summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2010-12-11Add documentation for "smb2 max credits".Jeremy Allison1-0/+15
Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Sat Dec 11 02:14:07 CET 2010 on sn-devel-104
2010-12-10Add a SMB2 crediting algorithm, by default the same as Windows. Defaults to ↵Jeremy Allison5-28/+163
128 credits. Jeremy.
2010-12-11heimdal: unset SLIST_ENTRY only if we are with windowsMatthieu Patou1-1/+3
This is needed because otherwise on some OS like netbsd,openbsd,MacOSX. The preprossessing of ./heimdal/lib/gssapi/mech/cred.h on this plateform is broken because mechqueue.h's definition won't be used as SLIST_HEAD is already defined. The definition occurs when net/if.h is included as it includes sys/queue.h Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sat Dec 11 00:34:51 CET 2010 on sn-devel-104
2010-12-10build: cpp is prefixed by CPP=Matthieu Patou1-1/+1
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Fri Dec 10 22:34:45 CET 2010 on sn-devel-104
2010-12-10build: add a function to test if -lc is neededMatthieu Patou2-0/+47
This is needed on openbsd as some linking flags makes mandatory to specify the libc for the linking
2010-12-10drsblobs.idl: remove nopython from package_PrimaryKerberosBlob related stuffStefan Metzmacher1-8/+8
This allows parsing and construction of the supplementatlCredentials attribute in python. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Dec 10 19:08:33 CET 2010 on sn-devel-104
2010-12-10pidl:Samba4/Python.pm: ignore "SUBCONTEXT" levelsStefan Metzmacher1-9/+21
These are only important for the NDR marshalling and not for the python bindings. metze
2010-12-10pidl:Samba4/Python.pm: don't handle scalar reference types specialStefan Metzmacher1-10/+9
The only special thing is that don't need get_value_of(), all other checks are needed. metze
2010-12-10build: compiler on aix is xlc_r not xlr_cMatthieu Patou1-1/+1
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Fri Dec 10 17:54:49 CET 2010 on sn-devel-104
2010-12-10build: reset cpp on host with xlr_c and let pidl use $CC -EMatthieu Patou1-0/+4
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Fri Dec 10 13:27:22 CET 2010 on sn-devel-104
2010-12-10s4-tests: Modified sec_descriptor.py to use the sd_utils helpers.Nadezhda Ivanova1-208/+171
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Fri Dec 10 11:03:28 CET 2010 on sn-devel-104
2010-12-10s4-tests: Modified acl.py to use the sd_utils helpers.Nadezhda Ivanova1-127/+86
2010-12-10s4-tests: Moved some commonly redefined security descriptor methods to a ↵Nadezhda Ivanova1-0/+79
utils class These methods are used in more than one testsuite now so they are now in a utility class instead of being defined everywhere.
2010-12-10build: detect if conf.env['CPP'] is an array or notMatthieu Patou1-1/+6
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Fri Dec 10 10:18:20 CET 2010 on sn-devel-104
2010-12-10waf: the libXX.inst.so file also depends on the vscriptAndrew Tridgell1-0/+4
this fixes a problem with installed libraries not relinking after a git version change Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Fri Dec 10 09:30:46 CET 2010 on sn-devel-104
2010-12-10s3-vfstest: fixed paths in vfstestAndrew Tridgell1-0/+2
vfstest tries to create /messages.tdb as loadparm has not been initialised
2010-12-10wintest flush DNS on Windows clients to improve reliablityAndrew Bartlett1-0/+2
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri Dec 10 08:45:28 CET 2010 on sn-devel-104
2010-12-10s3-dns Don't use DELEG_FLAG in DNS update, Windows 2008R2 does not like itAndrew Bartlett1-1/+1
2010-12-10s3-dns Don't use SEQUENCE_FLAG in DNS update, Windows 2008R2 does not like itAndrew Bartlett1-1/+1
Andrew Bartlett
2010-12-10wintest More work to make test-s3.py workAndrew Bartlett1-4/+17
- Set the password on the newly added 'root' user so we can connect with a user that exists in getpwnam() without further configuration - bind interfaces only so we don't conflict with other Samba instances - use the full DNS name for smbclient - don't connect to localhost (as we will be on ${INTERFACE_IP} only - Use the windows domain in the wbinfo command (winbindd won't take bare name here). - Register our IP address in DNS using 'net ads dns register' Andrew Bartlett
2010-12-10s3-net Allow 'net ads dns register' to take an optional hostname argumentAndrew Bartlett1-6/+10
This allows the administrator to more carefully chose what name to register. Andrew Bartlett
2010-12-10wintest Share more of the S4 test code with the s3 testAndrew Bartlett3-257/+298
This allows us to run a private BIND in the S3 test, and allows the S3 test to join a freshly provisioned AD instance if the VM isn't already configured. Andrew Bartlett
2010-12-10s3-winbind Improve memory handling in NTLMv2-backend plaintext authenticationAndrew Bartlett1-17/+6
Andrew Bartlett
2010-12-10s3-winbind Don't send the LM password to the server, everAndrew Bartlett1-11/+1
This is for the case where we have the plaintext password locally, and can construct the challenge-response values here. We should never ever use the LM password in domain authentication. The last domain controller to only have LM passwords stored was NT 3.5. Andrew Bartlett
2010-12-10s3-libsmb Don't ever ask for machine$ principals as a target.Andrew Bartlett1-30/+6
It is never correct to ask for a machine$ principal as the target of a kerberos connection. You should always connect via the servicePrincipalName. This current code appears to have built up from a series of minimal changes, as the codebase adapted the to lack of a SPNEGO principal from Windows 2008. Andrew Bartlett
2010-12-10s3-docs Add docs for 'client use spnego principal' and 'send spengo principal'Andrew Bartlett2-0/+56
Andrew Bartlett
2010-12-10s3-docs Explain change to NTLMv2 by default in the clientAndrew Bartlett1-6/+7
2010-12-10s3-client Use NTLMv2 by default in the Samba clientAndrew Bartlett1-2/+2
This matches the improved security measures of Windows Vista. Andrew Bartlett
2010-12-10s3-smbd Don't send SPNEGO principal (rfc4178 hint) by defaultAndrew Bartlett3-0/+15
This patch, based on the suggestion by Goldberg, Neil R. <ngoldber@mitre.org> turns off the sending of the principal in the negprot by default, matching Windows 2008 behaviour. This slowly works us back from this hack, which from an RFC perspective was never the right thing to do in the first place, but we traditionally follow windows behaviour. It also discourages client implmentations from relying on it, as if they do they are more open to man-in-the-middle attacks. Andrew Bartlett
2010-12-10s3-libads Default to NOT using the server-supplied principal from SPNEGOAndrew Bartlett4-6/+19
This principal is not supplied by later versions of windows, and using it opens up some oportunities for man in the middle attacks. (Becuase it isn't the name being contacted that is verified with the KDC). This adds the option 'client use spnego principal' to the smb.conf (as used in Samba4) to control this behaivour. As in Samba4, this defaults to false. Against 2008 servers, this will not change behaviour. Against earlier servers, it may cause a downgrade to NTLMSSP more often, in environments where server names are not registered with the KDC as servicePrincipalName values. Andrew Bartlett
2010-12-10subunitrun: Use unittest.TestProgram if subunit.TestProgram is notJelmer Vernooij2-27/+12
available. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Fri Dec 10 03:49:03 CET 2010 on sn-devel-104
2010-12-10s4-python: Add convenience function for forcibly importing bundledJelmer Vernooij2-4/+17
package.
2010-12-10subunitrun: Extend hack to cope with older system subunit run installs.Jelmer Vernooij1-0/+2
2010-12-10subunitrun: Remove global subunit module when reimporting from aJelmer Vernooij1-1/+6
different location.
2010-12-10s4-dist: Remove no longer existing files from blacklist (fixes 'makeJelmer Vernooij1-2/+1
dist' inclusion of configure)
2010-12-10s4-python: Fix use of bundled modules.Jelmer Vernooij1-1/+1
2010-12-10s4-python: Split up ensure_external_module.Jelmer Vernooij2-10/+23
2010-12-10selftest: Make sure system subunit.run has TestProgram.Jelmer Vernooij1-1/+1
2010-12-10smbtorture: Rename --list to --list-suites, add stub --list.Jelmer Vernooij4-13/+14
2010-12-10selftest: Check exit code when listing tests.Jelmer Vernooij1-0/+11
2010-12-10s4-selftest: Add convenience function for running testsuites usingJelmer Vernooij1-9/+17
subunitrun.
2010-12-10selftest: Allow discovering tests in pure python testsuites.Jelmer Vernooij1-2/+2
2010-12-10subunitrun: Support --list.Jelmer Vernooij1-3/+8
2010-12-10selftest: Rename $LIST to $LISTOPT for consistency with testrepository.Jelmer Vernooij1-2/+2
2010-12-10dnspython: Update to newer upstream snapshot.Jelmer Vernooij22-95/+1175
2010-12-10subunit: Update to newer upstream snapshot.Jelmer Vernooij8-16/+47
2010-12-10testtools: Import new upstream snapshot.Jelmer Vernooij36-367/+3694
2010-12-10selftest: add --list option.Jelmer Vernooij2-1/+25
2010-12-10selftest: Document --testenv in --help output, remove documentation forJelmer Vernooij1-1/+1
now obsolete --analyse-cmd.
2010-12-10pidl: use $CC -E if $CPP is not defined, if both undefined use cppMatthieu Patou1-2/+8
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Fri Dec 10 01:26:44 CET 2010 on sn-devel-104
generated by cgit (git 2.34.1) at 2024-12-17 19:17:14 +0000