summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2010-12-12s4:kdc/kpasswdd.c - don't return an uninitialised NT_STATUSMatthias Dieter Wallnöfer1-2/+1
Discovered by Tru64 build
2010-12-12build: change lib order to fix build on netbsdMatthieu Patou1-1/+1
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sun Dec 12 10:54:02 CET 2010 on sn-devel-104
2010-12-12build: add a check for _ss_family as it used on aix to replace ss_familyMatthieu Patou1-0/+2
2010-12-12replace: add comments to make the #ifdef/#else/endif more readableMatthieu Patou1-3/+3
2010-12-11selftest-s4: Support listing smbtorture4 tests.Jelmer Vernooij1-35/+46
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sat Dec 11 19:32:07 CET 2010 on sn-devel-104
2010-12-11selftest: Support multiple instances of $LISTOPT.Jelmer Vernooij1-1/+1
2010-12-11filter-subunit: Add --list argument.Jelmer Vernooij1-0/+10
2010-12-11smbtorture: Default to listing all tests if no prefix was specified.Jelmer Vernooij1-2/+6
2010-12-11smbtorture: Implement --list argument.Jelmer Vernooij1-10/+45
2010-12-11build: add more CFLAGS for aixMatthieu Patou1-1/+3
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sat Dec 11 18:09:23 CET 2010 on sn-devel-104
2010-12-11build: add a dependency on lib iconv for lib intl if we are not able to find itMatthieu Patou1-1/+12
This is due that on some platform lib intl depend on lib iconv, failling to provide this library cause waf to be unable to link with lib intl and makes it think that the library doesn't exists !
2010-12-11build: On AIX we need _XOPEN_SOURCE >= 500 for CLOCK_REALTIMEMatthieu Patou1-0/+3
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sat Dec 11 14:48:21 CET 2010 on sn-devel-104
2010-12-11libcli/echo: fix off by 1 crash bugStefan Metzmacher1-1/+1
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sat Dec 11 13:48:54 CET 2010 on sn-devel-104
2010-12-11s4:selftest: use correct name for the test "ECHO-UDP" => "echo.udp"Stefan Metzmacher1-1/+1
I wonder how commit 35fbc7bbda5851f7172538f79fc79be201f1d521 (s4-smbtorture: Make test names lowercase and dot-separated) ever passed make test. metze
2010-12-11libcli/echo: lowercase testsuite namesStefan Metzmacher1-2/+2
metze
2010-12-11s4-smbtorture: Make test names lowercase and dot-separated.Jelmer Vernooij137-749/+718
This is consistent with the test names used by selftest, should make the names less confusing and easier to integrate with other tools. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sat Dec 11 04:16:13 CET 2010 on sn-devel-104
2010-12-11talloc: Add ability to generate Python docs using pydoctor.Jelmer Vernooij2-0/+10
2010-12-11smbtorture: correct error handling in BASE-OPEN.James Peach1-71/+104
There are a number of cases in BASE-OPEN where an initial failure cascades into multiple failures due to lack of cleanup between test phases. Fix all these so that they close open file handles correctly. Replace torture_comment with torture_result where appropriate so that the results output contains a useful diagnostic. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Sat Dec 11 03:19:39 CET 2010 on sn-devel-104
2010-12-11Add documentation for "smb2 max credits".Jeremy Allison1-0/+15
Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Sat Dec 11 02:14:07 CET 2010 on sn-devel-104
2010-12-10Add a SMB2 crediting algorithm, by default the same as Windows. Defaults to ↵Jeremy Allison5-28/+163
128 credits. Jeremy.
2010-12-11heimdal: unset SLIST_ENTRY only if we are with windowsMatthieu Patou1-1/+3
This is needed because otherwise on some OS like netbsd,openbsd,MacOSX. The preprossessing of ./heimdal/lib/gssapi/mech/cred.h on this plateform is broken because mechqueue.h's definition won't be used as SLIST_HEAD is already defined. The definition occurs when net/if.h is included as it includes sys/queue.h Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sat Dec 11 00:34:51 CET 2010 on sn-devel-104
2010-12-10build: cpp is prefixed by CPP=Matthieu Patou1-1/+1
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Fri Dec 10 22:34:45 CET 2010 on sn-devel-104
2010-12-10build: add a function to test if -lc is neededMatthieu Patou2-0/+47
This is needed on openbsd as some linking flags makes mandatory to specify the libc for the linking
2010-12-10drsblobs.idl: remove nopython from package_PrimaryKerberosBlob related stuffStefan Metzmacher1-8/+8
This allows parsing and construction of the supplementatlCredentials attribute in python. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Dec 10 19:08:33 CET 2010 on sn-devel-104
2010-12-10pidl:Samba4/Python.pm: ignore "SUBCONTEXT" levelsStefan Metzmacher1-9/+21
These are only important for the NDR marshalling and not for the python bindings. metze
2010-12-10pidl:Samba4/Python.pm: don't handle scalar reference types specialStefan Metzmacher1-10/+9
The only special thing is that don't need get_value_of(), all other checks are needed. metze
2010-12-10build: compiler on aix is xlc_r not xlr_cMatthieu Patou1-1/+1
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Fri Dec 10 17:54:49 CET 2010 on sn-devel-104
2010-12-10build: reset cpp on host with xlr_c and let pidl use $CC -EMatthieu Patou1-0/+4
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Fri Dec 10 13:27:22 CET 2010 on sn-devel-104
2010-12-10s4-tests: Modified sec_descriptor.py to use the sd_utils helpers.Nadezhda Ivanova1-208/+171
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Fri Dec 10 11:03:28 CET 2010 on sn-devel-104
2010-12-10s4-tests: Modified acl.py to use the sd_utils helpers.Nadezhda Ivanova1-127/+86
2010-12-10s4-tests: Moved some commonly redefined security descriptor methods to a ↵Nadezhda Ivanova1-0/+79
utils class These methods are used in more than one testsuite now so they are now in a utility class instead of being defined everywhere.
2010-12-10build: detect if conf.env['CPP'] is an array or notMatthieu Patou1-1/+6
Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Fri Dec 10 10:18:20 CET 2010 on sn-devel-104
2010-12-10waf: the libXX.inst.so file also depends on the vscriptAndrew Tridgell1-0/+4
this fixes a problem with installed libraries not relinking after a git version change Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Fri Dec 10 09:30:46 CET 2010 on sn-devel-104
2010-12-10s3-vfstest: fixed paths in vfstestAndrew Tridgell1-0/+2
vfstest tries to create /messages.tdb as loadparm has not been initialised
2010-12-10wintest flush DNS on Windows clients to improve reliablityAndrew Bartlett1-0/+2
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri Dec 10 08:45:28 CET 2010 on sn-devel-104
2010-12-10s3-dns Don't use DELEG_FLAG in DNS update, Windows 2008R2 does not like itAndrew Bartlett1-1/+1
2010-12-10s3-dns Don't use SEQUENCE_FLAG in DNS update, Windows 2008R2 does not like itAndrew Bartlett1-1/+1
Andrew Bartlett
2010-12-10wintest More work to make test-s3.py workAndrew Bartlett1-4/+17
- Set the password on the newly added 'root' user so we can connect with a user that exists in getpwnam() without further configuration - bind interfaces only so we don't conflict with other Samba instances - use the full DNS name for smbclient - don't connect to localhost (as we will be on ${INTERFACE_IP} only - Use the windows domain in the wbinfo command (winbindd won't take bare name here). - Register our IP address in DNS using 'net ads dns register' Andrew Bartlett
2010-12-10s3-net Allow 'net ads dns register' to take an optional hostname argumentAndrew Bartlett1-6/+10
This allows the administrator to more carefully chose what name to register. Andrew Bartlett
2010-12-10wintest Share more of the S4 test code with the s3 testAndrew Bartlett3-257/+298
This allows us to run a private BIND in the S3 test, and allows the S3 test to join a freshly provisioned AD instance if the VM isn't already configured. Andrew Bartlett
2010-12-10s3-winbind Improve memory handling in NTLMv2-backend plaintext authenticationAndrew Bartlett1-17/+6
Andrew Bartlett
2010-12-10s3-winbind Don't send the LM password to the server, everAndrew Bartlett1-11/+1
This is for the case where we have the plaintext password locally, and can construct the challenge-response values here. We should never ever use the LM password in domain authentication. The last domain controller to only have LM passwords stored was NT 3.5. Andrew Bartlett
2010-12-10s3-libsmb Don't ever ask for machine$ principals as a target.Andrew Bartlett1-30/+6
It is never correct to ask for a machine$ principal as the target of a kerberos connection. You should always connect via the servicePrincipalName. This current code appears to have built up from a series of minimal changes, as the codebase adapted the to lack of a SPNEGO principal from Windows 2008. Andrew Bartlett
2010-12-10s3-docs Add docs for 'client use spnego principal' and 'send spengo principal'Andrew Bartlett2-0/+56
Andrew Bartlett
2010-12-10s3-docs Explain change to NTLMv2 by default in the clientAndrew Bartlett1-6/+7
2010-12-10s3-client Use NTLMv2 by default in the Samba clientAndrew Bartlett1-2/+2
This matches the improved security measures of Windows Vista. Andrew Bartlett
2010-12-10s3-smbd Don't send SPNEGO principal (rfc4178 hint) by defaultAndrew Bartlett3-0/+15
This patch, based on the suggestion by Goldberg, Neil R. <ngoldber@mitre.org> turns off the sending of the principal in the negprot by default, matching Windows 2008 behaviour. This slowly works us back from this hack, which from an RFC perspective was never the right thing to do in the first place, but we traditionally follow windows behaviour. It also discourages client implmentations from relying on it, as if they do they are more open to man-in-the-middle attacks. Andrew Bartlett
2010-12-10s3-libads Default to NOT using the server-supplied principal from SPNEGOAndrew Bartlett4-6/+19
This principal is not supplied by later versions of windows, and using it opens up some oportunities for man in the middle attacks. (Becuase it isn't the name being contacted that is verified with the KDC). This adds the option 'client use spnego principal' to the smb.conf (as used in Samba4) to control this behaivour. As in Samba4, this defaults to false. Against 2008 servers, this will not change behaviour. Against earlier servers, it may cause a downgrade to NTLMSSP more often, in environments where server names are not registered with the KDC as servicePrincipalName values. Andrew Bartlett
2010-12-10subunitrun: Use unittest.TestProgram if subunit.TestProgram is notJelmer Vernooij2-27/+12
available. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Fri Dec 10 03:49:03 CET 2010 on sn-devel-104
2010-12-10s4-python: Add convenience function for forcibly importing bundledJelmer Vernooij2-4/+17
package.
generated by cgit (git 2.34.1) at 2024-12-13 10:05:26 +0000