Brad Hards
a05c9ab939
Define HAVE_ASM_BYTEORDER at all times
...
(This used to be commit 396ea14732d667960091f4a2570341059914ecb6)
2008-07-25 17:43:21 +10:00
Andrew Bartlett
c09fa19d13
Per feedback, remove epoch and ldconfig requires.
...
See https://bugzilla.redhat.com/show_bug.cgi?id=453083
(This used to be commit 97d02730e8fde56de27aeb51612a4777c2953c9f)
2008-07-25 14:15:22 +10:00
Andrew Bartlett
552fd06ded
Make a new define to ensure the accoc_group_id we use is always in common.
...
(This used to be commit b62490e3e21b606b66e0737a403b0d170b64cddd)
2008-07-25 14:11:18 +10:00
Andrew Bartlett
1f285560bc
Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
...
(This used to be commit b12dd8ee5443ebfc204d1684f541d68ffb351197)
2008-07-25 11:58:51 +10:00
Andrew Bartlett
404846d887
Try to avoid a memory leak if we re-set the global schema
...
However, try also not to pull a schema out from under a running ldb
session.
Andrew Bartlett
(This used to be commit 7cf9b9dd0bb35835a7c6e9897ea99951a33c63c7)
2008-07-25 11:58:24 +10:00
Andrew Bartlett
11798902dc
Complain if we are told to use an ldap backend, without the type
...
(This used to be commit e9c3c9ad8289ee48efa998ab6b486250dcd40b52)
2008-07-25 08:45:16 +10:00
Andrew Bartlett
d65f89f7b9
Clarify how we are doing the 'this is a rootdse query' check.
...
(This used to be commit 8dfba3160cc4bc518f3ad8570d104e5baae784ca)
2008-07-25 08:44:00 +10:00
Stefan Metzmacher
79657f78e8
hdb-ldb: fix the callers after drsblobs.idl changes
...
metze
(This used to be commit 1223cd17c79d130b46b0e0ccb0f6011c92441173)
2008-07-24 08:24:10 +02:00
Stefan Metzmacher
0c8fb9361e
password_hash: fix the callers after drsblobs.idl changes
...
metze
(This used to be commit fac7c79afae05a88ecc2a63c8eb9f2fd53ab7ce6)
2008-07-24 08:24:09 +02:00
Stefan Metzmacher
8a86e3cb45
drsblobs.idl: unify the Primary:Kerberos and Primary:Kerberos-Newer-Keys structs
...
metze
(This used to be commit 4b79a7678571ac2f7d5f827913fdcb419f5d2e20)
2008-07-24 08:24:09 +02:00
Stefan Metzmacher
aaa29d2fa5
drsblobs.idl: give some unknowns a meaning
...
metze
(This used to be commit 231e6f5ab2dc8a3e991a9872be252cffff6f14c6)
2008-07-24 08:24:08 +02:00
Andrew Tridgell
66f09a7fd1
Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-test
...
(This used to be commit 24309dbf4d9622fcfafa29ef98bc0459fdaa814b)
2008-07-24 14:26:30 +10:00
Andrew Tridgell
2ecda9fde4
we can't query the ACL on a new file till it exists!
...
(This used to be commit 4f6646f06988b1fb8be9e0c8ae833bb9792184af)
2008-07-24 14:21:52 +10:00
Andrew Tridgell
809632c3df
initialise query_maximal_access here too
...
(This used to be commit 4b3af09450cf33c6785a3d8fddddc68047f2e388)
2008-07-24 14:21:31 +10:00
Andrew Tridgell
091c141aba
make sure we initialise query_maximal_access
...
(This used to be commit 036f73d39a7ef882fd76afcd3c11eef483f6c308)
2008-07-24 14:20:02 +10:00
Andrew Tridgell
1d12c64066
fixed spelling error
...
(This used to be commit 341f64834e13cdbc7d4742a4652ae39b70a4231f)
2008-07-24 14:19:49 +10:00
Anatoliy Atanasov
05583308fe
dsdb_create_prefix_mapping() implementation checks for existing prefix maping in ldb.
...
if one not found it creates a mapping for it and updates the prefixMap schema attribute in ldb.
(This used to be commit bbe895db7144b192981fad9ab6bbd3ebacb8d299)
2008-07-24 11:54:38 +10:00
Anatoliy Atanasov
f619e08f8b
Handle schema reloading request.
...
The ldif for that operation looks like this:
dn:
changetype: Modify
add: schemaUpdateNow
schemaUpdateNow: 1
It uses the rootdse's object functional attribute schemaUpdateNow.
In rootdse_modify() this command is being recognized and it is send as extended operation with DSDB_EXTENDED_SCHEMA_UPDATE_NOW_OID.
In the partition module its dispatched to the schema_fsmo module.
The request is processed in the schema_fsmo module by schema_fsmo_extended().
(This used to be commit 39f9184ddf215f2b512319211c0a05702218ef87)
2008-07-24 11:54:30 +10:00
Andrew Tridgell
b38045f9da
fixd a bug in the signal handling code - we could get phantom signals
...
(signum 64)
(This used to be commit af7fb2e38ba27cf8058eb1cef1f96bbc7b19849f)
2008-07-24 11:48:27 +10:00
Michael Adam
db36f37b8f
libnet_become_dc: send msDS_Behavior_Version == 3 (win2k8) in DsAddEntry
...
instead of version 2 (win2k3).
This makes the NET-API-BECOME-DC test work against windows 2003 and 2008.
Michael
(This used to be commit a7bfa1fb1bc6fb8e412990b7ff4c3ce9bc55099d)
2008-07-23 18:02:44 +02:00
Michael Adam
c71030bd04
libnet_become_cd: add boolean option "become_dc:force krb5" to control krb5 auth.
...
This allows controlling whether krb5 auth is forced for the rpc bind in
libnet_become_dc. It defaults to "yes". For Windows 2000, DsGetNCChanges
only krb5 auth works due to a bug in Windows (it returns garbage - a
positive object count is returned along with first object == NULL).
For Windows 2008, on the other hand, krb5 auth does not work currently
due to the lack of support for AES keys. (Metze is working on that.)
Michael
(This used to be commit af85aad8147b85a0b9ea2ccc66b8f04efdfe5cf3)
2008-07-23 18:01:02 +02:00
Michael Adam
1f20ca14cc
drsuapi: always set the pid field of the outgoing DsBindInfo to 0.
...
This is for debugging and informational purposes only.
The assignment is implementation specific.
(WSPP docs, sec. 5.35).
Michael
(This used to be commit 1f5704e2dee5900e8d1d87699b76f67c0e12854e)
2008-07-23 15:36:13 +02:00
Michael Adam
e269804b04
libnet_unbecome_dc: teach unbecomeDC_drsuapi_bind_recv() DsBindInfo48.
...
..to work agains w2k8.
Michael
(This used to be commit 97e8d5813df19cae294b6de2a880606f0f8c2c59)
2008-07-23 15:36:13 +02:00
Michael Adam
46bb8aa357
libnet_become_cd: teach becomeDC_drsuapi_bind_recv() DsBindInfo48.
...
To work with w2k8.
Michael
(This used to be commit 7d80fab912576923c7474d77b8ed960b01296914)
2008-07-23 15:36:13 +02:00
Michael Adam
f9e6197924
dsdb: teach dreplsrv_out_drsuapi_bind_recv() knowledge of DsBindInfo48.
...
To make it work against w2k8.
Michael
(This used to be commit a8aea9274170a2b472c45c97a4904bd299d2a92e)
2008-07-23 15:36:13 +02:00
Stefan Metzmacher
34b10077f9
password_hash: add generation of the Primary:Kerberos-Newer-Keys blob
...
But it's still of by default until we now what triggers this generation.
It could be that the value is always generated but the KDC only
uses it when in a specific funtional level, but it could also
be that it's only generated in a specific functional level.
metze
(This used to be commit 08618bbd508ede0bb9e1922fae562cffdca41cbd)
2008-07-23 14:46:11 +02:00
Stefan Metzmacher
0842eb25a1
hdb-ldb: try to find Primary:Kerberos-Newer-Keys and fallback to Primary:Kerberos
...
Now provide AES tickets if we find the keys in the supplementalCredentials attribute
metze
(This used to be commit 8300259f103f8cfe014988fad0f7ee0d49bb1ac2)
2008-07-23 14:46:11 +02:00
Stefan Metzmacher
28a7e6f125
drsblobs.idl: add idl for Primary:Kerberos-Newer-Keys blob in supplementalCredentials
...
metze
(This used to be commit 97b7901afbccc9647ad2958d4cf12300de2655d1)
2008-07-23 14:46:10 +02:00
Stefan Metzmacher
b3d6c5ee31
password_hash: order the supplementalCredentials Packages in the same order like windows
...
metze
(This used to be commit ca9cd81a1798fb15195566422b3cad7c282fce89)
2008-07-23 14:46:10 +02:00
Stefan Metzmacher
12ac4c5666
password_hash: split the generation of krb5 keys into a different function
...
metze
(This used to be commit 4ad73a0bf8952783d3d9a7339c0c4fd8ca28981a)
2008-07-23 14:46:10 +02:00
Stefan Metzmacher
b783b28d70
password_hash: simplify the logic if we have cleartext we always generate the hashes
...
metze
(This used to be commit 5edff84429ef0d03b47a438e18861d26c97e17b6)
2008-07-23 14:46:09 +02:00
Stefan Metzmacher
e0f04e36ad
password_hash: fix callers after idl change for package_PrimaryKerberos
...
metze
(This used to be commit 1bf552856f3a930c4716ceb73d9ba9adf7502d3d)
2008-07-23 14:46:09 +02:00
Stefan Metzmacher
e3434f8995
drsblobs.idl: fix unknowns in package_PrimaryKerberos idl
...
metze
(This used to be commit da9ceb2bf17f964334d9317829d40483e2c04b10)
2008-07-23 14:46:09 +02:00
Stefan Metzmacher
fa40b0709a
hdb-ldb: check the SUPPLEMENTAL_CREDENTIALS_SIGNATURE
...
metze
(This used to be commit 7219740ef434091617c6bb727374251987ff2a62)
2008-07-23 14:46:08 +02:00
Stefan Metzmacher
fbea02accf
password_hash: check the SUPPLEMENTAL_CREDENTIALS_SIGNATURE
...
metze
(This used to be commit 19b8c8e37bafab050ab61266c35006efada2947c)
2008-07-23 14:46:08 +02:00
Stefan Metzmacher
ecdd13389f
drsblobs.idl: fix idl for supplementalCredentialsSubBlob
...
metze
(This used to be commit 24c5b10136f6e640832193aaf9e6d7e865c288bc)
2008-07-23 14:46:08 +02:00
Stefan Metzmacher
69d3f0e602
password_hash: ignore reserved value, but still set it like windows does
...
metze
(This used to be commit 5b860572686167d0291161f6597f143e538e2f3a)
2008-07-23 14:46:08 +02:00
Stefan Metzmacher
bb12c78d44
drsblobs.idl: rename unknown1 -> reserved
...
metze
(This used to be commit 9a70b2237d4fdd523edfbca0329ad35e71faf998)
2008-07-23 14:46:07 +02:00
Stefan Metzmacher
bcb0db3634
password_hash: don't add zero padding as w2k8 also don't add it
...
metze
(This used to be commit 26e9169d454349795ad0bc64d7f65059541ab89e)
2008-07-23 14:46:07 +02:00
Stefan Metzmacher
b4e9e8954a
hdb-ldb: fix comment about padding
...
metze
(This used to be commit ca28d05b11e602e0f98cda0e02f973562c199dc6)
2008-07-23 14:46:06 +02:00
Stefan Metzmacher
75cdaa4c84
hdb-ldb: fix crash bug in the error path
...
metze
(This used to be commit ac02d6a0f765e3b66fb6796f129edb1a348ecd84)
2008-07-23 14:46:06 +02:00
Stefan Metzmacher
734d0c0a5d
RPC-DSSYNC: print 'supplementalCredentials' more verbosely
...
metze
(This used to be commit 6a7637b12e4a34915a53e81a0f47571da21fdc5a)
2008-07-23 14:46:06 +02:00
Stefan Metzmacher
5bb679aa0f
rpc_server: be more strict with the incoming assoc_group_id
...
Allow 0 and 0x12345678 only.
This fixes the RPC-HANDLES test.
metze
(This used to be commit c123e597cc84685abf2b0d3564e1a26d80bbef2f)
2008-07-23 14:46:05 +02:00
Michael Adam
a9c3f4700c
smbtorture: add a warning for unknown BindInfo length to the RPC-DSSYNC test
...
Michael
(This used to be commit 7ee99105ea3a50d8ee2c83ecd39e834ed9efb98c)
2008-07-23 12:52:40 +02:00
Michael Adam
935a7b3389
smbtorture: add support for the DSBindInfo48 to the RPC-DSSYNC test.
...
Michael
(This used to be commit 67a99e445871861945fd0a45784cffb358bdccf3)
2008-07-23 12:52:40 +02:00
Stefan Metzmacher
945eedc4c1
libnet/become_dc: add a comment and explain why it's important to specify krb5
...
metze
(This used to be commit 26d1f9366d8611af1a69095b4cede2d2c95c982d)
2008-07-23 11:56:55 +02:00
Andrew Bartlett
ea7f2fedea
Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
...
(This used to be commit ae311d89d2d477b235a6a9294a8bb463ed0a8c05)
2008-07-23 16:20:17 +10:00
Andrew Bartlett
768515f4ad
The SMB session key must not be more than 16 bytes in SAMR (and
...
presumably LSA).
Tests show that Vista requires the sesion key to be truncated for a
domain join.
Andrew Bartlett
(This used to be commit af629a3738298d27eb2dbecf466ceb503cec9638)
2008-07-23 16:19:54 +10:00
Andrew Bartlett
9549ebc2ac
Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
...
(This used to be commit 532ccbbe7aa360440f455dfa136f425b9996e998)
2008-07-23 16:15:46 +10:00
Andrew Bartlett
042eefe3eb
Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
...
(This used to be commit a93b20b85b7b35965c428f1543cb7bbe96e16d42)
2008-07-23 16:15:43 +10:00