summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2012-01-06s3-ntlmssp Remove unused ntlmssp_set_hashes() and do not set an invalid LM hashAndrew Bartlett2-30/+21
When E_deshash() returns false, it indicates that the password is either > 14 chars in length, or could not be represented as an LM hash value for some other reason. In this case, we should not regard the LM hash being missing as an error or a no-password situation. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Jan 6 14:59:13 CET 2012 on sn-devel-104
2012-01-06ntlmssp: merge initial packet implementationsAndrew Bartlett2-14/+46
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-06s3-winbindd: convert cached credentials to use auth_generic/gensec for NTLMSSPAndrew Bartlett1-33/+46
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-06s3-torture convert smb2 test to use auth_generic/gensec for NTLMSSPAndrew Bartlett1-67/+101
Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Jan 6 12:09:12 CET 2012 on sn-devel-104
2012-01-06s3:SMB2-SESSION-RECONNECT: also expect NETWORK_NAME_DELETED is signing isn't ↵Stefan Metzmacher1-1/+2
used metze
2012-01-06s3-libads Use NTLMSSP via auth_generic/gensecAndrew Bartlett1-90/+79
This allows us to use the shared gensec_wrap() implementation already used by the smb sealing code, as well as making this code more generic. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-06s3-libsmb Make auth_ntlmssp client more genericAndrew Bartlett5-55/+81
As well as renaming, this allows us to start the mech by DCE/RPC auth type or OID. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-06s3-libsmb Use gensec_settings to set s3 ntlmssp client backendAndrew Bartlett1-2/+10
This prepares us for making the code generic to multiple mechansims Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-06s3-auth Rename make_auth_ntlmssp() -> make_auth_gensec()Andrew Bartlett1-5/+5
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-06Fix compile when TDB_TRACE is enabled.Ira Cooper1-1/+1
Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Jan 6 04:16:41 CET 2012 on sn-devel-104
2012-01-06Add a sys_get_number_of_cores() function that calls sysconf or sysctlJeremy Allison5-4/+66
and tunes the aio threads.
2012-01-06samba-tool:dns: Check through all the DNS records for a matchAmitay Isaacs1-16/+16
There can be multiple dns records for a specified record type. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Fri Jan 6 02:41:22 CET 2012 on sn-devel-104
2012-01-06s4-rpc:dnsserver: Do not replace @ with zone_name in update operationAmitay Isaacs1-1/+6
This fixes the problem when updating DNS record for '@' or domain name.
2012-01-06Fix bug #8687 - net memberships usage info is wrongJeremy Allison1-1/+1
Typo in usage. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Jan 6 00:30:20 CET 2012 on sn-devel-104
2012-01-05Fix the local-memcache test for 64-bitVolker Lendecke2-2/+1
The memcache test walks the purge functionality. The maximum memcache size also takes all memcache internal headers into account. Those headers contain pointers, so on 64-bit they take more space... Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Thu Jan 5 22:01:00 CET 2012 on sn-devel-104
2012-01-05s3: Run the CLEANUP2 testVolker Lendecke1-0/+1
2012-01-05s3: Add a test for proper brlock cleanupVolker Lendecke3-0/+89
We need to improve the server here. Maybe we should validate the brlock entry whenever we detect a read/write being blocked from locking? This is not our hot code path anyway, and it would gain us significant robustness. The code might become quite a bit simpler as well.
2012-01-05s3: Clarify what CLEANUP1 doesVolker Lendecke1-1/+2
2012-01-05Add some debug to vfs_aio_pthread so I can see when jobs start and stop.Jeremy Allison1-0/+16
Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Thu Jan 5 20:28:00 CET 2012 on sn-devel-104
2012-01-05s3-auth remove outdated commentAndrew Bartlett1-3/+0
Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Jan 5 18:51:47 CET 2012 on sn-devel-104
2012-01-05s3-librpc remove unused headersAndrew Bartlett1-2/+0
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3-auth Remove more unused headersAndrew Bartlett1-3/+0
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3-auth remove unused ntlmssp.hAndrew Bartlett2-2/+0
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3-auth Remove ntlmssp_wrap.h which is no longer requiredAndrew Bartlett9-10/+1
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3-auth use gensec directly rather than via auth_generic_stateAndrew Bartlett12-144/+112
This is possible because the s3 gensec modules are started as normal gensec modules, so we do not need a wrapper any more. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3-auth Set remote address for both AD and s3 gensec modesAndrew Bartlett1-2/+0
2012-01-05s3-auth re-create the auth context in the s3 ntlmssp server moduleAndrew Bartlett5-70/+8
This removes the abstraction violation in auth_generic.c. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3-auth Add TALLOC_CTX * to auth_generic_prepare()Andrew Bartlett7-20/+15
This makes the long term owner of this memory more clear. So far only the clear cases have been moved from NULL however. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3-auth supply s3 ntlmssp module via gensec_settingsAndrew Bartlett1-24/+11
This will allow the supply of multiple modules in future without duplicating the module selection logic. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3-selftest: Add test for rpcclient, including kerberos authenticationAndrew Bartlett3-1/+38
Some knownfail entries are added for things the currently fail. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3:gse: MIT krb5 1.8.1 has a bug in gss_wrap_iov()Stefan Metzmacher1-1/+1
gss_krb5int_make_seal_token_v3_iov() doesn't set '*conf_state'. metze
2012-01-05s3-librpc store the sign/seal flags we got in the gssapi clientAndrew Bartlett1-1/+1
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3-libads Factor out a new routine ↵Andrew Bartlett4-48/+69
kerberos_get_principal_from_service_hostname() This is now used in the GSE GSSAPI client, so that when we connect to a target server at the CIFS level, we use the same name to connect at the DCE/RPC level. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3-librpc Use gsskrb5_get_subkey() where available to get the session keyAndrew Bartlett2-0/+16
This allows gse_get_session_key() to work against Heimdal. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
2012-01-05s3: Remove some redundant codeVolker Lendecke1-5/+0
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Thu Jan 5 17:16:45 CET 2012 on sn-devel-104
2012-01-05s3: Run the CLEANUP1 testVolker Lendecke1-0/+1
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Thu Jan 5 14:42:43 CET 2012 on sn-devel-104
2012-01-05s3: Add a test excercising the share mode cleanup routineVolker Lendecke5-0/+73
2012-01-05libcli/smb: Add smbXcli_conn_samba_suicideVolker Lendecke2-0/+105
This is a pure test tool against Samba servers
2012-01-05s3: Move basic SMB checking to a much earlier pointVolker Lendecke1-19/+19
2012-01-05s3: Add a suicide mode to smbdVolker Lendecke1-0/+11
To test our cleanup code paths properly, we need a way to make smbd exit hard without cleaning up
2012-01-05s3: Fix some nonempty blank linesVolker Lendecke1-3/+3
2012-01-05s4:repl_meta_data LDB module - set "isRecycled" time correctlyMatthias Dieter Wallnöfer1-9/+8
"unix_to_nt_time()" which is based on "time_t" behaves differently for literals > 32 bit on 32 and 64 bit platforms. Reviewed-by: ekacnet Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Thu Jan 5 11:59:20 CET 2012 on sn-devel-104
2012-01-05Add S3 vfs_aio_pthread module to replace broken glibc aio code.Jeremy Allison5-0/+659
Compiles but not yet tested. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Thu Jan 5 01:43:51 CET 2012 on sn-devel-104
2012-01-05waf: Use git repository.Jelmer Vernooij1-1/+1
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Thu Jan 5 00:10:24 CET 2012 on sn-devel-104
2012-01-04Include waf as an extracted source directory, rather than as a one-in-a-file ↵Jelmer Vernooij79-17/+18127
script.
2012-01-04s4:pyrpc: add 'user_session_key' getter to the connection objectStefan Metzmacher2-1/+45
This gets the session key from gensec for usage in DRSUAPI. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jan 4 22:31:52 CET 2012 on sn-devel-104
2012-01-04s4:pygensec/tests: check that the client and server have the same session keyStefan Metzmacher1-1/+4
metze
2012-01-04s4:pygensec: add session_key() methodStefan Metzmacher1-0/+29
metze
2012-01-04LDAP-CLDAP: demonstrate that pdc name is not an unc pathStefan Metzmacher1-0/+9
For LOGON_SAM_LOGON_RESPONSE_EX and LOGON_SAM_LOGON_USER_UNKNOWN_EX, pdc name is not in unc path form. [MS-ADTS] 7.3.1.* uses UnicodeLogonServer, which seems to be in unc form, while NetbiosComputerName is not in unc form. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jan 4 20:06:14 CET 2012 on sn-devel-104
2012-01-04s4:torture/nbt/dgram.c - NBT samlogon requests don't return the PDC name as ↵Matthias Dieter Wallnöfer1-0/+5
UNC path Signed-off-by: Stefan Metzmacher <metze@samba.org>