summaryrefslogtreecommitdiff
path: root/libcli
AgeCommit message (Collapse)AuthorFilesLines
2011-02-15libcli/security - fix two output format specifiersMatthias Dieter Wallnöfer2-2/+2
2011-02-11libcli/auth: fix PAM_ERRORS subsystem build.Günther Deschner1-1/+2
(waf-)god knows why, without this (fake) dependency, ./configure && make fails while including replace.h while ./configure.developer && make succeeds... Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Fri Feb 11 23:50:40 CET 2011 on sn-devel-104
2011-02-10security: Fixed some handling of ACEs with INHERITED flag provided by the userNadezhda Ivanova1-5/+16
Some tests showed that these ACEs are not removed if the DACL_PROTECTED flag is provided at the same time. This is not documented but tests prove it and it has been observerd in deployment.
2011-02-10ldb: use #include <ldb.h> for ldbAndrew Tridgell2-2/+2
thi ensures we are using the header corresponding to the version of ldb we're linking against. Otherwise we could use the system ldb for link and the in-tree one for include Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-02-10libcli/named_pipe_auth Change from 'info3' to auth_session_info_transportAndrew Bartlett2-90/+62
This changes the structure being used to convey the current user state from the netlogon-derived 'netr_SamInfo3' structure to a purpose-built structure that matches the internals of the Samba auth subsystem and contains the final group list, as well as the final privilege set and session key. These previously had to be re-created on the server side of the pipe each time. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-02-10libcli/named_pipe_auth Remove support for unused levels 0-2.Andrew Bartlett1-160/+83
The only client and server for this code uses level 3 exclusively. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-02-08pam: share pam errors in a common location.Günther Deschner3-0/+176
Guenther
2011-02-08pysecurity: Add missing dependency on pytalloc-util.Jelmer Vernooij1-1/+1
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Tue Feb 8 13:16:43 CET 2011 on sn-devel-104
2011-02-07libcli/security: Make add_sid_to_array_unique use a uin32_t counterVolker Lendecke1-1/+1
Logical consequence of the previous commit Signed-off-by: Michael Adam <obnox@samba.org> Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Mon Feb 7 19:24:19 CET 2011 on sn-devel-104
2011-02-07libcli/security: Make del_sid_from_array take a uint32_tVolker Lendecke2-3/+5
This aligns it with add_sid_to_array Signed-off-by: Michael Adam <obnox@samba.org>
2011-01-30libcli/util: add NT_STATUS_RPC_SEC_PKG_ERROR defineStefan Metzmacher1-0/+1
metze
2011-01-26errormap: Add unix_to_werror() functionKai Blin1-0/+5
While this function technically is closest to the map_nt_status_from_unix() function, I think it is better to keep the new function in line with our usual fooerror_to_barerror() naming scheme. Signed-off-by: Kai Blin <kai@samba.org> Autobuild-User: Kai Blin <kai@samba.org> Autobuild-Date: Wed Jan 26 23:07:24 CET 2011 on sn-devel-104
2011-01-24libcli/ldap: use lib/ldb_compat.h for the s3 buildStefan Metzmacher1-0/+4
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Jan 24 14:55:50 CET 2011 on sn-devel-104
2011-01-20libcli/auth move ntlmssp_wrap() and ntlmssp_unwrap() into common code.Andrew Bartlett2-0/+147
The idea here is to allow the source3/libads/sasl.c code to call this instead of the lower level ntlmssp_* functions. Andrew Bartlett
2011-01-18s4-security: Fixed incorrect inheritance of IO flagged ACESNadezhda Ivanova1-0/+5
They should be inherited without the IO flag unless they contain generic information.
2011-01-14libcli/security Add python bindings for se_access_checkAndrew Bartlett2-0/+89
Andrew Bartlett
2011-01-13security: Fixed incorrect indentation in create_descriptor.cNadezhda Ivanova1-12/+12
Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Thu Jan 13 15:53:16 CET 2011 on sn-devel-104
2011-01-11security: Fixed bugs in expansion of generic information ACEsNadezhda Ivanova1-38/+82
When an ACE gontaining GA, GE, GR, GW, CO or CG is provided by a user or inherited the final SD actually has to have 2 ACEs, one is an effective expanded one, and the original one with IO flag added.
2011-01-10libcli/security: fix sid_type_lookup().Günther Deschner1-7/+5
It *always* returned "SID *TYPE* is INVALID". Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Mon Jan 10 12:47:00 CET 2011 on sn-devel-104
2011-01-07netlogon: move netlogon helpers to ../libcli/netlogon.Günther Deschner8-17/+16
Guenther
2011-01-03libcli/auth: add netsec_outgoing_sig_size()Stefan Metzmacher2-0/+15
The size of the signature blob depends on the used algorithm. metze
2011-01-02Fix a valgrind errorVolker Lendecke1-2/+4
Thanks to Tridge for the hint. Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Sun Jan 2 10:58:51 CET 2011 on sn-devel-104
2011-01-01s4-python: Only set BASETYPE flag if subclassing is supported.Jelmer Vernooij1-4/+4
Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sat Jan 1 03:39:58 CET 2011 on sn-devel-104
2011-01-01s4-python: Add more prototypes.Jelmer Vernooij1-0/+2
2010-12-21s3/s4:auth SPNEGO - adaptions for the removed "const" from OIDsMatthias Dieter Wallnöfer1-2/+6
This is needed in order to suppress warnings.
2010-12-17libcli/security: remove unused variable.Günther Deschner1-1/+0
Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Fri Dec 17 13:56:27 CET 2010 on sn-devel-104
2010-12-16libcli/security Add sid_blob_parse() to directly parse a binary SID blobAndrew Bartlett2-3/+14
2010-12-11libcli/echo: fix off by 1 crash bugStefan Metzmacher1-1/+1
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sat Dec 11 13:48:54 CET 2010 on sn-devel-104
2010-12-11libcli/echo: lowercase testsuite namesStefan Metzmacher1-2/+2
metze
2010-12-09s4 libcli: Add libcli_echo lib and torture testKai Blin5-0/+368
Autobuild-User: Kai Blin <kai@samba.org> Autobuild-Date: Thu Dec 9 23:57:03 CET 2010 on sn-devel-104
2010-12-08libcli/auth bring ADS_IGNORE_PRINCIPAL in commonAndrew Bartlett1-0/+2
2010-12-07libcli/auth: let spnego_write_mech_types() check the asn1_load() returnStefan Metzmacher1-0/+4
metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Dec 7 18:23:41 CET 2010 on sn-devel-104
2010-12-06s4:fix some shadowed declaration warnings on Solaris by renaming the symbolsMatthias Dieter Wallnöfer1-1/+1
2010-12-02Turns out there are lots of places in S3 where token passed inJeremy Allison1-0/+4
here can be NULL (become_root() sets the current security token to NULL for example). Ensure we don't crash. Jeremy. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Thu Dec 2 03:26:03 CET 2010 on sn-devel-104
2010-11-29libcli/security/object_tree.c - remove unreachable statementMatthias Dieter Wallnöfer1-1/+0
2010-11-22Avoid the use of PyAPI_DATA, which is for internal Python API's.Arnaud Faucher1-1/+1
Signed-off-by: Jelmer Vernooij <jelmer@samba.org> Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Mon Nov 22 00:52:56 CET 2010 on sn-devel-104
2010-11-17s4-doserr: telling our users to "see Windows help" doesn't seem rightAndrew Tridgell1-4/+4
2010-11-09raw.h is only needed in the S4 buildVolker Lendecke1-0/+2
Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Nov 9 14:49:14 UTC 2010 on sn-devel-104
2010-10-31idl: Use DRSUAPI_ATTID_ prefix instead of DRSUAPI_ATTRIBUTE_ for ATTID valuesKamen Mazdrashki1-22/+22
Those values are actually ATTID values and such, they are used for ATTIDs for Attributes, Classes and Syntaxes.
2010-10-31s4: Remove the old perl/m4/make/mk-based build system.Jelmer Vernooij10-227/+0
The new waf-based build system now has all the same functionality, and the old build system has been broken for quite some time. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Oct 31 02:01:44 UTC 2010 on sn-devel-104
2010-10-30s4-tdb: make tdb-wrap into a private libraryAndrew Tridgell1-1/+1
this prevents double linking of the tdb wrap code
2010-10-26waf: Stop automaticaly changing dashes to underscores in library names.Jelmer Vernooij2-4/+4
2010-10-26waf: Remove lib prefix from libraries manually.Jelmer Vernooij5-10/+10
2010-10-26s4: Drop duplicate 'lib' prefix for private libraries.Jelmer Vernooij3-4/+4
2010-10-24libcli/security Remove unused sec_acl_equal()Andrew Bartlett2-47/+0
This was orphaned by changing sec_desc_equal() to the stricter security_descriptor_equal() by f4195183a47b0e7c8bc9644d62b123f7880f3fcd in 2009. (The difference here was that sec_acl_equal allowed for equivilent ordering. I've checked the callers, and this function is only used to skip actual ACL sets, or to reference a cache, so this seems Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Sun Oct 24 22:21:23 UTC 2010 on sn-devel-104
2010-10-24s4: Rename LIBCLI_NBT -> cli_nbt.Jelmer Vernooij1-3/+3
2010-10-24s4: Rename LIBCLI_LDAP to libcli_ldap.Jelmer Vernooij1-1/+1
2010-10-24s4: Rename LIBSAMBA-* to libsamba-*Jelmer Vernooij4-10/+10
2010-10-24s4: Rename LIBSECURITY{_SESSION,} to libsecurity{_session,}Jelmer Vernooij1-1/+1
2010-10-23s4: Rename LIBNETIF to libnetif.Jelmer Vernooij1-6/+6