1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-28 17:47:29 +03:00

968 Commits

Author SHA1 Message Date
Andrew Bartlett
aeaa440932 r21727: Walk some more of the error branches in the ChangePasswordUser server.
Andrew
(This used to be commit c1ee06703ac09708a8ff10a641b593362f1bd309)
2007-10-10 14:49:18 -05:00
Andrew Bartlett
3e1dd63927 r21719: Try to cover more of the server-side password processing.
Don't just exit the test with 'return True', actually process the result.

Turn off password complexity checking for the password length test.

Andrew Bartlett
(This used to be commit 1a7635baa701c6268eebd84dd0dc187379c44e6e)
2007-10-10 14:49:17 -05:00
Andrew Bartlett
0a1fefe539 r21699: Because TALLOC_CTX is a void*, I didn't get a compiler warning about
this incorrect argument.

This also fixes the server-side valgrind issue, but we need to chase
down the real issue.

Andrew Bartlett
(This used to be commit a0c78a75acb9bc581dd8d2688aa91d7b59549c3e)
2007-10-10 14:49:15 -05:00
Andrew Bartlett
099a3a7f52 r21697: Try to cover the 'bad session key' codepaths too.
Andrew Bartlett
(This used to be commit 33cfe1ca221de9ef9dec264772fb299125c39447)
2007-10-10 14:49:14 -05:00
Andrew Bartlett
6bca66d7d1 r21696: Run the RPC-COUNTCALLS test to try and walk some of the NDR layer for
routines for which we don't have any tests.

Andrew Bartlett
(This used to be commit e5b9bdf03729a913f3c6cc7709abcbdf50899562)
2007-10-10 14:49:14 -05:00
Jelmer Vernooij
1d75e907e2 r21694: Some more testing updates.
(This used to be commit 9247626b1c5f1eec0cedd6be221aafc41d9a26ab)
2007-10-10 14:49:13 -05:00
Andrew Bartlett
0a28fbae1b r21693: Fix the RPC-SCANNER test. Share some code with the RPC-MGMT test to
make things easier to keep working.

Andrew Bartlett
(This used to be commit 16db4c1436725e41ea05628f20fc9396d7bd7eaa)
2007-10-10 14:49:13 -05:00
James Peach
fcaeedeff3 r21668: Add SMB_QFS_POSIX_WHOAMI to trans2.h so it's easy to find. Add
convenience API to create an anonymous credential. Don't clobber
cmdline_credentials in the UNIX-WHOAMI test.
(This used to be commit 73cea4e0c66f57057ed12b07bbb94b4e783ba6bf)
2007-10-10 14:49:07 -05:00
Stefan Metzmacher
b1a80dcec0 r21590: add RPC-HANDLES-MIXED-SHARED test, which shows that
assoc_groups are shared between idl-interfaces and connections.

But you can't close a samr policy handle on a lsa pipe.

add RPC-HANDLES-RANDOM-ASSOC test, which shows that
you can't bind with an invalid assoc_group_id

metze
(This used to be commit 26b0e03a776fbac4e93fef585dcfec5962f40387)
2007-10-10 14:49:01 -05:00
Stefan Metzmacher
9545dc2835 r21588: add a RPC-HANDLES-LSARPC-SHARED test, which demonstrates
policy handles can be shared between connections

metze
(This used to be commit 874cb393666b950b379d07e6af5bcf41f2bf4746)
2007-10-10 14:49:01 -05:00
Andrew Tridgell
bedc59ca5c r21570: added a RPC-HANDLES test that tries to show that rpc policy handles
are not shared between connections. It tests three types of policy
handles, on lsa, samr and drsuapi. You need to run on ncacn_ip_tcp
with seal for drsuapi.

Metze, can you have a look and see how this tallies with what you've
seen?
(This used to be commit c1f41ac045f6023da06c3dbd0a37f39edd8a62f8)
2007-10-10 14:48:57 -05:00
Andrew Tridgell
60fd088c48 r21535: - fixed a crash in the RAW-ACLS test. When a dcerpc_pipe is created
using the pattern in the clilsa code, it didn't fill in the p->binding
structure. This affects nearly all users of dcerpc_pipe_open_smb(), so
the simplest fix is to ensure that dcerpc_pipe_open_smb() initialises
the binding if its not already there.

- re-enable the RAW-ACLS test
(This used to be commit d8875c286d2be49c01703d8fd58bbc1842054bd9)
2007-10-10 14:48:54 -05:00
Andrew Bartlett
bf5cfb5f3d r21491: Verify that the DNS domain name is filled in on GUID searches in the
RPC-CRACKNAMES test.

Andrew Bartlett
(This used to be commit 7773f23e89340c459a0028a4c36b869d95ed8eb1)
2007-10-10 14:48:43 -05:00
Jelmer Vernooij
0515f728e6 r21433: Get rid of the COM support code - it's not used and unmaintained. We can
always bring it back if we need to. This code was getting in the way while
refactoring.

Add some tests for TDR.

Get rid of typedef in lib/registry/tdr_regf.idl and fix the
TDR code to be able to deal with it.
(This used to be commit 1ad0f99a439f0d52a735b391bf9900d50171aca5)
2007-10-10 14:48:33 -05:00
Jelmer Vernooij
b7a46675fb r21386: Run all NDR tests in the buildfarm, import some functions from Samba3's IDL.
(This used to be commit 15a4b81ba0b5eeb25126a0b1a7bea7d3bf921ab2)
2007-10-10 14:48:24 -05:00
Stefan Metzmacher
98fce3d3b5 r21337: add hack option to use DsGetNCChanges level 5 against w2k
metze
(This used to be commit 66c8499e5f2f139995be8cb5770d238f383059d6)
2007-10-10 14:48:15 -05:00
Stefan Metzmacher
93690e31c3 r21335: add dssync:save_pwd_blobs_dir=path/ option to store the password blobs
in files for inspection with ndrdump

metze
(This used to be commit 54748ef5860ee59b5f84855965c84aa8787fb4b6)
2007-10-10 14:48:15 -05:00
Stefan Metzmacher
9e2b78b96a r21272: in the history fields each hash is rid crypted on its own
metze
(This used to be commit 922cfacde4dcf27829040e12c7fae083bd5b44c2)
2007-10-10 14:44:57 -05:00
Stefan Metzmacher
e2821c4238 r21267: the first 4 bytes in each encrypted attribute is the crc32
checksum over the remaining bytes

metze
(This used to be commit c9fe6a867c7e23a60e0f9200b04c31e48ccc11a2)
2007-10-10 14:44:56 -05:00
Stefan Metzmacher
714052a68c r21261: add support for getting to the plain nthash (and I assume others too)
I wonder what the first 4 bytes are, but the last 16 bytes of the 20 bytes
are the rid crypted hash. The lmhash and the history fields are not verified
yet. But I get the administrators nthash in plain.

metze
(This used to be commit 7726d4a0272b29a4eade26c9ae3d929df50897da)
2007-10-10 14:44:56 -05:00
Stefan Metzmacher
2d3eea4531 r21245: combination "c[3] s[1] e[1] d[0]..." was successful!!!!!!!!!!!!!!!!!!!!!!!!!!
we now support the session depended password attribute encryption
used in DsGetNCChanges()

the static encryption (something like sam_rid_crypt() is assumed for some attributes
and the format of the attribute values isn't known yet, but some contain
some unicode strings...

metze
(This used to be commit daee739ebba38e54fbdbd7e53d16fd30bc0dd54e)
2007-10-10 14:44:52 -05:00
Stefan Metzmacher
f7959890d4 r21244: fix typo...
I was wondering why I got allways 4 times the same decrypted buffer...

metze
(This used to be commit ba168479d5c5710de4252d9b8970ab41b7979411)
2007-10-10 14:44:52 -05:00
Stefan Metzmacher
2bf68b4964 r21243: create the infrastructure to test a lot of crypto combinations
to solve the drsuapi password encryption automaticly.

metze
(This used to be commit 7b331b95bf43384e571ecc88ac827f46acd8c20c)
2007-10-10 14:44:52 -05:00
Stefan Metzmacher
cf123e67d5 r21242: prepare trying to decrypt the encrypted attributes
metze
(This used to be commit 65a55c8fdecbc212ba2fc2a01c580f30dcc7b54a)
2007-10-10 14:44:51 -05:00
Stefan Metzmacher
08de2da4ea r21236: store and orint the dcerpc session key, gensec session key and user nthash
values for each drsuapi connection in RPC-DSSYNC

metze
(This used to be commit df74c4a88108bd4387d9be4f64619c46c23493e6)
2007-10-10 14:44:51 -05:00
Stefan Metzmacher
03640456e6 r21235: fix crash bug
metze
(This used to be commit 29c44957a0ea16af3e5e3717d2cb0c9180d394c2)
2007-10-10 14:44:50 -05:00
Andrew Tridgell
b115da2230 r21208: fix a crash bug caused by r21205
please test patches, even if they look trivial!
(This used to be commit 8134a628f06f0df2ee94612854e0fb3e2efc2eb8)
2007-10-10 14:44:45 -05:00
Jelmer Vernooij
6d7039026c r21205: Fix warning.
Trivial patch from "Lunar Child <luch@etersoft.ru>"
(This used to be commit 1b75a9ff2d7f91f13fbdfd136b40eca14867bf6f)
2007-10-10 14:44:44 -05:00
Volker Lendecke
6e25473ad8 r21178: Adapt RPC-SAMBA3-SHARESEC to new smbd behavior
(This used to be commit 38b688fd15a9103e5ef5c86e01b594169d6b6b9c)
2007-10-10 14:44:42 -05:00
Andrew Bartlett
0c45d415ff r21027: Print the name we fail on. I need to fix Samba4 to pass this.
Andrew Bartlett
(This used to be commit 5e907ae795b49d6c120ddedee3ba6d11c06bfab4)
2007-10-10 14:44:21 -05:00
Jelmer Vernooij
9119276bbc r20831: Update RPC-SCANNER as well after IDL changes.
(This used to be commit 1c562d9f8311c4038fcff067ac6bb8364b606573)
2007-10-10 14:43:38 -05:00
Jelmer Vernooij
615895332a r20830: merge mgmt work
(This used to be commit 3cc299dbbe278936281f8e7071e6de8ec1bb219c)
2007-10-10 14:43:37 -05:00
Jelmer Vernooij
cd15a223cc r20784: Add ref pointer
(This used to be commit 2ba225ee12180d40a957e4e9a824a544c803a265)
2007-10-10 14:40:54 -05:00
Jelmer Vernooij
e8d2437cd5 r20676: Add ref pointer to fix warning.
(This used to be commit 1afcf850679b6752935455a8f9198679649922b8)
2007-10-10 14:40:19 -05:00
Stefan Metzmacher
57f5bf78fa r20514: implement idl for DsGetNT4ChangeLog() which transferres the meta data
for NT4 DC's in mixed mode domains.

This call is triggered by tranferring the PDC FSMO Role to another DC

the real meta data is encoded in the user buffer which is just a DATA_BLOB in idl

metze
(This used to be commit d883815c8d64429e4dac26a93a15e67d31dc263e)
2007-10-10 14:36:04 -05:00
Stefan Metzmacher
bc32b30011 r20510: fix spelling
metze
(This used to be commit 58066e2252001b7689705d296a16438733cfdfc4)
2007-10-10 14:36:03 -05:00
Stefan Metzmacher
536ca21c55 r20504: we handle the attribute values always as DATA_BLOB's and
don't need the union with the attribute id as switch anymore

metze
(This used to be commit d47c81923d0731edd314215c6f0b2eb3d1ee252d)
2007-10-10 14:36:01 -05:00
Andrew Bartlett
11196d0907 r20396: Missed one user of the renamed elements.
Andrew Bartlett
(This used to be commit a7c83eb7b8e000c51790a9eae67c59c04a4a877c)
2007-10-10 14:30:22 -05:00
Andrew Bartlett
105d18eb30 r20395: Decode more unknowns in the IDL. These are language and codepage IDs!
Try to pass more of the CrackNames test.  Make the test quieter.

Andrew Bartlett
(This used to be commit a6bbfebf52f53f99b0edf52d3c23b72785b97469)
2007-10-10 14:30:22 -05:00
Andrew Bartlett
d0bc792dba r20369: Remember to break if we find a match.
Andrew Bartlett
(This used to be commit 4bd8dbcf41f04be28e2f5d6e15a22f08ba80b948)
2007-10-10 14:30:18 -05:00
Stefan Metzmacher
c70a3f6706 r20359: level -1 of DsGetDomainControllerInfo gives back a list
of all active connections to the Directory Service Agent (DSA)
(This can be LDAP or DRSUAPI connections)

abartlet: you had just luck by using flag(BIG_ENDIAN) as BIG_ENDIAN is
          defined in <endian.h>, it should be flag(NDR_BIG_ENDIAN)...

metze
(This used to be commit c7e639763de1f8ddccfb954227feeaddb7386edc)
2007-10-10 14:30:16 -05:00
Andrew Bartlett
ea4c64388b r20353: Restructure the DRSUAPI DsGetDomainControllerInfo test, because as
usual things are more complex than they appear.

Also remove the incorrect server-side implementation, which blindly
assumed some sense of consistancy across the API switch levels.

Andrew Bartlett
(This used to be commit 79941adbff843f5027dacd31b972deca4a1557ec)
2007-10-10 14:30:15 -05:00
Andrew Bartlett
400a56d6dd r20315: Implement the server side of DsGetDomainControllerInfo. This is a
supprisingly complex call...

It turns out that the in/out parameter 'level' is not in/out, but set
seperatly by the server-side code from r->req.req1.level.

This commit also breaks out some common code from samldb into samdb.

Andrew Bartlett
(This used to be commit 2eb9e6445c64840399171f4f56b1e43786dbcfa7)
2007-10-10 14:29:38 -05:00
Andrew Bartlett
03b05b9400 r20297: Finally got to the bottom of why we were failing the RPC-CRACKNAMES
test against my win2k3 domain.  I have a child domain, and as such the
BUILTIN domain SID appears multiple times in the tree, and is
therefore not unique.

Andrew Bartlett
(This used to be commit 41e42843be783dd88785ba8d3a9bccacc68053a8)
2007-10-10 14:29:34 -05:00
Andrew Bartlett
c51289fc9b r20295: Add a couple more tests to the CrackNames test.
(This used to be commit 115ed29fd8fcfd0ad3ebbabbe01fbc6259ce84bc)
2007-10-10 14:29:34 -05:00
Stefan Metzmacher
88ef467282 r20251: I found out that the oid-prefix to uint32-id-prefix mapping is transferred
in replication replies, but I don't know the exact encoding.

for example the oids are transferred as:

2.5.4			=> uint8_t v[] = { 0x55, 0x04 };
2.5.5			=> uint8_t v[] = { 0x55, 0x05 };
2.5.6			=> uint8_t v[] = { 0x55, 0x06 };
2.5.18			=> uint8_t v[] = { 0x55, 0x12 };
2.5.20			=> uint8_t v[] = { 0x55, 0x14 };
2.5.21			=> uint8_t v[] = { 0x55, 0x15 };
1.2.840.113556.1.2	=> uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x14, 0x01, 0x02 };
1.2.840.113556.1.3	=> uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x14, 0x01, 0x03 };
1.2.840.113556.1.4	=> uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x14, 0x01, 0x04 };
1.2.840.113556.1.5	=> uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x14, 0x01, 0x05 };
1.2.840.113556.1.5.7000	=> uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x14, 0x01, 0x05, 0xb6, 0x58 };
1.2.840.113549.1.9	=> uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x09 };
2.16.840.1.113730.3	=> uint8_t v[] = { 0x60, 0x86, 0x48, 0x01, 0x86, 0xf8, 0x42, 0x03 };
2.16.840.1.113730.3.1	=> uint8_t v[] = { 0x60, 0x86, 0x48, 0x01, 0x86, 0xf8, 0x42, 0x03, 0x01 };
2.16.840.1.113730.3.2	=> uint8_t v[] = { 0x60, 0x86, 0x48, 0x01, 0x86, 0xf8, 0x42, 0x03, 0x02 };
0.9.2342.19200300.100.1	=> uint8_t v[] = { 0x09, 0x92, 0x26, 0x89, 0x93, 0xf2, 0x2c, 0x64, 0x01 };
0.9.2342.19200300.100.4	=> uint8_t v[] = { 0x09, 0x92, 0x26, 0x89, 0x93, 0xf2, 0x2c, 0x64, 0x04 };
1.3.6.1.4.1.250.1	=> uint8_t v[] = { 0x2b, 0x06, 0x01, 0x04, 0x01, 0x81, 0x7a, 0x01 };
1.3.6.1.4.1.1466.101.119=> uint8_t v[] = { 0x2b, 0x06, 0x01, 0x04, 0x01, 0x8b, 0x3a, 0x65, 0x77 };

if someone knows how the encoding works, please tell me:-)
I assume some ASN.1 encoding...

metze
(This used to be commit aa720a15319392fee5c532959192d0df5bf4c718)
2007-10-10 14:29:27 -05:00
Andrew Bartlett
d471e52d23 r20149: Remove the smb.conf distinction between PDC and BDC. Now the correct
way to setup a Samba4 DC is to set 'server role = domain controller'.

We use the fSMORoleOwner attribute in the base DN to determine the PDC.

This patch is quite large, as I have corrected a number of places that
assumed taht we are always the PDC, or that used the smb.conf
lp_server_role() to determine that.

Also included is a warning fix in the SAMR code, where the IDL has
seperated a couple of types for group display enumeration.

We also now use the ldb database to determine if we should run the
global catalog service.

In the near future, I will complete the DRSUAPI
DsGetDomainControllerInfo server-side on the same basis.

Andrew Bartlett
(This used to be commit 67d8365e831adf3eaecd8b34dcc481fc82565893)
2007-10-10 14:29:15 -05:00
Stefan Metzmacher
5cc44027dc r20145: fix whitespaces
metze
(This used to be commit d2d9842914bb049189f9349ff96b32c088cd02a8)
2007-10-10 14:29:15 -05:00
Stefan Metzmacher
f1aaa16cbc r20115: from Julien Kerihuel <j.kerihuel@openchange.org>, thanks!:
Here is a patch that adds a torture:dc_binding parametric option to
   torture_create_testuser in testjoin.c. This patch is used in OpenChange
   torture tests when the AD is different from the Exchange Server. This generic
   option could also be used for later 'member server' tests in Samba4.

metze
(This used to be commit 9ddabfc60e1a4f5e471991253141ce458c9a683d)
2007-10-10 14:29:09 -05:00
Andrew Bartlett
334f78d206 r20113: Update the DRSUAPI CrackNames test to explore a few more cases, and in
particular to verify more expected results.

Also return more details from the join process.  Now we also return
the machine account's GUID.

Andrew Bartlett
(This used to be commit 5b32f102af1fc7acb56bf7eaa40068d60a1ee396)
2007-10-10 14:29:08 -05:00