sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-10 01:18:15 +03:00
Code
69,876 Commits 60 Branches 1,145 Tags 453 MiB
01a1a71b55
Commit Graph

25979 Commits

Author SHA1 Message Date
Kamen Mazdrashki
ebdbf9bd90 s4-test/repl_schema: Test classSchema and attributeSchema replication in separate tests 2010-12-02 19:02:52 +02:00
Kamen Mazdrashki
d8e56245c0 s4-dsdb/descriptor: comment typo 2010-12-02 19:02:52 +02:00
Matthias Dieter Wallnöfer
7a5e47bf4e s4:auth/sam.c-"authsam_expand_nested_groups" - don't fail if we've memberships on non-SAM objects 
This can be expected (think at a membership of a "groupOfNames" group) and we
shouldn't blame about it.

This fixes a bug reported on the technical mailing list.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Thu Dec  2 17:17:56 CET 2010 on sn-devel-104
 2010-12-02 17:17:55 +01:00
Matthias Dieter Wallnöfer
6f42da795e s4:dsdb/samdb/cracknames.c - fix various KRB5 memory leaks 
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Thu Dec  2 12:35:03 CET 2010 on sn-devel-104
 2010-12-02 12:35:03 +01:00
Matthias Dieter Wallnöfer
573389c8cc s4:password_hash LDB module - allow empty ("") passwords 
This seems to have been broken some time ago - till someone on the
mailing list noticed it.

I've also added a testsuite (and some additional SamDB python helpers) which
should prove this.
 2010-12-02 11:51:06 +01:00
Björn Jacke
f62972b761 s4/scripting/ktpass: make shell code portable and eliminate another bash requirement 
Autobuild-User: Björn Jacke <bj@sernet.de>
Autobuild-Date: Thu Dec  2 11:20:42 CET 2010 on sn-devel-104
 2010-12-02 11:20:42 +01:00
Björn Jacke
a42c731a4b s4/ldb: fix shell syntax error in test script 2010-12-02 10:36:06 +01:00
Andrew Tridgell
f5c5fd9e82 s4-ldap: removed an incorrect talloc_move() 
the parent of this session_info is either the stream_connection, or
its a system_session(). In either case reparenting it on the
ldapsrv_connection doesn't achieve anything that I can see.

The move was causing a steal on reference error because the
session_info often has multiple references.

Thanks to Metze for spotting this.

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Wed Dec  1 22:10:42 CET 2010 on sn-devel-104
 2010-12-01 22:10:42 +01:00
Matthias Dieter Wallnöfer
56290d0b33 s4:dsdb/repl/replicated_objects.c - proof if "talloc_reference" doesn't return NULL 
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Wed Dec  1 17:14:01 CET 2010 on sn-devel-104
 2010-12-01 17:14:01 +01:00
Matthias Dieter Wallnöfer
8742faf19f s4:dsdb/common/util.c - "samdb_msg_add_add/delval" - introduce also here the better memory context 
"msg->elements" fits better than "msg".
 2010-12-01 16:30:08 +01:00
Matthias Dieter Wallnöfer
9733d71199 ldb:ldb_msg_add_value - fix here a wrong memory context 
A value array allocation should belong to "msg->elements" not "msg" directly
 2010-12-01 16:30:08 +01:00
Matthias Dieter Wallnöfer
0cf4569605 s4:ranged results LDB module - cosmetic - fix some indentation 2010-12-01 16:30:08 +01:00
Matthias Dieter Wallnöfer
2185f91568 s4:ranged results LDB module - "rr_search_callback" - change some memory context 
"el->values" could under some circumstances be NULL (see "if" above).
 2010-12-01 16:30:08 +01:00
Kamen Mazdrashki
6803a72d15 s4-test/schema: Extend the test to replicate a Class with Attribute with "mayContain" relation 
Autobuild-User: Kamen Mazdrashki <kamenim@samba.org>
Autobuild-Date: Wed Dec  1 13:30:45 CET 2010 on sn-devel-104
 2010-12-01 13:30:45 +01:00
Kamen Mazdrashki
23b4408a62 s4-dsdb/syntax: Map remote ATTIDs for Attribute OID syntax 2010-12-01 13:01:17 +02:00
Kamen Mazdrashki
29f9249bd6 s4-dsdb/syntax: Implement Remote-ATTID to Local-ATTID mapping function 2010-12-01 13:01:17 +02:00
Kamen Mazdrashki
cf8ffc37b4 s4-dreplsrv: Use working_schema when replicating from Schema NC 
Schema is changed and it is quite possible we won't be able
to decode replicated objects using current Schema cache we have.

Thus, when replicating Schema, we will make a temporary Schema
cache, working_schema, so that we can fully decode objects
we recieve.
 2010-12-01 13:01:17 +02:00
Kamen Mazdrashki
a42e267105 s4-dsdb/schema: Implement multi-pass working schema creation function 
It is heavily based on implementation in libnet_vampire_cb_apply_schema()
function, except that it actually creates a new copy of the supplied
initial_schema + resolving all incoming objects and add them to
supplied initial_schema.

We are going to need this 'working_schema' later so we are able
to fully resolve all objects we receive on wire during DRS replication.

Working schema created is to be used only as an index to search in.
It is not supposed to be set to an ldb_context as it doesn't
contain all information for classSchema and attributeSchema objects.
 2010-12-01 13:01:17 +02:00
Kamen Mazdrashki
fcc26c5d59 s4-dsdb/schema: Add Schema shallow copy function 2010-12-01 13:01:16 +02:00
Kamen Mazdrashki
16bd9dd7ae s4-dsdb/prefixMap: Add prefixMap shallow copy function 2010-12-01 13:01:16 +02:00
Kamen Mazdrashki
4041791d01 s4-repl: Let dsdb_replicated_objects_convert() to accept schema from caller 
This allows us to use schema that is different than the one
set to 'ldb' to decode objects.
 2010-12-01 13:01:16 +02:00
Kamen Mazdrashki
4cd16dde14 s4-ranged_result.c: Fix memory context for ranged attributes handling 
Pair-Programmed-With: Zahari Zahariev <zahari.zahariev@postpath.com>

Autobuild-User: Kamen Mazdrashki <kamenim@samba.org>
Autobuild-Date: Wed Dec  1 11:45:48 CET 2010 on sn-devel-104
 2010-12-01 11:45:48 +01:00
Andrew Tridgell
b7172e7a71 s4-drs: cope with invalid NTDS DNs from DsReplicaInfo() 
w2k3 sometimes returns a deleted DN

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Wed Dec  1 07:48:19 CET 2010 on sn-devel-104
 2010-12-01 07:48:18 +01:00
Andrew Bartlett
c5bea98ddb s4:heimdal: import lorikeet-heimdal-201012010201 (commit 81fe27bcc0148d410ca4617f8759b9df1a5e935c) 2010-12-01 17:00:47 +11:00
Andrew Bartlett
c1fa6be925 s4-samba-tool Show when we have created the user successfully 2010-12-01 16:09:58 +11:00
Andrew Tridgell
c2fb350218 s4-drs: the options attribute is optional on NTDSDSA objects 2010-12-01 16:09:58 +11:00
Andrew Tridgell
a940d5d344 s4-provision: remove the disabled bit in the dns-$HOSTNAME account 2010-12-01 16:09:57 +11:00
Jelmer Vernooij
8428311ce5 pygensec: Fix initialization. 
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Wed Dec  1 02:33:06 CET 2010 on sn-devel-104
 2010-12-01 02:33:06 +01:00
Jelmer Vernooij
a9fb47b5d6 pyparam: Use talloc.Object. 2010-12-01 01:48:25 +01:00
Jelmer Vernooij
1f0cc6f081 pyregistry: Use talloc.Object. 2010-12-01 01:48:25 +01:00
Jelmer Vernooij
f43ffed781 pyauth: Use talloc.Object. 2010-12-01 01:48:25 +01:00
Jelmer Vernooij
fce73d7eff pygensec: Use talloc.Object. 2010-12-01 01:48:25 +01:00
Jelmer Vernooij
00251d9e56 pycredentials: Use talloc.Object. 2010-12-01 01:48:25 +01:00
Andrew Tridgell
557401b68d s4-build: added a 'make help' target 2010-12-01 11:03:25 +11:00
Andrew Tridgell
062378c1b4 s4-provision: fixed check for missing msDS-SupportedEncryptionTypes 
thanks to Jelmer for spotting this
 2010-12-01 11:03:25 +11:00
Andrew Tridgell
47e8cbe3d6 heimdal: fix for w2000 from lha 
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Wed Dec  1 00:59:59 CET 2010 on sn-devel-104
 2010-12-01 00:59:59 +01:00
Andrew Tridgell
1286f53455 s4-dns: catch all DNS exceptions in samba_dnsupdate 2010-12-01 00:14:40 +01:00
Andrew Bartlett
29c4f3fa61 s4-smb_server Return why the ntvfs_connect() failed. 
Andrew Bartlett
 2010-12-01 00:14:40 +01:00
Andrew Bartlett
4ea840c3a5 s4-librpc Handle all types of GUID in the GUID() initialiser 
By taking a length-limited string, we can parse binary and string GUID
values, which is particularly useful when reading from ldb.

Andrew Bartlett
 2010-12-01 00:14:40 +01:00
Matthias Dieter Wallnöfer
10d1cd7af7 s4:torture - partially revert "s4:torture - prefer the termination "return"s at the end of two unittests" 
This partially reverts commit 54a5c398aa.
As tridge pointed out I've overseen the nested loop in "run_iometer".
Therefore we end in a infinite loop. Obviously it wasn't run by "make
test" since then I would have detected it.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Tue Nov 30 09:23:00 CET 2010 on sn-devel-104
 2010-11-30 09:23:00 +01:00
Jelmer Vernooij
05cb5ad87c samdb: Build as public library. 2010-11-29 23:48:04 +01:00
Matthias Dieter Wallnöfer
54a5c398aa s4:torture - prefer the termination "return"s at the end of two unittests 
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Mon Nov 29 23:29:23 CET 2010 on sn-devel-104
 2010-11-29 23:29:23 +01:00
Günther Deschner
53712fbb4f s4-smbtorture: only run the cupsaddsmb adobe driver test against s3. 
Guenther

Autobuild-User: Günther Deschner <gd@samba.org>
Autobuild-Date: Mon Nov 29 18:47:17 CET 2010 on sn-devel-104
 2010-11-29 18:47:17 +01:00
Günther Deschner
e722c66b98 s4-smbtorture: add torture test for cupsaddsmb win9x driver install behavior. 
Guenther
 2010-11-29 17:50:05 +01:00
Günther Deschner
7f2afe25e7 s4-smbtorture: make add-printerdriver test more robust against empty configfiles. 
Guenther
 2010-11-29 17:48:42 +01:00
Günther Deschner
118a79719c s4-smbtorture: make driver upload/removal more robust against empty filenames. 
Guenther
 2010-11-29 17:07:02 +01:00
Günther Deschner
b9a59ba80d s4-smbtorture: add test for Adobe PostScript driver (Win9x) installation. 
Guenther
 2010-11-29 15:35:19 +01:00
Günther Deschner
90a0a7e81b s4-smbtorture: handle driverfile overlap during removal in RPC-SPOOLSS-DRIVER. 
Guenther
 2010-11-29 15:35:19 +01:00
Günther Deschner
93582c3d29 s4-smbtorture: re-arrange RPC-SPOOLSS-DRIVER test a bit. 
Guenther
 2010-11-29 15:35:19 +01:00
Matthias Dieter Wallnöfer
e9c40efdcf s4:wrepl_server - add a cast on "iov_base" 
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Mon Nov 29 15:34:32 CET 2010 on sn-devel-104
 2010-11-29 15:34:32 +01:00
Matthias Dieter Wallnöfer
6ce63655ef s4:lib/tls/tls_tstream.c - quiet warning on Solaris "cc" by casts 2010-11-29 14:48:13 +01:00
Matthias Dieter Wallnöfer
bd4006fb9e s4:auth/gensec/gensec_tstream.c - quiet warnings on Solaris "cc" 2010-11-29 14:48:13 +01:00
Matthias Dieter Wallnöfer
205c1e0106 s4:wrepl_server - remove unreachable statement 2010-11-29 14:48:13 +01:00
Matthias Dieter Wallnöfer
40db0b8386 s4:dcesrv_drsuapi RPC server - remove unreachable statement 2010-11-29 14:48:13 +01:00
Matthias Dieter Wallnöfer
821c962d2a s4:dns_server/dns_update.c - remove unreachable statements 2010-11-29 14:48:13 +01:00
Matthias Dieter Wallnöfer
87b887f48f s4:torture - remove unreachable statements to quiet warnings of Solaris "cc" 2010-11-29 14:48:12 +01:00
Matthias Dieter Wallnöfer
7fb9087e64 s4:auth/ntlmssp/ntlmssp_server.c - remove unnecessary ";" 2010-11-29 14:48:12 +01:00
Matthias Dieter Wallnöfer
c4625a84de heimdal:base/heimbase.c - remove an unused variable 2010-11-29 14:14:02 +01:00
Matthias Dieter Wallnöfer
0852b0f653 s4:param/pyparam_util.c - remove unused include 
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Mon Nov 29 12:56:12 CET 2010 on sn-devel-104
 2010-11-29 12:56:12 +01:00
Matthias Dieter Wallnöfer
cc553eaf97 s4:auth/gensec/gensec_gssapi.c - always print error messages on the same talloc context 2010-11-29 11:33:04 +01:00
Andrew Tridgell
dc0c89cf40 s4-samdb: give a better exception if multiple users match in password change 2010-11-29 18:04:42 +11:00
Andrew Tridgell
c522cd73ac s4-repl_schema: fixed ldb exception handling 2010-11-29 18:04:42 +11:00
Andrew Tridgell
37bfc4ec38 s4-samba-tool: fixed exception handling in subcommands 
this switches to the new pattern of:

 except Exception, e:
 	raise CommandError("some error message", e)
 2010-11-29 18:04:42 +11:00
Andrew Tridgell
6250690310 s4-samba-tool: fixed ldb exception handling in domainlevel command 
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
 2010-11-29 18:04:42 +11:00
Andrew Tridgell
a1f96923e6 s4-samba-tool: improved exception handling in samba-tool 
we now do reasonable printing on a wide range of common exception
classes, and always force a backtrace on an exception if the debug
level is >= 3

Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>
 2010-11-29 18:04:42 +11:00
Andrew Tridgell
8c59bbd757 s4-join: fixed exception handling in join command 2010-11-29 18:04:42 +11:00
Andrew Tridgell
abe9ac53f0 s4-ldapcmp: make ldapcmp a samba-tool command 
The ldapcmp tool is very useful, and should be available to Samba
admins, not just developers. This makes it a samba-tool command, which
also gives it the nicer command line handling that samba-tool has
 2010-11-29 18:04:42 +11:00
Andrew Tridgell
f8d73e466b s4-ldapcmp: fixed exception handling 
This pattern, which is common in our code, is wrong:
            except LdbError, (ERR_NO_SUCH_OBJECT, _):

what it actually does it to change the value of ldb.ERR_NO_SUCH_OBJECT
to be equal to whatever ldb error occurred! This led to some really
bizarre behavior
 2010-11-29 18:04:42 +11:00
Andrew Tridgell
0dd2152b01 s4-pyglue: added get_debug_level() method 
Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>
 2010-11-29 18:04:42 +11:00
Andrew Tridgell
33d178767b s4-loadparm: use loadparm_init_global() instead of loadparm_init() 
this prevents us having two lp_ctx contexts in these tools which leads
to bizarre behaviour

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
 2010-11-29 18:04:42 +11:00
Andrew Tridgell
b20ce4392e s4-loadparm: added loadparm_init_global() 
This ensures we use the same loadparm_context in all our command line
tools.

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
 2010-11-29 18:04:42 +11:00
Andrew Tridgell
6982a00ded s4-gpo: started on samba-tool gpo list command 2010-11-29 18:04:42 +11:00
Andrew Tridgell
6cd01c9665 s4-dsdb: give full error message for operational failures 2010-11-29 18:04:42 +11:00
Andrew Tridgell
74d373d0f7 s4-pydsdb: two more GPO related flags 2010-11-29 18:04:41 +11:00
Andrew Tridgell
7a826d02a3 s4-samba-tool: started on gpo subcommands in python 
this adds the listall GPO command. Currently the python variants are
available as "samba-tool gpo2 SUBCOMMAND". These will replace the
"samba-tool gpo" commands when complete
 2010-11-29 18:04:41 +11:00
Andrew Tridgell
e54c8bef8a s4-pydsdb: added GPO policy flags 2010-11-29 18:04:41 +11:00
Jelmer Vernooij
97f0d6c278 samba.tests.hostconfig: Fix import. 
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Sun Nov 28 18:08:33 CET 2010 on sn-devel-104
 2010-11-28 18:08:33 +01:00
Jelmer Vernooij
eb5a8e29cf s4-python: Some reformatting for the purpose of pydoctor. 2010-11-28 17:23:28 +01:00
Jelmer Vernooij
20516df275 samba.upgradehelpers: Simplify code a bit. 2010-11-28 17:23:27 +01:00
Jelmer Vernooij
ca495e67b2 samba.hostconfig: Move samba.shares into samba.hostconfig. 2010-11-28 17:23:27 +01:00
Jelmer Vernooij
979d298b0d samba.getopt: Fix missing import of sys. 2010-11-28 17:23:27 +01:00
Jelmer Vernooij
28b509579d chgtdcpass: Fix program name in usage message. 2010-11-28 17:23:27 +01:00
Matthias Dieter Wallnöfer
56969adb3d s4:torture/smb2/acls.c - remove two unused variables 
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Sun Nov 28 17:22:54 CET 2010 on sn-devel-104
 2010-11-28 17:22:54 +01:00
Matthias Dieter Wallnöfer
96c1cd762d s4:introduce casts before outputs of "time_t" variables 
Otherwise we are getting warnings on "NetBSD".
 2010-11-28 16:38:16 +01:00
Matthias Dieter Wallnöfer
ce55d7c9f0 Revert "s4:netcmd/drs.py - use "objectClass" for discovering the server and it's NTDS settings object" 
This reverts commit b87c3703cf.
Andrew Bartlett told me that exactly the opposite is true - the "objectCategory"
lookup is performing better.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Sun Nov 28 14:18:41 CET 2010 on sn-devel-104
 2010-11-28 14:18:40 +01:00
Matthias Dieter Wallnöfer
736d36a948 s4:dsdb/repl/drepl* - move "lib/messaging/irpc.h" include into "drepl_service.h" 
This is needed to fix a Tru64 "cc" warning regarding "enum drepl_role_master".

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Sun Nov 28 12:46:19 CET 2010 on sn-devel-104
 2010-11-28 12:46:19 +01:00
Jelmer Vernooij
4cf85a7193 s4-selftest: Ignore broken pipe error from grep. 
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Sun Nov 28 05:45:05 CET 2010 on sn-devel-104
 2010-11-28 05:45:05 +01:00
Jelmer Vernooij
7c65ab12af samba.provision: Fix setup_path. 2010-11-28 05:00:06 +01:00
Jelmer Vernooij
8caac9462a samba.provision: Add package with provision and backend modules. 2010-11-28 05:00:06 +01:00
Jelmer Vernooij
a7675bd501 s4-python: Fix formatting of docstrings for the purpose of pydoctor. 2010-11-28 05:00:06 +01:00
Jelmer Vernooij
6fea636888 Makefile: Add rule for pydoctor. 2010-11-28 05:00:05 +01:00
Jelmer Vernooij
ae48c626c8 samba.tests: Fix formatting. 2010-11-28 05:00:05 +01:00
Kamen Mazdrashki
092e923e2b s4-tests/bind.py: Use samba.tests.connect_samdb() instead of directly using SamDB class 
connect_samdb() functino will correctly handle things like:
- session_info param - it will create system_session() using supplied
  LoadParm parameter and thus avoiding creation of multiple LoadParm
  instances (LoadParm() will mask certain command line supplied options)
- host url will be prefixed with ldap:// automatically

Autobuild-User: Kamen Mazdrashki <kamenim@samba.org>
Autobuild-Date: Sun Nov 28 03:00:41 CET 2010 on sn-devel-104
 2010-11-28 03:00:41 +01:00
Andrew Tridgell
60bf020394 s4-samba-tool: support help, and show description of commands 
when you don't specify a subcommand, show the description of the
subcommands in the list of available subcommands. Also show the list
of subcommands when you use 'help', '--help' or '-h' as a subcommand

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Sun Nov 28 01:56:46 CET 2010 on sn-devel-104
 2010-11-28 01:56:46 +01:00
Andrew Tridgell
2a4c6da783 s4-drs: fixed credit for C version 2010-11-28 01:11:06 +01:00
Matthias Dieter Wallnöfer
b87c3703cf s4:netcmd/drs.py - use "objectClass" for discovering the server and it's NTDS settings object 
Small optimisation: we don't need to look for "nTDSDSARO" since it's a subclass
of "ntDSDSA".

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Sat Nov 27 23:35:13 CET 2010 on sn-devel-104
 2010-11-27 23:35:13 +01:00
Matthias Dieter Wallnöfer
eaac277381 s4:dsdb/repl/drepl_service.c - return the correct WERR result 2010-11-27 21:50:42 +01:00
Matthias Dieter Wallnöfer
bfb28243d0 s4:drepl_service.c - fix error macro (use "_werr" and not "werr") 
Detected by Tru64 "cc".
 2010-11-27 21:50:42 +01:00
Matthias Dieter Wallnöfer
a13bd32fa9 s4:dsdb/repl/drepl_out_helpers.c - print out the correct error message (werr) 
Also detected by Tru64 "cc".
 2010-11-27 21:50:42 +01:00
Matthias Dieter Wallnöfer
450b26b9b5 s4:lib/registry/rpc.c - remove a duplicate assignment 2010-11-27 21:50:42 +01:00
Matthias Dieter Wallnöfer
24c5d6b504 s4:torture/rpc/samr.c - fix uninitialised "status" variables 
Detected by Tru64. I wonder how this tests even worked.
 2010-11-27 21:50:42 +01:00
Matthias Dieter Wallnöfer
5c8f0c5b9d s4:torture/rpc/samsync.c - remove uninitialised "nt_status" check 
Found by Tru64 compiler.
 2010-11-27 21:50:42 +01:00
Matthias Dieter Wallnöfer
6df6364220 s4:drsuapi RPC server - fix "enum security_user_level" warning on Tru64 2010-11-27 21:50:42 +01:00
Matthias Dieter Wallnöfer
c8aa7d5837 s4:param/secrets.h - fix "enum netr_SchannelType" include correctly 2010-11-27 21:50:41 +01:00
Matthias Dieter Wallnöfer
4010eff80b s4:wkssvc RPC server - better solution for srvsvc* enum's in server_info.c 
Reworked version of commit 7e710c4de9
 2010-11-27 21:50:41 +01:00
Matthias Dieter Wallnöfer
3c343fec8a Revert "s4:rpc_server/common/common.h - introduce two forward declarations to suppress parameter declaration warnings" 
This reverts commit 7e710c4de9.
This causes more noise than it's useful.
 2010-11-27 21:50:41 +01:00
Matthias Dieter Wallnöfer
19ea37886c s4:libcli/security/session.h - fix include ordering for "enum security_user_level" 2010-11-27 21:50:41 +01:00
Matthias Dieter Wallnöfer
4dece699ed s4:dsdb/samdb/samdb.h - fix include ordering in order to prevent warnings on Tru64 2010-11-27 21:50:41 +01:00
Matthieu Patou
caa8a92f52 build: change compile flags on mac os x if we face pb with common symbols 
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Sat Nov 27 18:02:41 CET 2010 on sn-devel-104
 2010-11-27 18:02:41 +01:00
Jelmer Vernooij
498743bd46 show_test_time: Move to root scripting directory as it's useful for s3 
and s4.

Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Sat Nov 27 17:17:29 CET 2010 on sn-devel-104
 2010-11-27 17:17:29 +01:00
Matthias Dieter Wallnöfer
258dc02a9d s4:role transfer - use always type "enum drepl_role_master" for role specifications 
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Sat Nov 27 16:03:43 CET 2010 on sn-devel-104
 2010-11-27 16:03:42 +01:00
Matthias Dieter Wallnöfer
d613f91a74 s4:samba3sam LDB module - correctly print out an unsigned value 
Here we can print it out as unsigned since we are generating a string
attribute.
 2010-11-27 15:17:18 +01:00
Matthias Dieter Wallnöfer
2163c7a298 s4:samba3sam LDB module - make the "pw_uid"/"pw_gid" conversion a bit clearer 
And remove the "long" specifier since at least on the major platforms
(Linux, BSD and Solaris) these types are defined as "uint32_t".
 2010-11-27 15:17:18 +01:00
Matthias Dieter Wallnöfer
e9f019e28c s4:dsdb tests - make use of "ldb.get_domain_sid()" 2010-11-27 15:17:18 +01:00
Matthias Dieter Wallnöfer
7545b5b3db s4:dsdb/tests/python/sam.py - we don't need the domain SID 2010-11-27 15:17:18 +01:00
Matthias Dieter Wallnöfer
02addbc40d s4:torture/drs/python/fsmo.py - fix comments and an error message 2010-11-27 15:17:18 +01:00
Andrew Tridgell
847b909b6e s4-samba-tool: removed old C implementation of samba-tool drs 
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Sat Nov 27 15:16:02 CET 2010 on sn-devel-104
 2010-11-27 15:16:02 +01:00
Andrew Tridgell
3d8d382fe5 s4-samba-tool: switched over to python version of samba-tool drs 2010-11-28 00:16:38 +11:00
Andrew Tridgell
d06bf954ba s4-samba-tool: added python implementation of samba-tool drs commands 
much simpler than the C code, and this brings us one step closer to a
python samba-tool
 2010-11-28 00:16:38 +11:00
Andrew Tridgell
f6c2d39d0b s4-pyglue: expose the remaining NTTIME functions from glue 2010-11-28 00:16:38 +11:00
Andrew Tridgell
8310375a04 s4-drs: allow DrsReplicaGetInfo as a DC 2010-11-28 00:16:38 +11:00
Andrew Tridgell
a589b9a033 s4-pydsdb: use cpp macro to simplify flags definitions 
also added some more from flags.h
 2010-11-28 00:16:37 +11:00
Andrew Tridgell
af93f227ad s4-samba-tool: fixed "-k no" for disabling kerberos auth 
The option "-k no" was not correctly disabling kerberos in python
programs

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
 2010-11-28 00:16:37 +11:00
Matthieu Patou
6a781b5286 Add timestamp when running with --maximum-runtime 
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Sat Nov 27 11:51:12 CET 2010 on sn-devel-104
 2010-11-27 11:51:12 +01:00
Jelmer Vernooij
d237698850 blackbox.ldb: Support using system ldbsearch. 
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Sat Nov 27 04:32:11 CET 2010 on sn-devel-104
 2010-11-27 04:32:11 +01:00
Andrew Tridgell
dbb9500448 s4-libnet: use the full DNS domain for CLDAP lookups if possible 
many of the internal libnet interfaces use the short domain name,
which leads to unreliable NBT lookups. If we are trying to look for
our workgroup, then look for our DNS domain instead

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Sat Nov 27 03:47:52 CET 2010 on sn-devel-104
 2010-11-27 03:47:52 +01:00
Matthieu Patou
e8ae340421 ldb-tdb: Add more information about full scan 2010-11-26 23:46:06 +03:00
Matthias Dieter Wallnöfer
6a2171c739 s4:rootdse LDB module - remove unused variable 
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Fri Nov 26 13:58:27 CET 2010 on sn-devel-104
 2010-11-26 13:58:27 +01:00
Matthias Dieter Wallnöfer
8680c6f888 s4:objectclass LDB module - simply use "msg" when requesting the message 2010-11-26 13:10:01 +01:00
Matthias Dieter Wallnöfer
848010b570 s4:objectclass LDB module - move the "mem_ctx" allocation to a better place 
It's only needed if we've a schema around.
 2010-11-26 13:10:00 +01:00
Andrew Bartlett
7048ad11f5 s4-dsdb Reorganise and clarify the LSA objectClass check (forbidden on LDAP) 
This arranged the check to avoid talloc_strdup() (the schema pointers
are constant, and can be relied upon), and checks the untrusted bit
first (it is faster), before the ldb_attr_cmp().

The strcmp() here was valid, if unusual, because the ldapDisplayName
values are already in the correct case, but strcasecmp() is more
correct, as for the small extra cost, we avoid a difficult to diagnose
bug later.

Andrew Bartlett

Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
 2010-11-26 13:10:00 +01:00
Andrew Bartlett
439a2d6983 s4-objectclass Use a specific local variable name, not 'value' 
This makes it clearer what the local variable in use here does.

Andrew Bartlett

Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
 2010-11-26 13:09:59 +01:00
Andrew Tridgell
bf52cffd25 s4-kcc: fixed valgrind errors in drs replicaInfo server side 
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Fri Nov 26 03:52:30 CET 2010 on sn-devel-104
 2010-11-26 03:52:30 +01:00
Andrew Tridgell
5e8cb67605 s4-provision: fixed eadb automatic and manual setting in provision 
we should not set posix:eadb in lp in the acl native test code

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
 2010-11-26 03:08:21 +01:00
Andrew Tridgell
eeb29b593a s4-provision: don't try to look for an IPv6 address when not specified 
the getaddrinfo() method of finding an IPv6 address is incorrect. We
could do it via the Samba interfaces code, but until we have that it
is better to not try to auto-detect IPv6

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
 2010-11-26 03:08:21 +01:00
Andrew Bartlett
fab9d94006 s4-dsdb Remove rootDSE and anonymous checks from acl_read 
The rootdse module handles rootDSE requests, and blocks anonymous
access, so we on't need to do it again here.

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Fri Nov 26 00:36:19 CET 2010 on sn-devel-104
 2010-11-26 00:36:19 +01:00
Andrew Bartlett
d184da8065 s4-dsdb Add 'block anonymous' checks to the rootdse module 
This ensures that one single point checks for and blocks anonymous
read access to the database over LDAP.

Andrew Bartlett
 2010-11-26 08:50:42 +11:00
Andrew Bartlett
885ecd7b6b s4-dsdb Remove mem_ctx argument from dsdb_module_find_dsheuristics(). 
A function that does not return memory should not take a memory context.

Andrew Bartlett
 2010-11-26 08:50:42 +11:00
Nadezhda Ivanova
fad57d8ad0 s4-tests: Made acl tests to reconnect if dSHeuristics is being manipulated 
Also made password tests set dSHeuristics only once rather that once per test.

Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Thu Nov 25 20:48:38 CET 2010 on sn-devel-104
 2010-11-25 20:48:38 +01:00
Nadezhda Ivanova
1e9a7882be s4-tests: Modified create_ou to only accept security.descriptor type for sd to avoid confusion 
It used to work with sddl as well, but this is confusing and could lead to errors. It also caused a message about tallocing a security descriptor to appear.

Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Thu Nov 25 19:46:42 CET 2010 on sn-devel-104
 2010-11-25 19:46:42 +01:00
Nadezhda Ivanova
db403ac35d s4-dsdb: Switched to using a dictionary in create_ou for consistency. 
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Thu Nov 25 14:12:52 CET 2010 on sn-devel-104
 2010-11-25 14:12:52 +01:00
Nadezhda Ivanova
05b8e078f4 s4-dsdb: Fixed wrong assignment of name attribute to description atribute in create_ou. 2010-11-25 14:25:43 +02:00
Matthias Dieter Wallnöfer
ae61408e2f s4:lsa RPC server / objectclass LDB module - fix the creation of trusted domain objects 
Tridge pointed out that it is to dangerous to allow them to be created
with SYSTEM permissions. The solution using the "untrusted" flag should
be much more viable.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Thu Nov 25 13:05:56 CET 2010 on sn-devel-104
 2010-11-25 13:05:56 +01:00
Nadezhda Ivanova
fc1da86d40 s4-tests: Modified speedtest.py to use samba.tests.delete_force 
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Thu Nov 25 01:28:19 CET 2010 on sn-devel-104
 2010-11-25 01:28:19 +01:00
Nadezhda Ivanova
21aceb1374 s4-tests: Modified sec_descriptor.py to use samba.tests.delete_force 2010-11-25 01:15:24 +02:00
Nadezhda Ivanova
9917525b96 s4-tests: Modified sam.py to use samba.tests.delete_force 2010-11-25 01:14:58 +02:00
Nadezhda Ivanova
0d99a5f27c s4-tests: Modified passwords.py to use samba.tests.delete_force 2010-11-25 01:13:47 +02:00
Nadezhda Ivanova
71af506950 s4-tests: delete_force was unused, removed it. 2010-11-25 01:13:24 +02:00
Nadezhda Ivanova
5e7d99a5d8 s4-tests: Modified ldap_schema.py to use samba.tests.delete_force 2010-11-25 01:12:42 +02:00
Nadezhda Ivanova
d21d3e7db8 s4-tests: Modified ldap.py to use samba.tests.delete_force 2010-11-25 01:12:18 +02:00
Nadezhda Ivanova
66aa40b9d9 s4-tests: Modified deletetest.py to use samba.tests.delete_force 2010-11-25 01:11:57 +02:00
Nadezhda Ivanova
f42802e22f s4-tests: Modified bind.py to use samba.tests.delete_force 2010-11-25 01:11:29 +02:00
Nadezhda Ivanova
d7731f6f39 s4-tests: Modified acly.py to use common delete_force instead of defining its own. 2010-11-25 01:09:27 +02:00
Nadezhda Ivanova
db5bcb7115 s4-tests: Added a common definition of delete_force. 2010-11-25 01:09:27 +02:00
Günther Deschner
64424bb1c3 s4-smbtorture: pick a better printer in RPC-SPOOLSS-ACCESS. 
Guenther

Autobuild-User: Günther Deschner <gd@samba.org>
Autobuild-Date: Wed Nov 24 22:07:33 CET 2010 on sn-devel-104
 2010-11-24 22:07:33 +01:00
Matthias Dieter Wallnöfer
1352a9406f s4:objectclass LDB module - LSA objects - allow them if the SYSTEM control is specified 
This fits better than the RELAX one.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Wed Nov 24 18:23:01 CET 2010 on sn-devel-104
 2010-11-24 18:23:01 +01:00
Matthias Dieter Wallnöfer
8c01d6a837 s4:objectclass LDB module - move one checks into the "objectclass derivation loop" 
This denies objects created from possible derivated classes from the prohibited
ones.

Also small cosmetic improvements for another check.
 2010-11-24 17:39:18 +01:00
Matthias Dieter Wallnöfer
0a6834e630 s4:objectclass LDB module - some more or less cosmetic return value macro changes 
Sometimes "ldb_module_oom" fits better than "ldb_operr" or "ldb_oom".
 2010-11-24 17:39:18 +01:00
Nadezhda Ivanova
dab4e008a0 s4-tests: Modified sec_descriptor to use samdb.newgroup instead of locally defined method. 
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Wed Nov 24 17:38:28 CET 2010 on sn-devel-104
 2010-11-24 17:38:28 +01:00
Nadezhda Ivanova
c89ecfc2ad s4-dsdb: Extended samdb.newgroup to set the group's security descriptor. 2010-11-24 16:54:18 +01:00
Andrew Bartlett
5d65025fde s4-setup correct the require BIND version for Dynamic DNS 2010-11-24 17:48:04 +11:00
Andrew Tridgell
1f478afe22 s4-devel: we don't need to override these scripts now 
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Wed Nov 24 01:02:43 CET 2010 on sn-devel-104
 2010-11-24 01:02:43 +01:00
Andrew Tridgell
93d311c07e s4-dynconfig: override more paths when running from the build directory 
this ensures consistency between binaries and scripts when testing as
a developer
 2010-11-24 00:19:15 +01:00
Andrew Tridgell
5d014cad08 s4-kcc: disable the NDR printing of DRS getinfo requests 2010-11-24 00:19:15 +01:00
Jelmer Vernooij
df70a4a3b7 pyldb: Fix broken test. 
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Tue Nov 23 23:20:38 CET 2010 on sn-devel-104
 2010-11-23 23:20:38 +01:00
Nadezhda Ivanova
91b687d42b s4-tests: Modified acl.py to use samdb.newgroup instead of custom methods. 
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Tue Nov 23 21:46:07 CET 2010 on sn-devel-104
 2010-11-23 21:46:07 +01:00
Nadezhda Ivanova
e95a350682 s4-dsdb: Changed filter to find the account of a user by samAccountName 
In newuser, a filter by dn was given to setpassword to find the account whose password is to be reset.
It appears however that if given filter of type (dn=CN=smth) Windows fails to return the entry, and the
tests that use newuser fail against it. Changed to use samAccountName instead.
 2010-11-23 21:02:03 +01:00
Kamen Mazdrashki
58f6a37f64 s4-test/repl_schema: Refactor the test a little bit to 
- Cleanup imports
- make sure we have testtools and subunit imported
- use dictionaries instead of LDIFs for schema modification
  so now callers for _make_class can easily add new attributes
  for created class
- simplify a little bit classSchema creation
- test attributeSchema replication

Autobuild-User: Kamen Mazdrashki <kamenim@samba.org>
Autobuild-Date: Tue Nov 23 18:44:46 CET 2010 on sn-devel-104
 2010-11-23 18:44:46 +01:00
Kamen Mazdrashki
1b58074557 s4-tests: Make all DRS python tests to start with samba4.drs.* prefix 2010-11-23 18:01:05 +01:00
Kamen Mazdrashki
9e24db1f2b s4-pfm_verify: Explicitly pass LoadParm() instance to system_session() function 
Otherwise system_session() creates a LoadParm() instance
wich resets certain params to their defaults from smb.conf
("log level" for instance)
 2010-11-23 18:01:05 +01:00
Nadezhda Ivanova
ff822209c1 s4-tests: Modified sec_descriptor.py to use samdb.newuser instead of custom methods. 
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Tue Nov 23 17:58:38 CET 2010 on sn-devel-104
 2010-11-23 17:58:38 +01:00
Nadezhda Ivanova
860ad87340 s4-tests: Modified acl.py to use samdb.newuser instead of custom methods. 2010-11-23 17:15:16 +01:00
Nadezhda Ivanova
3001a514dd s4-dsdb: Extended samdb.newuser to accept security descriptor for the object and optionally skip password reset 
Sometimes for testing purposes we create users without any permissions on their objects and password reset
cannot be performed at that point, and is not necessary. For this purpose we can now optionally skip this step.
The default is still to reset the user password.
Also, a security.descriptor object can be specified during the user creation to override using the default one.
defaultSecurityDescriptor is still used by default.
 2010-11-23 17:15:16 +01:00
Nadezhda Ivanova
5d27aee107 s4-tests: Modified sec_descriptor.py to use SamDB.create_ou() 
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Tue Nov 23 14:19:34 CET 2010 on sn-devel-104
 2010-11-23 14:19:33 +01:00
Nadezhda Ivanova
868dd26efd s4-tests: Modified acl.py to use SamDB.create_ou() 2010-11-23 14:33:27 +02:00
Nadezhda Ivanova
0c22316ccf s4-dsdb: Added a python method to SamDB for creating organizationalUnits 2010-11-23 14:33:27 +02:00
Andrew Tridgell
3a8b67d06c s4-ldb: added an environment varibale LDB_WARN_UNINDEXED 
when LDB_WARN_UNINDEXED is set, we produce warnings about unindexed
searches. This makes it easier to find performance problems caused by
unindexed searches.
 2010-11-23 22:14:58 +11:00
Nadezhda Ivanova
439ff8717d s4-tests: Ldap tests now use the get_dsheuristics and set_dsheuristics from SamDB. 
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Tue Nov 23 11:08:37 CET 2010 on sn-devel-104
 2010-11-23 11:08:36 +01:00
Nadezhda Ivanova
c252dac1b3 s4-tests: Password tests now use the get_dsheuristics and set_dsheuristics from SamDB. 2010-11-23 11:22:26 +02:00
Nadezhda Ivanova
d6679cb75a s4-tests: Acl tests now use the get_dsheuristics and set_dsheuristics from SamDB. 2010-11-23 11:22:26 +02:00
Nadezhda Ivanova
eaa9733a83 s4-dsdb: Added python helpers for getting and seting dSHeuristics to SamDB 2010-11-23 11:22:26 +02:00
Jelmer Vernooij
1cdc2d7dd6 service_ldap, service_smb: Lowercase output file names. 
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Mon Nov 22 20:28:14 CET 2010 on sn-devel-104
 2010-11-22 20:28:14 +01:00
Nadezhda Ivanova
2c993f0d4e s4-tests: Adapted passwords.py to use set_minPwdAge from SamDB. 
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Mon Nov 22 18:39:06 CET 2010 on sn-devel-104
 2010-11-22 18:39:06 +01:00
Nadezhda Ivanova
2c96be185d s4-tests: Adapted acl.py to use set_minPwdAge from SamDB. 2010-11-22 18:52:04 +02:00
Nadezhda Ivanova
c88b90e9f6 s4-dsdb: Added a helper to python SamDB for retrieving and setting minPwdAge. 2010-11-22 18:52:04 +02:00
Kamen Mazdrashki
b85dfce745 s4-test/repl_schema: Remote global ldb connections 
Although unlikely, Jelmer pointed out that using persistent
SamDB connections between test may interfere with tests
behaviour (and is not xUnit compliant anyway)

Autobuild-User: Kamen Mazdrashki <kamenim@samba.org>
Autobuild-Date: Mon Nov 22 15:24:03 CET 2010 on sn-devel-104
 2010-11-22 15:24:03 +01:00
Kamen Mazdrashki
9c2bd08498 s4-tests: Wrap connect_samdb() into a connect_samdb_ex() helper 
Thus caller will be able to connect to SamDB and fetch
RootDSE info in a single step
 2010-11-22 15:37:40 +02:00
Kamen Mazdrashki
bc6ba4b04c s4-samba.tests: Explicitly pass LoadParm() instance to system_session() function 
Otherwise system_session() creates a LoadParm() instance
wich resets certain params to their defaults from smb.conf
("log level" for instance)
 2010-11-22 15:37:40 +02:00
Kamen Mazdrashki
6965d1eba5 s4-pfm_verify: fix usage string 
Thanks Tridge!
 2010-11-22 15:37:39 +02:00
Arnaud Faucher
2ac5cedb71 Avoid the use of PyAPI_DATA, which is for internal Python API's. 
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>

Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Mon Nov 22 00:52:56 CET 2010 on sn-devel-104
 2010-11-22 00:52:56 +01:00
Jelmer Vernooij
6534358a1a selftest: When running on the buildfarm, pipe everything through 
filter-subunit for the exit code.

Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Sun Nov 21 23:56:23 CET 2010 on sn-devel-104
 2010-11-21 23:56:23 +01:00
Matthieu Patou
0d85d2b4bf selftest: fix tap2subunit detection on system with tap2subunit but not correct subunit libs 
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Sun Nov 21 16:21:54 CET 2010 on sn-devel-104
 2010-11-21 16:21:54 +01:00
Matthias Dieter Wallnöfer
d218472310 s4:provision_rootdse_add.ldif - add all possible LDAP policy values but outcommented for the moment 
It would be nice if someone could activate them as needed.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Sun Nov 21 14:41:53 CET 2010 on sn-devel-104
 2010-11-21 14:41:53 +01:00
Andrew Tridgell
9e2f39484c s4-ldb: fixed the build with a space in the ldb modules directory name 
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Sun Nov 21 13:57:14 CET 2010 on sn-devel-104
 2010-11-21 13:57:14 +01:00
Andrew Tridgell
69c6e971a2 heimdal: fixed the waf build with a space in the directory name 2010-11-21 23:10:14 +11:00
Andrew Tridgell
808edd0293 s4-rpc: make rpc connect less verbose 2010-11-21 23:10:14 +11:00
Matthias Dieter Wallnöfer
6d1e00cd24 s4:repl_meta_data LDB module - fix a counter type 
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Sat Nov 20 22:32:06 CET 2010 on sn-devel-104
 2010-11-20 22:32:06 +01:00
Matthias Dieter Wallnöfer
f46b761054 s4:repl_meta_data LDB module - move the "objectGUID" checks a bit higher 
- they don't need the allocated "ac" context
- some small code cleanups
 2010-11-20 21:42:54 +01:00
Matthias Dieter Wallnöfer
d9f97cd57f s4:objectclass_attrs LDB module - add more delete protected attributes 
And enhance the testsuite
 2010-11-20 21:15:57 +01:00
Matthias Dieter Wallnöfer
87ddd5a807 s4:samldb LDB module - objectclass trigger - reorder template attributes 2010-11-20 21:01:27 +01:00
Ricardo Jorge
bd7647f0f9 pyrpc: Build the samba.dcerpc.srvsvc module. 
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>

Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Sat Nov 20 19:52:36 CET 2010 on sn-devel-104
 2010-11-20 19:52:35 +01:00
Arnaud Faucher
bc058b79bc heimdal: Don't depend on compile_asn1 and et_compile when using system versions. 
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>

Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Sat Nov 20 16:43:47 CET 2010 on sn-devel-104
 2010-11-20 16:43:47 +01:00
Matthias Dieter Wallnöfer
e3017e6411 s4:acl LDB module - it's more correct to count the password attributes using "unsigned int" 
Since these are derived from a LDB result.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Sat Nov 20 11:29:07 CET 2010 on sn-devel-104
 2010-11-20 11:29:07 +01:00
Matthias Dieter Wallnöfer
8585de8881 ldb:rdn_name LDB module - add more RDN name constraints 
And some small cleanups

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Sat Nov 20 00:06:35 CET 2010 on sn-devel-104
 2010-11-20 00:06:35 +01:00
Matthias Dieter Wallnöfer
bb679a4da3 ldb:ldb_rename on ldap backends - handle the case when the RDN value is empty 
Otherwise we get "<RDN name>=(null),..."
 2010-11-19 23:03:49 +01:00
Matthias Dieter Wallnöfer
d0993e1278 s4:netlogon/LogonGetDomainInfo - handle a NULL "dns_hostname" 
- Performs the short computer name check against the sam account name.
- Enhances the LogonGetDomainInfo testsuite which checks the NULL
  "dns_hostname" behaviour

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Fri Nov 19 12:50:33 CET 2010 on sn-devel-104
 2010-11-19 12:50:32 +01:00
Matthias Dieter Wallnöfer
3874331edb s4:torture/ldb/ldb.c - add a small test for a DN with an escaped comma 2010-11-19 12:07:06 +01:00
Matthias Dieter Wallnöfer
8b7f23d644 s4:dsdb tests - use even more already defined pyldb functions to retrieve NCs 2010-11-19 12:07:06 +01:00
Andrew Tridgell
24e8bc5441 wintest: moved to top level 
the plan is to expand wintest to test a lot more of Samba against
windows, including testing the Samba3 file server, winbind, nmbd etc
 2010-11-19 15:17:43 +11:00
Andrew Tridgell
58c43f74b9 s4-wintest: reliability and usability improvements 
- allow for missing VMs
- improved VM names
- added join of w2k3 to Samba domain
- cope with w2k3 dcpromo output
- wait for port 139 not 23, to avoid windows telnet server bug

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Thu Nov 18 23:56:11 CET 2010 on sn-devel-104
 2010-11-18 23:56:11 +01:00
Andrew Tridgell
5b3981acb1 s4-rodc: enable the DRS_GET_ALL_GROUP_MEMBERSHIP flag for RODC replication 
see the description of this flag in [MS-DRSR]
 2010-11-18 23:12:26 +01:00
Andrew Tridgell
96e55cb132 s4-join: initially disable the machine account 
enable after a password is set
 2010-11-18 23:12:26 +01:00
Andrew Tridgell
6a41afba68 s4-drs: fixed a typo 2010-11-18 23:12:26 +01:00
Andrew Tridgell
5be4bfdc37 s4-wintest: remove files in var/ when reprovisioning 2010-11-18 23:12:26 +01:00
Andrew Tridgell
27c3bc8c01 s4-test: added --rebase and --clean options 2010-11-18 23:12:26 +01:00
Andrew Tridgell
498f3c8e5f s4-test: use --fail-immediately for samba_dnsupdate testing 2010-11-18 23:12:26 +01:00
Andrew Tridgell
3f952aba2b s4-spnupdate: only enable NDR print at log level above 5 2010-11-18 23:12:25 +01:00
Andrew Tridgell
1ce223017d s4-dns: added support for --fail-immediately for RODC netlogon dns updates 2010-11-18 23:12:25 +01:00
Kamen Mazdrashki
ab379ddd51 s4-ldb.python: Use $SELFTEST_PREFIX/tmp as a temporary directory for testing 
This way we won't flood /tmp directory with temp files

Autobuild-User: Kamen Mazdrashki <kamenim@samba.org>
Autobuild-Date: Thu Nov 18 23:11:18 CET 2010 on sn-devel-104
 2010-11-18 23:11:18 +01:00
Kamen Mazdrashki
05c0bface1 s4-ldb.python: add test for ldb.Message.from_dict() method 2010-11-18 22:28:08 +01:00
Kamen Mazdrashki
a403d7777e s4-pyldb: ldb.Message.from_dict class method to create LdbMessage object from dictionary 2010-11-18 22:28:08 +01:00
Kamen Mazdrashki
a09a41f300 s4-pyldb: Move code to create a ldb_message from a Python Dictionary object into a separate function 2010-11-18 22:28:08 +01:00
Kamen Mazdrashki
c29a8c7ec5 s4-samdb.py: Use ldb.get_default_basedn() to avoid RootDSE search 2010-11-18 22:28:07 +01:00
Kamen Mazdrashki
b4809e4a82 s4-pyldb_util: Move ldb Type searching into separate function 2010-11-18 22:28:07 +01:00
Kamen Mazdrashki
88e4601900 s4-pyldb: Few miss-alignments aligned 2010-11-18 22:28:07 +01:00
Kamen Mazdrashki
72fcfedd89 s4-pyldb: Move PyLdbMessage_FromMessage() in PyMessage group of functions 2010-11-18 22:28:07 +01:00
Kamen Mazdrashki
d42ea3263a s4-pyldb: Fix wrong type of 'self' parameter 2010-11-18 22:28:07 +01:00
Nadezhda Ivanova
f992dbb9ca s4-tests: Modified descriptor tests to use pyldb api to retrieve configuration and schema dn. 
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Thu Nov 18 22:25:07 CET 2010 on sn-devel-104
 2010-11-18 22:25:07 +01:00
Nadezhda Ivanova
b397a13920 s4-tests: Modified acl tests to use pyldb api to retrieve configuration dn. 2010-11-18 21:41:27 +01:00
Nadezhda Ivanova
469d15e265 s4-tests: Changed descriptor tests to use existing method in samdb for adding users to a group. 
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Thu Nov 18 18:30:55 UTC 2010 on sn-devel-104
 2010-11-18 18:30:55 +00:00
Nadezhda Ivanova
82335b25e7 s4-tests: Changed acl tests to use existing method in samdb for adding users to a group. 2010-11-18 17:47:17 +00:00
Matthias Dieter Wallnöfer
fa1e8663bc Revert "s4:api.py - DN tests - test a bit more special DNs and merge the comparison tests" 
This reverts commit 732ef9353d.
Jelmer doesn't like to have these tests there.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Thu Nov 18 17:46:38 UTC 2010 on sn-devel-104
 2010-11-18 17:46:38 +00:00
Matthias Dieter Wallnöfer
4c666f3e0a s4:dsdb python tests - use "ldb.domain_dn" 
By inspiration of Nadya's patches
 2010-11-18 17:03:20 +00:00
Anatoliy Atanasov
b7dab46922 s4/operational: Fix swapped parameters for ldb_msg_copy_attr 
Autobuild-User: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
Autobuild-Date: Thu Nov 18 17:02:07 UTC 2010 on sn-devel-104
 2010-11-18 17:02:07 +00:00
Anatoliy Atanasov
b388951eea s4/ldap: ldap_syntaxes.py cleanup 
Autobuild-User: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
Autobuild-Date: Thu Nov 18 16:16:27 UTC 2010 on sn-devel-104
 2010-11-18 16:16:27 +00:00
Simo Sorce
0b3180bbf5 ldb: error out when modules are not found 
We shouldn't proceed without all required modules, it could cause damage to the
ldb if operations are performed w/o the needed modules.

Autobuild-User: Simo Sorce <idra@samba.org>
Autobuild-Date: Thu Nov 18 14:02:34 UTC 2010 on sn-devel-104
 2010-11-18 14:02:34 +00:00
Nadezhda Ivanova
47784a1470 s4-tests: Descriptor tests should use the existing samdb domain_dn method instead of defining a new one 
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Thu Nov 18 12:52:48 UTC 2010 on sn-devel-104
 2010-11-18 12:52:48 +00:00
Nadezhda Ivanova
763165c7bc s4-tests: Acl tests should use the existing samdb domain_dn method instead of defining a new one 2010-11-18 12:09:17 +00:00
Matthias Dieter Wallnöfer
56512fb1da ldb:skel.c - don't introduce trailing whitespaces by a module template 
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Thu Nov 18 12:08:30 UTC 2010 on sn-devel-104
 2010-11-18 12:08:30 +00:00
Matthias Dieter Wallnöfer
b001f1b255 s4:password_hash LDB module - remove unused headers 2010-11-18 12:21:56 +01:00
Matthias Dieter Wallnöfer
ae272acbdb s4:repl_meta_data LDB module - allow also special DNs to be renamed correctly 
Do always escape RDN values - this fixes bug #7794

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Thu Nov 18 10:43:40 UTC 2010 on sn-devel-104
 2010-11-18 10:43:40 +00:00
Matthias Dieter Wallnöfer
732ef9353d s4:api.py - DN tests - test a bit more special DNs and merge the comparison tests 2010-11-18 10:31:42 +01:00
Matthias Dieter Wallnöfer
ca7979e1a3 ldb:ldb_dn_explode - point out that on error cases "data" is implicitly free'd 2010-11-18 09:02:21 +01:00
Andrew Tridgell
1c4807a62f s4-test: added greater control over tests to run 
now supports --list to list tests, and --skip to skip the named tests

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Thu Nov 18 04:29:24 UTC 2010 on sn-devel-104
 2010-11-18 04:29:24 +00:00
Andrew Tridgell
23e053d4a2 s4-test: rename scripting/devel/howto to scripting/devel/wintest 
this won't just be for the howto anymore

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Thu Nov 18 00:45:18 UTC 2010 on sn-devel-104
 2010-11-18 00:45:18 +00:00
Andrew Tridgell
f6c66cd6ee s4-wintest: added wintest.py library 
converted test-howto.py to use the wintest library.

The idea is for us to create other tests that test lots of different
interactions with windows
 2010-11-18 10:59:26 +11:00
Andrew Tridgell
0a4b7bb9a5 s4-repl: removed the syncall_workaround code 
this isn't needed any more

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Wed Nov 17 13:41:51 UTC 2010 on sn-devel-104
 2010-11-17 13:41:51 +00:00
Andrew Tridgell
6c8b0d7f27 s4-repl: save the result of the last replication in repsFrom/repsTo 
when a replication fails, we should add the failure to repsFrom
when a notify fails, we need to save it to repsTo

this ensures showrepl always shows the latest status
 2010-11-17 23:55:39 +11:00
Andrew Tridgell
73016ad405 s4-repl: ensure we don't starve pending replication ops 
when there was a continuous sequence of notify ops, we could leave the
replication ops starving. This ensures we run whichever was queued
first
 2010-11-17 23:55:39 +11:00
Andrew Tridgell
e17ea9f3f5 s4-kcc: fixed result_last_attempt in showrepl 2010-11-17 23:55:39 +11:00
Andrew Tridgell
1645190b1c s4-provision: don't test for xattrs if posix:eadb is set 
when it is set in smb.conf or on the command line, obey the setting
and don't try to test for system xattr support
 2010-11-17 23:55:39 +11:00
Andrew Tridgell
333975d84f s4-provision: setup posix:eadb using lp.set() 
this allows it to override a setting made during the automatic testing
of xattr support
 2010-11-17 23:55:39 +11:00
Andrew Tridgell
9432eabb2f developer: only do the C++ reserved name checking on Linux 
this prevents us breaking the solaris build, but will still mean we
prevent C++ vars in our code
 2010-11-17 23:55:39 +11:00
Andrew Tridgell
d7ea449049 s4-provision: don't try to autodetect xattr is posix:eadb is set 
when posix:eadb is set then we know we should be using an eadb
 2010-11-17 23:55:39 +11:00
Andrew Tridgell
1a65180728 s4-heimdal: ask for non-atomic heimdal 
this allows us to build with compilers other than gcc
 2010-11-17 23:55:39 +11:00
Andrew Tridgell
e7dad42bc6 heimdal: added HEIM_BASE_NON_ATOMIC option 
This allows heimdal to build without gcc, by not using atomic
operations. We don't need heimdal to be atomic in Samba.
 2010-11-17 23:55:39 +11:00
Andrew Tridgell
6041938908 s4-test: updates to test-howto.py 
- handle clock skew using "net time" on windows after we open the
  telnet connection
- allow checking for result lists in order
- replicate all partitions after vampiring so we don't need
  to wait for periodic replication
- use a krb5 ccache in the prefix for kinit based tests

The complete test suite now passes on my system, taking just over 13
minutes to complete
 2010-11-17 23:55:39 +11:00
Andrew Tridgell
0cf7189d4a s4-heimdal: implement KERB_AP_ERR_TYPE_SKEW_RECOVERY 
this e_data field in a kerberos error packet tells windows to do clock
skew recovery.

See [MS-KILE] 2.2.1 KERB-ERROR-DATA

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
 2010-11-17 23:55:39 +11:00
Andrew Tridgell
5f655e99a1 s4-gensec: zero the gssapi_state 
this fixes a use of the target_principal before initialisation

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
 2010-11-17 23:55:38 +11:00
Andrew Tridgell
1887ce87e4 s4-provision: use the command line lp in provision 
this ensures that provision options are stored in the generated
smb.conf
 2010-11-17 23:55:38 +11:00
Andrew Tridgell
292003343e s4-provision: add log messages about IP lookup 
the IPv6 lookup can be very slow if a DNS server in the search list is
unavailable. It's good to let the user know what its doing.
 2010-11-17 23:55:38 +11:00
Andrew Tridgell
60449d561d s4-dns: catch more expections in samba_dnsupdate 2010-11-17 23:55:38 +11:00
Matthias Dieter Wallnöfer
3e055cc830 ldb:ldb_dn.c - ldb_dn_explode - free also the extended components on error cases 
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Wed Nov 17 08:45:53 UTC 2010 on sn-devel-104
 2010-11-17 08:45:53 +00:00
Andrew Tridgell
27df2e544a s4-test: added testing of w2k3 DC join to test-howto.py 
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Wed Nov 17 01:16:19 UTC 2010 on sn-devel-104
 2010-11-17 01:16:19 +00:00
Andrew Tridgell
5524822a72 s4-join: fixed join to w2k3 
w2k3 does need msDS-Behavior-Version
 2010-11-17 11:30:07 +11:00
Andrew Tridgell
a82bc073e2 s4-join: show a reasonable error on DsAddEntry() failing 
DsAddEntry() gives errors in a reply container
 2010-11-17 11:30:07 +11:00
Andrew Tridgell
3f9c97dbc5 s4-join: enable NDR printing at debug levels >= 5 
this is handy for debugging joins
 2010-11-17 11:30:07 +11:00
Andrew Tridgell
73fae2b007 s4-loadparm: set debuglevel and logfile in tables 
this allows the debug level and logfile to be queried from python
using lp.get(). Otheriwse they are set only in the globals, and not in
the tables.
 2010-11-17 11:30:07 +11:00
Andrew Tridgell
f401930546 s4-loadparm: fixed a memory leak in handle_realm() 
we need to free the lowercase and uppercase varients
 2010-11-17 11:30:07 +11:00
Andrew Bartlett
deed2a935b s4-kdc Rework supported encryption type logic to match Microsoft 
Thanks to Hongwei Sun for the clear description of the algorithim
involved.  Importantly, it isn't possible to remove encryption types
from the list, only to add them over the defaults (DES and
arcfour-hmac-md5, and additional AES for DCs and RODCs).

This changes the behaviour for entries with
msDS-supportedEncryptionTypes: 0, which Angelos Oikonomopoulos
reported finding set by ADUC when attempting to store cleartext
passwords.

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Tue Nov 16 21:24:43 UTC 2010 on sn-devel-104
 2010-11-16 21:24:43 +00:00
Matthias Dieter Wallnöfer
d451ac1f3a s4:acl LDB module - use also here "dsdb_find_nc_root" to implement the NC-specific checks 
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Tue Nov 16 15:12:13 UTC 2010 on sn-devel-104
 2010-11-16 15:12:13 +00:00
Matthias Dieter Wallnöfer
856e309b14 s4:descriptor LDB module - also "get_default_ag" should make use of "dsdb_find_nc_root" 2010-11-16 15:25:13 +01:00
Matthias Dieter Wallnöfer
cebad70ee6 s4:descriptor LDB module - handle the NCs in a more generic way by using "dsdb_find_nc_root" 2010-11-16 15:25:13 +01:00
Matthias Dieter Wallnöfer
7cc2f98038 s4:"dsdb_find_nc_root" - let it work also when the "namingContexts" attribute isn't available yet 
This is needed on provisioning when the modules aren't set up yet.
 2010-11-16 15:25:13 +01:00
Matthias Dieter Wallnöfer
d2453b52d8 s4:descriptor LDB module - make more clear that special control entries never should be handled by modules 2010-11-16 13:29:49 +01:00
Matthias Dieter Wallnöfer
f863f434a0 s4:objectclass LDB module - the "olddn" is the special DN for rename requests 2010-11-16 13:29:49 +01:00
Kamen Mazdrashki
cce662763e s4-schema_load: Don't clean in_transaction flag until transaction is really finished 
Autobuild-User: Kamen Mazdrashki <kamenim@samba.org>
Autobuild-Date: Tue Nov 16 11:00:35 UTC 2010 on sn-devel-104
 2010-11-16 11:00:35 +00:00
Matthias Dieter Wallnöfer
0f2904247b s4:subtree_rename LDB module - make use of "dsdb_find_nc_root" 
This is exactly what's needed there.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Tue Nov 16 08:42:07 UTC 2010 on sn-devel-104
 2010-11-16 08:42:07 +00:00
Matthias Dieter Wallnöfer
71a5ea93ff s4:objectclass LDB module - free "nc_root" after name context comparisons 2010-11-16 07:59:15 +00:00
Andrew Tridgell
f99403e45a s4-test: fixes for test-howto.py 
this fixes some timing issues, plus ensures we test both with and
without kerberos

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Tue Nov 16 07:58:55 UTC 2010 on sn-devel-104
 2010-11-16 07:58:55 +00:00
Andrew Tridgell
896d1bdca2 s4-spoolss: fixed warning in call to torture_warning() 2010-11-16 07:16:04 +00:00
Andrew Tridgell
2421c0dcfb s4-eventlog: fixed dcerpc handle return 2010-11-16 07:16:04 +00:00
Andrew Bartlett
ebd8e66ed0 samba-tool Add test for --store-plaintext 
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Tue Nov 16 06:29:04 UTC 2010 on sn-devel-104
 2010-11-16 06:29:04 +00:00
Brad Hards
c8c52be455 Update dcerpc_server.pc library name to match reality. 2010-11-16 16:42:50 +11:00
Andrew Bartlett
2e44d0d329 samba-tool pwsettings Allow setting 'store cleartext' 
This allows the 'store cleartext' password policy flag to be (un)set.

Andrew Bartlett
 2010-11-16 16:32:55 +11:00
Andrew Bartlett
95d33f2f24 s4-ldif_handlers Add handler for printing supplementalCredentials 2010-11-16 16:32:27 +11:00
Andrew Bartlett
4908237403 heimdal Build ticket with the canonical server name 
We need to use the name that the HDB entry returned, otherwise we
will not canonicalise the reply as requested.

Andrew Bartlett
 2010-11-16 15:30:13 +11:00
Andrew Bartlett
d76f11a8bd s4-kdc Fix the realm handling again, this time pay attention to the flags 
The KDC sets different flags for the AS-REQ (this is client-depenent)
and the TGS-REQ to determine if the realm should be forced to the
canonical value.  If we do this always, or do this never, we get into
trouble, so it's much better to honour the flags we are given.

Andrew Bartlett
 2010-11-16 15:30:13 +11:00
Andrew Bartlett
5c72c6b760 s4-kdc use 'flags' to only create the 'admin data' elements when requested 
This avoids setting these values when the caller simply does not care

Andrew Bartlett
 2010-11-16 15:30:12 +11:00
Andrew Bartlett
935d7a6f72 s4-kdc Add 'flags' parameter to db fetch calls 
This will allow these calls to honour the flags passed in from the KDC

Andrew Bartlett
 2010-11-16 15:30:12 +11:00
Andrew Tridgell
fe5c48cbed waf: added --git-local-changes configure option 
if you use --git-local-changes then the version number that waf
extracts from git will have a '+' on the end if you have local
changes, as determined by running 'git diff'.

This used to be the default, but unfortunately it is far too slow on
some systems. On a NFS build system I was using the first line of
configure took about 2 minutes.

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Tue Nov 16 01:51:54 UTC 2010 on sn-devel-104
 2010-11-16 01:51:54 +00:00
Andrew Bartlett
96bdcf7ea9 s4-kdc Don't regenerate the PAC for cross-realm tickets 
We should never get a cross-realm ticket that was not issued by a full
DC, but if someone claims to have such a thing, reject it rather than
segfaulting on the NULL client pointer.

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Mon Nov 15 23:59:34 UTC 2010 on sn-devel-104
 2010-11-15 23:59:34 +00:00
Andrew Bartlett
a32ade647d s4-kdc Don't always regenerate the PAC 
The PAC was being regenerated on all normal DCs, because they don't
have a msDS-SecondaryKrbTgtNumber attribute.  Instead we need to check
if it's set and not equal to our RODC number, allowing RODCs to trust
the full DCs and itself, but not other RODCs.

Andrew Bartlett
 2010-11-15 23:17:05 +00:00
Andrew Bartlett
4041640bd6 heimdal Fetch the client before the PAC check, but after obtaining krbtgt_out 
By checking the client principal here, we compare the realm based on
the normalised realm, but do so early enough to validate the PAC (and
regenerate it if required).

Andrew Bartlett
 2010-11-15 23:17:05 +00:00
Andrew Bartlett
2b7730d291 s4-gensec Indicate if GENSEC is in client or server mode in the debug 2010-11-15 23:17:05 +00:00
Matthias Dieter Wallnöfer
329f76c410 s4:heimdal - fix the return code of a non-void function 
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Mon Nov 15 23:14:57 UTC 2010 on sn-devel-104
 2010-11-15 23:14:57 +00:00
Matthias Dieter Wallnöfer
59e22ba9c0 s4:torture/basic/base.c - fix output warnings regarding "time_t" 
"time_t" is generally "long int".
 2010-11-15 22:31:04 +00:00
Matthias Dieter Wallnöfer
061766e732 s4:objectclass LDB module - improve the default name context checking on modifications 
Pointed out by abartlet
 2010-11-15 22:31:04 +00:00
Andrew Tridgell
6ff009cacc s4-join: not all versions of w2003 have msDS-SupportedEncryptionTypes 
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Mon Nov 15 22:28:16 UTC 2010 on sn-devel-104
 2010-11-15 22:28:16 +00:00
Andrew Tridgell
10a1606baf s4-devel: a script to test the Samba4 HOWTO 
This provides a script that allows testing of most of the steps of the
Samba4 HOWTO. The big difference between this and 'make test' is that
it test against windows, using pexpect to control windows boxes via
telnet.

The info about VMs and other parameters are in separate conf
files. I've included a sample config file that I use on my laptop.
 2010-11-15 21:45:20 +00:00