1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-26 10:04:02 +03:00

116 Commits

Author SHA1 Message Date
Stefan Metzmacher
5ef59e9a0a r4003: run successful against a nt4 sp6 pdc with one nt4 sp6 trust and a w2k3 trust
metze
(This used to be commit 5101cd51a24fdcda8dd8fc4da446782948290f9b)
2007-10-10 13:06:13 -05:00
Stefan Metzmacher
b7781099e6 r4002: NT 4.0 sp6a can't do schannel 128
metze
(This used to be commit c04a77ed6945db0292434fb5461a884708a9ebf2)
2007-10-10 13:06:13 -05:00
Andrew Bartlett
47c3f920db r3921: Cross-test SIDs in RPC-SAMSYNC, fix the build.
Andrew Bartlett
(This used to be commit 49c794a6b215f81fd0dba0e7f6812c647b3d91c7)
2007-10-10 13:06:06 -05:00
Andrew Bartlett
88baaee093 r3917: A few more LSA RPCs found in my wanderings (for trusted domains, these
seem to be 'shortcut' RPCs, that just avoid an open/query pair).

Rename a few others to give us a slightly sensible pattern.

Andrew Bartlett
(This used to be commit d6a7ab57e74ab89dd163d5f9f5f901e586b0aad4)
2007-10-10 13:06:05 -05:00
Andrew Bartlett
08c4c748a4 r3909: Fix cross-reference test for trusted domains.
Andrew Bartlett
(This used to be commit f2c86e619440c715499a28da5bfe22272458f0af)
2007-10-10 13:06:04 -05:00
Andrew Bartlett
b6b61cec79 r3907: * Rename lsa_Name to lsa_String
* Add new IDL to LSA, to query information about trusted domains (for
  cross-check with SamSync).

Andrew Bartlett
(This used to be commit 174c0778421b5154ff2ba809688ea6ef38a1478b)
2007-10-10 13:06:04 -05:00
Andrew Bartlett
21eecc6282 r3905: (oops, missing file: samsync.c)
* Add new LSA calls to open trusted domains

* Add new tests for ACCOUNTs in SamSync

* Clean up names in NETLOGON and LSA

* Verify Security Descriptors against LSA, as well as SamR

Andrew Bartlett
(This used to be commit ed838beddb3cb7b0015313a310303f831ed4f11b)
2007-10-10 13:06:03 -05:00
Andrew Bartlett
5d35fe6f71 r3885: Add security descriptor comparison to our RPC-SAMSYNC test. We now
verify that the security descriptor found in the SamSync is the same
as what is available over SAMR.

Unfortunately, the administrator seems unable to retrieve the SACL on
the security descriptor, so I've added a new function to compare with
a mask.

Andrew Bartlett
(This used to be commit 39ae5e1dac31a22086be50fb23261e02be877f3f)
2007-10-10 13:06:01 -05:00
Stefan Metzmacher
856ee66537 r3810: create a LIB_SECURITY subsystem
- move dom_sid, security_descriptor, security_* funtions to one place
  and rename some of them

metze
(This used to be commit b620bdd672cfdf0e009492e648b0709e6b6d8596)
2007-10-10 13:05:56 -05:00
Andrew Bartlett
0f569bd58c r3808: Put these in the same order as the IDL, to make it easier to spot what's unimplemetned (tests of the group members)
Andrew Bartlett
(This used to be commit 3b81305e2b7ee3e6acabcd8b0e9ed121d4b08840)
2007-10-10 13:05:56 -05:00
Andrew Bartlett
5ad5c6cc70 r3807: Cross-check the basic attributes for groups and aliases in RPC-SAMSYNC.
Andrew Bartlett
(This used to be commit 90398fda41dd15480899e3628df186eb02fdc139)
2007-10-10 13:05:56 -05:00
Andrew Bartlett
91e94014be r3805: Fix the LSA portions of the RPC-SAMSYNC test - I was not using the LSA
secrets interface correctly.  (New interface added).

Andrew Bartlett
(This used to be commit 994ac7f031e2b2d528595a4a0a446d92074d6ecf)
2007-10-10 13:05:55 -05:00
Andrew Bartlett
9aec081fd9 r3804: Add more comparison tests in RPC-SAMSYNC.
This compares values for the domain and for secrets.  We still have
some problems we need to sort out for secrets.

Also rename a number of structures in samr.idl and netlogon.idl, to
better express their consistancy.

Andrew Bartlett
(This used to be commit 3f52fa3a42b030c9aef21c8bd88aad87a0aae078)
2007-10-10 13:05:55 -05:00
Andrew Bartlett
3b217ffcf2 r3725: The new RPC-SAMSYNC test, complete with SAMR comparisons. This is
certainly not complete, we need to verify all incoming data, not just
accounts.

This needs to be exercised against some 'intersting' users, but for
now it shows that the IDL is already very accurate, particularly after
the previous commits cleanups of names.

Also commit the changes to keep RPC-LOGIN building.

Andrew Bartlett
(This used to be commit 87ec6834bc75012527454abc0e854b1cf2120088)
2007-10-10 13:05:47 -05:00
Andrew Bartlett
1158268287 r3716: Improvements in the RPC-SAMSYNC tests:
We now (for the first time) start to parse the 'user sensitive info'
 field, which reveals the user's NT and LM passwords from Win2k3.

 Using this, the 'validate samsync against netlogon' portion of the
 tests works for accounts.

 Trusted domains and secrets are now retreived, but like users,
 require further cross-validation work.

Andrew Bartlett
(This used to be commit c1d3794cad8b001661b48ecb05df5c38a69be92c)
2007-10-10 13:05:46 -05:00
Andrew Bartlett
c8b894b670 r3687: Gaah - I forgot to add the new file for the RPC-SAMSYNC test...
See -r 3686

Andrew Bartlett
(This used to be commit ab12134286267299c0bf60d03407429bb7de593f)
2007-10-10 13:05:44 -05:00