sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-25 06:04:04 +03:00
Code
77,540 Commits 60 Branches 1,146 Tags
Commit Graph

77540 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Amitay Isaacs
8eef716598 s4-provision: Fix the security ace for DnsAdmins group on DNS records 
Find the objectSid for DnsAdmins group and use that instead of a fixed sid.

Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Tue Nov 29 07:38:06 CET 2011 on sn-devel-104
 2011-11-29 07:38:05 +01:00
Amitay Isaacs
2e4bf8bfcd s4-repl: Check if GC SPN exists before using it for replication 
Sometimes windows DC will set up dNSHostname before setting up
GC SPN and that causes replication errors since samba tries to
use GC SPN, which does not yet exist locally.

Pair-Programmed-With: Andrew Tridgell <tridge@samba.org>
 2011-11-29 16:00:36 +11:00
Amitay Isaacs
1e935d1bdc s4-provision: Make BIND9_DLZ as the default backend for DNS 2011-11-29 16:00:36 +11:00
Amitay Isaacs
7ac5c5061e dlz_bind9: Added access check to verify dynamic update 
This creates session info from kerberos ticket and verifies if
the signer has write access to a particular DN corresponding
to the name in dynamic update.

Pair-Programmed-With: Andrew Tridgell <tridge@samba.org>
 2011-11-29 16:00:36 +11:00
Amitay Isaacs
dcc5a7e1f2 dlz_bind9: Use the sam database in dns/ as default 
This change is introduced to access samdb copy directly, rather
than over ildap. The advantage is that the samba server does not
need to be running for bind9 to start.
 2011-11-29 16:00:36 +11:00
Amitay Isaacs
341979cc9a s4-provision: Create a samdb copy for access by dlz_bind9 module 
This creates a copy of rootdse, configuration and schema partitions
for dlz_bind9 use in dns/ directory.  Since dlz_bind9 requires write
access to DNS partitions (DomainDnsZones and ForestDnsZones), those
partitions are hard-linked (or symlinked) to the actual partitions.
An empty domain partition is created so samdb layer can work.
 2011-11-29 16:00:36 +11:00
Amitay Isaacs
6822eae323 s4-provision: Extract security descriptors in separate file 
Need to use domain security descriptor from sambadns.py also.
 2011-11-29 16:00:36 +11:00
Amitay Isaacs
5184fc8893 s4-test: Remove metadata and ldb.d directory on clean up 
When using partitions, metadata.tdb automatically gets created in
${prefix}ldb.d/ directory. To correctly clean up check if metadata.tdb
exists, then remove metadata.tdb and directory.
 2011-11-29 16:00:36 +11:00
Amitay Isaacs
13545d781b s4-samdb: seqence_number() operation must be in a transaction 2011-11-29 16:00:36 +11:00
Amitay Isaacs
49926a2ac6 s4-dsdb: Added metadata to partition module for global sequence number 
This adds support for global sequence number which is independent of
partition information.

Signed-off-by: Andrew Tridgell <tridge@samba.org>
 2011-11-29 16:00:35 +11:00
Amitay Isaacs
349c54528b s4-dsdb: use dsdb_module_extended instead of duplicate code 
Signed-off-by: Andrew Tridgell <tridge@samba.org>
 2011-11-29 16:00:35 +11:00
Amitay Isaacs
422fcbbe72 s4-dsdb: Return ldb_result context in dsdb_module_extended 
The result of the extended operation is now available in the calling
routine.

Signed-off-by: Andrew Tridgell <tridge@samba.org>
 2011-11-29 16:00:35 +11:00
Amitay Isaacs
c199b35dd4 s4-dsdb: Remove LDB_SEQ_HIGHEST_TIMESTAMP sequence number support 
This was a hack for LDAP backends to store a sequence number as a
timestamp. It is still supported in standalone ldb tdb backend.

Signed-off-by: Andrew Tridgell <tridge@samba.org>
 2011-11-29 16:00:35 +11:00
Volker Lendecke
5c53926fa7 s3: Use tevent_req_simple_recv_ntstatus 
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Mon Nov 28 17:14:27 CET 2011 on sn-devel-104
 2011-11-28 17:14:27 +01:00
Volker Lendecke
7491bd78d6 Fix Coverity ID 2638: OVERRUN_STATIC 2011-11-28 14:52:32 +01:00
Volker Lendecke
f094cc3ade Fix Coverity ID 2639: UNUSED_VALUE 2011-11-28 14:52:31 +01:00
Volker Lendecke
0d4fc19ac7 s3: Fix a crash in group_mapping.ldb->tdb conversion 
When we find a group_mapping.ldb entry without a comment, the upgrade code
would have crashed with a NULL dereference

Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Mon Nov 28 12:24:08 CET 2011 on sn-devel-104
 2011-11-28 12:24:08 +01:00
Matthias Dieter Wallnöfer
0e526062a4 s4:torture/ldap/cldap.c - remove the "test_cldap_netlogon_flag_ds_dns_forest" test 
The test is wrong since the DNS_* (DS_DNS_CONTROLLER, DS_DNS_DOMAIN,
DS_DNS_FOREST_ROOT) flags are never set on the plain CLDAP pipe. They
get added only over the DsRGetDCName* calls over NETLOGON RPC.

Signed-off-by: Stefan Metzmacher <metze@samba.org>

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Sun Nov 27 16:23:27 CET 2011 on sn-devel-104
 2011-11-27 16:23:27 +01:00
Matthias Dieter Wallnöfer
6b63d7e618 s4:selftest/test_samba_tool.sh - add a basic unit test for the new "domain info" command 
Signed-off-by: Stefan Metzmacher <metze@samba.org>
 2011-11-27 12:51:57 +01:00
Matthias Dieter Wallnöfer
f57f009bc6 samba-tool: domain info - add basic exception handling 
It is nicer to get an error message rather than a stacktrace on wrong IP
addresses.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
 2011-11-27 12:51:57 +01:00
Matthieu Patou
08ca7d1634 samba-tool: add a domain info command to get basic info 
Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
 2011-11-27 12:51:56 +01:00
Matthias Dieter Wallnöfer
521c708fe4 s4:netlogon RPC server - DsRGetDcNameEx - set the DNS name flags correctly 
The rules are explained in MS-NRPC 2.2.1.2.1.

Patch inspired by Matthieu Patou.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
 2011-11-27 12:51:54 +01:00
Matthieu Patou
1770dafafd s4-netlogon: return WERR_NO_SUCH_DOMAIN instead of WERR_DS_UNAVAILABLE if we are unable to translate the domain to a dn 
Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
 2011-11-27 12:50:49 +01:00
Matthias Dieter Wallnöfer
b89374934f s4:cldap_server/netlogon.c - DS_SERVER_CLOSEST handling 
DS_SERVER_CLOSEST is only set when the client and server site coincide.

MS-NRPC 2.2.1.2.1

Signed-off-by: Stefan Metzmacher <metze@samba.org>
 2011-11-27 12:50:48 +01:00
Matthias Dieter Wallnöfer
fc26e29f8e s4:netcmd/common.py: add a "netcmd" function to do a cldap netlogon request 
This is useful for a new "samba-tool domain info" command.

Patch inspired by Matthieu Patou.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
 2011-11-27 12:50:06 +01:00
Matthias Dieter Wallnöfer
179bf9b51c s4:libnet/py_net.c: "py_net_finddc" - add an "address" parameter 
This is useful for a new "samba-tool domain info" command.

Patch inspired by Matthieu Patou.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
 2011-11-26 10:34:58 +01:00
Matthias Dieter Wallnöfer
dec1435a42 s4:libnet/py_net.c - initialise optional keyword arguments 
Signed-off-by: Stefan Metzmacher <metze@samba.org>
 2011-11-26 10:32:59 +01:00
Matthias Dieter Wallnöfer
ad19aa6331 s4:libcli/finddcs_cldap.c - let "finddcs_cldap" work either with the IP address or the domain name 
This will be useful for a new "samba-tool domain info" command.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
 2011-11-26 10:26:52 +01:00
Matthieu Patou
9e6c88bda5 smbtorture: avoid sigsev if the password is not correct 
Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
Signed-off-by: Stefan Metzmacher <metze@samba.org>
 2011-11-26 10:17:39 +01:00
Matthias Dieter Wallnöfer
83c039378b s4:update_keytab LDB module - no need to filter for the DN 
We launch a search request with base scope on exactly the same DN (see
downwards).

Signed-off-by: Stefan Metzmacher <metze@samba.org>
 2011-11-26 10:17:18 +01:00
Matthias Dieter Wallnöfer
2c73eb4204 idl:netlogon.idl - add the Active Directory Web Service bit (DS_SERVER_WEBSERV) 
MS-NRPC 2.2.1.2.1

Signed-off-by: Stefan Metzmacher <metze@samba.org>
 2011-11-26 10:16:16 +01:00
Michael Adam
37f7a2c82d s3:locking:posix: remove uses of SMB_ASSERT() from get_windows_lock_ref_count() 
SMB_ASSERT is useless, since in non-developer build it does not actually
fail after the log message, but usual flow just continues.

Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Fri Nov 25 14:59:53 CET 2011 on sn-devel-104
 2011-11-25 14:59:53 +01:00
Michael Adam
95e686d59c s3:locking:posix: adapt use of dbrwrap_fetch() to new NTSTATUS semantics 2011-11-25 13:24:34 +01:00
Gregor Beck
3a2fd7c0e2 s3:registry: write INFO/version if we create registry.tdb 
Signed-off-by: Michael Adam <obnox@samba.org>
 2011-11-25 13:24:34 +01:00
Gregor Beck
a719ce7c11 s3:dbwrap: do not burden the user of db_open_ctdb with ifdef voodoo 
Signed-off-by: Michael Adam <obnox@samba.org>
 2011-11-25 13:24:34 +01:00
Gregor Beck
90eb2eb178 s3:lib fix output of hex escapes > 0x7F with cbuf_print_quoted 
(cherry picked from commit a1fcb7e37a23dcc035686486d4afe32a67082ae1)
 2011-11-25 13:24:34 +01:00
Gregor Beck
2d9b4015d6 s3:net registry check: improve console output 
Signed-off-by: Michael Adam <obnox@samba.org>
 2011-11-25 13:24:34 +01:00
Michael Adam
9b42b8a346 socket_wrapper: use libreplace headers based on "#ifdef HAVE_LIBREPLACE" 
instead of "#ifdef _SAMBA_BUILD_".

This is to be able to use socket_wrapper in other projects
that also use libreplace.
 2011-11-25 13:24:34 +01:00
Michael Adam
87026b6dc3 socket_wrapper: simplify include path for replace.h 2011-11-25 13:24:34 +01:00
Volker Lendecke
47a94f7f81 s3: user_domain is not used in wb_getpwsid 
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Fri Nov 25 13:23:30 CET 2011 on sn-devel-104
 2011-11-25 13:23:30 +01:00
Volker Lendecke
29735327f6 s3: Add some const 
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Fri Nov 25 10:21:07 CET 2011 on sn-devel-104
 2011-11-25 10:21:07 +01:00
Stefan Metzmacher
bfbfcd1a51 s3:torture: test smb2cli_logoff and smb2cli_tdis 
metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Thu Nov 24 20:36:31 CET 2011 on sn-devel-104
 2011-11-24 20:36:31 +01:00
Stefan Metzmacher
b01d80a25e s3:smb2cli: zero tid in smb2cli_tdis* 
metze
 2011-11-24 19:02:33 +01:00
Stefan Metzmacher
cc67f7e548 s3:smb2cli: free session in smb2cli_logoff* 
metze
 2011-11-24 19:02:33 +01:00
Volker Lendecke
d287fe5399 s3:libsmb: Fix a typo 2011-11-24 19:02:33 +01:00
Stefan Metzmacher
a5322366d8 s3:torture: add SMB2-SESSION-REAUTH 
metze
 2011-11-24 19:02:33 +01:00
Stefan Metzmacher
2a04959ba1 s3:torture: add SMB2-MULTI-CHANNEL test 
metze
 2011-11-24 19:02:33 +01:00
Michael Adam
4c29389c04 s3:torture: add a new test SMB2-TCON-DEPENDENCE 
Signed-off-by: Stefan Metzmacher <metze@samba.org>
 2011-11-24 19:02:33 +01:00
Michael Adam
1fef161d2a s3:torture:smb2: add SMB2-SESSION-RECONNECT test 
Signed-off-by: Stefan Metzmacher <metze@samba.org>
 2011-11-24 19:02:33 +01:00
Stefan Metzmacher
4958d7cb44 s4:libcli/smb2: use talloc_zero() in smb2_request_init() 
metze
 2011-11-24 19:02:33 +01:00