sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-12 09:18:10 +03:00
Code
55,349 Commits 60 Branches 1,145 Tags 452 MiB
3dee92fcb9
Commit Graph

19107 Commits

Author SHA1 Message Date
Jelmer Vernooij
8178a40dcd Use system LDB by default if the right version was found. 2009-06-18 03:09:36 +02:00
Jelmer Vernooij
edbbbff7ec dsdb: Fix build against system ldb. 2009-06-18 03:09:14 +02:00
Jelmer Vernooij
a5563d2925 selftest: Use common function when skipping testsuites based on run-time 
conditions.
 2009-06-18 03:08:21 +02:00
Jelmer Vernooij
4e293e3780 smb_build: Always build modules for system-libraries as shared libraries, 
since they can't be included in the static library.
 2009-06-18 02:32:26 +02:00
Jelmer Vernooij
4657f52c06 Fix build with system LDB. 2009-06-18 01:21:35 +02:00
Jelmer Vernooij
76bf5a4ede configure: Use Python tdb bindings from the system, if found. 2009-06-18 00:54:18 +02:00
Jelmer Vernooij
57c514afec Remove outdated Python status file. 2009-06-18 00:54:17 +02:00
Jelmer Vernooij
2dd921c774 Only install an explicit set of scripts during "make install", rather than 
whatever happens to be in the source tree.
 2009-06-17 21:00:22 +02:00
Jelmer Vernooij
8b82e3b1e3 Make fullschema script executable. 2009-06-17 20:52:43 +02:00
Jelmer Vernooij
832b929dde pyldb: Fix three more (minor) memory leaks. 2009-06-17 20:45:40 +02:00
Jelmer Vernooij
4d2baca7be pyldb: Fix memory leak in Dn.get_parent(). 2009-06-17 20:45:39 +02:00
Jelmer Vernooij
0c3769e181 pyldb: Fix memory leak in Dn.concat. 2009-06-17 20:45:39 +02:00
Jelmer Vernooij
f1561cd72b pyldb/tests: Use different dn's everywhere, to easily spot which test is 
breaking in gdb.
 2009-06-17 20:45:39 +02:00
Jelmer Vernooij
a61e11468a pyldb: Fix another memory leak and reference counting error. 2009-06-17 20:45:39 +02:00
Jelmer Vernooij
28a2c262ac param/python: Fix memory leak of LoadParm objects. 2009-06-17 20:45:38 +02:00
Jelmer Vernooij
7b8fcacda2 pycredentials: Raise MemoryError when unable to create objects. 2009-06-17 20:45:38 +02:00
Jelmer Vernooij
0c16676642 pyldb: Fix memory leak of LdbMessage's created from Python. 2009-06-17 20:45:38 +02:00
Jelmer Vernooij
d4172bbcc5 pycredentials: Fix memory leak. 2009-06-17 20:45:38 +02:00
Jelmer Vernooij
d558d8ab94 pyldb: Fix two memory leaks of attribute lists. 2009-06-17 20:45:37 +02:00
Jelmer Vernooij
c3770f1dc0 pyldb: Fix segfault, freeing memory too early in search. 2009-06-17 20:45:37 +02:00
Jelmer Vernooij
2f27d0c762 pyldb: Support getting the parent of special DNs without segfaulting. 
Found by: Андрей Григорьев <andrew@ei-grad.ru>
 2009-06-17 20:45:37 +02:00
Günther Deschner
fbe85c70ef s4-smbtorture: add test for NetUserSetInfo level 0 (user rename). 
Guenther
 2009-06-17 01:30:22 +02:00
Günther Deschner
bdd214b38c s4-smbtorture: use torture_comment in RPC-SAMR-USERS-PRIVILEGES test. 
Guenther
 2009-06-17 01:29:22 +02:00
Günther Deschner
823681bc99 s4-smbtorture: use TORTURE_TEST_USER define in libnetapi user test. 
Guenther
 2009-06-17 01:29:19 +02:00
Jelmer Vernooij
308de544f4 python: Provide way to iterate over available shares. 2009-06-16 02:28:10 +02:00
Jelmer Vernooij
f7ada51c29 python: Add API for accessing available shares. 2009-06-16 02:28:10 +02:00
Volker Lendecke
3014753ebe Fix the posixtimedlock test 
The previous version depended on the fact that smb_raw_lock_send just queued
stuff. This changed with ebf5523b6e.
 2009-06-15 17:26:56 +02:00
Jelmer Vernooij
478503694a smbtorture: Output subunit by default. 2009-06-13 16:16:01 +02:00
Jelmer Vernooij
afe7949313 smbtorture: Remove unused 'quiet' output format. 2009-06-13 16:16:01 +02:00
Jelmer Vernooij
4bef8acc47 selftest: Fix references to filenames with knownfailures and slow tests. 2009-06-12 17:54:47 +02:00
Jelmer Vernooij
718f9be8a2 selftest: Add option to strip output of succeeded tests, and use it on 
the buildfarm.

The matches the behaviour we had earlier in the previous output format.
 2009-06-12 14:34:24 +02:00
Jelmer Vernooij
8c10fb7f00 selftest: Output subunit on the buildfarm. 2009-06-12 14:21:03 +02:00
Jelmer Vernooij
c418af2456 ad-schema/license.txt: Fix typo. 2009-06-12 14:14:27 +02:00
Andrew Tridgell
ddce3b5ac8 two more NT status codes that we get on DRS with w2k8-R2 2009-06-12 12:23:46 +10:00
Andrew Tridgell
bbe758d55b always enable RPC debugging with a debug level >= 100. 
This helps with tools where setting the binding string is not
possible, such as net
 2009-06-12 12:23:45 +10:00
Andrew Bartlett
4c1a7d7556 Add supportedCapabilities to our rootDSE 
This makes AD client tools happier, as they know they are talking to
an AD server.

per Bug 6229 by Matthieu Patou <mat@matws.net>

Andrew Bartlett
 2009-06-12 07:51:43 +10:00
Andrew Bartlett
9b261c008a s4:heimdal: import lorikeet-heimdal-200906080040 (commit 904d0124b46eed7a8ad6e5b73e892ff34b6865ba) 
Also including the supporting changes required to pass make test

A number of heimdal functions and constants have changed since we last
imported a tree (for the better, but inconvenient for us).

Andrew Bartlett
 2009-06-12 07:45:48 +10:00
Jelmer Vernooij
68578d6374 selftest: Fix handling of testsuite, reintroduce progress indication. 2009-06-11 19:59:59 +02:00
Jelmer Vernooij
4308e69084 selftest: Fix subunit stream to include the right prefixes rather than 
extending the subunit protocol.
 2009-06-11 19:59:58 +02:00
Jelmer Vernooij
16a69f358a selftest: Use external processes for filtering known failures and pretty 
formatting.
 2009-06-11 19:59:58 +02:00
Jelmer Vernooij
24f01e70aa selftest: Use filter-xfail for known failures 2009-06-11 19:59:58 +02:00
Jelmer Vernooij
7ea3cc5f29 selftest: Use subunit internally, and a separate test output formatter. 2009-06-11 19:59:57 +02:00
Nadezhda Ivanova
e9caf7d063 A script to compare the differences in nTSecurityDescriptor between 2 hosts 
This script walks the schema, configuration and domain partitions of the locally
installed Ldb and a remote hosts and compares the descriptors disregarding the
difference in domain SID. The goal is to make sure a freshly provisioned Samba
has the correct descriptors so ACLs work correctly. It outputs the descriptors
in short SDDL, where the correct SIDs are to be replaced during provisioning.
Optionally it can be output as an LDIF file with the current local domain and
domain SIDs.
 2009-06-11 18:54:32 +10:00
Andrew Tridgell
c6f5e1ba84 fixed some places where RPC-SECRETS needs to be changed to RPC-LSA-SECRETS 
this copes with a rename of SECRETS to LSA-SECRETS in an earlier patch
by gd
 2009-06-10 12:24:12 +10:00
Andrew Tridgell
a5003de56b fixed the encoding/decoding of the reverse attribute for server side sort 2009-06-10 11:45:53 +10:00
Donald T. Davis
9e7501b2cb Clarify and expand the Kerberos notes made by Andrew Bartlett in 2005 
Compiled with Andrew over a series of phone calls and gobby sessions,
with the aim of documenting Kerberos requirements for Samba to us an
alternate (ie, MIT) Kerberos library.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
 2009-06-10 11:38:27 +10:00
Andrew Bartlett
fbde0011e6 Remove copy of kerberos-notes.txt added in incorrect location 2009-06-10 11:37:49 +10:00
Donald T. Davis
8e1b848aed Clarify and expand the Kerberos notes made by Andrew Bartlett in 2005 
Compiled with Andrew over a series of phone calls and gobby sessions
with Andrew, with the aim of documenting Kerberos requirements for
Samba to us an alternate (ie, MIT) Kerberos library.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
 2009-06-10 11:19:18 +10:00
Andrew Tridgell
6836b16dda fixed server side sort control 
when sorting a record that does not have the requested sort attribute
then put those records last in the sort result
 2009-06-10 10:33:53 +10:00
Andrew Tridgell
48dbfc89cf fixed server side sorting of case-insensitive strings 
The sort module uses ldb_comparison_fold() as the comparison function
for case-insensitive attributes. In other places the function is being
used to produce a boolean, but for sorting we care about ordering.

The n1 - n2 return was sorting by length, not value
 2009-06-10 10:13:55 +10:00
Timur I Bakeyev
fae921e938 Fix installation path of the subunit python modules. 
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
 2009-06-09 21:54:05 +02:00
Jelmer Vernooij
6b0e6fc0b3 s4-tests: Add separate variable for tap2subunit. 2009-06-09 21:54:05 +02:00
Stefan Metzmacher
7c58a2f237 SMB2-COMPOUND: add some tests for invalid requests 
TODO: check why the INVALID1 tests fails with --signing=required.

metze
 2009-06-09 19:33:47 +02:00
Stefan Metzmacher
8d95883908 s4:smb2srv: don't allow the related flag on the first request in a compounded chain 
metze
 2009-06-09 19:33:46 +02:00
Sam Liddicott
ebf5523b6e s4: smbcli_transport_send hit the socket right away if possible 
[Metze; "make test" on git master outputs exactly the same test summary
with our without this patch (apart from the "using seed" lines)]

If the transport socket is writable, then push the queue along
rather than wait until the caller returns back to the tevent loop.

This strategy keeps the sockets piping hot, and is particularly good
for cases where reading requests from one socket causes lots of
writes on another socket, or where lots of writes are made in a batch.

It doesn't matter if the socket is not writeable yet, packet_queue_run
will return quite cheaply in such a case.

Signed-off-by: Sam Liddicott <sam@liddicott.com>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
 2009-06-09 18:51:31 +02:00
Stefan Metzmacher
ba42cccf00 s4:torture: add SMB2-COMPOUND test 
metze
 2009-06-09 16:49:33 +02:00
Stefan Metzmacher
959503ed1a s4:smb2srv: correctly fail remaining compounded requests after a failure 
metze
 2009-06-09 16:49:32 +02:00
Stefan Metzmacher
f55091586d s4:smb2srv: remove old TODO comment, we already check the seqnum 
metze
 2009-06-09 16:49:31 +02:00
Stefan Metzmacher
7633995fa0 s4:smb2srv: fix handling of multiple compounded requests 
metze
 2009-06-09 16:49:31 +02:00
Stefan Metzmacher
7b27b5f674 s4:smb2srv: remove the chained file handle on close 
metze
 2009-06-09 16:49:31 +02:00
Stefan Metzmacher
d153430e32 s4:libcli/smb2: add smb2_transport_credits_ask_num() 
metze
 2009-06-09 16:49:30 +02:00
Stefan Metzmacher
5b99fa5c4f s4:libcli/smb2: only add the 1 byte dynamic buffer padding for non compounded requests 
metze
 2009-06-09 16:49:30 +02:00
Stefan Metzmacher
d777879aaa s4:libcli/smb2: add support sending compounded requests 
metze
 2009-06-09 16:49:29 +02:00
Stefan Metzmacher
81275c84d3 s4:libcli/smb2: prepare SMB2 signing code for compounded requests 
metze
 2009-06-09 16:49:29 +02:00
Günther Deschner
71caa90cd8 s4-selftest: change rpc.secrets to rpc.lsa.secrets here as well. 
Guenther
 2009-06-09 15:32:36 +02:00
Günther Deschner
b5ca5412d8 s4-smbtorture: rename SECRETS to LSA-SECRETS. 
Guenther
 2009-06-09 14:09:23 +02:00
Andrew Tridgell
b258c5fa67 work around conflict in pidfile() prototype for heimdal on NetBSD5 2009-06-09 14:11:20 +10:00
Günther Deschner
bf7c814694 s4-smbtorture: when testing RPC-SAMR-LARGE-DC its fine to just close the objects. 
Guenther
 2009-06-08 22:45:16 +02:00
Günther Deschner
80d0a12fb7 s4-smbtorture: add test_QueryDisplayInfo_level to RPC-SAMR-LARGE-DC. 
Guenther
 2009-06-08 22:45:16 +02:00
Jelmer Vernooij
d5e6ae5cfc python: Fix samba4.dcerpc.rpcecho.RpcEchoTests.test_surrounding test. 2009-06-08 22:41:39 +02:00
Björn Jacke
d2bb72d713 s4:heimdal: fix build on FreeBSD 
Patch from Timur I. Bakeyev sent to samba-technical:

Heimdal requires openpty() presence. FreeBSD has in in standard libc, so
autodetection works, but compilation fails, as declaration of this function is
missing.

This patch adds proper header detection and inclusion for openpty().
 2009-06-08 22:14:49 +02:00
Günther Deschner
d11d4382b9 s4-smbtorture: also test for "all" architecture in enum driver tests in RPC-SPOOLSS. 
Guenther
 2009-06-08 21:24:31 +02:00
Günther Deschner
963efb5542 s4-smbtorture: fix test_ReportEventLog in RPC-EVENTLOG. 
Guenther
 2009-06-08 19:56:59 +02:00
Timur I. Bakeyev
11332e106c Make tunable for modulesdir 
This patch is for Samba4. It adds configure tunable for modulesdir -
location, where modules should be installed. In the case, when no
FHS compliance is used and libdir is redefined, modulesdir still
points to $PREFIX/modules. In some installations it may be not desired.
I'd rather set it myself :)

So, here is the patch.

With regards,
Timur Bakeyev.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
 2009-06-08 13:20:51 +02:00
Timur I. Bakeyev
c41a12f8ba rl_event_hook detection 
This patch is relevant for Samba4 source mostly. The way, how readline
compiled under FreeBSD makes it require stdio.h to get all the necessary
declarations. Without this addition rl_event_hook is not properly detected.

With regards,
Timur Bakeyev.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
 2009-06-08 13:20:51 +02:00
Günther Deschner
9e4b510504 s4-smbtorture: exclude oem_information checking for s3 in RPC-SAMR. 
Guenther
 2009-06-08 10:45:11 +02:00
Günther Deschner
0845db66e0 s4-smbtorture: skip samr MultipleMember alias tests for 3 as well as we do already for s4. 
Guenther
 2009-06-07 00:54:57 +02:00
Volker Lendecke
256b227b27 Allow access as SYSTEM on a privileged ldapi connection 
This patch creates ldap_priv/ as a subdirectory under the private dir with the
appropriate permissions to only allow the same access as the privileged winbind
socket allows. Connecting to ldap_priv/ldapi gives SYSTEM access to the ldap
database.
 2009-06-06 13:10:30 +02:00
Volker Lendecke
b4d7607a52 Fix some nonempty blank lines 2009-06-06 10:42:55 +02:00
Andrew Tridgell
fcc7372975 fixed handling of change notify buffer overruns 
When the notify buffer overruns and there are no pending notify
requests, the notify buffer doesn't actually get destroyed, it just
gets put in a state where new notifies are discarded and the next
notify change request will return 0 changes.
 2009-06-05 16:25:44 +10:00
Günther Deschner
abbcd574db s4-smbtorture: fix comment in RPC-SAMR-LARGE-DC test. 
Andrew, I think you wanted to print this instead.

Guenther
 2009-06-04 21:18:14 +02:00
Volker Lendecke
d0aedeb46e Increase tevent version for tevent_req_notify_callback() 2009-06-04 17:50:44 +02:00
Andrew Bartlett
a12b8571fe s4:torture Cut the RPC-SAMR-LARGE-DC test down to size 
This removes the validation of the estimated number of accounts,
because MS-SAMR 3.1.5.5.1.1 makes clear the number returned cannot be
relied apon.

I've also converted a bit more of the test to use torture_assert(),
and where that is impractical, to print error messages when things
fail.

Andrew Bartlett
 2009-06-04 18:12:59 +10:00
Andrew Bartlett
44f762c30d s4:torture assert that we get a Mailslot allocated before we dereference 2009-06-04 15:10:36 +10:00
Andrew Tridgell
dfd56dd294 changed the auth path to use extended DN ops to avoid non-indexed searches 
Logs showed that every SAM authentication was causing a non-indexed
ldb search for member=XXX. This was previously indexed in Samba4, but
since we switched to using the indexes from the full AD schema it now
isn't.

The fix is to use the extended DN operations to allow us to ask the
server for the memberOf attribute instead, with with the SIDs attached
to the result. This also means one less search on every
authentication.

The patch is made more complex by the fact that some common routines
use the result of these user searches, so we had to update all
searches that uses user_attrs and those common routines to make sure
they all returned a ldb_message with a memberOf filled in and the SIDs
attached.
 2009-06-04 14:10:11 +10:00
Andrew Tridgell
0849c1ef77 fixed ldb rename now that we have unique indexes 
With unique indexes, any rename of a record that has an attribute that
is uniquely indexed needs to be done as a delete followed by an add,
otherwse you'll get an error that the attribute value already exists.
 2009-06-04 14:10:11 +10:00
Andrew Bartlett
3ce37ae750 Don't run the RPC-SAMR-LARGE-DC test multiple times 2009-06-04 11:22:52 +10:00
Andrew Bartlett
bef665baad s4:torture Make Samba4 build on hosts with an older libnetapi 
For example, Samba4 would not build (for the last week) on Fedora 10,
with samba-common 3.2.11 installed.

Andrew Bartlett
 2009-06-04 11:13:05 +10:00
Jeremy Allison
0daf9a042c Note that the delaytime for update has changed betweek w2k3 and w2k8. 
We must eventually parameterize this.
Jeremy.
 2009-06-03 14:12:18 -07:00
Jeremy Allison
b11bf8b7cf Fix S3 "make install". Don't build cifs.upcall.c in S4 as there are no 
checks to see if the required include file is available.
Jeremy.
 2009-06-03 11:28:52 -07:00
Jeremy Allison
96cc821497 Make the path to this uglyness complete so people can find the guilty party.. 
Jeremy.
 2009-06-03 10:45:44 -07:00
Björn Jacke
b3491df2f9 s3:torture: fix password timestamp checks on NetBSD 
The Open Group says:

"The useconds argument [of usleep] must be less than 1,000,000."

NetBSD takes this seriously. usleep of more than 999999 are effectless.
 2009-06-03 17:50:01 +02:00
Jelmer Vernooij
7fddc71caa selftest: Run tests for Samba4 target in the samba 4 testsuite. 2009-06-03 16:26:30 +02:00
Jelmer Vernooij
87bbae7b07 Rename harness2subunit.pl -> tap2subunit to be consistent with the 
subunit tools.
 2009-06-03 16:26:29 +02:00
Jelmer Vernooij
e285bb2da5 Move findstatic.pl script to top-level. 2009-06-03 15:06:15 +02:00
Stefan Metzmacher
089ba385af s4:torture/libnetapi: fix netapi detection 
We need to set SMB_ENABLE(TORTURE_LIBNETAPI,NO) first
to overwrite the default of YES for MODULES and
then only set it to YES if netapi was found.

metze
 2009-06-03 14:12:36 +02:00
Stefan Metzmacher
edeccf0df0 SMB2-CONNECT: make it possible to specific the max write size via --option=torture:smb2maxwrite=12345 
metze
 2009-06-03 10:50:52 +02:00
Jelmer Vernooij
8d033ec0d1 Move mount.cifs/umount.cifs to the top level and remove the outdated copy 
in Samba 4.
 2009-06-02 23:24:33 +02:00
Jelmer Vernooij
8d966fac41 Fix unresolved symbol in python messaging module. 2009-06-02 18:05:42 +02:00
Jelmer Vernooij
ac9ff3574d Fix pythonpath so subunit can be found. 2009-06-02 18:05:42 +02:00
Jelmer Vernooij
688efbbc68 Fix finding the LDB header files in the system in pyldb_util. 2009-06-02 18:05:41 +02:00
Jelmer Vernooij
2c84685a3d Build modules statically by default, as there still seem to be a lot of 
issues with those even if shared libs work.
 2009-06-02 18:05:41 +02:00
Jelmer Vernooij
6ace18904d Fix more unresolved symbols. 2009-06-02 18:05:41 +02:00
Jelmer Vernooij
fe2b04b4bb python: Move helper functions for using param into a separate file rather 
than linking against the python module.
 2009-06-02 18:05:40 +02:00
Jelmer Vernooij
42fa7ec823 Split up Python code a little bit so we don't hav eto link python modules 
to each other.
 2009-06-02 18:05:40 +02:00
Jelmer Vernooij
f90782f228 Fix dependencies when using shared libraries. 2009-06-02 18:05:39 +02:00
Andrew Tridgell
50043177e8 Merge branch 'master' of ssh://git.samba.org/data/git/samba 2009-06-01 22:04:00 +10:00
Andrew Tridgell
73c8566d95 use the unique flag on ldb attributes to optimise & clauses 
When a attribute is marked unique we know that if we find a match
it will be the only possible match. This means that in a list of
subtrees connected by an &, it is best to first load the index values
for the unique entries, as if they find something then we know we
won't have to look any further.

This helps with searches like this:

  (&(objectclass=user)(samaccountname=tridge))

the old code would first have loaded the very large index for the
objectclass=user attribute, and then loaded the single entry for
samaccountname=tridge. Now we load the samaccountname=tridge entry
first, notice that it gives us a single result, and stop, thereby
skipping the load of the objectclass=user index record completely.
 2009-06-01 22:03:20 +10:00
Andrew Kroeger
05be1cc717 s4:mkproto: Add NET_API_STATUS return type. 
The recently added LIBNETAPI torture tests use NET_API_STATUS as a return type
for some functions.  The torture/libnetapi/proto.h private header that was being
generated by mkproto.pl did not include a prototype for the test_netuseradd()
function, as it did not know how to handle the NET_API_STATUS return type.
 2009-06-01 19:55:34 +10:00
Andrew Tridgell
c0213308bb we don't need the unique checks in the samldb code now 
These attributes now use the unique indexing flag
 2009-06-01 16:37:28 +10:00
Andrew Tridgell
ce1045983f mark samAccountName, objectGUID and objectSID as unique indexed 2009-06-01 16:36:56 +10:00
Andrew Tridgell
5a39817212 added support for unique indexing in ldb 
When a attribute is marked as LDB_ATTR_FLAG_UNIQUE_INDEX then attempts
to add a 2nd record that has the same attribute value for this
attribute as another record will fail.

This provides a much more efficient mechanism for ensuring that
attributes like objectGUID are unique
 2009-06-01 16:36:21 +10:00
Andrew Tridgell
ae1c2415e2 fix uninitialised use of samctx 2009-06-01 13:42:51 +10:00
Andrew Tridgell
7f16c29f10 when comp_num is zero, the case folded DN is always "" 
This fixes a bug where we would look at an uninitialised
dn->linearized
 2009-06-01 12:58:48 +10:00
Andrew Tridgell
ba95882155 Merge branch 'master' of ssh://git.samba.org/data/git/samba 2009-06-01 10:39:30 +10:00
Volker Lendecke
68e3442922 Move a comment where it belongs 2009-05-30 18:27:13 +02:00
Kai Blin
57ea909b32 libwbclient: Add async call framework. 2009-05-30 09:17:37 +02:00
Günther Deschner
f451dd482d s4-smbtorture: fix the build w/o libnetapi. 
This is surely the wrong fix, but I could not figure out why the samba4 build
system adds the init function although the m4 macro had switched off the torture
libnetapi subsystem when the headers and libs were not found.

Can one of the samba4 build gurus please have a look ?

Guenther
 2009-05-29 19:25:44 +02:00
Günther Deschner
0542fa9e7d s4-smbtorture: add NETAPI-GROUP test. 
Guenther
 2009-05-29 18:09:59 +02:00
Günther Deschner
3d07a929e6 s4-smbtorture: add NETAPI-USER test. 
Guenther
 2009-05-29 18:09:48 +02:00
Günther Deschner
fa3a665221 s4-smbtorture: add very basic LIBNETAPI testsuite. 
Guenther
 2009-05-29 17:59:43 +02:00
Günther Deschner
36fc0b961f s4-smbtorture: add a very basic NSS-WRAPPER testsuite. 
Guenther
 2009-05-29 13:50:09 +02:00
Günther Deschner
12496ea5ab s4-smbtorture: remove trailing whitespace. 
Guenther
 2009-05-29 13:18:23 +02:00
Günther Deschner
059401e457 s4-smbtorture: Fix test_SamLogon() for netlogon servers not yet supporting 
validation level 6.

Guenther
 2009-05-29 13:17:53 +02:00
Volker Lendecke
f6535d3f3f Fix some nonempty blank lines 2009-05-29 09:48:55 +02:00
Andrew Bartlett
227553f904 Win2k3 don't allow creating of domain trust accounts over SAMR 2009-05-29 17:12:06 +10:00
Andrew Bartlett
b83f84c8c3 s4:torture Don't try to Close a Deleted handle 2009-05-29 17:02:19 +10:00
Andrew Kroeger
554923ce1b s4: Add additional 2-letter SID/RID mappings. 
Information from http://msdn.microsoft.com/en-us/library/aa379602(VS.85).aspx
 2009-05-29 12:37:26 +10:00
Andrew Bartlett
d409a12ccd s4:setup Remove generated attributes from provision_configuration 
Incorrectly added in 95eeef91d3, and
found by OpenLDAP backend tests run by Theodor Chirana <office@adaptcom.ro>

Andrew Bartlett
 2009-05-29 12:15:28 +10:00
Andrew Bartlett
a2e72ac556 s4:torture Don't run QueryDisplayInfo test for SAMR-USERS-PRIVILEGES 2009-05-29 11:56:29 +10:00
Andrew Bartlett
a3f619f9d9 s4:torture Clean up users and groups added in RPC-SAMR-LARGE-DC 2009-05-29 11:56:27 +10:00
Andrew Bartlett
98ff29291b s4:torture Half the repeditive tests run by RPC-SAMR-PASSWORDS-PWDLASTSET 2009-05-29 11:56:27 +10:00
Andrew Bartlett
10f076a77d Explicitly list RPC-SAMR-PASSWORDS-PWDLASTSET and RPC-SAMR-USERS-PRIVILAGES as slow 2009-05-29 11:56:26 +10:00
Andrew Bartlett
e8ea854f02 s4:client Match Samba3 and remove smbmount from the distribution 2009-05-29 11:56:25 +10:00
Andrew Bartlett
37e09f26dc s4:torture Make the RPC-SAMR-PWDLASTET more efficient 
By using SamLogonEx we avoid setting up the credentials chain for each
request.

(Needs to be pushed further up the stack, to only connect to NETLOGON once).

Andrew Bartlett
 2009-05-29 11:56:24 +10:00
Andrew Tridgell
5ab03dbecc Merge branch 'master' of ssh://git.samba.org/data/git/samba 2009-05-28 16:12:34 +10:00
Andrew Tridgell
47692f39b1 a useful debugging tool 
When looking at performance problems with ldb it can be useful to see
which searches causes unindexed full searches. This makes it easy to
enable that.
 2009-05-28 16:11:45 +10:00
Andrew Tridgell
0a0d760704 fixed one-level indexing 
one-level indexing was not always effective due to some broken logic
in the indexing code. This change means that if normal indexing fails,
we can still fall back on one-level indexing.

This reduces the number of full unindexed searches in s4 quite a lot
 2009-05-28 16:10:47 +10:00
Andrew Tridgell
52cfffb8cb enable one-level indexing in sam.ldb 2009-05-28 16:08:49 +10:00
Nadezhda Ivanova
ee4c1ed010 Modified SamDB to accept options like Ldb. 2009-05-27 21:08:35 +10:00
Andrew Bartlett
078343906d Detect missing 'witch' before detecting missing autoconf 2009-05-27 12:45:37 +10:00
Andrew Bartlett
5264ad627d Handle the krbtgt special case by looking for RID -514 
It turns out (seen in MS-SAMR 3.1.1.7.1 for example) that the primary
way the krbtgt account is recognised as special is that RID.  This
should fix issues such as 'password expired' on the kpasswd service.

Andrew Bartlett
 2009-05-27 07:58:07 +10:00
Andrew Kroeger
b21656f09a s4:tevent: Increase trace debug level to 50. 
The sheer volume of messages generated by tevent when the trace level is set to
10 makes it difficult to debug issues in a level 10 log.  Increasing this to
50 allows tevent tracing to be enabled if needed, but otherwise keeps the extra
chatter out of a level 10 log.
 2009-05-27 07:58:07 +10:00
Andrew Kroeger
73af16c0e7 s4:ldb_modules: Correct typos. 2009-05-26 16:38:39 -04:00
Andrew Kroeger
bf863bccb6 s4:ldb:modules: Correct typos. 2009-05-26 16:38:39 -04:00
Stefan Metzmacher
53df343644 s4:libcli/smb2: remove old dialect revision constants 
metze
 2009-05-26 09:50:50 +02:00
Stefan Metzmacher
fadffbae88 s4:smb2srv: We only support SMB 2.002. 
We need to loop over all given dialects and check
if we can find SMB2_DIALECT_REVISION_202.

metze
 2009-05-26 09:50:45 +02:00
Stefan Metzmacher
01b05df766 s4:libcli/smb2: use new SMB2_DIVELECT_REVISION constants 
Also send them in the order a windows client would
send them (the lowest first).

metze
 2009-05-26 09:50:43 +02:00
Stefan Metzmacher
d0051462b9 s4:libcli/smb2: add some more SMB2 constants 
metze
 2009-05-26 09:39:25 +02:00
Andrew Tridgell
a9542ba21b use domain_dn not ncname 
fixed up from previous patch that removed the use of crossref records
 2009-05-26 14:47:11 +10:00
Andrew Tridgell
0299609308 Merge branch 'master' of ssh://git.samba.org/data/git/samba 2009-05-26 14:18:16 +10:00
Andrew Kroeger
c80c3b5edd s4:provision: Added ComPartitionSets entry. 
Without this entry, opening the COM+ tab under the properties of an OU within
ADUC results in the following error:

"Unable to retrieve all user properties, 0x80072030"
 2009-05-26 14:17:22 +10:00
Andrew Kroeger
95eeef91d3 s4:Added Extended-Rights and subentries. 
Without these entries, using the 'Delegate Control' option in ADUC results in
the following error message in the Delegation of Control Wizard:

"The templates could not be applied.  One or more of the templates is not
applicable.  Click Back and select different templates, and then try again."
 2009-05-26 14:17:12 +10:00
Andrew Kroeger
d402866e31 s4:provision: Update DisplaySpecifiers (#5139). 
The classDisplayName attribute controls the actual text displayed to the user
for the top-level menus, so added it to the existing entries.

The attributeDisplayNames attribute contains both the text displayed to the
user and a mapping to the internal directory attribute name for the particular
field, so added these to the existing entries as well.

Added new entries as appropriate to properly complete all menus and labels
within ADUC.
 2009-05-26 14:16:05 +10:00
Andrew Bartlett
6ef65389fd Don't use crossRef records to find our own domain 
A single AD server can only host a single domain, so don't stuff about
with looking up our crossRef record in the cn=Partitions container.
We instead trust that lp_realm() and lp_workgroup() works correctly.

Andrew Bartlett
 2009-05-26 12:37:09 +10:00
Slava Semushin
5d2cd81645 source{3,4}/torture/smbiconv.c(main): fixed file descriptor leak. 
File descriptor leaks only when we use file instead of stdout.

Found by cppcheck:
[./source3/torture/smbiconv.c:219]: (error) Resource leak: out
[./source4/torture/smbiconv.c:211]: (error) Resource leak: out
 2009-05-25 16:18:48 +02:00
Günther Deschner
eb5e8dc82e s4-smbtorture: add RPC-SAMR-LARGE-DC test. 
This rather simple test creates 4500 objects on a domain controller and checks
the enum calls for the correct number of results.

Guenther
 2009-05-25 13:56:54 +02:00
Günther Deschner
a75698bdf3 s4-smbtorture: rename test_EnumDomain{Users,Groups,Aliases} in RPC-SAMR. 
Guenther
 2009-05-25 13:56:54 +02:00
Günther Deschner
05e6ebb7f8 s4-smbtorture: re-work test_Create{User,Group,Alias} a little. 
Guenther
 2009-05-25 13:56:29 +02:00
Andrew Tridgell
b335618d17 fixed interpretation of ACB_PWNOTREQ 
This bit actually means that we should ignore the minimum password
length field for this user. It doesn't mean that the password should
be seen as empty
 2009-05-25 15:23:54 +10:00
Andrew Tridgell
4dcc058ea1 fixed the client side password change code 
The client side code was not falling back to older routines correctly
as it didn't check for the operation range error appropriately. It
also used the old rpc semantics.
 2009-05-25 13:40:52 +10:00
Andrew Tridgell
2bf1e8b5e1 cope with lanman auth being disabled in old password change code 
When lanman auth is disabled and a user calls a password change
method that requires it we should give NT_STATUS_NOT_SUPPORTED
 2009-05-25 13:39:56 +10:00
Günther Deschner
686e60581b s4-selftest: adding RPC-SAMR-USERS-PRIVILEGES to knownfail list. 
Samba4 cannot pass this test currently as in Samba4 (unlike Samba3)
the LSA and SAMR account are stored in the same db.
Once you delete a SAMR user the LSA privilege account is deleted
at the same time (which is wrong).

Guenther
 2009-05-21 12:19:56 +02:00
Stefan Metzmacher
04ceabf56f s4:libcli/smb2: fix session setup with raw NTLMSSP 
metze
 2009-05-20 19:58:37 +02:00
Stefan Metzmacher
540b713075 s4:libcli/smb2: use raw ntlmssp if the server didn't provide a sec blob 
metze
 2009-05-20 19:58:37 +02:00
Stefan Metzmacher
5b55e47b71 s4:libcli/smb2: fill in transport->negotiate.secblob with the correct data 
metze
 2009-05-20 19:58:36 +02:00
Stefan Metzmacher
d59f84d738 SMB2-LOCK: let the test pass against samba4 
metze
 2009-05-20 15:26:54 +02:00
Günther Deschner
9a13af9a99 s4: try to fix privileges implementation in order to pass the RPC-SAMR-USERS-PRIVILEGES test. 
Guenther
 2009-05-20 13:35:05 +02:00
Sam Liddicott
4b21ad9db7 Have ntvfs_connect() accept union smb_tcon *tcon instead of char* sharename 
This change brings ntvfs_connect into compliance with other ntvfs functions
which take an ntvfs module, an ntvfs request and an smb io union.

It now becomes the responsibility of ntvfs modules to examine
tcon->generic.level themselves and derive the share name and any other
options
directly; e.g.

	const char *sharename;

	switch (tcon->generic.level) {
	case RAW_TCON_TCON:
		sharename = tcon->tcon.in.service;
		break;
	case RAW_TCON_TCONX:
		sharename = tcon->tconx.in.path;
		break;
	case RAW_TCON_SMB2:
	default:
		return NT_STATUS_INVALID_LEVEL;
	}

	if (strncmp(sharename, "\\\\", 2) == 0) {
		char *p = strchr(sharename+2, '\\');
		if (p) {
			sharename = p + 1;
		}
	}

service.c smbsrv_tcon_backend() is called before ntvfs_connect and fills in
some of the tcon->..out values.
For the case of RAW_TCON_TCONX, it filles out tcon->tconx.out.tid and
tcon->tconx.out.options

For the case of RAW_TCON_TCON it fills out tcon->tcon.out.tid and
tcon->tcon.out.max_xmit

Thus the ntvfs_connect function for vfs modules may override these values
if desired, but are not required to.

ntvfs_connect functions are required to fill in the tcon->tconx.out.*_type
fields, for RAW_TCON_TCONX, perhaps something like:

	if (tcon->generic.level == RAW_TCON_TCONX) {
		tcon->tconx.out.fs_type = ntvfs->ctx->fs_type;
		tcon->tconx.out.dev_type = ntvfs->ctx->dev_type;
	}

Signed-off-by: Sam Liddicott <sam@liddicott.com>

(I fixed the ntvfs_connect() in the smb_server/smb2/
 and the RAW_TCON_SMB2 switch case in the modules)

Signed-off-by: Stefan Metzmacher <metze@samba.org>
 2009-05-20 13:32:27 +02:00
Sam Liddicott
8cd9c72d75 s4:smb_server: initialy read the first 4 bytes only 
Stop packet_recv getting greedy and reading the whole socket
and then dispatching te extra packets in a timer loop

Signed-off-by: Sam Liddicott <sam@liddicott.com>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
 2009-05-20 10:16:43 +02:00
Stefan Metzmacher
ac7f4fa380 s4:libcli/raw: initialy read the first 4 bytes only 
metze
 2009-05-20 10:16:42 +02:00
Tim Prouty
d38e5d18a7 s4 torture: Fix typo 2009-05-18 18:31:46 -07:00
Günther Deschner
5186661023 s4-smbtorture: Fix build warning in RPC-SAMR tests. 
Guenther
 2009-05-19 02:05:25 +02:00
Günther Deschner
0a9049be87 s4-smbtorture: add RPC-SAMR-USERS-PRIVILEGES test. 
This test demonstrates the independence of the lsa and samr accounts while
remove a samr users that still has privileges granted.

Guenther
 2009-05-18 22:54:14 +02:00
Jelmer Vernooij
5065cf70f8 tevent: Remove python module. 
This module didn't have any functionality that we actually used yet, and
it was quite small.

Tevent is quite low level and perhaps doesn't make much sense to expose
directly as a Python module. It was also causing build problems when used with a
system-tevent. We can always back later if necessary.
 2009-05-16 14:56:37 +02:00
Jelmer Vernooij
6230eb94af Update copies of config.guess and config.sub. 2009-05-16 04:03:12 +02:00
Jelmer Vernooij
88876ac571 errormap: Remove wbc -> NTSTATUS error map for now. It is not used. 
This was breaking the Samba 4 installation since it added dependencies
on header files we weren't installing.

Confirmed with Kai.
 2009-05-15 16:05:37 +02:00
Andrew Bartlett
524a79b735 s4:nbtd Use str_list_make_single() to turn iname->wins_server into a list 2009-05-14 05:56:59 +10:00
Andrew Bartlett
aa5cee2288 s4:libnet Use str_list_make_single() in resolv code 2009-05-14 05:56:59 +10:00
Andrew Bartlett
6df4aece1d dsdb:schema Use str_list_make_empty() to create an empty list 2009-05-14 05:56:59 +10:00
Andrew Bartlett
5182b10b7a s4:torture Use str_list_make_single where appropriate 2009-05-14 05:56:59 +10:00
Günther Deschner
c3e61b5460 s4-selftest: match new name of RPC-SAMR-ACCESSMASK. 
Guenther
 2009-05-13 15:19:40 +02:00
Günther Deschner
675e52cde7 s4-smbtorture: split RPC-SAMR-ACCESSMASK into several tests. 
Guenther
 2009-05-13 15:19:40 +02:00
Günther Deschner
2abdfab613 s4-smbtorture: cosmetic cleanup for RPC-SAMR-ACCESSMASK. 
Guenther
 2009-05-13 15:19:40 +02:00
Jelmer Vernooij
aa71ab6d1d s4 config-summary: Fix printing of which libraries are external and 
internal.
 2009-05-13 00:35:49 +02:00
Günther Deschner
54d925a304 s4-smbtorture: skip SetMemberAttributesOfGroup in RPC-SAMR for s3 as well. 
Guenther
 2009-05-12 00:27:24 +02:00
Günther Deschner
59cb8fd58d s4-smbtorture: Skip secdesc set calls for non-user objects in RPC-SAMR for Samba3. 
Note that they are skipped for all objects while testing Samba4.

Guenther
 2009-05-12 00:27:23 +02:00
Günther Deschner
1fb9b65921 s4-smbtorture: Fix order of assert args in test_TestPrivateFunctionsDomain() in RPC-SAMR. 
Guenther
 2009-05-12 00:27:23 +02:00
Günther Deschner
ff7ebdf317 s4-smbtorture: switch to use torture_context in RPC-SAMR. 
Guenther
 2009-05-12 00:27:23 +02:00
Günther Deschner
0f88b3cc94 s4-smbtorture: remove trailing whitespace in RPC-SAMR. 
Guenther
 2009-05-12 00:27:23 +02:00
Günther Deschner
5f015920a8 s4-smbtorture: add very basic RPC-LSA-LOOKUPNAMES test. 
Guenther
 2009-05-11 16:44:39 +02:00
Günther Deschner
7347373e7c s4-smbtorture: add optional very simple reply checks to lsa lookup name tests. 
Guenther
 2009-05-11 16:44:39 +02:00
Stefan Metzmacher
d51bb8e4e6 s4:smb_server: return after we have processed an invalid smb2 request 
metze
 2009-05-11 15:59:46 +02:00
Volker Lendecke
993bdd87b5 Move SMB2 constants to a separate file 2009-05-11 15:54:24 +02:00
Volker Lendecke
ce8f3528f1 Fix SMB2_CAP_DFS 2009-05-11 15:54:24 +02:00
Günther Deschner
7672a033ef s4-smbtorture: remove trailing whitespace in RPC-LSA test. 
Guenther
 2009-05-11 15:06:20 +02:00
Günther Deschner
410f17cdeb s4-smbtorture: use struct torture_context in RPC-LSA. 
Guenther
 2009-05-11 15:06:16 +02:00
Günther Deschner
a3873bca51 s4-smbtorture: avoid secdesc test on connect handle in RPC-SAMR-USERS for Samba3. 
With this, I think, we pass RPC-SAMR-USERS.

Guenther
 2009-05-09 00:51:04 +02:00
Günther Deschner
4f3bfb6261 s4-smbtorture: skip unsupported ACB bits for Samba3 in RPC-SAMR-USER. 
Guenther
 2009-05-08 22:21:41 +02:00
Günther Deschner
67df4489e2 s4-smbtorture: Support timestamp handling for Samba3 in RPC-SAMR-USERS. 
Timestamps in passdb (currently) only have second granularity.

Guenther
 2009-05-08 22:14:50 +02:00
Günther Deschner
c2498d133d s4-smbtorture: Fix printf info-level mismatch in RPC-SAMR. 
Guenther
 2009-05-08 09:56:40 +02:00
Michael Adam
c469ec5c10 s4:loadparm: fix a comment typo. and line wrapping. 
Michael
 2009-05-08 01:18:58 +02:00
Michael Adam
31e06e63b7 s4:loadparm: fix brace indentation and add brace for clarity 
Michael
 2009-05-08 01:18:58 +02:00
Günther Deschner
310031274d s4-smbtorture: avoid acct_flags check at the end of RPC-SAMR-PASSWORDS for Samba3. 
I don't get this, why would the account suddenly get ACB_PWNOTREQ ?

Guenther
 2009-05-08 00:46:54 +02:00
Günther Deschner
41cb06fba7 s4-smbtorture: prepare for running RPC-SAMR-USERS against samba3. 
In Samba 3 there are no pdb calls to store comments, codepages and countrycodes
(yet).

Guenther
 2009-05-08 00:42:21 +02:00
Praveen Arimbrathodiyil
c52be9f6a0 Fix missing backtick. 2009-05-07 14:16:19 +02:00
Günther Deschner
2cdfd67cae s4-smbtorture: Avoid failing RPC-SCHANNEL when testing lsa_GetUserName behaviour against Samba 3. 
Guenther
 2009-05-07 13:05:13 +02:00
Volker Lendecke
4b3e89c2e7 Fix Coverity 911: FORWARD_NULL. Metze, please check! 2009-05-02 13:14:14 +02:00
Stefan Metzmacher
30038534f4 s4:rpc_server: convert the socket based part to use the tstream interface 
metze
 2009-05-01 17:42:12 +02:00
Stefan Metzmacher
fe9b552023 s4:smbd: depend on NAMED_PIPE_AUTH_TSTREAM... 
metze
 2009-05-01 17:42:09 +02:00
Stefan Metzmacher
92a1890b90 libcli/named_pipe_auth: add tstream_npa_connect_send/recv() 
Add a tstream client implemenation for the named pipe auth
code. This supports byte and message mode.

metze
 2009-05-01 17:42:08 +02:00
Stefan Metzmacher
2ae92c7599 s4:smbd: add support for named_pipe_auth level 2 in service_named_pipe... 
metze
 2009-05-01 17:42:06 +02:00
Stefan Metzmacher
5604e8d614 s4:libcli: remember operating system and lan manager strings from session setup 
metze
 2009-05-01 15:46:08 +02:00
Stefan Metzmacher
b97a591e2c s4:libcli/raw: write can return STATUS_BUFFER_OVERFLOW as a real error 
We should not try to parse the result if the status is not NT_STATUS_OK.

metze
 2009-05-01 15:12:07 +02:00
Volker Lendecke
24cfe3e607 Fix Coverity ID 853 (UNINIT) -- Kai, please check! 2009-04-28 12:26:20 +02:00
Stefan Metzmacher
d8f3f7cd42 s4:selftest: don't run the smb2.durable.open test 
it often crashes when the server doesn't support them.

metze
 2009-04-25 06:18:58 +02:00
Stefan Metzmacher
a678144162 s4:RPC-ECHO: disable the timeout test as it can't work with our client library 
We need proper ways to cancel requests in order to have that
test working against a correctly behaving server over ncacn_np.

metze
 2009-04-25 06:09:04 +02:00
Stefan Metzmacher
09f1754a9b RAW-LOCK: samba4 behaves like windows 7 in regard of locking error codes 
metze
 2009-04-25 03:16:11 +02:00
Stefan Metzmacher
4ab243bcab s4:torture: use torture api instead of printf for RAW-LOCK 
metze
 2009-04-25 03:15:58 +02:00
Stefan Metzmacher
bec71ba928 s4:selftest: s4 doesn't support osxrename and directory rename yet 
metze
 2009-04-25 03:15:56 +02:00
Stefan Metzmacher
88e9f72473 s4:tortore: use torture api instead of printf in RAW-RENAME 
metze
 2009-04-25 03:15:55 +02:00
Günther Deschner
a263eaca49 s4-smbtorture: add test_ControlService() to RPC-SVCCTL. 
Guenther
 2009-04-24 13:37:07 +02:00
Günther Deschner
f926a4e390 s4-smbtorture: add test_StartServiceW() to RPC-SVCCTL. 
Guenther
 2009-04-24 13:36:47 +02:00
Günther Deschner
ae5dd1219a s4-smbtorture: change default service to spooler in RPC-SVCCTL. 
Guenther
 2009-04-24 13:35:51 +02:00
Jelmer Vernooij
5b33624113 Rename the top-level LDB test to LOCAL-LDB, so it gets picked up by the 
script that determines the tests to run.
 2009-04-24 09:50:05 +02:00
Andrew Bartlett
1a39007101 s4:torture Fix segfault in RPC-SAMSYNC 
This code needs to be fixed to match Win2008 behavior, but at least it
does not segfault any more.

Andrew Bartlett
 2009-04-24 09:35:24 +02:00
Andrew Bartlett
bfa753f1c0 s4:torture Add tests for prefixMap custom attribute handler 2009-04-24 09:17:29 +02:00
Andrew Bartlett
2ee9ee2c17 Merge branch 'master' of ssh://git.samba.org/data/git/samba into abartlet-devel 2009-04-24 09:17:08 +02:00
Jelmer Vernooij
af6316d150 Provide a ldb_global_init() function for compatibility with older versions of LDB 
(including the one in Samba 3).
 2009-04-23 18:59:37 +02:00
Andrew Bartlett
b82a204b9b More lcov code coverage generation work 2009-04-23 18:46:24 +02:00
nadezhda ivanova
90cc5e72ba Fix of a bug in the security.descriptor.as_sddl() method 
security.descriptor.as_sddl() method did not work correctly when invoked without
supplying the domain sid. Returned the same value as when the sid was provided.
Test added for this case in  libcli/security/tests/bindings.py

Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
 2009-04-23 18:21:25 +02:00
Andrew Bartlett
f579a2c666 s4:torture use common libcli/auth crypto code 2009-04-23 17:53:25 +02:00
Jelmer Vernooij
80420745ff Add a new non-convenience version of push_codepoint. 2009-04-23 17:50:18 +02:00
Andrew Bartlett
ae6af9ecbf Merge branch 'master' of ssh://git.samba.org/data/git/samba into abartlet-devel 2009-04-23 17:38:42 +02:00
Sam Liddicott
176302dc05 Add async support for reply_tcon* and ntvfs_connect 
smbsrv_tcon_backend no longer creates the ntvfs_request wrapper,
so smbsrv_reply_tcon* can now do this and then invoke ntvfs_connect
in the typical manner using SMBSRV_SETUP_NTVFS_REQUEST and
SMBSRV_CALL_NTVFS_BACKEND

Previously smbsrv_tcon_backend has been responsible for instantiating
the ntvfs_module_context to service a tree-connect request, and
then create an ntvfs_request wrapper around the smbsrv_request
and pass this to ntvfs_connect for the newly created ntvfs.

These actions could not be invoked asynchronously.

This meant that any client requests made while instantiating the
ntvfs module, including any composite's used during authentication
(or related client connections for the case of proxy modules)
would block other ntvfs modules and requests in the current process as
they executed a nested event loop to await completion.

Signed-off-by: Sam Liddicott <sam@liddicott.com>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
 2009-04-23 16:57:18 +02:00
Andrew Bartlett
f5dfd1a9a6 s4:test Include 'source4' in directories to find lcov in 2009-04-23 16:46:47 +02:00
Andrew Bartlett
53d491c9a4 Merge branch 'master' of ssh://git.samba.org/data/git/samba into abartlet-devel 2009-04-23 15:12:35 +02:00
Andrew Bartlett
af6298a84d s4:test Fix 'make lcov' in Samba4 2009-04-23 15:11:04 +02:00
Andrew Bartlett
0d4bd2c397 s4:samr Use ldb_context * rather than void * 2009-04-23 12:19:10 +02:00
Volker Lendecke
951de68721 Fix Coverity ID 628, Andrew B., please check! 2009-04-23 10:50:54 +02:00
Kai Blin
c93e2d9d43 errormap: Change the WBC_ERR_UNKNOWN_ERROR to map to NT_STATUS_UNSUCCESSFUL 
This allows us to distinguish on NTSTATUS level if we got a
WBC_ERR_UNKNOWN_ERROR or WBC_ERR_NSS_ERROR.
 2009-04-23 00:23:56 +02:00
Kai Blin
7a9be21916 errormap: Add wbcErr to NTSTATUS mappings 2009-04-22 00:14:45 +02:00
Kai Blin
57267a300f s4-build: Also search ../nsswitch for make (c|e)tags 2009-04-22 00:14:45 +02:00
Björn Jacke
1563796b44 s4:ldb: fix extrasemi compile warning 2009-04-22 00:03:23 +02:00
Björn Jacke
488bac4038 s4:ldb: do talloc_free and return NULL when we have no matches to return 2009-04-22 00:03:22 +02:00
Björn Jacke
42e3ae6550 libcli: fix a "not handled in switch" compile warning 
return NULL also for RAW_CLOSE_GENERIC
 2009-04-22 00:03:22 +02:00
Björn Jacke
c78a4ac7ce ѕ4: fix a "not handled in switch" compile warning 2009-04-22 00:03:21 +02:00
Jelmer Vernooij
0bd8b7c5ff Fix make install; don't install drsuapi.h and fix the location of 
credentials.h
 2009-04-21 16:50:20 +02:00
Stefan Metzmacher
4eb557bf25 Revert "Use an absolute path to ensure that we can always regenerate tables.c" 
This reverts commit b57c8ff440.

This actually breaks the merged build...
Doing a merged build and a samba4 build within the same
checkout, without a git clean -x -d -f (this removes everything that's
not checked into git! save files you don't want to delete!) running in the
toplevel directory, is not supported.

metze
 2009-04-21 15:37:36 +02:00
Jelmer Vernooij
2eff2de2f8 Move the security_descriptor utility code to the top-level. 2009-04-21 15:14:35 +02:00
Andrew Bartlett
f128bfd449 Add str() for policy_handles. 
Pair programmed with Jelmer
 2009-04-21 12:06:04 +02:00
Andrew Bartlett
6f60a6e71a python/dcerpc: Custom implementations of policy_handle.__init__ and policy_handle.__repr__ 
pair-programmed with Jelmer
 2009-04-21 11:53:00 +02:00
Andrew Bartlett
1856b999c8 python/rpc: Add custom GUID.__str__, GUID.__repr__, GUID.__init__ and GUID.__cmp__. 2009-04-21 11:14:11 +02:00
Wilco Baan Hofman
374b47fb45 Fix Samba 4 Makefile to also clean ../libgpo 
Signed-off-by: Günther Deschner <gd@samba.org>
 2009-04-20 23:16:17 +02:00
Wilco Baan Hofman
4626ffb27e Move some headers around to avoid confusion. 
Signed-off-by: Günther Deschner <gd@samba.org>
 2009-04-20 23:16:17 +02:00
Wilco Baan Hofman
75f830781f Move some headers around to avoid confusion. 
Signed-off-by: Günther Deschner <gd@samba.org>
 2009-04-20 23:16:17 +02:00
Wilco Baan Hofman
b939638dc7 Make the gpo files build for samba 4. 
Only gpt.ini remaining. Not suitable for merge yet, samba 3 is currently broken due to some changed public API.

Signed-off-by: Günther Deschner <gd@samba.org>
 2009-04-20 23:16:17 +02:00
Wilco Baan Hofman
68ff179b29 Add nt_token_check_sid convenience function. Map NT_USER_TOKEN to struct security_token. Fix build errors. 
Signed-off-by: Günther Deschner <gd@samba.org>
 2009-04-20 23:16:16 +02:00
Wilco Baan Hofman
ff33d50fab Add ../libgpo to samba4 srcdir list in rules.mk. 
Signed-off-by: Günther Deschner <gd@samba.org>
 2009-04-20 23:16:16 +02:00
Wilco Baan Hofman
248554370a Make gpo_ldap.c compatible with samba 4. Add ads_get_ldap_server_name() function to samba 3. Move prototypes to root libgpo where appropriate. 
gpo_ldap.c now compiles for both samba 3 and 4.

Signed-off-by: Günther Deschner <gd@samba.org>
 2009-04-20 23:16:16 +02:00
Wilco Baan Hofman
c441b7dda8 Add ads convenience functions to samba 4. Move gpo_ldap.c to root libgpo. 
Signed-off-by: Günther Deschner <gd@samba.org>
 2009-04-20 23:16:16 +02:00
Jelmer Vernooij
d2bd5895cf Move gpo_sec to top-level. 
Signed-off-by: Günther Deschner <gd@samba.org>
 2009-04-20 23:16:16 +02:00
Stefan Metzmacher
a98a9c39a2 s4:librpc/rpc: pass async as argument to dcerpc_ndr_request_send() 
The caller should decide if async is desired it should be harcoded per call.

metze
 2009-04-20 18:15:06 +02:00
Stefan Metzmacher
d0e6803218 s4:librpc/rpc: remove async argument from the sync dcerpc_request() function 
metze
 2009-04-20 18:15:00 +02:00
Stefan Metzmacher
f3c9d124bb s4:librpc/rpc: only use smb_trans for sync rpc calls 
Over named pipes we can only do one smb_trans at a time,
otherwise we're getting NT_STATUS_PIPE_BUSY.
Async rpc calls need to use smb_read/write only.

metze
 2009-04-20 18:14:59 +02:00
Stefan Metzmacher
e6b796b936 s4:torture/rpc: use dcerpc_ndr_request() for the object_uuid test 
As we want sync calls...

metze
 2009-04-20 18:14:59 +02:00
Stefan Metzmacher
900d569bed s4:librpc/rpc: ask for 0x2000 bytes in the ioctl case to match all othercases 
metze
 2009-04-20 18:14:58 +02:00
Andrew Bartlett
6c9caed481 Merge commit 'origin/master' into libcli-auth-merge-without-netlogond 2009-04-20 16:53:02 +02:00
Stefan Metzmacher
5beaf230ca s4:selftest: ignore smb2.lease test for now 
metze
 2009-04-20 15:15:40 +02:00
Jelmer Vernooij
5df2795ffc Add a unit test for security_descriptor.as_sddl() without arguments. 2009-04-20 15:10:29 +02:00
Jelmer Vernooij
294359b7bc Make domain sid argument to as_sddl() optional. 2009-04-20 15:10:29 +02:00
Jelmer Vernooij
03abc846ee Fix the valid NetBIOS name tests. 2009-04-20 11:11:25 +02:00
Günther Deschner
5f0c9c57f5 s4-smbtorture: test all levels in test_GetJob(). 
Guenther
 2009-04-20 00:59:36 +02:00
Andrew Bartlett
7a54cd041e Remove unused headers 2009-04-19 22:01:09 +02:00
Günther Deschner
fe2828c353 s4-smbtorture: Skip Job pause and resume on paused printers for Samba 3 for now. 
Guenther
 2009-04-17 17:27:42 +02:00
Günther Deschner
cb9c0cefaf s4-smbtorture: rework test_EnumPrinterDrivers() a little to succeed with s3. 
Yes, I feel dirty for this but promise to come back and fix appropriately.

Guenther
 2009-04-17 17:25:14 +02:00
Günther Deschner
81253ec146 s4-smbtorture: Fix RPC-SPOOLSS-WIN for printers with a lot of jobs in the queue. 
Guenther
 2009-04-17 17:23:59 +02:00
Günther Deschner
32add69632 s4-smbtorture: disable CreateUser2 tests when running RPC-SAMR-PASSWORDS-PWDLAST 
against Samba3.

Samba 3 does not (yet) get all the ACB_flag settings right upon creation.

Guenther
 2009-04-17 11:15:58 +02:00
Günther Deschner
c794ba71b7 s4-smbtorture: add LSA-LOOKUPSIDS to verify bug #6263. 
Guenther
 2009-04-17 01:32:45 +02:00
Günther Deschner
b0a0d2a0ae s4-smbtorture: Fix crash in RPC-LSA-LOOKUP 
Guenther
 2009-04-17 01:32:44 +02:00
Andrew Bartlett
b57c8ff440 Use an absolute path to ensure that we can always regenerate tables.c 
I had trouble building Samba3 in a merged build, perhaps because I was
also building Samba4 in that tree.

Andrew Bartlett
 2009-04-16 12:06:35 +10:00
Andrew Bartlett
dbcd80ed01 Fix Samba4 build errors with common libcli/samsync 2009-04-16 10:17:17 +10:00
Günther Deschner
e6aa3f2d09 s4-smbtorture: Fix crash bugs in RPC-SAMR_ACCESSMASK. 
Also disable security descriptor based tests while testing samba3.

Guenther
 2009-04-15 22:50:05 +02:00
Günther Deschner
f1fd39c09f s4-smbtorture: define TORTURE_DEFAULT_SERVICE and set to netlogon. 
Guenther
 2009-04-15 22:48:54 +02:00
Andrew Bartlett
4678d1c6f4 Merge branch 'master' of ssh://git.samba.org/data/git/samba into libcli-auth-merge-without-netlogond 2009-04-15 14:36:13 +10:00
Matthias Dieter Wallnöfer
92d321006d Enable software rollout through AD 
This enables the sofware rollout feature in Samba4

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
 2009-04-15 12:27:02 +10:00
Jeremy Allison
0f1b402848 Try and fix the S4 build - include thread includes. 
Jeremy.
 2009-04-14 13:02:29 -07:00
Günther Deschner
a2ef1fee69 s4-smbtorture: make sure samba3 does not regress in EnumServicesStatusW call. 
Guenther
 2009-04-14 12:13:32 +02:00
Günther Deschner
4a2dfbf3c9 s4-smbtorture: print SPOOLSS_JOB_CONTROL flags in RPC-SPOOLSS test. 
Guenther
 2009-04-14 12:13:08 +02:00
Andrew Bartlett
d78cdc5fe2 Rework to use new API for common netlogon credential chaining 2009-04-14 16:23:45 +10:00
Andrew Bartlett
1cee31f588 Link in the common samsync decryption code 2009-04-14 16:23:45 +10:00
Andrew Bartlett
5095d7b1c8 Rework Samba4 to use the new common libcli/auth code 
In particular, this is the rename from creds_ to netlogon_creds_, as
well as other links to use the new common crypto.

Andrew Bartlett
 2009-04-14 16:23:44 +10:00
Andrew Bartlett
f23eea294a Push schannel_state.c into the top level. 
This is the server side state for netlogon credential chaining

Andrew Bartlett
 2009-04-14 16:23:43 +10:00
Andrew Bartlett
df8e1908ef Use common samsync delta decryption functions in libnet_samsync.c 
Andrew Bartlett
 2009-04-14 16:23:43 +10:00
Andrew Bartlett
6c8f7e4005 Port Samba4 to the new combined libcli/auth functions 
For example, some of the new shared functionality was previously in the wkssvc
torture test.

Andrew Bartlett
 2009-04-14 16:23:41 +10:00
Andrew Bartlett
a19966375a Move ntlm_check.h into the common libcli/auth 2009-04-14 16:23:41 +10:00
Andrew Bartlett
9feea7fa4c Move MSRPC-PARSE into the common libcli/auth 
This is a depenceny of smbencrypt.c
 2009-04-14 14:19:39 +10:00
Andrew Bartlett
872cb0257c Move DRSUAPI per-attribute decryption into a common file 
This file (contining metze's decryption routines) is now also be used by
Samba3's DRSUAPI implementation

Andrew Bartlett
 2009-04-14 14:19:39 +10:00
Andrew Bartlett
927a8b3304 Move libcli/auth to the top level 2009-04-14 14:19:39 +10:00
Andrew Bartlett
41e4f12c48 Merge branch 'master' of ssh://git.samba.org/data/git/samba into master-devel 2009-04-14 10:55:53 +10:00
Andrew Bartlett
82ad66e9df s4:ldb Make it possible to re-run ldap.py again 
The parentGUID test didn't clean up after itself correctly.

Andrew Bartlett
 2009-04-14 10:52:33 +10:00
Günther Deschner
1dbb6530fa s4-smbtorture: fix two valgrind warnings. 
Guenther
 2009-04-13 23:45:45 +02:00
Günther Deschner
56f5105400 s4-smbtorture: disable test_SecondaryClosePrinter when running against s3 for now. 
Guenther
 2009-04-13 23:45:37 +02:00
Günther Deschner
0f76e2d0bd s4-smbtorture: move test_ReplyOpenPrinter from RPC-SPOOLSS to RPC-SPOOLSS-NOTIFY. 
Guenther
 2009-04-13 23:45:29 +02:00
Günther Deschner
81aca44d30 s4-smbtorture: use printerinfo level 1 name, not description in 
test_EnumPrinters_old().

Guenther
 2009-04-13 16:10:50 +02:00
Stefan Metzmacher
971c30a4fc s4:rpc_server: split out the parsing of the ncacn_packet from analyzing of the content 
metze
 2009-04-10 19:38:30 +02:00
Stefan Metzmacher
225a4f7cc2 s4:rpc_server: report available output for all replies 
metze
 2009-04-10 19:38:30 +02:00
Günther Deschner
c0b71db8e1 s4-smbtorture: perform the ntsvcs devicelist tests against the Spooler service. 
Guenther
 2009-04-10 01:06:56 +02:00
Günther Deschner
693c2e9529 s4-smbtorture: add test_EnumDependentServicesW() to RPC-SVCCTL. 
Guenther
 2009-04-09 16:42:22 +02:00
Günther Deschner
1632a4ebab s4-smbtorture: add test_QueryServiceObjectSecurity() to RPC-SVCCTL test. 
Guenther
 2009-04-09 14:52:30 +02:00
Günther Deschner
9945d15a5d s4-smbtorture: add test_QueryServiceConfigW() to RPC-SVCCTL. 
Guenther
 2009-04-09 14:33:37 +02:00
Günther Deschner
544113f9dd s4-smbtorture: add test_QueryServiceStatus() to RPC-SVCCTL. 
Guenther
 2009-04-09 14:33:28 +02:00
Andrew Tridgell
65ad2ced60 Merge branch 'wspp-schema' 2009-04-09 14:40:19 +10:00
Andrew Tridgell
9d50c6b603 enable testing of possibleInferiors generation 2009-04-09 14:37:52 +10:00
Andrew Tridgell
87506b4a19 make the memory usage of possibleInferiors much more efficient 2009-04-09 14:29:36 +10:00
Andrew Tridgell
26f5225ae2 we should not be supplying a generated attribute in our schema 2009-04-09 13:46:35 +10:00
Andrew Tridgell
37254b7a76 fixed the possibleInferiors calculation so it now passes the test 
We are probably still using more memory here than we need to. That
needs to be looked at.
 2009-04-09 13:46:18 +10:00
Andrew Tridgell
481fb8aa13 slightly nicer output in our possibleInferiors test code 2009-04-09 13:45:23 +10:00
Andrew Tridgell
6abca12aa0 hook the new possibleInferiors calculation into the schema 
We now generate possibleInferiors at startup, and return it when
requested
 2009-04-09 13:45:04 +10:00
Günther Deschner
0be30e8ced s4-smbtorture: fix test_ReportEventLog in RPC-EVENTLOG. 
Guenther
 2009-04-08 19:45:58 +02:00
Andrew Bartlett
db29383797 Make the schema_inferiors generation code to compile 
Sadly it still segfaults at this stage

Andrew Bartlett
 2009-04-08 23:18:49 +10:00
Günther Deschner
1f6646e135 s4-smbtorture: Small fix for RPC-SPOOLSS-WIN to deal with driver-less printers. 
The getdriver query failure should only be critical when there is actually a
driver associated to a printer.

Guenther
 2009-04-08 13:51:26 +02:00
Günther Deschner
8e3145e551 svcctl: use offered/needed for buffer sizes as in spoolss. 
Guenther
 2009-04-08 11:03:53 +02:00
Andrew Tridgell
217628f881 first cut at a C version of the possible inferiors code 2009-04-07 16:34:36 +10:00
Andrew Tridgell
b202911123 don't load @ATTRIBUTES if we have an override handler in place 2009-04-07 16:34:18 +10:00
Andrew Tridgell
9181637170 fixed internal handling of attribute deletion 2009-04-07 16:33:54 +10:00
Jelmer Vernooij
213249ceab Improve formatting in Python file. 2009-04-06 00:25:08 +02:00
Jelmer Vernooij
b1db78c595 Make valid_netbios_name() check a bit stricter. 2009-04-06 00:25:03 +02:00
Andrew Bartlett
6e6094d780 s4:schema Don't free mem_ctx before it is initilised 2009-04-03 10:33:12 +11:00
Andrew Bartlett
2f04b7d29a Merge branch 'master' of ssh://git.samba.org/data/git/samba into wspp-schema 2009-04-03 08:28:22 +11:00
Andrew Bartlett
354ba5e2e3 s4:schema Update Windows 2008 schema from Microsoft to latest version 2009-04-03 08:18:14 +11:00
Andrew Bartlett
c7ed9bc477 Remove minschema generated schema - we now generate from setup/ad-schema/ 2009-04-03 08:15:25 +11:00
Andrew Bartlett
1a17fcdf66 Add parentGUID as an allowed attribute in samba4Top 
This is required to get provision against OpenLDAP working again
 2009-04-03 08:14:42 +11:00
Andrew Tridgell
9539e2b508 major upgrade to the ldb attribute handling 
This is all working towards supporting the full WSPP schema without a
major performance penalty.

We now use binary searches when looking up classes and attributes. We
also avoid the loop loading the attributes into ldb, by adding a hook
to override the ldb attribute search function in a module. The
attributes can thus be loaded once, and then saved as part of the
global schema. 

Also added support for a few more key attribute syntaxes, as needed
for the full schema.
 2009-04-02 16:42:21 +11:00
Zack Kirsch
108cf27bb1 s4 torture: Addition to RAW-BENCH-LOCK to take a configurable number of locks before starting the test 
This can be useful for benchmarking as well as stress testing.
 2009-04-01 20:59:52 -07:00
Zach Loafman
9d95f8704d s/NT_STATUS_WIN7_INVALID_RANGE/NT_STATUS_INVALID_LOCK_RANGE/g 2009-04-01 20:59:52 -07:00
Tim Prouty
f92140b716 s4 torture: Remove unused parameter 2009-04-01 20:02:31 -07:00
Tim Prouty
5000640bf4 s4 torture: Add new streams oplock test 2009-04-01 20:02:31 -07:00
Andrew Tridgell
1bc9c39235 Merge commit 'master/master' into wspp-schema 2009-04-02 10:17:32 +11:00
Zach Loafman
91e75ea8f6 s4:torture/smb2: Add torture tests for lease breaks, durable opens. 2009-04-01 08:30:25 -07:00
Zach Loafman
afa71fbad9 s4:smb2: Add lease break support for SMB2.1 
Add the structures and marshalling for the lease break variants of the
oplock break / oplock break ack messages.
 2009-04-01 08:30:25 -07:00
Andrew Tridgell
2fe17ae61e possibleInferiors is a generated attribute - we can't pull it over DRS 
or from ldb
 2009-03-31 16:31:16 +11:00
Andrew Tridgell
15e6def45d Merge branch 'master' into wspp-schema 2009-03-31 15:53:17 +11:00
Andrew Tridgell
79b7ba9b10 change ldb version number (as ldb_module structure has changed) 2009-03-31 15:14:09 +11:00
Andrew Tridgell
16a1903c54 use the prepare_commit op in the partition code 
This makes multi-partition ldb's much safer
 2009-03-31 15:08:36 +11:00
Andrew Tridgell
6688ee80b2 added support for a prepare_commit() op in ldb modules 
This op will be used by the partition module to give us good
transaction semantics across the 4 partitions that sam.ldb uses.
 2009-03-31 15:07:54 +11:00
Andrew Tridgell
631e688c82 Merge branch 'master' into wspp-schema 2009-03-31 11:58:37 +11:00
Zach Loafman
12a8ed07b4 s4:torture/smb2: Add torture tests for leases. 2009-03-28 01:01:47 -07:00
Zach Loafman
92f3686c96 s4:smb2: Add rudimentary SMB2.1 lease support to libcli 
Add the structures, constants, and marshalling for SMB2.1 leases.
 2009-03-28 01:01:47 -07:00
Stefan Metzmacher
742496d252 s4:torture/smb2: fix compiler warnings and bugs 
metze
 2009-03-27 13:26:50 +01:00
Stefan Metzmacher
5c9e90eb7e s4:torture/smb2: fix the build 
We move prototypes of _PUBLIC_ functions into /dev/null,
as we want public function to have handwritten prototypes.

see proto_header_template in build/make/templates.mk...

metze
 2009-03-27 13:26:43 +01:00
Stefan Metzmacher
ee8bc9659c s4:build: make it possible to pass down CTAGS_OPTIONS or ETAGS_OPTIONS 
metze
 2009-03-27 12:20:09 +01:00
Zach Loafman
a9bc6a3d45 Add durable open / oplock interaction test. Rather than give it a chance to disconnect, Win7 will break a batch oplock immediately on contention. 2009-03-26 16:42:25 -07:00
Zach Loafman
7278c549ea Reorganize old persistent_handles test into durable_open.c, turn it into a suite instead of a solo test (in anticipation of more tests). 2009-03-26 16:42:10 -07:00
Andrew Tridgell
049534336c Merge branch 'master' of ssh://git.samba.org/data/git/samba 2009-03-27 09:32:43 +11:00
Andrew Tridgell
d88ced1dcc added a --wspp option 
Adding --wspp to possibleInferiors.py forces it to use the WSPP
documented algorithm, which doesn't match windows behaviour
 2009-03-27 09:31:51 +11:00
Jelmer Vernooij
494e471d74 configure: Use m4 defines for minimum library versions rather than shell 
variables, so the values rather than the variable names show up in
configure output.
 2009-03-26 16:28:45 +01:00
Jelmer Vernooij
30a3dec549 Merge branch 'master' of ssh://git.samba.org/data/git/samba into displaysec 2009-03-26 15:28:18 +01:00
Stefan Metzmacher
853f9283fb s4:heimdal_build: provide heimdal_version and heimdal_long_version symbols 
metze
 2009-03-26 15:01:04 +01:00
Stefan Metzmacher
510e37155e s4:heimdal_build: define HAVE_STRLCPY, HAVE_STRLCAT, HAVE_STRCASECMP and HAVE_MKSTEMP 
metze
 2009-03-26 15:01:03 +01:00
Stefan Metzmacher
9521801dc8 s4:kdc: use krb5_data_free() 
metze
 2009-03-26 15:01:03 +01:00
Stefan Metzmacher
4d96417931 s4:auth/credentials: use krb5_data_free() 
metze
 2009-03-26 15:01:02 +01:00
Stefan Metzmacher
8a264753a1 s4:auth/credentials: include gssapi/gssapi_krb5.h 
metze
 2009-03-26 15:01:02 +01:00
Andrew Tridgell
3f37342bc0 fixed possibleinferiors.py so it matches windows behaviour 
This test code builds the possibleInferiors for every class in the
schema on a target machine, and compares it to the servers
possibleInferiors attribute.  

The MS-ADTS spec describes how to calculate possibleInferiors for a
object, but it seems to have some bugs. The spec says that we need to
use AUXCLASSES, and it does not mention the use of the SUBCLASS
tree. In trying to match windows behaviour, I found that I needed to
ignore the AUXCLASSES and build a SUBCLASSES tree.
 2009-03-26 22:10:02 +11:00
Jelmer Vernooij
c42fc5e103 display_sec: Move to common libcli/security directory. 2009-03-25 21:29:13 +01:00
Jelmer Vernooij
9a61758c1e Merge branch 'master' of ssh://git.samba.org/data/git/samba into displaysec 2009-03-25 20:51:29 +01:00
Günther Deschner
2bc9ffa9fb s4-install: add new location of generated dcerpc headers to headermap file. 
Guenther
 2009-03-24 16:08:35 +01:00
Günther Deschner
8d901caf35 move dcerpc.idl to main directory. 
Guenther
 2009-03-24 11:14:06 +01:00
Andrew Tridgell
2a8f367b0f the start of a possibleInferiors test suite 
we haven't implemented possibleInferiors yet. This test is meant to
help us understand how it works. It tries to construct
possibleInferiors via searches on other attributes, and compares it to
the servers constructed possibleInferiors attribute for each class in
the servers schema.

see [MS-ADTS] section 3.1.1.4.5.21
 2009-03-24 16:28:39 +11:00
Andrew Tridgell
7f113904eb Merge branch 'master' of ssh://git.samba.org/data/git/samba 2009-03-23 11:47:38 +11:00
Stefan Metzmacher
8a6f91c910 LDAP-CLDAP: remove temporary debug statements... 
metze
 2009-03-22 12:20:45 +01:00
Stefan Metzmacher
593ab6ac00 s4:selftest: rename SMBD_VALGRIND => SAMBA_VALGRIND 
metze
 2009-03-21 10:44:40 +01:00
Stefan Metzmacher
6ef1442360 s4:smbd: the name of the binary is "samba" now 
metze
 2009-03-21 10:44:40 +01:00
Matthias Dieter Wallnoefer
62ab39dde3 s4/provision: Use existing serverrole variable. 
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
 2009-03-21 03:07:00 +01:00
Jelmer Vernooij
960b755315 pyldb: Let conversion to LDIF up to the user of the API rather than doing 
it implicitly.
 2009-03-21 02:19:25 +01:00
Jelmer Vernooij
de1e3e2cf0 Remove unnecessary duplication of string in memory. 2009-03-21 01:00:18 +01:00
Jelmer Vernooij
8f4e4d2e30 Adapt Zahari's test to the generic LDB Python tests. 2009-03-20 22:58:15 +01:00
zahari
4fff36f618 Setting nTSecurityDescriptor via LDAP fails 
Fix for the problem was substitute talloc_strndup() with
talloc_memdup(), allocate 1 more character and put null character
('\0') in the extra place so data copied is null terminated.

Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
 2009-03-20 22:54:15 +01:00
Jelmer Vernooij
ee577ef0ee Add more comments. 2009-03-20 22:52:57 +01:00
Jelmer Vernooij
ca202cf464 Merge branch 'master' of ssh://git.samba.org/data/git/samba into displaysec 2009-03-20 16:40:09 +01:00
Matthias Dieter Wallnoefer
2de464a765 Fix uninstallman. 
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
 2009-03-20 16:22:02 +01:00
Stefan Metzmacher
da46c37100 s4:build: include ../libcli/cldap/config.mk 
This fixes commit 84a140f187,
sorry!

metze
 2009-03-20 10:16:00 +01:00
Andrew Bartlett
13be4d7ff4 s4:schema Remove 'cn' from the final output of ms_schema.py 
This avoids one more point of difference between this an the output
from minschema and fullschema

Andrew Bartlett
 2009-03-20 17:32:19 +11:00
Andrew Bartlett
37f130fd89 s4:fullschema Use server-side sort to make the output deterministic 2009-03-20 16:47:34 +11:00
Andrew Bartlett
4a45b0da57 s4:ldb Allow paged_searches to be mixed with other controls 
I want to mix this with the server-side sort in particular.

Andrew Bartlett
 2009-03-20 16:45:52 +11:00
Andrew Bartlett
f696bb81f8 s4: Remove autogenerated attributes from minschema and fullschema output 
These attributes will be generated by Samba on import, and do not need
to be in the schema file.

Andrew Bartlett
 2009-03-20 16:28:42 +11:00
Andrew Bartlett
653dd024a6 Add minschema like tool to extract and dump the full schema from AD 2009-03-20 16:28:41 +11:00
Andrew Bartlett
5bfed623f5 s4:minschma Fix aggregate schema generation in minschema 
The conversion from EJS to python I did with Jelmer this morning was
not quite complete, due mostly to the difference between print in EJS
and python (python implies a newline).

Andrew Bartlett
 2009-03-20 16:28:41 +11:00
Andrew Bartlett
6906c01cac s4:ldb Ensure to pass down options to LDB from python 
This is needed for things such as to load modules, like the
paged_searches module.

Andrew Bartlett
 2009-03-20 16:28:41 +11:00
Andrew Bartlett
1dc5b90e86 s4:ldb Fix the paged_searches module 
This simplifies the code, removes presumptions about being the only
control in the reply, and allows it to function against Windows 2008.

For searches which did not require a paged result, the module was
simply returning a failure when the compleated search did not include
a paged result control.

Andrew Bartlett
 2009-03-20 16:28:40 +11:00
Andrew Bartlett
27c6eca04c Merge branch 'master' of ssh://git.samba.org/data/git/samba into wspp-schema 2009-03-20 13:22:08 +11:00
Jelmer Vernooij
5fe2b28f45 Merge branch 'master' of git://git.samba.org/samba into minschema 2009-03-20 01:30:36 +01:00
Jelmer Vernooij
ec9aeeab00 Fix up minschema after the conversion from JavaScript. 
Pair programmed over the phone with Andrew :-)
 2009-03-20 01:29:31 +01:00
Jelmer Vernooij
722dc9eed3 pyldb: Improve exception message when a list is expected. 2009-03-20 00:33:43 +01:00
Andrew Tridgell
9709ddcd3d Merge branch 'master' of ssh://git.samba.org/data/git/samba 2009-03-20 10:01:17 +11:00
Stefan Metzmacher
84a140f187 move source4/libcli/cldap => libcli/cldap 
metze
 2009-03-19 16:25:59 +01:00
Stefan Metzmacher
c600e8ef42 s4:cldap: rewrite the cldap library based on tsocket 
metze
 2009-03-19 16:25:59 +01:00
Stefan Metzmacher
2e0e416676 lib/tsocket: add generic socket abstraction layer 
This will replace source4/lib/socket/.

metze
 2009-03-19 15:01:12 +01:00
Andrew Tridgell
844a1b3cd2 flush after showing the prompt in smbclient 2009-03-19 16:07:07 +11:00
Andrew Tridgell
d380c49791 use the tevent nesting code to avoid the uid problem in the VFS 
backend

The vfs_unixuid module changes the uid of the process when executing
operations on behalf of the user. Within the VFS backend we may rely
on semi-async calls, such as winbind calls, which will call the event
loop again. To cope with this we need to ensure that while inside
those calls we revert the uid to root, then revert back to the
connected user when we have finished with the semi-async calls.
 2009-03-19 11:23:49 +11:00