18:27 +0200)]
password_hash: split the generation of krb5 keys into a different function
metze
(This used to be commit
4ad73a0bf8952783d3d9a7339c0c4fd8ca28981a)
Stefan Metzmacher [Tue, 22 Jul 2008 16:32:49 +0000 (18:32 +0200)]
password_hash: simplify the logic if we have cleartext we always generate the hashes
metze
(This used to be commit
5edff84429ef0d03b47a438e18861d26c97e17b6)
Stefan Metzmacher [Wed, 23 Jul 2008 08:05:43 +0000 (10:05 +0200)]
password_hash: fix callers after idl change for package_PrimaryKerberos
metze
(This used to be commit
1bf552856f3a930c4716ceb73d9ba9adf7502d3d)
Stefan Metzmacher [Wed, 23 Jul 2008 06:53:34 +0000 (08:53 +0200)]
drsblobs.idl: fix unknowns in package_PrimaryKerberos idl
metze
(This used to be commit
da9ceb2bf17f964334d9317829d40483e2c04b10)
Stefan Metzmacher [Wed, 23 Jul 2008 11:41:51 +0000 (13:41 +0200)]
hdb-ldb: check the SUPPLEMENTAL_CREDENTIALS_SIGNATURE
metze
(This used to be commit
7219740ef434091617c6bb727374251987ff2a62)
Stefan Metzmacher [Wed, 23 Jul 2008 11:31:14 +0000 (13:31 +0200)]
password_hash: check the SUPPLEMENTAL_CREDENTIALS_SIGNATURE
metze
(This used to be commit
19b8c8e37bafab050ab61266c35006efada2947c)
Stefan Metzmacher [Wed, 23 Jul 2008 11:06:32 +0000 (13:06 +0200)]
drsblobs.idl: fix idl for supplementalCredentialsSubBlob
metze
(This used to be commit
24c5b10136f6e640832193aaf9e6d7e865c288bc)
Stefan Metzmacher [Wed, 23 Jul 2008 10:00:42 +0000 (12:00 +0200)]
password_hash: ignore reserved value, but still set it like windows does
metze
(This used to be commit
5b860572686167d0291161f6597f143e538e2f3a)
Stefan Metzmacher [Wed, 23 Jul 2008 11:53:03 +0000 (13:53 +0200)]
drsblobs.idl: rename unknown1 -> reserved
metze
(This used to be commit
9a70b2237d4fdd523edfbca0329ad35e71faf998)
Stefan Metzmacher [Tue, 22 Jul 2008 16:31:45 +0000 (18:31 +0200)]
password_hash: don't add zero padding as w2k8 also don't add it
metze
(This used to be commit
26e9169d454349795ad0bc64d7f65059541ab89e)
Stefan Metzmacher [Tue, 22 Jul 2008 16:46:24 +0000 (18:46 +0200)]
hdb-ldb: fix comment about padding
metze
(This used to be commit
ca28d05b11e602e0f98cda0e02f973562c199dc6)
Stefan Metzmacher [Tue, 22 Jul 2008 16:34:14 +0000 (18:34 +0200)]
hdb-ldb: fix crash bug in the error path
metze
(This used to be commit
ac02d6a0f765e3b66fb6796f129edb1a348ecd84)
Stefan Metzmacher [Tue, 22 Jul 2008 12:06:36 +0000 (14:06 +0200)]
RPC-DSSYNC: print 'supplementalCredentials' more verbosely
metze
(This used to be commit
6a7637b12e4a34915a53e81a0f47571da21fdc5a)
Stefan Metzmacher [Wed, 23 Jul 2008 12:41:16 +0000 (14:41 +0200)]
rpc_server: be more strict with the incoming assoc_group_id
Allow 0 and 0x12345678 only.
This fixes the RPC-HANDLES test.
metze
(This used to be commit
c123e597cc84685abf2b0d3564e1a26d80bbef2f)
Michael Adam [Wed, 23 Jul 2008 09:06:50 +0000 (11:06 +0200)]
smbtorture: add a warning for unknown BindInfo length to the RPC-DSSYNC test
Michael
(This used to be commit
7ee99105ea3a50d8ee2c83ecd39e834ed9efb98c)
Michael Adam [Wed, 23 Jul 2008 09:05:24 +0000 (11:05 +0200)]
smbtorture: add support for the DSBindInfo48 to the RPC-DSSYNC test.
Michael
(This used to be commit
67a99e445871861945fd0a45784cffb358bdccf3)
Stefan Metzmacher [Thu, 17 Jul 2008 11:36:59 +0000 (13:36 +0200)]
libnet/become_dc: add a comment and explain why it's important to specify krb5
metze
(This used to be commit
26d1f9366d8611af1a69095b4cede2d2c95c982d)
Andrew Bartlett [Wed, 23 Jul 2008 06:20:07 +0000 (16:20 +1000)]
Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
(This used to be commit
ae311d89d2d477b235a6a9294a8bb463ed0a8c05)
Andrew Bartlett [Wed, 23 Jul 2008 06:19:54 +0000 (16:19 +1000)]
The SMB session key must not be more than 16 bytes in SAMR (and
presumably LSA).
Tests show that Vista requires the sesion key to be truncated for a
domain join.
Andrew Bartlett
(This used to be commit
af629a3738298d27eb2dbecf466ceb503cec9638)
Andrew Bartlett [Wed, 23 Jul 2008 06:15:46 +0000 (16:15 +1000)]
Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
(This used to be commit
532ccbbe7aa360440f455dfa136f425b9996e998)
Andrew Bartlett [Wed, 23 Jul 2008 06:15:43 +0000 (16:15 +1000)]
Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
(This used to be commit
a93b20b85b7b35965c428f1543cb7bbe96e16d42)
Andrew Bartlett [Wed, 23 Jul 2008 06:14:20 +0000 (16:14 +1000)]
Remove the 'accoc_group_id' check in the RPC server.
This check breaks more than it fixes, and while technically not
correct, is the best solution we have at this time. Otherwise,
SCHANNEL binds from WinXP fail.
Andrew Bartlett
(This used to be commit
f8628fa330abcd50923d995d5bda1f4811582ea9)
Andrew Bartlett [Wed, 23 Jul 2008 03:49:00 +0000 (13:49 +1000)]
Explain where some other OIDs are allocated.
This is an odd place for an OID registry - we perhaps need a central
wiki page.
Andrew Bartlett
(This used to be commit
1c909973977ae117703c1ccf7589acc4625e76e5)
Michael Adam [Tue, 22 Jul 2008 13:35:23 +0000 (15:35 +0200)]
Change occurrences of the u1 member of DsBindInfo* to pid after idl change.
Michael
(This used to be commit
b91bbc5fe4a47e5823be6be5f2f203f1f14105de)
Michael Adam [Tue, 22 Jul 2008 13:33:26 +0000 (15:33 +0200)]
drsuapi.idl: change the u1 field in DsBindInfo* to "pid".
According to the WSPP docs, section 5.35,
this is the "process identifyer" of the client.
It is meant for informational and debugging purposes
only and its assignment is implementation specific.
Michael
(This used to be commit
579306eb5b58b6c1142b3c489e4bcf6da50810d6)
Michael Adam [Tue, 22 Jul 2008 11:07:55 +0000 (13:07 +0200)]
drsuapi.idl: add drsuapi_SupportedExtensionsExt bitfield.
This knowledge is obtained from the wspp-docs (section 5.35).
Michael
(This used to be commit
f5afb695045b1a2f3b8c00a4d82d40e8e50726c9)
Michael Adam [Tue, 22 Jul 2008 10:46:04 +0000 (12:46 +0200)]
drsuapi.idl: the last 16 bytes in DsBindInfo48 ar the GUID of the config dn.
This bit seems not to be documented in the WSPP docs.
Michael
(This used to be commit
705f79bd0a5e93daa0cb11b5dcca36e75c75df93)
Michael Adam [Tue, 22 Jul 2008 09:37:32 +0000 (11:37 +0200)]
drsuapi.idl: add drsuapi_DsBindInfo48.
This is necessary to make DsGetNcChanges work with win2008.
Michael
(This used to be commit
dd278b069b8683a0e3721ebb7d0de06d2bc1c86f)
Volker Lendecke [Mon, 21 Jul 2008 11:05:23 +0000 (13:05 +0200)]
s3 cli_do_rpc_ndr does not use PI_* anymore
(This used to be commit
e625c6b2516111002c99239c1a2188c6d5d87ab6)
Andrew Bartlett [Tue, 22 Jul 2008 01:09:18 +0000 (11:09 +1000)]
Install'named.txt' to private/ as documentation.
This document is much more use when subbed with all the right things.
Andrew Bartlett
(This used to be commit
136a85599815670c807f212d7d4003ec53a13729)
Matthias Dieter Wallnöfer [Tue, 22 Jul 2008 01:06:47 +0000 (11:06 +1000)]
Improve DNS and Group poicy configurations.
- fixes bug #4813 (simplify DNS setup)
- This reworks the named.conf to be a fully fledged include
- This also moves the documentation into named.txt
- improves bug #4900 (Group policy support in Samba)
- by creating an empty GPT.INI
- fixes bug #5582 (DNS: Enhanced zone file)
- This is now closer to the zone file AD creates
committed by Andrew Bartlett
(This used to be commit
74d684f6b329d7dd573cdc55e16bb8e629474b02)
Jelmer Vernooij [Mon, 21 Jul 2008 10:47:08 +0000 (12:47 +0200)]
Properly cast array length in print functions.
(This used to be commit
f321240fa91fa19c1131f119c42f64897d220682)
Andrew Bartlett [Mon, 21 Jul 2008 05:00:18 +0000 (15:00 +1000)]
Fix winbindd not to sit in a busy loop...
Clearly winbindd in Samba4 has not ever been run against windows, as
when we fixed the Samba4 server not to cause XP to loop like this,
Samba4's own client starts looping...
Andrew Bartlett
(This used to be commit
9741772190a85c7c42c17ff24a4aa3f53fbc9f3a)
Andrew Bartlett [Mon, 21 Jul 2008 03:42:07 +0000 (13:42 +1000)]
Rename structures to better match the names in the WSPP IDL.
The 'comment' element in a number of domain structures is called
oem_information. This was picked up actually because with OpenLDAP
doing the schema checking, it noticed that 'comment' was not a valid
attribute.
The rename tries to keep this consistant in both the LDB mappings and
IDL, so we don't make the same mistake in future.
This has no real schema impact, as this value isn't actually used for
anything, as 'comment' was not used in the provision.
Andrew Bartlett
(This used to be commit
65dc0d536590d055a5ee775606ac90ee5fcaee9a)
Andrew Bartlett [Mon, 21 Jul 2008 02:05:53 +0000 (12:05 +1000)]
Remove bogus test in 'enum trusted domains' LSA server.
The change to the RPC-LSA test proves that when the remote server has
0 trusted domains, it will return NT_STATUS_NO_MORE_ENTRIES, not
NT_STATUS_OK.
Andrew Bartlett
(This used to be commit
40a55b34c2ce75267cf004dc4cfb8153c061e66b)
Andrew Bartlett [Mon, 21 Jul 2008 01:27:23 +0000 (11:27 +1000)]
Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
(This used to be commit
55bde3c9daeafdac04574365c23d181345639f34)
Andrew Bartlett [Mon, 21 Jul 2008 01:18:54 +0000 (11:18 +1000)]
Sleep longer in the hope that the OpenLDAP backend might catch up
(This used to be commit
63c80c885dc3fb2228f082be8db752bb29e3962e)
Andrew Bartlett [Mon, 21 Jul 2008 01:18:21 +0000 (11:18 +1000)]
Fix ldb_map to add/remove the same 'extra' objectclass
The code previously added data->add_objectClass, but only removed the
fixed objectclass of extensibleObject.
Found by the ldap.py test.
Andrew Bartlett
(This used to be commit
4fa15c3173a997fa0b9041161d81e742e1fdb41c)
Andrew Bartlett [Sun, 20 Jul 2008 23:36:24 +0000 (09:36 +1000)]
Make invalid 'member' detection work again.
This defines a rootdn globally, and due to OpenLDAP bugs, gives it
manage access to the whole database. This makes the memberOf module
able to validate the links again, now we have database ACLs.
Andrew Bartlett
(This used to be commit
9fe3e9f09f89fd92f8a16768e53391ff5f8489ec)
Volker Lendecke [Sat, 19 Jul 2008 10:47:31 +0000 (12:47 +0200)]
Fix RAW-OPEN against Samba3
This test assumed that fnums are recycled immediately after a close. This is
not true on Samba 3.
Andrew B., I assume this is just a bug in the test. Assuming recycled fnums
might be true on Windows and Samba 4, but I don't think we should assume this
everywhere.
Volker
(This used to be commit
a4c3a59d47b2b1c794eda556d252c61907be1b3c)
Andrew Bartlett [Fri, 18 Jul 2008 08:58:56 +0000 (18:58 +1000)]
Make a seperate template for the refint configuration too
(This used to be commit
d2a527acc5ee6fe9b943657dc9c3ace920b2d619)
Andrew Bartlett [Fri, 18 Jul 2008 08:44:07 +0000 (18:44 +1000)]
Put the memberof template into a seperate setup/ file.
Set a memberof-dn in a fruitless attempt to fix the ACL problem I'm
having with OpenLDAP
Andrew Bartlett
(This used to be commit
6d6e03834a1a77a8ceba41fbe8c9d49680065ba3)
Andrew Bartlett [Fri, 18 Jul 2008 08:40:19 +0000 (18:40 +1000)]
More 'must be ignored' options from the MS-SMB doc.
Also in particular the 'sync' flags (which Samba has traditionally
ignored).
Thanks to Olivier Salamin <olivier.salamin@gmail.com> for pointing out
more flags that needed to be handled.
Andrew Bartlett
(This used to be commit
370bb39cd79fe49efd36a1ceb3e896d386e6d3ce)
Volker Lendecke [Wed, 16 Jul 2008 19:50:25 +0000 (21:50 +0200)]
Add the interface ID to the rpc_pipe_register_commands call in s3 srv code
(This used to be commit
efe249928312f730ee580e72b9c640ef88b0ed5b)
Stefan Metzmacher [Wed, 16 Jul 2008 11:02:54 +0000 (13:02 +0200)]
drsuapi: print out the number of linked attribute values we got
metze
(This used to be commit
34f8b2abdd546f6b60ddae2ad839119f211c995c)
Stefan Metzmacher [Wed, 16 Jul 2008 11:01:56 +0000 (13:01 +0200)]
drsuapi: make use of the 'more_data' field in DsGetNCChangesCtr[1|6]
metze
(This used to be commit
35c7fa470a7433d081403b2b57a331c7dc287aef)
Stefan Metzmacher [Wed, 16 Jul 2008 11:00:07 +0000 (13:00 +0200)]
drsuapi: check ctr6->drs_error
metze
(This used to be commit
511847f5f5015bcdef69e80b91cb08ffb1690e59)
Stefan Metzmacher [Wed, 16 Jul 2008 10:58:29 +0000 (12:58 +0200)]
drsuapi: get ctr6 out of xpress compressed level
metze
(This used to be commit
4e0708148a121bd41a12abf6122d5d6f3f09667a)
Stefan Metzmacher [Tue, 15 Jul 2008 14:59:09 +0000 (16:59 +0200)]
drsuapi: total_object_count was the wrong guess
The total_object_count member of DsGetNCChangesCtr[1|6] was wrong
it's the error code of an extended operation.
DsGetNCChangesCtr6 has a nc_object_count value which contains
the estimated amount of objects in the naming_context.
W2k seems to have a bug and sends this number of objects
in the extended_ret field. Maybe it's just a bug and
not a feature:-)
metze
(This used to be commit
67931092128ce89aadf689a54e20d6e4a9d7fe2c)
Stefan Metzmacher [Tue, 15 Jul 2008 13:36:54 +0000 (15:36 +0200)]
drsuapi.idl: fix unknowns in drsuapi_DsGetNCChangesCtr*
metze
(This used to be commit
9e99e59ca7e56bf74417ec85339e09e86f50d17e)