1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-11 05:18:09 +03:00
Commit Graph

81565 Commits

Author SHA1 Message Date
Andrew Bartlett
4654dcaae7 s4-selftest: do a dbcheck on our two vampire DCs
However, due to using --domain-critical-only we have to knownfail the
vampire DC here, as we do not fill in the backlinks on non-critical
objects correctly.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Fri Jul  6 16:54:10 CEST 2012 on sn-devel-104
2012-07-06 16:54:09 +02:00
Andrew Bartlett
f9d90922f5 s4-dbcheck: Check for an object without a parent
Such objects are then moved to the appropriate LostAndFound container,
just as they would be if replicated.

Andrew Bartlett
2012-07-06 22:55:50 +10:00
Andrew Bartlett
7782e334b9 s4-dsdb: Remove unused variables in py_dsdb_get_partitions_dn 2012-07-06 22:55:50 +10:00
Andrew Bartlett
023508ed17 pydsdb: Add bindings for dsdb_wellknown_dn() 2012-07-06 22:55:50 +10:00
Andrew Bartlett
979215ad59 pyldb: Add bindings for ldb_dn_remove_base_components 2012-07-06 22:55:49 +10:00
Andrew Bartlett
e4077a8ca5 s4-pydsdb: Add bindings for dsdb_find_nc_root() 2012-07-06 22:45:34 +10:00
Andrew Bartlett
507e6fdce5 s4-pydsdb: Improve PyErr_LDB_{DN,}_OR_RAISE to use py_check_dcerpc_type
This checks the type rather than just dereferencing the pointer.

Andrew Bartlett
2012-07-06 22:45:34 +10:00
Andrew Bartlett
8d99b398d9 pyldb: Fix dn concat operation to be the other way around
This now concatonates Dn(ldb, "cn=config") + Dn(ldb, "dc=samba,dc=org") as "cn=config,dc=samba,dc=org"

Andrew Bartlett
2012-07-06 22:45:33 +10:00
Christof Schmitt
7285ed586f auth: Common function for retrieving PAC_LOGIN_INFO from PAC
Several functions use the same logic as kerberos_pac_logon_info. Move
kerberos_pac_logon_info to common code and reuse it to remove the code
duplication.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2012-07-06 20:45:51 +10:00
Andreas Schneider
a49eb60e04 s4-lsarpc: DCERPC_FAULT_ACCESS_DENIED for tcp
Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Fri Jul  6 11:50:40 CEST 2012 on sn-devel-104
2012-07-06 11:50:40 +02:00
Andreas Schneider
1744e99d0a s4-lsarpc: DCERPC_FAULT_ACCESS_DENIED for np 2012-07-06 10:00:58 +02:00
Andreas Schneider
997c780d24 s4-lsarpc: Restrict LookupSids3 to crypto connections only. 2012-07-06 10:00:58 +02:00
Andreas Schneider
1a12bbd5d8 s4-lsarpc: Restrict LookupNames4 to crypto connections only. 2012-07-06 10:00:58 +02:00
Andreas Schneider
13a7f98f9f s4-lsarpc: Don't call lsa_OpenPolicy2 in lsa_LookupSids3. 2012-07-06 10:00:58 +02:00
Andreas Schneider
9fa979c934 s4-lsaprc: Don't call lsa_OpenPolicy2 in lsa_LookupNames4. 2012-07-06 10:00:58 +02:00
Andreas Schneider
8e32715d5d selftest: Update knownfail list for samba4.rpc.lsalookup. 2012-07-06 10:00:58 +02:00
Andreas Schneider
de54047c05 s4-selftest: Don't run lsarpc requiring a named pipe over tcpip. 2012-07-06 10:00:58 +02:00
Andreas Schneider
48b30bfce6 s4-selftest: Don't plan lsa.secrets tests over tcpip.
These will only work over a named pipe or ncalrpc.
2012-07-06 10:00:58 +02:00
Andreas Schneider
0b93587b7e s4-libnet: Skip calling lsarpc functions over a wrong pipe. 2012-07-06 10:00:58 +02:00
Andreas Schneider
027b913a25 s4-torture: Call lsarpc tests over the correct pipe. 2012-07-06 10:00:58 +02:00
Andreas Schneider
a070ce3555 s4-torture: Don't consider NONE_MAPPED an error in LookupSids3. 2012-07-06 10:00:57 +02:00
Andreas Schneider
2a46c7fff2 s4-torture: Don't consider NONE_MAPPED an error in LookupNames4. 2012-07-06 10:00:57 +02:00
Andreas Schneider
eeba5ad9fa s4-torture: Add a lsarpc test_GetUserName_fail function. 2012-07-06 10:00:57 +02:00
Andreas Schneider
5dc5cdaa6c s4-torture: Add a lsarpc test_OpenPolicy2_fail function. 2012-07-06 10:00:57 +02:00
Andreas Schneider
39a13d1981 s4-torture: Add a lsarpc test_OpenPolicy_fail function. 2012-07-06 10:00:57 +02:00
Andreas Schneider
4ece074f25 s4-torture: Add a lsarpc test_LookupNames4_fail function. 2012-07-06 10:00:57 +02:00
Andreas Schneider
ed7be198c4 s4-torture: Add a lsarpc test_LookupSids3_fail function. 2012-07-06 10:00:57 +02:00
Andreas Schneider
d37643c204 s3-lsarpc: Enforce a secure connection for LookupSids3 and LookupNames4.
http://thread.gmane.org/gmane.network.protocol.cifs.general/291
2012-07-06 10:00:57 +02:00
Andreas Schneider
d1e829bbab s3-lsarpc: Restrict lsa_LookupNames4 to ncacn_ip_tcp connections.
See MS-LAT, Section 2.1 Transport.
2012-07-06 10:00:57 +02:00
Andreas Schneider
426cf362ed s3-lsarpc: Restrict lsa_LookupSids3 to ncacn_ip_tcp connections.
See MS-LAT, Section 2.1 Transport.
2012-07-06 10:00:57 +02:00
Andreas Schneider
bbf70e793c s3-lsarpc: Restrict the transport for ncacn_np functions.
See MS-LAT, section 2.1 Transport.
2012-07-06 10:00:57 +02:00
Andreas Schneider
a866dcc4f6 s3-rpc: Return the correct ntstatus depending on the transport. 2012-07-06 10:00:57 +02:00
Andreas Schneider
fae6091f1d s3-rpc_server: Make it possible to use more rpc exceptions. 2012-07-06 10:00:56 +02:00
Andreas Schneider
81ff67c3c8 s3-selftest: Run lsa tests over np and tcpip. 2012-07-06 10:00:56 +02:00
Andreas Schneider
47e5a8c2b3 s4-torture: Test LookupSids3/LookupNames4 over np and tcpip. 2012-07-06 10:00:56 +02:00
Andreas Schneider
1c46bffb11 s4-torture: Make sure lsa_OpenPolicy2 fails over TCP/IP. 2012-07-06 10:00:56 +02:00
Andreas Schneider
8bc4d7a3e6 s4-torture: Make sure lsa_OpenPolicy fails over TCP/IP. 2012-07-06 10:00:56 +02:00
Andreas Schneider
22da7106b3 s4-torture: Make sure ncacn_np tests are only called over the a pipe. 2012-07-06 10:00:56 +02:00
Andreas Schneider
00171a549a s4-torture: Test LookupSids3 and LookupNames4 only over tcpip.
LookupSids3 and LookupNames4 are only available over tcpip and MUST
fail over named pipes.
2012-07-06 10:00:56 +02:00
Andreas Schneider
682277b44c s4-torture: Use test_LookupSids3 function. 2012-07-06 10:00:56 +02:00
Andreas Schneider
1000884bb3 s4-torture: Fix build warnings in lsa test. 2012-07-06 10:00:56 +02:00
Andrew Bartlett
8f443895f2 s4-classicupgrade: Demote any other 'BDC' accounts back to a member server during upgrade
This makes it clear that they cannot be a DC until they are upgraded with
samba-tool domain dcpromo.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Fri Jul  6 09:59:13 CEST 2012 on sn-devel-104
2012-07-06 09:59:13 +02:00
Andrew Bartlett
2908bbe06a s4-selftest: Test samba-tool domain dcpromo
This needs a new environment to test it properly.  This requires a raise in the
number of socket wrapper interfaces.

Andrew Bartlett
2012-07-06 08:10:18 +02:00
Andrew Bartlett
1c86ab9c50 s4-samba-tool: Provide a samba-tool domain dcpromo that upgrades a member to a DC
This command is like dcpromo in that it upgrades the existing workstation account
to be a domain controller.

The SID (and therefore any file ownerships) is preserved.

Andrew Bartlett
2012-07-06 08:10:18 +02:00
Andrew Bartlett
c436f986ca s4-dsdb: Give a much better error message when parentGUID generation fails 2012-07-06 08:10:18 +02:00
Andrew Bartlett
8b32d9ad2d s4-dsdb: Use parent_object_guid to find the correct parent for new objects
This allows the parent to be renmaed while a new object is added on another replica.

This rename may also be a delete, in which case we must move it to lostandfound.

Andrew Bartlett
2012-07-06 08:10:18 +02:00
Björn Jacke
7abe51f840 talloc: remove unused variables
found by the IRIX compiler

Autobuild-User(master): Björn Jacke <bj@sernet.de>
Autobuild-Date(master): Thu Jul  5 23:50:54 CEST 2012 on sn-devel-104
2012-07-05 23:50:54 +02:00
Björn Jacke
a79496d90c lib/addns: remove defines we don't need or have for sure via libreplace 2012-07-05 22:00:52 +02:00
Björn Jacke
4b83d61e7d lib/addns: remove use of uint8 uint16 and uint32 in favour of C99 types 2012-07-05 22:00:52 +02:00
Björn Jacke
f9fb1ef85c s3: evaluate MNT_QUOTA and MNT_RDONLY in statvfs also on darwin 2012-07-05 22:00:52 +02:00