Andrew Bartlett
a040466d0d
s3-acl Merge source4-supported privileges into se_access_check
...
This will shortly be the common se_access_check function.
Andrew Bartlett
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:04 +00:00
Andrew Bartlett
7c6105ec27
s3-util_nttoken.c Also copy the rights_mask when copying a security_token
...
These are unused in source3/ code at the moment, but it would be
unfortunate if that were to change, and this function not be updated.
Andrew Bartlett
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:04 +00:00
Andrew Bartlett
170b345e0c
s3-auth Use security_token_debug() from common code
...
This prints the security token including the privileges as strings
instead of just a bitmap.
Andrew Bartlett
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:04 +00:00
Andrew Bartlett
58cf83732a
s3-auth use security_token_has_sid() from the common code
...
The wrapper call is left here to avoid changing semantics for
the NULL parameter case.
Andrew Bartlett
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:04 +00:00
Andrew Bartlett
deb7c02436
s3 Replace is_sid_in_token() with security_token_has_sid() from common code
...
The two routines are identical, so there is no need to keep both.
Andrew Bartlett
Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-10-14 02:35:04 +00:00
Andrew Tridgell
c41bb6e846
s4: show samba version in bin/samba -b
...
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Thu Oct 14 02:24:47 UTC 2010 on sn-devel-104
2010-10-14 02:24:47 +00:00
Matthias Dieter Wallnöfer
8c21a45e5c
s4:samldb LDB module - cosmetic fixups
...
- Update the module description
- Fix indentation
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Wed Oct 13 20:55:18 UTC 2010 on sn-devel-104
2010-10-13 20:55:18 +00:00
Jelmer Vernooij
e13b934355
heimdal: Add soname for com_err.
...
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Wed Oct 13 20:00:40 UTC 2010 on sn-devel-104
2010-10-13 20:00:40 +00:00
Jelmer Vernooij
f0124542bc
heimdal: Add sonames.
...
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Wed Oct 13 18:15:04 UTC 2010 on sn-devel-104
2010-10-13 18:15:04 +00:00
Jelmer Vernooij
01d14b4c57
samdb: Set soname.
2010-10-13 17:32:20 +00:00
Matthias Dieter Wallnöfer
bf657db3c4
s4:sam.py - tests for "userAccountControl" attribute
...
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Wed Oct 13 17:31:29 UTC 2010 on sn-devel-104
2010-10-13 17:31:29 +00:00
Matthias Dieter Wallnöfer
3411e71c76
s4:samldb LDB module - deny creation of temporary duplicate accounts
2010-10-13 18:46:13 +02:00
Matthias Dieter Wallnöfer
ed68189c5f
s4:samldb LDB module - proof the account type also on LDB modify operations
2010-10-13 18:37:20 +02:00
Jelmer Vernooij
18ea6c5dce
ldb: Only build LIBLDB_MAIN when building ldb itself.
...
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Wed Oct 13 15:41:29 UTC 2010 on sn-devel-104
2010-10-13 15:41:29 +00:00
Matthias Dieter Wallnöfer
36c1ed215d
s4:sam.py - add a test for the group type changing behaviour
...
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Wed Oct 13 14:17:31 UTC 2010 on sn-devel-104
2010-10-13 14:17:31 +00:00
Matthias Dieter Wallnöfer
826496ce55
s4:samldb LDB module - support the group type changing properly
...
This is exactly that what Windows allows. It was proven by a blackbox test.
And we also need to deny add operations of builtin groups.
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
09ce56d957
s4:ldap.py - test the "isCriticalSystemObject" behaviour
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
5cb99aa81a
s4:setup/provision_self_join.ldif - let the samldb LDB module fill in "isCriticalSystemObject"
...
It recognizes it now automatically.
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
9bcb656bba
s4:samldb LDB module - deny also the direct modification of "isCriticalSystemObject" on modify operations
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
4638bd11b5
s4:objectclass LDB module - deny the creation of "isCriticalSystemObject" entries
...
They're only allowed to be created with the RELAX control specified.
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
8806008024
s4:samldb LDB module - first implementation of the samldb primary group trigger
...
This was done according to MS-SAMR 3.1.1.8.2
But do use it only for add operations at the moment.
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
635996e97c
s4:samldb LDB module - use the new "objectclass_trigger" for add operations
...
Additionally clean up "samldb_fill_object" which is now much easier to
comprehend.
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
2b6cbf2eb0
s4:samldb LDB module - first implementation of the samldb objectclass trigger
...
This was done according to MS-SAMR 3.1.1.8.1
I need to perform some RELAX checks since otherwise the provision wouldn't work
anymore.
2010-10-13 13:35:21 +00:00
Matthias Dieter Wallnöfer
9bdea1b384
ldb:ldb_match.c - fix a counter type
2010-10-13 13:35:21 +00:00
Christian Ambach
beb5afea54
s3:gpfs: Add support for the gpfs_ftruncate call
...
ported from the v3-4-ctdb branch to master
This used to be commit 1f138cc9f4a
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Wed Oct 13 13:34:25 UTC 2010 on sn-devel-104
2010-10-13 13:34:25 +00:00
Christian Ambach
22018b8b88
s3:vfs:gpfs convert sharemodes/leases parameter
...
convert gpfs:sharemodes and gpfs:leases parameters from a global setting
to a per share setting
2010-10-13 12:53:16 +00:00
Christian Ambach
9e4a386d67
s3:vfs:syncops add option to disable module per share
...
add an option to disable the syncops module completely for a
share with
syncops:disable = true
2010-10-13 12:53:16 +00:00
Christian Ambach
c1dad16ede
s3:vfs:syncops make it possible to specify syncops:onclose per share
...
convert the onclose option of the vfs_syncops module from a
global option to a service-specific one
as preparation for further flags, use a struct to store in the VFS handle
instead of just the onclose flag
2010-10-13 12:53:16 +00:00
Jelmer Vernooij
5954e7173a
wafsamba/developer: Forbid shared objects with unresolved symbols, if
...
the linker supports such a flag.
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Wed Oct 13 12:52:22 UTC 2010 on sn-devel-104
2010-10-13 12:52:22 +00:00
Jelmer Vernooij
870de461cb
wafsamba: Don't allow circular dependencies involving libraries by
...
default.
2010-10-13 14:10:42 +02:00
Jelmer Vernooij
ffb71f8ee3
dsdb/schema_data: Build as shared object.
2010-10-13 14:10:38 +02:00
Jelmer Vernooij
4313f0fbb5
dsdb/schema_load: Build as shared object.
2010-10-13 14:10:34 +02:00
Jelmer Vernooij
e07ca6f8e1
samdb: Build as library.
2010-10-13 14:10:27 +02:00
Andrew Tridgell
d5e599204c
ldb: raise minor version number for new ldb_msg_match_error() function
...
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Wed Oct 13 11:42:18 UTC 2010 on sn-devel-104
2010-10-13 11:42:17 +00:00
Andrew Tridgell
269143fa00
s4-ldb: take advantage of ldb_match_msg_error() in more places
...
this gives better error checking
2010-10-13 11:00:04 +00:00
Andrew Tridgell
549c044b9f
s4-schema: don't name variables after standard libc functions
2010-10-13 11:00:04 +00:00
Andrew Tridgell
180304516d
s4-ldb: use operator_fn syntax function in ldb_match code
...
this also fixes error handling in case of bad syntax, memory error
etc, which was previously conidered as a mismatch, but should return
an error
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-13 11:00:04 +00:00
Andrew Tridgell
d267c8b478
s4-ldb: implement an operator_fn for the ldb-samba syntaxes
...
this allows us to properly handle the LDB_OP_PRESENT operator on
deleted linked attributes
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-13 11:00:04 +00:00
Andrew Tridgell
3d75111fd6
s4-ldb: added an optional operator_fn in the schema syntax
...
this function takes the operator being invoked, which will allow
schema functions to provide more fine grained control over
comparisons.
The key bug this was introduced to fix is the incorrect handling of
the LDB_OP_PRESENT test for deleted linked attributes. The backends
are unaware of the deleted state of these links, so they cannot do a
LDB_OP_PRESENT test on their own.
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-10-13 11:00:04 +00:00
Andrew Tridgell
ca4864cce6
s4-torture: zero all of trans before the test starts
2010-10-13 11:00:04 +00:00
Andrew Tridgell
261628d1e4
s4-torture: fixed uninitialised variable error
...
ret is uninitialised if the directory is empty
2010-10-13 11:00:04 +00:00
Andrew Tridgell
b5ffdb6f9c
s4: don't rebuild all of heimdal when dynconfig options change
...
only 2 files in heimdal depend on dynconfig variables
2010-10-13 11:00:04 +00:00
Andrew Tridgell
d0293428fe
autobuild: do make install after make test
...
this ensures that commits that break uninstalled testing get caught by
autobuild in future
Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>
2010-10-13 11:00:04 +00:00
Andrew Tridgell
72de3e698b
s4-dynconfig: use the build modules when running from build directory
...
we need to use the newly built modules when running from the build
directory to ensure we don't run tests against a stale install
Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>
2010-10-13 11:00:04 +00:00
Andrew Tridgell
d95160ca2f
ldb: when running from build directory, use the build modules
...
we need to use the build modules, not the installed modules, so tests
run from the source directory are valid
Pair-Programmed-With: Jelmer Vernooij <jelmer@samba.org>
2010-10-13 11:00:03 +00:00
Matthieu Patou
f81c840380
s4 rpc_server: fix a build error on freebsd
...
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Wed Oct 13 10:48:04 UTC 2010 on sn-devel-104
2010-10-13 10:48:04 +00:00
Jelmer Vernooij
1229935aa9
torture/becomedc: Add test for global schema, use samdb_connect().
...
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Tue Oct 12 18:35:33 UTC 2010 on sn-devel-104
2010-10-12 18:35:33 +00:00
Jelmer Vernooij
24ec465790
wafsamba: Warn about circular dependencies between libraries.
2010-10-12 19:23:59 +02:00
Michael Adam
cda2db5edf
s3:registry: fix some trailing spaces in reg_backend_db
...
Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Tue Oct 12 14:15:42 UTC 2010 on sn-devel-104
2010-10-12 14:15:42 +00:00
Kai Blin
5ad0ed2181
libwbclient: Remove half-finished async implementation
...
The old approach on doing async libwbclient was never really finished.
Go ahead and remove this implementation.
Autobuild-User: Kai Blin <kai@samba.org>
Autobuild-Date: Tue Oct 12 07:05:31 UTC 2010 on sn-devel-104
2010-10-12 07:05:31 +00:00