1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-21 01:59:07 +03:00

25429 Commits

Author SHA1 Message Date
Matthias Dieter Wallnöfer
16e73c68cb s4:objectclass LDB module - implement the "objectClass" change restrictions on Windows 2000 forest function level
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Mon Nov 15 13:10:05 UTC 2010 on sn-devel-104
2010-11-15 13:10:05 +00:00
Jelmer Vernooij
c3e24bb89f heimdal_base: Fix include path so heim_threads.h can be found.
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Mon Nov 15 12:26:53 UTC 2010 on sn-devel-104
2010-11-15 12:26:53 +00:00
Jelmer Vernooij
f7bccc6628 smb_server: Build as shared module. 2010-11-15 11:43:05 +00:00
Jelmer Vernooij
ee69c4f4b3 heimdal_base: Add missing dependency on replace. 2010-11-15 11:43:05 +00:00
Jelmer Vernooij
f91b7b5dab nbtd: Build service as shared module. 2010-11-15 11:43:05 +00:00
Andrew Tridgell
e409db9da1 s4-dns: added --fail-immediately option to samba_dnsupdate
this is useful for manual testing
2010-11-15 21:47:38 +11:00
Andrew Tridgell
deaf7e5995 s4-dns: fixed registration of multiple IPs in samba_dnsupdate
bitten by python object references again!

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-15 21:47:38 +11:00
Andrew Bartlett
1e29ee3a70 heimdal Fix handling of backwards cross-realm detection for Samba4
Samba4 may modify the case of the realm in a returned entry, but will no longer modify the case of the prinicipal components.

The easy way to keep this test passing is to consider also what we
need to do to get the krbtgt account for the PAC signing - and to use
krbtgt/<this>/@REALM component to fetch the real krbtgt, and to use
that resutl for realm comparion.

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Mon Nov 15 08:47:44 UTC 2010 on sn-devel-104
2010-11-15 08:47:44 +00:00
Andrew Bartlett
6358303784 s4-kdc Fix realm handling in our KDC
we should reset the realm part of the principal, but not the lowercase
realm embedded in the 'krbtgt/realm@REALM'.

Andrew Bartlett
2010-11-15 08:04:04 +00:00
Jelmer Vernooij
1409c97899 s4: Build ldap and samba3_smb services as shared modules.
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Mon Nov 15 03:04:41 UTC 2010 on sn-devel-104
2010-11-15 03:04:40 +00:00
Jelmer Vernooij
02f77214c2 cldap: Build as shared module. 2010-11-15 03:14:23 +01:00
Jelmer Vernooij
caa3935a38 kdc: Build as shared module by default. 2010-11-15 03:14:23 +01:00
Jelmer Vernooij
e422c2a4a5 auth/ntlm: Use name consistent with other service names. 2010-11-15 03:14:23 +01:00
Andrew Bartlett
02d320394f auth/gensec Handle incorrect username or password in Kerberos client code
Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Mon Nov 15 02:09:40 UTC 2010 on sn-devel-104
2010-11-15 02:09:39 +00:00
Andrew Bartlett
be8526a0a1 s4-kdc update startup routines after heimdal update
We should check the errors from krb5_kdc_windc_init and we now need to
additionally run krb5_kdc_pkinit_config()

Andrew Bartlett
2010-11-15 01:25:06 +00:00
Andrew Bartlett
bbfaa9bbdf s4-kdc Remove use of heimdal private headers in kpasswd server.
This remains an abuse, because it relies on setting into the krb5_principal
structure, but at least it causes less trouble for the server.

Andrew Bartlett
2010-11-15 01:25:06 +00:00
Andrew Bartlett
6a27fbbfc4 heimdal Extra files required for merge up to current heimdal 2010-11-15 01:25:06 +00:00
Andrew Bartlett
192a555c9a heimdal regenate lex and yacc files 2010-11-15 01:25:06 +00:00
Andrew Bartlett
f20cf61080 Add attribute macros for Heimdal to use
Heimdal uses HEIMDAL_NORETURN_ATTRIBUTE and HEIMDAL_PRINTF_ATTRIBUTE,
and we need to provide a link between these and Samba's function
attribute handling.

Andrew Bartlett
2010-11-15 01:25:06 +00:00
Andrew Bartlett
1342185e33 s4:heimdal: import lorikeet-heimdal-201011102149 (commit 5734d03c20e104c8f45533d07f2a2cbbd3224f29) 2010-11-15 01:25:06 +00:00
Jelmer Vernooij
13fd22f610 s4/dns: Build as shared module.
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Mon Nov 15 00:57:27 UTC 2010 on sn-devel-104
2010-11-15 00:57:27 +00:00
Andrew Tridgell
2d7dc86b5d s4-kdc: if "bind interfaces only" is false, then also listen on wildcard
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Mon Nov 15 00:13:59 UTC 2010 on sn-devel-104
2010-11-15 00:13:59 +00:00
Andrew Tridgell
ef7f4a1420 s4-server: make server sockets a child of the task context
We previously allocated sockets as direct children of the event
context. That led to crashes if a service called
task_server_terminate(), as it left the socket open and handling
events for a dead protocol.

Making them a child of the task allows the task to terminate and take
all its sockets with it.

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-15 10:19:34 +11:00
Andrew Tridgell
ec590fc9e3 samba-tool: fixed crash in "samba-tool drs showrepl"
the source_dsa_obj_dn can be NULL

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-15 10:19:34 +11:00
Jelmer Vernooij
f0cdcd940e web_server: Build as module.
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Sun Nov 14 17:58:05 UTC 2010 on sn-devel-104
2010-11-14 17:58:05 +00:00
Jelmer Vernooij
f5fbba76c8 kcc/drepl: Build as service. 2010-11-14 17:14:05 +00:00
Jelmer Vernooij
f6c8bc6a7b winbind: Build as shared module. 2010-11-14 17:14:05 +00:00
Jelmer Vernooij
bee3b665a8 Build wrepl server as service by default. 2010-11-14 17:14:05 +00:00
Jelmer Vernooij
6e762f9003 Re-enable ldb-cmdline for the moment, as it is used by oLschema2ldif. 2010-11-14 17:14:05 +00:00
Jelmer Vernooij
d2dfa868fd Don't build ldb tools when there is a system provided ldb. 2010-11-14 17:14:05 +00:00
Andrew Tridgell
7cb0f95bf2 s4-auth: fixed infinite loop in krb5 auth
we were continually trying the first address returned, instead of
moving to the next address

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Sun Nov 14 04:11:28 UTC 2010 on sn-devel-104
2010-11-14 04:11:28 +00:00
Andrew Tridgell
6582d4739c s4-auth: fixed crash in krb5 auth
remote_addr was used after free
2010-11-14 13:53:29 +11:00
Matthias Dieter Wallnöfer
7d2260cdd1 s4:password_hash LDB module - return "ERR_CONSTRAINT_VIOLATION" on password conversion errors
This errors can happen also on a regular basis - then we shouldn't return
ERR_OPERATIONS_ERROR (this error code is reserved for very serious failures).

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Sat Nov 13 12:37:36 UTC 2010 on sn-devel-104
2010-11-13 12:37:35 +00:00
Matthias Dieter Wallnöfer
ac0dcd1e07 s4:upgradeprovision - why not directly use "provision:0"? 2010-11-13 12:33:26 +01:00
Matthias Dieter Wallnöfer
113a9c1806 s4:objectclass LDB module - multiple "objectClass" change elements are unfortunately still allowed
The test message has been compressed - therefore I've now used "modify_ldif".
2010-11-13 12:32:34 +01:00
Andrew Tridgell
b9cfe10945 s4-drs: fixed a crash in writspn
sam_ctx_system may be NULL for non-privileged users

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Sat Nov 13 08:52:53 UTC 2010 on sn-devel-104
2010-11-13 08:52:53 +00:00
Andrew Tridgell
8e34df462c s4-test: we need to import testtools before subunit/python
subunit/python depends on testtools

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Sat Nov 13 02:02:45 UTC 2010 on sn-devel-104
2010-11-13 02:02:45 +00:00
Matthieu Patou
24477cacc9 ktpass: also use userPrincipalName for locating the principal
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Fri Nov 12 20:24:23 UTC 2010 on sn-devel-104
2010-11-12 20:24:23 +00:00
Matthieu Patou
f4e9f125e0 ktpass: fix the search path for when running in samba's source dir 2010-11-12 19:40:21 +00:00
Matthieu Patou
e0f64b77eb python: use the ldbMessage + modify notation instead of modify_ldif that we try to avoid 2010-11-12 19:40:21 +00:00
Matthieu Patou
5a6f3f14fb Fix typo 2010-11-12 19:40:21 +00:00
Matthieu Patou
f5ea6f4b4c unit tests: add testing for dns account password change 2010-11-12 19:40:21 +00:00
Matthieu Patou
81eb7985e6 upgradeprovision: use relaxed control while adding missing object container 2010-11-12 19:40:21 +00:00
Matthieu Patou
a9c430bdd2 upgradeprovision: fix pb with dns-hostname, regenerate a correct keytab 2010-11-12 19:40:21 +00:00
Matthieu Patou
8227d1f68e upgradeprovision: use the relax/(upgrade)provision when modifying object
For certain attribute we use the relax/provision control so that we
try to respect checks as this is not a good idea to always force
unwanted behavior.
2010-11-12 19:40:21 +00:00
Matthieu Patou
757764ab1b upgradeprovision: use the (upgrade)provision control also 2010-11-12 19:40:21 +00:00
Matthieu Patou
add39bc40b upgradeprovision: update revision for forestupdate and domainupdate objects 2010-11-12 19:40:21 +00:00
Matthieu Patou
2990b4fbb1 samldb: relax groupType modification checks
Allow programs with the PROVISION control to bypass groupType checks.
This is needed by upgradeprovision for older alpha (11, 10 ...)
2010-11-12 19:40:21 +00:00
Matthieu Patou
d1feb03889 Add a script to make backup of samba provision 2010-11-12 19:40:21 +00:00
Matthias Dieter Wallnöfer
37bd313304 s4:objectclass LDB module - we should not simply ignore additional "objectClass" attribute changes
There first one we perform all other tentatives are terminated with
ERR_ATTRIBUTE_OR_VALUE_EXISTS (tested against Windows).

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Fri Nov 12 19:39:07 UTC 2010 on sn-devel-104
2010-11-12 19:39:06 +00:00