summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2008-08-08gsskrb5: add support for DCE_STYLE and des and des3 keysStefan Metzmacher2-22/+64
Only the des keys are tested as windows doesn't support des3 metze (This used to be commit 86848dd0f217774faed81af8fbf68618013e20a1)
2008-08-08Merge branch '4-0-abartlet' into pac-verifyAndrew Bartlett0-0/+0
(This used to be commit aba5fbe39c4b93ec75c66f93c46b1967091afa61)
2008-08-08Always set a session key, even for the 'no password' case.Andrew Bartlett1-0/+2
This is for bug 5664 reported by Tom <hto@arcor.de>. Andrew Bartlett (This used to be commit b345c9cf535af35c83da040ac965d9690dc802fe)
2008-08-08Clarify commentAndrew Bartlett1-2/+2
(This used to be commit 580cce9de38ddd9d59b272b58caadce528321d09)
2008-08-08Always set a session key, even for the 'no password' case.Andrew Bartlett1-0/+2
This is for bug 5664 reported by Tom <hto@arcor.de>. Andrew Bartlett (This used to be commit a106a4ccc435d149072fb884caf95e5517cd4204)
2008-08-08Clarify commentAndrew Bartlett1-2/+2
(This used to be commit 719941e929ddb6fea011fcc0c8c6b91c26e586af)
2008-08-07Fix bug #5675 with a varient of Tim Waugh's patch,Jeremy Allison3-4/+4
as proposed by James Peach. Jeremy. (This used to be commit 5c27ad75836136c39774c9456d63f46fa62e281f)
2008-08-07Fix "might be used uninitialized" warnings.Jeremy Allison2-3/+4
Jeremy. (This used to be commit 5abd12eec1c9b6d30af5ec1ba16c0922e78d5bea)
2008-08-08We can't use ndr_pull_struct_blob_all in combinatin with relative pointersAndrew Bartlett1-3/+4
(This used to be commit d0a128f35b259d4891edc68fc24aa04a6da7aab7)
2008-08-08More work towards trusted domain support in the KDC.Andrew Bartlett1-25/+93
(This used to be commit c87d732b23ad7de8dc2f824bf11c9310fb4184e1)
2008-08-08We can't use ndr_pull_struct_blob_all in combinatin with relative pointersAndrew Bartlett1-3/+4
(This used to be commit 931890e028da8da756b7c7c62e2552a9fc04f7bc)
2008-08-07lib: prepare the build of zlibStefan Metzmacher4-0/+33
metze (This used to be commit 159df68c04c9ae437ab48991154e91161ef72754)
2008-08-07zlib: add inflateReset2()...Stefan Metzmacher3-3/+28
metze (This used to be commit 2a4fb661d7e3d601a5eb9ccecb4d4f2b07073097)
2008-08-07import of zlib-1.2.3Stefan Metzmacher200-0/+54035
We want to use zlib for the mszip ndr (de)compression later, we'll need to add some new functions to zlib. metze (This used to be commit 65c9e91a1bb24851a030a304d011558562cc50d6)
2008-08-07drsuapi: fix callers after idl changeStefan Metzmacher3-3/+3
metze (This used to be commit 7dee6fb62d5adbd2eaaaf4d8ba9e87a72ef9f94b)
2008-08-07drsuapi.idl: directly use mszip in level 2Stefan Metzmacher1-7/+1
This fixes the push because the switch_level doesn't work otherwise because the pointer is the same as for the outer switch_level. metze (This used to be commit a4c81ee68c91b2d7a9abe668e8b23246c5c9b00d)
2008-08-07Fix a build failure on host sunXVolker Lendecke1-1/+1
(This used to be commit 30b5be872501dc87380fd10084aacda13a308ac8)
2008-08-07rpc_server: add support for DCERPC_PFC_FLAG_SUPPORT_HEADER_SIGNStefan Metzmacher3-1/+14
you need "dcesrv:header signing=yes" to enable it. metze (This used to be commit bde2496e6b7034c99243b22434a97aebeb8f75b9)
2008-08-07librpc/rpc: add support DCERPC_PFC_FLAG_SUPPORT_HEADER_SIGNStefan Metzmacher4-1/+35
You can trigger it like this: ncacn_ip_tcp:172.31.9.234[sign,hdrsign] or ncacn_ip_tcp:172.31.9.234[seal,hdrsign] metze (This used to be commit 54f1fca582b1474693b5ee11b7b847086d27f75f)
2008-08-07librpc/rpc: pass struct dcerpc_pipe to dcerpc_auth3()Stefan Metzmacher2-6/+9
metze (This used to be commit 60b3523da485d845b1d930d990688d8434d39ef3)
2008-08-07gensec_gssapi: add support for GENSEC_FEATURE_SIGN_PKT_HEADERStefan Metzmacher1-4/+82
This only works for sign/verify_packet() yet, seal/unseal_packet() doesn't work yet... metze (This used to be commit c62e5d23a69789d23516a6d150fd3b756e270998)
2008-08-07gensec: add GENSEC_FEATURE_SIGN_PKT_HEADER flagStefan Metzmacher1-0/+1
metze (This used to be commit d7dfdbaf34843cb6783d8e686e659c53c5ac27ef)
2008-08-06Solve an IBM XL C/C++ compiler error encountered in get_exit_code() ↵Yannick Bergeron1-1/+2
auth_errors array initialization in client/smbspool.c (This used to be commit b45e7fabc64e699e4fa013ef15f98a004dae3f32)
2008-08-06WHATSNEW: Start WHATSNEW for 3.3.0pre1.Karolin Seeger1-665/+4
Karolin (This used to be commit 28ae738eee37face7dc5e938a036f0c2d3d2a9d6)
2008-08-06libnetapi: fix build of shared library after libnet_join changes.Michael Adam1-1/+2
This needs create_builtin_administrators() and create_builtin_users() from token_utils now. Did not pop up because the only users of the shared lib currently are the examples in lib/netapi/examples/ which are not automatically built. Michael (This used to be commit 8dca23a5597a717c7f79bab0494122e71528272b)
2008-08-06fixed permissions on ctdb databasesAndrew Tridgell1-0/+5
(This used to be commit 123fc3980a83d956bffaa689f3af81bbf81ce1c1)
2008-08-06fixed a fd leak when trying to regain contact to a domain controllerAndrew Tridgell1-0/+1
in winbind When a w2k3 DC is rebooted the 139/445 ports come up before the udp/389 cldap port. During this brief period, winbind manages to connect to 139/445 but not to udp 389. It then enters a tight loop where it leaks one fd each time. In a couple of seconds it runs out of file descriptors, and leaves winbind crippled after the DC does finally come up (This used to be commit 57187cafbcc053e75bb54750494df9feabe3a738)
2008-08-05dbwrap: add comment describing behaviour of dbwrap_change_int32_atomic().Michael Adam1-0/+7
Michael (This used to be commit f8f21c8e3922806230e240cb54205fc2db7a3619)
2008-08-05secrets: fix replacemend random seed generator (security issue).Michael Adam1-2/+6
This is a regression introduced by the change to dbwrap. The replacement dbwrap_change_int32_atomic() does not correctly mimic the behaviour of tdb_change_int32_atomic(): The intended behaviour is to use *oldval as an initial value when the entry does not yet exist in the db and to return the old value in *oldval. The effect was that: 1. get_rand_seed() always returns sys_getpid() in *new_seed instead of the incremented seed from the secrets.tdb. 2. the seed stored in the tdb is always starting at 0 instead of sys_getpid() + 1 and incremented in subsequent calls. In principle this is a security issue, but i think the danger is low, since this is only used as a fallback when there is no useable /dev/urandom, and this is at most called on startup or via reinit_after_fork. Michael (This used to be commit bfc5d34a196f667276ce1e173821db478d01258b)
2008-08-05dbwrap: add comment describing behaviour of dbwrap_change_uint32_atomic().Michael Adam1-0/+7
Michael (This used to be commit 7edfb54c865ddcfd5cdcc8c2184b96aaac2d2ec0)
2008-08-05idmap_tdb2: fix a race condition in idmap_tdb2_allocate_id().Michael Adam1-2/+6
The race is a regression introduced by the change to dbwrap. It might have led to two concurrent processes returning the same id. This fix is achieved by changing dbwrap_change_uint32_atomic() to match the original behaviour of tdb_change_uint32_atomic(), which is the following: *oldval is used as initial value when the value does not yet exist and that the old value should be returned in *oldval. dbwrap_change_uint32_atomic() is used (only) in idmap_tdb2.c, to get new ids. Michael (This used to be commit 72bd83fea7572a6202027b200d192c05023aa633)
2008-08-05registry: use _bystring wrappers to dbwrap_trans_(store|delete).Michael Adam1-6/+3
Michael (This used to be commit 103ce6c9e94ce74e616fe922f2584fd46ae1f3f8)
2008-08-05Building cifs.upcall is giving this build warning:Steve French1-1/+1
client/cifs.upcall.c:205: warning: function declaration isn’t a prototype This patch fixes this by properly declaring usage() args as void. Signed-off-by: Jeff Layton <jlayton@redhat.com> Signed-off-by: Steve French <sfrench@samba.org> (This used to be commit 148a012421cdd875167e708c5dfa771d97bf9856)
2008-08-05cifs.upcall: fix manpage and commentsSteve French2-6/+6
The "cifs.resolver" key type has been changed to "dns_resolver". Fix the comments at the top of cifs.upcall and the manpage accordingly. Signed-off-by: Jeff Layton <jlayton@redhat.com> Signed-off-by: Steve French <sfrench@samba.org> --- docs-xml/manpages-3/cifs.upcall.8.xml | 4 ++-- source/client/cifs.upcall.c | 8 ++++---- 2 files changed, 6 insertions(+), 6 deletions(-) (This used to be commit 24a93d03c2ca4e718968e2024604e0f398c96659)
2008-08-05Backing out most of changeset 5222b8db3fb692e5071bfd1b41849a8eb0a17995Steve French1-2/+5
(so parsing for domain parameter in mount.cifs matches online help) and rephrasing original code to make it more clear. The check for "domain" was meant to allow for "dom" or "DOM" and the option ("dom") described in the help (e.g. "/sbin/mount.cifs -?") is the shorter ("dom") form. The reason that the string we compare against is larger was to improve readability (we could compare against "dom" but note /* "domain" or "DOMAIN" or "dom" or "DOM" */ but it seemed terser to just show the larger string in the strcmp target. The change to "workgoup" from workg* (anything which begins with "workg" doesn't matter - it is a minor behavior change - but probably few scripts depend on the "alias" for this option). Rework code so that it is clearer what we are comparing against. (This used to be commit 92fad0fc537e75c726d5d6794dd0c4fd61edca2d)
2008-08-05man pages: Improve description of boolean values in smb.conf.5.Karolin Seeger1-1/+1
This fixes bug #5378. Thanks Morton K. Poulsen <morten+bugzilla.samba.org [at] afdelingp.dk> for reporting! Karolin (This used to be commit 8195ca2132cbdba396dc35e9d04d4bdc3a8a666c)
2008-08-05man pages: Add documentation about smbclient command "rename".Karolin Seeger1-0/+7
This fixes bug #5268. Thanks to Alexander Franz <a.franz [at] gmx.net> for reporting! Karolin (This used to be commit 0a93fd2dedfa7fed1ad0b8a5e079bf7be72a4bd5)
2008-08-05README.Coding: A few minor fixes.Karolin Seeger1-3/+3
Karolin (This used to be commit e61c6963cc25883c0b6e7e20596723397e294807)
2008-08-05Start implementind domain trusts in our KDC.Andrew Bartlett1-7/+33
Andrew Bartlett (This used to be commit 8aba7c36231e58a91fbc6b4fc24c5693353aeef9)
2008-08-04libnet_keytab: fix the build with heimdalStefan Metzmacher1-6/+38
metze (This used to be commit ba18af00cc79a4e92372d3c1151061f200bc0655)
2008-08-04clikrb5: don't use krb5_keyblock_init() when no salt is specifiedStefan Metzmacher1-35/+30
If the caller wants to create a key with no salt we should not use krb5_keyblock_init() (only used when using heimdal) because it does sanity checks on the key length. metze (This used to be commit c83de77b750837a110611d7023c4cf71d2d0bab1)
2008-08-01Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into manpageJelmer Vernooij11-10/+122
(This used to be commit 8e201ecf3e86c3c8865c7276fad8dad07106efaf)
2008-08-01Add helper object Hostconfig to make it easier to get to e.g. theJelmer Vernooij3-3/+39
SAM database. (This used to be commit be75b2a36ee49f66ada3ec3ababa82d74085d559)
2008-08-01heimdal: add experimental --enable-external-heimdalStefan Metzmacher3-1/+78
This should only be used for testing and when you're absolutly sure the installed heimdal libraries support the features we need. (E.g. heimdal-1.2 or lower should NOT work) metze (This used to be commit 66b76b018d6048cec63a75b24ec4c099f6a2eb8c)
2008-08-01libreplace: include <krb5.h> and <com_err.h> and no heimdal specific headersStefan Metzmacher2-4/+14
metze (This used to be commit cffed8e19e22a1fa7b7a322b153df5d54e4c3be2)
2008-08-01auth/kerberos: remove dependencies to internal heimdalStefan Metzmacher2-2/+1
metze (This used to be commit ed0fc19ac6a1194e6fd9a6534cbf7453fa870066)
2008-08-01heimdal_build/internal: add some useful definesStefan Metzmacher1-0/+6
metze (This used to be commit b9727d612bd2e9cf67ca2d4a9c60dc13d4bed5be)
2008-08-01heimdal: fix dependencyStefan Metzmacher1-0/+1
metze (This used to be commit 9e8b95dc8d577ea33504f0fb463d4648393e045b)
2008-08-01lib/crypto: remove dependency to internal heimdalStefan Metzmacher1-2/+21
metze (This used to be commit 9138fc6639fae7a5567c395254277199c89b0dcb)
2008-08-01build: remove warning about missing generated include fileStefan Metzmacher1-1/+1
metze (This used to be commit 495d068df55a94d48f2a4d2e7f2060fb42f66dbd)