1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-24 21:34:56 +03:00
Commit Graph

26289 Commits

Author SHA1 Message Date
Sumit Bose
92ea55e84e s4-smbtorture: Fix for RPC-LSA-FOREST-TRUST.
Signed-off-by: Günther Deschner <gd@samba.org>
2011-02-16 11:44:06 +01:00
Sumit Bose
a357ac0222 s4-smbtorture: Two fixes for forest trust test against samba.
Signed-off-by: Günther Deschner <gd@samba.org>
2011-02-16 11:44:05 +01:00
Volker Lendecke
fbcdef8268 s4: Fix a typo 2011-02-15 21:12:22 +01:00
Matthias Dieter Wallnöfer
20197c6687 s4:torture/rpc/samr.c - fix up the "test_GroupList" suite regarding QueryDisplayInfo
This is needed to comply with the previous patch.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Tue Feb 15 17:40:22 CET 2011 on sn-devel-104
2011-02-15 17:40:22 +01:00
Matthias Dieter Wallnöfer
2e0a933ac8 s4:samr RPC server - QueryDisplayInfo returns always all domains users, aliases and groups
That means when calling "QueryDisplayInfo" on the BUILTIN handle we
still get all related domain objects - for example all domain (global
+ universal) groups. This is contrary to the "EnumDomain..." calls which
do really only return the objects in the specified domain policy handle.

This has been observed against Windows Server 2008 and confirmed by
dochelp.

In the same occasion I've converted from a "gendb*"-oriented search call to "dsdb_search".

Patch-reviewed-by: Andrew Tridgell <tridge@samba.org>
2011-02-15 16:56:19 +01:00
Kamen Mazdrashki
aaae3164b5 s4-ldb_modules/operational: Make use of dsdb_module_reference_dn() function
it does exactly what we need here

Autobuild-User: Kamen Mazdrashki <kamenim@samba.org>
Autobuild-Date: Tue Feb 15 16:55:32 CET 2011 on sn-devel-104
2011-02-15 16:55:32 +01:00
Matthias Dieter Wallnöfer
fa36577ae1 s4:sam.py - add another "description" test case
Exactly for the syntax which is needed by Volker in s3's "pdb_ads".

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Tue Feb 15 16:10:15 CET 2011 on sn-devel-104
2011-02-15 16:10:15 +01:00
Matthias Dieter Wallnöfer
7312dacb63 s4:acl LDB module - interpret "userAccountControl" as "uint32_t"
This is the same way as it is done in the samldb LDB module.

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Tue Feb 15 12:08:26 CET 2011 on sn-devel-104
2011-02-15 12:08:26 +01:00
Pavel Shilovsky
738b2abe78 s4: Don't grant level II oplock to a file with byte-range locks.
Signed-off-by: Pavel Shilovsky <piastry@etersoft.ru>
Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Tue Feb 15 11:09:17 CET 2011 on sn-devel-104
2011-02-15 11:09:17 +01:00
Stefan Metzmacher
3c5f537302 s4:drsuapi/getncchanges: make sure we don't process filteres objects more than once
metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Tue Feb 15 09:46:55 CET 2011 on sn-devel-104
2011-02-15 09:46:55 +01:00
Simo Sorce
18926e5907 Fix private libdir and codepages paths
The private libraries need to be arch specific as well.

With --enable-fhs the codepages should go in /usr/share/samba and not
in /usr/lib{64}/samba as they are data files not libraries.

Autobuild-User: Simo Sorce <idra@samba.org>
Autobuild-Date: Tue Feb 15 04:22:37 CET 2011 on sn-devel-104
2011-02-15 04:22:37 +01:00
Simo Sorce
0a05a364f3 Increase minor version since a public header has changed
Samba4 now depends on a new macro defined in the public ldb_modules.h header:
LDB_FLAG_INTERNAL_FORCE_SINGLE_VALUE_CHECK.

Bump up the minor release of ldb accordingly.

Autobuild-User: Simo Sorce <idra@samba.org>
Autobuild-Date: Mon Feb 14 19:39:31 CET 2011 on sn-devel-104
2011-02-14 19:39:31 +01:00
Günther Deschner
3722f65359 librpc: make NDR_KRB5PAC a shared library (libndr-krb5pac.so).
Simo, please check.

Guenther

Autobuild-User: Günther Deschner <gd@samba.org>
Autobuild-Date: Mon Feb 14 18:54:38 CET 2011 on sn-devel-104
2011-02-14 18:54:38 +01:00
Stefan Metzmacher
b423d83729 s4:ldapcmp: cope with range retrivals of multivalued attributes
A Windows Server returns a 'member;range=0-1499' attribute
with the first 1500 values of the 'member' attribute.

The client can do a BASE search on the given object
and ask for the 'member;range=1500-*' attribute.
It needs to loop until the high part of the returned
range is '*'.

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Mon Feb 14 16:26:46 CET 2011 on sn-devel-104
2011-02-14 16:26:46 +01:00
Günther Deschner
d3c082e539 s4-readline: remove leftover from readline merge.
Guenther

Autobuild-User: Günther Deschner <gd@samba.org>
Autobuild-Date: Mon Feb 14 14:26:12 CET 2011 on sn-devel-104
2011-02-14 14:26:12 +01:00
Kamen Mazdrashki
850bf67c45 s4-ldb_modules/acl: Use ntds_guid for SPN check only we have a DC object
ntds_guid is NULL otherwise as it doesn't make sense for
not a DC object

Autobuild-User: Kamen Mazdrashki <kamenim@samba.org>
Autobuild-Date: Mon Feb 14 13:15:31 CET 2011 on sn-devel-104
2011-02-14 13:15:31 +01:00
Kamen Mazdrashki
3134895075 s4-ldb_modules/acl: Get correct NTDSDSA objectGUID to check SPN for 2011-02-14 12:32:22 +01:00
Kamen Mazdrashki
73972072d7 s4-ldb_modules/util: Implement dsdb_module_find_ntdsguid_for_computer()
as a counterpart for samdb_find_ntdsguid_for_computer()
to be used in LDB modules
2011-02-14 12:32:22 +01:00
Kamen Mazdrashki
6110887802 s4/ldb_modules/acl.c: Fix calculation for samAccountName string len 2011-02-14 12:32:22 +01:00
Andrew Tridgell
a6af1efb42 s4-dsdb: cope with broken exchange schema with single valued backlinks
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Mon Feb 14 08:45:51 CET 2011 on sn-devel-104
2011-02-14 08:45:51 +01:00
Andrew Tridgell
95e347a2d0 s4-ldb: fixed a uninitialised el->flags in ldb_tdb
this caused an intermittent failure in some tests

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-02-14 17:55:09 +11:00
Andrew Tridgell
12a1e02002 s4-dsdb: cleanups to the backupkey RPC server
- fixed some warnings
- change the debug levels to something more reasonable

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-02-14 17:55:09 +11:00
Andrew Tridgell
63d4a99c1b s4-dsdb: fixed problem with constrained modification of description attribute
This approach just asks the tdb backend to handle the single valued
constraint for us

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-02-14 17:55:08 +11:00
Andrew Tridgell
c2ccd24ebf s4-ldb: added LDB_FLAG_INTERNAL_FORCE_SINGLE_VALUE_CHECK
this allows a ldb module to force an element as single valued
2011-02-14 17:55:08 +11:00
Andrew Tridgell
a48328a828 s4-ldb: use a helper function for single valued checking
this gives us a single piece of logic for single value checking in the
tdb backend

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-02-14 17:55:08 +11:00
Andrew Tridgell
a26f8b8ae6 ldb-web: update mailing list info 2011-02-14 17:55:08 +11:00
Matthieu Patou
b2e126cddc s4:selftest: add tests with seal and sign for backupkey
We need to specify sign and seal as the protocol operate really only on
sealed protected connections, in other case we are just checking that
the server returns something like unwilling to perform due to weak
security.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Mon Feb 14 01:48:39 CET 2011 on sn-devel-104
2011-02-14 01:48:39 +01:00
Stefan Metzmacher
7f00aa9ef7 s4: Renable samba4.rpc.backupkey
This reverts commit 07fd397be7e30849f2c8452154edbee7dceccfe1.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-02-14 10:57:48 +11:00
Matthieu Patou
05ad9d2be4 s4: load the backupkey endpoint
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-02-14 10:57:43 +11:00
Matthieu Patou
ac82dbd897 s4: Add server side implementation of backup key remote protocol
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-02-14 10:57:32 +11:00
Michael Wood
877e0ef5f2 s4/upgradeprovision: Fix help for --debugguess.
Signed-off-by: Matthieu Patou <mat@matws.net>

Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Sun Feb 13 16:38:13 CET 2011 on sn-devel-104
2011-02-13 16:38:13 +01:00
Michael Wood
249ba1ed11 s4/upgradeprovision: Typo and better word.
Signed-off-by: Matthieu Patou <mat@matws.net>
2011-02-13 17:49:01 +03:00
Michael Wood
7db5c10f1a s4: samba_backup: Fix typos.
Signed-off-by: Matthieu Patou <mat@matws.net>
2011-02-13 17:45:05 +03:00
Volker Lendecke
80accd3946 Fix typos 2011-02-13 12:11:53 +01:00
Matthieu Patou
a7301556d2 pyldb: fix a bug in the unit test which prevented ldb.python to run all the tests in the testsuite
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Sun Feb 13 00:14:24 CET 2011 on sn-devel-104
2011-02-13 00:14:24 +01:00
Matthieu Patou
f8a156dbe6 librpc: add bindings for dnsp in python 2011-02-13 01:23:05 +03:00
Matthieu Patou
17fdee0e92 ldb: use the sizeof of the control variable as offset instead of hardcoded values, helps to avoid bugs 2011-02-13 01:23:01 +03:00
Matthieu Patou
ad9b670f47 ldb: remove "magic" string in ldb_controls, replace them with constants defined in ldb.h
Allow to have less magic value in the control code and will allow not to
duplicate names when doing a function that marshal a control to it's
string representation
2011-02-13 00:51:05 +03:00
Nadezhda Ivanova
a38d04a7a8 s4-tools: Added --sddl option, which allows the user to add an ACE to an object's security descriptor in SDDL format
Useful for testing purposes.

Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Thu Feb 10 15:28:04 CET 2011 on sn-devel-104
2011-02-10 15:28:04 +01:00
Günther Deschner
ad0a3185ce librpc: move preg.idl to main directory.
Guenther

Autobuild-User: Günther Deschner <gd@samba.org>
Autobuild-Date: Thu Feb 10 13:56:49 CET 2011 on sn-devel-104
2011-02-10 13:56:49 +01:00
Nadezhda Ivanova
b5a2f956c6 s4-tests: Some tests that prove behavior for INHERITED user-provided ACEs is different if the P flag is set.
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Thu Feb 10 12:31:34 CET 2011 on sn-devel-104
2011-02-10 12:31:34 +01:00
Andrew Tridgell
14edbf7159 s4-build: need EXPAND_VARIABLES() for terminal in make test
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Thu Feb 10 07:35:26 CET 2011 on sn-devel-104
2011-02-10 07:35:26 +01:00
Andrew Tridgell
8dc92c8f71 ldb: use #include <ldb.h> for ldb
thi ensures we are using the header corresponding to the version of
ldb we're linking against. Otherwise we could use the system ldb for
link and the in-tree one for include

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-02-10 06:51:07 +01:00
Andrew Tridgell
e26b1a6968 s4-krb5: authkrb5 should depend on ldb
this fixes the include path to add ldb

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-02-10 06:51:07 +01:00
Andrew Bartlett
d66150c14d libcli/named_pipe_auth Change from 'info3' to auth_session_info_transport
This changes the structure being used to convey the current user state
from the netlogon-derived 'netr_SamInfo3' structure to a purpose-built
structure that matches the internals of the Samba auth subsystem and
contains the final group list, as well as the final privilege set and
session key.

These previously had to be re-created on the server side of the pipe
each time.

Andrew Bartlett

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-02-10 06:51:06 +01:00
Andrew Bartlett
4cfee6f88e auth Move auth_sam_reply into the top level.
These functions provide conversions between some netlogon.idl and
auth.idl structures

Andrew Bartlett

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-02-10 06:51:06 +01:00
Andrew Tridgell
8220a7ebae ldb: added ldb 1.0.0 ABI signatures 2011-02-10 06:51:06 +01:00
Andrew Tridgell
2a6f345723 ldb: change version number to 1.0.0
Simo pointed out that the module loading change should have been
combined with a major version number. That seems like a good excuse
for a 1.0 release

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-02-10 06:51:06 +01:00
Andrew Tridgell
8720811598 ldb: fixed two warnings in the ldb_ldap backend 2011-02-10 06:51:06 +01:00
Andrew Tridgell
7fac3258f7 ldb: added a include/ldb_version.h
this fixes a problem with the installed ldb_modules.h header, which
depended on LDB_VERSION being defined.

Thanks to Simo for noticing this!

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-02-10 06:51:06 +01:00