1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
Commit Graph

69091 Commits

Author SHA1 Message Date
Jelmer Vernooij
3483adaf0a selftest: Allow using ldb* utilities from system. 2010-11-27 03:48:20 +01:00
Andrew Tridgell
dbb9500448 s4-libnet: use the full DNS domain for CLDAP lookups if possible
many of the internal libnet interfaces use the short domain name,
which leads to unreliable NBT lookups. If we are trying to look for
our workgroup, then look for our DNS domain instead

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Sat Nov 27 03:47:52 CET 2010 on sn-devel-104
2010-11-27 03:47:52 +01:00
Andrew Tridgell
8737baee7c wintest: cope with VMs sometimes not rebooting
my w2k8 image occasionally gets stuck in the early stages of
booting. This adds code to detect a failed reboot, in which case the
VM is reset

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Sat Nov 27 02:42:19 CET 2010 on sn-devel-104
2010-11-27 02:42:19 +01:00
Andrew Tridgell
353cdd006a wintest: avoid adding a blank line to resolv.conf on each run
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Sat Nov 27 01:47:48 CET 2010 on sn-devel-104
2010-11-27 01:47:48 +01:00
Andrew Tridgell
3bc6145143 wintest: handle missing firewall commands
my w2k3 box doesn't have these firewall commands
2010-11-27 01:03:30 +01:00
Andrew Bartlett
1e96da556a s3-param Fix lp_set_cmdline() to set the flag on alias values too
Otherwise, -d10 would be overridden by 'debug level = 1', because
debug level is an alias of 'log level' which -d was setting.

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Sat Nov 27 01:02:40 CET 2010 on sn-devel-104
2010-11-27 01:02:40 +01:00
Matthieu Patou
58db821de1 Fix endianess problems as discovered on the build farm
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Fri Nov 26 22:32:16 CET 2010 on sn-devel-104
2010-11-26 22:32:16 +01:00
Matthieu Patou
e8ae340421 ldb-tdb: Add more information about full scan 2010-11-26 23:46:06 +03:00
Björn Jacke
70a7da0e10 s3/configure: fix GNU ld version detection with old gcc releases
needed as old gcc releases output everything to stderr, even stdout output from
ld

Fixes #7825

Autobuild-User: Björn Jacke <bj@sernet.de>
Autobuild-Date: Fri Nov 26 20:15:24 CET 2010 on sn-devel-104
2010-11-26 20:15:24 +01:00
Volker Lendecke
51d4951304 s3: Fix filling in the pam_auth_crap domain name
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Fri Nov 26 14:43:20 CET 2010 on sn-devel-104
2010-11-26 14:43:20 +01:00
Matthias Dieter Wallnöfer
6a2171c739 s4:rootdse LDB module - remove unused variable
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Fri Nov 26 13:58:27 CET 2010 on sn-devel-104
2010-11-26 13:58:27 +01:00
Matthias Dieter Wallnöfer
8680c6f888 s4:objectclass LDB module - simply use "msg" when requesting the message 2010-11-26 13:10:01 +01:00
Matthias Dieter Wallnöfer
848010b570 s4:objectclass LDB module - move the "mem_ctx" allocation to a better place
It's only needed if we've a schema around.
2010-11-26 13:10:00 +01:00
Andrew Bartlett
7048ad11f5 s4-dsdb Reorganise and clarify the LSA objectClass check (forbidden on LDAP)
This arranged the check to avoid talloc_strdup() (the schema pointers
are constant, and can be relied upon), and checks the untrusted bit
first (it is faster), before the ldb_attr_cmp().

The strcmp() here was valid, if unusual, because the ldapDisplayName
values are already in the correct case, but strcasecmp() is more
correct, as for the small extra cost, we avoid a difficult to diagnose
bug later.

Andrew Bartlett

Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
2010-11-26 13:10:00 +01:00
Andrew Bartlett
439a2d6983 s4-objectclass Use a specific local variable name, not 'value'
This makes it clearer what the local variable in use here does.

Andrew Bartlett

Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
2010-11-26 13:09:59 +01:00
Andrew Tridgell
bf52cffd25 s4-kcc: fixed valgrind errors in drs replicaInfo server side
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Fri Nov 26 03:52:30 CET 2010 on sn-devel-104
2010-11-26 03:52:30 +01:00
Andrew Tridgell
5e8cb67605 s4-provision: fixed eadb automatic and manual setting in provision
we should not set posix:eadb in lp in the acl native test code

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-26 03:08:21 +01:00
Andrew Tridgell
cfa7510e19 wintest: do an initial replication of CN=Configuration to transfer dnsHostname
this fixes the drs replication in the dcpromo test
2010-11-26 03:08:21 +01:00
Andrew Tridgell
23bffff98c wintest: fixed "rndc command" option in provision
we need to point at the generated rndc.conf

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-26 03:08:21 +01:00
Andrew Tridgell
9409b73290 wintest: make IPv6 optional in wintest
we need some more work on IPv6 support in s4 before this works
2010-11-26 03:08:21 +01:00
Andrew Tridgell
eeb29b593a s4-provision: don't try to look for an IPv6 address when not specified
the getaddrinfo() method of finding an IPv6 address is incorrect. We
could do it via the Samba interfaces code, but until we have that it
is better to not try to auto-detect IPv6

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-26 03:08:21 +01:00
Björn Jacke
e52ba1fb87 librpc: fix builds without IPv6 suport (HP-UX 11.00)
Kai, please check.

Autobuild-User: Björn Jacke <bj@sernet.de>
Autobuild-Date: Fri Nov 26 03:07:21 CET 2010 on sn-devel-104
2010-11-26 03:07:21 +01:00
Björn Jacke
4f27a64407 s3/smbtorture: use $MAKE to build to make sure we use the make that makes our build 2010-11-26 02:14:09 +01:00
Björn Jacke
dbcf73c457 ѕ3/configue: set Tru64 cc's PIC switch right (none)
-fPIC made shared library builds fail there
2010-11-26 01:52:36 +01:00
Andrew Bartlett
fab9d94006 s4-dsdb Remove rootDSE and anonymous checks from acl_read
The rootdse module handles rootDSE requests, and blocks anonymous
access, so we on't need to do it again here.

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Fri Nov 26 00:36:19 CET 2010 on sn-devel-104
2010-11-26 00:36:19 +01:00
Andrew Bartlett
d184da8065 s4-dsdb Add 'block anonymous' checks to the rootdse module
This ensures that one single point checks for and blocks anonymous
read access to the database over LDAP.

Andrew Bartlett
2010-11-26 08:50:42 +11:00
Andrew Bartlett
885ecd7b6b s4-dsdb Remove mem_ctx argument from dsdb_module_find_dsheuristics().
A function that does not return memory should not take a memory context.

Andrew Bartlett
2010-11-26 08:50:42 +11:00
Nadezhda Ivanova
fad57d8ad0 s4-tests: Made acl tests to reconnect if dSHeuristics is being manipulated
Also made password tests set dSHeuristics only once rather that once per test.

Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Thu Nov 25 20:48:38 CET 2010 on sn-devel-104
2010-11-25 20:48:38 +01:00
Nadezhda Ivanova
1e9a7882be s4-tests: Modified create_ou to only accept security.descriptor type for sd to avoid confusion
It used to work with sddl as well, but this is confusing and could lead to errors. It also caused a message about tallocing a security descriptor to appear.

Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Thu Nov 25 19:46:42 CET 2010 on sn-devel-104
2010-11-25 19:46:42 +01:00
Nadezhda Ivanova
db403ac35d s4-dsdb: Switched to using a dictionary in create_ou for consistency.
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Thu Nov 25 14:12:52 CET 2010 on sn-devel-104
2010-11-25 14:12:52 +01:00
Nadezhda Ivanova
05b8e078f4 s4-dsdb: Fixed wrong assignment of name attribute to description atribute in create_ou. 2010-11-25 14:25:43 +02:00
Matthias Dieter Wallnöfer
ae61408e2f s4:lsa RPC server / objectclass LDB module - fix the creation of trusted domain objects
Tridge pointed out that it is to dangerous to allow them to be created
with SYSTEM permissions. The solution using the "untrusted" flag should
be much more viable.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Thu Nov 25 13:05:56 CET 2010 on sn-devel-104
2010-11-25 13:05:56 +01:00
Nadezhda Ivanova
fc1da86d40 s4-tests: Modified speedtest.py to use samba.tests.delete_force
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Thu Nov 25 01:28:19 CET 2010 on sn-devel-104
2010-11-25 01:28:19 +01:00
Nadezhda Ivanova
21aceb1374 s4-tests: Modified sec_descriptor.py to use samba.tests.delete_force 2010-11-25 01:15:24 +02:00
Nadezhda Ivanova
9917525b96 s4-tests: Modified sam.py to use samba.tests.delete_force 2010-11-25 01:14:58 +02:00
Nadezhda Ivanova
0d99a5f27c s4-tests: Modified passwords.py to use samba.tests.delete_force 2010-11-25 01:13:47 +02:00
Nadezhda Ivanova
71af506950 s4-tests: delete_force was unused, removed it. 2010-11-25 01:13:24 +02:00
Nadezhda Ivanova
5e7d99a5d8 s4-tests: Modified ldap_schema.py to use samba.tests.delete_force 2010-11-25 01:12:42 +02:00
Nadezhda Ivanova
d21d3e7db8 s4-tests: Modified ldap.py to use samba.tests.delete_force 2010-11-25 01:12:18 +02:00
Nadezhda Ivanova
66aa40b9d9 s4-tests: Modified deletetest.py to use samba.tests.delete_force 2010-11-25 01:11:57 +02:00
Nadezhda Ivanova
f42802e22f s4-tests: Modified bind.py to use samba.tests.delete_force 2010-11-25 01:11:29 +02:00
Nadezhda Ivanova
d7731f6f39 s4-tests: Modified acly.py to use common delete_force instead of defining its own. 2010-11-25 01:09:27 +02:00
Nadezhda Ivanova
db5bcb7115 s4-tests: Added a common definition of delete_force. 2010-11-25 01:09:27 +02:00
Günther Deschner
64424bb1c3 s4-smbtorture: pick a better printer in RPC-SPOOLSS-ACCESS.
Guenther

Autobuild-User: Günther Deschner <gd@samba.org>
Autobuild-Date: Wed Nov 24 22:07:33 CET 2010 on sn-devel-104
2010-11-24 22:07:33 +01:00
Matthias Dieter Wallnöfer
1352a9406f s4:objectclass LDB module - LSA objects - allow them if the SYSTEM control is specified
This fits better than the RELAX one.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Wed Nov 24 18:23:01 CET 2010 on sn-devel-104
2010-11-24 18:23:01 +01:00
Matthias Dieter Wallnöfer
8c01d6a837 s4:objectclass LDB module - move one checks into the "objectclass derivation loop"
This denies objects created from possible derivated classes from the prohibited
ones.

Also small cosmetic improvements for another check.
2010-11-24 17:39:18 +01:00
Matthias Dieter Wallnöfer
0a6834e630 s4:objectclass LDB module - some more or less cosmetic return value macro changes
Sometimes "ldb_module_oom" fits better than "ldb_operr" or "ldb_oom".
2010-11-24 17:39:18 +01:00
Nadezhda Ivanova
dab4e008a0 s4-tests: Modified sec_descriptor to use samdb.newgroup instead of locally defined method.
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Wed Nov 24 17:38:28 CET 2010 on sn-devel-104
2010-11-24 17:38:28 +01:00
Nadezhda Ivanova
c89ecfc2ad s4-dsdb: Extended samdb.newgroup to set the group's security descriptor. 2010-11-24 16:54:18 +01:00
Christian Ambach
650c96725e s3:winbind correct a copy&paste error
negative results of sid->gid lookups should be stored with
idmap_cache_set_sid2gid instead of idmap_cache_set_sid2uid

This seems to be a copy&paste error when similar logic from the
sid2uid path was copied here in 84b88f4b.

Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Wed Nov 24 16:53:01 CET 2010 on sn-devel-104
2010-11-24 16:53:01 +01:00