1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-31 17:18:04 +03:00
Commit Graph

16380 Commits

Author SHA1 Message Date
Andrew Bartlett
9549ebc2ac Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
(This used to be commit 532ccbbe7a)
2008-07-23 16:15:46 +10:00
Andrew Bartlett
d6fdd13dec Remove the 'accoc_group_id' check in the RPC server.
This check breaks more than it fixes, and while technically not
correct, is the best solution we have at this time.  Otherwise,
SCHANNEL binds from WinXP fail.

Andrew Bartlett
(This used to be commit f8628fa330)
2008-07-23 16:14:20 +10:00
Andrew Bartlett
e0bd9e82ea Explain where some other OIDs are allocated.
This is an odd place for an OID registry - we perhaps need a central
wiki page.

Andrew Bartlett
(This used to be commit 1c90997397)
2008-07-23 13:49:00 +10:00
Michael Adam
7fba6c649b Change occurrences of the u1 member of DsBindInfo* to pid after idl change.
Michael
(This used to be commit b91bbc5fe4)
2008-07-22 15:35:23 +02:00
Michael Adam
e184b70768 drsuapi.idl: change the u1 field in DsBindInfo* to "pid".
According to the WSPP docs, section 5.35,
this is the "process identifyer" of the client.
It is meant for informational and debugging purposes
only and its assignment is implementation specific.

Michael
(This used to be commit 579306eb5b)
2008-07-22 15:33:26 +02:00
Michael Adam
901e764fa7 drsuapi.idl: add drsuapi_SupportedExtensionsExt bitfield.
This knowledge is obtained from the wspp-docs (section 5.35).

Michael
(This used to be commit f5afb69504)
2008-07-22 13:16:56 +02:00
Michael Adam
e7785a371a drsuapi.idl: the last 16 bytes in DsBindInfo48 ar the GUID of the config dn.
This bit seems not to be documented in the WSPP docs.

Michael
(This used to be commit 705f79bd0a)
2008-07-22 13:16:40 +02:00
Michael Adam
2abe5e9240 drsuapi.idl: add drsuapi_DsBindInfo48.
This is necessary to make DsGetNcChanges work with win2008.

Michael
(This used to be commit dd278b069b)
2008-07-22 13:16:31 +02:00
Volker Lendecke
a819f4e88c s3 cli_do_rpc_ndr does not use PI_* anymore
(This used to be commit e625c6b251)
2008-07-22 11:48:30 +02:00
Jelmer Vernooij
24b03e1080 Properly cast array length in print functions.
(This used to be commit f321240fa9)
2008-07-21 12:47:08 +02:00
Andrew Bartlett
ecc13c3b1f Fix winbindd not to sit in a busy loop...
Clearly winbindd in Samba4 has not ever been run against windows, as
when we fixed the Samba4 server not to cause XP to loop like this,
Samba4's own client starts looping...

Andrew Bartlett
(This used to be commit 9741772190)
2008-07-21 15:00:18 +10:00
Andrew Bartlett
d626a26374 Rename structures to better match the names in the WSPP IDL.
The 'comment' element in a number of domain structures is called
oem_information.  This was picked up actually because with OpenLDAP
doing the schema checking, it noticed that 'comment' was not a valid
attribute.

The rename tries to keep this consistant in both the LDB mappings and
IDL, so we don't make the same mistake in future.

This has no real schema impact, as this value isn't actually used for
anything, as 'comment' was not used in the provision.

Andrew Bartlett
(This used to be commit 65dc0d5365)
2008-07-21 13:42:07 +10:00
Andrew Bartlett
e16b2242e5 Remove bogus test in 'enum trusted domains' LSA server.
The change to the RPC-LSA test proves that when the remote server has
0 trusted domains, it will return NT_STATUS_NO_MORE_ENTRIES, not
NT_STATUS_OK.

Andrew Bartlett
(This used to be commit 40a55b34c2)
2008-07-21 12:05:53 +10:00
Andrew Bartlett
7d84b72a70 Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
(This used to be commit 55bde3c9da)
2008-07-21 11:27:23 +10:00
Andrew Bartlett
f4cae6a913 Sleep longer in the hope that the OpenLDAP backend might catch up
(This used to be commit 63c80c885d)
2008-07-21 11:18:54 +10:00
Andrew Bartlett
ca46ad25b8 Fix ldb_map to add/remove the same 'extra' objectclass
The code previously added data->add_objectClass, but only removed the
fixed objectclass of extensibleObject.

Found by the ldap.py test.

Andrew Bartlett
(This used to be commit 4fa15c3173)
2008-07-21 11:18:21 +10:00
Andrew Bartlett
706140a1dc Make invalid 'member' detection work again.
This defines a rootdn globally, and due to OpenLDAP bugs, gives it
manage access to the whole database.  This makes the memberOf module
able to validate the links again, now we have database ACLs.

Andrew Bartlett
(This used to be commit 9fe3e9f09f)
2008-07-21 09:36:24 +10:00
Volker Lendecke
853ef0d5ef Fix RAW-OPEN against Samba3
This test assumed that fnums are recycled immediately after a close. This is
not true on Samba 3.

Andrew B., I assume this is just a bug in the test. Assuming recycled fnums
might be true on Windows and Samba 4, but I don't think we should assume this
everywhere.

Volker
(This used to be commit a4c3a59d47)
2008-07-19 12:47:31 +02:00
Andrew Bartlett
3408a2d18f Make a seperate template for the refint configuration too
(This used to be commit d2a527acc5)
2008-07-18 18:58:56 +10:00
Andrew Bartlett
cfc2063f23 Put the memberof template into a seperate setup/ file.
Set a memberof-dn in a fruitless attempt to fix the ACL problem I'm
having with OpenLDAP

Andrew Bartlett
(This used to be commit 6d6e03834a)
2008-07-18 18:44:07 +10:00
Andrew Bartlett
853194c308 More 'must be ignored' options from the MS-SMB doc.
Also in particular the 'sync' flags (which Samba has traditionally
ignored).

Thanks to Olivier Salamin <olivier.salamin@gmail.com> for pointing out
more flags that needed to be handled.

Andrew Bartlett
(This used to be commit 370bb39cd7)
2008-07-18 18:40:19 +10:00
Volker Lendecke
8025edf335 Add the interface ID to the rpc_pipe_register_commands call in s3 srv code
(This used to be commit efe2499283)
2008-07-16 22:22:38 +02:00
Stefan Metzmacher
29049aa670 drsuapi: print out the number of linked attribute values we got
metze
(This used to be commit 34f8b2abdd)
2008-07-16 14:42:12 +02:00
Stefan Metzmacher
f0e44c35af drsuapi: make use of the 'more_data' field in DsGetNCChangesCtr[1|6]
metze
(This used to be commit 35c7fa470a)
2008-07-16 14:42:11 +02:00
Stefan Metzmacher
f3fae86549 drsuapi: check ctr6->drs_error
metze
(This used to be commit 511847f5f5)
2008-07-16 14:42:11 +02:00
Stefan Metzmacher
a24fb2b537 drsuapi: get ctr6 out of xpress compressed level
metze
(This used to be commit 4e0708148a)
2008-07-16 14:42:06 +02:00
Stefan Metzmacher
c6ea7f0221 drsuapi: total_object_count was the wrong guess
The total_object_count member of DsGetNCChangesCtr[1|6] was wrong
it's the error code of an extended operation.

DsGetNCChangesCtr6 has a nc_object_count value which contains
the estimated amount of objects in the naming_context.

W2k seems to have a bug and sends this number of objects
in the extended_ret field. Maybe it's just a bug and
not a feature:-)

metze
(This used to be commit 6793109212)
2008-07-16 12:16:58 +02:00
Stefan Metzmacher
033683b00e drsuapi.idl: fix unknowns in drsuapi_DsGetNCChangesCtr*
metze
(This used to be commit 9e99e59ca7)
2008-07-16 12:16:55 +02:00
Stefan Metzmacher
ddce2beba8 libnet/become_dc: an unknown field in drsuapi.idl changed to object_flags
metze
(This used to be commit a6198ab6cb)
2008-07-16 12:15:50 +02:00
Stefan Metzmacher
e81feb77a2 drsuapi.idl: fix unknowns in drsuapi_DsReplicaObject*
metze
(This used to be commit de2aed042d)
2008-07-16 12:15:37 +02:00
Stefan Metzmacher
9827cf832f drsuapi.idl: fix unknowns in drsuapi_DsReplicaCursor[2]
metze
(This used to be commit a681e55067)
2008-07-16 12:12:30 +02:00
Stefan Metzmacher
80fe14a211 drsuapi.idl: correctly handle xpress compressed payload
metze

Signed-off-by: Stefan Metzmacher <metze@samba.org>
(This used to be commit d9d19eef4f)
2008-07-16 12:12:29 +02:00
Stefan Metzmacher
c8a1254db8 become_dc: we need to replicate using krb5 auth to work against w2k
With NTLMSSP we just get strange responses with a random object count
and a NULL object list. On the domain partition where we try to replicate
the password fields.

metze
(This used to be commit ce12a91051)
2008-07-16 12:12:29 +02:00
Stefan Metzmacher
dfb1ba3d9e NET-API-BECOME-DC: fix crash bugs because of unintialized variables
metze
(This used to be commit 6acf42c2e4)
2008-07-16 12:12:29 +02:00
Andrew Bartlett
0c4738a411 Another kludge to let the OpenLDAP backend catch up.
This will go away when this is handled in an internal transation.

Andrew Bartlett
(This used to be commit f567e17758)
2008-07-16 17:06:33 +10:00
Andrew Bartlett
0edce42b36 Fix the build - this element was renamed.
(This used to be commit 60161954ad)
2008-07-16 15:28:54 +10:00
Andrew Bartlett
fe9fa62a05 Reorder whitespace in generated slapd.conf
This helps us see the real groupings in the generated memberOf
handling.

Andrew Bartlett
(This used to be commit ec70ebb831)
2008-07-16 14:04:24 +10:00
Andrew Bartlett
e92125e631 Ignore and handle more NT Create & X options.
The MS-SMB document explains that some of these options should be
ignored.  The test proves it.

/* Must be ignored by the server, per MS-SMB 2.2.8 */
/* Must be ignored by the server, per MS-SMB 2.2.8 */

If we implement HSM in samba4 (likely) we should honour this bit.
/* Don't pull this file off tape in a HSM system */

Andrew Bartlett
(This used to be commit 502739ff90)
2008-07-16 14:00:18 +10:00
Andrew Bartlett
376b2a29d6 Don't keep an extra ldb around forever.
We just open it to figure out if we need to be a Global Catalog server.

Andrew Bartlett
(This used to be commit f13572d9e9)
2008-07-16 11:11:25 +10:00
Andrew Bartlett
1d3bdf3f54 Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
Conflicts:

	source/dsdb/samdb/ldb_modules/simple_ldap_map.c
(This used to be commit 5d539b7da4)
2008-07-15 22:22:34 +10:00
Andrew Bartlett
c46afc8c44 Simplify the contextCSN determination.
We only ever have one backend partition per Samba partition.

Andrew Bartlett
(This used to be commit 316a9b312a)
2008-07-15 22:10:42 +10:00
Andrew Bartlett
831bd55fb0 Lock down the LDAP backend - only samba may read or write
(This used to be commit a3912801fb)
2008-07-15 22:07:45 +10:00
Andrew Bartlett
d904b71879 Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
(This used to be commit 7fb8179f21)
2008-07-15 20:27:43 +10:00
Andrew Bartlett
cc44b10c24 Revert Fedrora DS backend to use extensibleObject.
Until I create a samba4openldaptop and samba4fedoratop...

Andrew Bartlett
(This used to be commit 6e232c4ae6)
2008-07-15 20:26:04 +10:00
Andrew Bartlett
63d91e9ab0 Kill of some bogus debugs for the world who does not use the LDAP backend
(This used to be commit 5bde586bdb)
2008-07-15 19:31:37 +10:00
Andrew Bartlett
e400b3ec4e Fix asking for credentials for non-LDAP provisions.
(This used to be commit 78416f4840)
2008-07-15 18:44:58 +10:00
Andrew Bartlett
0f1eea2672 Rework provision to handle both simple and SASL binds.
Fedora DS is still setup for simple binds only, at this point.
(it also fails on other issues).

Andrew Bartlett
(This used to be commit b24c572d5a)
2008-07-15 15:46:32 +10:00
Andrew Bartlett
a6b842f963 Connect to the LDAP backend with SASL credentials.
This reworks our LDAP backend code to move from anonymous access to a
shared-secret SASL-protected connection.  (SASL selects NTLM or
DIGEST-MD5 on my system).

To get this working, we must pre-populate the LDAP backend with a DN
to store ths SASL secret on, and we use back-ldif for this.

This gives us a reasonable basis to deploy a replicated OpenLDAP
backend solution.

Andrew Bartlett
(This used to be commit cd0745253c)
2008-07-15 15:15:12 +10:00
Andrew Bartlett
403f4f94ff Make up a full hostname for ldapi connections.
The DIGEST-MD5 SASL method requires a hostname, so provide one.

Andrew Bartlett
(This used to be commit edfb2ed1f2)
2008-07-15 15:10:29 +10:00
Andrew Bartlett
2b1f2712f1 Add a standard filter for finding the LDAP secrets.
(This used to be commit 28c7849668)
2008-07-15 15:09:32 +10:00