Age | Commit message (Collapse) | Author | Files | Lines |
|
(This used to be commit 9adacb0d1620d4cfadd515239b853977cf03a719)
|
|
(This used to be commit ce6257b316bc66a3fc554487099976a853d25ddd)
|
|
(This used to be commit 1f35642bed1129d0834906b3e94e8868992d6eb9)
|
|
remember --enable-develop for now).
(This used to be commit f385753a5224282dd2c228115622a6eb80624a5a)
|
|
bug was being silently ignored with the tdb backend because of this
bug. A case where the ldap backend was right, and the tdb backend was
wrong!
(This used to be commit ddb26db763c314049043d80d27113226c0f2e656)
|
|
should not be handled here as well. I had to remove it from here as it
was buggy anyway (it wasn't setting the modify flags, this making an
invalid ldb_modify() request)
(This used to be commit f267e9d5b7b40c9c8bf1aa67a00f42e2d3bb3bc5)
|
|
"sam database"
set to the internal ldap server over loopback. The following happened:
- DCERPC_AUTH3 request
- auth requests calls ldb
- ldb calls ldap
- ldap calls our internal ldap server, triggering events
- samrConnect from client
- connect refused
- SMBclose from client
- causes dcerpc_pipe to be destroyed
- AUTH3 continues
- dies on freed pipe
I chose this solution as it provides a guarantee that backends only have to think about
async issues when they mark a request async. When they don't, this code guarantees that
a second request won't happen on the same connection while processing the first one
(This used to be commit 45487e8a1402c64d1c314befe8bd9f65587fd0d6)
|
|
the two-way
tree nature of the data structure. I think I've finally got it right
also added talloc_show_parents() for debugging
(This used to be commit 5760ed20eed509b0b6e09e78c942dd0f70350fa9)
|
|
(This used to be commit ee3fe42fb16821eedd564201d953042190f7826f)
|
|
the previous commit for the method.
(This used to be commit b0ad505510b9df8e7f05fb646046114eb6b997ed)
|
|
These provide a way to find a parent of a ptr that is of a given
type. I will be using this to find the event context in smbd, relying
on the fact that everything is a child of the top level event
context. I did look at the alternatives, and found that passing the
event context to just about every call in smbd was getting way too
complex (we need to get it to anything that can do a ldb operation, as
that can invoke ldap).
So this method avoids a global, and seems to work nicely
(This used to be commit bdb55c7a10a516b75652065e14f5acd09d24ab35)
|
|
server, using
ldapsrv:samdb option. This allows the following:
sam database=ldap://localhost
ldapsrv:samdb=tdb:///home/tridge/samba/samba4/prefix/private/sam.ldb
which allows us to test putting the sam on an ldap server using our
own ldap server. This is a great stress test for the ldap code.
(This used to be commit 40948ba3848e2cfd69ee5ef77031170a652e389b)
|
|
for use by backends.
Currently only EventContext is used in this way.
(This used to be commit 9fa21b245843371f7777682ee4e5b98e2925b4d0)
|
|
cover both
(This used to be commit 1a80ac6aa84ea547a64557f879a47556f477432d)
|
|
(This used to be commit 5e35c7a5512363a6f6028beb387dd4c9d94965c8)
|
|
(This used to be commit bc6bc84ef4ad3434c6cb8d94a8d7a105ad2fd8c2)
|
|
(This used to be commit 29edfb93829f1b940b741d001551e70e4380c830)
|
|
- added testing of extended search operations
(This used to be commit 2dc511b09cf1c912de140c07db64c9b151c3d23f)
|
|
(This used to be commit 8f5c2e8682795258a6361b9516a38a8fabdef150)
|
|
(This used to be commit 71ee6a1df542b95c61217de71e6f56b8ce9d81b5)
|
|
(This used to be commit e3e028a3626c37da08b69639ade5894f70eaf7d0)
|
|
(This used to be commit 97e4ba84fb4cf4b95270c5d49b6bb8a9a92feaac)
|
|
Don't consider ALL_OBJS as a standard subsystem.
(This used to be commit 6b9a12249f152e9c4635d4f6c7f3a1b885c78ec6)
|
|
I missed one spot in moving from hdb_ent_type to the
internal-to-hdb-ldb hdb_ldb_ent_type, which results in a
Kerberos: Server has invalid flag set -- krbtgt/....@....
on kinit.
Andrew Bartlett
(This used to be commit 2358e0c0e4f2a3db78a8db360abc296f98bcb549)
|
|
(This used to be commit ba41c0806afc065d4de15a51430676d35b9055db)
|
|
(This used to be commit 3bdf89b0f7521ca39d48dc4c32fe96971d4d60fd)
|
|
(This used to be commit fa1ab1982cb2ea49fc35d75fb32192fc1bea23cd)
|
|
to tridge for the idea on how to do this.
(This used to be commit fc099f24790367ea5b1e5e91085c9ddb8deb6dad)
|
|
(This used to be commit 13fc167211272f5dba3540202f5842573178b740)
|
|
(This used to be commit 818ae965afad37216d804aa630359d875794612e)
|
|
again.
Add NTLMv2 varients to the echo and session key tests.
Andrew Bartlett
(This used to be commit 544a38824e2b10c65e6f7ef0b373aa8575fa2cb1)
|
|
Session Setup code.
Add a mem_ctx argument to a few of the NTLMv2 support functions, and
add smb.conf options to control client NTLMv2 behaviour.
Andrew Bartlett
(This used to be commit 3f35cdb218a3dae08a05e77452ca9f73716ceb28)
|
|
password was entered. We would not use the results of the search in
any case.
Andrew Bartlett
(This used to be commit edeb908acaaaaab13bef4d2e3fae18d87c07af81)
|
|
(This used to be commit 1462da3b6d190eecfb82268e6f2f04a42d8d5298)
|
|
the problem with the ldap tests in 'make test'
(This used to be commit 56fe27623ce31015a5a14f176f1445f51d57b0b8)
|
|
(This used to be commit 51ea22db2df3a002de3779302cd455bfb2e3fec2)
|
|
connections on that port
(This used to be commit 30da6a1cc41308a16a486111887f45bcf598f064)
|
|
(This used to be commit 135c3367ff737246ea40030d3c852769666ff522)
|
|
- fixed some infinite loops in asn1.c
- ensure asn1 callers know if an error is end of buffer or bad data
- handle npending 0 in ldap server
(This used to be commit f22c3b84c8912ccd36e676a782b58f1841be8875)
|
|
rafal
(This used to be commit 345a71a08e74ddf959680615d51488f8e989cba1)
|
|
- got rid of the special cases for sasl buffers
- added a tls_socket_pending() call to determine how much data is waiting on a tls connection
- removed the attempt at async handling of ldap calls. The buffers/sockets are all async, but the calls themselves
are sync.
(This used to be commit 73cb4aad229d08e17e22d5792580bd43a61b142a)
|
|
- this involved changing the buffer handling in the ldap server quite a
lot, as it didn't handle partial packets at all
- removed completely bogus asn1_object_length() function. You can't
do that with BER/DER
(This used to be commit fed6f4cc6ceaf83aacb581499aeaf6af4ee8ddd2)
|
|
(This used to be commit 42d8a1a222430bd64962da7cc4ac0193b5c003f7)
|
|
(This used to be commit 023fc567badba38b87895ea73515b2ce0b703a8c)
|
|
(This used to be commit 3d60b3a8eea5ac6c35cf2e579ae12cef3dc1794e)
|
|
servers
can easily become tls enabled. This will be used to add support for ldaps
(This used to be commit 950500f603725349d2a0e22878e83dd1b5975f9f)
|
|
(This used to be commit a440133140a6adb5ea62d37690b9c4ae74dc6be0)
|
|
(This used to be commit cf17f90a83cf04815544c5408eb56d00546b3e88)
|
|
(This used to be commit fe2b77af2352f1964402a4286105916e990dc36f)
|
|
rafal
(This used to be commit ec29a1ffa7aec6f1822a92a8c62f5a0de51ec2ae)
|