summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2008-08-13Rework the trustAuthInOutBlob with the help of a hand parser.Andrew Bartlett5-26/+224
This produces a C structure that is sane, while still parsing the wire blobs (as far as I can tell). Andrew Bartlett (This used to be commit b5dbe815e5dd3f865c7735bc76e02017a869f09b)
2008-08-13Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-localAndrew Bartlett4-24/+206
(This used to be commit 0819922a0c7f48c2517d3572f98cd1359749c4ae)
2008-08-12gensec_gssapi: add support for GENSEC_FEATURE_NEW_SPNEGOStefan Metzmacher1-0/+25
metze (This used to be commit 9246924effd4d0b08ca1ef87e45ad510020df93e)
2008-08-12gensec_gssapi: fix compiler warningsStefan Metzmacher1-2/+2
metze (This used to be commit f4f4bb7fe977301e468ab164ba750b69d9a92306)
2008-08-12gensec_gssapi: add a function to load the lucid structure onceStefan Metzmacher1-15/+44
metze (This used to be commit daa986d1d04e59550bb5d33b5075daa414d087ba)
2008-08-12gensec: add support for new style spnego and correctly handle mechListMICStefan Metzmacher3-7/+135
metze (This used to be commit 05a3403967d3cf64bca8b06536dc1b20cf835396)
2008-08-12Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-localAndrew Bartlett224-71/+54380
(This used to be commit ce7b1424c711949e6feb0181d3759133b77391ff)
2008-08-11dcerpc.idl: remove used DCERPC_MAX_SIGN_SIZEStefan Metzmacher1-1/+0
metze (This used to be commit 54b873e49ff363609632fa2862208bf6b4c1b6ed)
2008-08-11rpc_server: correct the chunk_size depending on the signature sizeStefan Metzmacher2-6/+14
metze (This used to be commit 20fc0d7bfdaa60d6a8ac939dc64733a91652587e)
2008-08-11librpc/rpc: correct the chunk_size depending on the signature sizeStefan Metzmacher1-4/+13
metze (This used to be commit 50eb0e726405580dc5ca3a8a3b15f3bd674f722a)
2008-08-11dcerpc.idl: add DCERPC_AUTH_TRAILER_LENGTHStefan Metzmacher1-0/+2
metze (This used to be commit ce36448d74b0c6cdf8928e10c088bf0248a95cf7)
2008-08-08gensec_gssapi: use the correct signature size for cfx/rfc4121 style signaturesStefan Metzmacher1-1/+1
metze (This used to be commit fcabe24f96c9677146ca754a502f336c23050339)
2008-08-08gsskrb5: try to be compatible with windows for gss_wrap* and cfxStefan Metzmacher2-11/+39
The good thing is that windows and heimdal both use EC=0 in the non DCE_STYLE case, so we need the windows compat hack only in DCE_STYLE mode. metze (This used to be commit 0fa41a94e466d5e11bcf362ccd8ff41b72733d1a)
2008-08-08gensec_gssapi: use gsskrb5_get_subkey() to get the session keyStefan Metzmacher1-3/+3
This is needed to get the correct key, when aes keys are used. metze (This used to be commit 7587a7d8b65f27a5865d6873f63a450488da02c9)
2008-08-08krb5: always generate the acceptor subkey as the same enctype as the used ↵Stefan Metzmacher1-0/+3
service key With this patch samba4 can use gsskrb5_get_subkey() to get the session key. metze (This used to be commit dbb94133e0313cae933d261af0bf1210807a6d11)
2008-08-08gsskrb5: add support for DCE_STYLE and des and des3 keysStefan Metzmacher2-22/+64
Only the des keys are tested as windows doesn't support des3 metze (This used to be commit 86848dd0f217774faed81af8fbf68618013e20a1)
2008-08-08Always set a session key, even for the 'no password' case.Andrew Bartlett1-0/+2
This is for bug 5664 reported by Tom <hto@arcor.de>. Andrew Bartlett (This used to be commit b345c9cf535af35c83da040ac965d9690dc802fe)
2008-08-08Clarify commentAndrew Bartlett1-2/+2
(This used to be commit 580cce9de38ddd9d59b272b58caadce528321d09)
2008-08-08We can't use ndr_pull_struct_blob_all in combinatin with relative pointersAndrew Bartlett1-3/+4
(This used to be commit d0a128f35b259d4891edc68fc24aa04a6da7aab7)
2008-08-08More work towards trusted domain support in the KDC.Andrew Bartlett1-25/+93
(This used to be commit c87d732b23ad7de8dc2f824bf11c9310fb4184e1)
2008-08-08We can't use ndr_pull_struct_blob_all in combinatin with relative pointersAndrew Bartlett1-3/+4
(This used to be commit 931890e028da8da756b7c7c62e2552a9fc04f7bc)
2008-08-07lib: prepare the build of zlibStefan Metzmacher4-0/+33
metze (This used to be commit 159df68c04c9ae437ab48991154e91161ef72754)
2008-08-07zlib: add inflateReset2()...Stefan Metzmacher3-3/+28
metze (This used to be commit 2a4fb661d7e3d601a5eb9ccecb4d4f2b07073097)
2008-08-07import of zlib-1.2.3Stefan Metzmacher200-0/+54035
We want to use zlib for the mszip ndr (de)compression later, we'll need to add some new functions to zlib. metze (This used to be commit 65c9e91a1bb24851a030a304d011558562cc50d6)
2008-08-07drsuapi: fix callers after idl changeStefan Metzmacher3-3/+3
metze (This used to be commit 7dee6fb62d5adbd2eaaaf4d8ba9e87a72ef9f94b)
2008-08-07drsuapi.idl: directly use mszip in level 2Stefan Metzmacher1-7/+1
This fixes the push because the switch_level doesn't work otherwise because the pointer is the same as for the outer switch_level. metze (This used to be commit a4c81ee68c91b2d7a9abe668e8b23246c5c9b00d)
2008-08-07rpc_server: add support for DCERPC_PFC_FLAG_SUPPORT_HEADER_SIGNStefan Metzmacher3-1/+14
you need "dcesrv:header signing=yes" to enable it. metze (This used to be commit bde2496e6b7034c99243b22434a97aebeb8f75b9)
2008-08-07librpc/rpc: add support DCERPC_PFC_FLAG_SUPPORT_HEADER_SIGNStefan Metzmacher4-1/+35
You can trigger it like this: ncacn_ip_tcp:172.31.9.234[sign,hdrsign] or ncacn_ip_tcp:172.31.9.234[seal,hdrsign] metze (This used to be commit 54f1fca582b1474693b5ee11b7b847086d27f75f)
2008-08-07librpc/rpc: pass struct dcerpc_pipe to dcerpc_auth3()Stefan Metzmacher2-6/+9
metze (This used to be commit 60b3523da485d845b1d930d990688d8434d39ef3)
2008-08-07gensec_gssapi: add support for GENSEC_FEATURE_SIGN_PKT_HEADERStefan Metzmacher1-4/+82
This only works for sign/verify_packet() yet, seal/unseal_packet() doesn't work yet... metze (This used to be commit c62e5d23a69789d23516a6d150fd3b756e270998)
2008-08-07gensec: add GENSEC_FEATURE_SIGN_PKT_HEADER flagStefan Metzmacher1-0/+1
metze (This used to be commit d7dfdbaf34843cb6783d8e686e659c53c5ac27ef)
2008-08-05Start implementind domain trusts in our KDC.Andrew Bartlett1-7/+33
Andrew Bartlett (This used to be commit 8aba7c36231e58a91fbc6b4fc24c5693353aeef9)
2008-08-01Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into manpageJelmer Vernooij11-10/+122
(This used to be commit 8e201ecf3e86c3c8865c7276fad8dad07106efaf)
2008-08-01Add helper object Hostconfig to make it easier to get to e.g. theJelmer Vernooij3-3/+39
SAM database. (This used to be commit be75b2a36ee49f66ada3ec3ababa82d74085d559)
2008-08-01heimdal: add experimental --enable-external-heimdalStefan Metzmacher3-1/+78
This should only be used for testing and when you're absolutly sure the installed heimdal libraries support the features we need. (E.g. heimdal-1.2 or lower should NOT work) metze (This used to be commit 66b76b018d6048cec63a75b24ec4c099f6a2eb8c)
2008-08-01libreplace: include <krb5.h> and <com_err.h> and no heimdal specific headersStefan Metzmacher2-4/+14
metze (This used to be commit cffed8e19e22a1fa7b7a322b153df5d54e4c3be2)
2008-08-01auth/kerberos: remove dependencies to internal heimdalStefan Metzmacher2-2/+1
metze (This used to be commit ed0fc19ac6a1194e6fd9a6534cbf7453fa870066)
2008-08-01heimdal_build/internal: add some useful definesStefan Metzmacher1-0/+6
metze (This used to be commit b9727d612bd2e9cf67ca2d4a9c60dc13d4bed5be)
2008-08-01heimdal: fix dependencyStefan Metzmacher1-0/+1
metze (This used to be commit 9e8b95dc8d577ea33504f0fb463d4648393e045b)
2008-08-01lib/crypto: remove dependency to internal heimdalStefan Metzmacher1-2/+21
metze (This used to be commit 9138fc6639fae7a5567c395254277199c89b0dcb)
2008-08-01build: remove warning about missing generated include fileStefan Metzmacher1-1/+1
metze (This used to be commit 495d068df55a94d48f2a4d2e7f2060fb42f66dbd)
2008-08-01Use new style python classes.Jelmer Vernooij9-12/+27
(This used to be commit 2a39aae0cef310a79427feb1b85f6794ea36849a)
2008-08-01Move domain DN determination out of newuser function.Jelmer Vernooij1-6/+9
(This used to be commit cbac27e6faa99ebaa3e6d653017c968db836560a)
2008-08-01Actually fix missing substitution variables.Jelmer Vernooij1-4/+10
(This used to be commit 783412ecb27d646b171993da0ac2f11a821901d3)
2008-08-01Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into manpageJelmer Vernooij274-3749/+10633
(This used to be commit c87a8ba1fef1ba508ad6527d0bae4bcdd5b3cb69)
2008-08-01Fix some forgotten substitute variables in provision, add check to prevent ↵Jelmer Vernooij1-0/+2
this sort of regression in the future. (This used to be commit a461118f3b668779f907c4d77cebe1e76fa4e39f)
2008-08-01kdc: use mostly only public kerberos headersStefan Metzmacher4-8/+11
We shoule avoid using the private heimdal function _krb5_principalname2krb5_principal() metze (This used to be commit 10db07c69addce6e90851fb55738d5f9e142946b)
2008-08-01auth/kerberos: we don't need to include heimdal private headersStefan Metzmacher1-2/+0
metze (This used to be commit 6ec3887aee9bbb9c182ab966d37212edeaa16b5a)
2008-08-01gensec_gssapi: include <gssapi/gssapi.h>Stefan Metzmacher1-1/+1
metze (This used to be commit 49e01d00bded74190c8e3049ac5883fe211e86fd)
2008-08-01heimdal_build: we should only use PRIVATE_DEPENDENCIESStefan Metzmacher1-19/+7
metze (This used to be commit 694f5124a523538117bf5d35be1a2d4f275ad0c2)