1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-05 21:57:51 +03:00

68673 Commits

Author SHA1 Message Date
Jeremy Allison
f0dcc90f72 Fix bug 7781 - Samba transforms ShareName to lowercase (sharename) when adding new share via MMC
Change the find_service() interface to not depend on fstring, and
create a useable talloc-based interface.

Jeremy.
2010-11-10 01:14:17 +00:00
Jeremy Allison
3878fa4c43 Ensure we check the return from make_user_info before dereferencing the value returned by it.
Jeremy.
2010-11-10 01:14:17 +00:00
Jeremy Allison
9997ee813b Remove fstring from map_username. Create a more sane interface than the called-parameter-is-modified.
Jeremy.
2010-11-10 01:14:17 +00:00
Björn Jacke
692a7477dd s3/vfs_time_audit: use monotonic clock for time deltas
Autobuild-User: Björn Jacke <bjacke@samba.org>
Autobuild-Date: Wed Nov 10 01:13:22 UTC 2010 on sn-devel-104
2010-11-10 01:13:22 +00:00
Andrew Tridgell
f7e54c014e s4: point to the wiki howto for s4
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>

Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Tue Nov  9 23:38:28 UTC 2010 on sn-devel-104
2010-11-09 23:38:28 +00:00
Andrew Tridgell
13020349e1 s4-join: raise mininum password length to 32 in new join code 2010-11-10 09:53:18 +11:00
Stefan Metzmacher
3c496f37c4 s4:dsdb/operational.c: use DSDB_SECRET_ATTRIBUTES_EX()
metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Tue Nov  9 22:43:44 UTC 2010 on sn-devel-104
2010-11-09 22:43:44 +00:00
Stefan Metzmacher
dedc9e32e5 s4:dsdb/common: add DSDB_SECRET_ATTRIBUTES_EX()
metze
2010-11-09 23:01:25 +01:00
Stefan Metzmacher
2fba9500b3 s4:dsdb/local_password: use DSDB_SECRET_ATTRIBUTES
metze
2010-11-09 22:53:01 +01:00
Stefan Metzmacher
9f39d4bfa4 s4:dsdb/schema/schema_filtered.c: make never_in_filtered_attrs static const
metze
2010-11-09 22:52:59 +01:00
Stefan Metzmacher
44b1c82e84 s4:dsdb/schema/schema_filtered.c: use DSDB_SECRET_ATTRIBUTES
metze
2010-11-09 22:52:57 +01:00
Stefan Metzmacher
198049f3c6 s4:rpc_server/drsuapi: don't ask for constructed "distinguishedName" if we don't use it
metze
2010-11-09 22:52:55 +01:00
Stefan Metzmacher
f6e20bf52f s4:rpc_server/drsuapi: make msg_attrs static const
metze
2010-11-09 22:25:55 +01:00
Stefan Metzmacher
9fa71f8f57 s4:rpc_server/drsuapi: let dcesrv_drsuapi_DsGetNCChanges() use DSDB_SECRET_ATTRIBUTES
We should replicate all secret attributes back to other DCs.

metze
2010-11-09 22:25:53 +01:00
Stefan Metzmacher
0e3a13f8cc s4:dsdb/common: create a DSDB_SECRET_ATTRIBUTES define with all secret attributes
We should have them just in one place, so that we don't forget some of them.

metze
2010-11-09 22:25:51 +01:00
Volker Lendecke
c83a40ddbf s3: Quieten a bogus error message
This happens if you set "auth methods = winbind" without a fallback method.

The return NT_STATUS_LOGON_FAILURE; is not strictly require here, because we
fall through to the equivalent statement a few lines down, but it makes the
code a bit clearer IMO.

Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Tue Nov  9 20:15:59 UTC 2010 on sn-devel-104
2010-11-09 20:15:59 +00:00
Volker Lendecke
5f37473857 s3: Package autorid module
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Tue Nov  9 16:21:48 UTC 2010 on sn-devel-104
2010-11-09 16:21:48 +00:00
Volker Lendecke
eb769f2234 raw.h is only needed in the S4 build
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Tue Nov  9 14:49:14 UTC 2010 on sn-devel-104
2010-11-09 14:49:14 +00:00
Matthias Dieter Wallnöfer
3c8283da41 s4:provision_self_join.ldif - the object SID in AD is called "objectSid"
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Tue Nov  9 13:18:29 UTC 2010 on sn-devel-104
2010-11-09 13:18:29 +00:00
Matthias Dieter Wallnöfer
fd9fc251fb s4:provision.py - strip trailing whitespaces 2010-11-09 13:25:12 +01:00
Matthias Dieter Wallnöfer
bd5039546e s4:provision - switch to "clearTextPassword" for setting passwords
This is the default password set/change attribute for s4 specific purposes
(otherwise in respect to Windows it's "unicodePwd"). We move away from
"userPassword" since on Windows it's not activated by default - and s4 will
follow soon.
2010-11-09 13:22:00 +01:00
Andrew Tridgell
d1d585e208 s4-test: make sure the selftest prefix exists
Autobuild-User: Andrew Tridgell <tridge@samba.org>
Autobuild-Date: Tue Nov  9 00:05:22 UTC 2010 on sn-devel-104
2010-11-09 00:05:22 +00:00
Andrew Tridgell
9c7228d6aa s4-drs: reduce verbosity of dreplsrv_out_connection_attach 2010-11-08 23:23:07 +00:00
Andrew Tridgell
eee27427d2 heimdal: fixed a shadowed variable warning for error_message
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-11-08 23:23:07 +00:00
Kamen Mazdrashki
0aeb08e2eb s4-attid: Uppercase ATTID type constants
Thanks Metze for noting this!

Autobuild-User: Kamen Mazdrashki <kamenim@samba.org>
Autobuild-Date: Mon Nov  8 23:06:41 UTC 2010 on sn-devel-104
2010-11-08 23:06:41 +00:00
Kamen Mazdrashki
ee34e2c94b s4-test: Initial implementation for Schema replication black box test 2010-11-08 22:25:08 +00:00
Jeremy Allison
3a5f03015b Second part of fix for bug #7777 - When requesting lookups for BUILTIN sids, winbindd allocates new uids/gids in error.
Ensure we return after calling passdb for SID lookups for which we are
authoritative.

Jeremy.

Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Mon Nov  8 22:24:34 UTC 2010 on sn-devel-104
2010-11-08 22:24:34 +00:00
Jeremy Allison
092507c65a Ensure we always have a mapped group for "Domain Users".
Needed for DC tests to pass with bugfix for bug #7777.

Jeremy.
2010-11-08 13:39:51 -08:00
Jeremy Allison
42f9ae8756 First part of fix for bug #7777 - When requesting lookups for BUILTIN sids, winbindd allocates new uids/gids in error.
Ensure idmap_init_passdb_domain() correctly initialized the default
domain first.

Jeremy.
2010-11-08 13:38:13 -08:00
Björn Jacke
842a8e4312 s3/configure: fix typo and warning
Autobuild-User: Björn Jacke <bjacke@samba.org>
Autobuild-Date: Mon Nov  8 20:58:20 UTC 2010 on sn-devel-104
2010-11-08 20:58:20 +00:00
Matthias Dieter Wallnöfer
124abb37bf s4:password_hash LDB module - introduce a "userPassword" flag which enables/disables the two "userPassword" behaviours
- Enabled: "userPassword" password change behaviour (will later be linked to the
  "dSHeuristics")
- Disabled: "userPassword" plain attribute behaviour (default)

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Mon Nov  8 15:28:06 UTC 2010 on sn-devel-104
2010-11-08 15:28:06 +00:00
Matthias Dieter Wallnöfer
422233c563 s4:pyldb.c - fix "py_ldb_contains" according to the comment by Jelmer 2010-11-08 15:24:41 +01:00
Günther Deschner
528edcc789 s3-waf: add idmap_autorid to the build.
Guenther

Autobuild-User: Günther Deschner <gd@samba.org>
Autobuild-Date: Mon Nov  8 14:17:27 UTC 2010 on sn-devel-104
2010-11-08 14:17:27 +00:00
Volker Lendecke
8b624c1d20 s3: Fix an uninitialized variable
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Mon Nov  8 13:22:06 UTC 2010 on sn-devel-104
2010-11-08 13:22:06 +00:00
Volker Lendecke
d6d2f8a8f2 s3: Build idmap_autorid by default 2010-11-08 13:39:51 +01:00
Christian Ambach
9aab4149af s3:idmap: add a new ID mapping module autorid
This is an initial implementation of the idmap_autorid module.
It works similar to the idmap_rid module but requires less
configuration. It will automatically pick ranges for each domain,
so you do not have to bother any more about adding an idmap
configuration for all of the domains in the forest.

This is very easy to use and to configure and much more
deterministic and faster than idmap_tdb, the typical choice
of Samba users up to now.
2010-11-08 13:39:51 +01:00
Christian Ambach
51ddddfa9f s3:winbind add wcache_tdc_fetch_domainbysid
add a function to lookup a domain in the winbind cache by domain SID
2010-11-08 13:39:51 +01:00
Volker Lendecke
69155e4103 s3: Put some parentheses around conditionals 2010-11-08 13:39:51 +01:00
Volker Lendecke
cbe399155d s3: Consistently use stdbool types in new code 2010-11-08 13:39:51 +01:00
Christian Ambach
57b3d32c8d s3:winbind add timeouts to winbind cache
This adds a timeout value to cache entries and the NDR records
in the winbind cache.

The previous approach of just comparing the sequence number has some issues,
e.g. when retrying a wbinfo -n operation for a user in a not yet trusted
domain was always failing even after the trusted domain was added.

The new approach compares sequence number and timeout value to
determine if a cache entry is still valid or not.

I increased the cache version number so an old cache will be wiped
automatically after upgrade.
2010-11-08 13:39:51 +01:00
Matthias Dieter Wallnöfer
58cfa5a825 s4:passwords.py - test empty password attributes behaviour
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Mon Nov  8 12:09:56 UTC 2010 on sn-devel-104
2010-11-08 12:09:56 +00:00
Matthias Dieter Wallnöfer
0bfbf6d526 s4:password_hash LDB module - deleting password attributes is a little more complicated 2010-11-08 11:27:03 +00:00
Matthias Dieter Wallnöfer
9154d4dcfc s4:samdb_msg_find_old_and_new_ldb_val - rework
- don't crash when no values where specified
- return ERR_CONSTRAINT_VIOLATION on malformed messages
- only check for flags when we are involved in a LDB modify operation
2010-11-08 11:27:03 +00:00
Matthias Dieter Wallnöfer
6041ef7442 s4:password_hash LDB module - clear the fact that a delete of password attributes isn't possible 2010-11-08 11:27:03 +00:00
Matthias Dieter Wallnöfer
d4c9a34cf8 s4:acl LDB module - define the delete passwords special case a bit better 2010-11-08 11:27:03 +00:00
Matthias Dieter Wallnöfer
acffe25896 s4:passwords.py - add another two failure cases 2010-11-08 11:27:03 +00:00
Matthias Dieter Wallnöfer
9aa0ed2c3a ldb:pyldb.c - "py_ldb_msg_element_get" - here we can safely use "unsigned int" for the element reference
We don't make use of "Py_List*" calls

Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Mon Nov  8 11:21:27 UTC 2010 on sn-devel-104
2010-11-08 11:21:27 +00:00
Matthias Dieter Wallnöfer
ef4861d926 ldb:pyldb.c - "py_ldb_contains" - return only "0" not found, "1" found, "-1" error 2010-11-08 10:39:05 +00:00
Matthias Dieter Wallnöfer
7bdbfc9603 ldb:pyldb.c - most of the times "time_t" is defined as "long int"
Therefore use a signed long int for conversions.

http://stackoverflow.com/questions/471248/what-is-ultimately-a-time-t-typedef-to
2010-11-08 10:39:05 +00:00
Matthias Dieter Wallnöfer
9e5ca72afb ldb:pyldb.c - fix some "Py_ssize_t" output warnings 2010-11-08 10:39:05 +00:00