Age | Commit message (Collapse) | Author | Files | Lines |
|
metze
|
|
|
|
After looking at the s4 side of the (s)channel :) I found out that it makes
more sense to simply make it use the tdb based code than redo the same changes
done to s3 to simplify the interface.
Ldb is slow, to the point it needs haks to pre-open the db to speed it up, yet
that does not solve the lookup speed, with ldb it is always going to be slower.
Looking through the history it is evident that the schannel database doesn't
really need greate expanadability. And lookups are always done with a single
Key. This seem a perfet fit for tdb while ldb looks unnecessarily complicated.
The schannel database is not really a persistent one. It can be discared during
an upgrade without causing any real issue. all it contains is temproary session
data.
|
|
|
|
Make calling schannel much easier by removing the need to explicitly open the
database. Let the abstraction do it instead.
|
|
passing mem_ctx was causing creds->sid to be allocated on mem_ctx and not be
child of creds as expected. When later in schannel_check_creds_state() we
stole the creds on a different memory context the sid was left behind and the
memory it points to freed when the temporary context was freed.
|
|
One almost empty header file was simply including another not included by
anything else. Just merge them together.
|
|
Make the initial schannel check logic more understandable.
Make it easy to define different policies depending on the caller's
security requirements (Integrity/Privacy/Both/None)
This is the same change applied to s3
|
|
Make the initial schannel check logic more understandable.
Make it easy to define different policies depending on ther caller's security
requirements (Integrity/Privacy/Both/None)
|
|
|
|
|
|
This causes talloc_free with references errors
|
|
Signed-off-by: Stefan Metzmacher <metze@samba.org>
|
|
(0x3F) are allowed
metze
|
|
Otherwise I don't get "struct iovec" through "<sys/uio.h>" on CentOS 4.
|
|
The scope starts at byte 17 with index 16.
metze
|
|
[MS-WINSRA] — v20091104 was wrong
regarding section "2.2.10.1 Name Record"
If the name buffer is already 4 byte aligned
Windows (at least 2003 SP1 and 2008) add 4 extra
bytes. This can happen when the name has a scope.
metze
|
|
This reverts commit 7c687665eaf16b0c6f83c130f6d9e5459e0b2a32.
|
|
This reverts commit 7fe66e06c4df575c410d4d70ff38f120c2f4363b.
|
|
This reverts commit f1c889a4e61d6d751cbabd8014b4345b8051b97c.
|
|
This reverts commit 1fbeae41655b8305834f2149b1268077eba8633d.
Apparently this breaks the build of Samba4
|
|
|
|
|
|
This tightens the dom_sid_parse syntax check a bit: "--" would have been
allowed in sid string
|
|
|
|
This will take the some full_request callback function
as the Samba4 packet code.
metze
|
|
|
|
(but not built in Samba4 for now)
|
|
This interface should really have a proper error interface, but at
least a DEBUG() gives the user a chance of finding the error
Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
|
|
|
|
apparently ntstatus.h is used by openchange, but they don't include
replace.h. This makes that possible again.
|
|
This aims to eventually share this with Samba4.
Andrew Bartlett
|
|
metze
|
|
metze
|
|
metze
|
|
If we don't include Python.h first then we get a pile of warnings due
to broken redefines of XOPEN_SOURCE in the Python includes.
|
|
Try to make it a bit easier to avoid leaks in common code
|
|
|
|
Error codes and their descriptions are generated
using w32err_code.py script.
Error are downloaded from MS site:
http://msdn.microsoft.com/en-us/library/cc231199%28PROT.10%29.aspx
Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
|
|
In Win 32 we have
NERR_GroupNotFound which maps to WERR_GROUP_NOT_FOUND currently
and we have
ERROR_GROUP_NOT_FOUND which maps to nothing, so it is to be added
Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
|
|
In Win32 we have
NERR_UserExists which maps to WERR_USER_EXISTS currently
and there is
ERROR_USER_EXISTS which maps to WERR_USER_ALREADY_EXISTS
Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
|
|
It turns out in win32 ERROR_DC_NOT_FOUND exists and it is
an error for Device Context (DC), not Domain Controller
Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
|
|
Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
|
|
Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
|
|
TODO's:
ACE sorting and clarifying the inheritance of object specific ace's.
|
|
|
|
metze
|
|
|
|
Signed-off-by: Günther Deschner <gd@samba.org>
|
|
Signed-off-by: Günther Deschner <gd@samba.org>
|