Andrew Tridgell
e5b36c6eae
s4-pvfs: another uninitialised variable
...
thanks to valgrind for this one
2009-10-19 13:51:17 +11:00
Andrew Tridgell
1219dac5ae
s4-pvfs: fixed uninitialised variable
...
This caused havoc on the build farm. Interestingly, it only affected
gcc 4.3.3, not gcc 4.4.1
2009-10-19 11:59:57 +11:00
Matthias Dieter Wallnöfer
d673b49dfc
s4:ldb_msg_check_string_attribute - add a comment about the result values
2009-10-18 18:16:31 +02:00
Matthias Dieter Wallnöfer
9d097fa0e0
Revert "s4:ldb_msg - Use LDB constants on results"
...
This reverts commit 56a8baff3df6a5120b6c7bbca771dfb7c6934fd5.
Simo pointed out that I was wrong here.
2009-10-18 18:15:55 +02:00
Matthias Dieter Wallnöfer
77b9d2827b
s4:torture "cldap" test - rework and test more results
2009-10-18 14:33:43 +02:00
Matthias Dieter Wallnöfer
85e4995364
s4:sites - get the server site (name) from DSDB
2009-10-18 14:33:43 +02:00
Matthias Dieter Wallnöfer
5d4093a937
s4:dcerpc_netlogon - unify the two workstation object lookups (DNS hostname and supported encryption types)
...
This is simply for better performance (no functional change).
2009-10-18 14:32:59 +02:00
Matthias Dieter Wallnöfer
56a8baff3d
s4:ldb_msg - Use LDB constants on results
2009-10-18 10:45:30 +02:00
Matthias Dieter Wallnöfer
a69f84fd2a
s4:ldb_ldap - Fix intendation
2009-10-18 10:45:15 +02:00
Andrew Tridgell
bc2b4192c0
s4-test: the ldap secdesc test is expected to fail for now
...
Nadya, if this is not correct and you think this should be passing
already the please let me know. When I looked over it, it doesn't look
like it has a chance of passing until your acl module is in place and
enabled by default.
2009-10-18 16:32:01 +11:00
Andrew Tridgell
5d3659a881
s4-test: SMB2 oplocks in s4 are a mess
...
I don't have time to fix these right now, and as we don't advertise
SMB2 by default I'll mark it as a known failure till we start enabling
SMB2 by default.
2009-10-18 15:57:21 +11:00
Andrew Tridgell
81eb31f07b
s4: spelling error
2009-10-18 15:56:16 +11:00
Andrew Tridgell
9ae4daeb96
s4-torture: fixed the streams tests for Samba4
...
In some cases we were not doing streams tests on s4 that we should. In
others, we were calling tests that are known to fail on s4. Some of
those are a bit puzzling.
2009-10-18 15:06:13 +11:00
Andrew Tridgell
764c09e6bc
s4-streams: fixed handling of stream rename and overwrite
2009-10-18 15:06:13 +11:00
Andrew Tridgell
44612c74a6
s4-pvfs: rename with full name gives SHARING_VIOLATION
2009-10-18 15:06:12 +11:00
Andrew Tridgell
83db71e9a7
s4-pvfs: when reporting the file name, don't include the :$DATA suffix
2009-10-18 15:06:12 +11:00
Andrew Tridgell
2d4ad4f504
s4-pvfs: the STREAM_INFORMATION calls don't need any access flags
2009-10-18 15:06:11 +11:00
Andrew Tridgell
edd0ea5225
s4-pvfs: fixed update of stream sizes
...
The data_blob_free() was changing the size we set the stream to
2009-10-18 15:06:11 +11:00
Andrew Tridgell
a2aa13da32
s4-pvfs: more fixes for ACLs on file creation
...
The passed in SD is not used to limit the access mask allowed on file
create.
2009-10-18 10:32:06 +11:00
Andrew Tridgell
bae8c93d9b
s4-smb2: fixed SMB2 find commands
...
The change to check for invalid \ prefix on SMB2 paths broke the
internal SMB2 code.
2009-10-18 10:30:10 +11:00
Andrew Tridgell
0463d69883
s4-pvfs: change the handling of access checking on create
...
Previously when a file was created, we produces the resulting access
mask based on an ACL check against the parent. This change means we
now calculate the inherited ACL much earlier, and produce the
resulting access mask from that ACL, or the user supplied ACL.
2009-10-18 07:13:47 +11:00
Andrew Tridgell
d1efaf39f5
smb2-torture: samba4 allows SEC_FLAG_SECURITY to be used with privileges
2009-10-18 07:13:47 +11:00
Jeremy Allison
d6351adca9
Fix the smbtorture4 build. root_fid is a "union smb_handle". tridge
...
please check.
Jeremy.
2009-10-17 12:56:15 -07:00
Jeremy Allison
7c51fa6d69
Merge branch 'master' of ssh://jra@git.samba.org/data/git/samba
2009-10-17 10:36:33 -07:00
Andrew Tridgell
46b7938d7e
s4-smbserver: removed bogus initialisation of two union arms
...
Thanks to Metze for spotting this.
2009-10-17 13:12:24 +11:00
Andrew Tridgell
bf6fcc6121
s4-pvfs: when uwrap is enabled, ignore chown errors
...
chown is expected to fail under uwrap
2009-10-17 13:01:04 +11:00
Andrew Tridgell
dbebe0f621
s4-torture: fixed the default ACL for s4
...
s4 returns group and world ACEs in the default acl, based on unix
permissions
2009-10-17 13:01:04 +11:00
Andrew Tridgell
05f5f22361
s4-torture: minor debugging enhancements
2009-10-17 13:01:04 +11:00
Andrew Tridgell
8c7a81408a
s4-schema: We should not need Samba4TopExtra now
...
The last attribute this contained was 'privilege' which is now gone
2009-10-17 13:01:03 +11:00
Andrew Tridgell
6b1ab9cd47
s4-pvfs: don't auto-apply privilege bits in unix acl handling either
2009-10-17 13:01:03 +11:00
Andrew Tridgell
c3b09d18a8
s4-acl: SEC_FLAG_MAXIMUM_ALLOWED doesn't auto-apply privilege access masks
2009-10-17 13:01:03 +11:00
Andrew Tridgell
53dec869b8
s4-torture: the BASE-CREATEX_ACCESS test is broken for non-administrators
...
See my msg to samba-technical about this test and privilege testing.
2009-10-17 13:01:03 +11:00
Andrew Tridgell
533b102493
s4-torture: cleanup after the MAXIMUM_ALLOWED test
2009-10-17 13:01:03 +11:00
Andrew Tridgell
5d5d951311
s4-pvfs: use privileges rather than "uid == 0" in unix access check
...
This makes the unix access check much closer to the full ACL check
2009-10-17 13:01:03 +11:00
Andrew Tridgell
9da4af062b
s4-security: honor more of the privilege access bits
2009-10-17 13:01:03 +11:00
Andrew Tridgell
7226ba73a0
s4-torture: add a special check for administrators and privileges
...
lsa privileges calls don't expand groups. darn.
2009-10-17 13:01:03 +11:00
Andrew Tridgell
9526487010
s4-lsasrv: make sure only admins can alter privileges
2009-10-17 13:01:02 +11:00
Andrew Tridgell
f794e8d43d
s4-provision: added the default privileges db
...
privileges are now stored in a separate database
2009-10-17 13:01:02 +11:00
Andrew Tridgell
cc3e1d9022
s4-provision: removed the old privilege attributes
...
Our schema is getting a bit cleaner :-)
2009-10-17 13:01:02 +11:00
Andrew Tridgell
f3f695f18f
s4-torture: show the sid we are basing privilege tests on
2009-10-17 13:01:02 +11:00
Andrew Tridgell
30be3fd143
s4-privileges: moved privileges to private/privilege.ldb
...
We were storing privileges in the sam, which was OK when we were a
standalone DC, but is no good when we replicate with a windows DC.
This moves the privileges to a separate (local) database
2009-10-17 13:01:02 +11:00
Günther Deschner
22276961c3
s4-smbtorture: extend netr_LogonControl test in RPC-NETLOGON.
...
Guenther
2009-10-16 14:54:58 +02:00
Endi S. Dewata
aaca10b3e1
s4:provision - fixed invalid creationTime format
2009-10-16 14:08:11 +02:00
Endi S. Dewata
6cb652e05c
s4:ldb - fixed dangling pointer in ldb_request_add_control()
2009-10-16 14:08:11 +02:00
Endi S. Dewata
180ca8ed88
s4:auth - fixed problem reading bind DN from secrets database
2009-10-16 14:08:11 +02:00
Endi S. Dewata
cf77bf3382
s4:provision - replaced linked_attributes with FDS plugins
...
When FDS is used as a backend, Samba should not use the
linked_attributes LDB module, but instead use the built-in
DS plugins for attribute linking, indexing, and referential
integrity.
2009-10-16 14:08:11 +02:00
Matthias Dieter Wallnöfer
925e96029e
s4:auth_sam: Restructure tail in "authsam_get_server_info_principal" and fix a memory leak
2009-10-16 14:06:30 +02:00
Matthias Dieter Wallnöfer
ba7707176d
s4:winsdb - Substitute LDB result numbers with constants
2009-10-16 14:06:24 +02:00
Kamen Mazdrashki
421191a443
s4/drs(tort): prefixMap unit test initial implementatoin
2009-10-16 12:54:14 +03:00
Kamen Mazdrashki
784e0c199e
s4/drs: prefixMap module initial definition
2009-10-16 12:54:14 +03:00