Simo Sorce
4c548048c5
s4:kdc Simplify header files
2010-01-22 11:16:24 -05:00
Michael Adam
fb4679638d
s4:rpc-server:samr: fix setting of lockout duration < lockout window
...
This should return NT_STATUS_INVALID_PARAMETER.
This makes samba pass the first part of the samr-lockout test.
This constraint is documented here for the samr server:
http://msdn.microsoft.com/en-us/library/cc245667%28PROT.10%29.aspx
MS-SAMR 3.1.1.6 Attribute Constraints for Originating Updates
and here for the ldap backend:
http://msdn.microsoft.com/en-us/library/cc223462(PROT.10).aspx
MS-ADTS 3.1.1.5.3.2 Constraints
So the check should actually be moved down into the backend,
i.e. under dsdb/samdb/ldb_modules - TODO..
Michael
2010-01-21 13:01:24 +01:00
Jelmer Vernooij
9ddeac17f5
pyxattr: Factor out helper functions.
2010-01-21 17:17:02 +13:00
Jelmer Vernooij
8b0f31994c
pyxattr: Simplify tests.
2010-01-21 16:56:23 +13:00
Jelmer Vernooij
05b4e29f7f
pyxattr: Fix tests by not opening tdb files multiple times.
2010-01-21 16:45:06 +13:00
Jelmer Vernooij
14b0fed96c
pyxattr: Fix tests by avoiding opening tdb files multiple times.
2010-01-21 16:44:20 +13:00
Jelmer Vernooij
253a232d30
pyxattr: Fix memory leaks.
2010-01-21 16:44:12 +13:00
Jelmer Vernooij
9a25380838
pyxattr: Simplify tests.
2010-01-21 16:41:30 +13:00
Jelmer Vernooij
7092e220b5
pyxattr: Fix return value, raise exception, fix memory leak.
2010-01-21 16:29:15 +13:00
Jelmer Vernooij
342aff75c5
pyxattr: Use standard functions for error handling.
2010-01-21 16:28:24 +13:00
Jelmer Vernooij
6afb162533
pyxattr: Remove unnecessary hacks.
2010-01-21 16:18:19 +13:00
Jelmer Vernooij
f679def4f2
s4: Fix a few warnings.
2010-01-21 16:15:11 +13:00
Jelmer Vernooij
c42242d132
s4: Include Python.h early to avoid double definition errors.
2010-01-21 16:15:10 +13:00
Andreas Schneider
fd6a792283
s4-winbind: Migrated winbind connection to tsocket.
...
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-01-20 22:46:59 +01:00
Matthieu Patou
c12d5363d6
s4-python: add some helper for converting ldb_flag to text
2010-01-21 07:11:21 +13:00
Matthieu Patou
8c6fc09f18
upgradeprovision: forbid running upgradeprovision when there is more than 1 DC
2010-01-21 07:11:21 +13:00
Matthieu Patou
929dbf8ef8
upgradeprovision: mark rIDAvailablePool never upgraded
...
handle properly the fact that missing object might depend on some other in order to be correctly created
debug change also if we are in debugall mode
2010-01-21 07:11:20 +13:00
Matthieu Patou
4d6cda75e3
upgradeprovision: reformat + add groupType as possibly overwritten
2010-01-21 07:11:20 +13:00
Matthieu Patou
4c28e7ff0c
upgradeprovision: improve info messages
2010-01-21 07:11:20 +13:00
Matthieu Patou
bd9fbdab4c
Revert "s4:upgradeprovision - fix up the script regarding linked attributes"
...
This reverts commit 2cedefabc9
.
2010-01-21 07:11:19 +13:00
Matthieu Patou
9704249ccc
upgradeprovision: never use xattr it's pointless in this usecase
2010-01-21 07:11:19 +13:00
Matthieu Patou
0cdc39e730
Add a comment to tdb_wrap to explain why it should be used instead of directly using tdb
2010-01-21 07:11:18 +13:00
Matthieu Patou
a4b01dd59c
s4: utils recreate in python setntacl and getntacl
...
setntacl is able to set NTACL attribute from command line
getntacl now use getopt for parsing command line option and is also able to
dump the acl in the SDDL format.
2010-01-21 07:11:18 +13:00
Matthieu Patou
1a143b8a59
s4: allow python code to dump NTACL object as well
2010-01-21 07:11:18 +13:00
Matthieu Patou
c637c52876
provision: use message and do not display warning if the user choosed delibarately posix:eadb
2010-01-21 07:11:17 +13:00
Matthieu Patou
d4514a6539
provision: introduce use-xattr parameter for defining where to store attributes
...
This option allow simple user (non root) to invoke provision without facing an error
while insuring that ACL on shared files will always be set
2010-01-21 07:11:17 +13:00
Matthieu Patou
711c7606a5
s4-tests: register new unit tests
...
make unit test emit a visible warning
2010-01-21 07:11:17 +13:00
Matthieu Patou
10995d9256
s4-python: add unit test for ntacls manipulation in python
2010-01-21 07:11:16 +13:00
Matthieu Patou
3789ba2654
s4-python: add more unit tests for xattr manipulation in python
2010-01-21 07:11:16 +13:00
Matthieu Patou
f0954c7372
s4: update setntacl and getntacl to select the adaquate backend (fs/tdb) for storing xattr
2010-01-21 07:11:15 +13:00
Matthieu Patou
c442b2534f
s4: ntvfs, create push_xattr_blob_tdb_raw and pull_xattr_blob_tdb_raw that do not depend on pvfs objects
...
Following a talk with tridge on IRC, this patch allow (pull|push)_xattr_blob to be called without
having a pvfs object. It's handy for programs that wants to manipulate xattr directly.
2010-01-21 07:11:15 +13:00
Matthieu Patou
e78626dc2e
s4: Set acls correctly on all sysvol and scripts shares
2010-01-21 07:11:15 +13:00
Matthieu Patou
9b70979bc9
s4: Make unixid optional
...
Make unixid optional, if value not supplied next id from id pool will be used.
Create a function to get next id in id pool.
2010-01-21 07:11:15 +13:00
Matthieu Patou
028c9b1c15
s4: regroup gpo modification in one function, set acl on files accordingly with ACL in LDAP
2010-01-21 07:11:14 +13:00
Matthieu Patou
08c59c38a2
s4: Create unit tests for python "samba.xattr" module
2010-01-21 07:11:14 +13:00
Matthieu Patou
c80ecd9964
s4: add python bindings for wrap_(s|g)etxattr
2010-01-21 07:11:13 +13:00
Michael Adam
45465cb7da
s4:selftest: add the samr-passwords-lockout test to knownfail
...
This is not implemented completely yet.
Needs fixing in the future.
Michael
2010-01-20 17:32:58 +01:00
Michael Adam
9764db806f
torture: add new test RPC-SAMR-PASSWORDS-LOCKOUT
...
This tests account lockout features.
Windows 2003r2 and Windows 2008r2 survice this test.
Note: Windows does not set the ACB_AUTOLOCK account flag when it
locks out an account.
One thing that could/should be added to this test is a check of
the lockout time property.
Michael
2010-01-20 17:32:58 +01:00
Jelmer Vernooij
18943bba9c
selftest: Use SUBUNIT_FORMATTER command, if set in the environment.
2010-01-20 11:05:04 +13:00
Wilco Baan Hofman
8067bf629c
Fix unintentional free of the last value when adding a new value to a key.
...
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-01-20 09:59:18 +13:00
Günther Deschner
f8314c27b3
s4-smbtorture: remove unneeded ncaclrpc dir setup from RPC-SPOOLSS-NOTIFY.
...
Guenther
2010-01-19 17:17:29 +01:00
Günther Deschner
40d3408dd3
s4-smbtorture: also configure check smbc_setOptionCaseSensitive for LIBSMBCLIENT testsuite.
...
Guenther
2010-01-19 16:24:35 +01:00
Günther Deschner
f5bba4034b
s4-smbtorture: support spoolss_ReplyClosePrinter server call in RPC-SPOOLSS-NOTIFY.
...
A handle obtained with spoolss_ReplyOpenPrinter will be closed with
spoolss_ReplyClosePrinter when we call spoolss_ClosePrinter on the remote side.
Guenther
2010-01-19 14:14:30 +01:00
Günther Deschner
2b68215a22
s4-smbtorture: restructure spoolss server implementations in RPC-SPOOLSS-NOTIFY.
...
Guenther
2010-01-19 14:14:30 +01:00
Günther Deschner
e0660ed1bc
s4-smbtorture: skip ReplyOpenPrinter test in RPC-SPOOLSS-NOTIFY while testing s3.
...
Guenther
2010-01-19 14:14:30 +01:00
Günther Deschner
7d1c1e0083
s4-smbtorture: strip trailing whitespace.
...
Guenther
2010-01-19 14:14:30 +01:00
Andrew Tridgell
f461a72ec3
idl: switched to using the WSPP names for the 'neighbour' DRS options
...
The documentation shows that all these functions in fact use the same
flags variable type. To be consistent between functions, and to allow
easy reference to the WSPP docs, it is better for us to also use this
generic DrsOptions bitfield rather than one per operations.
2010-01-18 07:25:18 +11:00
Andrew Tridgell
dde836adbd
s4-drs: allow for security bypass for DsReplicaGetInfo
...
Use --option=drs:disable_sec_check=true until the group membership bug
with the PAC is fixed.
2010-01-17 10:52:31 +11:00
Andrew Tridgell
2985aeb8c9
s4-dsdb: isGlobalCatalogReady should be shown by default
...
This caused repadmin.exe to crash. Thanks to Hongwei for tracking this
down for us.
2010-01-17 10:52:31 +11:00
Jelmer Vernooij
aa1fce645a
ldap: Fix test failure that seemed to go unreported previously.
2010-01-17 12:35:26 +13:00