summaryrefslogtreecommitdiff
path: root/source4
AgeCommit message (Collapse)AuthorFilesLines
2024-03-01selftest: Bring ldb test defintions into one place in selftest/tests.pyAndrew Bartlett1-3/+0
Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
2024-03-01selftest: Always and only run ldb test-tdb test in Samba selftestAndrew Bartlett1-5/+1
This is the last test left in the independent ldb testsuite, removing this from there allows the test target to be removed. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
2024-03-01pytests: samba-tool domain kds root_keyDouglas Bagnall1-0/+1
Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri Mar 1 01:27:30 UTC 2024 on atb-devel-224
2024-03-01pytest:dsdb: check that there is a gkdi root keyDouglas Bagnall1-0/+4
Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-03-01s4:pydsdb: python bindings for gkdi_new_root_key()Douglas Bagnall1-0/+84
Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-03-01s4:dsdb: Add functions for GKDI root key creationJo Sutton4-2/+410
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-29s4:pydsdb: add not-implemented raising functions to when appropriateDouglas Bagnall1-2/+32
It will be less confusing, I hope. Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-28s4-kdc: Add "Fresh Public Key Identity" SID if PKINIT freshness usedAndrew Bartlett3-0/+21
Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Jo Sutton <josutton@catalyst.net.nz> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Feb 28 04:45:48 UTC 2024 on atb-devel-224
2024-02-27s4:rpc_server: Make some arrays staticJo Sutton1-27/+36
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-27s4:rpc_server: Remove trailing whitespaceJo Sutton1-1/+1
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-27python/tests: Add test for new krb5 keytab parserAndrew Bartlett2-0/+67
Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Jo Sutton <josutton@catalyst.net.nz>
2024-02-26source4/torture: Add SEC_STD_DELETE to enable proper cleanupAnoop C S2-6/+66
basic.maximum_allowed and smb2.maximum_allowed attempt to unlink the files created by those tests. But the restrictive SD with which they were created prohibits the deletion inside shares where vfs_acl_xattr is configured including "ignore system acls". The very same file will otherwise cause problems while progressing with remaining sub tests. SEC_STD_DELETE could be the minimum required additional access mask to successfully delete the file under the said configuration using vfs_acl_xattr and "ignore system acls" option without loosing the integrity of the overall test. Signed-off-by: Anoop C S <anoopcs@samba.org> Reviewed-by: Volker Lendecke <vl@samba.org> Autobuild-User(master): Volker Lendecke <vl@samba.org> Autobuild-Date(master): Mon Feb 26 18:35:43 UTC 2024 on atb-devel-224
2024-02-16s4:dsdb: Fix grammarJo Sutton1-1/+1
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Fri Feb 16 03:47:12 UTC 2024 on atb-devel-224
2024-02-16s4:ldap_server: Remove trailing whitespaceJo Sutton1-9/+9
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Let requests with the AS_SYSTEM control reset an account’s passwordJo Sutton1-1/+4
dsdb_have_system_access() takes into account the AS_SYSTEM control as well as the result of dsdb_module_am_system(). This change means that we can reset the password of an account without being SYSTEM by means of the AS_SYSTEM control. This is essential for ldapsrv_SearchRequest() to be able to process the automatic password changes of Group Managed Service Accounts. Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Make use of dsdb_have_system_access()Jo Sutton3-38/+21
There should not be any change in behaviour. Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Add function to determine whether we have system accessJo Sutton2-0/+32
This takes into account the dsdb session info, as well as the presence or absence of an AS_SYSTEM control. Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Add include guard to dsdb/samdb/ldb_modules/util.hJo Sutton1-0/+5
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Remove redundant includeJo Sutton1-1/+0
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Add function to create a GMSA password update requestJo Sutton2-0/+63
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Remove unused includesJo Sutton1-7/+0
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Add to ‘user_attrs’ attributes required for Group Managed ↵Jo Sutton1-1/+6
Service Accounts Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Add dsdb_werror() macroJo Sutton1-0/+3
This works like dsdb_module_werror(), but does not require an ldb module to work. Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Add search flag indicating that gMSA passwords are to be updatedJo Sutton1-0/+1
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Include missing headersJo Sutton1-0/+2
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Add dsdb control indicating that gMSA passwords are to be updatedJo Sutton2-0/+8
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:setup: Remove empty lineJo Sutton1-1/+0
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Fix code formattingJo Sutton1-2/+2
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Add ‘ares’ parameter to operational attribute constructor functionsJo Sutton1-17/+21
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Make array staticJo Sutton1-1/+1
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Remove trailing whitespaceJo Sutton3-15/+15
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Remove duplicate wordJo Sutton1-1/+1
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Remove unused ‘domain_dn’ parameterJo Sutton4-26/+7
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Remove reference to now‐gone lmNewHash parameterJo Sutton1-10/+8
This parameter was removed in commit 75c54d54ad9fdff7098c1b4f11252528f35ea658. Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Split out function to create a ‘password set’ ldb requestJo Sutton1-24/+51
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Allocate NT hash on to more appropriate memory contextJo Sutton1-1/+1
The NT hash should live at least as long as the message to which it is added. Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Undefine helper macroJo Sutton1-0/+2
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Check return value of talloc_new()Jo Sutton1-0/+9
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:kdc: Remove ‘attrs’ parameter from samba_kdc_lookup_server()Jo Sutton1-5/+4
It is always equal to ‘server_attrs’. Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-16s4:dsdb: Add helper functions to get GKDI root key DNsJo Sutton1-0/+83
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-08s4:dsdb: Fix code formattingJo Sutton1-1/+1
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-08s4:dsdb: Avoid buffer overflow in samdb_result_hashes()Jo Sutton1-0/+7
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-08s4:dsdb: Mark hash returned by samdb_result_hash() as secretJo Sutton1-0/+1
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-08s4:dsdb: Correct reference to source fileJo Sutton1-1/+1
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-08s4:dsdb: Remove trailing whitespaceJo Sutton1-66/+66
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-08s4:dsdb: Correct NDR push error messageJo Sutton1-1/+1
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-08s4:dsdb: Fix code spellingJo Sutton2-6/+6
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-08s4:dsdb: Remove trailing whitespaceJo Sutton1-11/+11
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-08s4:auth: Fix code spellingJo Sutton1-1/+1
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-02-08s4:libcli: Remove unnecessary uses of discard_const_p()Jo Sutton1-4/+4
Signed-off-by: Jo Sutton <josutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>
generated by cgit v1.2.3 (git 2.25.1) at 2026-05-19 17:52:44 +0000