1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
Commit Graph

56226 Commits

Author SHA1 Message Date
Matthias Dieter Wallnöfer
bfb3eaabe7 s4/python: flags
- Introduce the "userAccountControl", "groupType" and "sAMAccountType" flags
- Corrects the "domain/forestFunctionality" and "domainControllerFunctionality" flags
2009-09-17 12:40:27 +02:00
Matthias Dieter Wallnöfer
7c71370a0f libds/common/flags: various
- Reorders the header file to have the order "userAccountFlags", "groupType",
  "sAMAccountType" (matches the order in the flag_mapping.c and samldb module)
- Fixes the group account flags properly up
- Fixes the flags for "domain/forestFunctionality" and "domainControllerFunctionality"
  up
2009-09-17 12:02:58 +02:00
Andrew Tridgell
23676b6e9e Merge branch 'master' of /home/tridge/samba/git/combined 2009-09-16 03:58:21 -07:00
Andrew Tridgell
45cebf7f11 s4-repl: raise a debug level 2009-09-16 03:58:17 -07:00
Andrew Tridgell
98f2a3b6a3 s4-dsdb: treat uSNHighest as 0 if @REPLCHANGED doesn't exist
When a partition is first created it still needs a uSNHighest value
2009-09-16 03:58:17 -07:00
Andrew Tridgell
7860817737 Merge branch 'master' of /home/tridge/samba/git/combined 2009-09-16 03:58:13 -07:00
Andrew Tridgell
c405d721c1 s4-repl: raise a debug level 2009-09-16 03:57:56 -07:00
Andrew Tridgell
1b3f5cee2e Merge branch 'master' of ssh://git.samba.org/data/git/samba 2009-09-16 03:57:09 -07:00
Andrew Tridgell
f391e64a82 Merge branch 'master' of /home/tridge/samba/git/combined 2009-09-16 03:56:07 -07:00
Andrew Tridgell
79082f400e s4-dsdb: treat uSNHighest as 0 if @REPLCHANGED doesn't exist
When a partition is first created it still needs a uSNHighest value
2009-09-16 03:43:37 -07:00
Stefan Metzmacher
033ced60ac libcli/auth: rewrite schannel sign/seal code to be more generic
This prepares support for HMAC-SHA256/AES.

metze
2009-09-16 12:29:06 +02:00
Stefan Metzmacher
8f482ae663 lib/crypto: include aes.h into crypto.h
metze
2009-09-16 12:29:05 +02:00
Andrew Tridgell
72217950d3 Merge branch 'master' of /home/tridge/samba/git/combined 2009-09-15 20:51:30 -07:00
Andrew Tridgell
30d13288e5 s4-repl: take advantage of async RPC forwarding
This uses async RPC forwarding for the DsReplicaSync call
2009-09-15 20:51:10 -07:00
Andrew Tridgell
f80363c90a s4-rpc: added a module for forwarding RPC requests
dcesrv_irpc_forward_rpc_call() can be used to forward an arbitrary RPC
request to another task in Samba4, with the return being handled
asynchronously.

This is useful for forwarding DRS requests to the repl or kcc tasks
2009-09-15 20:50:30 -07:00
Andrew Tridgell
9417aabe4b Merge branch 'master' of /home/tridge/samba/git/combined 2009-09-15 19:53:05 -07:00
Andrew Tridgell
5d2dfd12cf s4-drs: lock down key DRS calls
The key DRS calls should only be allowed by administrators or domain
controllers
2009-09-15 19:52:25 -07:00
Andrew Tridgell
7ded0741d9 s4-security: added a new security level SECURITY_DOMAIN_CONTROLLER
This will be used as a simple way to lock down DRS replication to
administrators and domain controllers
2009-09-15 19:25:45 -07:00
Andrew Tridgell
7744283c36 Merge branch 'master' of /home/tridge/samba/git/combined 2009-09-15 18:46:18 -07:00
Andrew Tridgell
10e25fc5e9 s4-ldb: ldap attribute names can contain a '.'
When they are of the form of OIDs
2009-09-15 18:45:43 -07:00
Andrew Tridgell
03d0005b25 s4-ldb: expose ldb_transaction_prepare_commit() in ldb
It is useful to be able to control the 2 phase commit from application
code (s4 replication uses it)
2009-09-15 18:45:43 -07:00
Andrew Tridgell
458dda1f15 s4-repl: don't do double replication
When we replicate from a remote DC, we need to note the new uSN that
the local changes have resulted in, and modify the uSN that the notify
task uses to determine if it should send a ReplicaSync message back to
the remote DC. Otherwise we end up always triggering a ReplicaSync
every time we replicate from another DC
2009-09-15 18:45:43 -07:00
Andrew Tridgell
654672008c tdb: allow reads after prepare commit
We previously only allowed a commit to happen after a prepare
commit. It is in fact safe to allow reads between a prepare and a
commit, and the s4 replication code can make use of that, so allow it.
2009-09-15 18:45:43 -07:00
Andrew Tridgell
9e0b1a3a1f s4-drs: filter based on local_usn
The getncchanges uSN is in our local space, so we must compare it to
the local_usn in replPropertyMetaData
2009-09-15 18:45:42 -07:00
Andrew Tridgell
bc3bbae6d2 s4-repl: make sure we marshal the replPropertyMetaData after the last change
we were setting local_usn after the marshall, so it wasn't going into
the object
2009-09-15 18:45:42 -07:00
Andrew Tridgell
ff8ad222cd s4-dsdb: use DLIST_ADD() not DLIST_ADD_END()
Using DLIST_ADD_END() to construct a long list is very inefficient (it
is O(n^2). These lists are not ordered, so using DLIST_ADD() is much
better.
2009-09-15 18:45:42 -07:00
Andrew Tridgell
12f689eef4 s4-ldb: cope better with corruption of tdb records
When doing an indexed search if we hit a corrupt record we abandoned
the indexed search and did a full search. The problem was that we
might have sent some records to the caller already, which means the
caller ended up with duplicate records. Fix this by returning a search
error if indexing returns an error and we have given any records to
the caller.
2009-09-15 18:45:42 -07:00
Andrew Tridgell
00fb6705ff talloc: when we enable NULL tracking, reparent the autofree context
If NULL tracking is enabled after the autofree context is initialised
then autofree ends up separate from the null_context. This means that
talloc_report_full() doesn't report the autofree context. Fix this by
reparenting the autofree context when we create the null_context.
2009-09-15 18:45:41 -07:00
Andrew Tridgell
089dc64cbb s4-repl: add a debug to make it easier to monitor replication 2009-09-15 18:45:41 -07:00
Volker Lendecke
444a05c28d s3: Fix reading beyond the end of a named stream in xattr_streams
This was found thanks to a test by Sivani from Microsoft against Samba at the
SDC plugfest
2009-09-16 03:42:36 +02:00
Volker Lendecke
00d7aad85a s3: Add some debugs to streams_xattr 2009-09-16 03:42:36 +02:00
Günther Deschner
5b86a0ac01 schannel: remove last traces of gensec.
Guenther
2009-09-16 03:23:05 +02:00
Günther Deschner
310051c79d lib/crypto: link in AES crypto for s4 as well.
Guenther
2009-09-16 02:09:59 +02:00
Günther Deschner
97d7a524ab s3-schannel: remove unused schannel_decode/schannel_encode.
Guenther
2009-09-16 01:55:13 +02:00
Günther Deschner
799f8d7e13 schannel: fully share schannel sign/seal between s3 and 4.
Guenther
2009-09-16 01:55:06 +02:00
Günther Deschner
f3979b50a9 schannel: move schannel_sign to main directory.
Guenther
2009-09-16 01:54:59 +02:00
Günther Deschner
1a21db8ea1 s4-schannel: try to fix the build.
Guenther
2009-09-16 01:07:26 +02:00
Günther Deschner
1f4123677e s4-schannel: first step of decoupling schannel from gensec.
Guenther
2009-09-16 00:16:04 +02:00
Günther Deschner
9cb205d753 s4-schannel: strip trailing whitespace.
Guenther
2009-09-16 00:13:20 +02:00
Günther Deschner
f8014d30e7 s3-schannel: fix blob length when pulling off a NL_AUTH_SIGNATURE in
cli_pipe_verify_schannel().

Guenther
2009-09-16 00:11:23 +02:00
Günther Deschner
87acb96fc3 lib/crypto: add aes encryption routines to main cryto lib.
Guenther
2009-09-16 00:11:23 +02:00
Andrew Tridgell
a04caf329f Merge branch 'master' of /home/tridge/samba/git/combined 2009-09-15 14:53:02 -07:00
Andrew Tridgell
7b3b66d7a2 s4-ldb: ldap attribute names can contain a '.'
When they are of the form of OIDs
2009-09-15 14:52:29 -07:00
Andrew Tridgell
08f144777d s4-ldb: expose ldb_transaction_prepare_commit() in ldb
It is useful to be able to control the 2 phase commit from application
code (s4 replication uses it)
2009-09-15 14:52:29 -07:00
Andrew Tridgell
bfd0877261 s4-repl: don't do double replication
When we replicate from a remote DC, we need to note the new uSN that
the local changes have resulted in, and modify the uSN that the notify
task uses to determine if it should send a ReplicaSync message back to
the remote DC. Otherwise we end up always triggering a ReplicaSync
every time we replicate from another DC
2009-09-15 14:52:23 -07:00
Andrew Tridgell
f5aec9ebb4 tdb: allow reads after prepare commit
We previously only allowed a commit to happen after a prepare
commit. It is in fact safe to allow reads between a prepare and a
commit, and the s4 replication code can make use of that, so allow it.
2009-09-15 14:52:01 -07:00
Andrew Tridgell
48bc784e08 s4-drs: filter based on local_usn
The getncchanges uSN is in our local space, so we must compare it to
the local_usn in replPropertyMetaData
2009-09-15 14:52:01 -07:00
Andrew Tridgell
7f3817ab77 s4-repl: make sure we marshal the replPropertyMetaData after the last change
we were setting local_usn after the marshall, so it wasn't going into
the object
2009-09-15 14:52:01 -07:00
Andrew Tridgell
e1abb39388 s4-dsdb: use DLIST_ADD() not DLIST_ADD_END()
Using DLIST_ADD_END() to construct a long list is very inefficient (it
is O(n^2). These lists are not ordered, so using DLIST_ADD() is much
better.
2009-09-15 14:52:00 -07:00
Andrew Tridgell
4861194f39 s4-ldb: cope better with corruption of tdb records
When doing an indexed search if we hit a corrupt record we abandoned
the indexed search and did a full search. The problem was that we
might have sent some records to the caller already, which means the
caller ended up with duplicate records. Fix this by returning a search
error if indexing returns an error and we have given any records to
the caller.
2009-09-15 14:52:00 -07:00