Andrew Bartlett [Fri, 6 Jan 2012 07:32:41 +0000 (18:32 +1100)]
krb5: Require gss_get_name_attribute or Heimdal's PAC parsing to build with krb5
Andrew Bartlett [Thu, 5 Jan 2012 00:39:14 +0000 (11:39 +1100)]
krb5: Require krb5_string_to_key be available to build with krb5
Andrew Bartlett [Thu, 5 Jan 2012 00:34:12 +0000 (11:34 +1100)]
krb5: Require krb5_set_real_time is available to build with krb5
Andrew Bartlett [Thu, 5 Jan 2012 00:30:22 +0000 (11:30 +1100)]
krb5: Require krb5_principal_compare_any_realm be available to build with krb5
Andrew Bartlett [Thu, 5 Jan 2012 00:16:24 +0000 (11:16 +1100)]
krb5: Require krb5_get_renewed_creds be available to build with krb5
Andrew Bartlett [Thu, 5 Jan 2012 00:09:46 +0000 (11:09 +1100)]
krb5: Remove now unused checks for krb5_verify_checksum
Andrew Bartlett [Thu, 5 Jan 2012 00:06:28 +0000 (11:06 +1100)]
krb5: Require krb5_get_init_creds_opt_alloc/free for build with krb5
This also assumes the modern API with a krb5_context argument.
Andrew Bartlett
Andrew Bartlett [Wed, 4 Jan 2012 23:59:44 +0000 (10:59 +1100)]
krb5: Require krb5_fwd_tgt_creds to be available to build with krb5
Andrew Bartlett [Wed, 4 Jan 2012 23:54:50 +0000 (10:54 +1100)]
krb5: Require krb5_get_host_realm and krb5_free_host_realm be available to build with krb5
Andrew Bartlett [Wed, 4 Jan 2012 23:51:29 +0000 (10:51 +1100)]
krb5: Require krb5_c_verify_checksum is available to build with krb5
Andrew Bartlett [Wed, 4 Jan 2012 23:46:24 +0000 (10:46 +1100)]
krb5: Require krb5_c_enctype_compare is available to build with krb5
Andrew Bartlett [Tue, 3 Jan 2012 13:42:35 +0000 (00:42 +1100)]
s3-librpc Make seal parameter a boolean for clarity
Andrew Bartlett [Tue, 3 Jan 2012 11:00:11 +0000 (22:00 +1100)]
s3-librpc Remove special case for spnego session key
SPNEGO is implemented only in terms of gensec mechanisms now.
Andrew Bartlett
Andrew Bartlett [Tue, 3 Jan 2012 10:54:49 +0000 (21:54 +1100)]
s3-librpc Remove special case for spnego dcerpc sign/seal
SPNEGO is implemented only in terms of gensec mechanisms now.
Andrew Bartlett
Andrew Bartlett [Mon, 2 Jan 2012 10:04:57 +0000 (21:04 +1100)]
s3-librpc Move GSS_C_DCE_STYLE backup definition to gse.c
Andrew Bartlett [Mon, 2 Jan 2012 09:38:31 +0000 (20:38 +1100)]
s3-librpc Add const
Andrew Bartlett [Mon, 2 Jan 2012 09:30:41 +0000 (20:30 +1100)]
s3-librpc Remove or make static unused/local-only GSE functions
The GSE layer is now used via the GENSEC module, so we do not need these
functions exposed any more. The code from dcesrv_gssapi.c is now
in source3/auth/auth_generic.c as an auth callback.
Andrew Bartlett
Andrew Bartlett [Mon, 2 Jan 2012 04:50:07 +0000 (15:50 +1100)]
s3-librpc Remove layer around struct gensec_security
Andrew Bartlett [Mon, 2 Jan 2012 04:48:09 +0000 (15:48 +1100)]
s3-librpc: Simplify SPNEGO code now that all mechs use a struct gensec_security
Andrew Bartlett [Mon, 2 Jan 2012 04:38:38 +0000 (15:38 +1100)]
s3-librpc Call SPENGO/GSSAPI via the auth_generic layer and gensec
This simplifies a lot of code, as we know we are always dealing
with a struct gensec_security, and allows the gensec module being
used to implement GSSAPI to be swapped for AD-server operation.
Andrew Bartlett
Andrew Bartlett [Mon, 2 Jan 2012 02:06:29 +0000 (13:06 +1100)]
s3-librpc Call GSSAPI via the auth_generic layer and gensec
This simplifies a lot of code, as we know we are always dealing with a
struct gensec_security, and allows the gensec module being used to
implement GSSAPI to be swapped when required for AD-server operation.
Andrew Bartlett
Andrew Bartlett [Mon, 2 Jan 2012 09:22:38 +0000 (20:22 +1100)]
s3-libsmb Make gse available as a gensec client module
Andrew Bartlett [Mon, 2 Jan 2012 23:52:06 +0000 (00:52 +0100)]
s3-build: Rework object lists to allow gse gensec module
This also allows the spnego_parse_krb5_wrap() function to be shared.
Andrew Bartlett
Andrew Bartlett [Mon, 2 Jan 2012 04:26:15 +0000 (15:26 +1100)]
s3-librpc Allow spnego_generic_init_client to handle kerberos too
Andrew Bartlett [Mon, 2 Jan 2012 04:21:05 +0000 (15:21 +1100)]
s3-librpc Supply target service and server to spnego_generic_init_client()
Andrew Bartlett [Mon, 2 Jan 2012 03:29:51 +0000 (14:29 +1100)]
s3-librpc: Rename spnego_ntlmssp_init_client and make generic
Andrew Bartlett [Mon, 2 Jan 2012 08:55:58 +0000 (19:55 +1100)]
s3-libsmb: split out auth_generic client functions into auth_generic.c
Andrew Bartlett [Mon, 2 Jan 2012 02:11:38 +0000 (13:11 +1100)]
s3-librpc: rename get_ntlmssp_auth_footer to be more generic
This can handle any gensec auth type now.
Andrew Bartlett
Andrew Bartlett [Mon, 2 Jan 2012 02:00:44 +0000 (13:00 +1100)]
s3-librpc Set target service and server into gensec
This will allow cli_rpc_pipe_open_generic_auth() to handle kerberos mechanisms.
Andrew Bartlett
Andrew Bartlett [Mon, 2 Jan 2012 01:51:06 +0000 (12:51 +1100)]
s3-librpc Rename and rework cli_rpc_pipe_open_ntlmssp() to be generic
This also includes renaming the helper function
rpccli_ntlmssp_bind_data, and allows this function to operate on any
gensec-supplied auth type.
Andrew Bartlett
Andrew Bartlett [Sat, 31 Dec 2011 12:08:25 +0000 (23:08 +1100)]
s3-librpc Rename create_ntlmssp_auth_rpc_bind_req() to be more generic
Andrew Bartlett [Tue, 27 Dec 2011 22:55:55 +0000 (09:55 +1100)]
s3-librpc Add gensec wrapper for gse GSSAPI client
This brings in part of the s4 gensec_gssapi as the boilerplate for the
new module.
Andrew Bartlett
Andrew Bartlett [Sat, 31 Dec 2011 11:57:18 +0000 (22:57 +1100)]
s3-auth Add auth hook for PAC parsing
This will allow gensec_gse to parse the PAC.
Andrew Bartlett
Andrew Bartlett [Sat, 31 Dec 2011 11:45:51 +0000 (22:45 +1100)]
auth: make auth4_context common to provide access to generate_session_info_pac()
By providing this context, a function pointer for
generate_session_info_pac() can be inserted into gensec, allowing the
s3 PAC processing in an otherwise more generic gensec module.
Andrew Bartlett
Andrew Bartlett [Sat, 31 Dec 2011 11:24:44 +0000 (22:24 +1100)]
gensec: move gensec_util.c to the top level
To do this some defines need to move to common_auth.h
Andrew Bartlett
Andrew Bartlett [Sat, 31 Dec 2011 11:24:07 +0000 (22:24 +1100)]
auth/kerberos: Remove unused headers from gssapi_parse.c
Andrew Bartlett [Wed, 28 Dec 2011 11:54:23 +0000 (22:54 +1100)]
s3-librpc Return user principal name on supplied mem_ctx
Andrew Bartlett [Tue, 27 Dec 2011 08:39:32 +0000 (19:39 +1100)]
s3-ntlmssp Remove unused ntlmssp_set_hashes() and do not set an invalid LM hash
When E_deshash() returns false, it indicates that the password is either > 14 chars
in length, or could not be represented as an LM hash value for some other
reason. In this case, we should not regard the LM hash being missing
as an error or a no-password situation.
Andrew Bartlett
Andrew Bartlett [Tue, 27 Dec 2011 08:16:14 +0000 (19:16 +1100)]
ntlmssp: merge initial packet implementations
Andrew Bartlett [Tue, 27 Dec 2011 03:59:17 +0000 (14:59 +1100)]
s3-winbindd: convert cached credentials to use auth_generic/gensec for NTLMSSP
Andrew Bartlett [Tue, 27 Dec 2011 01:27:11 +0000 (12:27 +1100)]
s3-libads Use NTLMSSP via auth_generic/gensec
This allows us to use the shared gensec_wrap() implementation already used by the
smb sealing code, as well as making this code more generic.
Andrew Bartlett
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Andrew Bartlett [Mon, 26 Dec 2011 23:25:55 +0000 (10:25 +1100)]
s3-libsmb Make auth_ntlmssp client more generic
As well as renaming, this allows us to start the mech by DCE/RPC auth
type or OID.
Andrew Bartlett
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Andrew Bartlett [Mon, 26 Dec 2011 23:33:36 +0000 (10:33 +1100)]
s3-libsmb Use gensec_settings to set s3 ntlmssp client backend
This prepares us for making the code generic to multiple mechansims
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Andrew Bartlett [Mon, 26 Dec 2011 04:58:11 +0000 (15:58 +1100)]
s3-auth Rename make_auth_ntlmssp() -> make_auth_gensec()
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Jeremy Allison [Thu, 5 Jan 2012 01:02:21 +0000 (17:02 -0800)]
Add some debug to vfs_aio_pthread so I can see when jobs start and stop.
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Thu Jan 5 20:28:00 CET 2012 on sn-devel-104
Andrew Bartlett [Mon, 26 Dec 2011 04:52:59 +0000 (15:52 +1100)]
s3-auth remove outdated comment
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Thu Jan 5 18:51:47 CET 2012 on sn-devel-104
Andrew Bartlett [Mon, 26 Dec 2011 04:21:23 +0000 (15:21 +1100)]
s3-librpc remove unused headers
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Andrew Bartlett [Mon, 26 Dec 2011 04:02:50 +0000 (15:02 +1100)]
s3-auth Remove more unused headers
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Andrew Bartlett [Mon, 26 Dec 2011 04:01:41 +0000 (15:01 +1100)]
s3-auth remove unused ntlmssp.h
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Andrew Bartlett [Mon, 26 Dec 2011 03:57:02 +0000 (14:57 +1100)]
s3-auth Remove ntlmssp_wrap.h which is no longer required
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Andrew Bartlett [Mon, 26 Dec 2011 03:23:15 +0000 (14:23 +1100)]
s3-auth use gensec directly rather than via auth_generic_state
This is possible because the s3 gensec modules are started as
normal gensec modules, so we do not need a wrapper any more.
Andrew Bartlett
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Andrew Bartlett [Mon, 26 Dec 2011 02:42:37 +0000 (13:42 +1100)]
s3-auth Set remote address for both AD and s3 gensec modes
Andrew Bartlett [Mon, 26 Dec 2011 01:26:43 +0000 (12:26 +1100)]
s3-auth re-create the auth context in the s3 ntlmssp server module
This removes the abstraction violation in auth_generic.c.
Andrew Bartlett
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Andrew Bartlett [Mon, 26 Dec 2011 01:13:21 +0000 (12:13 +1100)]
s3-auth Add TALLOC_CTX * to auth_generic_prepare()
This makes the long term owner of this memory more clear. So far only the
clear cases have been moved from NULL however.
Andrew Bartlett
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Andrew Bartlett [Mon, 26 Dec 2011 00:39:29 +0000 (11:39 +1100)]
s3-auth supply s3 ntlmssp module via gensec_settings
This will allow the supply of multiple modules in future
without duplicating the module selection logic.
Andrew Bartlett
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Andrew Bartlett [Tue, 3 Jan 2012 04:57:40 +0000 (15:57 +1100)]
s3-selftest: Add test for rpcclient, including kerberos authentication
Some knownfail entries are added for things the currently fail.
Andrew Bartlett
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Stefan Metzmacher [Thu, 5 Jan 2012 13:59:20 +0000 (14:59 +0100)]
s3:gse: MIT krb5 1.8.1 has a bug in gss_wrap_iov()
gss_krb5int_make_seal_token_v3_iov() doesn't set '*conf_state'.
metze
Andrew Bartlett [Tue, 3 Jan 2012 04:48:01 +0000 (15:48 +1100)]
s3-librpc store the sign/seal flags we got in the gssapi client
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Andrew Bartlett [Wed, 4 Jan 2012 00:39:38 +0000 (11:39 +1100)]
s3-libads Factor out a new routine kerberos_get_principal_from_service_hostname()
This is now used in the GSE GSSAPI client, so that when we connect to
a target server at the CIFS level, we use the same name to connect
at the DCE/RPC level.
Andrew Bartlett
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Andrew Bartlett [Mon, 2 Jan 2012 11:17:06 +0000 (22:17 +1100)]
s3-librpc Use gsskrb5_get_subkey() where available to get the session key
This allows gse_get_session_key() to work against Heimdal.
Andrew Bartlett
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Volker Lendecke [Thu, 5 Jan 2012 14:41:50 +0000 (15:41 +0100)]
s3: Remove some redundant code
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Thu Jan 5 17:16:45 CET 2012 on sn-devel-104
Volker Lendecke [Thu, 5 Jan 2012 11:25:39 +0000 (12:25 +0100)]
s3: Run the CLEANUP1 test
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Thu Jan 5 14:42:43 CET 2012 on sn-devel-104
Volker Lendecke [Thu, 5 Jan 2012 08:23:42 +0000 (09:23 +0100)]
s3: Add a test excercising the share mode cleanup routine
Volker Lendecke [Wed, 4 Jan 2012 12:28:07 +0000 (13:28 +0100)]
libcli/smb: Add smbXcli_conn_samba_suicide
This is a pure test tool against Samba servers
Volker Lendecke [Thu, 5 Jan 2012 10:58:17 +0000 (11:58 +0100)]
s3: Move basic SMB checking to a much earlier point
Volker Lendecke [Tue, 3 Jan 2012 21:30:09 +0000 (22:30 +0100)]
s3: Add a suicide mode to smbd
To test our cleanup code paths properly, we need a way to make smbd exit hard
without cleaning up
Volker Lendecke [Mon, 2 Jan 2012 12:06:10 +0000 (13:06 +0100)]
s3: Fix some nonempty blank lines
Matthias Dieter Wallnöfer [Wed, 4 Jan 2012 15:17:24 +0000 (16:17 +0100)]
s4:repl_meta_data LDB module - set "isRecycled" time correctly
"unix_to_nt_time()" which is based on "time_t" behaves differently for
literals > 32 bit on 32 and 64 bit platforms.
Reviewed-by: ekacnet
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Thu Jan 5 11:59:20 CET 2012 on sn-devel-104
Jeremy Allison [Wed, 4 Jan 2012 20:54:16 +0000 (12:54 -0800)]
Add S3 vfs_aio_pthread module to replace broken glibc aio code.
Compiles but not yet tested.
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Thu Jan 5 01:43:51 CET 2012 on sn-devel-104
Jelmer Vernooij [Wed, 4 Jan 2012 20:00:42 +0000 (21:00 +0100)]
waf: Use git repository.
Autobuild-User: Jelmer Vernooij <jelmer@samba.org>
Autobuild-Date: Thu Jan 5 00:10:24 CET 2012 on sn-devel-104
Jelmer Vernooij [Tue, 3 Jan 2012 23:31:27 +0000 (00:31 +0100)]
Include waf as an extracted source directory, rather than as a one-in-a-file script.
Stefan Metzmacher [Fri, 16 Dec 2011 09:55:46 +0000 (10:55 +0100)]
s4:pyrpc: add 'user_session_key' getter to the connection object
This gets the session key from gensec for usage in DRSUAPI.
metze
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Wed Jan 4 22:31:52 CET 2012 on sn-devel-104
Stefan Metzmacher [Wed, 4 Jan 2012 19:49:08 +0000 (20:49 +0100)]
s4:pygensec/tests: check that the client and server have the same session key
metze
Stefan Metzmacher [Fri, 16 Dec 2011 09:37:51 +0000 (10:37 +0100)]
s4:pygensec: add session_key() method
metze
Stefan Metzmacher [Wed, 4 Jan 2012 10:46:47 +0000 (11:46 +0100)]
LDAP-CLDAP: demonstrate that pdc name is not an unc path
For LOGON_SAM_LOGON_RESPONSE_EX and LOGON_SAM_LOGON_USER_UNKNOWN_EX,
pdc name is not in unc path form.
[MS-ADTS] 7.3.1.* uses UnicodeLogonServer, which seems to be in unc form,
while NetbiosComputerName is not in unc form.
metze
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Wed Jan 4 20:06:14 CET 2012 on sn-devel-104
Matthias Dieter Wallnöfer [Thu, 22 Dec 2011 16:05:29 +0000 (17:05 +0100)]
s4:torture/nbt/dgram.c - NBT samlogon requests don't return the PDC name as UNC path
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Stefan Metzmacher [Wed, 23 Nov 2011 09:09:51 +0000 (10:09 +0100)]
s4:cldap_server/netlogon.c: it is wrong to specify "\\" in front of the hostname
For LOGON_SAM_LOGON_RESPONSE_EX and LOGON_SAM_LOGON_USER_UNKNOWN_EX,
pdc name is not in unc path form.
[MS-ADTS] 7.3.1.* uses UnicodeLogonServer, which seems to be in unc form,
while NetbiosComputerName is not in unc form.
Bases on a patch from Matthias Dieter Wallnöfer <mdw@samba.org>.
metze
Andreas Schneider [Tue, 3 Jan 2012 15:55:25 +0000 (16:55 +0100)]
s3-winbind: Fix segfault if we can't map the last user.
This fixes bug #8678.
The issue is caused by bug #8608.
Autobuild-User: Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date: Wed Jan 4 18:30:53 CET 2012 on sn-devel-104
Andreas Schneider [Tue, 3 Jan 2012 15:54:39 +0000 (16:54 +0100)]
s3-winbind: Move finding the domain to it's own function.
This the first part to fix bug #8678.
David Disseldorp [Tue, 3 Jan 2012 09:14:23 +0000 (10:14 +0100)]
s3-perfcount: fix incorrect array length calculations
As reported by Ismail Doenmez (idonmez@suse.com), sizeof() is
incorrectly used by _reg_perfcount_init_data_block() in an attempt to
determine the length of a talloced array.
Signed-off-by: Günther Deschner <gd@samba.org>
Autobuild-User: Günther Deschner <gd@samba.org>
Autobuild-Date: Wed Jan 4 16:54:37 CET 2012 on sn-devel-104
David Disseldorp [Tue, 3 Jan 2012 09:13:02 +0000 (10:13 +0100)]
s3-perfcount: fix build for example perfcount daemon
Signed-off-by: Günther Deschner <gd@samba.org>
Volker Lendecke [Tue, 3 Jan 2012 21:19:27 +0000 (22:19 +0100)]
s3: Check for the packet size before accessing it
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Wed Jan 4 15:16:20 CET 2012 on sn-devel-104
Stefan Metzmacher [Wed, 4 Jan 2012 10:46:47 +0000 (11:46 +0100)]
LDAP-CLDAP: demonstrate that pdc name is an unc path
For LOGON_SAM_LOGON_RESPONSE and LOGON_SAM_LOGON_USER_UNKNOWN,
I assume all levels without _EX in the name, pdc name is
in unc path form.
[MS-ADTS] 7.3.1.* uses UnicodeLogonServer, which seems to be in unc form,
while NetbiosComputerName is not in unc form.
metze
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Wed Jan 4 13:37:42 CET 2012 on sn-devel-104
Stefan Metzmacher [Mon, 2 Jan 2012 14:51:35 +0000 (15:51 +0100)]
s4:torture/nbt/dgram.c: NBT samlogon requests without _EX return the PDC name as UNC path
metze
Amitay Isaacs [Tue, 3 Jan 2012 04:39:20 +0000 (15:39 +1100)]
dlz_bind9: create session info from PAC using auth context
This fixes the creation of session info from PAC, after changes
in gensec code.
Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Wed Jan 4 01:59:09 CET 2012 on sn-devel-104
Masafumi Nakayama [Wed, 2 Nov 2011 09:35:19 +0000 (10:35 +0100)]
s3-cli: fix bug 563, >8GB tar on BE machines
Borrows on existing patches proposed by Craig Barratt and Brad Ellis.
Signed-off-by: David Disseldorp <ddiss@suse.de>
Autobuild-User: David Disseldorp <ddiss@samba.org>
Autobuild-Date: Tue Jan 3 18:31:28 CET 2012 on sn-devel-104
Volker Lendecke [Tue, 3 Jan 2012 14:20:09 +0000 (15:20 +0100)]
s3: Fix a cut&paste error
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Tue Jan 3 16:57:44 CET 2012 on sn-devel-104
Volker Lendecke [Tue, 3 Jan 2012 14:13:48 +0000 (15:13 +0100)]
s3: Fix a typo
Volker Lendecke [Fri, 16 Dec 2011 17:56:40 +0000 (18:56 +0100)]
s3: Remove the unused "file_existed" parameter from smbd_calculate_access_mask
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Tue Jan 3 15:16:50 CET 2012 on sn-devel-104
Volker Lendecke [Fri, 16 Dec 2011 17:51:19 +0000 (18:51 +0100)]
s3: Avoid "file_existed" in smbd_calculate_maximum_allowed_access
We access the file by name anyway, so we can just try to access it. The file
system will for sure tell us if the file does not exist.
Volker Lendecke [Fri, 16 Dec 2011 17:47:03 +0000 (18:47 +0100)]
s3: Remove some else{} branches in smbd_calculate_maximum_allowed_access
Volker Lendecke [Fri, 16 Dec 2011 17:45:14 +0000 (18:45 +0100)]
s3: Directly use *p_access_mask in smbd_calculate_maximum_allowed_access
Volker Lendecke [Fri, 16 Dec 2011 17:42:30 +0000 (18:42 +0100)]
s3: Factor out smbd_calculate_maximum_allowed_access
Matthieu Patou [Tue, 3 Jan 2012 03:27:48 +0000 (19:27 -0800)]
upgradeprovision: do not hold references to messageElements
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Tue Jan 3 08:20:02 CET 2012 on sn-devel-104
Matthieu Patou [Tue, 3 Jan 2012 03:25:56 +0000 (19:25 -0800)]
pyldb: raise an exception if we can't add the attribute
Matthieu Patou [Thu, 25 Aug 2011 16:05:28 +0000 (18:05 +0200)]
upgradeprovision: treat provision without oem attribute as quite recent, it's provision that comes from Windows replication
Amitay Isaacs [Tue, 3 Jan 2012 02:51:00 +0000 (13:51 +1100)]
s4-provision: Fix the problem of DnsProperty values not being set correctly
DnsProperty can have empty 'data' member. To parse Dnsproperty with
empty data, dnsp.idl has a hack as follows:
[switch_is(wDataLength?id:DSPROPERTY_ZONE_EMPTY)] dnsPropertyData data;
This implies, to set 'data' value, wDataLength has to be set to a non-zero
value first.
Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Tue Jan 3 05:26:32 CET 2012 on sn-devel-104
Matthias Dieter Wallnöfer [Thu, 24 Nov 2011 09:20:24 +0000 (10:20 +0100)]
s4:torture/rpc/netlogon.c - enhance the "DsRGetDCName*" tests
To check for the expected behaviour (DS_* flags). Always according to
MS-NRPC 2.2.1.2.1.
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Mon Jan 2 20:43:05 CET 2012 on sn-devel-104
Matthias Dieter Wallnöfer [Thu, 22 Dec 2011 10:47:44 +0000 (11:47 +0100)]
ldb:ldb/common/ldb_controls.c - reference "err_string" variable correctly
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Andreas Schneider [Fri, 16 Dec 2011 18:03:54 +0000 (19:03 +0100)]
s4-provision: Fix tdbdump path lookup in make test.
Signed-off-by: Stefan Metzmacher <metze@samba.org>
git.samba.org / abartlet / samba.git / .git / log