Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2012-04-24 | s3: Attempt to fix the build without kerberos | Volker Lendecke | 1 | -1/+2 | |
Autobuild-User: Volker Lendecke <vl@samba.org> Autobuild-Date: Tue Apr 24 15:04:14 CEST 2012 on sn-devel-104 | |||||
2012-04-23 | Make krb5 wrapper library common so they can be used all over | Simo Sorce | 1 | -0/+1 | |
2012-04-03 | s3-libads: Rework kerberos_return_pac() to use GENSEC for the server-side | Andrew Bartlett | 1 | -22/+167 | |
This removes the last user of ads_verify_ticket(), and means that we only have one code path to verify an incoming krb5 (GSSAPI) ticket. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org> | |||||
2011-06-09 | s3-param Remove special case for global_myname(), rename to lp_netbios_name() | Andrew Bartlett | 1 | -1/+1 | |
There is no reason this can't be a normal constant string in the loadparm system, now that we have lp_set_cmdline() to handle overrides correctly. Andrew Bartlett | |||||
2011-04-20 | libcli/auth Move PAC parsing and verification in common. | Andrew Bartlett | 1 | -317/+0 | |
This uses the source3 PAC code (originally from Samba4) with some small changes to restore functionality needed by the torture tests, and to have a common API. Andrew Bartlett | |||||
2010-08-30 | s3-krb: Reformat and add doxygen comment to decode_pac_data() | Simo Sorce | 1 | -63/+91 | |
Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-08-05 | s3: avoid global include of ads.h. | Günther Deschner | 1 | -0/+1 | |
Guenther | |||||
2010-07-20 | s3-libsmb: Use data_blob_talloc to get krb5 ticket and session keys | Simo Sorce | 1 | -1/+2 | |
2010-06-03 | s3: remove authdata.h | Günther Deschner | 1 | -1/+0 | |
Guenther | |||||
2010-05-18 | s3: Remove use of iconv_convenience. | Jelmer Vernooij | 1 | -13/+7 | |
2010-05-11 | s3:kerberos Return PAC_LOGON_INFO rather than the full PAC_DATA | Andrew Bartlett | 1 | -116/+6 | |
All the callers just want the PAC_LOGON_INFO, so search for that in ads_verify_ticket(), and don't bother the callers with the rest of the PAC. This change makes sense on it's own (removing boilerplate wrappers that just confuse the code), but it also makes it much easier to implement a matching ads_verify_ticket() function in Samba4 for the s3compat proposal. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-05-04 | s3: Fix a memleak in check_pac_checksum | Volker Lendecke | 1 | -2/+8 | |
2009-11-27 | s3-kerberos: do not include authdata headers before including krb5 headers. | Günther Deschner | 1 | -0/+1 | |
Guenther | |||||
2009-11-27 | s3-kerberos: only use krb5 headers where required. | Günther Deschner | 1 | -0/+1 | |
This seems to be the only way to deal with mixed heimdal/MIT setups during merged build. Guenther | |||||
2009-11-12 | Remove unused variable warning. | Jeremy Allison | 1 | -1/+0 | |
Jeremy. | |||||
2009-11-12 | s3-kerberos: remove smb_krb5_get_tkt_from_creds(). | Günther Deschner | 1 | -60/+4 | |
Now that cli_krb5_get_ticket() already handles S4U2SELF impersonation, remove smb_krb5_get_tkt_from_creds() which is not required anymore. Guenther | |||||
2009-11-06 | s3-kerberos: let smb_krb5_get_tkt_from_creds() compile with older heimdal libs. | Günther Deschner | 1 | -1/+1 | |
Guenther | |||||
2009-11-06 | s3-kerberos: support S4U2SELF impersionation through cli_krb5_get_ticket(). | Günther Deschner | 1 | -1/+2 | |
Guenther | |||||
2009-11-06 | s3-kerberos: add impersonate_principal for kerberos_return_pac_X calls. | Günther Deschner | 1 | -1/+25 | |
Guenther | |||||
2009-11-06 | s3-kerberos: add smb_krb5_get_tkt_from_creds(). | Günther Deschner | 1 | -0/+40 | |
Guenther | |||||
2009-04-07 | s3:kerberos Rework smb_krb5_unparse_name() to take a talloc context | Andrew Bartlett | 1 | -1/+1 | |
Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2008-10-20 | s3-build: no need to duplicate generated ndr_ prototypes. | Günther Deschner | 1 | -0/+1 | |
Guenther | |||||
2008-10-11 | Cope with changed signature of http_timestring(). | Jelmer Vernooij | 1 | -2/+2 | |
2008-09-23 | s3: use samba4 prototype for ndr_push/pull_struct_blob. | Günther Deschner | 1 | -7/+7 | |
Guenther | |||||
2008-02-27 | Add my copyright. | Günther Deschner | 1 | -1/+1 | |
Guenther (This used to be commit d078a8757182d84dfd3307a2e1b751cf173aaa97) | |||||
2008-02-17 | Some more cleanup in authdata.c. | Günther Deschner | 1 | -621/+7 | |
Guenther (This used to be commit 5483f5fb44bb2138a1348c05845a2b8f3588697a) | |||||
2008-02-17 | Align our krb5 PAC decoding routines to the samba4 ones. | Günther Deschner | 1 | -234/+224 | |
(while keeping all the trans krb5 lib support) Guenther (This used to be commit c06e507737bb07ff995876e49341de3f60b0da35) | |||||
2008-01-17 | Finally enable pidl generated SAMR & NETLOGON headers and clients. | Günther Deschner | 1 | -6/+6 | |
Guenther (This used to be commit f7100156a7df7ac3ae84e45a47153b38d9375215) | |||||
2008-01-11 | Coverity 512, uninitialized var. | Jeremy Allison | 1 | -2/+2 | |
Jeremy. (This used to be commit 1b7cc80c61ccbf766801080f5a3f0260f40ccc17) | |||||
2007-12-15 | Replace sid_string_static by sid_string_dbg in DEBUGs | Volker Lendecke | 1 | -5/+8 | |
(This used to be commit bb35e794ec129805e874ceba882bcc1e84791a09) | |||||
2007-10-18 | RIP BOOL. Convert BOOL -> bool. I found a few interesting | Jeremy Allison | 1 | -19/+19 | |
bugs in various places whilst doing this (places that assumed BOOL == int). I also need to fix the Samba4 pidl generation (next checkin). Jeremy. (This used to be commit f35a266b3cbb3e5fa6a86be60f34fe340a3ca71f) | |||||
2007-10-10 | r24432: Expand kerberos_return_pac() so that it can be used in winbindd. | Günther Deschner | 1 | -6/+72 | |
Guenther (This used to be commit e70bf0ecc3ec6d3ba8ba384024bbdf9a783072ea) | |||||
2007-10-10 | r24424: Fix the build. | Günther Deschner | 1 | -5/+5 | |
Guenther (This used to be commit 029bf26f8a571ae060f7be60fd3e8c61d86004f7) | |||||
2007-10-10 | r24158: SE_GROUP_RESOURCE in the other_sids list apparently means a | Gerald Carter | 1 | -1/+1 | |
domain local group. Fix a typo in the PAC debugging routine (This used to be commit b0b66b2e7af133b199868b946fad70016e1cefbd) | |||||
2007-10-10 | r23973: For debugging, add (undocumented) net ads kerberos commands (kinit, ↵ | Günther Deschner | 1 | -1/+1 | |
renew, pac). Guenther (This used to be commit 4cada7c1485c9957e553d6e75cb6f30f4338489f) | |||||
2007-10-10 | r23970: Allow to set the debuglevel at which to dump the PAC logon info. | Günther Deschner | 1 | -18/+18 | |
Guenther (This used to be commit 7d321aad83cb7b9cc766bc89a886676337a2bad8) | |||||
2007-10-10 | r23969: Some helper routines to retrieve a PAC and PAC elements. | Günther Deschner | 1 | -0/+160 | |
Guenther (This used to be commit d4c87c792a955be7d5ef59fc683fc48e3d8afe16) | |||||
2007-10-10 | r23784: use the GPLv3 boilerplate as recommended by the FSF and the license text | Andrew Tridgell | 1 | -2/+1 | |
(This used to be commit b0132e94fc5fef936aa766fb99a306b3628e9f07) | |||||
2007-10-10 | r23779: Change from v2 or later to v3 or later. | Jeremy Allison | 1 | -1/+1 | |
Jeremy. (This used to be commit 407e6e695b8366369b7c76af1ff76869b45347b3) | |||||
2007-10-10 | r23251: whoops! Fix compile error | Gerald Carter | 1 | -2/+6 | |
(This used to be commit 22a3ea40ac69fa3722abf28db845ab284a65ad97) | |||||
2007-10-10 | r23080: Fix bug #4637 - we hads missed some cases where | Jeremy Allison | 1 | -12/+24 | |
we were calling PRS_ALLOC_MEM with zero count. Jeremy. (This used to be commit 9a10736e6fa276ca4b0726fbb7baf0daafbdc46d) | |||||
2007-10-10 | r18188: merge 3.0-libndr branch | Jelmer Vernooij | 1 | -2/+2 | |
(This used to be commit 1115745caed3093c25d6be01ffee21819fb0a675) | |||||
2007-10-10 | r13588: Second attempt to fix Bug #3330 - treat the string as a | Jeremy Allison | 1 | -7/+7 | |
uint8 array and copy as such. Gunther please check (sorry I reverted your earlier fix). Jeremy. (This used to be commit 7a17b39c80703909f102487690d2117d874b0e15) | |||||
2007-10-10 | r13585: Sorry Gunther, had to revert this. It's got a buffer | Jeremy Allison | 1 | -3/+11 | |
overrun. Spoke to Jerry about the correct fix. Will add this after. Jeremy. (This used to be commit 33e13aabd3825c59d15dc897536e2ccf8c8f6d5e) | |||||
2007-10-10 | r13581: Correctly parse a non-null terminated, little-endian UCS2 string in the | Günther Deschner | 1 | -11/+3 | |
PAC_LOGON_NAME structure. This was broken on big-endian machines (Solaris SPARC and ppc). Fixes Bug #3330. Jerry, this should be in 3.0.21c. Guenther (This used to be commit 9732490811f8f02ee547ddc6e2694e1122a3a518) | |||||
2007-10-10 | r11183: add small helper function to return a PAC_LOGON_INFO. | Günther Deschner | 1 | -0/+16 | |
Guenther (This used to be commit a8d5d6b845efb62e73e281549528376f3ee74211) | |||||
2007-10-10 | r10710: Fix uninitialized variable. (Thanks to Chengjie Liu | Günther Deschner | 1 | -1/+1 | |
<chengjie.liu@datadomain.com>) Guenther (This used to be commit 241466ee650d1db1b89a4b5b640f27f6b83644c6) | |||||
2007-10-10 | r10671: Attempt to fix the build on machines without kerberos headers. | Volker Lendecke | 1 | -1/+1 | |
Volker (This used to be commit cb816e65a95802d5172c410d1acda2da070b871d) | |||||
2007-10-10 | r10656: BIG merge from trunk. Features not copied over | Gerald Carter | 1 | -79/+399 | |
* \PIPE\unixinfo * winbindd's {group,alias}membership new functions * winbindd's lookupsids() functionality * swat (trunk changes to be reverted as per discussion with Deryck) (This used to be commit 939c3cb5d78e3a2236209b296aa8aba8bdce32d3) | |||||
2007-10-10 | r9163: Rename UNKNOWN_TYPE_10 to PAC_LOGON_NAME (merge from samba4) | Günther Deschner | 1 | -16/+16 | |
Guenther (This used to be commit d14dcba9635d10d2d8bf9f60c601b8c9078ec340) |