summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* gitignore: Ignore additional auto-generated files.Andrew Kroeger2009-09-071-0/+4
|
* s4: Let the "setpassword" script finally use the "samdb_set_password" routineMatthias Dieter Wallnöfer2009-09-072-9/+70
| | | | | | The "setpassword" script should use the "samdb_set_password" call to change the NT user password. Windows Server tests show that "userPassword" is not the right place to save the NT password and does not inherit the password complexity.
* s4:dsdb: correctly implement _dsdb_syntax_OID_oid_ldb_to_drsuapi()Stefan Metzmacher2009-09-071-1/+31
| | | | | | | Here we just need to map the oid string in the ldb value to the ATTRTYP id. metze
* lib/tdr: fix the build with --enable-automatic-dependenciesStefan Metzmacher2009-09-071-1/+1
| | | | metze
* s4:LogonGetDomainInfo - add a basic check for the hostnameMatthias Dieter Wallnöfer2009-09-071-2/+17
| | | | | | This check is specified in Windows Server after release 2003. The parameter "hostname" should match as prefix of the dns hostname given as parameter in the "workstation" structure.
* tdb: fix c++ build warning.Günther Deschner2009-09-071-2/+2
| | | | Guenther
* s4: Fix "Small memory leak after calling several times lp_update"Inra2009-09-072-37/+20
| | | | Should fix bug #6660.
* s4: Exceptions in "provision.py"Michael Ströder2009-09-071-11/+15
| | | | | This looks much nicer than "normal" string exceptions - and fits better in the OO programming style.
* s4:simple_ldap_map - "primaryGroupId"Matthias Dieter Wallnöfer2009-09-071-4/+15
| | | | Previous patch was incomplete regarding the "primaryGroupId" attribute. Complete it.
* s4:samldb - Fix typoMatthias Dieter Wallnöfer2009-09-071-1/+1
|
* s4:Foreign security principals - Fix them upMatthias Dieter Wallnöfer2009-09-073-19/+31
| | | | | | I fixed them up to match with Windows Server 2003. I don't think that the creation of them in the provision script is needed so I put them in the "provision_users.ldif" file.
* s4:subtree delete module - Cosmetic adaptionsMatthias Dieter Wallnöfer2009-09-071-11/+16
|
* s4:ldap.py - Adds a test for the primary group behaviourMatthias Dieter Wallnöfer2009-09-071-12/+132
| | | | | | This passes the Windows Server behaviour. Also SAMBA 4 should match it. Also some small enhancement.
* s4:provision - Change the module order to match Windows ServerMatthias Dieter Wallnöfer2009-09-071-1/+1
| | | | Tests show that Windows Server seems to do the access checks on the very last moment.
* s4:sam - Implement also here the right primary group behaviourMatthias Dieter Wallnöfer2009-09-071-46/+71
| | | | | | | We have not only to expand the additional groups but *also* the primary group to gain all rights of a user account. Also, remove an unneeded context (tmp_ctx) and "talloc_steal".
* s4:samr - Fix up the SAMR server to support the primary group of a user in ↵Matthias Dieter Wallnöfer2009-09-071-128/+189
| | | | | | | | | the right way When doing some tests with the NT User Manager for Domains on s4 I noticed that the handling of the primary group for a user wasn't correct. So I fixed this. Also some cosmetic changes (tab indent corrections).
* s4:samldb - Major reworkMatthias Dieter Wallnöfer2009-09-074-328/+1000
| | | | | | | | | | | | | | | | | | This fixes up the change of the primary group of a user when using the ADUC console: - When the "primaryGroupId" attribute changes, we have to delete the "member"/"memberOf" attribute reference of the new primary group and add one for the old primary group. - Deny deletion of primary groups according to Windows Server (so we cannot have invalid "primaryGroupID" attributes in our AD). - We cannot add a primary group directly before it isn't a secondary one of a user account. - We cannot add a secondary reference ("member" attribute) when the group has been chosen as primary one. This also removes the LDB templates which are basically overhead now. This should also fix bug #6599.
* s4:provision - Add a new delete function only for users and computersMatthias Dieter Wallnöfer2009-09-071-0/+25
| | | | | | We need this new function to delete users and computers before other objects on reprovisioning. Otherwise primary groups could be deleted before user/computer accounts (which isn't allowed anymore by the reworked "samldb" module).
* s4:provision - Change the "provision_users.ldif" file to support the ↵Matthias Dieter Wallnöfer2009-09-071-26/+35
| | | | | | | "samldb" changes The "provision_users.ldif" file needs some rework to pass against the changed and improved "samldb" module (see next commit).
* Fix bug 6673 - smbpasswd does not work with "unix password sync = yes".Jeremy Allison2009-09-065-22/+30
| | | | | | | | | | Revert change from 3.3 -> 3.4 with read_socket_with_timeout changed from sys_read() to sys_recv(). read_socket_with_timeout() is called with non-fd's (with a pty in chgpasswd.c and with a disk file in lib/dbwrap_file.c via read_data()). recv works for the disk file, but not the pty. Change the name of read_socket_with_timeout() to read_fd_with_timeout() to make this clear (and add comments). Jeremy.
* s4:setup_dns.sh fixed the update of the GUID CNAMEAndrew Tridgell2009-09-071-8/+14
|
* s4:nsupdate-gss allow forcing of the realmAndrew Tridgell2009-09-071-35/+37
| | | | this is needed for the _msdcs zone
* s4:setup: Remove display_specifiers.ldif.Andrew Kroeger2009-09-071-482/+0
| | | | | This file is no longer needed as the DisplaySpecifiers are now generated from files provided by Microsoft.
* s4:setup: Updated comment to reflect new DisplaySpecifiers location.Andrew Kroeger2009-09-071-1/+3
|
* s4:setup: Use ms_display_specifiers script for provision.Andrew Kroeger2009-09-071-2/+5
| | | | | Changed the provisioning to use the new script to parse the Microsoft-provided DisplaySpecifiers LDIF file.
* s4:setup: Added script to parse Microsoft DisplaySpecifiers document.Andrew Kroeger2009-09-071-0/+189
| | | | | | | | | | Created this script based on the existing ms_schema.py script. - Removed some unnecessary transformations that are only necessary for schema processing. - Added capability to parse and properly output base64-encoded values. - Removed unnecessary attributes based on what attributes were present (and also what were explicitly removed) from display_specifiers.ldif.
* s4:setup: Change license headers to LDIF comments.Andrew Kroeger2009-09-075-86/+146
| | | | | | | | | | The original license headers provided by Microsoft cannot be parsed as valid LDIF. Changed the license headers to be valid LDIF comments, and added a new header section detailing the exact changes that were made to the original document. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:setup Add DisplaySpecifiers from Microsoft.Andrew Bartlett2009-09-075-0/+148158
| | | | | | | | Like the schema, these are provided under the licence at the head of the file, which is not the GPL, but allows us to distribute them with Samba. Andrew Bartlett
* s4: bring nsupdate-gss into the s4 treeAndrew Tridgell2009-09-072-0/+379
| | | | | | | | This is a perl script that does TSIG-GSS DNS updates against a AD DC. The bind 9.5 nsupdate still doesn't seem to work with TSIG-GSS, and we need a way to do DNS updates when we vampire a domain, so I revived this ancient perl script and added a wrapper script that can update DNS entries using our machine account credentials
* s4: fixed the secrets.ldb construction in libnetAndrew Tridgell2009-09-071-8/+8
| | | | | on a vampire join we were not putting the right attributes and objectclass on the secrets.ldb record
* s4: the secrets.ldb module needs the loadparm opaque setupAndrew Tridgell2009-09-071-0/+7
|
* s3:winbind: Convert WINBINDD_SET_HWM to the new APIVolker Lendecke2009-09-0715-128/+454
|
* s3:winbind: Convert WINBINDD_REMOVE_MAPPING to the new APIVolker Lendecke2009-09-0715-108/+488
|
* s3:winbind: Convert WINBINDD_SET_MAPPING to the new APIVolker Lendecke2009-09-0715-106/+538
|
* s3:winbind: Convert WINBINDD_CHECK_MACHACC to the new APIVolker Lendecke2009-09-0715-76/+451
|
* s3:smbd: Add the ntstatus to the smb_panic in share_mode_lock_destructorVolker Lendecke2009-09-071-2/+18
| | | | This might help finding why bug 6518 happens
* s4:simple_ldap_map - Enhance it for supporting "primaryGroupID" in the right wayMatthias Dieter Wallnöfer2009-09-061-14/+25
|
* s4:torture - Fix uninitialized variableMatthias Dieter Wallnöfer2009-09-061-1/+1
|
* s4:"linked attributes" modules - correct the commentsMatthias Dieter Wallnöfer2009-09-061-2/+2
|
* s4: Fix typoMatthias Dieter Wallnöfer2009-09-061-2/+2
|
* s4:pwsettings - Introduce the LDB modify flags in the right wayMatthias Dieter Wallnöfer2009-09-061-27/+8
| | | | | We can't emulate them through the LDB changetype flags since they haven't the same constants! The previous behaviour led to huge problems.
* s4:ldb_errors - add spacesMatthias Dieter Wallnöfer2009-09-061-0/+2
|
* s4:dsdb/common/util.c - Copy parameters to prevent segfaultsMatthias Dieter Wallnöfer2009-09-061-3/+8
| | | | | The parameters "lmNewHash" and/or "ntNewHash" could be NULL and when we perform write operations on them (look below in the code) we could get SIGSEGVs!
* s4:dsdb/common/util - Indentation fixesMatthias Dieter Wallnöfer2009-09-061-4/+5
|
* Tell newbie devs about ./configure.developerRusty Russell2009-09-062-2/+2
| | | | | | Enhances the outputs in autogen.sh for both s3 and s4. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
* Check we read off the compelte event from inotifySimo Sorce2009-09-051-2/+8
| | | | | | | The kernel may return a short read, so we must use read_data() to make sure we read off the full buffer. If somethign bad happens we also need to kill the inotify watch because the filedescriptor will return out of sync structures if we read only part of the data.
* Save and report the correct errno value.Simo Sorce2009-09-051-8/+12
|
* s3:winbind: Use fstr_sprintf, it is simpler than talloc_asprintf->fstrcpyVolker Lendecke2009-09-051-8/+5
|
* s3:winbind: Remove pointless <cond> ? true : false;Volker Lendecke2009-09-051-4/+4
|
* s3:winbind: Make the pam_auth subfunctions staticVolker Lendecke2009-09-052-18/+9
|
View Lorry Controller Status