1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-24 02:04:21 +03:00

26113 Commits

Author SHA1 Message Date
Andrew Tridgell
a38854f74b s4-dsdb: minimise the DN in group expansion
this DN we have came from an extended DN search, which means it may
have multiple extended components. We need to minimise the DN before
AD will accept it

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-01-14 16:39:33 +11:00
Andrew Tridgell
504a3cc6b3 ldb: added ldb_dn_minimise()
this removes any extraneous components from a DN. For an extended DN,
this means removing the string DN and all but the first extended
component.

This is needed as AD returns "invalid syntax" if you don't use
a minimal DN as the base DN for a search. A non-minimal DN also
doesn't ever match in a search expression.

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-01-14 16:39:32 +11:00
Andrew Tridgell
74493af86f s4-dns: renamed DNS_TYPE_ZERO to DNS_TYPE_TOMBSTONE
we now know that these are tombstone records, with a timestamp

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-01-14 16:39:32 +11:00
Andrew Tridgell
27d7f6a312 s4-dsdb: validate number of extended components
this checks that the number of extended components in a DN is valid,
to match MS AD behaviour. We need to do this to ensure that our tools
don't try to do operations that will be invalid when used against MS
servers

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-01-14 16:39:32 +11:00
Andrew Tridgell
fb704d7fc1 ldb: added ldb_dn_get_extended_comp_num()
this returns the number of extended components. We need this to
validate a DN in the extended_dn_in module

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-01-14 16:39:32 +11:00
Andrew Bartlett
29fb42a48b s4-samba_tool Added ACL checking to python GPO management tool 2011-01-14 16:39:32 +11:00
Andrew Bartlett
5322567530 pyldb Simplify python wrappers for struct ldb_val (LdbValue)
Andrew Bartlett
2011-01-14 16:39:32 +11:00
Andrew Bartlett
edd3b033b8 s4-auth Add get and set methods for auth_session_info python wrapper
This allows the session key, security_token and credentials to be
manipulated from python.

Andrew Bartlett

Pair-Programmed-With: Andrew Tridgell <tridge@samba.org>
2011-01-14 16:39:32 +11:00
Andrew Bartlett
ece6eae4d8 s4-auth Add function to obtain any user's session_info from a given LDB
This will be a building block for a tokenGroups test, which can
compare against a remote server (in particular the rootDSE) against
what we would calculate the tokenGroups to be.

(this meant moving some parts out of the auth_sam code into the
containing library)

Andrew Bartlett
2011-01-14 16:39:32 +11:00
Andrew Bartlett
c82269cf86 s4-auth use new dsdb_expand_nested_groups()
This isn't quite as good as using tokenGroups, but that is only
available for BASE searches, and this isn't how the all the callers
work at the moment.

Andrew Bartlett
2011-01-14 16:39:32 +11:00
Andrew Bartlett
cbffc51313 s4-dsdb Implement tokenGroups expansion directly in ldb operational module
This removes a silly cross-dependency between the ldb moudle stack and auth/

Andrew Bartlett
2011-01-14 16:39:32 +11:00
Matthias Dieter Wallnöfer
3b78fcff5a s4:torture/nbench/nbench.c - initialise "n"
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Wed Jan 12 20:38:02 CET 2011 on sn-devel-104
2011-01-12 20:38:02 +01:00
Matthias Dieter Wallnöfer
aa759de6b3 s4:dns_server/dlz_bind9.c - initialise "ret" variables 2011-01-12 19:52:20 +01:00
Matthias Dieter Wallnöfer
d35d2bf392 s4:extended_dn_out LDB module - initialise "have_reveal_control" 2011-01-12 19:52:20 +01:00
Matthias Dieter Wallnöfer
0932c91186 s4:librpc/rpc/dcerpc_connect.c - fix uninitialised variable 2011-01-12 19:52:19 +01:00
Matthias Dieter Wallnöfer
dd5367ebe9 ldb:ltdb_sequence_number - initialise "tmp_ctx" to prevent uninitialisation warning 2011-01-12 19:52:19 +01:00
Matthias Dieter Wallnöfer
ee4fd13ea3 ldb:ldbsearch.c - fix possible uninitialised variable
And add a comparison for the "ret" result - this is more standard-oriented
2011-01-12 19:52:19 +01:00
Matthias Dieter Wallnöfer
a26a48934d torture:drs/rpc/msds_intid.c - proof for the correct "intId"
"drs_attr" is uninitialised in this loop
2011-01-12 19:52:19 +01:00
Matthias Dieter Wallnöfer
90db6a793a s4:winbind/idmap.c - we cannot use "failed" until we are in a transaction
We've to wait until "trans" is initialised.
2011-01-12 19:52:19 +01:00
Matthias Dieter Wallnöfer
25964e775a ldb:ltdb_sequence_number - check for an OOM exception 2011-01-12 19:52:19 +01:00
Matthias Dieter Wallnöfer
b804c5396c ldb:ldb_dn_explode - remove/unify some duplicate initialisations 2011-01-12 19:52:19 +01:00
Matthias Dieter Wallnöfer
47adb9df10 s4:dynconfig/dynconfig.h - fix ending newline warning 2011-01-12 19:52:19 +01:00
Matthieu Patou
1c6077e71e torture: add ndr tests for backup key protocol
Signed-off-by: Stefan Metzmacher <metze@samba.org>

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Wed Jan 12 10:25:00 CET 2011 on sn-devel-104
2011-01-12 10:25:00 +01:00
Matthieu Patou
25ae380fab idl: Add IDL for remote key backup protocol (rkbp)
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-01-12 09:08:06 +01:00
Matthieu Patou
9d9c212858 idl: remove protected storage
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-01-12 09:06:04 +01:00
Matthieu Patou
e723de8fa1 Add some debug in s4's winbind server
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Wed Jan 12 01:43:11 CET 2011 on sn-devel-104
2011-01-12 01:43:11 +01:00
Nadezhda Ivanova
db7e38d59a s4-tests: Tests for expansion of ACEs containing generic information.
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Tue Jan 11 12:10:25 CET 2011 on sn-devel-104
2011-01-11 12:10:25 +01:00
Andrew Tridgell
3ed4be0642 ldb: link to the download directory on the website 2011-01-11 16:02:27 +11:00
Andrew Tridgell
9814894daf s4: fixed 'make dist' not to need configure for s4 2011-01-11 01:23:05 +01:00
Matthieu Patou
504be0ac54 s4: make pipes with underscore works also
Signed-off-by: Stefan Metzmacher <metze@samba.org>

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Sun Jan  9 15:47:01 CET 2011 on sn-devel-104
2011-01-09 15:47:01 +01:00
Andrew Tridgell
005c6370cd waf: ensure "make dist" works from a clean git tree for all libraries
this uses a temporary waf lock file to force the build directory

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Sat Jan  8 02:35:22 CET 2011 on sn-devel-104
2011-01-08 02:35:22 +01:00
Michael Wood
3a14c97459 s4: upgradeprovision: Improve wording, punctuation
Signed-off-by: Matthieu Patou <mat@matws.net>

Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Sat Jan  8 00:25:08 CET 2011 on sn-devel-104
2011-01-08 00:25:08 +01:00
Günther Deschner
3294ccbb6d netlogon: move netlogon helpers to ../libcli/netlogon.
Guenther
2011-01-07 15:02:24 +01:00
Zahari Zahariev
6a0a0478ad s4/ldapcmp: Two new options are added to the tool
The new ones are --base and --scope they give us the opportunity to
compare DN subsets of the partitions. Now we are also able to compare
any two objects even if they have different DNs. This is exteremely
helpful when you are after nasty nTSecurityDescriptor bug.

Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>

Autobuild-User: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
Autobuild-Date: Fri Jan  7 13:22:26 CET 2011 on sn-devel-104
2011-01-07 13:22:26 +01:00
Andrew Bartlett
a7bdb49188 s4-ldap_server Allow multiple binds on LDAP server
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Fri Jan  7 00:02:23 CET 2011 on sn-devel-104
2011-01-07 00:02:23 +01:00
Jelmer Vernooij
4e0d0af9e8 acl tests: Fix import.
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Thu Jan  6 16:07:49 CET 2011 on sn-devel-104
2011-01-06 16:07:49 +01:00
Jelmer Vernooij
b44fe4e3bb Use new style objects. 2011-01-06 15:21:21 +01:00
Jelmer Vernooij
4236ec9d6d Remove unused imports. 2011-01-06 15:21:21 +01:00
Anatoliy Atanasov
c9757371db s4/ldapcmp: Correct fix for creds2
We need to set domain and workstation to creds2 otherwise we get Segfault
because they are not initialized correctly.
2011-01-05 16:16:59 +02:00
Anatoliy Atanasov
2e30897503 Revert "s4/ldapcmp: Fix the parsing of the second set of credentials"
This reverts commit 1cbce84683ef4fa49b85d87988c5e8db7057530a.
Wrong assumption about a segmentation fault
2011-01-05 16:14:14 +02:00
Anatoliy Atanasov
3f0db2e53b Revert "s4/ldapcmp: Check if creds2 is actualy set by the command line"
This reverts commit f8275bae5d7b471967be7222170d049c18b8882f.
Wrong assumption about a segmentation fault.
2011-01-05 16:14:14 +02:00
Jelmer Vernooij
26c8a520f3 upgradeprovision: Fix use of dict.get().
Avoid modifying list while iterating over it.

Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Wed Jan  5 03:37:35 CET 2011 on sn-devel-104
2011-01-05 03:37:35 +01:00
Jelmer Vernooij
e80b322077 s4-python: Allow setting TEST_DEBUG_LEVEL to override debug level for tests.
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Wed Jan  5 01:58:44 CET 2011 on sn-devel-104
2011-01-05 01:58:44 +01:00
Anatoliy Atanasov
f8275bae5d s4/ldapcmp: Check if creds2 is actualy set by the command line
When parsing the command line for the second set of credentials
the parser returns wrong user if the second set of parameters isn't set.
So check if the password is set instead.

Autobuild-User: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
Autobuild-Date: Tue Jan  4 18:11:26 CET 2011 on sn-devel-104
2011-01-04 18:11:26 +01:00
Anatoliy Atanasov
1cbce84683 s4/ldapcmp: Fix the parsing of the second set of credentials
We need this second set of credentials so we can do comparison
between DCs in two different domains.

Autobuild-User: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
Autobuild-Date: Tue Jan  4 16:36:06 CET 2011 on sn-devel-104
2011-01-04 16:36:06 +01:00
Günther Deschner
0279422c83 s4-smbtorture: check driver_version equality as well.
Guenther

Autobuild-User: Günther Deschner <gd@samba.org>
Autobuild-Date: Tue Jan  4 11:22:09 CET 2011 on sn-devel-104
2011-01-04 11:22:08 +01:00
Günther Deschner
64576106b1 s4-smbtorture: always setup full driver level 8 in test_add_driver_arg().
Guenther
2011-01-04 10:33:56 +01:00
Günther Deschner
69174fea5b s4-smbtorture: in test_GetDriverInfo_winreg() always test level 6 for samba3 as
well.

Guenther
2011-01-04 10:33:56 +01:00
Günther Deschner
19a295dee8 s4-smbtorture: setup help and dependent files in spoolss driver unc path tests.
Guenther
2011-01-04 10:33:55 +01:00
Günther Deschner
8fc28818b9 s4-smbtorture: fix DriverDate and DriverVersion comparison checks against w2k3.
Guenther
2011-01-04 10:33:55 +01:00