summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2012-01-06ntlmssp: merge initial packet implementationsAndrew Bartlett2-14/+46
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-06s3-winbindd: convert cached credentials to use auth_generic/gensec for NTLMSSPAndrew Bartlett1-33/+46
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-06s3-torture convert smb2 test to use auth_generic/gensec for NTLMSSPAndrew Bartlett1-67/+101
Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Jan 6 12:09:12 CET 2012 on sn-devel-104
2012-01-06s3:SMB2-SESSION-RECONNECT: also expect NETWORK_NAME_DELETED is signing isn't ↵Stefan Metzmacher1-1/+2
used metze
2012-01-06s3-libads Use NTLMSSP via auth_generic/gensecAndrew Bartlett1-90/+79
This allows us to use the shared gensec_wrap() implementation already used by the smb sealing code, as well as making this code more generic. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-06s3-libsmb Make auth_ntlmssp client more genericAndrew Bartlett5-55/+81
As well as renaming, this allows us to start the mech by DCE/RPC auth type or OID. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-06s3-libsmb Use gensec_settings to set s3 ntlmssp client backendAndrew Bartlett1-2/+10
This prepares us for making the code generic to multiple mechansims Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-06s3-auth Rename make_auth_ntlmssp() -> make_auth_gensec()Andrew Bartlett1-5/+5
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-06Fix compile when TDB_TRACE is enabled.Ira Cooper1-1/+1
Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Jan 6 04:16:41 CET 2012 on sn-devel-104
2012-01-06Add a sys_get_number_of_cores() function that calls sysconf or sysctlJeremy Allison5-4/+66
and tunes the aio threads.
2012-01-06samba-tool:dns: Check through all the DNS records for a matchAmitay Isaacs1-16/+16
There can be multiple dns records for a specified record type. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Fri Jan 6 02:41:22 CET 2012 on sn-devel-104
2012-01-06s4-rpc:dnsserver: Do not replace @ with zone_name in update operationAmitay Isaacs1-1/+6
This fixes the problem when updating DNS record for '@' or domain name.
2012-01-06Fix bug #8687 - net memberships usage info is wrongJeremy Allison1-1/+1
Typo in usage. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Jan 6 00:30:20 CET 2012 on sn-devel-104
2012-01-05Fix the local-memcache test for 64-bitVolker Lendecke2-2/+1
The memcache test walks the purge functionality. The maximum memcache size also takes all memcache internal headers into account. Those headers contain pointers, so on 64-bit they take more space... Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Thu Jan 5 22:01:00 CET 2012 on sn-devel-104
2012-01-05s3: Run the CLEANUP2 testVolker Lendecke1-0/+1
2012-01-05s3: Add a test for proper brlock cleanupVolker Lendecke3-0/+89
We need to improve the server here. Maybe we should validate the brlock entry whenever we detect a read/write being blocked from locking? This is not our hot code path anyway, and it would gain us significant robustness. The code might become quite a bit simpler as well.
2012-01-05s3: Clarify what CLEANUP1 doesVolker Lendecke1-1/+2
2012-01-05Add some debug to vfs_aio_pthread so I can see when jobs start and stop.Jeremy Allison1-0/+16
Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Thu Jan 5 20:28:00 CET 2012 on sn-devel-104
2012-01-05s3-auth remove outdated commentAndrew Bartlett1-3/+0
Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Jan 5 18:51:47 CET 2012 on sn-devel-104
2012-01-05s3-librpc remove unused headersAndrew Bartlett1-2/+0
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3-auth Remove more unused headersAndrew Bartlett1-3/+0
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3-auth remove unused ntlmssp.hAndrew Bartlett2-2/+0
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3-auth Remove ntlmssp_wrap.h which is no longer requiredAndrew Bartlett9-10/+1
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3-auth use gensec directly rather than via auth_generic_stateAndrew Bartlett12-144/+112
This is possible because the s3 gensec modules are started as normal gensec modules, so we do not need a wrapper any more. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3-auth Set remote address for both AD and s3 gensec modesAndrew Bartlett1-2/+0
2012-01-05s3-auth re-create the auth context in the s3 ntlmssp server moduleAndrew Bartlett5-70/+8
This removes the abstraction violation in auth_generic.c. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3-auth Add TALLOC_CTX * to auth_generic_prepare()Andrew Bartlett7-20/+15
This makes the long term owner of this memory more clear. So far only the clear cases have been moved from NULL however. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3-auth supply s3 ntlmssp module via gensec_settingsAndrew Bartlett1-24/+11
This will allow the supply of multiple modules in future without duplicating the module selection logic. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3-selftest: Add test for rpcclient, including kerberos authenticationAndrew Bartlett3-1/+38
Some knownfail entries are added for things the currently fail. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3:gse: MIT krb5 1.8.1 has a bug in gss_wrap_iov()Stefan Metzmacher1-1/+1
gss_krb5int_make_seal_token_v3_iov() doesn't set '*conf_state'. metze
2012-01-05s3-librpc store the sign/seal flags we got in the gssapi clientAndrew Bartlett1-1/+1
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3-libads Factor out a new routine ↵Andrew Bartlett4-48/+69
kerberos_get_principal_from_service_hostname() This is now used in the GSE GSSAPI client, so that when we connect to a target server at the CIFS level, we use the same name to connect at the DCE/RPC level. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3-librpc Use gsskrb5_get_subkey() where available to get the session keyAndrew Bartlett2-0/+16
This allows gse_get_session_key() to work against Heimdal. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3: Remove some redundant codeVolker Lendecke1-5/+0
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Thu Jan 5 17:16:45 CET 2012 on sn-devel-104
2012-01-05s3: Run the CLEANUP1 testVolker Lendecke1-0/+1
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Thu Jan 5 14:42:43 CET 2012 on sn-devel-104
2012-01-05s3: Add a test excercising the share mode cleanup routineVolker Lendecke5-0/+73
2012-01-05libcli/smb: Add smbXcli_conn_samba_suicideVolker Lendecke2-0/+105
This is a pure test tool against Samba servers
2012-01-05s3: Move basic SMB checking to a much earlier pointVolker Lendecke1-19/+19
2012-01-05s3: Add a suicide mode to smbdVolker Lendecke1-0/+11
To test our cleanup code paths properly, we need a way to make smbd exit hard without cleaning up
2012-01-05s3: Fix some nonempty blank linesVolker Lendecke1-3/+3
2012-01-05s4:repl_meta_data LDB module - set "isRecycled" time correctlyMatthias Dieter Wallnöfer1-9/+8
"unix_to_nt_time()" which is based on "time_t" behaves differently for literals > 32 bit on 32 and 64 bit platforms. Reviewed-by: ekacnet Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Thu Jan 5 11:59:20 CET 2012 on sn-devel-104
2012-01-05Add S3 vfs_aio_pthread module to replace broken glibc aio code.Jeremy Allison5-0/+659
Compiles but not yet tested. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Thu Jan 5 01:43:51 CET 2012 on sn-devel-104
2012-01-05waf: Use git repository.Jelmer Vernooij1-1/+1
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Thu Jan 5 00:10:24 CET 2012 on sn-devel-104
2012-01-04Include waf as an extracted source directory, rather than as a one-in-a-file ↵Jelmer Vernooij79-17/+18127
script.
2012-01-04s4:pyrpc: add 'user_session_key' getter to the connection objectStefan Metzmacher2-1/+45
This gets the session key from gensec for usage in DRSUAPI. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jan 4 22:31:52 CET 2012 on sn-devel-104
2012-01-04s4:pygensec/tests: check that the client and server have the same session keyStefan Metzmacher1-1/+4
metze
2012-01-04s4:pygensec: add session_key() methodStefan Metzmacher1-0/+29
metze
2012-01-04LDAP-CLDAP: demonstrate that pdc name is not an unc pathStefan Metzmacher1-0/+9
For LOGON_SAM_LOGON_RESPONSE_EX and LOGON_SAM_LOGON_USER_UNKNOWN_EX, pdc name is not in unc path form. [MS-ADTS] 7.3.1.* uses UnicodeLogonServer, which seems to be in unc form, while NetbiosComputerName is not in unc form. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jan 4 20:06:14 CET 2012 on sn-devel-104
2012-01-04s4:torture/nbt/dgram.c - NBT samlogon requests don't return the PDC name as ↵Matthias Dieter Wallnöfer1-0/+5
UNC path Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-04s4:cldap_server/netlogon.c: it is wrong to specify "\\" in front of the hostnameStefan Metzmacher1-2/+6
For LOGON_SAM_LOGON_RESPONSE_EX and LOGON_SAM_LOGON_USER_UNKNOWN_EX, pdc name is not in unc path form. [MS-ADTS] 7.3.1.* uses UnicodeLogonServer, which seems to be in unc form, while NetbiosComputerName is not in unc form. Bases on a patch from Matthias Dieter Wallnöfer <mdw@samba.org>. metze