1
0
mirror of https://github.com/samba-team/samba.git synced 2025-11-05 04:23:51 +03:00
Commit Graph

855 Commits

Author SHA1 Message Date
Tim Potter
3d4148c07c r617: Sync some minor updates with repository:
- start handing idl string types
  - comments
  - generate field types
  - code to select field types and bases
2007-10-10 12:51:52 -05:00
Volker Lendecke
945d747860 r615: Implement samr_OpenGroup, samr_QueryGroupInfo, samr_SetGroupInfo,
samr_DeleteDomainGroup.

I've added the hidden attribute numMembers that must be maintained by
Add/DelGroupMember for the GroupInfoAll query.

Volker
2007-10-10 12:51:52 -05:00
Andrew Bartlett
e096ee2112 r614: Clean out the POSIX assumptions from the Samba4 auth subsystem.
This removes the code that tried to lookup posix groups, as well as
the code that was tied to the SAM_ACCOUNT.

This should make auth_ldb much easier to write :-)

Andrew Bartlett
2007-10-10 12:51:51 -05:00
Andrew Bartlett
a04b074c04 r613: Fix the RPC-SAMR torture test, for my session_key changes.
Andrew Bartlett
2007-10-10 12:51:51 -05:00
Andrew Tridgell
329c5ccd74 r612: fixed a timezone call typo noticed by abartlet 2007-10-10 12:51:51 -05:00
Andrew Bartlett
e4355a7ec1 r611: Fix breakage from my last commit:
Now that all session keys are DATA_BLOBs, fix the callers.

This assumes some things about the behaviour of certain crypto
algorithms, without the ability to test it on session keys != 16 bytes
in length.  We will just need to retest when we get the KRB5 support
in (DES keys are 8 bytes).

Andrew Bartlett
2007-10-10 12:51:51 -05:00
Andrew Bartlett
44f8b5b53e r610: - Merge the Samba3 'ntlm_auth --diagnostics' testsuite to Samba4.
- This required using NETLOGON_NEG_AUTH2_FLAGS for the
    SetupCredentials2 negotiation flags, which is what Samba3 does,
    because otherwise the server uses different crypto.
  - This tests the returned session keys, which we decrypt.

 - Update the Samba4 notion of a 'session key' to be a DATA_BLOB in
   most places.

 - Fix session key code to return NT_STATUS_NO_SESSION_KEY if none is
   available.

 - Remove a useless argument to SMBsesskeygen_ntv1

 - move netr_CredentialState from the .idl to the new credentials.h

Andrew Bartlett
2007-10-10 12:51:51 -05:00
Andrew Tridgell
dd83d39de2 r609: allow ldbedit to take a list of attributes to edit, just like
ldbsearch. This allows you to edit the description of all users using
something like:

  ldbedit 'objectclass=user' description

and not get overwhelmed with fields. It also allows you to edit HIDDEN attributes
by specifying them explicitly
2007-10-10 12:51:51 -05:00
Andrew Tridgell
0250f5d6aa r608: - a couple of very minor fixes to the CreateGroup code
- added samr_GetUserPwInfo() samr server call
2007-10-10 12:51:51 -05:00
Andrew Bartlett
64121aa1a9 r607: When our code is looking for an 'empty' data blob
some of it tests the .length, other code checks the
.data.

Ensure that we always NULL the .data, so that talloc-based
blobs behave just like their direct malloc equivalents.

Andrew Bartlett
2007-10-10 12:51:50 -05:00
Andrew Tridgell
f5cd3d733b r606: added a HIDDEN attribute on fields in ldb (in @ATTRIBUTES). This allows you to mark
an attribute as only appearing in searches that explicitly name it. It will be used
for attributes like nTSecurityDescriptor
2007-10-10 12:51:50 -05:00
Volker Lendecke
59241c0c9a r605: Implement CreateDomainGroup, essentially cut&paste from CreateUser2.
Volker
2007-10-10 12:51:50 -05:00
Tim Potter
209f5a25a9 r604: Better dumping of in,out,ref properties. 2007-10-10 12:51:50 -05:00
Tim Potter
0c1069b56e r602: Autogenerated packet-dcerpc-samr.c now compiles! 2007-10-10 12:51:50 -05:00
Andrew Tridgell
ec0a51898f r601: added the server code for all the samr_SetUserInfo and samr_QueryUserInfo levels except for the password
set levels.

This means that a large part of the RPC-SAMR torture test now runs correctly against Samba4
2007-10-10 12:51:50 -05:00
Tim Potter
d0383e9a7a r600: Get rid of trailing whitespace which freaks out emacs' fontification. 2007-10-10 12:51:49 -05:00
Tim Potter
1e02ccd94e r597: Start generating parser code - only supports uint16, uint32 and policy
handle types.
2007-10-10 12:51:49 -05:00
Andrew Tridgell
defaf0d817 r596: log all ldb searches at level 4 in samdb 2007-10-10 12:51:49 -05:00
Andrew Tridgell
994baba7eb r595: nicer handling on max_size multiplier 2007-10-10 12:51:49 -05:00
Andrew Tridgell
0f12584b4b r594: - make sure all users in the domain have the same base sid!
- added proper ldap time construction to provisioning
2007-10-10 12:51:49 -05:00
Andrew Tridgell
252b11112c r593: add a constant for the records size multiplier for max_size in samr_EnumDomainUsers 2007-10-10 12:51:49 -05:00
Andrew Tridgell
3ac0cff837 r591: don't need to init non-ref out ptrs (thanks to abartlet for spotting this) 2007-10-10 12:51:49 -05:00
Tim Potter
e921a5879f r589: Fix IDL dump module so --dump and --diff options to pidl.pl work
again.  Still a few problems left though.
2007-10-10 12:51:49 -05:00
Andrew Tridgell
e0db9659a8 r587: added server code for samr_EnumDomainUsers, and started adding
samr_SetUserInfo and samr_QueryUserInfo
2007-10-10 12:51:48 -05:00
Andrew Tridgell
d1dcde1d91 r586: removed --clientfns from build_idl.sh (tim removed that code from pidl) 2007-10-10 12:51:48 -05:00
Andrew Tridgell
7b5f3370e6 r583: fixed two bugs in the handling of index entry deletion 2007-10-10 12:51:48 -05:00
Andrew Tridgell
321dbb61cc r582: added the LMSessKey in SamInfo and SamInfo2, thanks to work by abartlet
added test code for SamLogon validation level 2 and 3, so we test both
SamInfo and SamInfo2
2007-10-10 12:51:48 -05:00
Andrew Tridgell
10b6e0011b r578: initial server side implementation of samr_CreateUser(),
samr_CreateUser2(), samr_LookupNames(), samr_OpenUser(),
and samr_DeleteUser()

this uses a user template in the SAM db, of objectclass "userTemplate"
and dn CN=TemplateUser,CN=Templates,$BASEDN. Using a template allows
an admin to add any default user attributes that they might want to
the user template and all new users will receive those attributes.
2007-10-10 12:51:48 -05:00
Andrew Tridgell
e3b31625f4 r577: extended the LookupNames test to check for correct handling of unmapped names 2007-10-10 12:51:48 -05:00
Andrew Tridgell
b2a6355518 r576: added a ldap_timestring() function (needed for fields like whenChanged in SAM db) 2007-10-10 12:51:48 -05:00
Andrew Tridgell
2cb06b39d9 r575: moved the SID_NAME_USE enum into samr.idl 2007-10-10 12:51:47 -05:00
Andrew Tridgell
62b4ec367d r574: - another attempt at const cleanliness in ldb
- fixed a problem with searching for values containing an '=' sign

 - fixed the semantics of attempting an attribute deletion on an attribute that doesn't exist.

 - added some more ldb_msg_*() utilities
2007-10-10 12:51:47 -05:00
Tim Potter
993a18dd35 r550: Remove clientfns.pm module - it was a bad idea.
Start to resurrect eparser.pm for auto-generating ethereal dissectors
for rpc.
2007-10-10 12:51:47 -05:00
Andrew Tridgell
10fdfb5239 r549: added support for DOS error codes in NTSTATUS returns. This uses a
range of NTSTATUS codes that are normally invalid to prevent conflicts
with real error codes.

use the new DOS facility to fix the ERRbaduid return that volker found
2007-10-10 12:51:47 -05:00
Andrew Tridgell
b1cd98188d r514: added a context pointer to the samdb interface, as suggested by
metze. Also added a reference count so that a client can close the
connection handle and still used a derived domain handle.
2007-10-10 12:51:46 -05:00
Andrew Tridgell
74b89d5f96 r513: added a generic ldb debug system to allow the Samba debug functions to
be cleanly interfaced to ldb
2007-10-10 12:51:46 -05:00
Andrew Tridgell
be94cc4032 r511: fix some const handling 2007-10-10 12:51:46 -05:00
Andrew Tridgell
a3edd4bca8 r510: converted the samdb code to give ldb a talloc context rather than letting ldb use malloc 2007-10-10 12:51:46 -05:00
Andrew Tridgell
18695cefa1 r509: fixed a memory handling bug that affects ldb with memory pools that
change with each request
2007-10-10 12:51:46 -05:00
Andrew Tridgell
22aa425c96 r508: fixed a place where we used free() on memory from a talloc(). The new
talloc code catches errors like this.
2007-10-10 12:51:46 -05:00
Andrew Tridgell
2331d4e76e r507: the new ldb code will use talloc_free() a lot, so I have made
talloc_free() O(1) in preparation. This also halves the number of
malloc() calls and increases our internal consistency checking,
without breaking valgrind testing.
2007-10-10 12:51:46 -05:00
Andrew Tridgell
bb74a94e26 r506: got rid of unused function secrets_get_trusted_domains() 2007-10-10 12:51:46 -05:00
Andrew Tridgell
4404056cd5 r504: fixed a bad call to list_union() 2007-10-10 12:51:45 -05:00
Andrew Tridgell
85e57684b4 r503: we don't need to include ldb_parse.h any more 2007-10-10 12:51:45 -05:00
Andrew Tridgell
3955c482e6 r502: modified ldb to allow the use of an external pool memory
allocator. The way to use this is to call ldb_set_alloc() with a
function pointer to whatever memory allocator you like. It includes a
context pointer to allow for pool based allocators.
2007-10-10 12:51:45 -05:00
Stefan Metzmacher
ace939a588 r491: regtree and gregedit also depend on LIBCMDLINE (popt stuff)
metze
2007-10-10 12:51:45 -05:00
Andrew Tridgell
01e8740676 r490: - expanded the test suite to test modify and delete operations
- made yet another attempt to make ldb const clean.

- "make test" now runs both the tdb and ldap backend tests, and run the ldbtest utility
  with and without indexing

- added prototypes in ldb.h for ldb_msg_*() public functions
2007-10-10 12:51:45 -05:00
Andrew Tridgell
34ff18839c r476: i forgot the argument to get_time_zone() 2007-10-10 12:51:45 -05:00
Andrew Tridgell
5f30c3b077 r469: considerably improved the ChangePasswordUser3() IDL thanks to an idea from abartlet 2007-10-10 12:51:45 -05:00
Andrew Tridgell
a3d639d04f r468: fixed timegm() on broken systems 2007-10-10 12:51:45 -05:00