Age | Commit message (Collapse) | Author | Files | Lines |
|
I'm also worried this might cause loops, if we get a 'force password
change', and the prompter tries to 'deal with it'.
Andrew Bartlett
(This used to be commit 5bc10c4e472b45c5b5b0ea0c3dd100be6f4dabca)
|
|
http://lists.samba.org/archive/samba-technical/2005-October/043443.html)
(This used to be commit 7fffc5c9178158249be632ac0ca179c13bd1f98f)
|
|
main gensec_krb5_start and always ask for sequence numbers.
Andrew Bartlett
(This used to be commit 801cd6c6ffa96ac79eb425adf7c97eb2cfcbed4a)
|
|
(This used to be commit b70dd7a757e7341d90c89dffa7e1c4eab790020a)
|
|
(This used to be commit 3416a6d78f205f9d3fd73161cbed6dcd9c2bfdf8)
|
|
Andrew Bartlett
(This used to be commit ee9a93688d31d8da91b81e9b0f6fac3fa4894c13)
|
|
Andrew Bartlett
(This used to be commit 7e01ff11fdcd70b54e30b438076bf1293638c61e)
|
|
(This used to be commit 90cf4f8e1a1051a58635e126d56118701875bc5d)
|
|
Andrew Bartlett
(This used to be commit 3b6c9c7cbc1d5c4dd32d3c1db18ddbccbb8cf17a)
|
|
Andrew Bartlett
(This used to be commit 3810282a24b8aea36627f43321e76f34057e3135)
|
|
secureChannelType (non machine join records).
Andrew Bartlett
(This used to be commit 3dddf497ccf246af435e6e2802d8f3745f2e4fd3)
|
|
fired.
Andrew Bartlett
(This used to be commit df6a40c2d261804f1cd4feb24572135a4c62a802)
|
|
(This used to be commit b0f11d85214fe83a8ce738cfa597f5cf9f5d3897)
|
|
Andrew Bartlett
(This used to be commit b48c6df60c15ee6134a49d163bed90ea8b85550b)
|
|
authentication. This pulls the creating of the keytab back to the
credentials code, and removes the special case of 'use keberos keytab
= yes' for now.
This allows (and requires) the callers to specify the credentials for
the server credentails to GENSEC. This allows kpasswdd (soon to be
added) to use a different set of kerberos credentials.
The 'use kerberos keytab' code will be moved into the credentials
layer, as the layers below now expect a keytab.
We also now allow for the old secret to be stored into the
credentials, allowing service password changes.
Andrew Bartlett
(This used to be commit 205f77c579ac8680c85f713a76de5767189c627b)
|
|
header.
Andrew Bartlett
(This used to be commit a665b56085cbf89c6deaeef0deaed31fcbc07458)
|
|
Andrew Bartlett
(This used to be commit 24dbf3435277a51dd49c5e2189fc6655260eddf4)
|
|
(This used to be commit a432ba105cbf2ea7b9010365c0a7d1dcc9ff5f7f)
|
|
the client doesn't guess correctly on the mech to use. It must back
off and try the mech the server selected from the list.
I'm not particularly attached to our SPNEGO parser, so while I can't
easily use the SPNEGO application logic in Heimdal, I'm going to look
closely at using the asn1 routines to avoid some pain here.
Andrew Bartlett
(This used to be commit 929217387449270b60c3f825dca3b3cae5a4f9d1)
|
|
for netlogon as well) to change/set a user's password, given only
their SID.
This avoids the callers doing the lookups, and also performs the
actual 'set', as these callers do not wish any further buisness with
the entry.
Andrew Bartlett
(This used to be commit 060a2a7bcca6b58d50bc4e0930c13616742a55d3)
|
|
codepath) in DRSUAPI CrackNames.
Fix the NT4 account return value.
Andrew Bartlett
(This used to be commit 2513c02c64b489ebf167e33fdb4ac51ce8783c04)
|
|
(This used to be commit 12a800bc8541c4160a534d1edcaeb6774776e18d)
|
|
(This used to be commit 134e104c3ff39e5f3ebdaf9168df78a156490ed7)
|
|
to make sure that replicas from the same owner are blinding overwritten
in all cases
metze
(This used to be commit 466baf737aedf240ff372ab8e8c708299102d1fa)
|
|
metze
(This used to be commit 838323e58fe4e748a17100c4cd13788059dd12c6)
|
|
this...)
show the string in the debug output, and show it with
--option="dssync:print_pwd_blobs=yes"
metze
(This used to be commit 98c1e8e3df90c05691a12bb25357fd75da419c5c)
|
|
- add multihomed vs unique section
- update conflict handling for the above case
metze
(This used to be commit c043e56efd3d72cdd5b17c78512e12285c87f221)
|
|
- print "supplementalCredentials" also when --option="dssync:print_pwd_blobs=yes"
is used
abartlet: this field may contain the krb5 keys...
metze
(This used to be commit 26c69348ca3ae10128df9832f8b4d9c1024631e2)
|
|
find the file it tries to use (build/tests/ftruncroot.c) and the value
it defines is not used anywhere.
(This used to be commit 97bbf4a46035becaee50d242364146e3529cf631)
|
|
Config module instead of the configure-generated config.pm on case-insensitive
filesystems (MacOSX, OpenVMS)
(This used to be commit 47b8095a0a0e7f352860999df3b131cab3e8a2b9)
|
|
because
--user-sids required the extension to trusted domains.
Implement "winbind sealed pipes" parameter for debugging purposes.
Volker
(This used to be commit 3821a17bdb68b2f1389b5a150502c057d28569d2)
|
|
handle a UTF16 string in a uint8 array
metze
(This used to be commit d13315f3b135228febcbe9b99d3550363c21da81)
|
|
to our winsrepl server, but it handles only the simple cases (without merging)
and we still didn't apply records to our wins.ldb, we just print out what we would do
metze
(This used to be commit e4edeeaa0a808c6bcdf022eec1257e796c1c0700)
|
|
ACTIVE vs ACTIVE
ACTIVE vs TOMBSTONE
RELEASED vs ACTIVE
RELEASED vs TOMBSTONE
TOMBSTONE vs ACTIVE
TOMBSTONE vs TOMBSTONE
as it seems that is all we need to test,
and w2k3 only decides between ACTIVE and NON-ACTIVE (REALEASED or TOMBSTONE)
when it gets new replica objects
also I have removed all the extra test, we only test the worst cases now,
and this will make the algorithms more clear when you look at the output
of the NBT-WINSREPLICATION torture test
metze
(This used to be commit 7545e4e7160864f5feedd35cf90507e47d7cf469)
|
|
metze
(This used to be commit 62ddca0e1f3d7484b32df7f5a56eca4761289c00)
|
|
metze
(This used to be commit 891416b79eeec3d6c9391181f86b104b887774a2)
|
|
- disable special group vs. special group,
I need to look closer at this, as I'm getting strange timeouts
randomly, so the server might be doing some challegnes while
doing the merging of special group records, witch reaches
timeouts
metze
(This used to be commit 7479760cbf5fe818c31b7795dc43b413800a63bd)
|
|
metze
(This used to be commit d8e7e914bf29f7ae0b7cc1f47ea9f8cca210d8df)
|
|
metze
(This used to be commit ba2c100be6eb1d352df762d213fc197f11f69da5)
|
|
metze
(This used to be commit 0d948cf430f34757a17170cdd26ac6b87341a75f)
|
|
metze
(This used to be commit 9903a47151a96177e835ba45450ad12a2e969ee2)
|
|
metze
(This used to be commit 03a8ff89d0f40eed3a8e0f94d2e756d9c648b564)
|
|
metze
(This used to be commit ba1727623675def77d4bf3a9bf643f80c7e168c2)
|
|
(This used to be commit 55805b5ed9493160ff17c26d2e1361947f368707)
|
|
(This used to be commit 449cc714b882d6ebea3e1cbf92e204efba98b6cb)
|
|
- make sure we test the worst case,
so that we don't need to test everything...
- same ip(s) => not replace
- different ip(s) => replace
metze
(This used to be commit 4a22ce09b4cad7bb3d60e45f25fb19c36efb8dec)
|
|
the right
talloc context.
Volker
(This used to be commit 256cf928d786b2533953505aea20ec80a25c6929)
|
|
metze
(This used to be commit 13703b5c35e4473d0ab6b595f41f4cc35c18f81e)
|
|
metze
(This used to be commit 9a7689c745e9fa9f40c46fa041a502967fd93ccc)
|
|
- add unique vs. multi homed section
metze
(This used to be commit 7f8c26cd33a5dffd672d0995cf227177bc21a20e)
|