1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-28 07:21:54 +03:00
Commit Graph

56589 Commits

Author SHA1 Message Date
Matthias Dieter Wallnöfer
44df2488e3 s4: fix various warnings (not "const" related ones) 2009-10-02 15:33:48 +02:00
Matthias Dieter Wallnöfer
f390daef47 s4/srvsvc: deactivate a "ntvfs_connect" with a wrong parameter
In the srvsvc code for s4 (NTVFS module) there exists a call to "ntvfs_connect"
which is performed with a totally wrong argument. Since I'm not able to fix
this, I commented it out and added a "FIXME" comment.
2009-10-02 15:33:40 +02:00
Matthias Dieter Wallnöfer
d87cfc7cc4 s4:provision_users.ldif - Put potential primary groups in front of the file
(So they can be always found by the SAMLDB module)
2009-10-02 15:26:02 +02:00
Andrew Tridgell
3f59705a71 Revert "s4:ldb-samba Use temp talloc contexts and talloc_steal avoid leaks."
This reverts commit 38f87f40bf.
2009-10-02 22:40:50 +10:00
Andrew Tridgell
35ff1f6f1f Revert "s4:ldb Fix ldb_list_find() folowing the change from char * to TDB_DATA"
This reverts commit f0c2c9854c.
2009-10-02 22:40:31 +10:00
Andrew Tridgell
a0c82f17f8 Revert "s4:ldb always talloc_free() the ldb_ldif_write context, even on success"
This reverts commit a610843e9f.
2009-10-02 22:40:02 +10:00
Andrew Tridgell
959eff9206 Revert "s4:ldb Remove LTDB_PACKING_FORMAT_NODN"
This reverts commit bcbf0ae1e7.
2009-10-02 22:39:44 +10:00
Andrew Tridgell
52b10ff3c5 Revert "s4-ldb: merged with master"
This reverts commit 14c9070322.
2009-10-02 22:39:19 +10:00
Andrew Tridgell
dfafd58348 Revert "s4-ldb: overallocate idxptr to reduce memory fragmentation"
This reverts commit e7846f69ca.
2009-10-02 22:39:10 +10:00
Andrew Tridgell
81c193da09 Revert "s4-ldb: fixed a memory leak"
This reverts commit c7358d9890.
2009-10-02 22:38:58 +10:00
Andrew Tridgell
83e9b1c325 s4-winbind: support the s3 response flags on krb5 auth too
This fixes the samba4.blackbox.wbinfo test, which was failing on a
wbinfo -K command
2009-10-02 22:17:42 +10:00
Andrew Tridgell
68e1991c6c s4-winbind: support the Samba3 TXT form of the info3 for wbinfo -a
This sends the info3 as hand marshalled data
2009-10-02 21:36:56 +10:00
Matthias Dieter Wallnöfer
ee956c9172 s4:ldb.h - cosmetic - add whitespace 2009-10-02 12:45:09 +02:00
Matthias Dieter Wallnöfer
0d05a2412a s4:provision - Cosmetic - right indentations 2009-10-02 12:45:09 +02:00
Andrew Bartlett
ff9fc4e4e0 s4:dsdb Fix crash from LDAP login of DOM\\
The issue here is that when we resolve DOM\\ into an NT4 name, we
would not initilise the nt4_account output.

Andrew Bartlett
2009-10-02 12:45:08 +02:00
Andrew Bartlett
984ea88156 s4:dsdb rework instanceType module - put instanceType in provision
The instanceType needs to be specified in future because that's how
the partitions are actually created.
2009-10-02 12:45:07 +02:00
Andrew Bartlett
1c71c09645 s4:dsdb Don't allow creating of new objects with an isDefunct schema class 2009-10-02 12:45:07 +02:00
Andrew Bartlett
46c2af3612 s4:dsdb Add 'lazy_commit' module to swallow the 'lazy commit' OID
This allows this control to be specified as critical.  We support the
control because we choose to always be durable in our transactions.

We really, really need a 'duplicate request' API, as at the
moment we can't do this without a large, error-prone set of code that
cannot cope with new request fields or types.

Andrew Bartlett
2009-10-02 12:45:06 +02:00
Andrew Bartlett
737f21bd9d s4:ldap_server Ensure we don't segfault when sent a NULL new RDN
The Microsoft testsuite tried to rename
cn=administrator,cn=users,... into "",cn=users... which didn't go so well.

Andrew Bartlett
2009-10-02 12:45:06 +02:00
Andrew Bartlett
4c235ca787 s4:provision Ensure we add the schema with the 'relax' control
(allows addition of systemOnly classes)
2009-10-02 12:45:05 +02:00
Andrew Tridgell
c7358d9890 s4-ldb: fixed a memory leak 2009-10-02 12:45:05 +02:00
Andrew Tridgell
e7846f69ca s4-ldb: overallocate idxptr to reduce memory fragmentation 2009-10-02 12:45:04 +02:00
Andrew Bartlett
14c9070322 s4-ldb: merged with master 2009-10-02 12:45:03 +02:00
Andrew Bartlett
bcbf0ae1e7 s4:ldb Remove LTDB_PACKING_FORMAT_NODN
The restructured code makes this hader to support, and we have not had
this kind of LDB for a very long time now.

Andrew Bartlett
2009-10-02 12:45:03 +02:00
Andrew Bartlett
a610843e9f s4:ldb always talloc_free() the ldb_ldif_write context, even on success 2009-10-02 12:45:02 +02:00
Andrew Bartlett
f0c2c9854c s4:ldb Fix ldb_list_find() folowing the change from char * to TDB_DATA
(The format of index records in the internal manipulation changed)

Andrew Bartlett
2009-10-02 12:45:02 +02:00
Andrew Bartlett
38f87f40bf s4:ldb-samba Use temp talloc contexts and talloc_steal avoid leaks.
We would use the mem_ctx for internal work, but previously we did not
clean it up on exit.

Andrew Bartlett
2009-10-02 12:45:01 +02:00
Matthieu Patou
8bf517d340 s4: Improve provisioning: use relax control
Give the possibility to specify controls when loading ldif files.
  Relax control is specified by default for all ldb_add_diff (request Andrew B).
  Set domainguid if specified at the creation of object instead of modifying afterward
  Allow to specify objectGUID for NTDS object of the first DC this option is used during provision upgrade.
2009-10-02 12:45:01 +02:00
Matthieu Patou
977a0aa273 pythonbindings: allow add() to have an array of controls as second parameter 2009-10-02 12:45:00 +02:00
Matthieu Patou
8d7a987766 s4-ldb: Use relax control to check in replace metadata module if we accept request that specify objectGUID attribute. 2009-10-02 12:45:00 +02:00
Matthieu Patou
a73a0372f9 s4-ldb: Add new relax controls that allow relaxed x500 constraints checks 2009-10-02 12:44:59 +02:00
Andrew Bartlett
ba0eba9e09 s4:ntvfs Don't attempt to follow NULL in unixuid_setup_security()
This segfault occoured in cases where we rejected (or never attempted)
the tree connect, so had an invalid private pointer for the logoff
codepath.

Andrew Bartlett
2009-10-02 12:44:58 +02:00
Andrew Bartlett
642dd95d81 s4:Ensure the selected RDN is the right one per the schema
The relative DN must be the one that the most specific structural
objectclass specifies.

Andrew Bartlett
2009-10-02 12:44:58 +02:00
Andrew Tridgell
6159825845 s4-samldb: the samldb module requires that the primary group exists
We need to create Domain Users in the test ldb
2009-10-02 20:00:42 +10:00
Andrew Tridgell
48e5e215c9 s4-samdb: added some debugging
This helped track down the samba3sam.py failures
2009-10-02 20:00:08 +10:00
Andrew Tridgell
860dad2605 s4-test: skip python gensec test until its finished 2009-10-02 18:52:51 +10:00
Andrew Tridgell
5a5c30cb38 s4-pygensec: a bit closer to working
I'll need help from Andrew on how to get gensec to initialise it's ops
element
2009-10-02 18:50:59 +10:00
Andrew Tridgell
084407fe20 pidl: fixed unit tests for trailer alignment 2009-10-02 17:14:15 +10:00
Andrew Tridgell
a01713d3dc pid: update ndr testsuite for new union alignment 2009-10-02 17:11:26 +10:00
Andrew Tridgell
7bdb4306b0 s4-torture: added a very simple samr ValidatePassword test 2009-10-02 16:03:02 +10:00
Andrew Tridgell
caa9e3ff8e s4-samr: fake up a samr_ValidatePassword response
mdw is working on the correct call to check the password strength
2009-10-02 16:02:42 +10:00
Andrew Tridgell
7a59e6c222 idl: rebuilt the IDL for the build farm 2009-10-02 15:11:02 +10:00
Andrew Tridgell
5c07c7eac2 s4-libnet: give sane error messages when functional levels don't match
It is nice to tell the user why their command failed :-)
2009-10-02 15:09:59 +10:00
Matthias Dieter Wallnöfer
0227697bf4 s4:dsdb/common/sidmap - Remove
As metze pointed out - this seems to be completely dead code. I too didn't find
any dependencies in other code parts. Therefore remove it.
2009-10-02 14:22:49 +10:00
Matthias Dieter Wallnöfer
bf0855e8e3 s4:provision - Change the default forest/domain function level back to Windows 2003 Native 2009-10-02 14:22:06 +10:00
Matthias Dieter Wallnöfer
45a237ce88 s4:libnet_become_dc - add checks for valid domain/forest function levels
Add checks to make sure that we join only supported AD domains (we agreed that
those are >= (Windows) 2003 Native per default - this is changeable with the
"ads:function level" option).
Add also checks to make sure that we cannot join domains which have a bigger
function level than our DC capable function level (e.g. a (Windows) 2008 DC
cannot join a (Windows) 2008 R2 domain).
2009-10-02 14:22:01 +10:00
Andrew Tridgell
9eb78be4a6 ndr64: added support for trailing gap alignment
NDR64 has a 'trailing gap' alignment, which aligns the end of a
structure on the overall structure alignment.

This explains the discrepancy we had with the RPC-SAMR test and NDR64
2009-10-02 12:05:59 +10:00
Andrew Tridgell
1726038708 s4-ldb: accept the binary DN OIDs in extended DN modules 2009-10-02 12:05:59 +10:00
Andrew Tridgell
fd22e03047 s4-ldb: Add support for binary blobs in DNs
AD has the concept of a DN prefixed with B:NN:XXXXXX: that contains a
binary blob. We need to support those in order to give correctly
formatted binary blobs for things like wellKnownObjects

This implementation is not ideal, as it allows for binary blobs on all
DNs, whereas it should only allow them on those with a syntax of
2.5.5.7. We should clean this up in the future, but meanwhile this
implementation at least gets us a working DC join of w2k8 to s4.

This patch also uses a static function for marking DNs as invalid,
which is very useful when debugging this code, as you can break on it
in gdb.
2009-10-02 12:03:05 +10:00
Andrew Tridgell
634d9d6476 s4-cldap: match w2k8-r2 for cldap netlogon bits
Windows does not set the 3 high bits, which is strange given their
meaning. I've submitted a CAR on this.
2009-10-02 12:03:04 +10:00