summaryrefslogtreecommitdiff
path: root/lib
AgeCommit message (Collapse)AuthorFilesLines
2012-05-23Introduce system MIT krb5 build with --with-system-mitkrb5 option.Alexander Bokovoy5-9/+13
System MIT krb5 build also enabled by specifying --without-ad-dc When --with-system-mitkrb5 (or --withou-ad-dc) option is passed to top level configure in WAF build we are trying to detect and use system-wide MIT krb5 libraries. As result, Samba 4 DC functionality will be disabled due to the fact that it is currently impossible to implement embedded KDC server with MIT krb5. Thus, --with-system-mitkrb5/--without-ad-dc build will only produce * Samba 4 client libraries and their Python bindings * Samba 3 server (smbd, nmbd, winbindd from source3/) * Samba 3 client libraries In addition, Samba 4 DC server-specific tests will not be compiled into smbtorture. This in particular affects spoolss_win, spoolss_notify, and remote_pac rpc tests.
2012-05-23dns: fix comments and make s4/libcli/resolve dns resolver workingAlexander Bokovoy1-3/+3
After migrating to use libaddns, reply_to_addrs() needed to change the way answers are iterated through. Originally libroken implementation gave all answers as separate records with last one being explicitly NULL. libaddns unmarshalling code gives all non-NULL answers and should be iterated with explicit reply->num_answers in use.
2012-05-23lib/krb5_wrap: implement krb5_cc_get_lifetime for MIT KerberosAlexander Bokovoy1-19/+22
In case krb5_cc_get_lifetime is not available, iterate over existing tickets in the keytab, find the one marked as TKT_FLAG_INITIAL, and use its lifetime. This is how it is implemented in Heimdal and how it was suggested to be done by MIT Kerberos developers.
2012-05-23gensec_gssapi: Make it possible to build with MIT krb5Simo Sorce1-0/+3
We need to ifdef out some minor things here because there is no available API to set these options in MIT. The realm and canonicalize options should be not interesting in the client case. Same for the send_to_kdc hacks. Also the OLD DES3 enctype is not at all interesting. I am not aware that Windows will ever use DES3 and no modern implementation relies on that enctype anymore as it has been fully deprecated long ago, so we can simply ignore it.
2012-05-23s4-resolve: Remove dependency on librokenSimo Sorce1-7/+2
Use available native samba resolver functions
2012-05-23addns: Make ads_dns_lookup_srv pulicSimo Sorce2-1/+6
2012-05-23Move source3/libads/dns.c to lib/addnsSimo Sorce3-0/+976
2012-05-23addns: Fix talloc hiereachySimo Sorce1-1/+1
Attach request to local memory context not to potentially long lived connection
2012-05-15dbwrap: Fix Coverity ID 242750 Incorrect sizeof expressionVolker Lendecke1-1/+1
Taking the size of "db" is correct, but a bit fishy. Silence Coverity.
2012-05-15lib/ccan: add a missing dependency to 'execinfo' for 'backtrace()'Stefan Metzmacher1-0/+4
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue May 15 16:12:54 CEST 2012 on sn-devel-104
2012-05-15s3-auth: remove "security=server" (depricated since 3.6)Stefan Metzmacher2-9/+1
"security=server" has a lot of problems in the world with modern security (ntlmv2 and krb5). It was also not very reliable, as it needed a stable connection to the password server for the lifetime of the whole client connection! Please use "security=domain" or "security=ads" is you authentication against remote servers (domain controllers). metze -------------- / \ / REST \ / IN \ / PEACE \ / \ | SEC_SERVER | | security=server | | | | | | 12 May | | | | 2012 | *| * * * | * _________)/\\_//(\/(/\)/\//\/\///|_)_______
2012-05-14lib/util: move tevent_req_poll_ntstatus() to tevent_ntstatus.cStefan Metzmacher2-0/+16
metze
2012-05-14lib/util: add missing 'errors' dependency to 'tevent-util'Stefan Metzmacher1-1/+1
metze
2012-05-14lib/tevent/testsuite: no longer use 'compat' symbolsStefan Metzmacher1-12/+12
metze
2012-05-14move the dbwrap library to the top levelMichael Adam13-0/+2821
Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Mon May 14 04:04:55 CEST 2012 on sn-devel-104
2012-05-13tevent: fix indentation in the wscriptMichael Adam1-1/+1
(accidentially commited in 5e8dee8d96a7522cdcde57dbbf93fbe9c614992e)
2012-05-13lib/socket_wrapper only enable python_socket and socket.py with socket_wrapperAndrew Bartlett1-8/+10
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Sun May 13 10:41:27 CEST 2012 on sn-devel-104
2012-05-13libreplace: Fix symbol names for snprintf/asprintf/vasprintf.Jelmer Vernooij1-6/+6
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun May 13 05:16:28 CEST 2012 on sn-devel-104
2012-05-11smbconf: remove python shebang from wscript_buildMichael Adam1-2/+0
Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Fri May 11 22:05:32 CEST 2012 on sn-devel-104
2012-05-11util: use SMB_ASSERT with panic also in non-developer builds !!!Michael Adam1-7/+0
This has been around since a long time: In non-developer builds, we don't panic in SMB_ASSERT but happly continue with the error condition, which is ridiculous and dangerous...
2012-05-11util: reformat the DEVELOPER definition of SMB_ASSERTMichael Adam1-3/+8
2012-05-09allow to use system iniparser library.Günther Deschner2-7/+21
Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed May 9 17:38:33 CEST 2012 on sn-devel-104
2012-05-08krb5samba: Add smb_krb5_make_pac_checksum.Andreas Schneider2-0/+83
Signed-off-by: Simo Sorce <idra@samba.org> Autobuild-User: Simo Sorce <idra@samba.org> Autobuild-Date: Tue May 8 08:30:52 CEST 2012 on sn-devel-104
2012-05-08krb5samba: Add krb5_free_checksum_contents wrapperSimo Sorce2-0/+14
2012-05-08lib/util: Map 0x7fffffffffffffffLL as 0x7fffffffffffffffLL in time conversionAndrew Bartlett1-1/+1
TIME_T_MAX is not actually INT64_MAX at the moment, so check both values and set to the magic end-of-time value. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue May 8 06:41:43 CEST 2012 on sn-devel-104
2012-05-07talloc: Update doxygen config.Andreas Schneider1-119/+391
Autobuild-User: Andreas Schneider <asn@cryptomilk.org> Autobuild-Date: Mon May 7 21:13:15 CEST 2012 on sn-devel-104
2012-05-07doc: Remove latex to doxygen conversion leftovers in talloc.Pavel Březina2-8/+8
Signed-off-by: Andreas Schneider <asn@samba.org>
2012-05-07doc: Fixes for the talloc best practices tutorial.Andreas Schneider1-10/+10
2012-05-07doc: Fixes for the talloc debugging tutorial.Andreas Schneider1-9/+10
2012-05-07doc: Fixes for the talloc pool tutorial.Andreas Schneider1-15/+16
2012-05-07doc: Fixes for the talloc destructor tutorial.Andreas Schneider1-4/+5
2012-05-07doc: Fixes for the talloc dynamic type system tutorial.Andreas Schneider1-14/+15
2012-05-07doc: Fixes for the talloc stealing tutorial.Andreas Schneider1-9/+24
2012-05-07doc: Fixes for the talloc context tutorial.Andreas Schneider1-25/+27
2012-05-07doc: Add talloc tutorial.Pavel Březina13-1/+873
Signed-off-by: Andreas Schneider <asn@samba.org>
2012-05-06lib/param: add support for "SMB3_00"Stefan Metzmacher1-0/+1
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sun May 6 16:38:00 CEST 2012 on sn-devel-104
2012-05-04krb5samba: Add a smb_krb5_cc_get_lifetime() function.Andreas Schneider2-0/+59
Signed-off-by: Simo Sorce <idra@samba.org>
2012-05-04krb5samba: Add compat function for krb5_kt_compareSimo Sorce2-0/+39
2012-05-04krb5samba: Add compat krb5_make_principal for MIT buildSimo Sorce2-0/+45
2012-05-04krb5samba: Add compat code to initialize keyblock contentsSimo Sorce2-0/+27
2012-05-04Move keytab_copy to krb5samba libSimo Sorce3-1/+241
This is a helper fucntion that uses purely krb5 code, so it belongs to krb5samba which is the krb5 wrapper for samba.
2012-05-04Split normal kinit from s4u2 flavored kinitSimo Sorce2-31/+71
This makes it simpler to slowly integrate MIT support and also amkes it somewhat clearer what operation is really requested. The 24u2 part is really only used by the cifs proxy code so we can temporarily disable it in the MIT build w/o major consequences.
2012-05-04Move kerberos_kinit_password_cc to krb5samba libSimo Sorce2-0/+405
2012-05-04Move kerberos_kinit_keyblock_cc to krb5samba libSimo Sorce2-0/+98
Make it also work with MIT where krb5_get_in_tkt_with_keyblock is not available.
2012-05-04krb5samba: Remove unnecessary include fileSimo Sorce1-1/+0
2012-05-04Fix krb5_samba.c buildSimo Sorce1-0/+4
2012-05-03UTIL_TDB: lowercase name.Jelmer Vernooij1-2/+2
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Thu May 3 20:18:22 CEST 2012 on sn-devel-104
2012-05-03libtorture: Improve suggestion to mention torture_assert_*() rather thanJelmer Vernooij1-1/+1
torture_result().
2012-05-03torture: Suggest torture_fail() / torture_result().Jelmer Vernooij1-1/+2
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Thu May 3 15:31:06 CEST 2012 on sn-devel-104
2012-04-26replace: Fix use of mktempSimo Sorce1-2/+2
mktemp always returns the template, so checking for NULL doesn't cactch any error. Errors are reported by turning the template into an empty string. Autobuild-User: Simo Sorce <idra@samba.org> Autobuild-Date: Thu Apr 26 16:14:24 CEST 2012 on sn-devel-104
generated by cgit (git 2.34.1) at 2024-11-23 01:59:04 +0000