1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-12 09:18:10 +03:00
Commit Graph

21022 Commits

Author SHA1 Message Date
Simo Sorce
4c548048c5 s4:kdc Simplify header files 2010-01-22 11:16:24 -05:00
Michael Adam
fb4679638d s4:rpc-server:samr: fix setting of lockout duration < lockout window
This should return NT_STATUS_INVALID_PARAMETER.
This makes samba pass the first part of the samr-lockout test.

This constraint is documented here for the samr server:
http://msdn.microsoft.com/en-us/library/cc245667%28PROT.10%29.aspx
MS-SAMR 3.1.1.6 Attribute Constraints for Originating Updates

and here for the ldap backend:
http://msdn.microsoft.com/en-us/library/cc223462(PROT.10).aspx
MS-ADTS 3.1.1.5.3.2 Constraints

So the check should actually be moved down into the backend,
i.e. under dsdb/samdb/ldb_modules - TODO..

Michael
2010-01-21 13:01:24 +01:00
Jelmer Vernooij
9ddeac17f5 pyxattr: Factor out helper functions. 2010-01-21 17:17:02 +13:00
Jelmer Vernooij
8b0f31994c pyxattr: Simplify tests. 2010-01-21 16:56:23 +13:00
Jelmer Vernooij
05b4e29f7f pyxattr: Fix tests by not opening tdb files multiple times. 2010-01-21 16:45:06 +13:00
Jelmer Vernooij
14b0fed96c pyxattr: Fix tests by avoiding opening tdb files multiple times. 2010-01-21 16:44:20 +13:00
Jelmer Vernooij
253a232d30 pyxattr: Fix memory leaks. 2010-01-21 16:44:12 +13:00
Jelmer Vernooij
9a25380838 pyxattr: Simplify tests. 2010-01-21 16:41:30 +13:00
Jelmer Vernooij
7092e220b5 pyxattr: Fix return value, raise exception, fix memory leak. 2010-01-21 16:29:15 +13:00
Jelmer Vernooij
342aff75c5 pyxattr: Use standard functions for error handling. 2010-01-21 16:28:24 +13:00
Jelmer Vernooij
6afb162533 pyxattr: Remove unnecessary hacks. 2010-01-21 16:18:19 +13:00
Jelmer Vernooij
f679def4f2 s4: Fix a few warnings. 2010-01-21 16:15:11 +13:00
Jelmer Vernooij
c42242d132 s4: Include Python.h early to avoid double definition errors. 2010-01-21 16:15:10 +13:00
Andreas Schneider
fd6a792283 s4-winbind: Migrated winbind connection to tsocket.
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-01-20 22:46:59 +01:00
Matthieu Patou
c12d5363d6 s4-python: add some helper for converting ldb_flag to text 2010-01-21 07:11:21 +13:00
Matthieu Patou
8c6fc09f18 upgradeprovision: forbid running upgradeprovision when there is more than 1 DC 2010-01-21 07:11:21 +13:00
Matthieu Patou
929dbf8ef8 upgradeprovision: mark rIDAvailablePool never upgraded
handle properly the fact that missing object might depend on some other in order to be correctly created
 debug change also if we are in debugall mode
2010-01-21 07:11:20 +13:00
Matthieu Patou
4d6cda75e3 upgradeprovision: reformat + add groupType as possibly overwritten 2010-01-21 07:11:20 +13:00
Matthieu Patou
4c28e7ff0c upgradeprovision: improve info messages 2010-01-21 07:11:20 +13:00
Matthieu Patou
bd9fbdab4c Revert "s4:upgradeprovision - fix up the script regarding linked attributes"
This reverts commit 2cedefabc9.
2010-01-21 07:11:19 +13:00
Matthieu Patou
9704249ccc upgradeprovision: never use xattr it's pointless in this usecase 2010-01-21 07:11:19 +13:00
Matthieu Patou
0cdc39e730 Add a comment to tdb_wrap to explain why it should be used instead of directly using tdb 2010-01-21 07:11:18 +13:00
Matthieu Patou
a4b01dd59c s4: utils recreate in python setntacl and getntacl
setntacl is able to set NTACL attribute from command line
  getntacl now use getopt for parsing command line option and is also able to
  dump the acl in the SDDL format.
2010-01-21 07:11:18 +13:00
Matthieu Patou
1a143b8a59 s4: allow python code to dump NTACL object as well 2010-01-21 07:11:18 +13:00
Matthieu Patou
c637c52876 provision: use message and do not display warning if the user choosed delibarately posix:eadb 2010-01-21 07:11:17 +13:00
Matthieu Patou
d4514a6539 provision: introduce use-xattr parameter for defining where to store attributes
This option allow simple user (non root) to invoke provision without facing an error
  while insuring that ACL on shared files will always be set
2010-01-21 07:11:17 +13:00
Matthieu Patou
711c7606a5 s4-tests: register new unit tests
make unit test emit a visible warning
2010-01-21 07:11:17 +13:00
Matthieu Patou
10995d9256 s4-python: add unit test for ntacls manipulation in python 2010-01-21 07:11:16 +13:00
Matthieu Patou
3789ba2654 s4-python: add more unit tests for xattr manipulation in python 2010-01-21 07:11:16 +13:00
Matthieu Patou
f0954c7372 s4: update setntacl and getntacl to select the adaquate backend (fs/tdb) for storing xattr 2010-01-21 07:11:15 +13:00
Matthieu Patou
c442b2534f s4: ntvfs, create push_xattr_blob_tdb_raw and pull_xattr_blob_tdb_raw that do not depend on pvfs objects
Following a talk with tridge on IRC, this patch allow (pull|push)_xattr_blob to be called without
  having a pvfs object. It's handy for programs that wants to manipulate xattr directly.
2010-01-21 07:11:15 +13:00
Matthieu Patou
e78626dc2e s4: Set acls correctly on all sysvol and scripts shares 2010-01-21 07:11:15 +13:00
Matthieu Patou
9b70979bc9 s4: Make unixid optional
Make unixid optional, if value not supplied next id from id pool will be used.
  Create a function to get next id in id pool.
2010-01-21 07:11:15 +13:00
Matthieu Patou
028c9b1c15 s4: regroup gpo modification in one function, set acl on files accordingly with ACL in LDAP 2010-01-21 07:11:14 +13:00
Matthieu Patou
08c59c38a2 s4: Create unit tests for python "samba.xattr" module 2010-01-21 07:11:14 +13:00
Matthieu Patou
c80ecd9964 s4: add python bindings for wrap_(s|g)etxattr 2010-01-21 07:11:13 +13:00
Michael Adam
45465cb7da s4:selftest: add the samr-passwords-lockout test to knownfail
This is not implemented completely yet.
Needs fixing in the future.

Michael
2010-01-20 17:32:58 +01:00
Michael Adam
9764db806f torture: add new test RPC-SAMR-PASSWORDS-LOCKOUT
This tests account lockout features.
Windows 2003r2 and Windows 2008r2 survice this test.

Note: Windows does not set the ACB_AUTOLOCK account flag when it
locks out an account.
One thing that could/should be added to this test is a check of
the lockout time property.

Michael
2010-01-20 17:32:58 +01:00
Jelmer Vernooij
18943bba9c selftest: Use SUBUNIT_FORMATTER command, if set in the environment. 2010-01-20 11:05:04 +13:00
Wilco Baan Hofman
8067bf629c Fix unintentional free of the last value when adding a new value to a key.
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-01-20 09:59:18 +13:00
Günther Deschner
f8314c27b3 s4-smbtorture: remove unneeded ncaclrpc dir setup from RPC-SPOOLSS-NOTIFY.
Guenther
2010-01-19 17:17:29 +01:00
Günther Deschner
40d3408dd3 s4-smbtorture: also configure check smbc_setOptionCaseSensitive for LIBSMBCLIENT testsuite.
Guenther
2010-01-19 16:24:35 +01:00
Günther Deschner
f5bba4034b s4-smbtorture: support spoolss_ReplyClosePrinter server call in RPC-SPOOLSS-NOTIFY.
A handle obtained with spoolss_ReplyOpenPrinter will be closed with
spoolss_ReplyClosePrinter when we call spoolss_ClosePrinter on the remote side.

Guenther
2010-01-19 14:14:30 +01:00
Günther Deschner
2b68215a22 s4-smbtorture: restructure spoolss server implementations in RPC-SPOOLSS-NOTIFY.
Guenther
2010-01-19 14:14:30 +01:00
Günther Deschner
e0660ed1bc s4-smbtorture: skip ReplyOpenPrinter test in RPC-SPOOLSS-NOTIFY while testing s3.
Guenther
2010-01-19 14:14:30 +01:00
Günther Deschner
7d1c1e0083 s4-smbtorture: strip trailing whitespace.
Guenther
2010-01-19 14:14:30 +01:00
Andrew Tridgell
f461a72ec3 idl: switched to using the WSPP names for the 'neighbour' DRS options
The documentation shows that all these functions in fact use the same
flags variable type. To be consistent between functions, and to allow
easy reference to the WSPP docs, it is better for us to also use this
generic DrsOptions bitfield rather than one per operations.
2010-01-18 07:25:18 +11:00
Andrew Tridgell
dde836adbd s4-drs: allow for security bypass for DsReplicaGetInfo
Use --option=drs:disable_sec_check=true until the group membership bug
with the PAC is fixed.
2010-01-17 10:52:31 +11:00
Andrew Tridgell
2985aeb8c9 s4-dsdb: isGlobalCatalogReady should be shown by default
This caused repadmin.exe to crash. Thanks to Hongwei for tracking this
down for us.
2010-01-17 10:52:31 +11:00
Jelmer Vernooij
aa1fce645a ldap: Fix test failure that seemed to go unreported previously. 2010-01-17 12:35:26 +13:00