1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-26 10:04:02 +03:00

970 Commits

Author SHA1 Message Date
Andrew Tridgell
b4f94f5afa r469: considerably improved the ChangePasswordUser3() IDL thanks to an idea from abartlet
(This used to be commit 5f30c3b077b59fc7ec40644e3af7236292100c6b)
2007-10-10 12:51:45 -05:00
Andrew Tridgell
2c367686fc r468: fixed timegm() on broken systems
(This used to be commit a3d639d04ff25deabd299ea24917adde9192ed38)
2007-10-10 12:51:45 -05:00
Stefan Metzmacher
6a8355a628 r467: hopefully get the buildfarm compiling fine now...
metze
(This used to be commit d15f0e18bb43608c611cfe78fc79db9ee10e1eb2)
2007-10-10 12:51:44 -05:00
Andrew Tridgell
1b3bbc7d44 r466: implemented samr_OpenDomain() and samr_GetDomPwInfo() server side calls
if you take a look at samr_GetDomPwInfo() then you will get a fairly good idea
of what I am planning for the database oriented SAMR server implementation.
(This used to be commit bba0044a514cf86cbcf14bc82dd6c49808c22dab)
2007-10-10 12:51:44 -05:00
Andrew Tridgell
d2ea763761 r465: we need common.h in two more rpc server pipes
(This used to be commit d96b68169a5ab46cc0550732d4fe94af75e06fd6)
2007-10-10 12:51:44 -05:00
Andrew Tridgell
21e6b1531b r464: a big improvement to the API for writing server-side RPC
servers. Previously the server pipe code needed to return the RPC
level status (nearly always "OK") and separately set the function call
return using r->out.result. All the programmers writing servers
(metze, jelmer and me) were often getting this wrong, by doing things
like "return NT_STATUS_NO_MEMORY" which was really quite meaningless
as there is no code like that at the dcerpc level.

I have now modified pidl to generate the necessary boilerplate so that
just returning the status you want from the function will work. So for
a NTSTATUS function you return NT_STATUS_XXX and from a WERROR
function you return WERR_XXX. If you really want to generate a DCERPC
level fault rather than just a return value in your function then you
should use the DCESRV_FAULT() macro which will correctly generate a
fault for you.

As a side effect, this also adds automatic type checking of all of our
server side rpc functions, which was impossible with the old API. When
I changed the API I found and fixed quite a few functions with the
wrong type information, so this is definately useful.

I have also changed the server side template generation to generate a
DCERPC "operation range error" by default when you have not yet filled
in a server side function. This allows us to correctly implement
functions in any order in our rpc pipe servers and give the client the
right information about the fault.
(This used to be commit a4df5c7cf88891a78d82c8d6d7f058d8485e73f0)
2007-10-10 12:51:44 -05:00
Andrew Tridgell
73744d1ed6 r463: build ldb with debugging when standalone
(This used to be commit 77269e7ad6f569585d5fad37ee63169c4eee3f01)
2007-10-10 12:51:44 -05:00
Andrew Tridgell
d6f20f8e92 r462: added an explanation about the rather complex ltdb_key() function
(This used to be commit 894e44022d16d9ff43f421fb15495845710000ab)
2007-10-10 12:51:44 -05:00
Andrew Tridgell
7ab448ae67 r459: added an initial provision.ldif - this is temporary, and needs to be
replaced with a more sophisticated provisioning system
(This used to be commit 86604bef236568028e84e6b1e8d935c3cfd70112)
2007-10-10 12:51:44 -05:00
Andrew Tridgell
8db18a0775 r458: this is the (very primitive) beginnings of a SAMR server for
Samba4. I'm committing this now so I can get comments on the approach.

Note that you need to do something like this to initialise the SAM db:

 edit script/provision.pl
 script/provision.pl > provision.ldif.out
 bin/ldbadd /path/to/private/sam.ldb provision.ldif.out
(This used to be commit e2002e40a5abe0cd33a2056b1da8ba5732f9021f)
2007-10-10 12:51:44 -05:00
Andrew Tridgell
af48da52bf r457: added some more samr tests to help me work out the right error codes
in our new samr server
(This used to be commit 0f2503111498e809237e0155962db55dfde8cbfb)
2007-10-10 12:51:43 -05:00
Andrew Tridgell
208e09747c r456: - added -i option to ldbsearch
- fixed sorting bug in ldb index handing
(This used to be commit cdd48e2b9b3ca6be5503eec401e09db162408ac8)
2007-10-10 12:51:43 -05:00
Andrew Tridgell
b96695ca23 r454: allow a non-URL form of a filename to be used in ldb_connect(). This
makes it a little easier to work with the ldb tools
(This used to be commit 03df31cef025b2087531579437d6bae1ec36e82f)
2007-10-10 12:51:43 -05:00
Andrew Tridgell
1cc8db0132 r453: added a comment about indexing on objectclass
(its usually a bad idea)
(This used to be commit f88760c3cc81324d3d339702b411603139af6224)
2007-10-10 12:51:43 -05:00
Andrew Tridgell
cd16ca9876 r452: move from first-fit to best-fit in tdb record allocation. For a
situation where we are continually increasing the size of a record
(such as ldb index records) this reduces the resulting tdb size by a
factor of over 100x, due to reductions in fragmentation. It appears to
have no noticable effect on the speed in other cases.
(This used to be commit b61d7f8bbc0c01d648ce204ffb6ea657e0b04c03)
2007-10-10 12:51:43 -05:00
Andrew Bartlett
d8bb3d81a6 r451: More NTLMSSP work.
The work here is trying to get the LM_KEY option for NLTMSSP
operating, however until that functions properly, it is now controlled
by some new smb.conf options, defaulting off.

Andrew Bartlett
(This used to be commit c63eb35b45c6db6e4c5302d1832bb5cef49a14f6)
2007-10-10 12:51:43 -05:00
Andrew Bartlett
63a41d7d4d r448: Fix 'auth' in Samba4, by making 'auth methods' a normal smb.conf
paramter, without special links to other variables.

When we get 'server role' ideas back into Samba4, we can fix this properly.

The default is:

guest, sam_ignoredomain

which is the expected behaviour for a stand-alone server.

Andrew Bartlett
(This used to be commit 56ebc4275fedc8141d43a4ae9a4f4f0e1eccaf49)
2007-10-10 12:51:43 -05:00
Andrew Tridgell
cac54feea8 r445: fixed the bind_nak code
(This used to be commit f3799e7720e13e12b59168cf4afbf2dfe87868f7)
2007-10-10 12:51:42 -05:00
Andrew Tridgell
78aa8f1814 r444: - added the beginnings of a ldb test suite and benchmark
- updated the test slapd config to use bdb and indexing
(This used to be commit 7ad0858c060ee212a33434dc4be75e7a0cd1a0e3)
2007-10-10 12:51:42 -05:00
Andrew Bartlett
9f084101dd r443: Update Samba4 to the auth and NTLMSSP code from Samba3.
Not all the auth code is merged - only those parts that are actually
being used in Samba4.

There is a lot more work to do in the NTLMSSP area, and I hope to
develop that work here.  There is a start on this here - splitting
NTLMSSP into two parts that my operate in an async fashion (before and
after the actual authentication)

Andrew Bartlett
(This used to be commit 5876c78806e6a6c44613a1354e8d564b427d0c9f)
2007-10-10 12:51:42 -05:00
Andrew Tridgell
585d87a959 r442: fixed some uninitialised variables pointed out by gcc -O3
(This used to be commit ff31cfb941b77e99e648011a6b7639b2a5923a6a)
2007-10-10 12:51:42 -05:00
Andrew Tridgell
9c92ac995d r441: added an example of how to use the remote rpc interface
(This used to be commit 62f59d1180cb97cbfd6e046072131fc486ade4bd)
2007-10-10 12:51:42 -05:00
Andrew Tridgell
29bc1f5c60 r437: fixed handling of a corner case with multi-valued indexing
(This used to be commit b38612185657512419c4b3dc806cf1183e0db0cb)
2007-10-10 12:51:38 -05:00
Andrew Tridgell
3c117a4843 r436: fixed indexing of objectclass with subclasses
(This used to be commit 4d92e6f79f52ec0d580dfda2a91b4afc95838ff4)
2007-10-10 12:51:38 -05:00
Andrew Tridgell
0dad5a3427 r435: a major upgrade for ldb
- added the ability to mark record attributes as being CASE_INSENSITIVE, WILDCARD or INTEGER.

 - added the ability to support objectclass subclasses, and to search by a parent class

 - added internal support for case insensitive versus case sensitive
   indexing (not UTF8 compliant yet)

 - cleaned up a number of const warnings

 - added a number of helper functions for fetching integers, strings and doubles

 - added a in-memory cache for important database properties, supported by a
   database sequence number

 - changed some variable names to avoid conflicts with C++
(This used to be commit f2bf06f25c2e6c744817711c7bedbd1d3b52f994)
2007-10-10 12:51:38 -05:00
Stefan Metzmacher
a2b6d47390 r432: fix the linking of the reg* tools
metze
(This used to be commit 089f6f063fdd7e54c0a2a95d27bab1813fbc2307)
2007-10-10 12:51:38 -05:00
Stefan Metzmacher
4c991c6edd r425: add some comments to ugly code parts
we should take care of 'char *' and 'const char *' and DO NOT mix them!

Jelmer: please fix this

metze
(This used to be commit cd609eb2fe9303825d5562047d57fd553b2601bd)
2007-10-10 12:51:38 -05:00
Stefan Metzmacher
f517d6b7ae r424: let this code compile on every machine hopefully
metze
(This used to be commit 3e911db7c2cbcb38667f06e6b0282bce1b7991cb)
2007-10-10 12:51:37 -05:00
Andrew Tridgell
931927d2a3 r420: added nicer names for the field bits in userinfo21
added tests for the level 23 and 25 password change methods
(This used to be commit d49f7a6a0d1895de3d654a5b46c6aec3a57fde76)
2007-10-10 12:51:37 -05:00
Stefan Metzmacher
a37c408fc4 r419: Data::Dumper is not portable
use it only for debugging in a local tree

metze
(This used to be commit 7c53e05b4874143e8e8cd0034ab5a6a986e7994c)
2007-10-10 12:51:37 -05:00
Stefan Metzmacher
405e08683d r412: as we decide to not do 3.0.2a releases anymore,
remove the generation stuff from VERSION and mkversion.sh

metze
(This used to be commit 6658e75358a82e3e6f104487d8bb19514af4e7a7)
2007-10-10 12:51:37 -05:00
Stefan Metzmacher
aa68fbab88 r411: make swig should not be the first make rule...
add make default -> all before

metze
(This used to be commit ddf6a575ff173fcf1e4898fc73459c52f554e043)
2007-10-10 12:51:37 -05:00
Andrew Tridgell
473d669835 r392: added IDL for 3 more netlogon Delta levels, thanks to a dump from Richard Renard
(This used to be commit 2d8772ec9607c4e06bbc559b35979e27d4b988d9)
2007-10-10 12:51:37 -05:00
Andrew Tridgell
3fe884c26c r390: added my best guess for how session keys are supposed to work when you
use NTLMSSP sign or seal at the RPC layer

It doesn't work yet, but then again neither does the old code (which
just assumed the SMB session key was used, which of course makes no
sense on a ncacn_ip_tcp connection)
(This used to be commit e8782329269bc78d36d8ca83fb7a4e38b9c6b167)
2007-10-10 12:51:37 -05:00
Andrew Tridgell
932b0ff5f5 r389: added a test for set user info level 26 (set password extended)
thanks to Luke Howard for this test
(This used to be commit 891653e7d40f581016085e2c32e2802eea7e7ade)
2007-10-10 12:51:37 -05:00
Andrew Tridgell
24be9ddf0a r388: added IDL for 3 more set user info levels (all of which set the
password). That makes 8 ways to change a password just on the SAMR
pipe!

Thanks to Luke Howard from PADL for this.
(This used to be commit c8a49a7e004468d13f656f67eac4b7b4e1759022)
2007-10-10 12:51:36 -05:00
Andrew Tridgell
a00c266702 r387: more C++ friendly changes
(This used to be commit ac0c525a8b8a05cc275fb9f4c1dcfd749604c85f)
2007-10-10 12:51:36 -05:00
Volker Lendecke
b82b555b83 r386: Another torture test to survive.
Believe it or not, w2k3 returns ERRSRV:ERRbaduid DOS error code if you pass in
a wrong vuid. We (Samba 3) currently return NT_STATUS_NETWORK_ACCESS_DENIED.

Volker
(This used to be commit 37221b81f124887ab3cb652f237067ff4b56151e)
2007-10-10 12:51:36 -05:00
Tim Potter
75eef34a23 r383: Scripting extensions using swig. This commit includes only a (LGPL)
python interface to tdb and a rudimentary build system.

Configure with --with-python and make swig to build and append
$(builddir)/scripting/swig/python to PYTHONPATH.
(This used to be commit bbc15d6f84b6a247ae87b253752a86a38f1d6798)
2007-10-10 12:51:36 -05:00
Tim Potter
b0b97592be r382: More C++ friendliness fixes.
(This used to be commit e96f3a2005cf6f4da2ecd4670a35eab1b4f250d0)
2007-10-10 12:51:36 -05:00
Andrew Tridgell
6411aa483f r381: make the code more C++ friendly
(This used to be commit 8acecc7f27e25ab876fffffe43ae75b5f77aff77)
2007-10-10 12:51:36 -05:00
Andrew Tridgell
ee0489fff6 r380: make sure that ldbedit -a works with all tdb and LDAP backends
(This used to be commit b5cb5a1e62a4b9df6f163082498942553662436e)
2007-10-10 12:51:35 -05:00
Andrew Tridgell
6cc392bff3 r374: allow for a policy_handle fetch using a handle type of
DCESRV_HANDLE_ANY. This is needed for operations like samr_Close()
that take any handle type.
(This used to be commit 6fbbfc4462388c4c86f9f0ddd3cdd99225512ef2)
2007-10-10 12:51:35 -05:00
Andrew Tridgell
8882401382 r373: use a much larger default tdb hash size in ldb
(This used to be commit 54f47c45b8f828ad5ddaa630d0c1e673f2c74b7a)
2007-10-10 12:51:35 -05:00
Andrew Tridgell
16d3528ebc r372: automatically create a fake BDC machine account and delete it
afterwards for the RPC-NETLOGON test. This makes it much simpler to
run the test and also means that it doesn't distrurb any existing
domain join you might have.
(This used to be commit feac996794d5cc16e3612fb2901668a9b1e1d274)
2007-10-10 12:51:35 -05:00
Andrew Tridgell
2cabf613e3 r365: improved the IDL for samr_Connect5()
(This used to be commit 4b4f025504cb5b92c8b119259f1df622cd72ec7c)
2007-10-10 12:51:35 -05:00
Andrew Tridgell
3fb30e46be r364: finally worked out the ancient samr_ChangePasswordUser() interface
yay!
(This used to be commit 0221566cf5ff7dc5ce0de9af451b935ed8615f4e)
2007-10-10 12:51:35 -05:00
Andrew Tridgell
0d1c529cdc r363: nicer error handling in pidl
(This used to be commit cafc8a5e763834a26432c467abfe84f140bb7d80)
2007-10-10 12:51:35 -05:00
Andrew Tridgell
6ee381d86c r362: after setting domain info query it again so we can see what attributes stick
(This used to be commit b2ebaf95b75b050ad02ca967867337cd81faa859)
2007-10-10 12:51:35 -05:00
Andrew Tridgell
2733f8cf7c r361: allow anonymous browsing
(This used to be commit 845730501e24629aa3db4698f097dd73c14bca3b)
2007-10-10 12:51:34 -05:00