Andrew Tridgell
3ff3612e29
s4-kcc: simplify the ReplicaGetInfo implementation a bit
2010-01-16 14:10:43 +11:00
Andrew Tridgell
900fea322c
s4-kcc: squash a warning
2010-01-16 14:10:42 +11:00
Andrew Tridgell
3a9b33b487
s4-drs: better debug info when security checks fail
...
show the security token of the user at debug level 2
2010-01-16 14:10:42 +11:00
Andrew Tridgell
5efff3ad6a
s4-dsdb: require admin access for DsReplicaGetInfo
2010-01-16 14:10:42 +11:00
Andrew Tridgell
5bfeed89da
s4-drs: framework for DsGetReplInfo(), includes the DS_REPL_INFO_NEIGHBORS infoType.
...
This patch includes the framework for the implementation of all infoTypes of
the DsGetReplInfo() call, and includes the implementation for the first one,
the DS_REPL_INFO_NEIGHBORS.
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-01-16 14:10:42 +11:00
Andrew Tridgell
22d92157e3
s4-drs: give better debug info on unsupported DRS calls
2010-01-16 14:10:41 +11:00
Erick Nogueira do Nascimento
48bdf3e608
s4-drs: torture test for DsGetReplInfo() (RPC-DSGETINFO test).
...
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-01-16 14:10:41 +11:00
Andrew Tridgell
51bf383c26
s4-dsdb: added isGlobalCatalogReady
...
needed for dcdiag.exe
2010-01-16 14:10:41 +11:00
Jeremy Allison
f85b6ee90b
Second part of bug 7045 - Bad (non memory copying) interfaces in smbc_setXXXX calls.
...
Protect against SMB_STRDUP of null...
Jeremy.
2010-01-15 17:33:24 -08:00
Jeremy Allison
2d41b1ab78
Fix bug 7045 - Bad (non memory copying) interfaces in smbc_setXXXX calls.
...
In smbc_free_context libsmbclient just called free() on the string options
so it assumes the callers have malloced them before setting them via smbc_set
calls.
Change to corretly malloc/free string options to the library.
Jeremy
2010-01-15 17:22:35 -08:00
Andrew Tridgell
a56ede9027
s4-ldb: cope with bad ptr alignment in ldb_index.c
...
We can't assume that a rec_ptr will come back from a tdb traverse with
alignment sufficient for a pointer.
2010-01-16 09:34:27 +11:00
Kai Blin
5c016ad88e
s4 selftest: Ignore more winbind test known to fail
2010-01-15 02:09:05 +01:00
Günther Deschner
9d881f4cfb
s4-smbtorture: add setup_schannel_netlogon_pipe() function.
...
Guenther
2010-01-15 00:53:16 +01:00
Jeremy Allison
6653cc4323
Fix bug #7036 - net rpc getsid fails in hardened windows environments.
...
Fix suggested by Dave.Daugherty@Centrify.com .
2010-01-14 15:39:30 -08:00
Andreas Schneider
33a4739090
s4-torture: Migrate ntp_signd test to tsocket.
...
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-01-14 21:37:48 +01:00
Olivier Sessink
3c42e11ff3
Part 4 of bug #7028 - include scannedonly VFS module
...
Fix some issues with handling names ending in '/'.
2010-01-14 12:13:14 -08:00
Günther Deschner
e635b0074c
s3-libsmbclient: Fix crash bug in SMBC_parse_path().
...
Patch from Tim Waugh <twaugh@redhat.com>.
This resolves https://bugzilla.redhat.com/show_bug.cgi?id=552658
LIBSMBCLIENT-OPENDIR torture test checks this as well.
Guenther
2010-01-14 19:48:33 +01:00
Günther Deschner
d95ad11bc5
s4-smbtorture: add rather simple libsmbclient torture testsuite.
...
Guenther
2010-01-14 19:48:29 +01:00
Michael Adam
8573471154
s3:auth: fix account unlock regression introduced with fix for bug #4347
...
By an oversight, the patchset for #4347 made the unlocking of a locked
account after the lockout duration ineffective.
Thanks to Björn for finding this!
Michael
2010-01-14 15:48:09 +01:00
Kai Blin
743adfda91
s3 selftest: Enable the WINBIND-STRUCT tests
2010-01-14 15:18:35 +01:00
Kai Blin
cf38a1f850
s3 test: Fix WINBINDD-STRUCT tests
...
The struct-based tests are working in make selftest, make them work in plain
"make test" as well.
2010-01-14 15:18:35 +01:00
Kai Blin
89e6eac290
s3 selftest: Fix LOOKUP_SID test.
...
WINBINDD_LIST_USERS does not give a domain name if we're a DC and the user is
from our domain.
2010-01-14 15:18:35 +01:00
Kai Blin
e95c04f0f1
s3 selftest: Fix WINBINDD_LIST_GROUPS test
...
If there's no groups in the database, there are no entries in extra_data. This
caused WINBINDD_LIST_GROUPS test to fail. Use the fact that
WINBINDD_LIST_GROUPS now reports the number of groups in data.num_entries to
identify the "no groups" case.
2010-01-14 15:18:35 +01:00
Kai Blin
932d4a874b
s3 winbindd: Return number of groups in data.num_entries for WINBINDD_LIST_GROUPS
...
This allows to test if there's something wrong with the group list in
extra_data or if there's simply no groups in the database.
Volker, please check.
2010-01-14 15:18:34 +01:00
Kai Blin
a4f21d5dc8
s3 selftest: Allow the enumeration of users and groups
...
This fixes the WINBINDD_GETPWENT test.
2010-01-14 15:18:34 +01:00
Kai Blin
a6015a858d
s3 selftest: Fix the WINBINDD_GETDCNAMEe test.
...
The WINBINDD_GETDCNAME test expected an NSS_STATUS_SUCCESS return from all
calls. However, this does not apply for BUILTIN and the DC's own domain.
Make the test work again by skipping those two.
2010-01-14 15:18:34 +01:00
Kai Blin
36db924446
s3 winbindd: Get WINBINDD_CHECK_MACHACC torture test to work again.
...
WINBINDD_CHECK_MACHACC used to report an NTSTATUS error and appropriate error
strings. Make this work again.
2010-01-14 15:18:34 +01:00
Matthias Dieter Wallnöfer
b1d2bb3e51
s4:provision_users.ldif - Add a comment that some objects under "Users" are now located elsewhere
...
This is needed due to the new RID/SID distribution system
2010-01-14 10:58:08 +01:00
Matthias Dieter Wallnöfer
face5d3030
s4:provision_users.ldif - Add objects for IIS
...
Some WSPP locations point out that beginning with Windows Server 2008 they're
also per default present.
Compared against Windows Server 2008
2010-01-14 10:58:08 +01:00
Matthias Dieter Wallnöfer
9ac39b659f
s4:provision_users.ldif - Add additional BUILTIN objects
...
Compared against Windows Server 2008
2010-01-14 10:58:08 +01:00
Matthias Dieter Wallnöfer
2a05dd6fcc
s4:provision_users.ldif - add the restant part of the objects needing for RODC support
...
RODC = Read Only Domain Controllers
Compared against Windows Server 2008
2010-01-14 10:58:07 +01:00
Matthias Dieter Wallnöfer
71357053bb
s4:provision_users.ldif - Fix up errors on existing entries
...
Compared against Windows Server 2008
2010-01-14 10:58:07 +01:00
Matthias Dieter Wallnöfer
81053e9124
s4:provision_users.ldif - Simple reordering
...
Sorted according the SID - easier for later enhancements.
2010-01-14 10:58:07 +01:00
Matthias Dieter Wallnöfer
a0d7f3e344
s4:provision_users.ldif - Remove system objects from the wrong place
...
Objects like the "Cryptographic Operators", "Event Log Readers" don't belong
here but into the builtin domain.
2010-01-14 10:58:06 +01:00
Matthias Dieter Wallnöfer
40bc48dfa9
s4:SAMR RPC - Fix the criteria for group searches
...
This should match the MS-SAMR documentation (section 3.1.5.5.1.1)
2010-01-14 10:58:06 +01:00
Andrew Tridgell
c663af8b7b
s4-idl: get rid of the operation specific DRS options flags
...
It was confusing to have several sets of incomplete options when WSPP
uses a single set.
2010-01-14 15:37:59 +11:00
Andrew Tridgell
74a5719614
s4-torture: switch smbtorture to the generic DRS options
2010-01-14 15:37:59 +11:00
Andrew Tridgell
2008d24e91
s4-drs: switch the DRS server to the generic DRS options flags
2010-01-14 15:37:59 +11:00
Andrew Tridgell
a5d6117065
s4-torture: switch to generic DRS options flags
2010-01-14 15:37:59 +11:00
Andrew Tridgell
88ec10b757
s4-drepl: switch drepl over to using the generic DRS options flags
...
WSPP uses a single set of flags for all these DRS operations.
2010-01-14 15:37:59 +11:00
Andrew Tridgell
60c5a5f39f
s4-idl: update the DRS_OPTIONS bits based on the latest WSPP docs
2010-01-14 15:37:59 +11:00
Fernando J V da Silva
6f806b7079
s4-drs: Uses dsdb_load_partition_usn() with urgent_uSN in s4 code
...
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-01-14 15:37:59 +11:00
Fernando J V da Silva
e30d009965
s4-drs: Store uSNUrgent for Urgent Replication
...
When a object or attribute is created/updated/deleted, according
to [MS-ADTS] 3.1.1.5.1.6, it stores the uSNUrgent on @REPLCHANGED
for the partitions that it belongs.
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-01-14 15:37:58 +11:00
Stefan Metzmacher
ac224452b9
s3:pdb_ldap: restore Samba 3.0.x behavior and use the first "uid" value.
...
See bug #6157 for more details.
metze
Signed-off-by: Stefan Metzmacher <metze@samba.org>
(cherry picked from commit 25806f43dd
)
2010-01-14 02:27:34 +01:00
Stefan Metzmacher
915b7552b7
s3:smbldap: add smbldap_talloc_first_attribute()
...
metze
Signed-off-by: Stefan Metzmacher <metze@samba.org>
(cherry picked from commit c992127f8a
)
2010-01-14 02:26:29 +01:00
Stefan Metzmacher
204e4b26ae
s4:dsdb: use validate_update module
...
metze
2010-01-13 16:06:41 +01:00
Stefan Metzmacher
1f2efef214
s4:dsdb/schema: add dsdb_syntax_OID_validate_ldb()
...
This is a very heavy weight way of checking this syntax,
but it's very complex and using the existing function
should be ok for now. We can optimize it later.
metze
2010-01-13 16:06:41 +01:00
Stefan Metzmacher
f0fed6cadd
s4:dsdb/schema: add dsdb_syntax_DN_STRING_validate_ldb()
...
metze
2010-01-13 16:06:40 +01:00
Stefan Metzmacher
83baa44c67
s4:dsdb/schema: add dsdb_syntax_DN_BINARY_validate_ldb()
...
metze
2010-01-13 16:06:40 +01:00
Stefan Metzmacher
39dda462cd
s4:dsdb/schema: add dsdb_syntax_DN_validate_ldb()
...
metze
2010-01-13 16:06:39 +01:00