1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-12 09:18:10 +03:00
Commit Graph

6806 Commits

Author SHA1 Message Date
Stefan Metzmacher
6f0f39cab1 r11027: r10319@SERNOX: metze | 2005-09-19 18:31:23 +0200
- store the wins owner on the record and the wins owner and expire time on each address
 - we use "0.0.0.0" to mark entries which are registered at the local wins server
 - we use this ldif-format:
 address: 172.31.9.1;winsOwner:0.0.0.0;expireTime:20050923032337.0Z
 address: 172.31.1.1;winsOwner:172.31.9.202;expireTime:20050923032330.0Z

 metze
(This used to be commit 752025a0e1)
2007-10-10 13:42:16 -05:00
Stefan Metzmacher
4c297bac9d r11026: r10318@SERNOX: metze | 2005-09-19 16:38:15 +0200
move to struct winsdb_addr, (I'll add expiry_time and the wins_owner later

 tridge: can you please review the new winsdb_addr_* functions carefull, look for off-by-one bugs, etc.

 metze
(This used to be commit 72eba90465)
2007-10-10 13:42:16 -05:00
Stefan Metzmacher
1d55354663 r11025: r10313@SERNOX: metze | 2005-09-19 12:19:27 +0200
add wrapper functions for the "address" attribute in the winsdb,
 the goal is to store the expiry time and the wins owner per address,
 which is needed for wins replication

 metze
(This used to be commit 2fd3bbd044)
2007-10-10 13:42:16 -05:00
Stefan Metzmacher
0f6791edc6 r11024: r10311@SERNOX: metze | 2005-09-19 11:27:34 +0200
remove doublicate NULL-pointer check

 metze
(This used to be commit eb1dee0965)
2007-10-10 13:42:16 -05:00
Stefan Metzmacher
cbe9ae1234 r11023: r10310@SERNOX: metze | 2005-09-19 11:21:39 +0200
- open the winsdb in the wrepl server
 - add dummy function for setup the replication partners

 metze
(This used to be commit da3d18e454)
2007-10-10 13:42:16 -05:00
Stefan Metzmacher
bab5662021 r11022: r10309@SERNOX: metze | 2005-09-19 11:08:37 +0200
- add winsdb_connect() function, so that the winsdb can be opened by the wrepl_server/ code
 - remove maintaining of a min_version field, as it was implemented incorrect, and is maybe not needed at all
 - fix handling of max_version, (we started with 0, on each server start)

 metze
(This used to be commit e6106e21a0)
2007-10-10 13:42:15 -05:00
Stefan Metzmacher
d49e67f06f r11014: r10139@SERNOX: metze | 2005-09-10 10:32:36 +0200
- w2k just ignores invalid packets, so we do now
 - w2k only checks the assoc_ctx when the opcode has the sepcific obcode bit's set
 - terminate the connection, when getting a WREPL_STOP_ASSOCIATION packet
 - some more special error handling

 proper torture test for all this cases are following later

 metze
(This used to be commit 42b69461aa)
2007-10-10 13:41:30 -05:00
Stefan Metzmacher
ee49ed7a20 r11011: r10124@SERNOX: metze | 2005-09-09 20:22:00 +0200
r10113@SERNOX:  metze | 2005-09-09 18:00:02 +0200
  rename libcli/wins to libcli/wrepl

  metze
  r10115@SERNOX:  metze | 2005-09-09 18:01:49 +0200
  bind client connection to the best interface, to the partner

  metze
  r10116@SERNOX:  jelmer | 2005-09-09 18:23:50 +0200
  Print out a couple more warnings.
(This used to be commit 66f931071e)
2007-10-10 13:41:27 -05:00
Stefan Metzmacher
b2da403af9 r11007: r10109@SERNOX: metze | 2005-09-09 12:29:12 +0200
- move structs to a seperate header file
 - move the code for the wreplsrv_in_call handling to a seperate file

 metze
(This used to be commit c9a8544446)
2007-10-10 13:41:25 -05:00
Stefan Metzmacher
e44c76ebd7 r11004: r10083@SERNOX: metze | 2005-09-08 16:50:32 +0200
This is the start of a WINS-Replicaton server:

 The design is to handle incoming and outgoing connections,
 in one process, because it make thing much easier, and there's
 no need to it otherwise.

 The current code only parses incoming packets, and can reply
 to them, but currently only a standard error packets STOP_ASSOCIATON
 with reason == 4 (I think it means your are not configured as a wins partner of me)

 (the server service is called "wrepl")

 metze
(This used to be commit 55a2016ba3)
2007-10-10 13:41:14 -05:00
Stefan Metzmacher
fccbbf3546 r10997: r11980@SERNOX (orig r10037): metze | 2005-09-05 14:21:40 +0200
add struct nbt_peer_socket and use it instead of passing const char *addr, uint16 port everyhwere

 (tridge: can you review this please, (make test works)

 metze
(This used to be commit a599d7a4ae)
2007-10-10 13:39:52 -05:00
Stefan Metzmacher
0b0c38d899 r10995: fix released vs. released
metze
(This used to be commit 573c2df2ba)
2007-10-10 13:39:52 -05:00
Stefan Metzmacher
00ef27d754 r10993: - make us able to check released records, we can only do that by finding out the old record was gone
- add more printf(), so -d 10 isn't needed any more

metze
(This used to be commit afe5d2ab85)
2007-10-10 13:39:52 -05:00
Stefan Metzmacher
683910f5ef r10991: - create always a valid bind_info28 blocks, so that we don't need to work with unions
in the main code
- loop also in level 1,2 replies

metze
(This used to be commit c3276bd169)
2007-10-10 13:39:51 -05:00
Andrew Tridgell
840364eb97 r10990: the beginnings of a program designed to work out the minimal schema
needed to represent all the current records on a ADS LDAP server. The
idea is we will use something based on this code to work out exactly
what schema elements we will need for our initial ADS schema. I plan
on expanding this code to automatically work out attribute properties,
and write out a schema file that we can load into ldb.

Interestingly, it looks like we only need 43 objectclasses and around
200 attributes to represent all records of a newly installed w2k3 ADS
server.
(This used to be commit 7b0ae77757)
2007-10-10 13:39:51 -05:00
Stefan Metzmacher
94473233fe r10988: print out the password blobs, with
--option="dssync:print_pwd_blobs=yes"

metze
(This used to be commit b06de6d39c)
2007-10-10 13:39:51 -05:00
Stefan Metzmacher
fc94355d8e r10987: add support for tcp kdc requests
metze
(This used to be commit 4c4f19cc23)
2007-10-10 13:39:51 -05:00
Stefan Metzmacher
18bd477428 r10986: loop also when we use mszip compression
metze
(This used to be commit e32488667c)
2007-10-10 13:39:51 -05:00
Andrew Bartlett
8dfa59372f r10985: To aid in testing, this allows us to easily force kerberos to use UDP or TCP.
Andrew Bartlett
(This used to be commit ae0b4028ff)
2007-10-10 13:39:50 -05:00
Stefan Metzmacher
2b14137167 r10984: fix valgrind warnings, I had used that to check if w2k3 accept random values here,
as w2k generates also random stuff here

metze
(This used to be commit e04c78e4e9)
2007-10-10 13:39:50 -05:00
Andrew Bartlett
5a30cd8097 r10983: Another case were we want to avoid DNS for unqualified names.
Andrew Bartlett
(This used to be commit 1d7094b8df)
2007-10-10 13:39:50 -05:00
Andrew Bartlett
2c6ecae4e6 r10982: Move credentials.h into auth/credentials, and add flags needed by
previous patch.

Andrew Bartlett
(This used to be commit 2c537d47ba)
2007-10-10 13:39:50 -05:00
Andrew Bartlett
f7ff0540d2 r10981: Pull code to decide between and implement NTLMv2, NTLM and LM
authentication out of the various callers and into the kitchen
sink.. err, credentials subsystem.

This should ensure consistant logic, as well as get us one step closer
to security=server operation in future.

Andrew Bartlett
(This used to be commit 09c9576330)
2007-10-10 13:39:50 -05:00
Andrew Bartlett
1f9703de40 r10980: Use ldb_attr_cmp and ldb_dn_escape_value
Andrew Bartlett
(This used to be commit 2b1c88f628)
2007-10-10 13:39:49 -05:00
Stefan Metzmacher
9dff4c464a r10973: - make debugging a bit easier
- add unique vs. normal group section in replica vs replica conflict testing

metze
(This used to be commit b94be6b119)
2007-10-10 13:39:49 -05:00
Stefan Metzmacher
2ac7af20a0 r10971: - test static records with the same owner too
- test with different owners, and all combinations
  of unique records

metze
(This used to be commit 8df80c5649)
2007-10-10 13:39:49 -05:00
Stefan Metzmacher
a53bec24c1 r10967: move the function in the order they are used
metze
(This used to be commit 6f44ae5a69)
2007-10-10 13:39:49 -05:00
Stefan Metzmacher
3158f35256 r10965: - only run the cross connection assoc test when running with -X
this sometimes crashes the windows server
- add the first replication conflict tests
  we now test that replica records are always overwritten
  when the owner is the same

metze
(This used to be commit f93353ac41)
2007-10-10 13:39:49 -05:00
Stefan Metzmacher
7b77baff16 r10959: fix compiler warnings
metze
(This used to be commit 9a9311fa6b)
2007-10-10 13:39:48 -05:00
Andrew Tridgell
e2ec8e5e80 r10957: make a comment clearer
(This used to be commit d379fb5f10)
2007-10-10 13:39:48 -05:00
Andrew Bartlett
52cc7a5501 r10956: Tridge thought some comments might be a good idea :-)
Andrew Bartlett
(This used to be commit c0d6126eff)
2007-10-10 13:39:48 -05:00
Andrew Tridgell
6b7d7f22e7 r10955: finally worked out why our computer accounts were being identified as users in mmc.
The problem was that the samdb module was auto-adding objectClass=user
for these accounts. That would be OK, as computer accounts are
supposed to be in that objectClass, but mmc cares about the order of
the values in the objectClass attribute! It looks for the last value,
and takes that as the value to use when deciding how to manipulate the record.

So, this patch adds an explicit objectClass=user to the record when it
gets created, which tells the samdb module to not add it as well. That
fixes the order. I suspect we are missing something else though - is
objectClass supposed to auto-sort based on the schema?
(This used to be commit 68c5f807fd)
2007-10-10 13:39:48 -05:00
Andrew Tridgell
0fa924bb8f r10954: added support for canonicalName in the operational module, using the
dn->canonicalName function abartlet just committed
(This used to be commit 197e8a27f0)
2007-10-10 13:39:46 -05:00
Andrew Bartlett
d96f706bb0 r10953: Add a new function to form a canonicalName out of a DN to ldb_dn.c
Use this new function in the client and server for the CrackNames
case, where we particularly need it.

Andrew Bartlett
(This used to be commit 380037ee09)
2007-10-10 13:39:45 -05:00
Andrew Bartlett
4c188e0a1e r10950: More cracknames variations (including expected values) than you can
poke a stick at...

Andrew Bartlett
(This used to be commit e4b2130030)
2007-10-10 13:39:45 -05:00
Andrew Bartlett
18bb363537 r10946: Use the right name for the remote workstation, and always initialise it.
Should fix a valgrind error volker is seeing.

Andrew Bartlett
(This used to be commit 11957c5f37)
2007-10-10 13:39:44 -05:00
Andrew Bartlett
b4a1e760c9 r10945: Free the salt after we are done with it. May need a merge to similar
code in Samba3.

Andrew Bartlett
(This used to be commit 36e302bac8)
2007-10-10 13:39:44 -05:00
Volker Lendecke
0a82914049 r10941: Hmmm. Making that fn static is more correct.
(This used to be commit eaf347bdea)
2007-10-10 13:39:44 -05:00
Volker Lendecke
0406bbf024 r10940: add struct definition
(This used to be commit 295271a329)
2007-10-10 13:39:44 -05:00
Volker Lendecke
67580434cf r10936: Commit work in progress: wb_pam_auth_crap made async. This does not work yet,
but the version before did not either, so we're not worse than before.

One thing this does better is to call the domain init code if it's not there
yet.

Volker
(This used to be commit 35bcfb185b)
2007-10-10 13:39:44 -05:00
Volker Lendecke
e5671ad531 r10934: Fix a gcc 4 warning
(This used to be commit 317edeb546)
2007-10-10 13:39:43 -05:00
Stefan Metzmacher
1307149624 r10924: we don't need this line twice
metze
(This used to be commit f1ee8d4b58)
2007-10-10 13:39:43 -05:00
Andrew Tridgell
f308cc1616 r10920: in case of a accept() failure just failing and trying again is no
good, as it is probably a resource constraint, so if we just try again
we will spin (as the incoming socket will still be readable). Using a
sleep(1) solves this by throtting smbd until the resource constraint
goes away.

if the resource constraint doesn't go away, then at least smbd won't
be spinning chewing cpu
(This used to be commit 7a5a9da477)
2007-10-10 13:39:43 -05:00
Andrew Tridgell
2e61cce2b4 r10919: fixed the ldb test for the new operational module
(This used to be commit 915878d7ce)
2007-10-10 13:39:43 -05:00
Andrew Tridgell
c8978cb1f1 r10918: - fixed standalone ldb build
- added note about allowedAttributesEffective (will be needed for mmc)

- fixed some more ldb warnings
(This used to be commit e9e4d81b69)
2007-10-10 13:39:43 -05:00
Andrew Tridgell
dc3e65b252 r10917: copy the element name in a ldb_msg_rename_attr() and ldb_msg_copy_attr() to ensure
that callers (like the ldap server) can talloc_steal the name
(This used to be commit 9c914542cc)
2007-10-10 13:39:42 -05:00
Andrew Tridgell
3572073491 r10916: - finished the 'operational' ldb module
- removed the timestamps module, replacing it with the operational module

- added a ldb_msg_copy_shallow() function which should be used when a module
  wants to add new elements to a message on add/modify. This is needed
  because the caller might be using a constant structure, or may want to
  re-use the structure again

- enabled the UTC time attribute syntaxes in the operational module
(This used to be commit 61e8b01022)
2007-10-10 13:39:42 -05:00
Andrew Tridgell
49cc13a8f0 r10915: added a standard attribute handler for a ldap UTC time string
(This used to be commit efd7dd1a77)
2007-10-10 13:39:42 -05:00
Andrew Tridgell
33da2fabe6 r10914: moved the ldap time string functions into ldb so they can be used by
the time attribute handling functions
(This used to be commit 93c296d527)
2007-10-10 13:39:42 -05:00
Andrew Tridgell
a599edf04c r10913: This patch isn't as big as it looks ...
most of the changes are fixes to make all the ldb code compile without
warnings on gcc4. Unfortunately That required a lot of casts :-(

I have also added the start of an 'operational' module, which will
replace the timestamp module, plus add support for some other
operational attributes

In ldb_msg_*() I added some new utility functions to make the
operational module sane, and remove the 'ldb' argument from the
ldb_msg_add_*() functions. That argument was only needed back in the
early days of ldb when we didn't use the hierarchical talloc and thus
needed a place to get the allocation function from. Now its just a
pain to pass around everywhere.

Also added a ldb_debug_set() function that calls ldb_debug() plus sets
the result using ldb_set_errstring(). That saves on some awkward
coding in a few places.
(This used to be commit f6818daecc)
2007-10-10 13:39:41 -05:00