Fri Sep 16 05:57:58 GMT 2005

Author: metze
Date: 2005-09-16 05:57:49 +0000 (Fri, 16 Sep 2005)
New Revision: 10254

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=10254

Log:
 r12176 at SERNOX (orig r10171):  abartlet | 2005-09-12 15:16:56 +0200
 This seems to work for encoding/decoding a PAC at the buffers only
 level (required for signature verification).

 Andrew Bartlett

 r12177 at SERNOX (orig r10172):  jelmer | 2005-09-12 15:49:51 +0200
 Add --dump-ndr-tree argument

 r12178 at SERNOX (orig r10173):  jelmer | 2005-09-12 15:52:15 +0200
 Document new option

 r12185 at SERNOX (orig r10174):  abartlet | 2005-09-12 16:19:05 +0200
 This patch implements generic PAC verification, without assumptions
 about the size of the signature.  In particular, this works with AES,
 which was previously broken Samba4/Samba4.

 Reviewed by metze (and thanks for help with the previous IDL commit).

 r12192 at SERNOX (orig r10181):  jelmer | 2005-09-12 23:10:40 +0200
 Fix the build

 r12195 at SERNOX (orig r10184):  tpot | 2005-09-12 23:37:18 +0200
 Fix a stack of unhandled enumeration warnings.

 r12196 at SERNOX (orig r10185):  tpot | 2005-09-12 23:40:40 +0200
 Fix another two sets of unhandled enumeration warnings, plus correct some awful indentation.  (-:

 r12201 at SERNOX (orig r10190):  jelmer | 2005-09-13 01:52:25 +0200
 Do some very basic input checking when provisioning. 

 r12202 at SERNOX (orig r10191):  jelmer | 2005-09-13 02:01:24 +0200
 Return the right error code in the case of a time skew. Windows will now 
 ignore Kerberos and fallback to NTLMSSP when joining. Thanks to Andrew Bartlett
 for the assistence.

 r12203 at SERNOX (orig r10192):  tridge | 2005-09-13 03:01:55 +0200
  r11631 at blu:  tridge | 2005-08-30 23:06:37 +1000
  added a ldb.close() method in js. Useful for re-opening the db

 r12204 at SERNOX (orig r10193):  tridge | 2005-09-13 03:02:06 +0200
  r11632 at blu:  tridge | 2005-08-30 23:08:27 +1000
  if we fail to erase a ldb during provision by traversing
  and deleting records (an in-place erase) then just unlink it
  and start it again. This makes provisioning much more robust
  to changes in ldb that make it not backward compatible with
  old DBs.

 r12208 at SERNOX (orig r10197):  tpot | 2005-09-13 08:39:40 +0200
 Assume that external dissectors are structs which I think is always the
 case.

 r12210 at SERNOX (orig r10199):  tridge | 2005-09-13 14:44:33 +0200

 added a LOCAL-RESOLVE torture test, useful for measuring the overhead of
 the async name resolution mechanisms

 r12211 at SERNOX (orig r10200):  tridge | 2005-09-13 14:46:03 +0200
 added a composite_trigger_done() call that allows a composite function
 to cause an event to happen immediately. This allows metzes patch for
 recognising IPs in resolve_name() to work, and also allows us to
 remove some of the other code where we currently do specific checks
 for is_ipaddress().

 r12218 at SERNOX (orig r10207):  jelmer | 2005-09-13 19:28:18 +0200
 Add some const

 r12223 at SERNOX (orig r10212):  deryck | 2005-09-13 23:31:40 +0200
 An IE fix.  Must set initial values in the onload function.

 deryck

 r12224 at SERNOX (orig r10213):  tridge | 2005-09-14 00:05:45 +0200
 fixed a memory leak in the ldap client and server code spotted by Karl
 Melcher. ldap_encode() now takes a memory context to use for the data
 blob

 r12227 at SERNOX (orig r10216):  tridge | 2005-09-14 00:58:38 +0200
 Chris Samuel pointed out that we should note the need to run provision
 as a user with write permission on the install directory

 r12236 at SERNOX (orig r10225):  deryck | 2005-09-14 17:08:46 +0200
 Adding back a style rule to qooxdoo that was originally
 removed.  This is a cross browser hack that makes for
 better performance amone differing browsers.

 deryck

 r12239 at SERNOX (orig r10228):  deryck | 2005-09-14 23:48:03 +0200
 Reorganizing a bit, trying to simplify.  This is an attempt
 to find what's going wrong in IE formatting.

 This is some better, but still IE needs help.

 deryck

 r12242 at SERNOX (orig r10231):  idra | 2005-09-15 00:39:24 +0200

 seem I flipped these, fix.

 r12243 at SERNOX (orig r10232):  idra | 2005-09-15 00:45:49 +0200

 Some work on ldb_sqlite3.
 It is still far from being usable in samba4 but I want to commit
 so that the work does not get lost by mistake.
 This is also a good way to get comments if somebody is interested.

 Sorry Derrell I ended up rewriting large parts of the code but I find
 this style much more readable. Thanks for the hard work done. Your
 work was a good reference for me.

 ah the current code also shows some good numbers

 sqlite3 generic test:
 uid search took 0.05 seconds
 real    0m12.492s
 user    0m0.492s
 sys     0m0.345s

 with tdb we still get better numbers:
 uid search took 0.46 seconds
 real    0m0.892s
 user    0m0.360s
 sys     0m0.468s

 but most of the time is spent in adding operations and I think
 there's still a lot of space for improvement.

 Simo.

 r12244 at SERNOX (orig r10233):  idra | 2005-09-15 01:14:42 +0200

 add commented PRAGMA to avoid fsyncs

 r12247 at SERNOX (orig r10236):  idra | 2005-09-15 09:23:15 +0200

 fix (C) note

 r12271 at SERNOX (orig r10237):  metze | 2005-09-15 11:55:16 +0200
 fix parameter, how have I missed this...?

 metze
 r12272 at SERNOX (orig r10238):  tpot | 2005-09-15 12:20:08 +0200
 Add a entry for sec_info to treat it as a uint32 for now.

 r12283 at SERNOX (orig r10245):  jelmer | 2005-09-15 21:52:13 +0200
 Get rid of XFILE in a few places. 
 Add fdprintf() and vfdprintf() helper functions.

 r12284 at SERNOX (orig r10246):  jelmer | 2005-09-15 22:03:35 +0200
 Remove unused function
 Move auth-specific file to auth/

 r12288 at SERNOX (orig r10250):  idra | 2005-09-16 01:06:57 +0200

 the comparison is caseless so we must caseless subtract
 otherwise we get the wrong result when comparing upper
 case chars with lower case chars

 r12289 at SERNOX (orig r10251):  idra | 2005-09-16 01:10:07 +0200

 some more work on ldb_sqlite3

 I must say that writing a new module is a very good way
 to find lot of subtle bugs laying in the code

 We need more tests!

 commit oLschema2ldif.c to keep it safe from data losses (rm -fr :-)

 update test generic to reflect the fix made on comparsion functions

 r12290 at SERNOX (orig r10252):  tridge | 2005-09-16 05:18:49 +0200
 a recent checkin from simo changed the handling of BASE and SUBTREE
 searches in ldb to be more ldap compliant, but broke the wins server
 and the ejs ldb code. This fixes those up so 'make test' passes again.

 r12291 at SERNOX (orig r10253):  tridge | 2005-09-16 05:52:42 +0200

 a fairly large tdb cleanup and re-organise. Nearly all of this change
 just involves splitting up the core tdb.c code into separate files on
 logical boundaries, but there are some minor functional changes as well:

  - move the 'struct tdb_context' into tdb_private.h, hiding it from
    users. This was done to allow the structure to change without
    breaking code that uses tdb.

  - added accessor functions tdb_fd(), tdb_name(), and tdb_log_fn() to
    access the elements of struct tdb_context that were used by
    external code but are no longer visible

  - simplied tdb_append() to use tdb_fetch()/tdb_store(), which is just
    as good due to the way tdb locks work

  - changed some of the types (such as tdb_off to tdb_off_t) to make
    syntax highlighting work better

  - removed the old optional spinlock code. It was a bad idea.

  - fixed a bug in tdb_reopen_all() that caused tdbtorture to sometimes
    fail or report nasty looking errors. This is the only real bug
    fixed in this commit. Jeremy/Jerry, you might like to pickup this
    change for Samba3, as that could definately affect smbd in
    Samba3.

 The aim of all of these changes is to make the tdb
 transactions/journaling code I am working on easier to write. I
 started to write it on top of the existing tdb.c code and it got very
 messy. Splitting up the code makes it much easier to follow.

 There are more cleanups we could do in tdb, such as using uint32_t
 instead of u32 (suggested by metze). I'll leave those for another day.

Added:
   branches/tmp/samba4-winsrepl/source/auth/pam_errors.c
   branches/tmp/samba4-winsrepl/source/lib/tdb/common/dump.c
   branches/tmp/samba4-winsrepl/source/lib/tdb/common/error.c
   branches/tmp/samba4-winsrepl/source/lib/tdb/common/freelist.c
   branches/tmp/samba4-winsrepl/source/lib/tdb/common/io.c
   branches/tmp/samba4-winsrepl/source/lib/tdb/common/lock.c
   branches/tmp/samba4-winsrepl/source/lib/tdb/common/open.c
   branches/tmp/samba4-winsrepl/source/lib/tdb/common/tdb_private.h
   branches/tmp/samba4-winsrepl/source/lib/tdb/common/traverse.c
   branches/tmp/samba4-winsrepl/source/lib/tdb/include/tdbconfig.h.in
   branches/tmp/samba4-winsrepl/source/torture/local/resolve.c
Removed:
   branches/tmp/samba4-winsrepl/source/lib/pam_errors.c
   branches/tmp/samba4-winsrepl/source/lib/tdb/common/spinlock.c
   branches/tmp/samba4-winsrepl/source/lib/tdb/include/spinlock.h
Modified:
   branches/tmp/samba4-winsrepl/
   branches/tmp/samba4-winsrepl/howto.txt
   branches/tmp/samba4-winsrepl/source/auth/config.mk
   branches/tmp/samba4-winsrepl/source/auth/kerberos/kerberos_pac.c
   branches/tmp/samba4-winsrepl/source/gtk/tools/gregedit.c
   branches/tmp/samba4-winsrepl/source/heimdal/kdc/kerberos5.c
   branches/tmp/samba4-winsrepl/source/ldap_server/ldap_rootdse.c
   branches/tmp/samba4-winsrepl/source/ldap_server/ldap_server.c
   branches/tmp/samba4-winsrepl/source/lib/basic.mk
   branches/tmp/samba4-winsrepl/source/lib/cmdline/readline.c
   branches/tmp/samba4-winsrepl/source/lib/credentials.c
   branches/tmp/samba4-winsrepl/source/lib/db_wrap.c
   branches/tmp/samba4-winsrepl/source/lib/ldb/common/attrib_handlers.c
   branches/tmp/samba4-winsrepl/source/lib/ldb/common/ldb_dn.c
   branches/tmp/samba4-winsrepl/source/lib/ldb/ldb_sqlite3/ldb_sqlite3.c
   branches/tmp/samba4-winsrepl/source/lib/ldb/ldb_sqlite3/ldb_sqlite3.h
   branches/tmp/samba4-winsrepl/source/lib/ldb/ldb_tdb/ldb_search.c
   branches/tmp/samba4-winsrepl/source/lib/ldb/ldb_tdb/ldb_tdb_wrap.c
   branches/tmp/samba4-winsrepl/source/lib/ldb/tests/test-generic.sh
   branches/tmp/samba4-winsrepl/source/lib/ldb/tests/test-sqlite3.sh
   branches/tmp/samba4-winsrepl/source/lib/ldb/tools/oLschema2ldif.c
   branches/tmp/samba4-winsrepl/source/lib/registry/common/reg_interface.c
   branches/tmp/samba4-winsrepl/source/lib/registry/reg_backend_dir.c
   branches/tmp/samba4-winsrepl/source/lib/registry/reg_backend_ldb.c
   branches/tmp/samba4-winsrepl/source/lib/registry/reg_backend_nt4.c
   branches/tmp/samba4-winsrepl/source/lib/registry/reg_backend_rpc.c
   branches/tmp/samba4-winsrepl/source/lib/registry/reg_backend_w95.c
   branches/tmp/samba4-winsrepl/source/lib/registry/regf.idl
   branches/tmp/samba4-winsrepl/source/lib/registry/registry.h
   branches/tmp/samba4-winsrepl/source/lib/socket/connect.c
   branches/tmp/samba4-winsrepl/source/lib/tdb/Makefile.in
   branches/tmp/samba4-winsrepl/source/lib/tdb/autogen.sh
   branches/tmp/samba4-winsrepl/source/lib/tdb/common/tdb.c
   branches/tmp/samba4-winsrepl/source/lib/tdb/common/tdbutil.c
   branches/tmp/samba4-winsrepl/source/lib/tdb/config.m4
   branches/tmp/samba4-winsrepl/source/lib/tdb/config.mk
   branches/tmp/samba4-winsrepl/source/lib/tdb/configure.in
   branches/tmp/samba4-winsrepl/source/lib/tdb/include/tdb.h
   branches/tmp/samba4-winsrepl/source/lib/tdb/include/tdbutil.h
   branches/tmp/samba4-winsrepl/source/lib/tdb/tools/tdbdump.c
   branches/tmp/samba4-winsrepl/source/lib/tdb/tools/tdbtest.c
   branches/tmp/samba4-winsrepl/source/lib/tdb/tools/tdbtool.c
   branches/tmp/samba4-winsrepl/source/lib/tdb/tools/tdbtorture.c
   branches/tmp/samba4-winsrepl/source/lib/util_file.c
   branches/tmp/samba4-winsrepl/source/libcli/cldap/cldap.c
   branches/tmp/samba4-winsrepl/source/libcli/composite/composite.c
   branches/tmp/samba4-winsrepl/source/libcli/composite/connect.c
   branches/tmp/samba4-winsrepl/source/libcli/ldap/ldap.c
   branches/tmp/samba4-winsrepl/source/libcli/ldap/ldap_client.c
   branches/tmp/samba4-winsrepl/source/libcli/resolve/resolve.c
   branches/tmp/samba4-winsrepl/source/libcli/security/access_check.c
   branches/tmp/samba4-winsrepl/source/librpc/idl/krb5pac.idl
   branches/tmp/samba4-winsrepl/source/librpc/idl/winreg.cnf
   branches/tmp/samba4-winsrepl/source/librpc/rpc/dcerpc_util.c
   branches/tmp/samba4-winsrepl/source/nbt_server/wins/winsdb.c
   branches/tmp/samba4-winsrepl/source/param/generic.c
   branches/tmp/samba4-winsrepl/source/pidl/lib/Parse/Pidl/Ethereal/NDR.pm
   branches/tmp/samba4-winsrepl/source/pidl/pidl
   branches/tmp/samba4-winsrepl/source/pidl/pidl.1.xml
   branches/tmp/samba4-winsrepl/source/script/build_idl.sh
   branches/tmp/samba4-winsrepl/source/scripting/ejs/smbcalls_ldb.c
   branches/tmp/samba4-winsrepl/source/scripting/libjs/provision.js
   branches/tmp/samba4-winsrepl/source/setup/provision
   branches/tmp/samba4-winsrepl/source/setup/provision.zone
   branches/tmp/samba4-winsrepl/source/torture/config.mk
   branches/tmp/samba4-winsrepl/source/torture/torture.c
   branches/tmp/samba4-winsrepl/swat/desktop/index.esp
   branches/tmp/samba4-winsrepl/swat/install/provision.esp
   branches/tmp/samba4-winsrepl/swat/scripting/client/desktop.js
   branches/tmp/samba4-winsrepl/swat/scripting/header_desktop.esp
   branches/tmp/samba4-winsrepl/swat/style/qooxdoo/layouts/application.css

Changeset:
Sorry, the patch is too large (12236 lines) to include; please use WebSVN to see it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=10254