1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-23 17:34:34 +03:00
Commit Graph

7106 Commits

Author SHA1 Message Date
Andrew Tridgell
218d306ece r11498: added an optional extra argument to split to limit the number of
pieces a string is split into. This allows for a fix in the variable
substitution used in provisioning
(This used to be commit be06785d48)
2007-10-10 13:45:45 -05:00
Andrew Bartlett
794386e5c4 r11497: Don't name parameters 'floor'. Rename fl and floor to epm_floor for
consistancy.

Andrew Bartlett
(This used to be commit 8787eb982f)
2007-10-10 13:45:45 -05:00
Andrew Tridgell
4764eb7a93 r11496: add a minimal ads-compatible schema into our sam.ldb setup. This is
needed for mmc management of Samba4.
(This used to be commit cbbce4fe40)
2007-10-10 13:45:45 -05:00
Stefan Metzmacher
4f78115d6d r11489: add the one replication cycle test to NBT-WINSREPLICATION-QUICK
metze
(This used to be commit fc53eab2f1)
2007-10-10 13:45:44 -05:00
Stefan Metzmacher
0a4de40a0b r11488: handle the stupid name release demand a windows there send...
metze
(This used to be commit 1b62959a3d)
2007-10-10 13:45:44 -05:00
Stefan Metzmacher
6dafef0301 r11487: thanks to make test I noticed a dead lock bug, in the last change,
this only happens with socket_wrapper as socket_connect() returns NT_STATUS_OK
instead of NT_STATUS_MORE_PROCESSING_REQUIRED, and we missed to replace the
fde event handler...

metze
(This used to be commit f04001f280)
2007-10-10 13:45:44 -05:00
Stefan Metzmacher
536e68dbee r11485: prevent us from calling the request handler recursiv when
the handler calls talloc_free(wrepl_socket)

metze
(This used to be commit bf0b96f057)
2007-10-10 13:45:43 -05:00
Stefan Metzmacher
b69e508381 r11484: test some multi homed record merging
metze
(This used to be commit 630f571934)
2007-10-10 13:45:43 -05:00
Jelmer Vernooij
ae57d5cd84 r11481: Disable pre-linking on VMS
(This used to be commit 2b3ad67b5d)
2007-10-10 13:45:43 -05:00
Stefan Metzmacher
36729384f3 r11480: demonstrate the only the positive name query response cares,
not the addresses that are returned in it

metze
(This used to be commit 82e19d6808)
2007-10-10 13:45:43 -05:00
Stefan Metzmacher
045e8ca574 r11479: fix compiler warning
metze
(This used to be commit 5f45d07020)
2007-10-10 13:45:42 -05:00
Stefan Metzmacher
580cfbb23a r11478: add owned,active,multi homed vs. * section
metze
(This used to be commit 0231926e0a)
2007-10-10 13:45:42 -05:00
Andrew Bartlett
1ab27b7fdf r11477: This seems really nasty, but as I understand it an attacker cannot
change this checksum, as it is inside the encrypted packets.

Where the client (such as Samba3) fakes up GSSAPI, allow it to
continue.  We can't rid the world of all Samba3 and similar clients...

Andrew Bartlett
(This used to be commit e60cdb63fb)
2007-10-10 13:45:42 -05:00
Andrew Tridgell
d59807eba4 r11476: finally fixed the intermittent registry server bug! This has been
cropping up occasionally for ages. The problem was the generic reg
code setting up a backend_data value, which it has no business doing
(backend_data is for backends ...)
(This used to be commit 9d6d03fd1d)
2007-10-10 13:45:42 -05:00
Andrew Tridgell
917ca215bb r11475: removed a extraneous ldb_delete() call (i had it there for debugging)
(This used to be commit daa9dcd8f4)
2007-10-10 13:45:42 -05:00
Andrew Tridgell
c845ab1e60 r11474: - enable ldb transactions from ejs
- speed up provisioning a bit using a ldb transaction (also means you
  can't end up with a ldb being half done)
(This used to be commit 91dfe304cf)
2007-10-10 13:45:41 -05:00
Volker Lendecke
66d3ee9ccb r11473: Based on work by Jelmer, implement the [async] flag for rpc requests. If it's
not there (it's not yet on *any* call... :-)), the rpc client strictly
sequences calls to an rpc pipe. Might need some more work on the exact
sequencing semantics when a pipe with both sync and async calls is actually
deployed, but I want it in for winbind simplification.

Volker
(This used to be commit b8f324e4f0)
2007-10-10 13:45:41 -05:00
Andrew Tridgell
66caa3234d r11472: use talloc_get_type() to try to catch an intermittent failure I'm seeing in the ldb winreg backend
(This used to be commit a56a3696cc)
2007-10-10 13:45:41 -05:00
Andrew Bartlett
e3b42c55eb r11471: Describe how kerberos forwarding works with the ntvfs.
Andrew Bartlett
(This used to be commit 66d7a51394)
2007-10-10 13:45:41 -05:00
Andrew Bartlett
20debaa289 r11470: To a server trusted for delegation (checked for in the gss libs),
delegate by default.

Andrew Bartlett
(This used to be commit 49d489c81d)
2007-10-10 13:45:41 -05:00
Andrew Bartlett
3b213ca9a3 r11469: Fix typo, and use the correct (RFC4120) session key for delegating
credentials.  This means we now delegate to windows correctly.

Andrew Bartlett
(This used to be commit d6928a3bf8)
2007-10-10 13:45:40 -05:00
Andrew Bartlett
cc0f3779b1 r11468: Merge a bit more of init_sec_context from Heimdal CVS into our
DCE_STYLE modified version, and add parametric options to control
delegation.

It turns out the only remaining issue is sending delegated credentials
to a windows server, probably due to the bug lha mentions in his blog
(using the wrong key).

If I turn delgation on in smbclient, but off in smbd, I can proxy a
cifs session.

I can't wait till Heimdal 0.8, so I'll see if I can figure out the fix
myself :-)

Andrew Bartlett
(This used to be commit fd5fd03570)
2007-10-10 13:45:40 -05:00
Andrew Tridgell
375922801f r11467: yay! mmc now accepts our schema. The trick was to get all the OID
mappings right for the attributeTypes field of the aggregate schema

now to add the display specifiers and I won't need the proxy module
any more
(This used to be commit 69264362bd)
2007-10-10 13:45:40 -05:00
Andrew Bartlett
827cbb480c r11466: Clear up some memory leaks in smbclient.
Andrew Bartlett
(This used to be commit 6535959fd7)
2007-10-10 13:45:40 -05:00
Andrew Tridgell
6dfb09c5a5 r11463: more progress on the schema generator. mmc now accepts all parts
except the attributeTypes fields of the Aggregrate record. Proxying
just that field and the display specifiers gives us a working mmc
client

hopefully i'll work out what it doesn't like about the attributeTypes
field soon
(This used to be commit 3af867a3f4)
2007-10-10 13:45:40 -05:00
Andrew Bartlett
84c908d983 r11462: Fix the build: somehow I lost the header for this samba-specific hack.
Andrew Bartlett
(This used to be commit 0a41941189)
2007-10-10 13:45:39 -05:00
Andrew Tridgell
a59bb77733 r11459: display a schemaIDGUID as a guid in ldif, making it easier to work
with schemas in ldbedit
(This used to be commit ddbca6e832)
2007-10-10 13:45:39 -05:00
Andrew Tridgell
783851099b r11458: fixed our ejs smbscript interfaces to use arrays where appropriate. In
js arrays are a special type of object where the length property is
automatic, and cannot be modified manually. Our code was manually
setting length, which made it abort when someone passed in a real ejs
array. To fix this we need to create real arrays instead of objects,
and remove the code that manually sets the length
(This used to be commit ebdd1393fd)
2007-10-10 13:45:39 -05:00
Andrew Tridgell
e8c23e4e2d r11457: fixed the winreg IDL and torture code so key and value enumerations
work again. The automatic value() is fine for the length, but cannot
be used for the size as the size is not the number of bytes being
sent, but the number of bytes that the server is allowed to use in the
reply
(This used to be commit 46e91f269c)
2007-10-10 13:45:39 -05:00
Andrew Tridgell
9aa3c44f70 r11456: fixed a ejs parser bug for delete() statements
(This used to be commit b8694c58f5)
2007-10-10 13:45:39 -05:00
Andrew Bartlett
a489c19c45 r11453: Fix warning, for a case that just can't happen.
Andrew Bartlett
(This used to be commit c0ba414a38)
2007-10-10 13:45:38 -05:00
Andrew Bartlett
3b2a6997b4 r11452: Update Heimdal to current lorikeet, including removing the ccache side
of the gsskrb5_acquire_cred hack.

Add support for delegated credentials into the auth and credentials
subsystem, and specifically into gensec_gssapi.

Add the CIFS NTVFS handler as a consumer of delegated credentials,
when no user/domain/password is specified.

Andrew Bartlett
(This used to be commit 55b89899ad)
2007-10-10 13:45:38 -05:00
Andrew Tridgell
f8ebd5a53c r11447: fixed a problem with the ldap server spinning using CPU time
(This used to be commit c913f466cd)
2007-10-10 13:45:38 -05:00
Andrew Bartlett
7915aa9725 r11442: Don't use BASE-NEGNOWAIT any more. It is a mostly meaningless test.
Andrew Bartlett
(This used to be commit c105112902)
2007-10-10 13:45:38 -05:00
Andrew Bartlett
1d6e6540e0 r11441: Remove the auth_domain module from Samba4, as we will only do things
via winbindd in Samba4.

Andrew Bartlett
(This used to be commit e63be25d0b)
2007-10-10 13:45:38 -05:00
Andrew Bartlett
8b95bda975 r11440: Actually check the right thing for 'is this a machine account' (thanks metze).
Andrew Bartlett
(This used to be commit 848831a155)
2007-10-10 13:45:37 -05:00
Andrew Bartlett
4e052d1fe4 r11439: Make presedence on strcmp comparison clear, and fill in
logon_parameters for the auth subsystem.

Andrew Bartlett
(This used to be commit 767c5ca7be)
2007-10-10 13:45:37 -05:00
Andrew Bartlett
d0375cfd43 r11438: Move enum samr_RejectReason into misc.idl so I can use it in a global
prototype.

Andrew Bartlett
(This used to be commit a3abffc758)
2007-10-10 13:45:37 -05:00
Andrew Bartlett
15c1df2e8a r11437: Fix (valid!) use of uninitialised value warnings.
Andrew Bartlett
(This used to be commit 64b9ea642b)
2007-10-10 13:45:37 -05:00
Andrew Tridgell
4298fab790 r11436: this is work in progress for generating the schema we need for our ADS
ldap server. It's still not quite right, and I'm chasing down a few
errors that mmc throws up, but its a lot closer than it was. I had to
change the approach quite substantially over the last couple of days,
but this approach now seems to be working out.
(This used to be commit 38ea11510c)
2007-10-10 13:45:37 -05:00
Stefan Metzmacher
187b7a9e53 r11429: - add owned,active,sgroup vs. unique, group and mhomed replica
special group vs. special group will be done later

metze
(This used to be commit 25a35c6977)
2007-10-10 13:45:36 -05:00
Stefan Metzmacher
18a98ecd7a r11426: add owned,active,normalgroup vs. * replica sections
metze
(This used to be commit 70166bb2a9)
2007-10-10 13:45:36 -05:00
Stefan Metzmacher
e173352f1b r11425: add owned,active,unique vs. multi homed section
metze
(This used to be commit a70cf6f87b)
2007-10-10 13:45:36 -05:00
Volker Lendecke
8f91998e04 r11424: Fix an uninitialized variable warning
(This used to be commit fed26bc4fd)
2007-10-10 13:45:36 -05:00
Volker Lendecke
4bb85c2939 r11423: Add some TALLOC_CTX
(This used to be commit a043ef33dc)
2007-10-10 13:45:36 -05:00
Volker Lendecke
5ca7979b2c r11422: Remove unused args
(This used to be commit d5aef4e2f9)
2007-10-10 13:45:35 -05:00
Stefan Metzmacher
f07cb3f35f r11419: add owned,unique,active vs. special group replica section
metze
(This used to be commit 061e2e67da)
2007-10-10 13:45:35 -05:00
Stefan Metzmacher
bc5e112f5b r11418: - add unique,owned,active vs. normal group section
- we handle incoming release demands for that

metze
(This used to be commit 1db4d8e456)
2007-10-10 13:45:35 -05:00
Jelmer Vernooij
b839c75c5d r11417: Add TODO for the build system
(This used to be commit ad0019ad4e)
2007-10-10 13:45:35 -05:00
Stefan Metzmacher
4400cf2c31 r11416: add some more comments
metze
(This used to be commit dccaceee18)
2007-10-10 13:45:35 -05:00