1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-18 06:04:06 +03:00

3272 Commits

Author SHA1 Message Date
Andrew Bartlett
c8ba520c5a r4500: Allow GENSEC modules to be disabled by setting a flag on their module
definition, not by hardcoded reference in loadparm.c

Andrew Bartlett
(This used to be commit 43558eaf7604d2bb0187e0d1ba0686935a965ad7)
2007-10-10 13:08:15 -05:00
Andrew Bartlett
8eb981c90a r4499: Almost make our Samba4 server pass the RPC-SAMLOGON torture test.
I just need to fix a couple of NTLMv2 issues before we can fully pass,
and put this in test_rpc.sh, as a 'should pass' test.

Andrew Bartlett
(This used to be commit 4b52409e385366d87724bb79f4fad4803e8ecfec)
2007-10-10 13:08:15 -05:00
Andrew Tridgell
dd1c0a56b4 r4498: arrgh, really fix the typo this time
(This used to be commit fc338f6ce28bb14e31cdf7a5b36af12ade39093a)
2007-10-10 13:08:15 -05:00
Andrew Tridgell
593b657180 r4497: fixed a typo
(This used to be commit 2f6107ea9af125a031479dd863447eeadd8e5cfc)
2007-10-10 13:08:14 -05:00
Andrew Tridgell
9c0a83dd2c r4496: expanded info on testing your filesystem for xattr support
(This used to be commit bf9dfcc5e2f1b3fb827d4625ebaa2e75b754c76c)
2007-10-10 13:08:14 -05:00
Tim Potter
e965f36501 r4495: Some more regexps for handling stuff in the lsa and samr pipes -
various types of arrays and relative structures.
(This used to be commit 9f99d94ff5863b2da05f2283639852306bfbc74d)
2007-10-10 13:08:12 -05:00
Andrew Bartlett
0dcd464596 r4494: Allow gensec_gssapi to use the SPNEGO mech provided by Heimdal (off by
default at this point), and include the GSSAPI OIDs in our source, per
advice by lha that this is easier than getting the includes right.

Andrew Bartlett
(This used to be commit 9ff8b2b4d12d364084df5c95a752ce2a0546053d)
2007-10-10 13:08:12 -05:00
Andrew Tridgell
022bc635ef r4493: change name of README.gcov so it doesn't get deleted by "make clean" :-)
(This used to be commit 209ba7b889823f1badb0337412b2b9b34c5e23de)
2007-10-10 13:08:12 -05:00
Andrew Tridgell
6f5fc8890c r4492: r.in.info is a pointer that needs to be allocated before use
(This used to be commit f830adc54ada7f38f964a6ccb5270d2791325dd5)
2007-10-10 13:08:12 -05:00
Andrew Tridgell
160ff29bc4 r4491: don't dereference q1.out.sam unless we know it is not NULL
(This used to be commit 77e14c28584c5917f22672b304cb0f8e37e883fd)
2007-10-10 13:08:12 -05:00
Andrew Tridgell
4db9496bb4 r4490: when implementing one rpc server call in terms of another call, you
must zero r.out before making the 2nd call if the 2nd call has any
non-ref out parameters. This is needed for the case where the 2nd call
fails, and the 1st call would then fill in its out fields based on
uninitialised memory.
(This used to be commit 202470326dcfaa5d36aaaf6be47eec40fed50402)
2007-10-10 13:08:12 -05:00
Tim Potter
fc275d9889 r4489: Remove an obsolete file.
(This used to be commit 446b2cf99641956b9bdede4364c93232d914c678)
2007-10-10 13:08:12 -05:00
Andrew Tridgell
7eeeb4a727 r4488: removed an unused variable
(This used to be commit 1dfc41c9a3b6418236a1f04b5cf3f9ef9e8b608e)
2007-10-10 13:08:11 -05:00
Andrew Tridgell
54c63eb7e4 r4487: fixed the use of ldb_msg_add_*() in the samr password backend
(This used to be commit d79cc8b901ef273547bab2f66355e075da61ce9b)
2007-10-10 13:08:11 -05:00
Andrew Tridgell
3e5235a568 r4486: fixed some memory leaks in the new ldb code, by ensuring that memory is always
allocated as a child of the right context
(This used to be commit 1071712cf5951fa2e94f314bd7678cfa51b2dbcd)
2007-10-10 13:08:11 -05:00
Stefan Metzmacher
b3eab2f9e7 r4485: remove unused TODO comment we already handle the DS_ROLE_STANDALONE_SERVER case
correct

metze
(This used to be commit 7ab9de14afa8abb44f0f6c16217964618fcaf894)
2007-10-10 13:08:11 -05:00
Stefan Metzmacher
aa731aceb8 r4484: - use the nTMixedDomain attribute to check if our domain is mixed mode or not
metze
(This used to be commit 7fe9550375a7a922f9fc93944acaf7915ee107c1)
2007-10-10 13:08:11 -05:00
Stefan Metzmacher
fa010c9676 r4483: - rename same structs, enums and uninons of the dssetup pipe
to match the style we are using in other pipes

- first fillin local vars and only set the out parameter on success

- for the server code only to the samdb lookup when it's needed

NOTE: the DsRoleGetPrimaryDomainInformation() code with DS_ROLE_MEMBER_SERVER
      is not tested yet, does someone has a w2k3 member server to test with?

metze
(This used to be commit e6d1136497f501fe0687bfb34a155db6a9d87bde)
2007-10-10 13:08:11 -05:00
Stefan Metzmacher
7b4c02bf05 r4482: in ads mixed mode there are also only one PDC and multiple BDC's
metze
(This used to be commit 30980d218495d389d7a5db4b190ed717217c08d4)
2007-10-10 13:08:11 -05:00
Andrew Tridgell
fe07db9ca7 r4481: get rid of the last leak
(This used to be commit 52de02b2c31eefac75ce0582ed8acae8007e7cc2)
2007-10-10 13:08:10 -05:00
Andrew Tridgell
68beb2f76f r4480: autofree the dcom proxy tables
(This used to be commit 973acf7bbdb7bd71f052aca15d0189f2e2069fd4)
2007-10-10 13:08:10 -05:00
Andrew Tridgell
f4b349127b r4479: added the function talloc_autofree_context() which returns a talloc context that
will automatically be freed on program exit. This is useful for reducing
clutter in leak reports
(This used to be commit cf73dda652e0a121901f22771104be6751c0fcb9)
2007-10-10 13:08:10 -05:00
Andrew Tridgell
09a76e204c r4477: expanded the test suite to increase code coverage a lot
(This used to be commit 4edbd1b18ee38e584cf844b64c7fcb2645921837)
2007-10-10 13:07:56 -05:00
Andrew Tridgell
62ffbdb9f1 r4476: added a little gcov howto for ldb
(This used to be commit 5dc1995118c7d25adf89b6cc6156b1e6fc281e9b)
2007-10-10 13:07:56 -05:00
Andrew Tridgell
500d5523d2 r4475: fixed smbd to work with the small changes in the ldb API (the most important
change was in the ldb_msg_add_*() routines, which now use the msg as a context,
and thus it needs to be a talloc ptr)
(This used to be commit 1a4713bfd0e519f3eb7b3241121ff914a6eeef18)
2007-10-10 13:07:55 -05:00
Andrew Tridgell
1a988ec9af r4474: - converted ldb to use talloc internally
- added gcov flags to Makefile.ldb

- expanded ldb test suite to get more coverage
(This used to be commit 0ab98f50a7e0fe15347a99e5c29a6590a87729a0)
2007-10-10 13:07:55 -05:00
Andrew Tridgell
65f96eba32 r4473: - moved talloc into its own lib/talloc/ area
- added gcov flags to Makefile.talloc

- expanded talloc testsuite to add a test for realloc with a child ptr

- fixed a bug in talloc_realloc() with realloc of a ptr that has child ptrs
(This used to be commit 98b5f73c1ba34d7576c5995069b485c1c5ede324)
2007-10-10 13:07:55 -05:00
Andrew Tridgell
68460ee88c r4472: improve the discard_const() macro for standalone build of talloc
(This used to be commit 310cea15bf01343d9ab8ff7a166f0699c0507816)
2007-10-10 13:07:55 -05:00
Tim Potter
b099aa9696 r4471: Running 'make eparser_idl' doesn't need --header anymore.
(This used to be commit 913630d6e43cda621b36403169544dcbea926153)
2007-10-10 13:07:55 -05:00
Andrew Bartlett
3b182e2bf4 r4470: Try not to have GSSAPI built unless we detected krb5. We should split
these tests out a bit, but for now it's an indicator we can use.

Andrew Bartlett
(This used to be commit 2b0605dbaee18da4ebb676fc292b324d21805ef7)
2007-10-10 13:07:55 -05:00
Tim Potter
971112285c r4469: Version n + 1 of the pidl ethereal parser generator. This version is
based on the idea of manipulating the .c and .h files generated by
parser.pm with perl regexps and glueing it all together to make an
ethereal plugin.

I thought this was a pretty crazy idea to start off with but it has
turned out to be not as complicated as I thought and has the huge advantage
of not duplicating any of the difficult code in parser.pm.
(This used to be commit 7007522f83740f41f9a47f5ad5942ea46320d405)
2007-10-10 13:07:54 -05:00
Tim Potter
9681464dc8 r4468: Don't be a slacker and leave out parameter names when generating
prototypes for ndr push/pull/print functions.
(This used to be commit 1fe95ad1720f48a353ec77178e303b437bb13fed)
2007-10-10 13:07:54 -05:00
Andrew Tridgell
70067ef957 r4467: - tdb standalone build doesn't need -DSTANDALONE any more
- fixed standalone build
(This used to be commit ade0b71e4194f99d807d26276592bc041d46df7b)
2007-10-10 13:07:54 -05:00
Andrew Tridgell
f9e507980e r4466: rather than defining "STANDALONE" for building tdb, ldb and talloc
outside the tree, instead defined _SAMBA_BUILD_ inside the Samba
build. This makes it easier to pull code out of Samba for external
use.
(This used to be commit 09e98c8745cca7ccb1ad7134c0c09b8e4c0f4f06)
2007-10-10 13:07:54 -05:00
Andrew Tridgell
f80ce3ecb9 r4465: remove unused file
(This used to be commit fee40e110d56c932aeff11178c120f3f4e19ddd2)
2007-10-10 13:07:53 -05:00
Andrew Tridgell
d4b1657396 r4464: added pvfs backend support for the special CREATOR_OWNER and CREATOR_GROUP inheritance rules
(This used to be commit 0a29fb45c310b4b8c348d187b8ff1833deaac6c3)
2007-10-10 13:07:53 -05:00
Andrew Tridgell
3b21422ae8 r4463: added testing of the special SID_CREATOR_OWNER inheritance rules
(This used to be commit 5448c72ebe58e264ee772f8e1c4caee2250c328c)
2007-10-10 13:07:53 -05:00
Andrew Tridgell
c8541d041f r4462: - enable DSSETUP on ncalrpc
- add DSSETUP to the list of tests run in test_rpc.sh
(This used to be commit 73c3cdc8ed8dafd544ce4dcac9141124d2b85670)
2007-10-10 13:07:53 -05:00
Andrew Tridgell
d487cca5cb r4461: finished the remaining information levels in the DSSETUP pipe. The pipe is now complete!
The only glitch is that I am returning DS_ROLE_MEMBER_SERVER when I
should be returning DS_ROLE_PRIMARY_DC. This is needed for the moment
or ACL editing doesn't work from w2k3. Once we have some more ADS
calls we should be able to fix this.
(This used to be commit 6566dc2805a9f6473ebab70b0dbd381c4dbd42c8)
2007-10-10 13:07:53 -05:00
Andrew Bartlett
740ee4a897 r4460: Add a new GENSEC module: gensec_gssapi
(disabled by default, set parametric option: gensec:gssapi=yes to enable).

This module backs directly onto GSSAPI, and allows us to sign and seal
GSSAPI/Krb5 connections in particular.  This avoids me reinventing the
entire GSSAPI wheel.

Currently a lot of things are left as default - we will soon start
specifiying OIDs as well as passwords (it uses the keytab only at the
moment).  Tested with our LDAP-* torture tests against Win2k3.

My hope is to use this module to access the new SPNEGO implementation
in Heimdal, to avoid having to standards-verify our own.

Andrew Bartlett
(This used to be commit 14b650c85db14a9bf97e24682b2643b63c51ff35)
2007-10-10 13:07:53 -05:00
Andrew Bartlett
9a6671cf95 r4459: GENSEC refinements:
In developing a GSSAPI plugin for GENSEC, it became clear that the API
needed to change:
 - GSSAPI exposes only a wrap() and unwrap() interface, and determines
   the location of the signature itself.
 - The 'have feature' API did not correctly function in the recursive
   SPNEGO environment.

As such, NTLMSSP has been updated to support these methods.

The LDAP client and server have been updated to use the new wrap() and
unwrap() methods, and now pass the LDAP-* tests in our smbtorture.
(Unfortunely I still get valgrind warnings, in the code that was
previously unreachable).

Andrew Bartlett
(This used to be commit 9923c3bc1b5a6e93a5996aadb039bd229e888ac6)
2007-10-10 13:07:53 -05:00
Jelmer Vernooij
be1bbf317b r4458: Create ncalrpc directory with 0755 rather then 0700 so non-root users
can use ncalrpc as well.
(This used to be commit 02340bb6eec394576d23f2c51956f4c47f475452)
2007-10-10 13:07:52 -05:00
Jelmer Vernooij
2e4466344a r4457: Fix IDL + add torture test for InqObject
(This used to be commit dbcaff7c71c9b7ee984a2ed458b6c3ce27772740)
2007-10-10 13:07:52 -05:00
Volker Lendecke
05720e4c17 r4456: NT4 usrmgr.exe asks for 4096 accounts, allow twice that.
Volker
(This used to be commit f8588a769c185f871fdcd5db35428ad587bdfad3)
2007-10-10 13:07:52 -05:00
Andrew Tridgell
72f50be186 r4455: LSADS was a duplicate of DSSETUP, and is now gone
(This used to be commit 05c8fd81ddec969ed5280e2fe9f838ac4399f1c9)
2007-10-10 13:07:52 -05:00
Andrew Tridgell
62560e65bd r4454: This is the patch I use to Samba3 nmbd to allow a WinXP box
to join a Samba4 domain. It is hard-coded for my GUID, so
you will need to edit it to suit.

I'm committing this so others can experiment. Obviously
what we really need is a new nmbd in Samba4.
(This used to be commit a30be712e5abe81b57f8b1b75ebf152018df0eea)
2007-10-10 13:07:52 -05:00
Andrew Tridgell
4a8b3041aa r4453: use lp_server_role(), which currently returns 3, for the dssetup
role. The value '5', which is what my w2k3 DC returns, doesn't
work. I'm not sure why this is.

with this change the GUI ACL editor from w2k3 works properly, with
either server role in the HKLM registry.
(This used to be commit 27a8b270bdd029a850c5ec3d10c1ac42468169cb)
2007-10-10 13:07:52 -05:00
Andrew Tridgell
09d708e27e r4452: the beginnings of a dssetup rpc server.
(This used to be commit 1c2170ae21d60c22ee3053fbf249dba59de576ba)
2007-10-10 13:07:52 -05:00
Andrew Tridgell
dda32aa5ba r4451: added initial RPC-DSSETUP torture test. It works for level1 of
ds_RolerGetPrimaryDomainInformation()
(This used to be commit 7aec3dac6fd5165cfca5c650aaa29234e278d95d)
2007-10-10 13:07:52 -05:00
Andrew Tridgell
4ad7acbbee r4450: the beginnings of IDL for the dssetup pipe. I need this pipe for ACL editing from w2k3
when we present ourselves as a DC in the registry
(This used to be commit 9651901791e0553f106ab957c5787c109098248b)
2007-10-10 13:07:51 -05:00