Kai Blin
a4f21d5dc8
s3 selftest: Allow the enumeration of users and groups
...
This fixes the WINBINDD_GETPWENT test.
2010-01-14 15:18:34 +01:00
Kai Blin
a6015a858d
s3 selftest: Fix the WINBINDD_GETDCNAMEe test.
...
The WINBINDD_GETDCNAME test expected an NSS_STATUS_SUCCESS return from all
calls. However, this does not apply for BUILTIN and the DC's own domain.
Make the test work again by skipping those two.
2010-01-14 15:18:34 +01:00
Matthias Dieter Wallnöfer
b1d2bb3e51
s4:provision_users.ldif - Add a comment that some objects under "Users" are now located elsewhere
...
This is needed due to the new RID/SID distribution system
2010-01-14 10:58:08 +01:00
Matthias Dieter Wallnöfer
face5d3030
s4:provision_users.ldif - Add objects for IIS
...
Some WSPP locations point out that beginning with Windows Server 2008 they're
also per default present.
Compared against Windows Server 2008
2010-01-14 10:58:08 +01:00
Matthias Dieter Wallnöfer
9ac39b659f
s4:provision_users.ldif - Add additional BUILTIN objects
...
Compared against Windows Server 2008
2010-01-14 10:58:08 +01:00
Matthias Dieter Wallnöfer
2a05dd6fcc
s4:provision_users.ldif - add the restant part of the objects needing for RODC support
...
RODC = Read Only Domain Controllers
Compared against Windows Server 2008
2010-01-14 10:58:07 +01:00
Matthias Dieter Wallnöfer
71357053bb
s4:provision_users.ldif - Fix up errors on existing entries
...
Compared against Windows Server 2008
2010-01-14 10:58:07 +01:00
Matthias Dieter Wallnöfer
81053e9124
s4:provision_users.ldif - Simple reordering
...
Sorted according the SID - easier for later enhancements.
2010-01-14 10:58:07 +01:00
Matthias Dieter Wallnöfer
a0d7f3e344
s4:provision_users.ldif - Remove system objects from the wrong place
...
Objects like the "Cryptographic Operators", "Event Log Readers" don't belong
here but into the builtin domain.
2010-01-14 10:58:06 +01:00
Matthias Dieter Wallnöfer
40bc48dfa9
s4:SAMR RPC - Fix the criteria for group searches
...
This should match the MS-SAMR documentation (section 3.1.5.5.1.1)
2010-01-14 10:58:06 +01:00
Andrew Tridgell
74a5719614
s4-torture: switch smbtorture to the generic DRS options
2010-01-14 15:37:59 +11:00
Andrew Tridgell
2008d24e91
s4-drs: switch the DRS server to the generic DRS options flags
2010-01-14 15:37:59 +11:00
Andrew Tridgell
a5d6117065
s4-torture: switch to generic DRS options flags
2010-01-14 15:37:59 +11:00
Andrew Tridgell
88ec10b757
s4-drepl: switch drepl over to using the generic DRS options flags
...
WSPP uses a single set of flags for all these DRS operations.
2010-01-14 15:37:59 +11:00
Fernando J V da Silva
6f806b7079
s4-drs: Uses dsdb_load_partition_usn() with urgent_uSN in s4 code
...
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-01-14 15:37:59 +11:00
Fernando J V da Silva
e30d009965
s4-drs: Store uSNUrgent for Urgent Replication
...
When a object or attribute is created/updated/deleted, according
to [MS-ADTS] 3.1.1.5.1.6, it stores the uSNUrgent on @REPLCHANGED
for the partitions that it belongs.
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-01-14 15:37:58 +11:00
Stefan Metzmacher
204e4b26ae
s4:dsdb: use validate_update module
...
metze
2010-01-13 16:06:41 +01:00
Stefan Metzmacher
1f2efef214
s4:dsdb/schema: add dsdb_syntax_OID_validate_ldb()
...
This is a very heavy weight way of checking this syntax,
but it's very complex and using the existing function
should be ok for now. We can optimize it later.
metze
2010-01-13 16:06:41 +01:00
Stefan Metzmacher
f0fed6cadd
s4:dsdb/schema: add dsdb_syntax_DN_STRING_validate_ldb()
...
metze
2010-01-13 16:06:40 +01:00
Stefan Metzmacher
83baa44c67
s4:dsdb/schema: add dsdb_syntax_DN_BINARY_validate_ldb()
...
metze
2010-01-13 16:06:40 +01:00
Stefan Metzmacher
39dda462cd
s4:dsdb/schema: add dsdb_syntax_DN_validate_ldb()
...
metze
2010-01-13 16:06:39 +01:00
Stefan Metzmacher
4fa2bf8184
s4:dsdb/schema: add dsdb_syntax_PRESENTATION_ADDRESS_validate_ldb()
...
metze
2010-01-13 16:06:39 +01:00
Stefan Metzmacher
ba8a930d0e
s4:dsdb/schema: add dsdb_syntax_UNICODE_validate_ldb()
...
metze
2010-01-13 16:06:39 +01:00
Stefan Metzmacher
674e8350b6
s4:dsdb/schema: add dsdb_syntax_DATA_BLOB_validate_ldb()
...
metze
2010-01-13 16:06:38 +01:00
Stefan Metzmacher
e2b9454d36
s4:dsdb/schema: add dsdb_syntax_NTTIME_validate_ldb()
...
metze
2010-01-13 16:06:38 +01:00
Stefan Metzmacher
eb261a9fda
s4:dsdb/schema: add dsdb_syntax_NTTIME_UTC_validate_ldb()
...
metze
2010-01-13 16:06:37 +01:00
Stefan Metzmacher
5f13a16295
s4:dsdb/schema: add dsdb_syntax_INT64_validate_ldb()
...
metze
2010-01-13 16:03:55 +01:00
Stefan Metzmacher
ece3defd15
s4:dsdb/schema: add dsdb_syntax_INT32_validate_ldb()
...
metze
2010-01-13 16:03:54 +01:00
Stefan Metzmacher
a0f2a49b8a
s4:dsdb/schema: add dsdb_syntax_BOOL_validate_ldb()
...
metze
2010-01-13 16:03:54 +01:00
Stefan Metzmacher
bf1f067b0c
s4:dsdb: add validate_update module
...
metze
2010-01-13 16:03:54 +01:00
Stefan Metzmacher
b20707c11a
s4:dsdb/schema: add inftrastructure for dsdb_validate_ldb()
...
metze
2010-01-13 16:03:54 +01:00
Stefan Metzmacher
61589085c4
s4:dsdb/schema: add dsdb_syntax_DN_STRING_* wrappers
...
metze
2010-01-13 16:03:53 +01:00
Stefan Metzmacher
24ecd19b30
s4:dsdb/resolve_oids: also resolve oid in search attribute list
...
metze
2010-01-13 16:03:53 +01:00
Stefan Metzmacher
f715414afa
s4:dsdb/schema_load: add a TODO about schema reloading
...
metze
2010-01-13 16:03:53 +01:00
Stefan Metzmacher
7d41afece7
s4:ldb/tests: do a "schemaUpdateNow" after creating a new attribute in ldap_schema.py
...
It seems that windows doesn't need that.
And we should think about a check for reloading the schema
at the start of each "write" operation.
metze
2010-01-13 16:03:52 +01:00
Stefan Metzmacher
92b87eb474
s4:dsdb/repl: reorder dreplsrv_op_notify* functions
...
This make the whole async dreplsrv_op_notify_send/recv()
readable.
metze
2010-01-13 16:00:20 +01:00
Stefan Metzmacher
e886b6e240
s4:dsdb/repl: change dreplsrv_op_notify_send/recv() to tevent_req
...
metze
2010-01-13 14:52:00 +01:00
Stefan Metzmacher
232197e9ab
s4:dsdb/common: fix major bug in lsa_BinaryString to ldb_val conversation.
...
In lsa_BinaryString length and size are byte counts!
TODO: we may need to do byte order conversion in this functions too...
metze
2010-01-13 14:52:00 +01:00
Stefan Metzmacher
ca9bc96b96
s4:ldb_msg: first try to decode integers as signed and then fallback to unsigned
...
LDAP only knowns about signed integers, so let
ldb_msg_find_attr_as_uint() and ldb_msg_find_attr_as_uint64() cope
with it.
metze
2010-01-13 14:52:00 +01:00
Stefan Metzmacher
5d08309204
s4:dsdb/common: let samdb_msg_add_uint() call samdb_msg_add_int()
...
This is important as LDAP servers always play with int32 values
and we have to encode 0x80000000 as "-2147483648" instead of "2147483648".
metze
2010-01-13 14:51:59 +01:00
Stefan Metzmacher
2d7ad938d0
s4:dsdb/common: let samdb_msg_add_uint64() call samdb_msg_add_int64()
...
This is important as LDAP servers always play with int64 values
and we have to encode 0x8000000000000000LL as "-9223372036854775808"
instead of "9223372036854775808".
metze
2010-01-13 14:51:59 +01:00
Stefan Metzmacher
8d4b913ce2
s4:ldb: be more strict in parsing ldb time strings
...
metze
2010-01-13 14:51:59 +01:00
Andreas Schneider
129c15c083
s4-ntp_signd: Migrate to tsocket.
...
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-01-13 14:51:58 +01:00
Nadezhda Ivanova
a4eaa11134
Fixed a problem with incorrect default SD owner/group.
2010-01-13 15:16:38 +02:00
Zahari Zahariev
5d1aa4c5b7
Comparison tool for LDAP servers (using Ldb)
...
This tool is integrated with Samba4 Ldb. It provides a useful output
where you can find easy differences in objects or attributes within
naming context (Domain, Configuration or Schema).
Added functionality for two sets of credentials.
2010-01-13 12:06:17 +02:00
Simo Sorce
3d184399a5
Strip trailing spaces
2010-01-12 13:50:24 -05:00
Günther Deschner
3b82254903
s4-selftest: RPC-SAMR-PASSWORDS-BADPWDCOUNT fails against s4.
...
Seems like account lockout is not implemented at all yet.
Guenther
2010-01-12 12:34:55 +01:00
Günther Deschner
13dad38930
s4-smbtorture: fix GetAliasMembership test in RPC-SAMR.
...
Guenther
2010-01-12 12:12:05 +01:00
Günther Deschner
a744dbcf2b
s4-smbtorture: add RPC-SAMR-PASSWORDS-BADPWDCOUNT torture test.
...
This test checks the behavior (since w2k3 sp1) of the badPwdCount samr attribute
in relation to password history and successfull and unsucessful netlogon
samlogons.
Michael, please check. This should help verifiying Bug #4347 .
Guenther
2010-01-12 12:09:47 +01:00
Günther Deschner
c9e84ad397
s4-smbtorture: allow test_SamLogon to test interactive samlogon in RPC-SAMR family of tests.
...
Guenther
2010-01-12 12:09:25 +01:00