summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2008-09-23s4-libcli: move nbt/netlogon helper functions up one level.Günther Deschner3-31/+32
Guenther
2008-09-23s3-build: let ctags/etags start from the toplevel dir.Günther Deschner1-2/+2
Guenther
2008-09-23S3 puts smb.conf and lmhosts in lib/, s4 into etc/Volker Lendecke1-4/+4
2008-09-23s4:lib/charset: add missing prototype of talloc_strdup_upper()Stefan Metzmacher1-0/+1
metze
2008-09-23fixed problem with ACLs with an empty DACL listAndrew Tridgell1-1/+14
2008-09-23Merge branch 'master' of ssh://git.samba.org/data/git/sambaAndrew Tridgell275-54129/+6214
2008-09-23selftest: run smb signing tests as part of make quicktestStefan Metzmacher1-0/+1
metze
2008-09-23selftest: test some smb signing combinations against the member serverStefan Metzmacher1-0/+40
metze
2008-09-23s4:smb_server: remove the bogus smbsrv_signing_restart()Stefan Metzmacher2-41/+2
Real signing always starts with seqnumber 2, and once signing is on the session key never change anymore for the complete smb connection. metze
2008-09-23libcli/smb_composite: for spnego session setups check the smb signature manuallyStefan Metzmacher1-23/+57
We need to start signing when we got NT_STATUS_OK from the server and manually check the signature of the servers response. This is needed as the response might be signed with the krb5 acceptor subkey, which comes within the server response. With NTLMSSP this happens for the session setup: request1 => BSRSPYL seqnum: 0 response1 => BSRSPYL seqnum: 0 request2 => BSRSPYL seqnum: 0 response2 => <SIGNATURE> seqnum: 1 and with krb5: request1 => BSRSPYL seqnum: 0 response1 => <SIGNATURE> seqnum: 1 metze
2008-09-23libcli/raw: real signing starts at seqnumber 2Stefan Metzmacher1-0/+1
metze
2008-09-23libcli/raw: in SMB_SIGNING_ENGINE_BSRSPYL state it's ok to accept any signatureStefan Metzmacher1-0/+2
Even if signing is mandatory. With NTLMSSP this happens for the session setup: request1 => BSRSPYL response1 => BSRSPYL request2 => BSRSPYL response2 => <SIGNATURE> and with krb5: request1 => BSRSPYL response1 => <SIGNATURE> metze
2008-09-23libcli/raw: give the caller the chance to do the signing checks on its own.Stefan Metzmacher2-0/+10
metze
2008-09-23libcli/raw: give the caller the chance to prevent the talloc_free(req) in ↵Stefan Metzmacher2-1/+8
the _recv functions metze
2008-09-23gensec_krb5: only give away the session key, when the authentication is doneStefan Metzmacher1-0/+4
metze
2008-09-23gensec_gssapi: only give away the session key, when the authentication is doneStefan Metzmacher1-4/+5
metze
2008-09-23ntlmssp: only give away the session key, when the authentication is doneStefan Metzmacher1-0/+4
metze
2008-09-23RPC-PAC: loop in gensec_update() untill the server side is readyStefan Metzmacher1-5/+1
metze
2008-09-23s3-nbt: remove old samba3 libcli/nbt copy.Günther Deschner2-979/+0
Guenther
2008-09-23[s3]winbindd_group: don't list the domain twice when expanding internal aliasesMichael Adam1-1/+1
Before this, "getent group builtin\\administrators" expanded domain group members in the form DOMAIN\domain\user. Michael
2008-09-23[s3]winbindd_group: sanely handle NULL domain in add_member().Michael Adam1-1/+5
Michael
2008-09-23[s3]winbindd_ads: honour "winbind use default domain" in lookup_groupmem().Michael Adam1-9/+11
This fixes the output of "getent group" when "winbind use default domain = yes" with security = ads. Michael
2008-09-23[s3]winbindd_rpc: add domain prefix to username in lookup_groupmem().Michael Adam1-1/+4
This makes the output of "getent group" of a domain group show the domain prefix with "security = domain". Michael
2008-09-23[s3]winbindd_util: add fill_domain_username_talloc().Michael Adam1-0/+27
A talloc version of fill_domain_username(). Michael
2008-09-23[s3]winbindd_util: add prototype for fill_domain_username_talloc().Michael Adam1-0/+4
A talloc version of fill_domain_username(). Michael
2008-09-23[s3]winbindd: fix a comment typoMichael Adam1-1/+1
Michael
2008-09-23[s3]winbind_util: fix an implicit cast compile warning.Michael Adam1-1/+1
Michael
2008-09-23s3-nbt: fix remaining callers of ndr_push/pull_struct_blob.Günther Deschner8-15/+15
Guenther
2008-09-23s3-nbt: use ../libcli/nbt helper.Günther Deschner2-18/+1
Guenther
2008-09-23s3: re-run make idl.Günther Deschner1-1/+1
Guenther
2008-09-23s3-nbt: refer to ../libcli/nbt in nbt.idl.Günther Deschner1-1/+1
Guenther
2008-09-23s4-nbt: use ../libcli/nbtGünther Deschner10-14/+14
Guenther
2008-09-23s4-nbt: move libcli/nbt up one level.Günther Deschner8-149/+149
Guenther
2008-09-23s4-nbt: merge some fixes from samba3 nbt helper.Günther Deschner2-24/+24
Guenther
2008-09-23s4-nbt: use private_data instead of private.Günther Deschner19-57/+57
Guenther
2008-09-23s3: use samba4 prototype for ndr_push/pull_struct_blob.Günther Deschner8-25/+29
Guenther
2008-09-23s3: re-run make idl.Günther Deschner3-7/+13
Guenther
2008-09-23s3-nbt: fix nbt.idl in order to use shared nbt helper.Günther Deschner1-3/+3
Guenther
2008-09-23s3-charset: add smb_iconv_convenience.Günther Deschner1-0/+2
Guenther
2008-09-23s4-nbt: remove unrequired include.Günther Deschner1-1/+0
Guenther
2008-09-23s4: add talloc_strdup_upper.Günther Deschner1-1/+7
Guenther
2008-09-23test setinfo FULL_EA_INFORMATION in gentestAndrew Tridgell1-1/+8
2008-09-23added FULL_EA_INFORMATION setea callAndrew Tridgell2-1/+20
2008-09-23fixed a memory error in change notify handling in gentestAndrew Tridgell1-2/+1
2008-09-23fixed readonly handling in deltreeAndrew Tridgell2-1/+22
2008-09-22Merge branch 'master' of ssh://git.samba.org/data/git/samba into abartlet-develAndrew Bartlett9-1/+3756
2008-09-23added some debug codeAndrew Tridgell3-1/+5
2008-09-22Remove unused parameter from decode_pw_buffer and fail on invalidAndrew Bartlett3-13/+14
UTF-16 input The input checking is important, as otherwise we could set the wrong password. Andrew Bartlett
2008-09-22Remove unused variableAndrew Bartlett1-2/+0
2008-09-23Fix make pch in the merged buildVolker Lendecke1-1/+3