1
0
mirror of https://github.com/samba-team/samba.git synced 2025-03-09 08:58:35 +03:00

56470 Commits

Author SHA1 Message Date
Jelmer Vernooij
c5615211d4 provision: Avoid linking in multiple copies of security python module. 2009-09-23 15:24:10 +02:00
Volker Lendecke
0724649a8a s3:winbind: Fix an uninitialized variable 2009-09-23 06:25:24 +02:00
Andrew Tridgell
ee4f7f1209 s4-drsserver: sort by DN to give tree order
This might help the windows client with ordered requests. Later we
need to support the "ancestors" mode flag.
2009-09-22 17:10:06 -07:00
Andrew Tridgell
83bef7d047 s4-ldb: server side sort args are const char * 2009-09-22 17:10:06 -07:00
Andrew Tridgell
1dfcd4c22c s4-ldb: fixed call argument order for ldb_dn_from_ldb_val
This caused _lots_ of problems, especially in server side sort
2009-09-22 17:10:06 -07:00
Andrew Tridgell
bb3bdb3a62 s4-ldb: added a bunch more debug for DC join
These additional debug messages were added to help us track down
w2k8->s4 domain join
2009-09-22 17:10:06 -07:00
Andrew Tridgell
4a74b28397 s4-ldb: when tracing, show ldb_set_debug messages 2009-09-22 17:10:06 -07:00
Andrew Tridgell
9b752399c1 s4-ldbmodules: allow instanceType to be specified by clients
This is needed for the WSPP ADS testsuite
2009-09-22 17:10:05 -07:00
Andrew Tridgell
fb84edabbe s4-util: windows only accepts lowercase hex encodings for extended DNs 2009-09-22 17:10:05 -07:00
Andrew Tridgell
430ee62e0c s4-torture: add some debug info to RPC-HANDLES 2009-09-22 17:10:05 -07:00
Andrew Tridgell
8a090265b7 s4-rpcserver: added support for shared handles
This supports shared RPC handles across connections on all RPC
interfaces.

It turns out that w2k3 and w2k8 don't actually support this on all
pipes. We need to test which pipes we should enable this on.
2009-09-22 17:10:05 -07:00
Andrew Tridgell
a971b87a9e s4-lsa: added support for QuerySecurity on LSA
This follows the sd pattern from samba3
2009-09-22 17:10:05 -07:00
Andrew Tridgell
69cb91a2eb s4-rpcserver: added shared association groups
This patch allows us to share association groups and their rpc handles
between connections. This is needed for some DRSUAPI behaviour when
recent windows clients connect.
2009-09-22 17:10:05 -07:00
Andrew Tridgell
a30d613086 s4-rpcserver: run all RPC operations in a single task
This will make it much easier to implement shared handles with
association groups. It also means we can shared the ldb between RPC
connections.
2009-09-22 17:10:05 -07:00
Andrew Tridgell
5d16b9c1bf s4-rpc: remove two unused functions 2009-09-22 17:10:05 -07:00
Andrew Tridgell
2e98ee0907 s4-ldb: only show the outer level of ldb ops when tracing 2009-09-22 17:10:05 -07:00
Andrew Tridgell
ec5d01278a s4-ldb: don't show timestamps on every line of ldb traces
This adds ldb_debug_add() and ldb_debug_end() to format multiline
messages
2009-09-22 17:10:05 -07:00
Michael Adam
1544c2b66c build: use AS_HELP_STRING() for --with-localedir
Michael
2009-09-23 00:53:47 +02:00
Michael Adam
bb77a2a8ae build: add switch "--with-codepagedir=DIR" to configure.
This is to address bug #6444.

Michael
2009-09-23 00:53:47 +02:00
Michael Adam
8b795534bd build: add datadir to "make showlayout"
Michael
2009-09-23 00:53:47 +02:00
Anatoliy Atanasov
68f33428c7 Move the check above the talloc 2009-09-22 14:46:18 -07:00
Günther Deschner
6a8ef6c424 s3-winbindd: Fix Bug #6711: trusts to windows 2008 (2008 r2) not working.
Winbindd should always try to use LSA via an schannel authenticated ncacn_ip_tcp
connection when talking to AD for LSA lookup calls.

In Samba <-> W2k8 interdomain trust scenarios, LookupSids3 and LookupNames4 via an
schannel ncacn_ip_tcp LSA connection are the *only* options to successfully resolve
sids and names.

Guenther
2009-09-22 16:49:31 +02:00
Günther Deschner
58f2deb940 s3-winbindd: add cm_connect_lsa_tcp().
Guenther
2009-09-22 11:38:06 +02:00
Rusty Russell
455d44d961 lib/tevent: a cleaner fix for be4ac227842530d484659f2db683453366326d8b segv
Revert 23abcd2318c69753aa2a144e1dc0f9cf9efdb705 and fix logic bug.

The current code loops through the event contexts, when it sees a different
one, it notifies the current one (ev) and updates ev to point to the new one.

This is dumb, because:
(1) ev starts as NULL, so this code crashes, and
(2) The final context will not be notified.

The correct fix for this is to update ev to the new one, then notify it.
Volker's fix works because we currently always have one event context.

Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
2009-09-22 10:50:28 +02:00
Nadezhda Ivanova
f54ef5f20f s4:dsdb Fix of double addition of SD-s
Also add error strings in descriptor module
2009-09-21 20:50:34 -07:00
Andrew Bartlett
399c7160d5 s4:ldb Add 'single-value' support to LDB.
This is currently only triggered via Samba4's schema code.
2009-09-21 20:50:26 -07:00
Nadezhda Ivanova
9e85192e64 Merge branch 'master' of git://git.samba.org/samba 2009-09-21 17:29:28 -07:00
Nadezhda Ivanova
10c6f3f71a Initial Implementation of the DS objects access checks.
Currently disabled. The search will be greatly modified,
also the object tree stuff will be simplified.
2009-09-21 17:27:50 -07:00
Anatoliy Atanasov
b850d7fb08 Add support in the ldb_dn.c code for MS-ADTS:3.1.1.5.1.2 Naming Constraints 2009-09-21 17:18:10 -07:00
Anatoliy Atanasov
6033ce2403 Add tests for MS-ADTS:3.1.1.5.1.2 Naming Constraints 2009-09-21 17:18:10 -07:00
Andrew Bartlett
bc53052d38 s4:dsdb Run the new 'descriptor' module by default.
This code was derived from the objectclass module, and we need the new
code in the default provision, or else no ACL is set on each object.

Andrew Bartlett
2009-09-21 16:33:47 -07:00
Andrew Tridgell
1fa643bdd7 s4-ldb: bit prettier output 2009-09-21 16:31:06 -07:00
Andrew Tridgell
4d984d0c05 s4-ldb: fixed O(n^2) string handling in ldif debug print 2009-09-21 16:31:01 -07:00
Andrew Tridgell
a5cdf36c3f s4-samdb: enable ldb tracing when log level >= 10 2009-09-21 15:27:05 -07:00
Andrew Tridgell
ac56fed2f4 s4-schema: don't trace the schema load (too verbose) 2009-09-21 15:27:05 -07:00
Andrew Tridgell
b23294e407 s4-ldb: add --trace command line option to ldb tools
This enabled LDB_FLG_ENABLE_TRACING
2009-09-21 15:27:05 -07:00
Andrew Tridgell
97ffb912c1 s4-ldb: add a LDB_FLG_ENABLE_TRACING for full ldb tracing
When LDB_FLG_ENABLE_TRACING is set ldb will send full traces
of all operations and results
2009-09-21 15:27:05 -07:00
Andrew Tridgell
5b684bbfd7 s4-ldap: default edn type is 0 2009-09-21 15:26:32 -07:00
Andrew Tridgell
2fda203230 s4-ldb: add support for extended DNs in the rootDSE
W2K8 join as a DC relies on being able to ask for the sid component of
extended DNs from the rootDSE DNs
2009-09-21 15:26:32 -07:00
Andrew Tridgell
dd7f94a9e2 s4-dsdb: fixed a printf format warning 2009-09-21 15:26:31 -07:00
Nadezhda Ivanova
13b979b03d Merge branch 'master' of git://git.samba.org/samba 2009-09-21 14:26:15 -07:00
Andrew Bartlett
1afc7c453c s4:kerberos Fix the salt to match Windows 2008.
The previous commit changed the wrong end - we must fix our server,
not our client.

Andrew Bartlett
2009-09-21 12:28:38 -07:00
Andrew Bartlett
8738b83a44 s4:provision Make our default salt match our server behaviour
We need to look into salting algorithms further.

Andrew Bartlett
2009-09-21 11:59:33 -07:00
Michael Adam
e440a2e11e tdb:tdbtool: fix indentation.
Michael
2009-09-21 17:47:51 +02:00
Michael Adam
91e1bab2e9 tdb:tdbtool: add transaction_start/_commit/_cancel commands.
So one can perform tdbtool operations protected by transactions.

Michael
2009-09-21 17:47:51 +02:00
Michael Adam
817383d88d tdb:tdbtool: add the "speed" command to the help text.
Michael
2009-09-21 17:47:51 +02:00
Matthias Dieter Wallnöfer
63f280cfef s4:provision - Fix up ProvisioningError class as suggested by Jelmer 2009-09-21 17:20:49 +02:00
Matthias Dieter Wallnöfer
7373bb79d4 s4:samdb/tools - That should fix now the last failures 2009-09-21 13:53:47 +02:00
Matthias Dieter Wallnöfer
32f4afd617 s4:libnet_become_dc - bump down the level requested by abartlet 2009-09-21 11:59:07 +02:00
Matthias Dieter Wallnöfer
f0c080a484 s4:scripts - Reintroduce "-H" parameter
I removed it since on some scripts it was present, on others not - so I thought
it wouldn't be really needed. This was a bad decision (pointed out by abartlet).
So I reintroduce it on all scripts (to have consistent parameters).
2009-09-21 11:53:19 +02:00