1
0
mirror of https://github.com/samba-team/samba.git synced 2025-03-09 08:58:35 +03:00

2864 Commits

Author SHA1 Message Date
Andrew Bartlett
49c794a6b2 r3921: Cross-test SIDs in RPC-SAMSYNC, fix the build.
Andrew Bartlett
2007-10-10 13:06:06 -05:00
Stefan Metzmacher
625826ad90 r3920: - it seem that we need to send a magic bind_guid in DsBind()
to make DsWriteAccountSpn() work

- add idl and torture test for DsWriteAccountSpn()

metze
2007-10-10 13:06:06 -05:00
Andrew Bartlett
6363553369 r3919: Add more info levels to the QueryTrustedDomainInfo structures, with
names and other assistance from the ethereal sources.

More work needs to be done to validate some of the levels, which do
not appear in the query - perhaps they are modification levels.

Andrew Bartlett
2007-10-10 13:06:05 -05:00
Andrew Bartlett
d6a7ab57e7 r3917: A few more LSA RPCs found in my wanderings (for trusted domains, these
seem to be 'shortcut' RPCs, that just avoid an open/query pair).

Rename a few others to give us a slightly sensible pattern.

Andrew Bartlett
2007-10-10 13:06:05 -05:00
Andrew Tridgell
671a864d8f r3916: w2k3 does not check the max_setup count in nttrans requests 2007-10-10 13:06:05 -05:00
Stefan Metzmacher
62d26e0b91 r3915: a few updates to the DsCrackNames() torture test
metze
2007-10-10 13:06:05 -05:00
Stefan Metzmacher
1ffabbaa66 r3914: add idl, torture test and simple server for netr_DrsGetDCNameEx2()
metze
2007-10-10 13:06:05 -05:00
Stefan Metzmacher
ba67e98835 r3913: fix the build
metze
2007-10-10 13:06:05 -05:00
Stefan Metzmacher
64570b7a47 r3910: add some error codes
metze
2007-10-10 13:06:05 -05:00
Andrew Bartlett
f2c86e6194 r3909: Fix cross-reference test for trusted domains.
Andrew Bartlett
2007-10-10 13:06:04 -05:00
Andrew Bartlett
e3dce0f5be r3908: We know that this field is a flag of some kind, and matches the output on LSA.
Andrew Bartlett
2007-10-10 13:06:04 -05:00
Andrew Bartlett
174c077842 r3907: * Rename lsa_Name to lsa_String
* Add new IDL to LSA, to query information about trusted domains (for
  cross-check with SamSync).

Andrew Bartlett
2007-10-10 13:06:04 -05:00
Stefan Metzmacher
df924e1822 r3906: fix compiler warnings
metze
2007-10-10 13:06:04 -05:00
Andrew Bartlett
ed838beddb r3905: (oops, missing file: samsync.c)
* Add new LSA calls to open trusted domains

* Add new tests for ACCOUNTs in SamSync

* Clean up names in NETLOGON and LSA

* Verify Security Descriptors against LSA, as well as SamR

Andrew Bartlett
2007-10-10 13:06:03 -05:00
Andrew Bartlett
7094502fe0 r3904: * Add new LSA calls to open trusted domains
* Add new tests for ACCOUNTs in SamSync

* Clean up names in NETLOGON and LSA

* Verify Security Descriptors against LSA, as well as SamR

Andrew Bartlett
2007-10-10 13:06:03 -05:00
Stefan Metzmacher
36b11992dc r3903: better fix for -r 3902
(not introduce new warnings:-)

metze
2007-10-10 13:06:03 -05:00
Stefan Metzmacher
ce7686ac3e r3902: fix compiler warnings
metze
2007-10-10 13:06:03 -05:00
Stefan Metzmacher
efe840c8b0 r3901: fix compiler warnings
metze
2007-10-10 13:06:03 -05:00
Stefan Metzmacher
f2ff50dfc4 r3900: fix compiler warning
metze
2007-10-10 13:06:03 -05:00
Stefan Metzmacher
b1b47bda01 r3899: fix compiler warnings
metze
2007-10-10 13:06:03 -05:00
Jelmer Vernooij
98afb504d9 r3898: Work towards local/server DCOM support, start working
on Simple example server side implementation
2007-10-10 13:06:02 -05:00
Simo Sorce
a99c0adb09 r3897: add a locking infrastructure 2007-10-10 13:06:02 -05:00
Jelmer Vernooij
9fca748fe3 r3896: Correct header files in rpc server templates plus
some other minor fixes
2007-10-10 13:06:02 -05:00
Jelmer Vernooij
4840eaeed3 r3891: Add rot (Running Object Table) interface 2007-10-10 13:06:02 -05:00
Jeremy Allison
a2ea2166dc r3888: Just proving :-) to tridge that a Setfileinfo with a modified
write time is sticky, and causes any subsequent writes not to update
the last write time. Added write that extends the file followed by
fnum specific smbflush. It stays the same time :-).
Jeremy.
2007-10-10 13:06:02 -05:00
Jeremy Allison
c9211d0847 r3887: Much better understanding of delayed write time, and the interaction
with setfileinfo modifying the write time. I have some ideas on how
to emulate this in the Samba server now but the commented case will
be very hard...
Jeremy.
2007-10-10 13:06:02 -05:00
Jeremy Allison
2e47e241f9 r3886: Trying to understand delayed file write update times. Added another
test that uses 2 connections and queries the time via pathinfo, not fileinfo.
MSDN states : "When writing to a file, the last write time is not fully updated
until all handles used for writing have been closed." - but this is obviously
untrue. W2K3 seems to use a 2 second granularity for this. Next I'll try using
SetFileTime equivalent to see if this takes the same time to take effect.
Jeremy.
2007-10-10 13:06:02 -05:00
Andrew Bartlett
39ae5e1dac r3885: Add security descriptor comparison to our RPC-SAMSYNC test. We now
verify that the security descriptor found in the SamSync is the same
as what is available over SAMR.

Unfortunately, the administrator seems unable to retrieve the SACL on
the security descriptor, so I've added a new function to compare with
a mask.

Andrew Bartlett
2007-10-10 13:06:01 -05:00
Jelmer Vernooij
16d905f6b0 r3881: Split up the LIBNDR_GEN subsystem into NDR_* and RPC_NDR_* subsystems.
This reduces the total size of the samba binaries from 119 Mb to 73 Mb.
Next step will be to have the build system obtain some of this information
by itself, so that we don't have to write ~10 lines per interface manually.
2007-10-10 13:06:01 -05:00
Stefan Metzmacher
9ad3837dba r3876: fix compiler warnings
metze
2007-10-10 13:06:00 -05:00
Tim Potter
5af52c559e r3870: Delete wrappers for tdb_lockkeys() and tdb_unlockkeys(). 2007-10-10 13:06:00 -05:00
Stefan Metzmacher
db35f3b0f9 r3869: in the NDR encoded replPropertyMetaData attribute in ADS
I see a new 64 bit time field which are seconds since 1601,

this will be mapped to NTTIME by th eparsing code

+#define NTTIME_1sec NTTIME

metze
2007-10-10 13:05:59 -05:00
Jelmer Vernooij
a00bda88e1 r3861: - Put ndr and rpc client code in seperate files
- Add some const
2007-10-10 13:05:58 -05:00
Andrew Tridgell
db72290bbe r3838: use "security.NTACL" instead of "security.NTAcl" for the xattr name for ACLs 2007-10-10 13:05:58 -05:00
Andrew Tridgell
fdaa753578 r3837: added support for LsaLookupSids in the LSA rpc server. This allows the GUI ACL editor on w2k to
correctly display names instead of SIDs.
2007-10-10 13:05:58 -05:00
Andrew Tridgell
4468018cb6 r3836: - fixed the handling of NT_STATUS_BUFFER_TOO_SMALL in nttrans server
- fixed revision number on default DACL

- fixed DACL_PRESENT bit in acl query

with these fixes cacls.exe and the GUI ACL editor in w2k both work
against pvfs. The GUI editor is slow as it times out looking up the
SID -> name mappings.
2007-10-10 13:05:58 -05:00
Andrew Tridgell
05ee9179f7 r3835: - added testing of setting an initial ACL on a file using NTTRANS create
- added support for initial ACLs in pvfs backend
2007-10-10 13:05:58 -05:00
Andrew Tridgell
2e19edaa4e r3834: - fixed XATTR_NTACL_NAME
- pvfs now passes RAW-ACLS
2007-10-10 13:05:58 -05:00
Andrew Tridgell
17911eea59 r3833: NTACL is a better xattr name than DosAcl (tpot suggested this) 2007-10-10 13:05:58 -05:00
Andrew Tridgell
3a1f20d874 r3832: added NT ACL query/set to the posix NTVFS backend. The default ACL is
based on the current nttoken, which is completely wrong, but works as a start.

The ACL is stored in the xattr system.DosAcl, using a NDR encoded IDL
union with a version number to allow for future expansion.

pvfs does not yet check the ACL for file access. At the moment the ACL
is just query/set.

We also need to do some RPC work to allow the windows ACL editor to be
used. At the moment is queries the ACL fine, but displays an error
when it fails to map the SIDs via rpc.
2007-10-10 13:05:57 -05:00
Andrew Tridgell
f49c636e10 r3831: added nttrans server code for query/set security descriptor. This
means ACLs now can be set/fetched from the CIFS NTVFS backend.
2007-10-10 13:05:57 -05:00
Andrew Tridgell
f68a6b6b91 r3830: unified the query/set security descriptor code with the rest of the
queryfileinfo/setfileinfo logic, so querying/setting a security
descriptor is treated as just another file query/set operation.

This will allow NTVFS backends to see the query/set security
descriptor operations as RAW_FILEINFO_SEC_DESC and
RAW_SFILEINFO_SEC_DESC operations.
2007-10-10 13:05:57 -05:00
Andrew Tridgell
2ff9816ae0 r3829: added a RAW-ACLS test suite that tests query/set of ACLs on a file 2007-10-10 13:05:57 -05:00
Andrew Tridgell
6d53c6a0ae r3828: added testing of opening an existing file with EAs (the EAs are ignored) 2007-10-10 13:05:57 -05:00
Andrew Tridgell
c75eb85939 r3827: fixed copyright notices to remove simo and lkcl who have no code left in this file 2007-10-10 13:05:57 -05:00
Andrew Tridgell
fcd0922407 r3826: - added testing of ea lists in NTTRANS CREATE
- fixed push/pull of chained ea lists

- fixed a bug in the nttrans wire encoding
2007-10-10 13:05:57 -05:00
Andrew Tridgell
8422789c06 r3821: added client side code and test code for NTTRANS_CREATE 2007-10-10 13:05:56 -05:00
Stefan Metzmacher
b620bdd672 r3810: create a LIB_SECURITY subsystem
- move dom_sid, security_descriptor, security_* funtions to one place
  and rename some of them

metze
2007-10-10 13:05:56 -05:00
Stefan Metzmacher
2414044746 r3809: fix compiler warning
metze
2007-10-10 13:05:56 -05:00
Andrew Bartlett
3b81305e2b r3808: Put these in the same order as the IDL, to make it easier to spot what's unimplemetned (tests of the group members)
Andrew Bartlett
2007-10-10 13:05:56 -05:00