1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-11 05:18:09 +03:00
Commit Graph

188 Commits

Author SHA1 Message Date
Stefan Metzmacher
c88ec856bd drsuapi.idl: remove some unknows from DsGetNCChanges() (update samba4 callers)
metze
(This used to be commit d41b3dd6ff)
2008-06-30 17:40:01 +02:00
Andrew Bartlett
58e7f253ea Rework the CLDAP and NBT netlogon requests and responses.
This now matches section 7.3.3 of the MS-ATDS specification, and all
our current tests pass against windows.  There is still more testing
to do, and the server implementation to complete.

Andrew Bartlett
(This used to be commit 431d0c0396)
2008-05-16 13:03:01 +10:00
Jelmer Vernooij
21fc767378 Specify event_context to ldb_wrap_connect explicitly.
(This used to be commit b4e1ae07a2)
2008-04-17 12:23:44 +02:00
Jelmer Vernooij
10169a2030 Remove more global_loadparm instance.s
(This used to be commit a1280252ce)
2008-02-21 17:54:24 +01:00
Andrew Bartlett
d08eabdf91 Remove the forced 'krb5' from the NET-API-BECOME-DC test.
If we want to try this authenication mechanism, we can always manually
specify the binding string.

Andrew Bartlett
(This used to be commit 191d56d41e)
2008-02-09 14:13:23 +11:00
Andrew Bartlett
8bceed449d Fix segfaults in codepaths only tested by the NET-API-BECOME-DC test.
(I presume this has resulted from the global variable elimination)

Perhaps the iconv handle argument to ndr_push_struct needs to be
marked as 'not NULL' or similar?

Andrew Bartlett
(This used to be commit e8081333b8)
2008-01-23 15:34:44 +11:00
Jelmer Vernooij
2c8c9a5355 r26669: Janitorial: Remove uses of global_loadparm.
(This used to be commit 50c46160d9)
2008-01-05 09:42:02 -06:00
Jelmer Vernooij
86dc05e99f r26638: libndr: Require explicitly specifying iconv_convenience for ndr_struct_push_blob().
(This used to be commit 61ad78ac98)
2008-01-01 16:12:11 -06:00
Jelmer Vernooij
0500b87092 r26540: Revert my previous commit after concerns raised by Andrew.
(This used to be commit 6ac86f8be7)
2007-12-21 05:52:06 +01:00
Jelmer Vernooij
3e75f222bc r26539: Remove unnecessary statics.
(This used to be commit e53e79eebe)
2007-12-21 05:52:05 +01:00
Jelmer Vernooij
6c77f353d3 r26328: remove more uses of global_loadparm.
(This used to be commit 40ae12c086)
2007-12-21 05:48:41 +01:00
Jelmer Vernooij
4c4323009f r26327: Explicit loadparm_context for RPC client functions.
(This used to be commit eeb2251d22)
2007-12-21 05:48:41 +01:00
Jelmer Vernooij
9ebcd7a0df r26277: Move loadparm context higher up the stack.
(This used to be commit 38fa08310c)
2007-12-21 05:48:03 +01:00
Jelmer Vernooij
da0f222f43 r26271: Remove some more uses of global_loadparm.
(This used to be commit e9875fcd56)
2007-12-21 05:47:53 +01:00
Jelmer Vernooij
ca0b72a1fd r26003: Split up DB_WRAP, as first step in an attempt to sanitize dependencies.
(This used to be commit 56dfcb4f2f)
2007-12-21 05:45:40 +01:00
Stefan Metzmacher
529763a9aa r25920: ndr: change NTSTAUS into enum ndr_err_code (samba4 callers)
lib/messaging/
lib/registry/
lib/ldb-samba/
librpc/rpc/
auth/auth_winbind.c
auth/gensec/
auth/kerberos/
dsdb/repl/
dsdb/samdb/
dsdb/schema/
torture/
cluster/ctdb/
kdc/
ntvfs/ipc/
torture/rap/
ntvfs/
utils/getntacl.c
ntptr/
smb_server/
libcli/wrepl/
wrepl_server/
libcli/cldap/
libcli/dgram/
libcli/ldap/
libcli/raw/
libcli/nbt/
libnet/
winbind/
rpc_server/

metze
(This used to be commit 6223c7fddc)
2007-12-21 05:45:02 +01:00
Günther Deschner
f2002541ce r25803: Make our security descriptor acl manipulation methods more generic so that we
can add and delete ACEs for SACLs as well as for DACLs.

Guenther
(This used to be commit 947fff9941)
2007-12-21 05:44:06 +01:00
Günther Deschner
a6c4b9d179 r25607: Allow to set security descriptor type flags at creation time with
security_descriptor_create().

Guenther
(This used to be commit 7dd0d28d25)
2007-12-21 05:42:51 +01:00
Jelmer Vernooij
2f3551ca7c r25446: Merge some changes I made on the way home from SFO:
2007-09-29 More higher-level passing around of lp_ctx.
2007-09-29 Fix warning.
2007-09-29 Pass loadparm contexts on a higher level.
2007-09-29 Avoid using global loadparm context.
(This used to be commit 3468952e77)
2007-10-10 15:07:34 -05:00
Jelmer Vernooij
60a1046c5c r25430: Add the loadparm context to all parametric options.
(This used to be commit fd697d77c9)
2007-10-10 15:07:31 -05:00
Jeremy Allison
9a012df08e r25175: Change to talloc_asprintf_append_buffer().
Jeremy.
(This used to be commit 0844dbf597)
2007-10-10 15:06:46 -05:00
Jelmer Vernooij
98b57d5eb6 r25035: Fix some more warnings, use service pointer rather than service number in more places.
(This used to be commit df9cebcb97)
2007-10-10 15:05:43 -05:00
Jelmer Vernooij
ffeee68e4b r25026: Move param/param.h out of includes.h
(This used to be commit abe8349f9b)
2007-10-10 15:05:38 -05:00
Stefan Metzmacher
f14bd1a90a r24557: rename 'dcerpc_table_' -> 'ndr_table_'
metze
(This used to be commit 84651aee81)
2007-10-10 15:02:15 -05:00
Andrew Tridgell
0479a2f1cb r23792: convert Samba4 to GPLv3
There are still a few tidyups of old FSF addresses to come (in both s3
and s4). More commits soon.
(This used to be commit fcf38a38ac)
2007-10-10 14:59:12 -05:00
Stefan Metzmacher
40cd2d7780 r22944: fix bug #4618:
rename private -> private_data

metze
(This used to be commit 58551f2f28)
2007-10-10 14:52:30 -05:00
Stefan Metzmacher
41c5453507 r21839: add my email address
metze
(This used to be commit e3be33c1d9)
2007-10-10 14:49:35 -05:00
Stefan Metzmacher
31c674bffc r21821: move comment about the becoming a dc to the code which implements it
and extent the comments a bit

metze
(This used to be commit 16c958600e)
2007-10-10 14:49:32 -05:00
Stefan Metzmacher
952a90814f r21820: move function, so that all are in top-down order as they get called
metze
(This used to be commit 38bb7f5445)
2007-10-10 14:49:32 -05:00
Stefan Metzmacher
815d3f2e68 r21538: this looks better...
metze
(This used to be commit 8ddfbbcb93)
2007-10-10 14:48:54 -05:00
Stefan Metzmacher
d92bc6db36 r21516: - use the same assoc_group_id, for all 3 drsuapi connection
- use the PFC_CONC_MPX flag for the 3rd connection
- to DsGetNCChanges requests on the 3rd connection with the bind handle
  from the 2nd connection to match w2k3

metze
(This used to be commit 5071af332c)
2007-10-10 14:48:48 -05:00
Stefan Metzmacher
5a61821e7e r21295: pass down the gensec session key to the store_chunk hook
metze
(This used to be commit 91de959173)
2007-10-10 14:48:03 -05:00
Stefan Metzmacher
c672e06cd5 r21293: store the gensec session key for each drsuapi connection
metze
(This used to be commit d399739820)
2007-10-10 14:48:02 -05:00
Stefan Metzmacher
78eb31a8f0 r21292: add become_dc:print = yes option to dump out the drsuapi traffic
metze
(This used to be commit 5065a9b5ff)
2007-10-10 14:48:02 -05:00
Stefan Metzmacher
e0efa2c97a r20714: we can use talloc_asprintf_append() again, because strupper_talloc()
creates string with the correct memory size without padding zero bytes
at the end

metze
(This used to be commit df8e97014b)
2007-10-10 14:40:30 -05:00
Stefan Metzmacher
faf57b1dc5 r20708: fix crash bug! we can't use stack memory for async requests...
jelmer: please take more care when you fix pidl warnings:-)

metze
(This used to be commit 05da114ea8)
2007-10-10 14:40:29 -05:00
Jelmer Vernooij
e8d2437cd5 r20676: Add ref pointer to fix warning.
(This used to be commit 1afcf85067)
2007-10-10 14:40:19 -05:00
Stefan Metzmacher
927e163670 r20570: use talloc_asprintf() instead of talloc_asprintf_append()
because talloc_asprintf_append() doesn't work like talloc_append_string()
which uses strlen() on the old string instead of (tc->size - 1)

This matter in this case because strlower_talloc() over allocates

tridge: how should we fix this in lib/talloc/?

metze
(This used to be commit 1748af20b1)
2007-10-10 14:37:03 -05:00
Stefan Metzmacher
536ca21c55 r20504: we handle the attribute values always as DATA_BLOB's and
don't need the union with the attribute id as switch anymore

metze
(This used to be commit d47c81923d)
2007-10-10 14:36:01 -05:00
Stefan Metzmacher
16d6d8d4c5 r20484: get rid of the special case for DN strings
metze
(This used to be commit 4c2addf2dd)
2007-10-10 14:35:59 -05:00
Stefan Metzmacher
d70852659b r20476: get rid of extra case for uint32 values
metze
(This used to be commit 13ccd405b5)
2007-10-10 14:35:57 -05:00
Stefan Metzmacher
2754a73d22 r20475: remove special case for GUID values
metze
(This used to be commit b7ab1c0039)
2007-10-10 14:35:56 -05:00
Stefan Metzmacher
2206a7d592 r20418: start to get step by step rid of the union for the attribute
specific attribute values.

start with ntSecurityDescriptor

metze
(This used to be commit c72f5a16b4)
2007-10-10 14:30:33 -05:00
Stefan Metzmacher
7cb96a785f r20293: implement store chunk hook for libnet_BecomeDC()
metze
(This used to be commit aba497f2fd)
2007-10-10 14:29:33 -05:00
Stefan Metzmacher
ce38e5368e r20292: set ntds_dn_str if DsAddEntry() was successful
metze
(This used to be commit 5cb5986067)
2007-10-10 14:29:33 -05:00
Stefan Metzmacher
fdf95ba005 r20291: implement prepare_db hook of libnet_BecomeDC()
metze
(This used to be commit 07f1075d46)
2007-10-10 14:29:32 -05:00
Stefan Metzmacher
64ba98bbd4 r20285: pass more info to check_options hook and move behavior versions etc.
to the domain and forest structures

metze
(This used to be commit 15157bf5b9)
2007-10-10 14:29:32 -05:00
Stefan Metzmacher
4973fbe773 r20283: pass in callbacks to libnet_BecomeDC() from the caller
and implement the check_options call

metze
(This used to be commit fc9669e2a0)
2007-10-10 14:29:31 -05:00
Stefan Metzmacher
ceaf036f42 r20282: prepare callback infrastructure to check if the forest/domain
behaviors and the schema version is what the caller expects.
also a callback prepares the new database and commits chunks
to the partitions

metze
(This used to be commit 9b5116be2e)
2007-10-10 14:29:31 -05:00
Stefan Metzmacher
88ef467282 r20251: I found out that the oid-prefix to uint32-id-prefix mapping is transferred
in replication replies, but I don't know the exact encoding.

for example the oids are transferred as:

2.5.4			=> uint8_t v[] = { 0x55, 0x04 };
2.5.5			=> uint8_t v[] = { 0x55, 0x05 };
2.5.6			=> uint8_t v[] = { 0x55, 0x06 };
2.5.18			=> uint8_t v[] = { 0x55, 0x12 };
2.5.20			=> uint8_t v[] = { 0x55, 0x14 };
2.5.21			=> uint8_t v[] = { 0x55, 0x15 };
1.2.840.113556.1.2	=> uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x14, 0x01, 0x02 };
1.2.840.113556.1.3	=> uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x14, 0x01, 0x03 };
1.2.840.113556.1.4	=> uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x14, 0x01, 0x04 };
1.2.840.113556.1.5	=> uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x14, 0x01, 0x05 };
1.2.840.113556.1.5.7000	=> uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x14, 0x01, 0x05, 0xb6, 0x58 };
1.2.840.113549.1.9	=> uint8_t v[] = { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x09 };
2.16.840.1.113730.3	=> uint8_t v[] = { 0x60, 0x86, 0x48, 0x01, 0x86, 0xf8, 0x42, 0x03 };
2.16.840.1.113730.3.1	=> uint8_t v[] = { 0x60, 0x86, 0x48, 0x01, 0x86, 0xf8, 0x42, 0x03, 0x01 };
2.16.840.1.113730.3.2	=> uint8_t v[] = { 0x60, 0x86, 0x48, 0x01, 0x86, 0xf8, 0x42, 0x03, 0x02 };
0.9.2342.19200300.100.1	=> uint8_t v[] = { 0x09, 0x92, 0x26, 0x89, 0x93, 0xf2, 0x2c, 0x64, 0x01 };
0.9.2342.19200300.100.4	=> uint8_t v[] = { 0x09, 0x92, 0x26, 0x89, 0x93, 0xf2, 0x2c, 0x64, 0x04 };
1.3.6.1.4.1.250.1	=> uint8_t v[] = { 0x2b, 0x06, 0x01, 0x04, 0x01, 0x81, 0x7a, 0x01 };
1.3.6.1.4.1.1466.101.119=> uint8_t v[] = { 0x2b, 0x06, 0x01, 0x04, 0x01, 0x8b, 0x3a, 0x65, 0x77 };

if someone knows how the encoding works, please tell me:-)
I assume some ASN.1 encoding...

metze
(This used to be commit aa720a1531)
2007-10-10 14:29:27 -05:00
Stefan Metzmacher
6e8a88fe2e r20204: use symbolic constant
metze
(This used to be commit a816c2973a)
2007-10-10 14:29:22 -05:00
Stefan Metzmacher
f1317dadc0 r20142: only the DDNS updates are missing for the full libnet_BecomeDC(),
but that's not needed untill we can support the DsGetNCChanges()
in the server...

metze
(This used to be commit 9c3267e17f)
2007-10-10 14:29:14 -05:00
Stefan Metzmacher
d23f3119a9 r20109: let libnet_BecomeDC() work against w2k servers
metze
(This used to be commit d295239861)
2007-10-10 14:29:08 -05:00
Stefan Metzmacher
d4ac51982c r20105: remove useless comments
metze
(This used to be commit d70140ed07)
2007-10-10 14:29:07 -05:00
Stefan Metzmacher
04b50f0f0d r20095: make a complete copy of the binding string
metze
(This used to be commit b0ee130892)
2007-10-10 14:29:05 -05:00
Stefan Metzmacher
8b137ba30a r20088: implement DsReplicaUpdateRefs() calls for all partitions
metze
(This used to be commit 557bb80089)
2007-10-10 14:29:03 -05:00
Stefan Metzmacher
7312cda3b3 r20086: pull domain partition
metze
(This used to be commit 8b03b3a196)
2007-10-10 14:29:03 -05:00
Stefan Metzmacher
9e426649c5 r20085: add _part to structure elements
metze
(This used to be commit de2f9869b5)
2007-10-10 14:29:03 -05:00
Stefan Metzmacher
d26ac7b937 r20084: pull the config partition
metze
(This used to be commit d770effb89)
2007-10-10 14:29:02 -05:00
Stefan Metzmacher
3155ded048 r20083: move function together which belong to each other
metze
(This used to be commit 0c4a7d713d)
2007-10-10 14:29:02 -05:00
Stefan Metzmacher
662ea9f1c7 r20081: pull the whole schema partition
metze
(This used to be commit 2f1ec24d77)
2007-10-10 14:29:02 -05:00
Stefan Metzmacher
d3c9737e5b r20079: the 2nd guid is the source_dsa invocation_id not the objectGUID,
this wasn't noticed because on the 1st dc in the forest both have the
same value

metze
(This used to be commit 527bd9a0a3)
2007-10-10 14:29:01 -05:00
Stefan Metzmacher
3fd9c96342 r20075: start pulling the schema content.
Note: we're not doing the "use the policy handle on a different connection"
      trick, which w2k3 use

metze
(This used to be commit 1e4abd6a91)
2007-10-10 14:29:00 -05:00
Stefan Metzmacher
6011531ac6 r20073: update the computer_dn_str after ldb_rename()
metze
(This used to be commit c40bc7d287)
2007-10-10 14:28:59 -05:00
Stefan Metzmacher
048279b2be r20071: move common code into a function
metze
(This used to be commit 61c312a943)
2007-10-10 14:28:59 -05:00
Stefan Metzmacher
1e17f6ed38 r20070: implement the 2nd and 3rd drsuapi connection
metze
(This used to be commit 6b84a5b595)
2007-10-10 14:28:59 -05:00
Stefan Metzmacher
99390be80c r20068: handle DsAddEntry() errors
metze
(This used to be commit 45466871b4)
2007-10-10 14:28:58 -05:00
Stefan Metzmacher
3aedc80896 r20067: use a global zero_sid
metze
(This used to be commit 5ebf76d23e)
2007-10-10 14:28:58 -05:00
Stefan Metzmacher
81a3bd7bc8 r20066: use the same sid "Domain Admins" for the security_descriptor
metze
(This used to be commit 58ae1bedf1)
2007-10-10 14:28:58 -05:00
Stefan Metzmacher
0df2c30821 r20062: send values in DsAddEntry(), but it didn't work yet (ACCESS_DENIED...)
metze
(This used to be commit e8c77b5cba)
2007-10-10 14:28:57 -05:00
Stefan Metzmacher
ac98f84de7 r20056: send a DsBindInfo28 struct in the DsBind() and take care of the DsBindInfo
the remote end sends back

metze
(This used to be commit ff27129792)
2007-10-10 14:28:56 -05:00
Stefan Metzmacher
383cbaa6b0 r20055: implement dummy DsAddEntry call (without attributes yet)
metze
(This used to be commit 8441500a32)
2007-10-10 14:28:56 -05:00
Stefan Metzmacher
496b65d593 r20053: implement the DsBind on the 1st drsuapi connection
metze
(This used to be commit f66f9c2150)
2007-10-10 14:28:55 -05:00
Stefan Metzmacher
85497ed8cb r20052: implement the first drsuapi connection
metze
(This used to be commit 96e5d89655)
2007-10-10 14:28:55 -05:00
Stefan Metzmacher
840ef0d5cf r20051: handle the case where the server object exist, but doesn't have a serverReference
metze
(This used to be commit e5729a29fd)
2007-10-10 14:28:55 -05:00
Stefan Metzmacher
bb725bbe01 r20045: implement the drsuapi_DsRemoveDSServer() call
metze
(This used to be commit deb85414c4)
2007-10-10 14:28:54 -05:00
Stefan Metzmacher
20f55aaad8 r20043: when becoming a dc:
- implement set userAccountControl = UF_SERVER_TRUST_ACCOUNT | UF_TRUSTED_FOR_DELEGATION
- implement moving to CN=Domain Controllers

metze
(This used to be commit c4037880a0)
2007-10-10 14:28:53 -05:00
Stefan Metzmacher
1027451d52 r20031: - implement earching for an existing server object
- implement adding a server object

metze
(This used to be commit 6d5a1f11e7)
2007-10-10 14:28:50 -05:00
Stefan Metzmacher
d0be12ad50 r20030: - implement the computer object search
- fix a source vs. dest dsa bug

metze
(This used to be commit ef9d9799a4)
2007-10-10 14:28:50 -05:00
Stefan Metzmacher
408db037ac r20029: - implement source_dsa site object search
metze
(This used to be commit c6166a5641)
2007-10-10 14:28:49 -05:00
Stefan Metzmacher
bb6f3ece26 r20026: - store the infrastructure server_dn_str
- implement the rid manager info searches

metze
(This used to be commit be3f91afe2)
2007-10-10 14:28:49 -05:00
Stefan Metzmacher
6bf98f3adb r20025: - implement the windows2003update revision search
- finish the infrastructure fsmo detail searches

metze
(This used to be commit f1a2bd6f37)
2007-10-10 14:28:48 -05:00
Stefan Metzmacher
effc51d7db r20024: lookup the infrastructure fSMORoleOwner on the 1st LDAP connection
metze
(This used to be commit 99bdd5523b)
2007-10-10 14:28:48 -05:00
Stefan Metzmacher
46d2824907 r20022: - implement the ldap connect code
- implement rootdse search on the 1st LDAP connection
- implement msDs-Behavior-Version and objectVersion searches on the 1st LDAP connection

metze
(This used to be commit b9b705b7dd)
2007-10-10 14:28:48 -05:00
Stefan Metzmacher
c83efbe900 r20021: implement a CLDAP netlogon request to get some infos
needed for becoming a dc.

metze
(This used to be commit 6a007aaa51)
2007-10-10 14:28:47 -05:00
Stefan Metzmacher
6d7630a516 r20011: define libnet_BecomeDC_state struct and add some dummy functions
metze
(This used to be commit 2a50a885ed)
2007-10-10 14:28:47 -05:00
Stefan Metzmacher
1d7f8edb7a r20009: use a composite context
metze
(This used to be commit ed3826bc47)
2007-10-10 14:28:46 -05:00
Stefan Metzmacher
1e02e77fe1 r20008: add stubs for a libnet_BecomeDC() call
metze
(This used to be commit 103ac9a96b)
2007-10-10 14:28:46 -05:00