Age | Commit message (Collapse) | Author | Files | Lines |
|
Win2008 domain (merged from v3-0-test).
commit 8dc4e979776aae0ecaa74b51dc1eac78a7631405
Author: Steven Danneman <sdanneman@isilon.com>
Date: Wed May 7 13:34:26 2008 -0700
spnego SPN fix when contacting trusted domains
cli_session_setup_spnego() was not taking into consideration the situation
where we're connecting to a trusted domain, specifically one (like W2K8)
which doesn't return a SPN in the NegTokenInit.
This caused two problems:
1) When guessing the SPN using kerberos_get_default_realm_from_ccache() we
were always using our default realm, not the realm of the domain we're
connecting to.
2) When falling back on NTLMSSP for authentication we were passing the name
of the domain we're connecting to for use in our credentials when we should be
passing our own workgroup name.
The fix for both was to split the single "domain" parameter into
"user_domain" and "dest_realm" parameters. We use the "user_domain"
parameter to pass into the NTLM call, and we used "dest_realm" to create an SPN
if none was returned in the NegTokenInit2 packet. If no "dest_realm" is
provided we assume we're connecting to our own domain and use the credentials
cache to build the SPN.
Since we have a reasonable guess at the SPN, I removed the check that defaults
us directly to NTLM when negHint is empty.
(This used to be commit b78b14c88e8354aadf9ba7644bdb1c29245fe419)
|
|
Slim the interface...
Michael
(This used to be commit 9971118c23900d81e885a013e738a67df790c90c)
|
|
Michael
(This used to be commit f7db445c828c0eef2c08b538bd07d485dc248689)
|
|
(This used to be commit 24ac40518f79fd480baaedc1d42f3b6fe8ea1c94)
|
|
(This used to be commit be5d54a363a57113e494202a2d22dd9bbcf13b41)
|
|
This patch is the second iteration of an inside-out conversion to cleanup
functions in charcnv.c returning size_t == -1 to indicate failure.
(This used to be commit 6b189dabc562d86dcaa685419d0cb6ea276f100d)
|
|
the msdfs.c code.
Jeremy
(This used to be commit 54556df561d03d30b2fc21b9eaabe56b8c758301)
|
|
Michael
(This used to be commit ff7f0cad2eb108daa61a910cd9171ab0811a5f60)
|
|
on anything. Delete proto.h from CVS
(This used to be commit 8a37df73ec4d8d1a7db60a49cd5d7d22c4704a88)
|
|
Jeremy.
(This used to be commit 6b4a70cd8285c1e4d452e3af7df070b4c446ff54)
|
|
but the code suffered from bitrot and is not now reentrant. That means
we can get bizarre behaviour
i've fixed this by making next_token() reentrant and creating a
next_token_nr() that is a small non-reentrant wrapper for those lumps
of code (mostly smbclient) that have come to rely on the non-reentrant
behaviour
(This used to be commit 674ee2f1d12b0afc164a9e9072758fd1c5e54df7)
|
|
send unaligned unicode strings sometimes!
Fixed our handling of the workgroup name tacked on the end of the
NT1 negprot response (a unaligned unicode)
fixed a couple of places where we should be using the message_end fns instead
of pre-calculated buffer lengths
(This used to be commit 86613493a9b2e56523153486931d0bf8d39beb7a)
|
|
it will avoid problems with lists being longer than 1024 bytes
just now only ip list parameters have been converted to the new type
(hosts allow, hosts deny, ssl hosts, ssl hosts resign)
(This used to be commit e1572f85d6247b760db10825b2fa688d7ed50bd3)
|
|
(This used to be commit d0b37d1a623acce2ae4509aebda85ad1280dc8ac)
|
|
(to allow unmount)
(This used to be commit 15b17a80db605a55f667c95fb7e316877a441887)
|
|
depend on it...
Jeremy.
(This used to be commit 0fe11c329f7b379299be65795031e4f1b14e0bec)
|
|
generic Linux ACL code.
rpc_server/srv_samr_nt.c: Don't delete a policy handle before it's created.
Jeremy.
(This used to be commit db5b82e53a7061c4764d39ceb3df82e706aad42f)
|
|
complete testing of oplocks from smbtorture and would also be essential if a client app ever really did want to use oplocks properly
(This used to be commit 3d4a3bfacd9ef225aeaab801e5a216d12814b60a)
|
|
and the use of this function only increased timeouts when Samba queries
a broken DNS server.
(This used to be commit 720fea53603b2f99153709e6717ca930ab60ca9f)
|
|
Jeremy.
(This used to be commit 5690ec77c87475f1fd2e854cda594eb996d6fd04)
|
|
Jeremy.
(This used to be commit bc366f31537408380860906cc041de232b27b714)
|
|
(This used to be commit 402639926f5d207ebefec296427dc3be0e979fe6)
|
|
(This used to be commit 2ad921d1269cb1d098e7162f2d55f1a1536f325d)
|
|
(This used to be commit 13df2304b309a2bd14d4441db0e72e75b8742262)
|
|
Jeremy.
(This used to be commit d8807b19228b12ddd6d93c02d1646a470a8e71ef)
|
|
Will add changes for other supported ACL systems shortly (Herb, I may
need help with the IRIX one).
Jeremy.
(This used to be commit a8532b193d1fe123155a69dd70e433f8fc312bfc)
|
|
Jeremy.
(This used to be commit 4338ee78c3d7bcf4b9fac383ff2f572d882ab97c)
|
|
(This used to be commit 6dfe98f6020bf85263a39443ff7b07c5c795c27a)
|
|
(This used to be commit bdb76938e2936df287e638120894ae1adda5cb86)
|
|
(This used to be commit 9e1d9a3a44ceaba2b0bfa327409f6b8dd0c36b26)
|
|
(This used to be commit 823ba34342046a4b736640dff1471fde08e1087f)
|
|
+ a fix to an infinite loop in srv_samr_nt.c caused by misuse of
setgrent/getgrent/endgrent solved by these new functions
(This used to be commit 97dbb54a13e2285f1905ee1ec9aafeebdaee8917)
|
|
Jeremy.
(This used to be commit cf5015f15935605cf69078bc15251db61ddc48c7)
|
|
Make proto.
(This used to be commit 0650f87000dcf5572f3a8d61ab93760d94eee770)
|
|
Jeremy.
(This used to be commit d7aa42e4593b02ee6e487f7a4633bd7e7620ef2f)
|
|
(This used to be commit 97a88ca86b1c39066ffcdad6e81d6422fad8341b)
|
|
Jeremy.
(This used to be commit 6bbcab5e48f91a80d4ebcbd2bee38f2e0a8bff78)
|
|
(This used to be commit 2e605e1275b4cd59ba776101962218efaa87fe37)
|
|
(This used to be commit 7b275b458835a1e34c9014eb3eee6cdae240bd97)
|
|
(This used to be commit 607db8d57db0e7bf9e99570bc87e7a1401a18eaa)
|
|
Jeremy.
(This used to be commit e8ab89fbc0b6cec9f3e80fe4327992b2ec7a4a40)
|
|
(This used to be commit dd0c7a8a024f9ba8b593757b3aed5b126a8dab61)
|
|
Removed "restrict acl with mask" - redundent.
Jeremy.
(This used to be commit 0db8a61d71f25ffa0e5c585e02e2fce973867156)
|
|
(This used to be commit 6d218c3e942a9be3af57f2500374b49d8ad25763)
|
|
(This used to be commit 9aefc86e355bf160300580acb85a58a18207ccdf)
|
|
o sed 's/pdb_clear_sam/pdb_free_sam/g'
o add pdb_reset_sam()
o password changing should be ok now as well.
(This used to be commit 96d0e7c3301ad990f6c83b9c216720cb32661fb5)
|
|
(This used to be commit 2e2073447490e192ccb838dd488feb335dfba265)
|
|
I did some basic tests but I have probably broken something. Notably the
password changing. So don't cry ;-)
J.F.
(This used to be commit a4a4c02b12f030a3b9e6225b999c90689dfc4719)
|
|
(This used to be commit 09b287e1782938bc4472b88921ed1604eb91ac27)
|
|
(This used to be commit a56badc206abb88ae1e648004c168db71c862340)
|