1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-04 17:47:26 +03:00

11366 Commits

Author SHA1 Message Date
Rafal Szczesniak
9f5f9ee9b4 r20161: Prevent potential segfault in case account is unknown.
rafal
2007-10-10 14:29:16 -05:00
Andrew Bartlett
dc9eee7cb3 r20152: Commit missing files from last night's commit. We no longer maintain
a distinction between PDC and BDC in the configuration files, only as
an entry in the ldb.

Andrew Bartlett
2007-10-10 14:29:15 -05:00
Andrew Bartlett
67d8365e83 r20149: Remove the smb.conf distinction between PDC and BDC. Now the correct
way to setup a Samba4 DC is to set 'server role = domain controller'.

We use the fSMORoleOwner attribute in the base DN to determine the PDC.

This patch is quite large, as I have corrected a number of places that
assumed taht we are always the PDC, or that used the smb.conf
lp_server_role() to determine that.

Also included is a warning fix in the SAMR code, where the IDL has
seperated a couple of types for group display enumeration.

We also now use the ldb database to determine if we should run the
global catalog service.

In the near future, I will complete the DRSUAPI
DsGetDomainControllerInfo server-side on the same basis.

Andrew Bartlett
2007-10-10 14:29:15 -05:00
Stefan Metzmacher
d2d9842914 r20145: fix whitespaces
metze
2007-10-10 14:29:15 -05:00
Stefan Metzmacher
0359d9a00b r20144: add NET-API-BECOME-DC test that tests libnet_BecomeDC()/libnet_UnbecomeDC()
metze
2007-10-10 14:29:14 -05:00
Rafal Szczesniak
3cdd43ebce r20143: a bit of experiments before doing serious changes in ejsnet.
rafal
2007-10-10 14:29:14 -05:00
Stefan Metzmacher
9c3267e17f r20142: only the DDNS updates are missing for the full libnet_BecomeDC(),
but that's not needed untill we can support the DsGetNCChanges()
in the server...

metze
2007-10-10 14:29:14 -05:00
Stefan Metzmacher
b69471866c r20141: use the gensec_features of the cli_credentials for ildap connections,
instead of hardcoded GENSEC_FEATURE_SEAL.

That means plain LDAP is now the default.

metze
2007-10-10 14:29:13 -05:00
Stefan Metzmacher
75c037cae2 r20139: only add GSS_C_CONF_FLAG and GSS_C_INTEG_FLAG if the caller requested it!
this is needed to create plain, singed or sealed LDAP connections.

this should go into lorikeet and main heimdal...

metze
2007-10-10 14:29:13 -05:00
Rafal Szczesniak
0b82b9dba1 r20138: return the proper status for the other functions as well.
rafal
2007-10-10 14:29:13 -05:00
Rafal Szczesniak
e635f5aeaf r20137: return the proper status.
rafal
2007-10-10 14:29:13 -05:00
Stefan Metzmacher
a91dc4a02a r20135: attach default gensec features to the cli_credentials structure,
so make it possible to force encryption or signing.

metze
2007-10-10 14:29:12 -05:00
Andrew Bartlett
c118275131 r20134: The IBM Checker correctly notes that *p cannot be \0 and still satisfy
the loop entry condition.

Andrew Bartlett
2007-10-10 14:29:12 -05:00
Stefan Metzmacher
024dacb3b0 r20130: remove one more talloc_get_type()
metze
2007-10-10 14:29:12 -05:00
Stefan Metzmacher
53805a8562 r20129: remove unused structure elements
metze
2007-10-10 14:29:12 -05:00
Stefan Metzmacher
cb89f0b8d5 r20128: get rid of more talloc_get_type() calls
metze
2007-10-10 14:29:11 -05:00
Stefan Metzmacher
a7397c4d2b r20127: - allocate ldb_handle under ldb_request! fix a mem leak
- pass ldb_request to init_lldb_handle()
- remove some useless talloc_get_type() calls

metze
2007-10-10 14:29:11 -05:00
Stefan Metzmacher
1e3bb18026 r20126: fix talloc hierachy and make lldb a child of module
metze
2007-10-10 14:29:11 -05:00
Stefan Metzmacher
db85b7840c r20125: fix some ugly mem leaks in the ldb_ildb backend
metze
2007-10-10 14:29:10 -05:00
Stefan Metzmacher
b0b9e83fed r20123: - avoid some more talloc_get_type() calls
- pass down ldb_request

metze
2007-10-10 14:29:10 -05:00
Stefan Metzmacher
cf9aade216 r20122: pass ildb to ildb_request_noop()
metze
2007-10-10 14:29:10 -05:00
Stefan Metzmacher
03029d4fed r20121: pass down the ldb_request struct to ildb_request_send(),
also pass ildb instead of module, to avoid multiple talloc_get_type() calls

metze
2007-10-10 14:29:10 -05:00
Stefan Metzmacher
b85d5cb7a4 r20120: fix the talloc hierachy and make ildb a child of module
metze
2007-10-10 14:29:09 -05:00
Stefan Metzmacher
9ddabfc60e r20115: from Julien Kerihuel <j.kerihuel@openchange.org>, thanks!:
Here is a patch that adds a torture:dc_binding parametric option to
   torture_create_testuser in testjoin.c. This patch is used in OpenChange
   torture tests when the AD is different from the Exchange Server. This generic
   option could also be used for later 'member server' tests in Samba4.

metze
2007-10-10 14:29:09 -05:00
Stefan Metzmacher
ed4c7ce547 r20114: from Julien Kerihuel <j.kerihuel@openchange.org>, thanks!:
I've attached the patch which fix this problem. I've only added
  DCERPC_NDR_REF_ALLOC to the connection flags. This way it is processed
  correctly by ndr_pull_init_flags and added to the ndr flags of the pull
  structure.

metze
2007-10-10 14:29:09 -05:00
Andrew Bartlett
5b32f102af r20113: Update the DRSUAPI CrackNames test to explore a few more cases, and in
particular to verify more expected results.

Also return more details from the join process.  Now we also return
the machine account's GUID.

Andrew Bartlett
2007-10-10 14:29:08 -05:00
Stefan Metzmacher
4daa45f98a r20111: this is the total object count of the current replication cycle
metze
2007-10-10 14:29:08 -05:00
Stefan Metzmacher
d295239861 r20109: let libnet_BecomeDC() work against w2k servers
metze
2007-10-10 14:29:08 -05:00
Stefan Metzmacher
fa5c942ee9 r20108: match w2k3 and send 1.2.840.48018.1.2.2 before 1.2.840.113554.1.2.2
to work better against w2k, so we don't get redirected from
1.2.840.113554.1.2.2 to 1.2.840.48018.1.2.2 by a w2k server, causing 2 additional
auth roundtrips.

metze
2007-10-10 14:29:08 -05:00
Stefan Metzmacher
5af5488593 r20107: don't segfault when the server didn't send a supportedMech in a negTokenTarg
this happens because we send 1.2.840.113554.1.2.2 before 1.2.840.48018.1.2.2
in the negTokenInit. And w2k's spnego code redirects us to use 1.2.840.48018.1.2.2
and then we start the our spnego engine with 1.2.840.48018.1.2.2 and in the then following
negTokenTarg w2k don't send the supportedMech (which means it aggrees in what we've choosen)

metze
2007-10-10 14:29:07 -05:00
Simo Sorce
ea111795f4 r20106: Optional ONE Level indexing for ldb_tdb
To activate it you must modify the @INDEXLIST object adding
the attribute @IDXONE: 1

Ldb test included

Simo.
2007-10-10 14:29:07 -05:00
Stefan Metzmacher
d70140ed07 r20105: remove useless comments
metze
2007-10-10 14:29:07 -05:00
Andrew Tridgell
195051fdee r20104: this is a alternative events backend, which uses a hybrid of aio and
epoll. It is not linked in anywhere yet - I'm committing it in case
anyone else wants to have a look at it.

The concept is quite strange really, but it seems to be the only way
that Linux 2.6.x can currently use a unified event model allowing for
AIO events and socket events to be waited for by a single unified
event wait function. You setup a epoll system, then setup a weird aio
event that points at the epoll system, then use io_getevents() to
actually do the waiting.

I'm hoping that kevents or a proper integration of epoll will allow us
to avoid ths rather hackish scheme, but meanwhile this is the only
path to proper AIO in Samba on Linux (without a horrible signals mess)

(NOTE: this code requires some kernel patches to work at the moment)
2007-10-10 14:29:06 -05:00
Rafal Szczesniak
1f3fd5f854 r20103: Change the returned type of prerequisite checking functions,
as metze once suggested.

rafal
2007-10-10 14:29:06 -05:00
Andrew Bartlett
924af98ffa r20102: Do not reference remote_ldb before we initialise it. This should fix
up many of the build farm failures.

Andrew Bartlett
2007-10-10 14:29:06 -05:00
Simo Sorce
a2520bcfa9 r20101: Also rename a variable now that the unused parameter is gone 2007-10-10 14:29:06 -05:00
Simo Sorce
cc1bcb8148 r20100: Remove completely unused parameters 2007-10-10 14:29:05 -05:00
Andrew Bartlett
d1b1a4c059 r20099: Add some comments, and correct others.
Andrew Bartlett
2007-10-10 14:29:05 -05:00
Stefan Metzmacher
3daa68e1c4 r20096: now I'm 100% sure:-)
metze
2007-10-10 14:29:05 -05:00
Stefan Metzmacher
b0ee130892 r20095: make a complete copy of the binding string
metze
2007-10-10 14:29:05 -05:00
Stefan Metzmacher
1b6621814b r20094: this should be non-const
metze
2007-10-10 14:29:04 -05:00
Stefan Metzmacher
314308c0bf r20093: some documentation updates
metze
2007-10-10 14:29:04 -05:00
Andrew Tridgell
d57b9fb298 r20092: added a locking benchmark that should be good for benchmarking
communitcation in a CIFS clustered server. It tries to keep the
connections full by setting up the next lock as each lock is done.

The locking pattern is similar to the local filesystem ping pong test
in junkcode, forcing a communication between nodes on each request
2007-10-10 14:29:04 -05:00
Andrew Tridgell
afcc797e8a r20091: remove blank lines at the end of text lines loaded from a file 2007-10-10 14:29:03 -05:00
Stefan Metzmacher
557bb80089 r20088: implement DsReplicaUpdateRefs() calls for all partitions
metze
2007-10-10 14:29:03 -05:00
Stefan Metzmacher
8b03b3a196 r20086: pull domain partition
metze
2007-10-10 14:29:03 -05:00
Stefan Metzmacher
de2f9869b5 r20085: add _part to structure elements
metze
2007-10-10 14:29:03 -05:00
Stefan Metzmacher
d770effb89 r20084: pull the config partition
metze
2007-10-10 14:29:02 -05:00
Stefan Metzmacher
0c4a7d713d r20083: move function together which belong to each other
metze
2007-10-10 14:29:02 -05:00
Stefan Metzmacher
2f1ec24d77 r20081: pull the whole schema partition
metze
2007-10-10 14:29:02 -05:00