Andrew Tridgell
b0090d01e0
s4-idl: give a enum for attribute cn and a 'NONE' attribute
...
The 'NONE' attribute has value 0xFFFFFFFF. Adding this ensures the
compiler will complain if it is set to use 16 bit enums. We rely on
being able to store 32 bits in an attid enum.
2010-01-09 13:10:28 +11:00
Andrew Tridgell
9e6eb22f7f
s4-drs: fixed the NC in the getncchanges RID alloc reply
...
the search happens on a different DN to the NC of the request, but the
reply is with the original NC
2010-01-09 10:15:14 +11:00
Andrew Tridgell
273a4d9803
s4-debug: removed debug_ctx(). It didn't catch on :-)
...
There was only one user, which isn't worth it for the overhead.
2010-01-09 10:15:13 +11:00
Andrew Tridgell
651ddb720a
s4-messaging: remove only usage of debug_ctx()
2010-01-09 10:15:13 +11:00
Andrew Tridgell
6a36799d30
s4-messaging: fixed a memory leak in messaging_path()
...
It is a bit convoluted to fix, as cluster_id_string() may return a
const string.
2010-01-09 10:15:12 +11:00
Andrew Tridgell
196cb6b359
s4-drs: fixed usage of ldb_dn_new()
2010-01-09 10:15:12 +11:00
Andrew Tridgell
39a4e2a38d
s4-ldb: validate the type of the ldb argument to ldb_dn_new()
...
It has been a common bug to get the first two arguments the wrong way
around
2010-01-09 10:15:12 +11:00
Simo Sorce
7eee8e053b
Fix comment
2010-01-08 17:01:02 -05:00
Jeremy Allison
d7713d11a6
Re-fix bug 5202 - cannot change ACLs on writable file with "dos filemode=yes"
...
This bug re-occurred for 3.3.x and above.
The reason is that to change a NT ACL we now have to open the file requesting
WRITE_DAC and WRITE_OWNER access. The mapping from POSIX "w" to NT permissions
in posix_acls doesn't add these bits when "dos filemode = yes", so even though
the permission or owner change would be allowed by the POSIX ACL code, the
NTCreateX call fails with ACCESS_DENIED now we always check NT permissions
first.
Added in the mapping from "w" to WRITE_DAC and WRITE_OWNER access.
Jeremy.
2010-01-08 10:17:46 -08:00
Matthias Dieter Wallnöfer
fca0c4de2a
s4:provision_self_join.ldif - Adapt comment after implementation of distributed RIDs
2010-01-08 18:18:21 +01:00
Andreas Schneider
0588f34467
s4-kdc: Migrate tcp connections to tsocket.
...
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-01-08 14:38:35 +01:00
Stefan Metzmacher
42c34cdafa
s4:kdc: use LIBSAMBA_TSOCKET
...
metze
2010-01-08 14:36:49 +01:00
Stefan Metzmacher
d97562b382
s4:kdc: the ->process function returns "bool"
...
metze
2010-01-08 14:36:49 +01:00
Stefan Metzmacher
bbaec01b37
libcli/util: add tstream_read_pdu_blob_send/recv
...
This will take the some full_request callback function
as the Samba4 packet code.
metze
2010-01-08 14:36:43 +01:00
Günther Deschner
1bc953088f
s3-time: fix build warnings after we moved to shared time functions.
...
Bjoern, please check.
Guenther
2010-01-08 12:35:25 +01:00
Günther Deschner
9bdd3d6c1b
s3-docs: mention -K option in pdbedit manpage.
...
Guenther
2010-01-08 12:35:18 +01:00
Andrew Tridgell
8d87c0a0c3
s4-drs: added two more SPNs in addentry
...
w2k8r2 wants these after a DCPROMO
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 18:24:54 +11:00
Andrew Tridgell
ad11deb9bd
s4-schema: fixes for W2K8-R2 schema
...
The schema from WSPP had a number of typos that prevented it from
working. These changes allow it to work with Samba, and allow w2k8r2
to run DCPROMO against Samba successfully
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 18:24:54 +11:00
Andrew Tridgell
ebec49965b
s4-schema: added msDS-NcType to schema container
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 18:24:53 +11:00
Andrew Tridgell
ce21151d22
s4-schema: fixed attributes of aggregate schema
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 18:24:53 +11:00
Andrew Tridgell
38909a4ae5
s4-schema: switch to W2K8-R2 schema
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 18:24:53 +11:00
Andrew Tridgell
d371b0eabe
s4-schema: added adminDisplayName and adminDescription
...
These are missing from the WSPP schemas
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 18:24:53 +11:00
Andrew Tridgell
c93a182a0d
s4-schema: added some debug for bad attributes
2010-01-08 18:24:53 +11:00
Andrew Tridgell
9d296e6776
s4-provision: added W2K8-R2 schema as provided by WSPP
2010-01-08 18:24:52 +11:00
Andrew Tridgell
5ccf8ae373
s4-samba3samtest: we need to force netbios name as well
...
needed for when run in CLIENT context
2010-01-08 13:03:08 +11:00
Andrew Tridgell
dde2b66341
s4-samba3sid: fixed error returns when res->count != 1 and oom
2010-01-08 13:03:08 +11:00
Andrew Tridgell
9aed099362
s4-samba3samtest: force workgroup so the domain is right
...
the samba3sid backend looks at lp_sam_name() which is based on the
workgroup
2010-01-08 13:03:07 +11:00
Andrew Tridgell
f68c43e803
s4-samba3sid: the sambaNextRid attribute is actually the previous RID
...
Not well named .... though same mistake that MS made with rIDNextRid
2010-01-08 13:03:07 +11:00
Andrew Tridgell
d6f92db456
s4-samba3sam: use samba3sid module
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 13:03:07 +11:00
Andrew Tridgell
dd61336165
s4-dsdb: added a samba3sid module
...
This module allocates SIDs using the Samba3 algorithm, for use with
the samba3sam module.
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 13:03:07 +11:00
Andrew Tridgell
66f161dee1
s4-acl: fixed acl.py test to use correct ldif
...
same problem as sec_descriptor.py
2010-01-08 13:03:07 +11:00
Andrew Tridgell
81c0b01585
s4-secdesc: fixed the sec_descriptor.py test
...
The test was using a "changetype: add" to try and add a member to a
group, where it should use a "changetype: modify" with a "add: member"
Also fixed the recovery when the test fails part way through (delete
the test users at the start as well as the end)
Nadya, please check!
2010-01-08 13:03:07 +11:00
Andrew Tridgell
43a815c67a
s4-samba3samtest: use system credentials for creating users
2010-01-08 13:03:07 +11:00
Andrew Tridgell
8b8bb15a54
s4-dsdb: fixed const misuse in acl module
2010-01-08 13:03:06 +11:00
Andrew Tridgell
baa8793a94
s4-dsdb: use dsdb_module_am_system() in acl module
2010-01-08 13:03:06 +11:00
Andrew Tridgell
595fad2b34
s4-dsdb: allow specification of a SID if we are system
...
needed for samba3sam test
2010-01-08 13:03:06 +11:00
Andrew Tridgell
f118f54ee7
s4-dsdb: added dsdb_module_am_system()
...
better than each module inventing their own
2010-01-08 13:03:06 +11:00
Andrew Tridgell
d22a9e5d3b
s4-dsdb: squash some unknown structure warnings
2010-01-08 13:03:06 +11:00
Andrew Tridgell
5d6032eb4b
s4-partition: fixed selection of partitions on exact match
...
When a search is on the root of a partition on the global catalog,
don't search partitions above that one.
2010-01-08 13:03:06 +11:00
Andrew Tridgell
59f314d321
s4-scripting: we need to use a base search for the NTDS GUID
...
now we have nTDSConnections structures we can get more than 1 reply
2010-01-08 13:03:06 +11:00
Stefan Metzmacher
501dd4a3b5
s4:dsdb/repl: convert dreplsrv_op_pull_source_send/recv to tevent_req
...
metze
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-01-08 13:03:05 +11:00
Andrew Tridgell
278d2f75ba
s4-smbd: setup the default event contexts for other process models
2010-01-08 13:03:05 +11:00
Andrew Tridgell
5803253362
s4-drs: we need to wrap extended operations in transactions
2010-01-08 13:03:05 +11:00
Andrew Tridgell
2d10f3a841
s4-dsdb: poke the RID Manager when completely out of RIDs too
2010-01-08 13:03:05 +11:00
Andrew Tridgell
a65823e33c
s4-dsdb: ensure we will in all the attributes for RID Set
...
We need to go to the top of the module stack so that all the extra
attributes get filled in
2010-01-08 13:03:05 +11:00
Andrew Tridgell
308a4798b8
s4-dsdb: added DSDB_FLAG_TOP_MODULE
...
This is used when you want the dsdb_module_*() functions to go to the
top of the stack.
2010-01-08 13:03:05 +11:00
Andrew Tridgell
5f36f0352e
s4-dsdb: no longer need special invocationID handling for standalone servers
...
They now work the same way as a DC
2010-01-08 13:03:05 +11:00
Andrew Tridgell
a7fffe8da0
s4-provision: do a self join for all server types
...
We need a machine account so the RID allocation code can work. It
seems better to use the same code paths for a domain controller and
standalone server to avoid testing headaches with little used code.
2010-01-08 13:03:05 +11:00
Andrew Tridgell
f6cf895951
s4-schema: added generic attributeID conversion functions
...
When we get one we haven't seen before, we can work out the right type
automatically in most cases.
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 13:03:04 +11:00
Andrew Tridgell
f7517e6256
s4-schema: added dsdb_attribute_by_lDAPDisplayName_ldb_val
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-01-08 13:03:04 +11:00