1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-27 03:21:53 +03:00
Commit Graph

2840 Commits

Author SHA1 Message Date
Andrew Tridgell
624f5f1b5c r3938: cleaned some old stuff out of loadparm
(This used to be commit f280770c81)
2007-10-10 13:06:06 -05:00
Stefan Metzmacher
7e2e2cf9b2 r3927: add idl file for NDR encoded LDAP attributes used for the directory service
metze
(This used to be commit 07803f2886)
2007-10-10 13:06:06 -05:00
Stefan Metzmacher
90b06b4ea8 r3926: fix compiler warnings
metze
(This used to be commit a9cbaa3cff)
2007-10-10 13:06:06 -05:00
Andrew Bartlett
21ebf8b942 r3922: Add yet another NETLOGON RPC. This is another varient of SamLogon,
that works only on SCHANNEL secured connections (as it needs the
implicit credentials).

Fix some of the IDL.

Andrew Bartlett
(This used to be commit 90cd7b34cc)
2007-10-10 13:06:06 -05:00
Andrew Bartlett
47c3f920db r3921: Cross-test SIDs in RPC-SAMSYNC, fix the build.
Andrew Bartlett
(This used to be commit 49c794a6b2)
2007-10-10 13:06:06 -05:00
Stefan Metzmacher
2f39a9fe62 r3920: - it seem that we need to send a magic bind_guid in DsBind()
to make DsWriteAccountSpn() work

- add idl and torture test for DsWriteAccountSpn()

metze
(This used to be commit 625826ad90)
2007-10-10 13:06:06 -05:00
Andrew Bartlett
587745e32d r3919: Add more info levels to the QueryTrustedDomainInfo structures, with
names and other assistance from the ethereal sources.

More work needs to be done to validate some of the levels, which do
not appear in the query - perhaps they are modification levels.

Andrew Bartlett
(This used to be commit 6363553369)
2007-10-10 13:06:05 -05:00
Andrew Bartlett
88baaee093 r3917: A few more LSA RPCs found in my wanderings (for trusted domains, these
seem to be 'shortcut' RPCs, that just avoid an open/query pair).

Rename a few others to give us a slightly sensible pattern.

Andrew Bartlett
(This used to be commit d6a7ab57e7)
2007-10-10 13:06:05 -05:00
Andrew Tridgell
d2a62ab22e r3916: w2k3 does not check the max_setup count in nttrans requests
(This used to be commit 671a864d8f)
2007-10-10 13:06:05 -05:00
Stefan Metzmacher
ded4440335 r3915: a few updates to the DsCrackNames() torture test
metze
(This used to be commit 62d26e0b91)
2007-10-10 13:06:05 -05:00
Stefan Metzmacher
e94c88cedc r3914: add idl, torture test and simple server for netr_DrsGetDCNameEx2()
metze
(This used to be commit 1ffabbaa66)
2007-10-10 13:06:05 -05:00
Stefan Metzmacher
5e2f7e9ae2 r3913: fix the build
metze
(This used to be commit ba67e98835)
2007-10-10 13:06:05 -05:00
Stefan Metzmacher
3129264308 r3910: add some error codes
metze
(This used to be commit 64570b7a47)
2007-10-10 13:06:05 -05:00
Andrew Bartlett
08c4c748a4 r3909: Fix cross-reference test for trusted domains.
Andrew Bartlett
(This used to be commit f2c86e6194)
2007-10-10 13:06:04 -05:00
Andrew Bartlett
201393fd8b r3908: We know that this field is a flag of some kind, and matches the output on LSA.
Andrew Bartlett
(This used to be commit e3dce0f5be)
2007-10-10 13:06:04 -05:00
Andrew Bartlett
b6b61cec79 r3907: * Rename lsa_Name to lsa_String
* Add new IDL to LSA, to query information about trusted domains (for
  cross-check with SamSync).

Andrew Bartlett
(This used to be commit 174c077842)
2007-10-10 13:06:04 -05:00
Stefan Metzmacher
ca751e2638 r3906: fix compiler warnings
metze
(This used to be commit df924e1822)
2007-10-10 13:06:04 -05:00
Andrew Bartlett
21eecc6282 r3905: (oops, missing file: samsync.c)
* Add new LSA calls to open trusted domains

* Add new tests for ACCOUNTs in SamSync

* Clean up names in NETLOGON and LSA

* Verify Security Descriptors against LSA, as well as SamR

Andrew Bartlett
(This used to be commit ed838beddb)
2007-10-10 13:06:03 -05:00
Andrew Bartlett
be7a3e3ce0 r3904: * Add new LSA calls to open trusted domains
* Add new tests for ACCOUNTs in SamSync

* Clean up names in NETLOGON and LSA

* Verify Security Descriptors against LSA, as well as SamR

Andrew Bartlett
(This used to be commit 7094502fe0)
2007-10-10 13:06:03 -05:00
Stefan Metzmacher
aae697b924 r3903: better fix for -r 3902
(not introduce new warnings:-)

metze
(This used to be commit 36b11992dc)
2007-10-10 13:06:03 -05:00
Stefan Metzmacher
7aeebaa962 r3902: fix compiler warnings
metze
(This used to be commit ce7686ac3e)
2007-10-10 13:06:03 -05:00
Stefan Metzmacher
243b314a23 r3901: fix compiler warnings
metze
(This used to be commit efe840c8b0)
2007-10-10 13:06:03 -05:00
Stefan Metzmacher
ac40a16d6a r3900: fix compiler warning
metze
(This used to be commit f2ff50dfc4)
2007-10-10 13:06:03 -05:00
Stefan Metzmacher
2877f415ae r3899: fix compiler warnings
metze
(This used to be commit b1b47bda01)
2007-10-10 13:06:03 -05:00
Jelmer Vernooij
cc368fa69e r3898: Work towards local/server DCOM support, start working
on Simple example server side implementation
(This used to be commit 98afb504d9)
2007-10-10 13:06:02 -05:00
Simo Sorce
a4de8cd6a5 r3897: add a locking infrastructure
(This used to be commit a99c0adb09)
2007-10-10 13:06:02 -05:00
Jelmer Vernooij
7e3503e277 r3896: Correct header files in rpc server templates plus
some other minor fixes
(This used to be commit 9fca748fe3)
2007-10-10 13:06:02 -05:00
Jelmer Vernooij
d53fd3d8d5 r3891: Add rot (Running Object Table) interface
(This used to be commit 4840eaeed3)
2007-10-10 13:06:02 -05:00
Jeremy Allison
f55ee60575 r3888: Just proving :-) to tridge that a Setfileinfo with a modified
write time is sticky, and causes any subsequent writes not to update
the last write time. Added write that extends the file followed by
fnum specific smbflush. It stays the same time :-).
Jeremy.
(This used to be commit a2ea2166dc)
2007-10-10 13:06:02 -05:00
Jeremy Allison
c760b8b969 r3887: Much better understanding of delayed write time, and the interaction
with setfileinfo modifying the write time. I have some ideas on how
to emulate this in the Samba server now but the commented case will
be very hard...
Jeremy.
(This used to be commit c9211d0847)
2007-10-10 13:06:02 -05:00
Jeremy Allison
96ecdf3a33 r3886: Trying to understand delayed file write update times. Added another
test that uses 2 connections and queries the time via pathinfo, not fileinfo.
MSDN states : "When writing to a file, the last write time is not fully updated
until all handles used for writing have been closed." - but this is obviously
untrue. W2K3 seems to use a 2 second granularity for this. Next I'll try using
SetFileTime equivalent to see if this takes the same time to take effect.
Jeremy.
(This used to be commit 2e47e241f9)
2007-10-10 13:06:02 -05:00
Andrew Bartlett
5d35fe6f71 r3885: Add security descriptor comparison to our RPC-SAMSYNC test. We now
verify that the security descriptor found in the SamSync is the same
as what is available over SAMR.

Unfortunately, the administrator seems unable to retrieve the SACL on
the security descriptor, so I've added a new function to compare with
a mask.

Andrew Bartlett
(This used to be commit 39ae5e1dac)
2007-10-10 13:06:01 -05:00
Jelmer Vernooij
d95a256d1b r3881: Split up the LIBNDR_GEN subsystem into NDR_* and RPC_NDR_* subsystems.
This reduces the total size of the samba binaries from 119 Mb to 73 Mb.
Next step will be to have the build system obtain some of this information
by itself, so that we don't have to write ~10 lines per interface manually.
(This used to be commit 16d905f6b0)
2007-10-10 13:06:01 -05:00
Stefan Metzmacher
b307f18825 r3876: fix compiler warnings
metze
(This used to be commit 9ad3837dba)
2007-10-10 13:06:00 -05:00
Tim Potter
c20a326752 r3870: Delete wrappers for tdb_lockkeys() and tdb_unlockkeys().
(This used to be commit 5af52c559e)
2007-10-10 13:06:00 -05:00
Stefan Metzmacher
717c8bc795 r3869: in the NDR encoded replPropertyMetaData attribute in ADS
I see a new 64 bit time field which are seconds since 1601,

this will be mapped to NTTIME by th eparsing code

+#define NTTIME_1sec NTTIME

metze
(This used to be commit db35f3b0f9)
2007-10-10 13:05:59 -05:00
Jelmer Vernooij
a0fa682faa r3861: - Put ndr and rpc client code in seperate files
- Add some const
(This used to be commit a00bda88e1)
2007-10-10 13:05:58 -05:00
Andrew Tridgell
be01250d1a r3838: use "security.NTACL" instead of "security.NTAcl" for the xattr name for ACLs
(This used to be commit db72290bbe)
2007-10-10 13:05:58 -05:00
Andrew Tridgell
9b6c08a0d1 r3837: added support for LsaLookupSids in the LSA rpc server. This allows the GUI ACL editor on w2k to
correctly display names instead of SIDs.
(This used to be commit fdaa753578)
2007-10-10 13:05:58 -05:00
Andrew Tridgell
0b691afe81 r3836: - fixed the handling of NT_STATUS_BUFFER_TOO_SMALL in nttrans server
- fixed revision number on default DACL

- fixed DACL_PRESENT bit in acl query

with these fixes cacls.exe and the GUI ACL editor in w2k both work
against pvfs. The GUI editor is slow as it times out looking up the
SID -> name mappings.
(This used to be commit 4468018cb6)
2007-10-10 13:05:58 -05:00
Andrew Tridgell
85215a9a26 r3835: - added testing of setting an initial ACL on a file using NTTRANS create
- added support for initial ACLs in pvfs backend
(This used to be commit 05ee9179f7)
2007-10-10 13:05:58 -05:00
Andrew Tridgell
837909e3ab r3834: - fixed XATTR_NTACL_NAME
- pvfs now passes RAW-ACLS
(This used to be commit 2e19edaa4e)
2007-10-10 13:05:58 -05:00
Andrew Tridgell
82da254ece r3833: NTACL is a better xattr name than DosAcl (tpot suggested this)
(This used to be commit 17911eea59)
2007-10-10 13:05:58 -05:00
Andrew Tridgell
bc7b4abc3a r3832: added NT ACL query/set to the posix NTVFS backend. The default ACL is
based on the current nttoken, which is completely wrong, but works as a start.

The ACL is stored in the xattr system.DosAcl, using a NDR encoded IDL
union with a version number to allow for future expansion.

pvfs does not yet check the ACL for file access. At the moment the ACL
is just query/set.

We also need to do some RPC work to allow the windows ACL editor to be
used. At the moment is queries the ACL fine, but displays an error
when it fails to map the SIDs via rpc.
(This used to be commit 3a1f20d874)
2007-10-10 13:05:57 -05:00
Andrew Tridgell
3c25dfe789 r3831: added nttrans server code for query/set security descriptor. This
means ACLs now can be set/fetched from the CIFS NTVFS backend.
(This used to be commit f49c636e10)
2007-10-10 13:05:57 -05:00
Andrew Tridgell
012be92f0a r3830: unified the query/set security descriptor code with the rest of the
queryfileinfo/setfileinfo logic, so querying/setting a security
descriptor is treated as just another file query/set operation.

This will allow NTVFS backends to see the query/set security
descriptor operations as RAW_FILEINFO_SEC_DESC and
RAW_SFILEINFO_SEC_DESC operations.
(This used to be commit f68a6b6b91)
2007-10-10 13:05:57 -05:00
Andrew Tridgell
bbf009b46f r3829: added a RAW-ACLS test suite that tests query/set of ACLs on a file
(This used to be commit 2ff9816ae0)
2007-10-10 13:05:57 -05:00
Andrew Tridgell
cae123912c r3828: added testing of opening an existing file with EAs (the EAs are ignored)
(This used to be commit 6d53c6a0ae)
2007-10-10 13:05:57 -05:00
Andrew Tridgell
6695019d02 r3827: fixed copyright notices to remove simo and lkcl who have no code left in this file
(This used to be commit c75eb85939)
2007-10-10 13:05:57 -05:00
Andrew Tridgell
5f868bc1ac r3826: - added testing of ea lists in NTTRANS CREATE
- fixed push/pull of chained ea lists

- fixed a bug in the nttrans wire encoding
(This used to be commit fcd0922407)
2007-10-10 13:05:57 -05:00