Age | Commit message (Collapse) | Author | Files | Lines |
|
metze
(This used to be commit 666e674504c514033390bf69746fb3c35baf4b2a)
|
|
metze
(This used to be commit e5671b75f2deab2d7979e5c394a942a511082f67)
|
|
- don't ignore CLDAP rootdse errors anymore
metze
(This used to be commit 712577d9e284445e9257b691aefb719511d6a57c)
|
|
metze
(This used to be commit 39dc94b219355ba774b309e26f1d93070d9d080b)
|
|
metze
(This used to be commit f4a6fade3a3113732ef66433c5739657f0bfdbee)
|
|
metze
(This used to be commit a0a45c3326560b9b31d0e17f1439d2638e91aee0)
|
|
map_attr_find_local() always returns, which is exactly what we don't
want. Instead, rely on the overwrite behaviour.
Andrew Bartlett
(This used to be commit 9b9b7bae16a635d9a9ba72d21a4a4718d294c9b0)
|
|
This seems to show up (as an abort() from talloc) particularly under
ldb_ildap.
Andrew Bartlett
(This used to be commit 9890af534d845d471d2a98268c408a907b29e016)
|
|
attributes to backend (remote) attributes.
We can't do a reverse mapping safely where the remote attribute may be
a source for multiple local attributes. (We end up with the wrong
attributes returned).
In doing this, I've modified the samba3sam.js test to be more
realistic, and fixed some failures in the handling of primaryGroupID.
I've added a new (private) helper function ldb_msg_remove_element() to
avoid a double lookup of the element name.
I've also re-formatted many of the function headers, to fit into
standard editor widths.
Andrew Bartlett
(This used to be commit 186766e3095e71ba716c69e681592e217a3bc420)
|
|
- and add some 'netlogon' attriubte related tests
metze
(This used to be commit d643c3cc5cd4547dbb7cead768993a9abee4e2eb)
|
|
servers
metze
(This used to be commit 463ed4c0040f52ef2b06337e122aac325ec01026)
|
|
the result entry is skipped!
metze
(This used to be commit 62aa73f3d56596780fc82fecbc99c688ecbf5b08)
|
|
metze
(This used to be commit 0a1ecb911656f8170708ce13e1183557fe118794)
|
|
metze
(This used to be commit 8a0a92e2dc107797055421196f430269699510fe)
|
|
metze
(This used to be commit fddcbf5d4cce77705be43956ea93895432b64aa1)
|
|
ldb_search_default_callback does the same...
metze
(This used to be commit 0edac60ec6f1e67de8e08f4e71e56b674915ad6e)
|
|
as it's ugly when it free's the callers memory on failure!
- only steal the controls on a LDB_REPLY_EXTENDED, LDB_REPLY_DONE
and ignore them on LDB_REPLY_ENTRY, LDB_REPLY_REFERRAL as we currently
have not way to return them in a ldb_result (we should fix this!)
metze
(This used to be commit 47da62b15abf48f97ce6fc8dc4627792728349ae)
|
|
metze
(This used to be commit 7a4f46c1c9ec8119db46ffc57d77fcf13ca0c5a8)
|
|
the Makefile)
- let 'make nss' work alone
metze
(This used to be commit 5685b6c8a267251bb21f2cc0e768b00f615e0f1b)
|
|
rafal
(This used to be commit 0f913ef240dd3117197df1272e88ac195cd8e399)
|
|
- use the client_site when creating the server object
metze
(This used to be commit b02d0e1be343c7d609715237dc842702b6fbe231)
|
|
metze
(This used to be commit fa439f5655654b044eabb4657989d476aa9f5ea9)
|
|
this also let wireshark match the responses
metze
(This used to be commit 9e52b0b9b59e2c8ee7b1242a191cc37e462842c1)
|
|
(This used to be commit 7b9b2e5358030aed5cb69dbc93d3175c9cac4455)
|
|
Andrew Bartlett
(This used to be commit 1c3e9b27a793971b096192204c54338b5e571521)
|
|
Andrew Bartlett
(This used to be commit 4c349f44f8a018e1ad6ed8e92c5083abc4979324)
|
|
lookup plugin, the new PAC validation code as well as Heimdal's SPNEGO
implementation.
Andrew Bartlett
(This used to be commit 05421f45ed7811697ea491e26c9d991a7faa1a64)
|
|
Create temporary directories in base directory.
(This used to be commit f111feb1d2b82a9ec3a8b6fbcdbe297bf11edc42)
|
|
(This used to be commit ff9e1b4f0634847d0db178b2c283865c4fb39c9b)
|
|
(This used to be commit 0953bb7d5f2f2a81688f5421e1fbfa3bc38aa810)
|
|
(This used to be commit 17c2557834aad8c85fb640054c942f99bbce1d94)
|
|
(This used to be commit 8768bec81f57131a0c9754e8121b345c0be4a5d0)
|
|
and only have private depdendencies
metze
(This used to be commit f37c9f4d920c1a2dc160ce1c26cf70fbb45c653f)
|
|
metze
(This used to be commit 30963753fcd9d8db17ca5c8476cc85b7084b7e87)
|
|
(This used to be commit dad9156db9d53c51d7785139576dddcde7e34c56)
|
|
interdependencies
with LIBSAMBA-CONFIG.
(This used to be commit 4a044fb529075044755a0b5cc21446bf24bec72e)
|
|
Fix starting tests in shared library build.
(This used to be commit 3b65a0d6e491a57ed216dc0cd9c31d46e0cb6a35)
|
|
libraries.
(This used to be commit 4422031d1d9307539832cee165c5071ff12943e7)
|
|
should _krb5_find_type_in_ad() also take a const?
metze
(This used to be commit addc31bd9309cb2b41cbb548c82c80de1cf96c4f)
|
|
support for netbios domain based realms
metze
(This used to be commit dcec6eebf1b474ae3055449efebf491b1106a458)
|
|
when the client is using the netbios domain name as realm.
we should match this and not rewrite the principal.
This matches what windows give:
metze@SERNOX:~/prefix/lorikeet-heimdal/bin> ./kinit administrator@SERNOXDOM4
administrator@SERNOXDOM4's Password:
metze@SERNOX:~/prefix/lorikeet-heimdal/bin> ./klist
Credentials cache: FILE:/tmp/krb5cc_10000
Principal: administrator@SERNOXDOM4.MX.BASE
Issued Expires Principal
Nov 11 13:37:52 Nov 11 23:37:52 krbtgt/SERNOXDOM4@SERNOXDOM4.MX.BASE
Note:
I need to disable the principal checks in heimdal's
_krb5_extract_ticket() for the kinit to work.
Any ideas how to change heimdal to support this.
For the service principal we should use
the realm and principal in req->kdc_rep.enc_part
instead of the unencrypted req->kdc.ticket.sname
and req->kdc.ticket.realm to have a trusted value.
I'm not sure what we can do with the client realm...
metze
(This used to be commit cfee02143f06ed6ff5832e95fa69634f5dd883da)
|
|
- remove ipv6 support untill the resolve layer can give ipv6 addresses
metze
(This used to be commit 1e518c3e675e6952044bc0fdf2537be432c0c56f)
|
|
valrind issues on fort, because we won't hit NSS any more.
Andrew Bartlett
(This used to be commit 6f67fa01ab4f946c9a9aae0d4e8d028153873e04)
|
|
negotiate krb5, but if this works, I'll add NTLM as a GSSAPI backend
by some means or other.
Andrew Bartlett
(This used to be commit 476452e143f61a3878a3646864729daaddccdf68)
|
|
Andrew Bartlett
(This used to be commit ffce0087759d45a8dff8647feffa3bedbf42023b)
|
|
metze
(This used to be commit 643a38bc30a0df1582035b8d264e0dbbc2d2e152)
|
|
gsskrb5_set_default_realm(), which should fix mimir's issues.
Andrew Bartlett
(This used to be commit 8117e76d2adee163925a29df872015ff5021a1d3)
|
|
metze
(This used to be commit f02f7ed19db2be8e23b1a5850082c9f9da35c028)
|
|
metze
(This used to be commit a5d36a6ddefb8c24e748b839391241da41e31440)
|
|
to the ildap backend
metze
(This used to be commit a996d2633600d32b2c2c04edebd0b901c627f00b)
|