1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-26 10:04:02 +03:00

18611 Commits

Author SHA1 Message Date
Andrew Tridgell
47692f39b1 a useful debugging tool
When looking at performance problems with ldb it can be useful to see
which searches causes unindexed full searches. This makes it easy to
enable that.
2009-05-28 16:11:45 +10:00
Andrew Tridgell
0a0d760704 fixed one-level indexing
one-level indexing was not always effective due to some broken logic
in the indexing code. This change means that if normal indexing fails,
we can still fall back on one-level indexing.

This reduces the number of full unindexed searches in s4 quite a lot
2009-05-28 16:10:47 +10:00
Andrew Tridgell
52cfffb8cb enable one-level indexing in sam.ldb 2009-05-28 16:08:49 +10:00
Andrew Tridgell
a9542ba21b use domain_dn not ncname
fixed up from previous patch that removed the use of crossref records
2009-05-26 14:47:11 +10:00
Andrew Tridgell
0299609308 Merge branch 'master' of ssh://git.samba.org/data/git/samba 2009-05-26 14:18:16 +10:00
Andrew Kroeger
c80c3b5edd s4:provision: Added ComPartitionSets entry.
Without this entry, opening the COM+ tab under the properties of an OU within
ADUC results in the following error:

"Unable to retrieve all user properties, 0x80072030"
2009-05-26 14:17:22 +10:00
Andrew Kroeger
95eeef91d3 s4:Added Extended-Rights and subentries.
Without these entries, using the 'Delegate Control' option in ADUC results in
the following error message in the Delegation of Control Wizard:

"The templates could not be applied.  One or more of the templates is not
applicable.  Click Back and select different templates, and then try again."
2009-05-26 14:17:12 +10:00
Andrew Kroeger
d402866e31 s4:provision: Update DisplaySpecifiers (#5139).
The classDisplayName attribute controls the actual text displayed to the user
for the top-level menus, so added it to the existing entries.

The attributeDisplayNames attribute contains both the text displayed to the
user and a mapping to the internal directory attribute name for the particular
field, so added these to the existing entries as well.

Added new entries as appropriate to properly complete all menus and labels
within ADUC.
2009-05-26 14:16:05 +10:00
Andrew Bartlett
6ef65389fd Don't use crossRef records to find our own domain
A single AD server can only host a single domain, so don't stuff about
with looking up our crossRef record in the cn=Partitions container.
We instead trust that lp_realm() and lp_workgroup() works correctly.

Andrew Bartlett
2009-05-26 12:37:09 +10:00
Slava Semushin
5d2cd81645 source{3,4}/torture/smbiconv.c(main): fixed file descriptor leak.
File descriptor leaks only when we use file instead of stdout.

Found by cppcheck:
[./source3/torture/smbiconv.c:219]: (error) Resource leak: out
[./source4/torture/smbiconv.c:211]: (error) Resource leak: out
2009-05-25 16:18:48 +02:00
Günther Deschner
eb5e8dc82e s4-smbtorture: add RPC-SAMR-LARGE-DC test.
This rather simple test creates 4500 objects on a domain controller and checks
the enum calls for the correct number of results.

Guenther
2009-05-25 13:56:54 +02:00
Günther Deschner
a75698bdf3 s4-smbtorture: rename test_EnumDomain{Users,Groups,Aliases} in RPC-SAMR.
Guenther
2009-05-25 13:56:54 +02:00
Günther Deschner
05e6ebb7f8 s4-smbtorture: re-work test_Create{User,Group,Alias} a little.
Guenther
2009-05-25 13:56:29 +02:00
Andrew Tridgell
b335618d17 fixed interpretation of ACB_PWNOTREQ
This bit actually means that we should ignore the minimum password
length field for this user. It doesn't mean that the password should
be seen as empty
2009-05-25 15:23:54 +10:00
Andrew Tridgell
4dcc058ea1 fixed the client side password change code
The client side code was not falling back to older routines correctly
as it didn't check for the operation range error appropriately. It
also used the old rpc semantics.
2009-05-25 13:40:52 +10:00
Andrew Tridgell
2bf1e8b5e1 cope with lanman auth being disabled in old password change code
When lanman auth is disabled and a user calls a password change
method that requires it we should give NT_STATUS_NOT_SUPPORTED
2009-05-25 13:39:56 +10:00
Günther Deschner
686e60581b s4-selftest: adding RPC-SAMR-USERS-PRIVILEGES to knownfail list.
Samba4 cannot pass this test currently as in Samba4 (unlike Samba3)
the LSA and SAMR account are stored in the same db.
Once you delete a SAMR user the LSA privilege account is deleted
at the same time (which is wrong).

Guenther
2009-05-21 12:19:56 +02:00
Stefan Metzmacher
04ceabf56f s4:libcli/smb2: fix session setup with raw NTLMSSP
metze
2009-05-20 19:58:37 +02:00
Stefan Metzmacher
540b713075 s4:libcli/smb2: use raw ntlmssp if the server didn't provide a sec blob
metze
2009-05-20 19:58:37 +02:00
Stefan Metzmacher
5b55e47b71 s4:libcli/smb2: fill in transport->negotiate.secblob with the correct data
metze
2009-05-20 19:58:36 +02:00
Stefan Metzmacher
d59f84d738 SMB2-LOCK: let the test pass against samba4
metze
2009-05-20 15:26:54 +02:00
Günther Deschner
9a13af9a99 s4: try to fix privileges implementation in order to pass the RPC-SAMR-USERS-PRIVILEGES test.
Guenther
2009-05-20 13:35:05 +02:00
Sam Liddicott
4b21ad9db7 Have ntvfs_connect() accept union smb_tcon *tcon instead of char* sharename
This change brings ntvfs_connect into compliance with other ntvfs functions
which take an ntvfs module, an ntvfs request and an smb io union.

It now becomes the responsibility of ntvfs modules to examine
tcon->generic.level themselves and derive the share name and any other
options
directly; e.g.

	const char *sharename;

	switch (tcon->generic.level) {
	case RAW_TCON_TCON:
		sharename = tcon->tcon.in.service;
		break;
	case RAW_TCON_TCONX:
		sharename = tcon->tconx.in.path;
		break;
	case RAW_TCON_SMB2:
	default:
		return NT_STATUS_INVALID_LEVEL;
	}

	if (strncmp(sharename, "\\\\", 2) == 0) {
		char *p = strchr(sharename+2, '\\');
		if (p) {
			sharename = p + 1;
		}
	}

service.c smbsrv_tcon_backend() is called before ntvfs_connect and fills in
some of the tcon->..out values.
For the case of RAW_TCON_TCONX, it filles out tcon->tconx.out.tid and
tcon->tconx.out.options

For the case of RAW_TCON_TCON it fills out tcon->tcon.out.tid and
tcon->tcon.out.max_xmit

Thus the ntvfs_connect function for vfs modules may override these values
if desired, but are not required to.

ntvfs_connect functions are required to fill in the tcon->tconx.out.*_type
fields, for RAW_TCON_TCONX, perhaps something like:

	if (tcon->generic.level == RAW_TCON_TCONX) {
		tcon->tconx.out.fs_type = ntvfs->ctx->fs_type;
		tcon->tconx.out.dev_type = ntvfs->ctx->dev_type;
	}

Signed-off-by: Sam Liddicott <sam@liddicott.com>

(I fixed the ntvfs_connect() in the smb_server/smb2/
 and the RAW_TCON_SMB2 switch case in the modules)

Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-05-20 13:32:27 +02:00
Sam Liddicott
8cd9c72d75 s4:smb_server: initialy read the first 4 bytes only
Stop packet_recv getting greedy and reading the whole socket
and then dispatching te extra packets in a timer loop

Signed-off-by: Sam Liddicott <sam@liddicott.com>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-05-20 10:16:43 +02:00
Stefan Metzmacher
ac7f4fa380 s4:libcli/raw: initialy read the first 4 bytes only
metze
2009-05-20 10:16:42 +02:00
Tim Prouty
d38e5d18a7 s4 torture: Fix typo 2009-05-18 18:31:46 -07:00
Günther Deschner
5186661023 s4-smbtorture: Fix build warning in RPC-SAMR tests.
Guenther
2009-05-19 02:05:25 +02:00
Günther Deschner
0a9049be87 s4-smbtorture: add RPC-SAMR-USERS-PRIVILEGES test.
This test demonstrates the independence of the lsa and samr accounts while
remove a samr users that still has privileges granted.

Guenther
2009-05-18 22:54:14 +02:00
Jelmer Vernooij
5065cf70f8 tevent: Remove python module.
This module didn't have any functionality that we actually used yet, and
it was quite small.

Tevent is quite low level and perhaps doesn't make much sense to expose
directly as a Python module. It was also causing build problems when used with a
system-tevent. We can always back later if necessary.
2009-05-16 14:56:37 +02:00
Jelmer Vernooij
6230eb94af Update copies of config.guess and config.sub. 2009-05-16 04:03:12 +02:00
Jelmer Vernooij
88876ac571 errormap: Remove wbc -> NTSTATUS error map for now. It is not used.
This was breaking the Samba 4 installation since it added dependencies
on header files we weren't installing.

Confirmed with Kai.
2009-05-15 16:05:37 +02:00
Andrew Bartlett
524a79b735 s4:nbtd Use str_list_make_single() to turn iname->wins_server into a list 2009-05-14 05:56:59 +10:00
Andrew Bartlett
aa5cee2288 s4:libnet Use str_list_make_single() in resolv code 2009-05-14 05:56:59 +10:00
Andrew Bartlett
6df4aece1d dsdb:schema Use str_list_make_empty() to create an empty list 2009-05-14 05:56:59 +10:00
Andrew Bartlett
5182b10b7a s4:torture Use str_list_make_single where appropriate 2009-05-14 05:56:59 +10:00
Günther Deschner
c3e61b5460 s4-selftest: match new name of RPC-SAMR-ACCESSMASK.
Guenther
2009-05-13 15:19:40 +02:00
Günther Deschner
675e52cde7 s4-smbtorture: split RPC-SAMR-ACCESSMASK into several tests.
Guenther
2009-05-13 15:19:40 +02:00
Günther Deschner
2abdfab613 s4-smbtorture: cosmetic cleanup for RPC-SAMR-ACCESSMASK.
Guenther
2009-05-13 15:19:40 +02:00
Jelmer Vernooij
aa71ab6d1d s4 config-summary: Fix printing of which libraries are external and
internal.
2009-05-13 00:35:49 +02:00
Günther Deschner
54d925a304 s4-smbtorture: skip SetMemberAttributesOfGroup in RPC-SAMR for s3 as well.
Guenther
2009-05-12 00:27:24 +02:00
Günther Deschner
59cb8fd58d s4-smbtorture: Skip secdesc set calls for non-user objects in RPC-SAMR for Samba3.
Note that they are skipped for all objects while testing Samba4.

Guenther
2009-05-12 00:27:23 +02:00
Günther Deschner
1fb9b65921 s4-smbtorture: Fix order of assert args in test_TestPrivateFunctionsDomain() in RPC-SAMR.
Guenther
2009-05-12 00:27:23 +02:00
Günther Deschner
ff7ebdf317 s4-smbtorture: switch to use torture_context in RPC-SAMR.
Guenther
2009-05-12 00:27:23 +02:00
Günther Deschner
0f88b3cc94 s4-smbtorture: remove trailing whitespace in RPC-SAMR.
Guenther
2009-05-12 00:27:23 +02:00
Günther Deschner
5f015920a8 s4-smbtorture: add very basic RPC-LSA-LOOKUPNAMES test.
Guenther
2009-05-11 16:44:39 +02:00
Günther Deschner
7347373e7c s4-smbtorture: add optional very simple reply checks to lsa lookup name tests.
Guenther
2009-05-11 16:44:39 +02:00
Stefan Metzmacher
d51bb8e4e6 s4:smb_server: return after we have processed an invalid smb2 request
metze
2009-05-11 15:59:46 +02:00
Volker Lendecke
993bdd87b5 Move SMB2 constants to a separate file 2009-05-11 15:54:24 +02:00
Volker Lendecke
ce8f3528f1 Fix SMB2_CAP_DFS 2009-05-11 15:54:24 +02:00
Günther Deschner
7672a033ef s4-smbtorture: remove trailing whitespace in RPC-LSA test.
Guenther
2009-05-11 15:06:20 +02:00