1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-23 17:34:34 +03:00
Commit Graph

21195 Commits

Author SHA1 Message Date
Andrew Tridgell
986627cd67 s4-provision: freeze the DNS zone before creating the zone file
This prevents bind from getting confused if it has a journal for the
zone.
2010-02-17 19:43:33 +11:00
Andrew Tridgell
fd2556317f s4-dnsupdate: use samba_runcmd() in the dns update task
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-02-17 19:43:32 +11:00
Andrew Tridgell
8633d8126b s4-param: added "rndc command" smb.conf option 2010-02-17 19:43:32 +11:00
Andrew Tridgell
72c0cd75e4 s4-provision: fix permissions on generated DNS zone file
The zone file needs to be writeable by bind to allow for it to flush
its journal on dynamic updates

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-02-17 19:43:32 +11:00
Andrew Tridgell
eb8800e611 s4-rpc: paranoid check for auth_length
This is not strictly needed as the ndr_pull_advance() checks it a few
lines further down, but I want to save Jeremy getting more grey hairs :-)
2010-02-17 10:54:05 +11:00
Andrew Tridgell
eda16f2410 s4-kcc: remove a qsort() that snuck into the new topology code 2010-02-16 22:42:59 +11:00
Andrew Tridgell
e3a272c3f2 s4-rpc: don't use auth padding in rpc bind requests as it breaks s3
The s3 RPC server returns a bind_nak if it gets a rpc bind with auth
padding. This change forces a padding length of zero to maximimise
compatibility with s3 servers. 

I've left the padding code in as a #if 0 to make it easier for us to
test/fix the s3 server code, which should be changed to correctly
handle arbitrary auth padding in all rpc requests with auth trailers.
2010-02-16 22:42:59 +11:00
Andrew Tridgell
1e13d3fb07 s4-dcerpc: fixed auth padding to be relative to the stub, not packet
The recent dcerpc padding changes made our padding relative to the
packet header, instead of the start of the stub. Surprisingly, this
broke w2k8r2 doing a dcpromo join to a s4 server. It seems that w2k8r2
is very fussy about the padding it gets in some circumstances.
2010-02-16 21:10:52 +11:00
Andrew Tridgell
018fb2d1ae s4-dsdb: return LDB_ERR_CONSTRAINT_VIOLATION on num_recs != 1
In a single record search, LDB_ERR_CONSTRAINT_VIOLATION is more useful
than the generic LDB_ERR_OPERATIONS_ERROR

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-02-16 21:10:52 +11:00
Andrew Tridgell
86f8ddf754 s4-samdb: use dsdb_search() in cracknames
greatly simplifies some of the cracknames code

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-02-16 21:10:52 +11:00
Andrew Tridgell
6d65f4c647 s4-kcc: remove search_onelevel_with_deleted() in kcc
Use dsdb_search() instead

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-02-16 21:10:51 +11:00
Andrew Tridgell
0bedb9cf5e s4-dsdb: removed gendb_search_single_extended_dn()
Use dsdb_search_one() instead, which allows for arbitrary controls

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-02-16 21:10:51 +11:00
Andrew Tridgell
b630530730 s4-dsdb: added dsdb_search_one() and cleanup dsdb_find_dn_by_guid()
dsdb_find_dn_by_guid() now takes a struct GUID instead of a
guid_string. All the callers in fact wanted a struct GUID, so we now
avoid the extra conversion.

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-02-16 21:10:51 +11:00
Andrew Tridgell
8f4a34272e s4-dsdb: replace dsdb_find_dn_by_guid() with a dsdb_search() call
much simpler code by using dsdb_flags

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-02-16 21:10:51 +11:00
Andrew Tridgell
e9be1fc41d s4-dsdb: change dsdb_search_dn_with_deleted() to dsdb_search_dn() with dsdb_flags
Allows for arbitrary controls
2010-02-16 21:10:51 +11:00
Andrew Tridgell
90203f87e7 s4-dsdb: change samdb_replace() to dsdb_replace() and allow for dsdb_flags
This allows for controls to be added easily where they are needed.
2010-02-16 21:10:50 +11:00
Andrew Tridgell
c6d85d67f9 s4-dsdb: replace dsdb_modify_permissive() with dsdb_modify() and dsdb_flags 2010-02-16 21:10:50 +11:00
Andrew Tridgell
67950c27e4 s4-dsdb: move dsdb_request_add_controls() into dsdb/common/util.c
This will be used to allow the flag based ldb functions to work on
both a ldb or a module, thus saving a lot of specialist functions.
2010-02-16 21:10:50 +11:00
Günther Deschner
020c8df281 s4-smbtorture: fix spoolss SD test against w2k8r2.
Guenther
2010-02-16 10:47:05 +01:00
Günther Deschner
41bb8767a2 s4-smbtorture: more work on test_PrinterInfo_DevMode RPC-SPOOLSS-PRINTER.
Guenther
2010-02-16 09:22:35 +01:00
Günther Deschner
1e59e5d8c9 s4-smbtorture: allow to call OpenPrinterEx with devicemode.
Guenther
2010-02-16 09:20:25 +01:00
Erick Nogueira do Nascimento
23d1dd5189 s4-drs: DsGetReplInfo() refactoring 2010-02-16 08:34:28 +11:00
Erick Nogueira do Nascimento
3e2a8676c3 s4-drs: DsReplGetInfo() for DS_REPL_INFO_REPSTO infoType
Implements the DS_REPL_INFO_REPSTO infoType of DsReplGetInfo().
2010-02-16 08:34:28 +11:00
Günther Deschner
bb05595b0a s4-smbtorture: more work on SD tests for RPC-SPOOLSS.
Guenther
2010-02-15 22:17:01 +01:00
Günther Deschner
71cfcee6ba s4-smbtorture: add rather simple spoolss device mode test.
Guenther
2010-02-15 22:16:25 +01:00
Günther Deschner
a6192d766f s4-smbtorture: use test_SetPrinter call in spoolss security descriptor tests.
Guenther
2010-02-15 22:15:33 +01:00
Günther Deschner
cdf2f6b672 s4-smbtorture: w2k8r2 allows to add printers w/o defining printprocessor.
Guenther
2010-02-15 22:12:55 +01:00
Andrew Tridgell
595982a475 s4-rootdse: we don't need DSDB_FLAG_OWN_MODULE here 2010-02-16 00:12:09 +11:00
Eduardo Lima
9c46f425a2 s4-drs: enable the recyclebin optional feature
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-02-16 00:12:09 +11:00
Andrew Tridgell
aba73767c0 s4-kcc: remove C++ comment 2010-02-15 23:22:48 +11:00
Crístian Deives
0cf4e8aae6 s4-kcc: initial code for the topology algorithm
this patch contains the data structures declarations and the functions to
setup the graph.

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-02-15 23:22:48 +11:00
Andrew Tridgell
4edbb25599 s4-dsdb: don't change replPropertyMetaData if the value hasn't changed
When updating replPropertyMetaData, check if the value being stored is
the same as the current value, and skip the update if it is.

This is based on a patch by Fernando J V da Silva <fernandojvsilva@yahoo.com.br>
2010-02-15 23:22:48 +11:00
Karolin Seeger
694ab7c5ff s4-heimdal: Fix typos in comment.
Karolin
2010-02-15 12:23:11 +01:00
Andrew Tridgell
2dff1f45f7 s4-test: use local ldb for urgent_replication test
This test only currently works on a local ldb, as it needs system
access.
2010-02-15 21:57:08 +11:00
Andrew Tridgell
3035c7c2ad s4-ldb: fixed permissions on urgent_replication.py 2010-02-15 21:57:08 +11:00
Andrew Tridgell
1ca2bd78b9 s4-test: minor fixes to urgent_replication.py
- fix usage name
- remove unnecessary python functions
- remote unused gc ldb
2010-02-15 21:57:08 +11:00
Fernando J V da Silva
f5de126b85 s4-drs: Test situations for Urgent Replication
Checks if the partition's uSNUrgent is updated or not, depending
on the class of the object which is created, modified or deleted.

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-02-15 21:57:08 +11:00
Fernando J V da Silva
cf1ed0678a s4-drs: Function for accessing dsdb_load_partition_usn from Python
Returns both uSNHighest and uSNUrgent as a dict object in Python
from a given partition dn.

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-02-15 21:57:08 +11:00
Fernando J V da Silva
5aa42f8010 s4-drs: Fixes bugs regarding Urgent Replication on wrong situations
It fixes the bug which causes an urgent replication to be enabled
incorrectly when an object is modified, but it should happen only
when it was created. This patch also fixes the bug that enable an
urgent replication when an object is deleted, but it should happen
only when it was modified and fixes the bug that does not enable
an urgent replication when an object is deleted and it should happen
only when it is deleted (not when it is modified).

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-02-15 21:57:07 +11:00
Günther Deschner
72f250ac16 s4-smbtorture: add some security descriptor tests to RPC-SPOOLSS and RPC-SPOOLSS-PRINTER.
Guenther
2010-02-15 11:08:16 +01:00
Matthias Dieter Wallnöfer
28bd9719e5 s4:provision.c - "provsion_store_self_join" - don't set the realm if it's NULL
The realm can be NULL when this function is called by "libnet_Join_primary_domain".
This seems to be a valid value since "libnet_JoinDomain" is allowed to return an
empty realm if we are not in a ADS domain.
2010-02-15 10:33:35 +01:00
Andrew Tridgell
05425fcf14 s4-drs: replace manual checks with dsdb_modify_permissive()
Much simpler to use the permissive control instead of manually munging
the SPN list.
2010-02-15 18:58:40 +11:00
Andrew Tridgell
2908f21c65 s4-drs: use a permissive modify in addentry
It is not an error if entries already exist.
2010-02-15 18:58:40 +11:00
Andrew Tridgell
4694b4677a s4-dsdb: added dsdb_modify_permissive()
This will be used in the drsuapi server
2010-02-15 18:58:40 +11:00
Matthias Dieter Wallnöfer
05b6e3f4f4 s4:dcesrv_lsa.c - remove a superfluous empty line
One empty line is enough for code part divisions.
2010-02-14 10:48:13 +01:00
Andrew Tridgell
eb5fc899b0 s4-rpcserver: teach the rpc server to cope with bad sig_size estimates 2010-02-14 18:44:21 +11:00
Andrew Tridgell
259129e8f4 a4-dcerpc: another attempt at dcerpc auth padding
The last change broke net vampire against w2k8r2
2010-02-14 18:44:21 +11:00
Andrew Tridgell
282cc79454 s4-ldb: use TYPESAFE_QSORT() in the rest of the ldb code 2010-02-14 18:44:20 +11:00
Matthias Dieter Wallnöfer
0c39fbc94e s4:loadparm.c - prevent memory leaks
If a "logfile" was already set, free the content up before setting a new
location. This can happen on a loadparm reload.
2010-02-13 20:05:22 +01:00
Matthias Dieter Wallnöfer
195bda569e s4:loadparm.c - the logfile parameter value needs to be duplicated
Otherwise the "logfile" pointer tracks all changes of "pszParmValue" which
content is only temporal. This was the cause of bug #6212.
2010-02-13 19:41:43 +01:00