summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2007-10-10r13634: Fix typo.Günther Deschner1-1/+1
Guenther (This used to be commit cd569446a1bbfca08ff16a06b3af7bb94986a5ad)
2007-10-10r13633: Adding more SE_GROUP bits and make it a bitmask as well.Günther Deschner1-5/+11
Guenther (This used to be commit 8e939896822e9727919a49638c818a7d7faabb78)
2007-10-10r13632: The "password_properties" is a bitmask as well.Günther Deschner1-10/+12
Guenther (This used to be commit 0d918764b1f0c1aa65f826b9a845746c914f87df)
2007-10-10r13631: Add DOMAIN_PASSWORD_LOCKOUT_ADMINS (this bit only allows to lockoutGünther Deschner1-0/+1
Administrator, not Domain Admins in general). Guenther (This used to be commit abad44a57dfdf492f548c05a897af341ba0f5e68)
2007-10-10r13630: Add new ACB-bits as seen in acct_flags in the PAC info3Günther Deschner1-11/+17
(merge from Samba 3). Guenther (This used to be commit fa1127c5456fd112568e929e409953dcd3cb2e21)
2007-10-10r13629: export env-varsStefan Metzmacher1-0/+2
metze (This used to be commit fbd78b6272eaca4b89071139e4b34cbdd15ed644)
2007-10-10r13628: fix the logic:-)Stefan Metzmacher1-1/+1
metze (This used to be commit 7f1de54c84f86c292833c7e66ab2699ee4f83c52)
2007-10-10r13627: split the NBT-WINSREPLICATION tests into multiple testsStefan Metzmacher4-6/+76
metze (This used to be commit ae559920e1d227e4e787fe34d908a965b922b284)
2007-10-10r13626: fix make testStefan Metzmacher1-2/+0
metze (This used to be commit 2acf203949998f3ca2423a8535302a777accacb7)
2007-10-10r13624: as abartlet requested, move the saslauthd parsing stuff to a ↵Stefan Metzmacher3-17/+32
seperate file metze (This used to be commit 3c8bc98c1bc654287a3a16277c7c63c476ddfff4)
2007-10-10r13623: - make sure ntvfs_map_qfileinfo isn't used for async repliesStefan Metzmacher1-2/+14
- add some comments metze (This used to be commit e1611b622184b48d2cef1eff2646a09f9e691f9b)
2007-10-10r13621: add an idl structure to parse saslauthd requestsStefan Metzmacher1-0/+14
metze (This used to be commit d003654b1c1cbc00602e994b83f40fcfcf349596)
2007-10-10r13620: initialize the CMD with 0 tooStefan Metzmacher1-0/+1
metze (This used to be commit 7cf1423bc850aca93453d337b49ba593a034000d)
2007-10-10r13619: fix compiler warningStefan Metzmacher1-1/+1
metze (This used to be commit 7b284174aa36fdd5d6841dab4934f1f6ecfba4ce)
2007-10-10r13618: fix compiler warningStefan Metzmacher1-1/+1
metze (This used to be commit 252d5edfb5b4c2a32f943e881f19b61698e9662f)
2007-10-10r13617: fix compiler warningStefan Metzmacher1-1/+1
metze (This used to be commit 082f418fab867e1ca5ab9418514d5578a069eebb)
2007-10-10r13616: Add new ldb functions: ldb_msg_add_steal_string() andAndrew Bartlett4-8/+45
ldb_msg_add_steal_value(). These try to maintain the talloc heirachy, which must be correct otherwise talloc_steal operations of entire attribute lists fails. This fixes the currentTime value, found by using Microsoft's dcdiag tool (before this commit, it pointed to invalid memory, due to the changes in -r 13606) Andrew Bartlett (This used to be commit 424df1bb369fddcfd358cf26dd0da9d3851d181e)
2007-10-10r13615: Make ldb_set_errstring get ldb instead of module as parameter.Simo Sorce15-61/+77
The module was just used to get to the ldb so it was meningless. Also add LDB_WAIT_ONCE e relative code in ldb_ildap.c (This used to be commit d5b467b7c132b0bd4d23918ba7bf3370b1afcce8)
2007-10-10r13609: Get in the initial work on making ldb asyncSimo Sorce17-332/+845
Currently only ldb_ildap is async, the plan is to first make all backend support the async calls, and then remove the sync functions from backends and keep the only in the API. Modules will need to be transformed along the way. Simo (This used to be commit 1e2c13b2d52de7c534493dd79a2c0596a3e8c1f5)
2007-10-10r13606: An attempt to fix #3525.Andrew Bartlett2-13/+13
The problem was that the supportedControls were being stolen into the result sent to the client, then talloc_free()ed. This caused them to be invalid on the next rootDSE query. This also tries to avoid attaching the result to the long-term samdb context, and avoids an extra loop in the result processing (pointed out by tridge). Andrew BARtlett (This used to be commit d0b8957f38fda4d84a318d6121ad87ba53a9ddb3)
2007-10-10r13605: Use $BASEDN to ensure this works outside of the 'make test' rig.Andrew Bartlett1-1/+1
Andrew Bartlett (This used to be commit b0e7a58cc9e513240c117ad5464c613c7b62410d)
2007-10-10r13592: Incredible how bugs like this can sweep in even after peer review ↵Simo Sorce1-19/+22
and testing ... (This used to be commit 8483f61a1df0c80f3385b1ab5a2628c2a97d41a2)
2007-10-10r13584: Another try at SPNEGO stuff. I need to write a better testsuite for ↵Andrew Bartlett1-0/+23
this. This tries to ensure that when we are a client, we cope with mechs (like GSSAPI) that only abort (unknown server) at first runtime. Andrew Bartlett (This used to be commit cb5d18c6190fa1809478aeb60e352cb93c4214f6)
2007-10-10r13583: Realise that the member server name appears in all calls that use theAndrew Bartlett8-113/+74
credentials. Consistantly rename these elements in the IDL to computer_name. Fix the server-side code to always lookup by this name. Add new, even nastier tests to RPC-SCHANNEL to prove this. Andrew Bartlett (This used to be commit 341a0abeb4a9f88d64ffd4681249cb1f643a7a5a)
2007-10-10r13582: IndentAndrew Bartlett1-3/+3
(This used to be commit 06ddac2bb1899937b79e3bf89cb84c750c3ce4c5)
2007-10-10r13580: fix broken client side sortSimo Sorce1-1/+1
(This used to be commit cbbc0d7cc4f589235d209011bdb0a0401b492d9e)
2007-10-10r13577: Move some (possibly system-defined) defines to replace.hJelmer Vernooij2-16/+18
(This used to be commit 2b3d56e153b229119fddfa7b378f4d671ee0092c)
2007-10-10r13572: Comments to async pipe open functions and copyright note.Rafal Szczesniak1-10/+57
rafal (This used to be commit 7dde77942bfcb73dfdd7a9840d3ba2a984c05064)
2007-10-10r13568: Comments to async rpc connect functions.Rafal Szczesniak1-6/+55
rafal (This used to be commit 9ef2275f6179869f2683e96c6f91d9569a6360c8)
2007-10-10r13561: Turn all dcerpc connect and socket functions to async version.Rafal Szczesniak3-109/+517
Now, each rpc interface (named pipe, tcp/ip, lrpc and unix socket) works asynchronously. Comments to follow. rafal (This used to be commit 789f9d43db7ea59e79d5aa498e2e9fd077448825)
2007-10-10r13551: Add an accessor function for the user sid.Andrew Bartlett1-0/+5
Andrew Bartlett (This used to be commit 273cb8fd4288f7bf15e0bcad9f6a4cbf4f142b24)
2007-10-10r13516: We can't bind to both 0.0.0.0 and specific network interfaces at theAndrew Bartlett1-7/+0
same time. This was causing the kdc to shut itself down if 'bind interfaces only = no'. Andrew Bartlett (This used to be commit 02ff22a25050687478cfcca4dce35c2346cc2241)
2007-10-10r13508: some ASN.1 element in LDAP are optional,Stefan Metzmacher6-66/+137
make it possible to code the difference between a zero length and a NULL DATA_BLOB... metze (This used to be commit 54f0b19c55df8ad3882f31a114e2ea0e4cf940ae)
2007-10-10r13507: the 'data' element of LDAP controls is optional.Stefan Metzmacher4-0/+12
(prepare the next commit) metze (This used to be commit a1bbf7f2982185cb6cd544b65b4709ab33a850c5)
2007-10-10r13506: zero memory as some ASN.1 elements are optional, and we should ↵Stefan Metzmacher1-1/+1
initialize them for the internal use... found by 'make valgrindtest' metze (This used to be commit 1db9501c5261a974c6da1938537c7991ff6cfefd)
2007-10-10r13505: allow servers to bind to non-broadcast interfaces. Servers nowAndrew Tridgell4-23/+28
specifically ask for iface_n_bcast() and have to check if it returns NULL, in which case it is a non-broadcast interface (This used to be commit d004e250b6710251ea089ac242775481f13b5c2b)
2007-10-10r13504: add back in a comment noting fred as the contributor of the addressAndrew Tridgell1-0/+3
calculation code. This was originally done in 1997, and has been morphed a lot since then, but fred should still get credit (This used to be commit 172e41596fb3b4d2768d6885aea43295cc2f81c1)
2007-10-10r13481: As far as I can tell, my changes in -r 12863 were dangerously untested.Andrew Bartlett5-9/+74
We do need the gsskrb5_get_initiator_subkey() routine. But we should ensure that we do always get a valid key, to prevent any segfaults. Without this code, we get a different session key compared with Win2k3, and so kerberised smb signing fails. Andrew Bartlett (This used to be commit cfd0df16b74b0432670b33c7bf26316b741b1bde)
2007-10-10r13480: Explain a little about how these credentials structures should be used.Andrew Bartlett1-1/+16
Andrew Bartlett (This used to be commit b90959f7968ebbfc82ac55d4775d5574b1fc6925)
2007-10-10r13479: Return the joined domain SID and user SID as structures, not strings.Andrew Bartlett2-11/+11
Andrew Bartlett (This used to be commit e1de45bce47292eef1f9c56ea5576c0436e6151d)
2007-10-10r13472: After Volker's advise, try every combination of parameters. ThisAndrew Bartlett2-19/+26
isn't every parameter on NTLMSSP, but it is most of the important ones. This showed up that we had the '128bit && LM_KEY' case messed up. This isn't supported, so we must look instead at the 56 bit flag. Andrew Bartlett (This used to be commit 990da31b5f63f1e707651af8bf1a3241a8309811)
2007-10-10r13471: With more 'try all options' testing, I found this 'simple' but in theAndrew Bartlett1-1/+1
NTLM2 signing code. Andrew Bartlett (This used to be commit 16e5c968756c40b8595503da47a1adb9cb09c447)
2007-10-10r13470: Thanks to a report from VL:Andrew Bartlett4-25/+39
We were causing mayhem by weakening the keys at the wrong point in time. I think this is the correct place to do it. The session key for SMB signing, and the 'smb session key' (used for encrypting password sets) is never weakened. The session key used for bulk data encryption/signing is weakened. This also makes more sense, when we look at the NTLM2 code. Andrew Bartlett (This used to be commit 3fd32a12094ff2b6df52f5ab2af7c0ffceb5a4a0)
2007-10-10r13467: Add new parametric options (for testing) controlling LM_KEY and 56-bitAndrew Bartlett1-5/+13
encryption behaviour. Andrew Bartlett (This used to be commit 2b3b2f33a4c531f2b0f65521cc352e6d762e95bd)
2007-10-10r13466: Make it easier to understand what this function actually does.Andrew Bartlett1-5/+5
Andrew Bartlett (This used to be commit f075497926f3b8131bf8427ee3a3d5c9e5ee77d7)
2007-10-10r13405: Allow a fallback if SPNEGO is somehow disabled in the client, to ↵Andrew Bartlett1-1/+7
just NTLMSSP. Andrew Bartlett (This used to be commit 3e96975d910496db87e8e34e310f0f6d283210bf)
2007-10-10r13404: Comments, whitespace.Andrew Bartlett1-3/+4
Andrew Bartlett (This used to be commit 04e2fe8b6d293092af86a54215c1fa037bbb20e9)
2007-10-10r13403: Try to better handle a case where SPNEGO isn't available (allow us toAndrew Bartlett3-25/+34
emulate the behaviour of XP standalone if required). Andrew Bartlett (This used to be commit 7f821097fbdbc9f35d96e05f85cf008f36c0eea3)
2007-10-10r13402: Make Samba4 pass a nastier RPC-SCHANNEL test.Andrew Bartlett5-136/+235
The new RPC-SCHANNEL test shows that the full credentials state must be kept in some shared memory, for some length of time. In particular, clients will reconnect with SCHANNEL (after loosing all connections) and expect that the credentials chain will remain in the same place. To achive this, we do the server-side crypto in a transaction, including the fetch/store of the shared state. Andrew Bartlett (This used to be commit 982a6aa871c9fce17410a9712cd9fa726025ff90)
2007-10-10r13401: remove the rename of the snprintf functions that simo accidentiallyAndrew Tridgell1-4/+2
included in his last commit (This used to be commit 487b374b4359b2cb5f4e249e595c43bfa568a853)
generated by cgit (git 2.34.1) at 2024-12-14 13:03:27 +0000