1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-29 11:21:54 +03:00
Commit Graph

1002 Commits

Author SHA1 Message Date
Andrew Tridgell
eb11eeb5db r7913: prevent recursion in the socket wrapper code
(This used to be commit c1a0c2042d)
2007-10-10 13:18:49 -05:00
Andrew Tridgell
8c53aba485 r7912: make private_path() recognise a non-relative filename, so we can have
sam database = sam.ldb

and it will know to put it in the private dir, but if you use

  sam database = ldap://server

it knows to use it as-is
(This used to be commit c5bccbc366)
2007-10-10 13:18:48 -05:00
Andrew Tridgell
fbb0ecd418 r7910: fixed typo in _SAMBA_BUILD_ macro
(This used to be commit d2e9e95ea2)
2007-10-10 13:18:48 -05:00
Andrew Tridgell
2ea96684bc r7909: don't consider not finding a list of network interfaces from the kernel a fatal error,
the individual services that need at least one known interface check for it anyway

this should fix provisioning on macosx
(This used to be commit 5ad0dc97d0)
2007-10-10 13:18:48 -05:00
Derrell Lipman
1603fd9466 r7897: work in progress
(This used to be commit 8e1431efcf)
2007-10-10 13:18:47 -05:00
Andrew Tridgell
49736de46a r7873: hopefully fixed build of ldb_explode_dn() on AIX
I'd really rather see this code completely replaced, but I'll leave
that to simo (he has volunteered) :-)
(This used to be commit cc2e08d68e)
2007-10-10 13:18:46 -05:00
Andrew Tridgell
b818ff3ede r7868: canonicalise the message before using ldb_add() in the ldbadd utility.
(This used to be commit 56f4af5f21)
2007-10-10 13:18:45 -05:00
Jelmer Vernooij
d5888fbb60 r7866: Remove some unused autoconf macro calls.
Some of these should probably be re-added again later when
we need them. They should then be added to the appropriate config.m4 file
in the source tree rather then in rewrite.m4.
(This used to be commit 4eca613470)
2007-10-10 13:18:45 -05:00
Andrew Tridgell
bdee131f30 r7860: switch our ldb storage format to use a NDR encoded objectSid. This is
quite a large change as we had lots of code that assumed that
objectSid was a string in S- format.

metze and simo tried to convince me to use NDR format months ago, but
I didn't listen, so its fair that I have the pain of fixing all the
code now :-)

This builds on the ldb_register_samba_handlers() and ldif handlers
code I did earlier this week. There are still three parts of this
conversion I have not finished:

 - the ltdb index records need to use the string form of the objectSid
   (to keep the DNs sane). Until that it done I have disabled indexing on
   objectSid, which is a big performance hit, but allows us to pass
   all our tests while I rejig the indexing system to use a externally
   supplied conversion function

 - I haven't yet put in place the code that allows client to use the
   "S-xxx-yyy" form for objectSid in ldap search expressions. w2k3
   supports this, presumably by looking for the "S-" prefix to
   determine what type of objectSid form is being used by the client. I
   have been working on ways to handle this, but am not happy with
   them yet so they aren't part of this patch

 - I need to change pidl to generate push functions that take a
   "const void *" instead of a "void*" for the data pointer. That will
   fix the couple of new warnings this code generates.

Luckily it many places the conversion to NDR formatted records
actually simplified the code, as it means we no longer need as many
calls to dom_sid_parse_talloc(). In some places it got more complex,
but not many.
(This used to be commit d40bc2fa8d)
2007-10-10 13:18:44 -05:00
Simo Sorce
ce2e35309e r7851: We are case preserving let the DN be returned the same the user put it into.
sss
(This used to be commit 5b41e32024)
2007-10-10 13:18:42 -05:00
Jelmer Vernooij
66a52992ff r7850: Support mkdir() with just one parameter. Patch from
Steven Edwards <steven_ed4153@yahoo.com>.

I've moved the Win32-specific tests to win32.m4 so it does not
make any of the POSIX configure stuff more complicated.
(This used to be commit bf85fdd015)
2007-10-10 13:18:42 -05:00
Derrell Lipman
f1a853664c r7844: eliminate superfluous attribute tables
(This used to be commit 863beef35b)
2007-10-10 13:18:42 -05:00
Andrew Tridgell
9f51b5716d r7834: added comment about the "((" search test
(This used to be commit 42c42f6611)
2007-10-10 13:18:41 -05:00
Andrew Tridgell
0eb6bc1257 r7833: changed ldbsearch and ldbedit to have command line syntax closer to
ldapsearch. They look for an '=' in the first argument to see if it is
a search expression, and if not then it does an 'all records' search
(This used to be commit 91cc009fed)
2007-10-10 13:18:41 -05:00
Andrew Tridgell
3b9eabc2f3 r7832: missed one
(This used to be commit 20c84f5c52)
2007-10-10 13:18:41 -05:00
Andrew Tridgell
c97e6081e6 r7831: use cn=TEST as base of test DNs so we don't interfere with potentially real records
(This used to be commit 2a426f654d)
2007-10-10 13:18:41 -05:00
Derrell Lipman
fdc0450db2 r7828: Although there is still plenty to do, ldb_sqlite3 now passes the set of tests
in tests/test-sqlite3.sh (tests/test-generic.sh).

There are lots of optimizations still TBD, and some things are REALLY slow
right now (e.g. each add() operation takes 1/3 - 1/2 second) but it's ready for
interested parties to poke it and prod it and see how (un)reasonable it is.
Play away.

Still to be implemented or improved:
 - tdb specials (@MODULES, @SUBCLASSES, etc.)
 - all DNs are case-folded in their entirty right now (since doing otherwise
   would require @ATTRIBUTES to be implemented)
 - speed improvements and optimizations.  I am quite confident that the
   excessively slow add() operation can be much improved, and other areas
   can be somewhat improved.
(This used to be commit 1dd8650055)
2007-10-10 13:18:41 -05:00
Andrew Bartlett
8a68f96f8c r7827: Add in-memory keytab to Samba4, using the new MEMORY_WILDCARD keytab
support in Heimdal.

This removes the 'ext_keytab' step from my Samba4/WinXP client howto.

In doing this work, I realised that the replay cache in Heimdal is
currently a no-op, so I have removed the calls to it, and therefore
the mutex calls from passdb/secrets.c.

This patch also includes a replacement 'magic' mechanism detection,
that does not issue extra error messages from deep inside the GSSAPI
code.

Andrew Bartlett
(This used to be commit c19d5706f4)
2007-10-10 13:18:41 -05:00
Andrew Tridgell
062e0f8325 r7808: fixed the build of ldb after the binary file support in ldif was added
(This used to be commit 0a8c722c80)
2007-10-10 13:18:38 -05:00
Simo Sorce
7f46f89257 r7806: add test for binary files as attribute values
(This used to be commit 2b2675055e)
2007-10-10 13:18:38 -05:00
Simo Sorce
064d71c9d4 r7805: add support to read binary files into attributes data like ldap tools does
(This used to be commit 38a1439626)
2007-10-10 13:18:37 -05:00
Andrew Tridgell
5be159f304 r7804: added the samba specific ldif handlers into the tree, but don't enable
them just yet. I have tested them, and they work fine, but enabling
them will break code in rpc_server/ and samdb, so we need to fix that
first
(This used to be commit 07d459406b)
2007-10-10 13:18:37 -05:00
Andrew Tridgell
eb0a13025a r7803: added support in ldb for callers to setup ldif read/write functions,
so that ldbedit, ldbsearch etc can display nice human readable ldif,
while storing the data as binary blobs. This will be used for storing
NDR encoded objectSid and similar attributes, while making the command
line interface sane
(This used to be commit 37e283089a)
2007-10-10 13:18:37 -05:00
Andrew Tridgell
b7be627e35 r7784: give an error in ldb_tdb for invalid modify flags. The "whenChanged"
bug was being silently ignored with the tdb backend because of this
bug. A case where the ldap backend was right, and the tdb backend was
wrong!
(This used to be commit ddb26db763)
2007-10-10 13:18:36 -05:00
Andrew Tridgell
a124028b66 r7781: finding the parent of a talloc ptr is trickier than it looks due to the two-way
tree nature of the data structure. I think I've finally got it right

also added talloc_show_parents() for debugging
(This used to be commit 5760ed20ee)
2007-10-10 13:18:36 -05:00
Andrew Tridgell
bb8d0c76b4 r7780: fixed a bug in talloc_find_parent_byname()
(This used to be commit ee3fe42fb1)
2007-10-10 13:18:35 -05:00
Andrew Tridgell
e3eec57b06 r7779: use the parent event context in ldb_wrap_connect(). See the comment in
the previous commit for the method.
(This used to be commit b0ad505510)
2007-10-10 13:18:35 -05:00
Andrew Tridgell
545203d915 r7778: added talloc_find_parent_bytype() and talloc_find_parent_byname()
These provide a way to find a parent of a ptr that is of a given
type. I will be using this to find the event context in smbd, relying
on the fact that everything is a child of the top level event
context. I did look at the alternatives, and found that passing the
event context to just about every call in smbd was getting way too
complex (we need to get it to anything that can do a ldb operation, as
that can invoke ldap).

So this method avoids a global, and seems to work nicely
(This used to be commit bdb55c7a10)
2007-10-10 13:18:35 -05:00
Andrew Tridgell
bd7a474b19 r7776: add a method for getting arbitrary opaque data into a ldb context, for use by backends.
Currently only EventContext is used in this way.
(This used to be commit 9fa21b2458)
2007-10-10 13:18:35 -05:00
Andrew Tridgell
30b68a0af2 r7773: fixed the tls code for the non-GNUTLS case
(This used to be commit bc6bc84ef4)
2007-10-10 13:18:34 -05:00
Andrew Tridgell
64bf731865 r7769: added client support in the tls library api
(This used to be commit 71ee6a1df5)
2007-10-10 13:18:33 -05:00
Andrew Tridgell
c4e7c6e2da r7767: fixed ldb dependencies
(This used to be commit 97e4ba84fb)
2007-10-10 13:18:33 -05:00
Andrew Tridgell
1601b8e9f9 r7759: allow ldb_errstring() to be used when not connected
(This used to be commit 818ae965af)
2007-10-10 13:18:32 -05:00
Andrew Tridgell
683f3bc96e r7754: fixed the local port of accepted sockets in socket_wrapper. This fixes
the problem with the ldap tests in 'make test'
(This used to be commit 56fe27623c)
2007-10-10 13:18:31 -05:00
Andrew Tridgell
7a17da2186 r7751: only enable tls on the ldaps port in ldap server, and reject non-tls
connections on that port
(This used to be commit 30da6a1cc4)
2007-10-10 13:18:31 -05:00
Andrew Tridgell
6720bd94b8 r7750: handle STATUS_MORE_ENTRIES on send in tls
(This used to be commit 135c3367ff)
2007-10-10 13:18:31 -05:00
Andrew Tridgell
7267cb3312 r7749: some bug fixes from testing with socket:testnonblock
- fixed some infinite loops in asn1.c

- ensure asn1 callers know if an error is end of buffer or bad data

- handle npending 0 in ldap server
(This used to be commit f22c3b84c8)
2007-10-10 13:18:30 -05:00
Andrew Tridgell
c7496c6cdb r7747: - simplified the ldap server buffer handling
- got rid of the special cases for sasl buffers

- added a tls_socket_pending() call to determine how much data is waiting on a tls connection

- removed the attempt at async handling of ldap calls. The buffers/sockets are all async, but the calls themselves
  are sync.
(This used to be commit 73cb4aad22)
2007-10-10 13:18:30 -05:00
Andrew Tridgell
28fd9ea80b r7745: better handling of recv errors in tls library
(This used to be commit 42d8a1a222)
2007-10-10 13:18:30 -05:00
Andrew Tridgell
e485e80b51 r7743: be consistent in how stdin is supported for ldbadd and ldbmodify
(This used to be commit 3d60b3a8ee)
2007-10-10 13:18:29 -05:00
Andrew Tridgell
225d5a334f r7742: abstracted out the tls code from the web server, so that our other servers
can easily become tls enabled. This will be used to add support for ldaps
(This used to be commit 950500f603)
2007-10-10 13:18:29 -05:00
Andrew Tridgell
aa6b2dcb9b r7741: fixed the verbose option in ldbedit
(This used to be commit a440133140)
2007-10-10 13:18:29 -05:00
Andrew Tridgell
56cc328000 r7740: get rid of our duplicate base64 routines
(This used to be commit cf17f90a83)
2007-10-10 13:18:29 -05:00
Andrew Tridgell
814d5a5011 r7739: fixed an off by one bug in the base64 decoder for ldb ldif
(This used to be commit fe2b77af23)
2007-10-10 13:18:28 -05:00
Andrew Tridgell
0dde0612b4 r7728: handle 64 bit integers in INTEGER match
(This used to be commit 57132344b4)
2007-10-10 13:18:27 -05:00
Andrew Tridgell
bf75ae4155 r7726: - removed some unused variables
- handle ldb_errstring() calls on failed connect
(This used to be commit 8698a20fcc)
2007-10-10 13:18:27 -05:00
Andrew Tridgell
97318cdb45 r7719: make the ildap ldb backend use the defaultNamingContext if the basedn
is not specified, so:

  ldbsearch ldap://hostname '(objectclass=user)'

works without knowing the domain name
(This used to be commit f6c2c51907)
2007-10-10 13:18:26 -05:00
Andrew Tridgell
f40e69da26 r7714: enable samba credentials handling in ldb tools. So you can now do a
encrypted ldbedit against w2k3
(This used to be commit 6277c3923e)
2007-10-10 13:18:25 -05:00
Andrew Tridgell
f8b60c8b1a r7712: ldb/common/util.c is gone
(This used to be commit aec0544962)
2007-10-10 13:18:25 -05:00
Andrew Tridgell
74037cbe92 r7711: update callers of ldb_connect() for new syntax
(This used to be commit f852661463)
2007-10-10 13:18:24 -05:00