summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2012-01-25auth/gensec_gssapi: sync gensec_gssapi_state with gse_contextStefan Metzmacher1-1/+2
Both use gss_krb5_lucid_context_v1_t now. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jan 25 10:22:31 CET 2012 on sn-devel-104
2012-01-25s3-gse: add GENSEC_FEATURE_NEW_SPNEGO detection in gensec_gse_have_feature()Stefan Metzmacher1-0/+55
metze
2012-01-25s3:build: require gss_krb5_export_lucid_sec_context() for ads supportStefan Metzmacher3-2/+21
This is needed to detect krb5 with aes for GENSEC_FEATURE_NEW_SPNEGO at runtime. metze
2012-01-25s3:smb2_sessetup: call set_current_user_info() and reload_services() on successStefan Metzmacher1-0/+11
This matches the smb1 code. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jan 25 08:39:35 CET 2012 on sn-devel-104
2012-01-25ldbedit: prevent a transaction warning on failureKelly Yeoh1-0/+1
if a modify fails then cancel the transaction to prevent a dangling transaction error Signed-off-by: Andrew Tridgell <tridge@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Jan 25 07:06:40 CET 2012 on sn-devel-104
2012-01-25Revert "s3:build: for now do not require ↵Stefan Metzmacher2-10/+9
gsskrb5_extract_authz_data_from_sec_context" This reverts commit 74abe369df26c58094a601dd6ff8c27c3d0b2b2a. Having gsskrb5_extract_authz_data_from_sec_context as symbol in the library is in indicator that gss_inquire_sec_context_by_oid() would work. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jan 25 05:26:14 CET 2012 on sn-devel-104
2012-01-25Revert "build: Add -lz to wbinfo to fix build on some hosts"Stefan Metzmacher1-1/+1
This reverts commit 88daf798fec56a99e5eb3aed67f3b58572d97d34. This is not needed as 5c88cfcc525290d0ad1c322401685c60c1abdf10 is the better fix, see https://bugzilla.samba.org/show_bug.cgi?id=8711 metze
2012-01-25s3: improve the code in the AES encryption.Matthieu Patou1-8/+8
Remove looping replace them by memcpy. Fix bug #8674 (Buffer overflow in vfs_smb_traffic_analyzer). Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Jan 25 03:12:14 CET 2012 on sn-devel-104
2012-01-25s3: Fix bug #8674.Jeremy Allison1-2/+1
Buffer overflow issue with AES encryption in samba traffic analyzer.
2012-01-25s4-torture: For authenticated users, add AUTHENTICATED USERS sidAmitay Isaacs1-0/+4
Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Wed Jan 25 01:36:02 CET 2012 on sn-devel-104
2012-01-25dlz_bind9: for authenticated user, set the AUTHENTICATED USERS sid in tokenAmitay Isaacs1-0/+5
2012-01-24s3: Remove a typedefVolker Lendecke1-3/+3
We have it in README.Coding to avoid typedef for structs, but I think it also applies to enums. Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Jan 24 22:45:50 CET 2012 on sn-devel-104
2012-01-24s3: Remove a typedefVolker Lendecke1-3/+3
2012-01-24s3: Add debug when a message is registeredVolker Lendecke1-0/+4
We've always had the corresponding deregister message Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Jan 24 15:27:51 CET 2012 on sn-devel-104
2012-01-24s3:registry: do not write empty value lists to registry.tdbGregor Beck1-0/+5
Signed-off-by: Michael Adam <obnox@samba.org> Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Tue Jan 24 13:54:09 CET 2012 on sn-devel-104
2012-01-24selftest: Add test for smbpasswd against pdb_samba4Andrew Bartlett1-4/+41
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Jan 24 11:05:09 CET 2012 on sn-devel-104
2012-01-24s3-passdb: Fix pdb_samba4 setting of plaintext passwordsAndrew Bartlett1-1/+9
We were setting a UTF8 password into the UTF16 clearTextPassword. Converting from CH_UNIX to CH_UTF16 should fix this. Andrew Bartlett
2012-01-24s3-passdb: Use DSDB_PASSWORD_BYPASS_LAST_SET flags in pdb_samba4Andrew Bartlett1-9/+9
2012-01-24dsdb: Allow DSDB_CONTROL_PASSWORD_BYPASS_LAST_SET_OID to be specified as a flagAndrew Bartlett2-0/+8
2012-01-24python: Change except: statement to except Exception:Amitay Isaacs9-15/+15
This way we only catch true exceptions and keyboard interrupts are not caught here. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Tue Jan 24 03:32:40 CET 2012 on sn-devel-104
2012-01-24autobuild.py: Catch only true exceptions in except statementAmitay Isaacs1-3/+3
sys.exit(0) raises systemExit which is caught in empty except: statement. This can change the exit status if except: condition is supposed to exit with different status value.
2012-01-24Another fix for bug #8556 - ACL permissions ignored when SMBsetatr is requested.Jeremy Allison1-5/+0
Remove erroneous check on FILE_WRITE_ATTRIBUTES when changing POSIX permissions - this isn't an attribute set call (unless you're storing attributes in POSIX permissions, which is not recommended). Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Tue Jan 24 00:44:24 CET 2012 on sn-devel-104
2012-01-23Another fix for bug #8556 - ACL permissions ignored when SMBsetatr is requested.Richard Sharpe1-0/+1
Prevent systems with "store dos attributes = yes" from overriding FILE_WRITE_ATTRIBUITES.
2012-01-23lib: use differing NTSTATUS and WERROR struct membersDavid Disseldorp1-2/+2
This allows the compiler to catch uses of incorrectly typed arguments for [NT_STATUS|W_ERROR]_IS_OK() and [NT_STATUS|W_ERROR]_EQUAL(). I.e. WERROR werr; werr = my_fn(); /* XXX returns WERROR type */ if (NT_STATUS_EQUAL(werr, NT_STATUS_OBJECT_NAME_COLLISION)) {
2012-01-23WERROR type variable being incorrectly checked with a NT_STATUS_IS_XDavid Disseldorp3-3/+3
type macro.
2012-01-22s3-spoolss: fix incorrect error check typeDavid Disseldorp1-1/+1
NT_STATUS_IS_OK used to check WERROR type. Autobuild-User: David Disseldorp <ddiss@samba.org> Autobuild-Date: Sun Jan 22 05:03:36 CET 2012 on sn-devel-104
2012-01-21Log short_princ instead of uninitialised filter.Michael Wood1-5/+6
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Sat Jan 21 13:06:35 CET 2012 on sn-devel-104
2012-01-21param: handle P_BYTES in more placesAndrew Bartlett2-0/+3
2012-01-21script/autobuild.py: cleanup on rebase failureStefan Metzmacher1-0/+2
We can improve this to generate logs.tar.gz later... metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sat Jan 21 11:29:58 CET 2012 on sn-devel-104
2012-01-21s3-libsmb: Always allow SMB_TRANS_ENC_GSS to be definedAndrew Bartlett1-4/+2
Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sat Jan 21 01:28:54 CET 2012 on sn-devel-104
2012-01-20s3-libsmb: Remove unused smb_tran_enc_state_gss and gssapi headersAndrew Bartlett1-15/+0
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-20s3-libsmb: use struct gensec_security directlyAndrew Bartlett4-20/+18
This is rather than via a now one-element union. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-20s3-libcli Change krb5 smb sealing to call via gensec and gensec_gseAndrew Bartlett5-487/+86
This also fixes the support for smb sealing with krb5 in make test, as this now relies on secrets.tdb rather than /etc/krb5.keytab. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-20s4:auth/gensec: make sure GSS_C_CONF_FLAG implies GSS_C_INTEG_FLAGStefan Metzmacher1-0/+1
metze
2012-01-20s3-gse: make sure GSS_C_CONF_FLAG implies GSS_C_INTEG_FLAGStefan Metzmacher1-0/+6
metze
2012-01-20s3-gse: implement fill_mem_keytab_from_[system|dedicated]_keytabStefan Metzmacher1-6/+234
metze
2012-01-20s3-gse: create memory keytab in gse_krb5_get_server_keytab()Stefan Metzmacher1-27/+25
The other functions just add entries to it. metze
2012-01-20s3-gse: fix SECRETS_AND_KEYTAB fallback in gse_krb5_get_server_keytab()Stefan Metzmacher1-6/+13
metze
2012-01-20s3:kerberos_verify: ads_dedicated_keytab_verify_ticket() only needs read accessStefan Metzmacher1-1/+1
metze
2012-01-20s3:smbd/proto.h: remove unused do_map_to_guest() prototypeStefan Metzmacher1-4/+0
metze
2012-01-20build: Add -lz to wbinfo to fix build on some hostsAndrew Bartlett1-1/+1
This is required after the rework of the object lists for gensec_gse Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri Jan 20 23:33:14 CET 2012 on sn-devel-104
2012-01-20s3: Fix the build on FreeBSD8Volker Lendecke1-5/+6
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Fri Jan 20 21:58:04 CET 2012 on sn-devel-104
2012-01-20s3:configure.in: move gss_wrap_iov check to the other function checksStefan Metzmacher1-1/+1
This also makes sure we search for it if it's in -lgssapi instead of -lgssapi_krb5 or -lgss. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Jan 20 20:23:13 CET 2012 on sn-devel-104
2012-01-20s3:configure.in: require gssapi for ads supportStefan Metzmacher1-0/+1
This matches the waf checks. metze
2012-01-20s3:configure.in: move krb5_set_real_time check to other function checksStefan Metzmacher1-2/+1
metze
2012-01-20s3:build: for now do not require gsskrb5_extract_authz_data_from_sec_contextStefan Metzmacher2-9/+10
We do not use it yet. metze
2012-01-20s3:configure.in: fix the shell logic in krb5 checksStefan Metzmacher1-1/+1
metze
2012-01-20torture: add spoolss overlapping driver deletion testsDavid Disseldorp1-1/+118
Signed-off-by: Andreas Schneider <asn@samba.org> Autobuild-User: David Disseldorp <ddiss@samba.org> Autobuild-Date: Fri Jan 20 18:20:14 CET 2012 on sn-devel-104
2012-01-20s3-spoolss: fix printer_driver_files_in_use() call orderingDavid Disseldorp1-8/+10
printer_driver_files_in_use() performs two tasks: it returns whether any of the files in the to-be-deleted driver overlap with other drivers, it also trims such files from the info structure passed in. In processing a DeletePrinterDataEx request with DPD_DELETE_UNUSED_FILES set, printer_driver_files_in_use() must be called to ensure files in use by other drivers are not removed. https://bugzilla.samba.org/show_bug.cgi?id=4942 Signed-off-by: Andreas Schneider <asn@samba.org>
2012-01-20torture: confirm printer driver file removalDavid Disseldorp1-1/+81
Signed-off-by: Andreas Schneider <asn@samba.org>