summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2011-12-29s4-gensec: Rename memory contexts in gensec_gssapi for greater clarityAndrew Bartlett1-16/+16
This should better follow the mem_ctx/tmp_ctx pattern used elsewhere in Samba. Thankyou Simo for the suggestion. Andrew Bartlett
2011-12-29s4-auth: Rename memory contexts for greater clarityAndrew Bartlett2-10/+10
This should better follow the mem_ctx/tmp_ctx pattern used elsewhere in Samba. Thankyou Simo for the suggestion. Andrew Bartlett
2011-12-29auth/kerberos: Rename memory contexts for greater clarityAndrew Bartlett1-34/+34
This should better follow the mem_ctx/tmp_ctx pattern used elsewhere in Samba. Thankyou Simo for the suggestion. Andrew Bartlett
2011-12-29s4-gensec remove auth_session dep from gensec_gssapi.cAndrew Bartlett1-1/+1
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Dec 29 05:37:11 CET 2011 on sn-devel-104
2011-12-29s4-gensec Remove fallback for simple privilegesAndrew Bartlett1-6/+2
This makes the dependencies simpler, as this code path is no longer required. (That is, it makes no sense to have an NTLM login without an auth context, and the gensec_gssapi and gensec_krb5 modules call the PAC blob function below instead). Andrew Bartlett
2011-12-29s4-torture: Demonstrate handling of the PAC in a custom auth_contextAndrew Bartlett3-62/+85
This demonstrates how a different function pointer can be supplied to handle the PAC blob, without depending on the provisioned samdb etc. Andrew Bartlett
2011-12-29s4-gensec: Pass the auth context in during gensec testAndrew Bartlett1-2/+3
2011-12-29s4-pyauth: Make sure event context allows nestingAndrew Bartlett1-1/+2
2011-12-29s4-gensec: Move parsing of the PAC blob and creating the session_info into authAndrew Bartlett9-169/+248
This uses a single callback to handle the PAC from the DATA_BLOB format until it becomes a struct auth_session_info. This allows a seperation between the GSS acceptor code and the PAC interpretation code based on the supplied auth context. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Dec 29 01:10:59 CET 2011 on sn-devel-104
2011-12-29s4-gensec: fix cyrus sasl module after update() protype changeAndrew Bartlett1-0/+1
2011-12-29auth/kerberos: Make pac_data_out in kerberos_decode_pac() optionalAndrew Bartlett1-3/+32
2011-12-28s4-auth Remove unused auth_context_create_from_ldb()Andrew Bartlett2-27/+0
2011-12-28s4-gensec: Allow a PAC to be obtained from any GSS mechAndrew Bartlett1-7/+0
This may allow Luke Howard's moonshot to work with a little less effort at some point in the future. Andrew Bartlett
2011-12-28auth/kerberos: Move gssapi_parse.c to the top levelAndrew Bartlett4-10/+12
This will help with writing a gensec module for the s3 gse layer. Andrew Bartlett
2011-12-28credentials: Always honour the return value of E_deshash()Andrew Bartlett1-4/+2
When this returns false, the hash value is not correct as the password could not be converted into an uppercase, 14 char or less ASCII string. Andrew Bartlett
2011-12-28s4-ntlmssp Do not allow LM key without a LM passwordAndrew Bartlett1-3/+5
2011-12-28s3-auth Fix talloc parent for s4 event context in auth_samba4Andrew Bartlett1-1/+1
2011-12-28s3-auth: Remove protype for already-removed auth_ntlmssp_startAndrew Bartlett1-1/+0
2011-12-28gensec: Allow an alternate set of modules to be specifiedAndrew Bartlett3-2/+12
This will allow s3 to specify modules to use as a list, rather than needing to start the individual module with gensec_start_mech_by_ops() Andrew Bartlett
2011-12-25lib/charset: Remove an unused variableVolker Lendecke1-0/+2
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Sun Dec 25 15:07:56 CET 2011 on sn-devel-104
2011-12-25s3: Fix fn signatures in charset_macosx.cVolker Lendecke2-6/+6
2011-12-25s3: Fix a 64-bit warningVolker Lendecke1-1/+1
2011-12-25s3: Fix linking on LionVolker Lendecke1-0/+8
We are using CoreFoundation functions in charset_macosx.c. We need to link against that.
2011-12-25tdb: Use tdb_parse_record in tdb_update_hashVolker Lendecke1-11/+15
This avoids a tdb_fetch, thus a malloc/memcpy/free in the tdb_store path
2011-12-25tdb: Use tdb_parse_record in tdb_update_hashVolker Lendecke1-12/+16
This avoids a tdb_fetch, thus a malloc/memcpy/free in the tdb_store path
2011-12-25libreplace: Don't check for standards.h on darwin (Lion)Volker Lendecke1-2/+10
standards.h on Lion holds a #warning that standards.h will be removed. This is annoying during the build.
2011-12-25Fix bug #8679 - recvfile code path using splice() on Linux leaves data in ↵Jeremy Allison1-3/+2
the pipe on short write Bug found and fix suggested by Andrew Bartlett. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Sun Dec 25 07:46:38 CET 2011 on sn-devel-104
2011-12-23lib: Fix NT_STATUS_ALL_SIDS_FILTERED definitionVolker Lendecke1-1/+1
This seems to be more in line with all the other NT_STATUS definitions. Metze, please check. Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Fri Dec 23 23:19:17 CET 2011 on sn-devel-104
2011-12-23s3:lib/ctdbd_conn: try ctdbd_init_connection() as rootStefan Metzmacher1-0/+2
ctdbd_traverse is only called if the main db_context is already open. So if we could get to information via dbwrap_fetch, we should also be able to traverse. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Dec 23 18:19:14 CET 2011 on sn-devel-104
2011-12-23s4:torture/rpc/netlogon.c - factor out the computer name check in an own testMatthias Dieter Wallnöfer1-11/+61
This check is by no ways specific to "DsRGetSiteName" and hence it should be factored out in an own function. Samba at the moment does not implement the expected behaviour so I have added the "torture_skip" action. Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Dec 23 12:17:48 CET 2011 on sn-devel-104
2011-12-23s4:netlogon RPC server - dcesrv_netr_DsRGetSiteName - add a small explainationMatthias Dieter Wallnöfer1-0/+5
NETLOGON pipe is only thought for DCs. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-12-23s4:libcli/finddcs_nbt.c - free "req" consistently with "finddcs_cldap.c"Matthias Dieter Wallnöfer1-2/+4
It is more obvious to free where the context for the first time appears. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-12-23ldb:ldb_tdb.c - fix warnings in "ltdb_init_rootdse"Matthias Dieter Wallnöfer1-7/+1
We should ignore the LDB result. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-12-23s4:drsuapi/getncchanges: the default for isRecycled is FALSEStefan Metzmacher1-1/+1
metze Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Fri Dec 23 09:30:09 CET 2011 on sn-devel-104
2011-12-23s4-drsuapi: we store boolean in upppercase so we need to test them in uppercaseMatthieu Patou1-4/+4
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-12-23s4-kcc: Remove also deleted objects that are not in the Deleted Object containerMatthieu Patou2-2/+38
For the configuration container we do a full scan at every run of the kcc-delete service. For the base DN we introduce a new parameter that avoid the full scan to kick just when samba starts. Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-12-23s4-ldb: Add isRecycled when is defined in the schemaMatthieu Patou1-3/+9
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-12-23s4:rpc-dnsserver: Set the rank for the new DNS record correctlyAmitay Isaacs1-0/+8
Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Fri Dec 23 07:56:34 CET 2011 on sn-devel-104
2011-12-23test:dnsserver: Add zone creation and deletion testAmitay Isaacs1-0/+51
2011-12-23samba-tool:dns: Fix a typoAmitay Isaacs1-1/+1
2011-12-23samba-tool:dns: Add zone create/delete commandsAmitay Isaacs1-0/+85
2011-12-23ldif-handler: Fix the case for attribute dnspropertyAmitay Isaacs1-1/+1
2011-12-23s4:rpc-dnsserver: Add commentsAmitay Isaacs1-0/+7
2011-12-23s4:rpc-dnsserver: Make sure that zone information is filled inAmitay Isaacs1-0/+10
This fixes the problem of NULL zone in zone operations when specific zone is specified and no zone filter is specified.
2011-12-23s4:rpc-dnsserver: Implement zone management RPC operationsAmitay Isaacs3-2/+436
- ZoneCreate operation to create zone. - DeleteZoneFromDs operation to delete zone When a zone is deleted, all the records in that zone are also deleted.
2011-12-23s4:rpc-dnsserver: Add multiple DNS records in a single operationAmitay Isaacs1-11/+16
This allows to add dnsNode objectclass with multiple DNS records in a single operation. Useful for creating @ record which has NS and SOA records.
2011-12-23s4:rpc-dnsserver: Use handy macros for error checkingAmitay Isaacs1-11/+3
2011-12-23s4:rpc-dnsserver: Implement DirectoryPartitionInfo RPC operationAmitay Isaacs3-1/+151
2011-12-23s4:rpc-dnsserver: Fix the enumeration of DNS recordsAmitay Isaacs1-0/+10
If a node has data and children, do not return the children unless the node is the top level node.
2011-12-23s4:rpc-dnsserver: Use cached zone information to get rootserversAmitay Isaacs1-9/+6
This removes the hardcoded search for DC=RootDNSServers, and uses the cached zone information.