1
0
mirror of https://github.com/samba-team/samba.git synced 2025-11-14 12:23:52 +03:00
Commit Graph

536 Commits

Author SHA1 Message Date
Günther Deschner
5c9d755f52 r25531: Merge GTYPE_SECURITY_UNIVERSAL_GROUP from samba3.
Guenther
2007-10-10 15:07:48 -05:00
Jelmer Vernooij
3468952e77 r25446: Merge some changes I made on the way home from SFO:
2007-09-29 More higher-level passing around of lp_ctx.
2007-09-29 Fix warning.
2007-09-29 Pass loadparm contexts on a higher level.
2007-09-29 Avoid using global loadparm context.
2007-10-10 15:07:34 -05:00
Jelmer Vernooij
fd697d77c9 r25430: Add the loadparm context to all parametric options. 2007-10-10 15:07:31 -05:00
Jelmer Vernooij
3fcc960839 r25398: Parse loadparm context to all lp_*() functions. 2007-10-10 15:07:25 -05:00
Andrew Bartlett
5838aca79b r25268: Thanks to Andrew Kroeger for pointing out on IRC that this is
compleatly dead code.

Andrew Bartlett
2007-10-10 15:07:03 -05:00
Andrew Bartlett
aad9545ca1 r25249: Thanks to Andrew Kroeger for pointing out this silly typo (calling
end_transaction in delete_tranaction would be very much the wrong
thing to do) in the update_keytab module.

Andrew Bartlett
2007-10-10 15:06:59 -05:00
Andrew Bartlett
e6fc0e1f54 r25194: A major rework of the Samba4 LSA LookupNames and LookupSids code, with
a new torture suite to match.

This should fix bug #4954 by Matthias Wallnöfer <mwallnoefer@yahoo.de>

Previously we had no knowlege of BUILTIN or well-known names.

This code needs expansion to check with winbind for trusted domains.

Andrew Bartlett
2007-10-10 15:06:51 -05:00
Jelmer Vernooij
6b4a21e1ab r25101: Directly depend on drsblobs - can't rely on having it in via ldb. 2007-10-10 15:06:37 -05:00
Jelmer Vernooij
df9cebcb97 r25035: Fix some more warnings, use service pointer rather than service number in more places. 2007-10-10 15:05:43 -05:00
Jelmer Vernooij
abe8349f9b r25026: Move param/param.h out of includes.h 2007-10-10 15:05:38 -05:00
Jelmer Vernooij
0bcb21ed74 r25001: Fix more C++ and other warnings, fix some of the indentation with ts=4 lines that I accidently added earlier. 2007-10-10 15:05:28 -05:00
Jelmer Vernooij
08bb1ef643 r25000: Fix some more C++ compatibility warnings. 2007-10-10 15:05:27 -05:00
Andrew Bartlett
46e3875806 r24986: LDB has a function for comparing things that must meet the rules of
attribute names.

Andrew Bartlett
2007-10-10 15:05:23 -05:00
Andrew Bartlett
bcd994a139 r24941: Simplify samdb_result_nttime(), and remove nttime_from_string()
Andrew Bartlett
2007-10-10 15:03:40 -05:00
Andrew Bartlett
a42d0eb531 r24918: Fix the build (forgot to include dcesrv_lsa.c in the previous commit)
and improve error strings returned from samdb.c

Andrew Bartlett
2007-10-10 15:03:38 -05:00
Andrew Bartlett
d17a0058ba r24914: In response to bug #4892 by Matthias Wallnöfer <mwallnoefer@yahoo.de>,
allow the objectclass module to reconstruct the objectclass hierarchy,
rather than using templates.

The issue being fixed in particular is that 'top' was not being set on
containers.

This should ensure we do this right for all objects.

Andrew Bartlett
2007-10-10 15:03:37 -05:00
Andrew Bartlett
64cc31642f r24793: The subtree_rename module is a work of fiction. An resemblance to a
working module, live or dead, is purely co-incidental.

Andrew Bartlett
2007-10-10 15:03:10 -05:00
Jelmer Vernooij
31993cf67b r24780: More work allowing libutil to be used by external users. 2007-10-10 15:03:10 -05:00
Andrew Bartlett
13908a8cb4 r24761: Permit subtree renames in Samba4.
The module is scary: On a rename, it does a search for all entries
under that entry (including itself), and fires off a seperate rename
call for each result.  This will fail miserably on an LDAP backend,
but I'll need to work on using hdb for OpenLDAP, and hope Fedora DS
can implement subtree renames at some point.

Andrew Bartlett
2007-10-10 15:03:05 -05:00
Andrew Bartlett
62320616ff r24731: Remove unused code - if we hit these error conditions, then we are
dead anyway, and a segfault would leave us with more infomation.

Andrew Bartlett
2007-10-10 15:03:00 -05:00
Jelmer Vernooij
1ce32673d9 r24712: No longer expose the 'BOOL' data type in any interfaces. 2007-10-10 15:02:54 -05:00
Andrew Bartlett
c8e6a87867 r24697: Excelent patch and detective work by Matthias Wallnöfer
<mwallnoefer@yahoo.de> noticing that:

> The error was caused by info1 that is'nt talloced but rather static.

In fact, no caller supplies info1 as a valid talloc context - other
callers supply an element into the array.

Andrew Bartlett
2007-10-10 15:02:49 -05:00
Andrew Bartlett
35ee4aee71 r24696: Fix bug 4918 reported by Matthias Wallnöfer <mwallnoefer@yahoo.de>
with a patch from Andrew Kroeger <andrew@sprocks.gotdns.com>.

The changes to samldb_fill_foreignSecurityPrincipal_object() look much
larger then they are: We just skip all the objectSid generation if the
SID is supplied.

By providing a few more objects, standard dialogs on the clients are
better behaved, for these 'well known' users.

Andrew Bartlett
2007-10-10 15:02:48 -05:00
Andrew Bartlett
d0595e7a3d r24690: Further fix to bug 4919: Ensure we don't supply a NULL URL argument to
ldb_connect_backend().

Andrew Bartlett
2007-10-10 15:02:45 -05:00
Andrew Bartlett
ba82197e30 r24655: Fix bug 4919 reported by Matthias Wallnöfer <mwallnoefer@yahoo.de>:
> When you change to the SAMBA private directory on a shell (default
> /usr/local/samba/private) and start there for example ldbedit with the sam.ldb,
> the application crashes if you don't put the "./" before the filename.

I've adapted Matthias's patch.

Andrew Bartlett
2007-10-10 15:02:33 -05:00
Andrew Bartlett
6bdebc3cfd r24648: Found out the meaning of a few more flags. 2007-10-10 15:02:31 -05:00
Andrew Bartlett
3d74d178bf r24631: Fix up format warnings, found on my Fedora 7 x86_64 workstation.
Andrew Bartlett
2007-10-10 15:02:27 -05:00
Andrew Bartlett
417ea885b4 r24611: Following up on the re-opening of bug 4817 is it pretty clear that
machine accounts are not subject to password policy in Win2k3 R2 (at
least in terms of password quality).

In testing this, I found that Win2k3 R2 has changed the way the old
ChangePassword RPC call is handled - the 'cross-checks' between new LM
and NT passwords are not required.

Andrew Bartlett
2007-10-10 15:02:23 -05:00
Stefan Metzmacher
84651aee81 r24557: rename 'dcerpc_table_' -> 'ndr_table_'
metze
2007-10-10 15:02:15 -05:00
Andrew Bartlett
f5ec369741 r24479: Typo fix - this makes 'make test' pass against OpenLDAP again.
The objectCategory canonicalise_fn makes everything a DN, which is
exactly what we need here.

Andrew Bartlett
2007-10-10 15:01:56 -05:00
Andrew Bartlett
b474be9507 r24459: Fix up ldap.js and test_ldb.sh to test the domain_scope control, and
to test the behaviour of objectCategory=user searches.

It turns out (thanks to a hint on
http://blog.joeware.net/2005/12/08/147/) that objectCategory=user maps
into objectCategory=CN=Person,... (by the defaultObjectCategory of
that objectclass).

Simplify the entryUUID module by using the fact that we now set the DN
as the canoncical form of objectCategory.

Andrew Bartlett
2007-10-10 15:01:53 -05:00
Andrew Bartlett
43d62181f2 r24277: Tidyup as requested by metze.
Andrew Bartlett
2007-10-10 15:01:35 -05:00
Andrew Bartlett
72f4ae8246 r24263: Fix bug 4846 (unable to copy users in MMC Active Directory Users and
Computers).

We now generate a security descriptor for each object, when it is
created.  This seems to keep MMC happy.  The next step is to honour
it.

Andrew Bartlett
2007-10-10 15:01:32 -05:00
Andrew Bartlett
53c248c264 r24262: Set the objectCategory by default in the objectclass module, rather than using templates.
Modify the samba3sam test to be less fussy, and not use the
objectclass module (which requires proper schema stuff now).

Andrew Bartlett
2007-10-10 15:01:32 -05:00
Andrew Bartlett
af092a361d r24260: Ensure we always override any existing values for these generated
attributes.  Anything else leads to madness.

Andrew Bartlett
2007-10-10 15:01:31 -05:00
Andrew Bartlett
0f7135a468 r24259: Rework the objectclass module to use the new schema, rather than the
ldb_subclass list.

Next step will be to have this module also set the objectCategory and
default ntSecurityDescriptor

Andrew Bartlett
2007-10-10 15:01:31 -05:00
Andrew Bartlett
5f08a686a6 r24249: Thse generated attributes should not be pushed this far down the stack
in any cse.

Andrew Bartlett
2007-10-10 15:01:30 -05:00
Andrew Bartlett
e5fdcda2a1 r24247: Remove extra newlines from ldb_debug() calls - it already adds one.
Andrew Bartlett
2007-10-10 15:01:30 -05:00
Andrew Bartlett
d053b8e218 r24060: Fix bug #4806 by Matthias Wallnöfer <mwallnoefer@yahoo.de>: We need to
include the attribute allowedChildClassesEffective for MMC to allow
the creation of containers.

This may need further refinement, but it seems to work for now.

Andrew Bartlett
2007-10-10 15:01:21 -05:00
Andrew Bartlett
51862c4c52 r24010: Fix warning for the function paramter to qsort().
Andrew Bartlett
2007-10-10 15:01:17 -05:00
Andrew Bartlett
848336dc61 r23982: Fix use-after-realloc() found by valgrind and mwallnoefer@yahoo.de.
Should fix bug #4804.

Andrew Bartlett
2007-10-10 15:01:15 -05:00
Andrew Bartlett
d61061052d r23966: It isn't great, but at least now we have some access control in SWAT
This patch prevents non-root and non-administrator users from running
the provision, upgrade and vampire pages.  *I think* the rest of SWAT
is LDB operations, or otherwise authenticated, so we should now be
secure.

I wish I had a better way to 'prove' we got this right, but this is better than nothing, and moves us closer to an alpha.

Andrew Bartlett
2007-10-10 15:01:13 -05:00
Andrew Bartlett
dc27a7e41c r23810: Make things static, and remove unsued code.
This includes some of the original ildap ldap client API.  ldb
provides a much easier abstraction on this to use, and doesn't use
these functions.

Andrew Bartlett
2007-10-10 14:59:21 -05:00
Andrew Tridgell
40c0919aaa r23798: updated old Temple Place FSF addresses to new URL 2007-10-10 14:59:15 -05:00
Andrew Tridgell
84b468b2f8 r23795: more v2->v3 conversion 2007-10-10 14:59:14 -05:00
Andrew Tridgell
fcf38a38ac r23792: convert Samba4 to GPLv3
There are still a few tidyups of old FSF addresses to come (in both s3
and s4). More commits soon.
2007-10-10 14:59:12 -05:00
Andrew Bartlett
3f3da9c471 r23762: Fix DN renames over LDAP, and instrument the partition module. Add a
test to prove the behaviour of LDAP renames etc.

Fix LDB to return correct error code when failing to rename one DN
onto another.

Andrew Bartlett
2007-10-10 14:59:11 -05:00
Andrew Bartlett
5ddbca73d4 r23718: Make Samba4 work against the LDAP backend again.
When we set up the schema, we don't have a partitions container yet.
The LDAP error differs from that given by LDB, so I think we still
have some conformance work to do.

Andrew Bartlett
2007-10-10 14:59:07 -05:00
Andrew Tridgell
968e70b2aa r23699: when we create the global schema, remember to set the ldb opaque so we
can find it again
2007-10-10 14:59:04 -05:00
Andrew Bartlett
e3eb6c2cf6 r23695: By not using the NULL context for these large structures, we don't
falsely report them as leaked.

Andrew Bartlett
2007-10-10 14:59:02 -05:00