1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-04 17:47:26 +03:00

923 Commits

Author SHA1 Message Date
Stefan Metzmacher
88ef467282 r20251: I found out that the oid-prefix to uint32-id-prefix mapping is transferred
in replication replies, but I don't know the exact encoding.

for example the oids are transferred as:

2.5.4			=> uint8_t v[] = { 0x55, 0x04 };
2.5.5			=> uint8_t v[] = { 0x55, 0x05 };
2.5.6			=> uint8_t v[] = { 0x55, 0x06 };
2.5.18			=> uint8_t v[] = { 0x55, 0x12 };
2.5.20			=> uint8_t v[] = { 0x55, 0x14 };
2.5.21			=> uint8_t v[] = { 0x55, 0x15 };
1.2.840.113556.1.2	=> uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x14, 0x01, 0x02 };
1.2.840.113556.1.3	=> uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x14, 0x01, 0x03 };
1.2.840.113556.1.4	=> uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x14, 0x01, 0x04 };
1.2.840.113556.1.5	=> uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x14, 0x01, 0x05 };
1.2.840.113556.1.5.7000	=> uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x14, 0x01, 0x05, 0xb6, 0x58 };
1.2.840.113549.1.9	=> uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x09 };
2.16.840.1.113730.3	=> uint8_t v[] = { 0x60, 0x86, 0x48, 0x01, 0x86, 0xf8, 0x42, 0x03 };
2.16.840.1.113730.3.1	=> uint8_t v[] = { 0x60, 0x86, 0x48, 0x01, 0x86, 0xf8, 0x42, 0x03, 0x01 };
2.16.840.1.113730.3.2	=> uint8_t v[] = { 0x60, 0x86, 0x48, 0x01, 0x86, 0xf8, 0x42, 0x03, 0x02 };
0.9.2342.19200300.100.1	=> uint8_t v[] = { 0x09, 0x92, 0x26, 0x89, 0x93, 0xf2, 0x2c, 0x64, 0x01 };
0.9.2342.19200300.100.4	=> uint8_t v[] = { 0x09, 0x92, 0x26, 0x89, 0x93, 0xf2, 0x2c, 0x64, 0x04 };
1.3.6.1.4.1.250.1	=> uint8_t v[] = { 0x2b, 0x06, 0x01, 0x04, 0x01, 0x81, 0x7a, 0x01 };
1.3.6.1.4.1.1466.101.119=> uint8_t v[] = { 0x2b, 0x06, 0x01, 0x04, 0x01, 0x8b, 0x3a, 0x65, 0x77 };

if someone knows how the encoding works, please tell me:-)
I assume some ASN.1 encoding...

metze
(This used to be commit aa720a15319392fee5c532959192d0df5bf4c718)
2007-10-10 14:29:27 -05:00
Andrew Bartlett
d471e52d23 r20149: Remove the smb.conf distinction between PDC and BDC. Now the correct
way to setup a Samba4 DC is to set 'server role = domain controller'.

We use the fSMORoleOwner attribute in the base DN to determine the PDC.

This patch is quite large, as I have corrected a number of places that
assumed taht we are always the PDC, or that used the smb.conf
lp_server_role() to determine that.

Also included is a warning fix in the SAMR code, where the IDL has
seperated a couple of types for group display enumeration.

We also now use the ldb database to determine if we should run the
global catalog service.

In the near future, I will complete the DRSUAPI
DsGetDomainControllerInfo server-side on the same basis.

Andrew Bartlett
(This used to be commit 67d8365e831adf3eaecd8b34dcc481fc82565893)
2007-10-10 14:29:15 -05:00
Stefan Metzmacher
5cc44027dc r20145: fix whitespaces
metze
(This used to be commit d2d9842914bb049189f9349ff96b32c088cd02a8)
2007-10-10 14:29:15 -05:00
Stefan Metzmacher
f1aaa16cbc r20115: from Julien Kerihuel <j.kerihuel@openchange.org>, thanks!:
Here is a patch that adds a torture:dc_binding parametric option to
   torture_create_testuser in testjoin.c. This patch is used in OpenChange
   torture tests when the AD is different from the Exchange Server. This generic
   option could also be used for later 'member server' tests in Samba4.

metze
(This used to be commit 9ddabfc60e1a4f5e471991253141ce458c9a683d)
2007-10-10 14:29:09 -05:00
Andrew Bartlett
334f78d206 r20113: Update the DRSUAPI CrackNames test to explore a few more cases, and in
particular to verify more expected results.

Also return more details from the join process.  Now we also return
the machine account's GUID.

Andrew Bartlett
(This used to be commit 5b32f102af1fc7acb56bf7eaa40068d60a1ee396)
2007-10-10 14:29:08 -05:00
Stefan Metzmacher
00306527b6 r20093: some documentation updates
metze
(This used to be commit 314308c0bf8eeb168d59dab2a867e6bf5f51266b)
2007-10-10 14:29:04 -05:00
Stefan Metzmacher
d3c9737e5b r20079: the 2nd guid is the source_dsa invocation_id not the objectGUID,
this wasn't noticed because on the 1st dc in the forest both have the
same value

metze
(This used to be commit 527bd9a0a361e19606e25e885b92da316e740bf9)
2007-10-10 14:29:01 -05:00
Stefan Metzmacher
766dfed735 r20065: make it possible to get the dns domain name and netbios domain name
of the join account

metze
(This used to be commit 45da80888f18f0fe10d1aeb9089a695125b184e1)
2007-10-10 14:28:57 -05:00
Stefan Metzmacher
6d34f76f86 r20039: things which need to be done for unbecoming a dc
metze
(This used to be commit 73f7e2d5b3b3ae767644b96ff9783642aac153d0)
2007-10-10 14:28:52 -05:00
Stefan Metzmacher
4daaae70b6 r20038: document first rootdse search
metze
(This used to be commit da6415363b2694961a59385437d34d16a932e77b)
2007-10-10 14:28:51 -05:00
Stefan Metzmacher
989b47d1f1 r20002: finish requests on the first LDAP connection
metze
(This used to be commit c5efd061c5457fb4d344daa2e40dada9c0c37e79)
2007-10-10 14:28:46 -05:00
Stefan Metzmacher
f92a005f47 r20000: 20000
metze
(This used to be commit a3202714a34d49af30435dc3d2935e053e141853)
2007-10-10 14:28:46 -05:00
Stefan Metzmacher
2c641bb21a r19999: add section for adding the server object
metze
(This used to be commit f2db31f41dc1727375a560fdc6eaad2c037bf5da)
2007-10-10 14:28:45 -05:00
Stefan Metzmacher
5a45b97415 r19998: add section for finding details about the new_dc server object
metze
(This used to be commit cd534dc93646a5981c4d2f0bc27ba9d3259024eb)
2007-10-10 14:28:45 -05:00
Stefan Metzmacher
fdecfa7be1 r19997: section about finding the new_dc computer account
metze
(This used to be commit 757ed019c219fd215cae23d80281d0b221e495e1)
2007-10-10 14:28:45 -05:00
Stefan Metzmacher
7196056f49 r19996: add section about finding site details
metze
(This used to be commit 500113ca5756933de15537b44ccc834ea32307b3)
2007-10-10 14:28:44 -05:00
Stefan Metzmacher
df8fcba2bb r19995: add section about finding details of the RID Manager fSMORoleOwner
metze
(This used to be commit ce671ff6c13e71c5b54ba8f14d81af45a3e796a9)
2007-10-10 14:28:44 -05:00
Stefan Metzmacher
c117648b98 r19994: complete section about finding details about the
Infrastructure fSMORoleOwner

metze
(This used to be commit adbff0d696237efac27f260c115678169b8646d8)
2007-10-10 14:28:44 -05:00
Stefan Metzmacher
d3d0d069c7 r19988: the first LDAP calls for becoming a ads dc
metze
(This used to be commit 2e355f84888ebea1376151bcba4013980da08c15)
2007-10-10 14:28:43 -05:00
Stefan Metzmacher
eb7187a994 r19987: some more notes about how to w2k3 becomes a dc
the strange thing is the DsGetNCChanges() calls are on their on DRSUAPI
connection, but use a bind_handle (policy handle from another connection)

metze
(This used to be commit a9c7d6e7f353e85234b93f26973969b157b1e7f1)
2007-10-10 14:28:43 -05:00
Stefan Metzmacher
95df05014d r19969: split become ads dc TODO lists into W2K and W2K3 sections
metze
(This used to be commit 88818b3c0822cfb71b08c8f06c48443b26116a07)
2007-10-10 14:28:42 -05:00
Stefan Metzmacher
18d88d0f8d r19968: add some more notes about what's needed for becoming a ads dc
metze
(This used to be commit 09b492c450596b18a12cefa99c56f62504a519d7)
2007-10-10 14:28:42 -05:00
Stefan Metzmacher
99c3d9c371 r19967: this unknowns are max_object_count and max_ndr_size
metze
(This used to be commit 3e6264d872e4fc39a8e0712293492ad413345de9)
2007-10-10 14:28:41 -05:00
Stefan Metzmacher
3ac1f590e9 r19876: test that we can do a session setup and tree connect using the workstation
and dc credentials

I noticed w2k3 has gets NT_STATUS_LOGON_FAILURE after a it has joined a samba4 domain

metze
(This used to be commit 5da2762b620139f9c332d78abfc084f333538ab8)
2007-10-10 14:28:29 -05:00
Jelmer Vernooij
68ebe25724 r19850: Fix IDL warnings.
(This used to be commit 92b8bde561277a6b83048ce003cc29ff1b380255)
2007-10-10 14:28:25 -05:00
Jelmer Vernooij
60b401efb9 r19846: Fix bunch of IDL warnings.
(This used to be commit 48e6df59444a78dc268b84c5f94787de09d41908)
2007-10-10 14:28:24 -05:00
Jelmer Vernooij
41848fea6f r19844: Fix warnings and errors in epmapper IDL.
(This used to be commit 0221d5b6c4250a3a2c86c623c534996d7decb1f6)
2007-10-10 14:28:24 -05:00
Jelmer Vernooij
ef9e094d84 r19843: Fix warning.
(This used to be commit 38067c1adf0f9c3974302a8481e23b6a63eb6d42)
2007-10-10 14:28:23 -05:00
Jelmer Vernooij
f077cb7a09 r19836: Fix warnings in some IDL files.
(This used to be commit bd48f78b1d6dba73e44630ad930fd6089d2076b2)
2007-10-10 14:28:23 -05:00
Simo Sorce
4889eb9f7a r19831: Big ldb_dn optimization and interfaces enhancement patch
This patch changes a lot of the code in ldb_dn.c, and also
removes and add a number of manipulation functions around.

The aim is to avoid validating a dn if not necessary as the
validation code is necessarily slow. This is mainly to speed up
internal operations where input is not user generated and so we
can assume the DNs need no validation. The code is designed to
keep the data as a string if possible.

The code is not yet 100% perfect, but pass all the tests so far.
A memleak is certainly present, I'll work on that next.

Simo.
(This used to be commit a580c871d3784602a9cce32d33419e63c8236e63)
2007-10-10 14:28:22 -05:00
Andrew Bartlett
ce2d92c878 r19760: Create a DC account for the drsuapi tests to work on, rather than
choosing an existing DC.

Allow to skip some tests under Samba4.

Andrew Bartlett
(This used to be commit 705fbae325267fd0ed11f463f954f8e45802d6d5)
2007-10-10 14:28:20 -05:00
Stefan Metzmacher
65a50f46c8 r19699: - use better names for the site strings
- use the client_site when creating the server object

metze
(This used to be commit b02d0e1be343c7d609715237dc842702b6fbe231)
2007-10-10 14:28:12 -05:00
Stefan Metzmacher
8845a00fa1 r19641: ldap_delete() is only allowed as user, we need to give credentials to the ildap backend
metze
(This used to be commit a996d2633600d32b2c2c04edebd0b901c627f00b)
2007-10-10 14:25:24 -05:00
Andrew Bartlett
13dbee3ffe r19598: Ahead of a merge to current lorikeet-heimdal:
Break up auth/auth.h not to include the world.

Add credentials_krb5.h with the kerberos dependent prototypes.

Andrew Bartlett
(This used to be commit 2b569c42e0fbb596ea82484d0e1cb22e193037b9)
2007-10-10 14:25:00 -05:00
Andrew Tridgell
c24b7a045a r19549: fixed some indentation
(This used to be commit ea1e4685d914c09d615bb7c4a5678b5de00da5f4)
2007-10-10 14:24:48 -05:00
Jelmer Vernooij
4fa24df98d r19507: Merge my DSO fixes branch. Building Samba's libraries as shared libraries
works again now, by specifying --enable-dso to configure.
(This used to be commit 7a01235067a4800b07b8919a6a475954bfb0b04c)
2007-10-10 14:24:41 -05:00
Stefan Metzmacher
f8afc52ed0 r19492: - fix RPC-AUTHCONTEXT and RPC-SAMBA3-GETUSERNAME (sorry volker:-)
smb_composite_sesssetup() doesn't set session->vuid any more...
(I changed that yesterday, because it was inconsistently only done
 for spnego session setups, as it was needed internaly for the 2nd
 session setup call, but know session->vuid is only touched (reset to 0)
 for the wrong password case)

metze
(This used to be commit bf2a7dd2180c9a025b99b87831960827baf75f16)
2007-10-10 14:24:38 -05:00
Andrew Bartlett
614e52764e r19462: This isn't an encrypted attribute.
Andrew Bartlett
(This used to be commit 12765db714de9e0fed61e6616b3671d525ee3bef)
2007-10-10 14:21:36 -05:00
Jelmer Vernooij
a39f239cb2 r19392: Use torture_setting_* rather than lp_parm_* where possible.
(This used to be commit b28860978fe29c5b10abfb8c59d7182864e21dd6)
2007-10-10 14:21:24 -05:00
Rafal Szczesniak
c7090e6669 r19380: forgot to add home drive testing as well as home directory...
rafal
(This used to be commit 732c22071e78f16fd0731635ca4b3e093d49078a)
2007-10-10 14:21:21 -05:00
Rafal Szczesniak
8fd1ca82d8 r19379: add testing home directory field to the samr tests.
rafal
(This used to be commit 4dfd1d50274bc1ff539782e9bfdb2b7b20275d06)
2007-10-10 14:21:21 -05:00
Andrew Tridgell
f721bcda15 r19366: don't fail async echo tests due to rounding errors
(This used to be commit 9389ca13a38b9a3ba6f3533293ab0d0c8c06a30a)
2007-10-10 14:21:18 -05:00
Jelmer Vernooij
8773e743c5 r19339: Merge my 4.0-unittest branch. This adds an API for more fine-grained
output in the testsuite rather than just True or False for a
set of tests.

The aim is to use this for:
 * known failure lists (run all tests and detect tests that
						started working or started failing). This
   would allow us to get rid of the RPC-SAMBA3-* tests
 * nicer torture output
 * simplification of the testsuite system
 * compatibility with other unit testing systems
 * easier usage of smbtorture (being able to run one test
						and automatically set up the environment for that)

This is still a work-in-progress; expect more updates over the next couple of
days.
(This used to be commit 0eb6097305776325c75081356309115f445a7218)
2007-10-10 14:21:12 -05:00
Volker Lendecke
518666fde1 r19293: Add RPC-SAMBA3-WINREG, the start of a test of what Samba3 is able to perform
right now.

Volker
(This used to be commit f381232c3ad032fcffb37d68d005e94cb2c95971)
2007-10-10 14:21:03 -05:00
Andrew Bartlett
57b8c5cd22 r19266: Add a target_hostname element to the binding struct. This allows us
to perform a lookup once, resolve the name to an IP, while still
communicating the full name to the lower layers, for kerberos etc.

This fixes 'net samdump', which was failing due to the schannel target
name being *smbserver.

Andrew Bartlett
(This used to be commit 0546f487f4cc99b5549dc1e457ea243d4bd66333)
2007-10-10 14:21:00 -05:00
Volker Lendecke
554972d1d2 r19247: Ok, figured out that wkssvc wksgetinfo also gives the server name. I thought I
had tested that w2k3 copies the input server name to output.

Volker
(This used to be commit b7e54501f773a11892ab5ef3202ee4d57723725e)
2007-10-10 14:20:57 -05:00
Volker Lendecke
4ead8b391d r19205: Some consolidation
(This used to be commit 6991864a032b136c68190b0f86714cd6c0c14b9f)
2007-10-10 14:20:54 -05:00
Volker Lendecke
b0d8e2d42c r19204: Samba3 does level6 now
(This used to be commit 603ecde9bca4460fb139f5119b9034c8b22f727b)
2007-10-10 14:20:53 -05:00
Volker Lendecke
22abc6b927 r19202: Make RPC-SAMBA3-SPOOLSS work against w2k3 again
(This used to be commit f67a0159d107238a0b2197777fb2d51596f66097)
2007-10-10 14:20:53 -05:00
Volker Lendecke
8f073d3004 r19153: Simple consistency check for enumprinters level 2 as well
(This used to be commit bd50a5929494949af865107551bb637ca9a3d96b)
2007-10-10 14:20:44 -05:00