summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2008-07-28auth/credentials: explain why we need to the enctypes for the gssapi layerStefan Metzmacher1-1/+11
metze (This used to be commit 88970c4d4192635544cf63e79e929e9bb05ecb5f)
2008-07-27Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into manpageJelmer Vernooij37-350/+1323
(This used to be commit 7e90cc197c4fb2884f368cd72f391d0d8016fb96)
2008-07-27Fix location of manpages.Jelmer Vernooij2-0/+0
(This used to be commit 6f5b4ef1d0380d265ce27c882072c759ce19c7c3)
2008-07-26gensec_gssapi: add support for signing RPC messagesStefan Metzmacher1-35/+12
metze (This used to be commit dc2847c0acb0adaede4db72a7517046b93221162)
2008-07-26lib/ldb/tools: allow -W and --realm when build from samba4Stefan Metzmacher1-0/+1
metze (This used to be commit 0aa6d63ec571b0ca05fbfe14d2b4e9ba3e1082e9)
2008-07-26auth/credentials: use the same enctypes when getting a TGT and a TGSStefan Metzmacher1-0/+23
metze (This used to be commit 9fc5750156467f579ea8d7755987d091f5b579c2)
2008-07-26dsdb: add a comment about the parameter to DSDB_EXTENDED_SCHEMA_UPDATE_NOW_OIDStefan Metzmacher1-0/+4
metze (This used to be commit 2f06fbe06be2e1b77ea013ddba853ce819e58e88)
2008-07-26dsdb/schema: make more clear where we create the value for the new prefix ↵Stefan Metzmacher1-0/+6
mapping metze (This used to be commit c92eb8b776c17f12622837daeb1786862f380269)
2008-07-26dsdb/schema: dsdb_write_prefixes_to_ldb() should do the reverse of ↵Stefan Metzmacher1-52/+44
dsdb_read_prefixes_to_ldb() metze (This used to be commit 34ea9d4a0b1270a27412bf939d7e897a5d68d0a6)
2008-07-26dcerpc.idl: add DCERPC_PFC_FLAG_SUPPORT_HEADER_SIGN flagStefan Metzmacher1-0/+1
metze (This used to be commit 131a1cfdc9a1228d9263c77bcd31b05d2946fd50)
2008-07-26mamachinepw: add better error handlingStefan Metzmacher1-4/+20
metze (This used to be commit 7ac424137f62ceacf44e477f4e3805267013005b)
2008-07-26Add "mymachinepw" to fetch our machine password out of secrets.ldbVolker Lendecke1-0/+45
(This used to be commit 4fbe16deb0e06e145f643568a699b80b431d4f42)
2008-07-26smbtorture: add --extra-user optionStefan Metzmacher1-1/+13
This can we used to pass additional credentials to torture tests (it can be used multiple times. metze (This used to be commit 4d80dbfac27659046e0986a2af3d06999e2cb2f2)
2008-07-25Define HAVE_ASM_BYTEORDER at all timesBrad Hards1-2/+4
(This used to be commit 396ea14732d667960091f4a2570341059914ecb6)
2008-07-25Per feedback, remove epoch and ldconfig requires.Andrew Bartlett1-14/+9
See https://bugzilla.redhat.com/show_bug.cgi?id=453083 (This used to be commit 97d02730e8fde56de27aeb51612a4777c2953c9f)
2008-07-25Make a new define to ensure the accoc_group_id we use is always in common.Andrew Bartlett1-2/+4
(This used to be commit b62490e3e21b606b66e0737a403b0d170b64cddd)
2008-07-25Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-localAndrew Bartlett24-290/+1140
(This used to be commit b12dd8ee5443ebfc204d1684f541d68ffb351197)
2008-07-25Try to avoid a memory leak if we re-set the global schemaAndrew Bartlett1-0/+9
However, try also not to pull a schema out from under a running ldb session. Andrew Bartlett (This used to be commit 7cf9b9dd0bb35835a7c6e9897ea99951a33c63c7)
2008-07-25Complain if we are told to use an ldap backend, without the typeAndrew Bartlett1-0/+2
(This used to be commit e9c3c9ad8289ee48efa998ab6b486250dcd40b52)
2008-07-25Clarify how we are doing the 'this is a rootdse query' check.Andrew Bartlett1-1/+2
(This used to be commit 8dfba3160cc4bc518f3ad8570d104e5baae784ca)
2008-07-24hdb-ldb: fix the callers after drsblobs.idl changesStefan Metzmacher1-45/+30
metze (This used to be commit 1223cd17c79d130b46b0e0ccb0f6011c92441173)
2008-07-24password_hash: fix the callers after drsblobs.idl changesStefan Metzmacher1-33/+41
metze (This used to be commit fac7c79afae05a88ecc2a63c8eb9f2fd53ab7ce6)
2008-07-24drsblobs.idl: unify the Primary:Kerberos and Primary:Kerberos-Newer-Keys structsStefan Metzmacher1-29/+18
metze (This used to be commit 4b79a7678571ac2f7d5f827913fdcb419f5d2e20)
2008-07-24drsblobs.idl: give some unknowns a meaningStefan Metzmacher1-9/+11
metze (This used to be commit 231e6f5ab2dc8a3e991a9872be252cffff6f14c6)
2008-07-24Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-testAndrew Tridgell38-387/+1326
(This used to be commit 24309dbf4d9622fcfafa29ef98bc0459fdaa814b)
2008-07-24we can't query the ACL on a new file till it exists!Andrew Tridgell1-6/+6
(This used to be commit 4f6646f06988b1fb8be9e0c8ae833bb9792184af)
2008-07-24initialise query_maximal_access here tooAndrew Tridgell1-0/+1
(This used to be commit 4b3af09450cf33c6785a3d8fddddc68047f2e388)
2008-07-24make sure we initialise query_maximal_accessAndrew Tridgell1-0/+1
(This used to be commit 036f73d39a7ef882fd76afcd3c11eef483f6c308)
2008-07-24fixed spelling errorAndrew Tridgell1-1/+1
(This used to be commit 341f64834e13cdbc7d4742a4652ae39b70a4231f)
2008-07-24dsdb_create_prefix_mapping() implementation checks for existing prefix ↵Anatoliy Atanasov1-36/+257
maping in ldb. if one not found it creates a mapping for it and updates the prefixMap schema attribute in ldb. (This used to be commit bbe895db7144b192981fad9ab6bbd3ebacb8d299)
2008-07-24Handle schema reloading request.Anatoliy Atanasov4-4/+158
The ldif for that operation looks like this: dn: changetype: Modify add: schemaUpdateNow schemaUpdateNow: 1 It uses the rootdse's object functional attribute schemaUpdateNow. In rootdse_modify() this command is being recognized and it is send as extended operation with DSDB_EXTENDED_SCHEMA_UPDATE_NOW_OID. In the partition module its dispatched to the schema_fsmo module. The request is processed in the schema_fsmo module by schema_fsmo_extended(). (This used to be commit 39f9184ddf215f2b512319211c0a05702218ef87)
2008-07-24fixd a bug in the signal handling code - we could get phantom signalsAndrew Tridgell1-5/+5
(signum 64) (This used to be commit af7fb2e38ba27cf8058eb1cef1f96bbc7b19849f)
2008-07-23libnet_become_dc: send msDS_Behavior_Version == 3 (win2k8) in DsAddEntryMichael Adam2-1/+2
instead of version 2 (win2k3). This makes the NET-API-BECOME-DC test work against windows 2003 and 2008. Michael (This used to be commit a7bfa1fb1bc6fb8e412990b7ff4c3ce9bc55099d)
2008-07-23libnet_become_cd: add boolean option "become_dc:force krb5" to control krb5 ↵Michael Adam1-10/+18
auth. This allows controlling whether krb5 auth is forced for the rpc bind in libnet_become_dc. It defaults to "yes". For Windows 2000, DsGetNCChanges only krb5 auth works due to a bug in Windows (it returns garbage - a positive object count is returned along with first object == NULL). For Windows 2008, on the other hand, krb5 auth does not work currently due to the lack of support for AES keys. (Metze is working on that.) Michael (This used to be commit af85aad8147b85a0b9ea2ccc66b8f04efdfe5cf3)
2008-07-23drsuapi: always set the pid field of the outgoing DsBindInfo to 0.Michael Adam3-8/+3
This is for debugging and informational purposes only. The assignment is implementation specific. (WSPP docs, sec. 5.35). Michael (This used to be commit 1f5704e2dee5900e8d1d87699b76f67c0e12854e)
2008-07-23libnet_unbecome_dc: teach unbecomeDC_drsuapi_bind_recv() DsBindInfo48.Michael Adam1-0/+9
..to work agains w2k8. Michael (This used to be commit 97e8d5813df19cae294b6de2a880606f0f8c2c59)
2008-07-23libnet_become_cd: teach becomeDC_drsuapi_bind_recv() DsBindInfo48.Michael Adam1-0/+9
To work with w2k8. Michael (This used to be commit 7d80fab912576923c7474d77b8ed960b01296914)
2008-07-23dsdb: teach dreplsrv_out_drsuapi_bind_recv() knowledge of DsBindInfo48.Michael Adam1-0/+9
To make it work against w2k8. Michael (This used to be commit a8aea9274170a2b472c45c97a4904bd299d2a92e)
2008-07-23password_hash: add generation of the Primary:Kerberos-Newer-Keys blobStefan Metzmacher1-3/+216
But it's still of by default until we now what triggers this generation. It could be that the value is always generated but the KDC only uses it when in a specific funtional level, but it could also be that it's only generated in a specific functional level. metze (This used to be commit 08618bbd508ede0bb9e1922fae562cffdca41cbd)
2008-07-23hdb-ldb: try to find Primary:Kerberos-Newer-Keys and fallback to ↵Stefan Metzmacher1-16/+114
Primary:Kerberos Now provide AES tickets if we find the keys in the supplementalCredentials attribute metze (This used to be commit 8300259f103f8cfe014988fad0f7ee0d49bb1ac2)
2008-07-23drsblobs.idl: add idl for Primary:Kerberos-Newer-Keys blob in ↵Stefan Metzmacher1-0/+37
supplementalCredentials metze (This used to be commit 97b7901afbccc9647ad2958d4cf12300de2655d1)
2008-07-23password_hash: order the supplementalCredentials Packages in the same order ↵Stefan Metzmacher1-13/+55
like windows metze (This used to be commit ca9cd81a1798fb15195566422b3cad7c282fce89)
2008-07-23password_hash: split the generation of krb5 keys into a different functionStefan Metzmacher1-92/+69
metze (This used to be commit 4ad73a0bf8952783d3d9a7339c0c4fd8ca28981a)
2008-07-23password_hash: simplify the logic if we have cleartext we always generate ↵Stefan Metzmacher1-2/+2
the hashes metze (This used to be commit 5edff84429ef0d03b47a438e18861d26c97e17b6)
2008-07-23password_hash: fix callers after idl change for package_PrimaryKerberosStefan Metzmacher1-7/+0
metze (This used to be commit 1bf552856f3a930c4716ceb73d9ba9adf7502d3d)
2008-07-23drsblobs.idl: fix unknowns in package_PrimaryKerberos idlStefan Metzmacher1-6/+8
metze (This used to be commit da9ceb2bf17f964334d9317829d40483e2c04b10)
2008-07-23hdb-ldb: check the SUPPLEMENTAL_CREDENTIALS_SIGNATUREStefan Metzmacher1-0/+6
metze (This used to be commit 7219740ef434091617c6bb727374251987ff2a62)
2008-07-23password_hash: check the SUPPLEMENTAL_CREDENTIALS_SIGNATUREStefan Metzmacher1-2/+11
metze (This used to be commit 19b8c8e37bafab050ab61266c35006efada2947c)
2008-07-23drsblobs.idl: fix idl for supplementalCredentialsSubBlobStefan Metzmacher1-3/+8
metze (This used to be commit 24c5b10136f6e640832193aaf9e6d7e865c288bc)
2008-07-23password_hash: ignore reserved value, but still set it like windows doesStefan Metzmacher1-8/+4
metze (This used to be commit 5b860572686167d0291161f6597f143e538e2f3a)