summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* s4:libcli: move smbcli_transport_establish() logic into smbcli_socket_connect()Stefan Metzmacher2011-11-304-38/+32
| | | | metze
* s4:libcli: convert smbcli_transport_connect_* to tevent_reqStefan Metzmacher2011-11-303-92/+240
| | | | metze
* s4:lib/socket: add socket_connect_multi_ex_*Stefan Metzmacher2011-11-302-10/+147
| | | | | | | | | | | | This add an async establish hook, that gets called before a connection success is detected. This can be used to do a NBT session request and it makes sure that we don't cancel the connection on port 445, just because the tcp connect on port 139 worked. metze
* s3-ctdb: Make use of CTDB_CONTROL_CHECK_SRVIDSVolker Lendecke2011-11-304-2/+250
| | | | | | | | This should be a lot quicker than PROCESS_EXISTS followed by looking at serverid.tdb Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Wed Nov 30 12:47:27 CET 2011 on sn-devel-104
* Fix bug 8636 - When returning an ACL without SECINFO_DACL requested, we ↵Jeremy Allison2011-11-302-0/+4
| | | | | | | still set SEC_DESC_DACL_PRESENT in the type field. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Nov 30 04:59:07 CET 2011 on sn-devel-104
* s4-kdc: Add hdb plugin for samba4, to allow kadmin to workAndrew Bartlett2011-11-306-43/+104
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | This will help users who are used to the kadmin interface, and could be extended to import existing MIT or Heimdal keys into a Samba4 AD domain. To use, add to your krb5.conf [kdc] database = { dbname = samba4: } or [kdc] database = { dbname = samba4:/usr/local/samba/etc/smb.conf } And copy hdb_samba4.so from PREFIX/modules/hdb to your Heimdal lib directory Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Nov 30 03:22:11 CET 2011 on sn-devel-104
* s3:dbwrap_tdb: pass NTSTATUS code further up from db_tdb_fetch_parse in ↵Michael Adam2011-11-301-1/+1
| | | | | | | db_tdb_fetch() Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Wed Nov 30 01:46:31 CET 2011 on sn-devel-104
* build: TDB_ERR_NESTING is used unconditionallyAndrew Bartlett2011-11-302-15/+0
| | | | | | | | | Therefore, do not bother doing an autoconf test looking for it. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Nov 30 00:08:18 CET 2011 on sn-devel-104
* Fix bug 8631 - POSIX ACE x permission becomes rx following mapping to and ↵Jeremy Allison2011-11-291-2/+2
| | | | | | | | | from a DACL Reported by David Disseldorp. Fix based on a patch by David. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Tue Nov 29 22:32:27 CET 2011 on sn-devel-104
* s3:net registry check: adapt to new semantic of dbwrap_fetch with rbtGregor Beck2011-11-291-6/+6
| | | | | | | Signed-off-by: Michael Adam <obnox@samba.org> Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Tue Nov 29 19:53:30 CET 2011 on sn-devel-104
* s3:net registry check: adapt to new semantic of dbwrap_fetchGregor Beck2011-11-291-10/+13
| | | | Signed-off-by: Michael Adam <obnox@samba.org>
* s3:dbwrap: turn the fetch dbwrap method to NTSTATUS return code.Michael Adam2011-11-295-55/+58
| | | | | This implement more correct NTSTATUS handling inside the backends. This ensures that data.dptr != NULL if return code is NT_STATUS_OK.
* s3:dbwrap_ctdb: re-use map_nt_error_from_tdb() in local tdb_error_to_ntstatus()Michael Adam2011-11-291-14/+1
|
* s3:net registry check: handle missing version infoGregor Beck2011-11-291-0/+36
| | | | Signed-off-by: Michael Adam <obnox@samba.org>
* s3:dbwrap_torture: code cleanupGregor Beck2011-11-291-3/+3
| | | | Signed-off-by: Michael Adam <obnox@samba.org>
* s4:libcli/raw: copy smbcli_transport_connect_* to clisocket.cStefan Metzmacher2011-11-292-124/+123
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Nov 29 17:34:52 CET 2011 on sn-devel-104
* s4:libcli/raw: add transport->ev as copy of transport->socket->event.ctxStefan Metzmacher2011-11-298-6/+9
| | | | | | | We'll remove transport->socket soon, but removing transport->ev will take a bit longer. metze
* s4:torture: use tctx->ev as event context for pollingStefan Metzmacher2011-11-296-22/+14
| | | | metze
* smbXcli: add support for SMBreadBrawStefan Metzmacher2011-11-291-7/+54
| | | | metze
* smbXcli: add smb1cli_conn_server_{readbraw,writebraw,lockread,writeunlock}()Stefan Metzmacher2011-11-292-0/+24
| | | | metze
* s4:gentest: get the tid from the smbcli_tree structStefan Metzmacher2011-11-291-2/+4
| | | | metze
* s4:libcli/smb2: make sure only one idle event runs at a timeStefan Metzmacher2011-11-292-9/+17
| | | | metze
* smb1cli_trans: add support for tevent_req_cancel()Stefan Metzmacher2011-11-291-0/+16
| | | | metze
* smb1cli_trans: return the status from the server if possibleStefan Metzmacher2011-11-291-1/+16
| | | | metze
* smbXcli: rebuild smb1.recv_iov array if we expect more than one responseStefan Metzmacher2011-11-291-0/+29
| | | | metze
* smbXcli: allow up to 10 iovec elements for the bytes in smb1cli_req_create()Stefan Metzmacher2011-11-291-1/+1
| | | | | | | The smb1cli_trans_* code uses up to 6 elements, which was too much for the current limit of 5. metze
* smbXcli: s/smb2cli_writev_done/smb2cli_req_writev_doneStefan Metzmacher2011-11-291-3/+3
| | | | | | This is a better name and it matches smb1cli_req_writev_done metze
* smbXcli: call tevent_queue_stop() for the outgoing queue on disconnectStefan Metzmacher2011-11-291-0/+2
| | | | metze
* smbXcli: use talloc_stackframe() instead of talloc_tos() in smb1cli_conn_signv()Stefan Metzmacher2011-11-291-2/+5
| | | | metze
* libcli/smb: remove unused smb_signing_set_bsrspyl() prototypeStefan Metzmacher2011-11-291-1/+0
| | | | metze
* s3-passdb: make pdb_password_change_time_max static.Günther Deschner2011-11-291-1/+1
| | | | | | | Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Tue Nov 29 15:16:51 CET 2011 on sn-devel-104
* s3-rpcclient: add tool to call lsa_SetInformationTrustedDomain.Günther Deschner2011-11-291-0/+71
| | | | | | | | "lsasettrustdominfo S-1-5-21-123456-123456-123456 13 1" currently you only can set the encryption type field. Guenther
* s3: Remove some false/superfluous translationsVolker Lendecke2011-11-291-5/+5
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Nov 29 12:39:45 CET 2011 on sn-devel-104
* selftest/Samba4: pass '--machinepass' to 'samba-tool domain join'Stefan Metzmacher2011-11-291-0/+4
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Nov 29 11:00:42 CET 2011 on sn-devel-104
* s4:python: add --machinepass option to 'samba-tool domain join'Stefan Metzmacher2011-11-291-5/+11
| | | | metze
* s4:python/samba/join.py: add optional 'machinepass' parameter to join_*()Stefan Metzmacher2011-11-291-6/+12
| | | | metze
* s4:python/samba/join.py: add optional 'machinepass' parameter to class dc_joinStefan Metzmacher2011-11-291-2/+6
| | | | metze
* s4:py_net: add optional 'machinepass' parameter to py_net_join_member()Stefan Metzmacher2011-11-291-3/+4
| | | | metze
* s4:libnet: make it possible to join with a given machine passwordStefan Metzmacher2011-11-292-4/+16
| | | | metze
* s4:libnet/py_net: ZERO_STRUCT() struct libnet_Join_member in ↵Stefan Metzmacher2011-11-291-0/+2
| | | | | | py_net_join_member() metze
* s4:torture/rpc: use talloc_zero() in torture_join_domain()Stefan Metzmacher2011-11-291-2/+2
| | | | metze
* s4:libnet: use talloc_zero(struct libnet_JoinDomain) in libnet_Join_member()Stefan Metzmacher2011-11-291-2/+1
| | | | metze
* s4-samba-tool: Add --principal argument to samba-tool domain exportkeytabAndrew Bartlett2011-11-296-71/+174
| | | | | | | | | | | | | This allows only a particular principal to be exported to the keytab. This is useful when setting up unix servers in a Samba controlled domain. Based on a request by Gémes Géza <geza@kzsdabas.hu> Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Nov 29 09:20:55 CET 2011 on sn-devel-104
* s4-provision: Fix the security ace for DnsAdmins group on DNS recordsAmitay Isaacs2011-11-291-12/+19
| | | | | | | Find the objectSid for DnsAdmins group and use that instead of a fixed sid. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Tue Nov 29 07:38:06 CET 2011 on sn-devel-104
* s4-repl: Check if GC SPN exists before using it for replicationAmitay Isaacs2011-11-291-3/+54
| | | | | | | | Sometimes windows DC will set up dNSHostname before setting up GC SPN and that causes replication errors since samba tries to use GC SPN, which does not yet exist locally. Pair-Programmed-With: Andrew Tridgell <tridge@samba.org>
* s4-provision: Make BIND9_DLZ as the default backend for DNSAmitay Isaacs2011-11-294-6/+6
|
* dlz_bind9: Added access check to verify dynamic updateAmitay Isaacs2011-11-292-17/+167
| | | | | | | | This creates session info from kerberos ticket and verifies if the signer has write access to a particular DN corresponding to the name in dynamic update. Pair-Programmed-With: Andrew Tridgell <tridge@samba.org>
* dlz_bind9: Use the sam database in dns/ as defaultAmitay Isaacs2011-11-292-60/+14
| | | | | | This change is introduced to access samdb copy directly, rather than over ildap. The advantage is that the samba server does not need to be running for bind9 to start.
* s4-provision: Create a samdb copy for access by dlz_bind9 moduleAmitay Isaacs2011-11-294-56/+158
| | | | | | | | This creates a copy of rootdse, configuration and schema partitions for dlz_bind9 use in dns/ directory. Since dlz_bind9 requires write access to DNS partitions (DomainDnsZones and ForestDnsZones), those partitions are hard-linked (or symlinked) to the actual partitions. An empty domain partition is created so samdb layer can work.
* s4-provision: Extract security descriptors in separate fileAmitay Isaacs2011-11-292-77/+111
| | | | Need to use domain security descriptor from sambadns.py also.