Age | Commit message (Collapse) | Author | Files | Lines |
|
module is perhaps not the most efficient, but I think it is
reasonable.
This should restore operation of MMC against Samba4 (broken by the
templating fixes).
Andrew Bartlett
(This used to be commit 41948c4bdbfca1160a01a92994324f9e22422afe)
|
|
using pre-calculated passwords for all kerberos key types.
(Previously we could only use these for the NT# type).
The module handles all of the hash/string2key tasks for all parts of
Samba, which was previously in the rpc_server/samr/samr_password.c
code. We also update the msDS-KeyVersionNumber, and the password
history. This new module can be called at provision time, which
ensures we start with a database that is consistent in this respect.
By ensuring that the krb5key attribute is the only one we need to
retrieve, this also simplifies the run-time KDC logic. (Each value of
the multi-valued attribute is encoded as a 'Key' in ASN.1, using the
definition from Heimdal's HDB. This simplfies the KDC code.).
It is hoped that this will speed up the KDC enough that it can again
operate under valgrind.
(This used to be commit e9022743210b59f19f370d772e532e0f08bfebd9)
|
|
We need to add to the multivalued objectClass, not ignore it because
the user has already specified a value.
Also rename the template again.
This was caught by more stringent tests in the unicodePwd module, but
breaks MMC. A later commit will sort the objectClass.
Andrew Bartlett
(This used to be commit 0aaff059ba76c7eee86f37bfd74735c1c365d55f)
|
|
Andrew Bartlett
(This used to be commit a328acc8fa73703bba72b94084063906ec63cdc3)
|
|
Andrew Bartlett
(This used to be commit 2853ccfc8ad58c6af751e01487b8a9e7e68a01e7)
|
|
parameter. It isn't useful with so many other things in the ldap
server opening the database directly. Best to run this as a seperate
process, and change the global options.
Andrew Bartlett
(This used to be commit 34d6220cec763eefa9313f5a39ce7a73b238f7f0)
|
|
commits some of these that I know to be correct in the kerberos area.
Andrew Bartlett
(This used to be commit 6787b3737c27f5136152b007b0ee2ae314efac3c)
|
|
(This used to be commit ca8db1a0cd77682ac2c6dc4718f5d753a4fcc4db)
|
|
(This used to be commit 86fe24e606c72a21853b8f2cd0989bb1598ebf6a)
|
|
to run for 'make all'
(This used to be commit e71cd4778b9a872642619452e574f510e2491052)
|
|
metze
(This used to be commit 669009579dfe93b4d5008f93c2949dd4d929baf4)
|
|
to make it possible to add a static record for localhost or so...
- we already make sure we don't register 127.0.0.1 with our wins server,
so the check for loopback in the non-wins name queries is enough
metze
(This used to be commit f68a883daf4c792e95f7a4be9e7d00e82cc0517b)
|
|
metze
(This used to be commit 3b32d8b6b6565d8c5b3f7e653fdc385cc8cb96ef)
|
|
now completely to a new subsystem.
(This used to be commit bbacfaaea5819e0ecadf81e8fbb424916284c809)
|
|
(This used to be commit 33012dc015c837d4cbb61207ad8d3b5a8ad37c02)
|
|
(This used to be commit f75f757b621a46ea531c27ac682623829a4fdea7)
|
|
(This used to be commit 1c26c63c855120ef694f59980965faee3c6ccbc4)
|
|
(e.g. the pidl tests and tdbtests, tridge, jelmer can you look at this)
to not polute the source/ directory with a lot of files
metze
(This used to be commit 4636f9ee7d066f5e24393f94644dbf74c42b9039)
|
|
(This used to be commit 2e5a6eb219feab3208f63d727340a852bfdb0b3f)
|
|
this runs smbd under gdb in a xterm, and starts the quicktest
tests. Then you can set a breakpoint on an interesting place. This
makes it easier to track down where something is happening in the test
suite (I used it to find the NTLMSSP annoyance from the previous
commit)
(This used to be commit 2c3b7585c76d13107d1b0d31aebef961627cdbc3)
|
|
processing is finished
(This used to be commit ca6ae1afa0a8a105ab09199425f308c9ae85902f)
|
|
have to think about exactly what the right context to hang it of is.
Andrew Bartlett
(This used to be commit b1c8adcfe16c72252b0312e65676edcdbe472f09)
|
|
on success anyway. Instead, call the scripts directly.
(This used to be commit a83a38eab29cc289e53b1f9790a61e61d684f547)
|
|
(This used to be commit 2055f978214c1a2732433efe38ebc0fb70ec4e70)
|
|
were wrong, and we were using old gch files after include changes,
so safest to just rebuild when the user specifically asks for 'make
pch'
- fixed deps for includes.h so 'make pch' can work after a clean build
- changed 'make valgrindtest' to run valgrind on both client and
server binaries
(This used to be commit d39c749c71d66dd21e37cdaa75daaaeab5f4be0a)
|
|
(This used to be commit ad3b8286636f4101fa6528cb447aeeb7ee7507a4)
|
|
(This used to be commit 0aca5fd5130d980d07398f3291d294202aefe3c2)
|
|
Andrew Bartlett
(This used to be commit 31f65e510cdd46b1962cf06b3d51f152b1cecf37)
|
|
metze
(This used to be commit 4b90ad7a272b3cb976c2efc2c67b339519b1cd90)
|
|
Andrew Bartlett
(This used to be commit 6d8405038f0033439e1e24eb43c2b7990e01b70c)
|
|
domain joins to be agonisingly slow! The join is now instant, and
login is fast too
(This used to be commit 1b65713bbc4f44efee24b86900004a222028b733)
|
|
i guess this shows that MS clients ignore the port number in SRV replies
(This used to be commit ce070ef50f3aca6f911f6f51688d7cd9fc17ff67)
|
|
str_list_add()
- don't reply with 127.0.0.1 in NBT or WINS name queries unless the
query came in on the loopback interface. Otherwise clients can end
up talking to themselves, which is not very productive :-)
(This used to be commit df00f8b3428c6d1254e66275c90ae4025cb52c47)
|
|
Andrew Bartlett
(This used to be commit 2f54d7f774434f2a8b89ae01e993c4a1d16ce861)
|
|
with debugging!
Andrew Bartlett
(This used to be commit fe36cb6767ce99432e2778037aad334170dca173)
|
|
replication
(makes getting the wins config right much easier)
(This used to be commit 3016c7ee138d29973dfd093de6589a9a798750a7)
|
|
lookups in load_interfaces(). The reason was my eth0 interface was
down, and it was being interpreted as a DNS name.
This patch changes load_interfaces() to happening automatically when
interfaces are first needed instead of on the startup of every samba
binary. This means that (for example) ldbadd doesn't call
load_interfaces(), which means no slow DNS lookups.
I also reduced the number of static globals in interface.c to 1, and
changed from malloc to talloc
When you want to force a reload of the interfaces list, you now call
unload_interfaces(), which means the next call that needs the
interfaces list will reload it
(This used to be commit f79d90bd1364b970adb2981b2572e77066431f1e)
|
|
(This used to be commit 90129b081e5bda3c69c3f01f53704b5d34817605)
|
|
(This used to be commit 87f665a1d5ba74289974bf9d8f9441c162e6f1b1)
|
|
(note that this doesn't use the distinction between private
and public prototypes yet)
(This used to be commit 60e11f575821c1762b25ad66441b6e69ad1167ef)
|
|
Allow the use of {PRIVATE,PUBLIC}_PROTO_HEADER for [SUBSYSTEM]
and [LIBRARY] sections in .mk files. Public functions can be marked
by adding _PUBLIC_ between their return type and function name.
This should eventually make include/proto.h and include/structs.h obsolete.
(This used to be commit cdfd20fa17c5c4655689e8611e0106d5716b6995)
|
|
(This used to be commit 832a1092c9c11c293b5748e2e78da872fcba2a42)
|
|
(This used to be commit b46eeba9fcb059ef83743de8be7dab26f9ef21b2)
|
|
(This used to be commit 465b9738709e7415eab58ea773bd138e8f0f20d6)
|
|
Be a bit more strict when checking for duplicate interfaces
(This used to be commit b1286a6d27e2b5aa26f288f6aff70601b0d8ae74)
|
|
Avoids converting a static string to GUID every time we check whether
a transfer syntax is equal to that of NDR.
(This used to be commit 8dcfcaf75ab8cf4a54cf5e56f6be25acc68e3989)
|
|
back and
forth between GUID structs and strings in several places.
(This used to be commit 3564e2f967ef72d6301b4f7e9a311cebcded4d75)
|
|
(This used to be commit 2188168209f07bd87d90d7ff94e8b542ced68249)
|
|
dcerpc_interface_table struct rather then a tuple of interface
name, UUID and version.
This removes the requirement for having a global list of DCE/RPC interfaces,
except for these parts of the code that use that list explicitly
(ndrdump and the scanner torture test).
This should also allow us to remove the hack that put the authservice parameter
in the dcerpc_binding struct as it can now be read directly from
dcerpc_interface_table.
I will now modify some of these functions to take a dcerpc_syntax_id
structure rather then a full dcerpc_interface_table.
(This used to be commit 8aae0f168e54c01d0866ad6e0da141dbd828574f)
|
|
metze
(This used to be commit f03170cc52d8e196b878a3d3ddd2b8d0e633f487)
|