Andrew Bartlett
4654dcaae7
s4-selftest: do a dbcheck on our two vampire DCs
...
However, due to using --domain-critical-only we have to knownfail the
vampire DC here, as we do not fill in the backlinks on non-critical
objects correctly.
Andrew Bartlett
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Fri Jul 6 16:54:10 CEST 2012 on sn-devel-104
2012-07-06 16:54:09 +02:00
Andrew Bartlett
f9d90922f5
s4-dbcheck: Check for an object without a parent
...
Such objects are then moved to the appropriate LostAndFound container,
just as they would be if replicated.
Andrew Bartlett
2012-07-06 22:55:50 +10:00
Andrew Bartlett
7782e334b9
s4-dsdb: Remove unused variables in py_dsdb_get_partitions_dn
2012-07-06 22:55:50 +10:00
Andrew Bartlett
023508ed17
pydsdb: Add bindings for dsdb_wellknown_dn()
2012-07-06 22:55:50 +10:00
Andrew Bartlett
979215ad59
pyldb: Add bindings for ldb_dn_remove_base_components
2012-07-06 22:55:49 +10:00
Andrew Bartlett
e4077a8ca5
s4-pydsdb: Add bindings for dsdb_find_nc_root()
2012-07-06 22:45:34 +10:00
Andrew Bartlett
507e6fdce5
s4-pydsdb: Improve PyErr_LDB_{DN,}_OR_RAISE to use py_check_dcerpc_type
...
This checks the type rather than just dereferencing the pointer.
Andrew Bartlett
2012-07-06 22:45:34 +10:00
Andrew Bartlett
8d99b398d9
pyldb: Fix dn concat operation to be the other way around
...
This now concatonates Dn(ldb, "cn=config") + Dn(ldb, "dc=samba,dc=org") as "cn=config,dc=samba,dc=org"
Andrew Bartlett
2012-07-06 22:45:33 +10:00
Christof Schmitt
7285ed586f
auth: Common function for retrieving PAC_LOGIN_INFO from PAC
...
Several functions use the same logic as kerberos_pac_logon_info. Move
kerberos_pac_logon_info to common code and reuse it to remove the code
duplication.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-07-06 20:45:51 +10:00
Andreas Schneider
a49eb60e04
s4-lsarpc: DCERPC_FAULT_ACCESS_DENIED for tcp
...
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Fri Jul 6 11:50:40 CEST 2012 on sn-devel-104
2012-07-06 11:50:40 +02:00
Andreas Schneider
1744e99d0a
s4-lsarpc: DCERPC_FAULT_ACCESS_DENIED for np
2012-07-06 10:00:58 +02:00
Andreas Schneider
997c780d24
s4-lsarpc: Restrict LookupSids3 to crypto connections only.
2012-07-06 10:00:58 +02:00
Andreas Schneider
1a12bbd5d8
s4-lsarpc: Restrict LookupNames4 to crypto connections only.
2012-07-06 10:00:58 +02:00
Andreas Schneider
13a7f98f9f
s4-lsarpc: Don't call lsa_OpenPolicy2 in lsa_LookupSids3.
2012-07-06 10:00:58 +02:00
Andreas Schneider
9fa979c934
s4-lsaprc: Don't call lsa_OpenPolicy2 in lsa_LookupNames4.
2012-07-06 10:00:58 +02:00
Andreas Schneider
8e32715d5d
selftest: Update knownfail list for samba4.rpc.lsalookup.
2012-07-06 10:00:58 +02:00
Andreas Schneider
de54047c05
s4-selftest: Don't run lsarpc requiring a named pipe over tcpip.
2012-07-06 10:00:58 +02:00
Andreas Schneider
48b30bfce6
s4-selftest: Don't plan lsa.secrets tests over tcpip.
...
These will only work over a named pipe or ncalrpc.
2012-07-06 10:00:58 +02:00
Andreas Schneider
0b93587b7e
s4-libnet: Skip calling lsarpc functions over a wrong pipe.
2012-07-06 10:00:58 +02:00
Andreas Schneider
027b913a25
s4-torture: Call lsarpc tests over the correct pipe.
2012-07-06 10:00:58 +02:00
Andreas Schneider
a070ce3555
s4-torture: Don't consider NONE_MAPPED an error in LookupSids3.
2012-07-06 10:00:57 +02:00
Andreas Schneider
2a46c7fff2
s4-torture: Don't consider NONE_MAPPED an error in LookupNames4.
2012-07-06 10:00:57 +02:00
Andreas Schneider
eeba5ad9fa
s4-torture: Add a lsarpc test_GetUserName_fail function.
2012-07-06 10:00:57 +02:00
Andreas Schneider
5dc5cdaa6c
s4-torture: Add a lsarpc test_OpenPolicy2_fail function.
2012-07-06 10:00:57 +02:00
Andreas Schneider
39a13d1981
s4-torture: Add a lsarpc test_OpenPolicy_fail function.
2012-07-06 10:00:57 +02:00
Andreas Schneider
4ece074f25
s4-torture: Add a lsarpc test_LookupNames4_fail function.
2012-07-06 10:00:57 +02:00
Andreas Schneider
ed7be198c4
s4-torture: Add a lsarpc test_LookupSids3_fail function.
2012-07-06 10:00:57 +02:00
Andreas Schneider
d37643c204
s3-lsarpc: Enforce a secure connection for LookupSids3 and LookupNames4.
...
http://thread.gmane.org/gmane.network.protocol.cifs.general/291
2012-07-06 10:00:57 +02:00
Andreas Schneider
d1e829bbab
s3-lsarpc: Restrict lsa_LookupNames4 to ncacn_ip_tcp connections.
...
See MS-LAT, Section 2.1 Transport.
2012-07-06 10:00:57 +02:00
Andreas Schneider
426cf362ed
s3-lsarpc: Restrict lsa_LookupSids3 to ncacn_ip_tcp connections.
...
See MS-LAT, Section 2.1 Transport.
2012-07-06 10:00:57 +02:00
Andreas Schneider
bbf70e793c
s3-lsarpc: Restrict the transport for ncacn_np functions.
...
See MS-LAT, section 2.1 Transport.
2012-07-06 10:00:57 +02:00
Andreas Schneider
a866dcc4f6
s3-rpc: Return the correct ntstatus depending on the transport.
2012-07-06 10:00:57 +02:00
Andreas Schneider
fae6091f1d
s3-rpc_server: Make it possible to use more rpc exceptions.
2012-07-06 10:00:56 +02:00
Andreas Schneider
81ff67c3c8
s3-selftest: Run lsa tests over np and tcpip.
2012-07-06 10:00:56 +02:00
Andreas Schneider
47e5a8c2b3
s4-torture: Test LookupSids3/LookupNames4 over np and tcpip.
2012-07-06 10:00:56 +02:00
Andreas Schneider
1c46bffb11
s4-torture: Make sure lsa_OpenPolicy2 fails over TCP/IP.
2012-07-06 10:00:56 +02:00
Andreas Schneider
8bc4d7a3e6
s4-torture: Make sure lsa_OpenPolicy fails over TCP/IP.
2012-07-06 10:00:56 +02:00
Andreas Schneider
22da7106b3
s4-torture: Make sure ncacn_np tests are only called over the a pipe.
2012-07-06 10:00:56 +02:00
Andreas Schneider
00171a549a
s4-torture: Test LookupSids3 and LookupNames4 only over tcpip.
...
LookupSids3 and LookupNames4 are only available over tcpip and MUST
fail over named pipes.
2012-07-06 10:00:56 +02:00
Andreas Schneider
682277b44c
s4-torture: Use test_LookupSids3 function.
2012-07-06 10:00:56 +02:00
Andreas Schneider
1000884bb3
s4-torture: Fix build warnings in lsa test.
2012-07-06 10:00:56 +02:00
Andrew Bartlett
8f443895f2
s4-classicupgrade: Demote any other 'BDC' accounts back to a member server during upgrade
...
This makes it clear that they cannot be a DC until they are upgraded with
samba-tool domain dcpromo.
Andrew Bartlett
Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Fri Jul 6 09:59:13 CEST 2012 on sn-devel-104
2012-07-06 09:59:13 +02:00
Andrew Bartlett
2908bbe06a
s4-selftest: Test samba-tool domain dcpromo
...
This needs a new environment to test it properly. This requires a raise in the
number of socket wrapper interfaces.
Andrew Bartlett
2012-07-06 08:10:18 +02:00
Andrew Bartlett
1c86ab9c50
s4-samba-tool: Provide a samba-tool domain dcpromo that upgrades a member to a DC
...
This command is like dcpromo in that it upgrades the existing workstation account
to be a domain controller.
The SID (and therefore any file ownerships) is preserved.
Andrew Bartlett
2012-07-06 08:10:18 +02:00
Andrew Bartlett
c436f986ca
s4-dsdb: Give a much better error message when parentGUID generation fails
2012-07-06 08:10:18 +02:00
Andrew Bartlett
8b32d9ad2d
s4-dsdb: Use parent_object_guid to find the correct parent for new objects
...
This allows the parent to be renmaed while a new object is added on another replica.
This rename may also be a delete, in which case we must move it to lostandfound.
Andrew Bartlett
2012-07-06 08:10:18 +02:00
Björn Jacke
7abe51f840
talloc: remove unused variables
...
found by the IRIX compiler
Autobuild-User(master): Björn Jacke <bj@sernet.de>
Autobuild-Date(master): Thu Jul 5 23:50:54 CEST 2012 on sn-devel-104
2012-07-05 23:50:54 +02:00
Björn Jacke
a79496d90c
lib/addns: remove defines we don't need or have for sure via libreplace
2012-07-05 22:00:52 +02:00
Björn Jacke
4b83d61e7d
lib/addns: remove use of uint8 uint16 and uint32 in favour of C99 types
2012-07-05 22:00:52 +02:00
Björn Jacke
f9fb1ef85c
s3: evaluate MNT_QUOTA and MNT_RDONLY in statvfs also on darwin
2012-07-05 22:00:52 +02:00