summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* tdb: change version to 1.2.0 after adding TDB_*ALLOW_NESTINGtdb-1.2.0Stefan Metzmacher2009-11-201-1/+1
| | | | metze
* tdb: add TDB_DISALLOW_NESTING and make TDB_ALLOW_NESTING the default behaviorStefan Metzmacher2009-11-205-3/+63
| | | | | | | | | | We need to keep TDB_ALLOW_NESTING as default behavior, so that existing code continues to work. However we may change the default together with a major version number change in future. metze
* New attempt at TDB transaction nesting allow/disallow.Ronnie Sahlberg2009-11-202-1/+14
| | | | | | | | | | | Make the default be that transaction is not allowed and any attempt to create a nested transaction will fail with TDB_ERR_NESTING. If an application can cope with transaction nesting and the implicit semantics of tdb_transaction_commit(), it can enable transaction nesting by using the TDB_ALLOW_NESTING flag. (cherry picked from ctdb commit 3e49e41c21eb8c53084aa8cc7fd3557bdd8eb7b6) Signed-off-by: Stefan Metzmacher <metze@samba.org>
* tdb: always set tdb->tracefd to -1 to be safe on goto failStefan Metzmacher2009-11-201-4/+3
| | | | metze
* s4-dsdb: some more attribuutes that we should only give if asked forAndrew Tridgell2009-11-202-2/+14
|
* s4-drs: we need to specifically ask for ntSecurityDescriptorAndrew Tridgell2009-11-201-1/+1
| | | | ntSecurityDescriptor is no longer included by default
* s4-ldb: added a warning about ldb_msg_add_dnAndrew Tridgell2009-11-201-0/+2
| | | | ldb_msg_add_dn does not copy the dn linearized string
* added new function "ldb_msg_add_dn"Crístian Deives2009-11-204-9/+17
| | | | | | a helper function to a DN element to an ldb_msg using ldb_msg_add_string. Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-dsdb: removed attributes that should not be displayed by defaultAndrew Tridgell2009-11-201-0/+37
| | | | | | Some attributes (like ntSecurityDescriptor) are stored in our db, but should only be displayed if asked for. This also applied to parentGUID from old installs, which is now generated.
* s4-drs: Removes stored parentGUID's creation and renamingFernando J V da Silva2009-11-201-80/+7
| | | | | | parentGUID is now created on demand in operational.c Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-drs: Synchronous Implementation of generated parentGUIDFernando J V da Silva2009-11-201-2/+34
| | | | | | | This generated parentGUID on demand, rather than getting it from the database Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-drs: Utility functions to deal with GUIDFernando J V da Silva2009-11-201-0/+99
| | | | | | | | dsdb_find_parentguid_by_dn() returns the parentGUID for a given DN dsdb_msg_add_guid() adds a GUID value to a given message (either objectGUID or parentGUID). Signed-off-by: Andrew Tridgell <tridge@samba.org>
* ldb:ldb_tdb backend/indexes - Outside APIMatthias Dieter Wallnöfer2009-11-203-28/+30
| | | | | | | - The outside API contains "DN" string arguments: Bad. Since in this way we fully rely on the outside calls regarding the right DN format. Solution: Use always a "struct ldb_dn" entry. Since this one is interchangeable and we can handle it in our preferred way.
* ldb:ldb_tdb backend/indexes - DN comparisonMatthias Dieter Wallnöfer2009-11-201-4/+5
| | | | | | - DN comparison: The function doesn't seem that efficient. I "upgraded" it a bit to be more powerful (added a second length check and do both before the string comparison)
* s4-dsdb: make sure mod_usn list is zeroed on each transactionAndrew Tridgell2009-11-201-7/+10
|
* s4-ldb: added a double-rename testAndrew Tridgell2009-11-201-0/+24
| | | | This tests the fix for double rename/add and indexing
* s4-ldb: when -v is specified, show progress of ldbadd/ldbmodifyAndrew Tridgell2009-11-202-2/+8
| | | | This is useful for speed tests with large numbers of records.
* s4-ldb: make ldb tools line bufferedAndrew Tridgell2009-11-201-0/+3
| | | | | this prevents output being buffered when redirected to a file. Useful for larger ldb command line operations
* s4-ldb: fixed an issue in rename/modify indexingAndrew Tridgell2009-11-201-16/+16
| | | | | | | | | When we rename or modify a record, we need to update the indexes at the same time. It is important that we use the DN of the actual message that is stored in the database to do this, not the DN that was passed in by the user. If the two differ in case then the index records needs to use the 'real' record DN, as index handling is currently case sensitive.
* s4-ldb: allow ldap.py test suite to run directly against a fileAndrew Tridgell2009-11-201-1/+5
| | | | | This makes it much easier to debug (as you can break in the ldb modules by running gdb on /usr/bin/python)
* PC Oota Edits.John H Terpstra2009-11-191-4/+3
|
* s3: Avoid races to change the machine password in winbindVolker Lendecke2009-11-191-0/+18
| | | | | | | | | | The machine password handler has code to deal with every node in the cluster trying to change the machine password at the same time. However, it is not very nice to the DC if everyone tries this simultaneously. This adds a random 0-255 second offset to our timed event. When this fires a bit later than strictly calculated, someone else might have stepped in and have already changed it. The timed event handler will handle this gracefully, it won't even try to do it again.
* s3: Protect against flooding the DC with pwchange requestsVolker Lendecke2009-11-191-14/+24
| | | | | When there is a temporary problem changing passwords we flooded the DC with pwchange requests. This gives the DC a 60-second break to recover.
* s3: Re-check the timeout in machine_password_change_handler()Volker Lendecke2009-11-191-0/+6
| | | | | Someone else might have come in between and changed the password since we created that timed request
* s3: Add some debugs to the winbind machine pwchange machineryVolker Lendecke2009-11-191-0/+16
|
* s3: Factor timeval_string out of current_timestring()Volker Lendecke2009-11-192-12/+14
|
* s3: Do not kill the whole smb session if a machine pwchange failedVolker Lendecke2009-11-191-1/+1
|
* s3:pdb_ldap: fix a comment typoMichael Adam2009-11-191-1/+1
| | | | Michael
* s3: shortcut uid_to_sid when "ldapsam:trusted = yes"Michael Adam2009-11-191-0/+75
| | | | | | | | | | | | | | The normal uid_to_sid behaviour is to call sys_getpwuid() to get the name for the given uid and then call the getsampwnam passdb method for the resulting name. In the ldapsam:trusted case we can reduce the uid_to_sid operation to one simple search for the uidNumber attribute and only get the sambaSID attribute from the correspoinding LDAP object. This reduces the number of ldap roundtrips for this operation. Michael
* s3-build: really fix build of winbind_krb5_locator.Günther Deschner2009-11-191-1/+1
| | | | Guenther
* s3-build: make sure to remove libds and client object files on make clean.Günther Deschner2009-11-191-1/+3
| | | | Guenther
* s4:ldbcli - Added encoder/decoder for relax control.Endi S. Dewata2009-11-191-2/+20
|
* s3: Replace some create_synthetic_smb_fname() callsVolker Lendecke2009-11-187-115/+63
| | | | | In very hot codepaths like the statcache copy_smb_filename and the subsequent recursive talloc_free is noticable in the CPU load.
* s3: Do not talloc in readdirVolker Lendecke2009-11-1812-141/+198
| | | | This is a hot codepath (called from the stat cache)
* s3:load_interfaces(): use function gfree_interfaces() that we have.Michael Adam2009-11-181-9/+1
| | | | | | To reduce code duplication. Michael
* Added control copying for message types other than ldb_search.Nadezhda Ivanova2009-11-181-1/+4
| | | | | | When ildap created a new message to forward, it only copied controls for ldb_search requests. This caused controls for add and modify to be lost in transition and tests for them could not be implemented.
* s3/docs: Add "max protocol = smb2" to man smb.conf.Karolin Seeger2009-11-181-0/+5
| | | | Karolin
* README.coding: Update rules about code blocks and braces.Kai Blin2009-11-181-15/+31
|
* selftest: Subunit/Filter.pm only allow expected failures without errorsStefan Metzmacher2009-11-181-2/+24
| | | | metze
* s4:selftest: mark samba4.smb2.lock.*.VALID-REQUEST as known failureStefan Metzmacher2009-11-181-0/+1
| | | | metze
* SMB2-LOCK: make use of torture_assert_*()Stefan Metzmacher2009-11-181-12/+6
| | | | | | This is needed in order to mark tests as known failures. metze
* s4:ntvfs_generic: check for valid SMB2_LOCK flagsStefan Metzmacher2009-11-181-0/+8
| | | | metze
* s4:selftest: fix logic for --option=torture:progress=noStefan Metzmacher2009-11-181-1/+1
| | | | metze
* s4:torture/test_gentest.sh: make use of the PREFIX argumentStefan Metzmacher2009-11-181-5/+6
| | | | | | We should not use hardcode pathes! metze
* selftest: ignore empty lines in knownfailuresStefan Metzmacher2009-11-181-0/+1
| | | | metze
* selftest/output/plain.pm: report the testuite name on errorStefan Metzmacher2009-11-181-1/+5
| | | | metze
* s4:selftest: for now skip the BASE-DELAY-WRITE test completelyStefan Metzmacher2009-11-181-0/+1
| | | | | | | | | This test randomly fails depending on the timing (the tests are too strict with the values introduced in commit 0fca2b078ceb314e429e24e3318b50451ccf423b) and local filesystem features (timestamp resolution). metze
* s4:selftest: avoid running the slow BASE-DELAY-WRITE test on the cifs proxy ↵Stefan Metzmacher2009-11-181-0/+1
| | | | | | | | share It's enough to run it on the posix share. metze
* s4:selftest: add "rpc.netlogon.*.GetDomainInfo"Stefan Metzmacher2009-11-181-0/+1
| | | | | | We need to expand the test to work against w2k8 and w2k8r2... metze
* fixed the buildAndrew Tridgell2009-11-181-0/+4
| | | | | | whoever pushed 15d93a5d8e21893e1cca5c989dbf97010aae1622, please check that what you push compiles and passes tests. In this case it didn't compile.