Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-09-09 | Fox missing SMB_MALLOC return checks noticed by "Andreas Moroder ↵ | Jeremy Allison | 1 | -0/+3 | |
<andreas.moroder@gmx.net>". Jeremy. | |||||
2010-08-26 | s3-build: only include krb5 environment variables where required. | Günther Deschner | 2 | -0/+2 | |
Guenther | |||||
2010-08-25 | s3-lsa: separate out init_lsa headers. | Günther Deschner | 1 | -0/+1 | |
Guenther | |||||
2010-08-13 | s3-libnet: also remove libnet/libnet_samsync_keytab.c.orig. | Günther Deschner | 1 | -305/+0 | |
Guys, what are you doing here ? ;-) Guenther | |||||
2010-08-13 | s3-libnet: remove source3/libnet/libnet_join.c.orig, added by a previous commit. | Günther Deschner | 1 | -2187/+0 | |
Guenther | |||||
2010-08-13 | s3-krb5 Only build ADS support if arcfour-hmac-md5 is available | Andrew Bartlett | 5 | -10/+2496 | |
Modern Kerberos implementations have either defines or enums for these key types, which makes doing #ifdef difficult. This shows up in files such as libnet_samsync_keytab.c, the bulk of which is not compiled on current Fedora 12, for example. The downside is that this makes Samba unconditionally depend on the arcfour-hmac-md5 encryption type at build time. We will no longer support libraries that only support the DES based encryption types. However, the single-DES types that are supported in common with AD are already painfully weak - so much so that they are disabled by default in modern Kerberos libraries. If not found, ADS support will not be compiled in. This means that our 'net ads join' will no longer set the ACB_USE_DES_KEY_ONLY flag, and we will always try to use arcfour-hmac-md5. A future improvement would be to remove the use of the DES encryption types totally, but this would require that any ACB_USE_DES_KEY_ONLY flag be removed from existing joins. Andrew Bartlett Signed-off-by: Simo Sorce <idra@samba.org> | |||||
2010-08-13 | s3:libnet Add other required headers for libnet_samsync_keytab.c | Andrew Bartlett | 1 | -0/+3 | |
Due to missing defines in modern kerberos libraries, this code was not compiled and so this wasn't noticed. Andrew Bartlett Signed-off-by: Simo Sorce <idra@samba.org> | |||||
2010-08-12 | s3-libnet: fix bug #6364: Pull realm from supplied username on libnet join | Jim McDonough | 1 | -0/+7 | |
2010-08-08 | s3:libnet/libnet_samsync.c: we also need some ndr_pull functions | Stefan Metzmacher | 1 | -0/+1 | |
metze | |||||
2010-08-06 | s3-libnet: include netlogon.h in libnet samsync header. | Günther Deschner | 1 | -0/+1 | |
Guenther | |||||
2010-08-05 | s3-secrets: only include secrets.h when needed. | Günther Deschner | 1 | -1/+1 | |
Guenther | |||||
2010-08-05 | s3: avoid global include of ads.h. | Günther Deschner | 1 | -0/+1 | |
Guenther | |||||
2010-07-13 | s3-libnet: add missing header file, sorry. | Günther Deschner | 1 | -0/+13 | |
Guenther | |||||
2010-07-13 | s3-libnet: better separate headers. | Günther Deschner | 13 | -123/+50 | |
Guenther | |||||
2010-07-01 | s3-libads: only include libds flags where needed. | Günther Deschner | 1 | -0/+2 | |
Guenther | |||||
2010-05-21 | s3:dom_sid Global replace of DOM_SID with struct dom_sid | Andrew Bartlett | 1 | -8/+8 | |
This matches the structure that new code is being written to, and removes one more of the old-style named structures, and the need to know that is is just an alias for struct dom_sid. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-05-18 | s3-rpc_client: move protos to init_samr.h | Günther Deschner | 1 | -0/+1 | |
Guenther | |||||
2010-05-18 | s3-rpc_client: move protos to cli_lsarpc.h | Günther Deschner | 1 | -0/+1 | |
Guenther | |||||
2010-05-18 | s3-rpc_client: move protos to cli_netlogon.h | Günther Deschner | 1 | -0/+1 | |
Guenther | |||||
2010-05-18 | s3: Remove use of iconv_convenience. | Jelmer Vernooij | 2 | -6/+5 | |
2010-05-18 | smbconf: only include smbconf headers where needed. | Günther Deschner | 1 | -0/+2 | |
Guenther | |||||
2010-05-12 | work around AIX6.1 name space pollution rename mod_name to module_name | Olaf Flebbe | 1 | -8/+8 | |
2010-05-06 | s3: only include gen_ndr headers where needed. | Günther Deschner | 2 | -0/+4 | |
This shrinks include/includes.h.gch by the size of 7 MB and reduces build time as follows: ccache build w/o patch real 4m21.529s ccache build with patch real 3m6.402s pch build w/o patch real 4m26.318s pch build with patch real 3m6.932s Guenther | |||||
2010-03-10 | s3/drs: DsCrackNames - Propagating IDL changes to source code | Kamen Mazdrashki | 1 | -2/+2 | |
Signed-off-by: Stefan Metzmacher <metze@samba.org> | |||||
2010-03-10 | s3/drs: DsGetNCChanges - Propagating IDL changes to source code | Kamen Mazdrashki | 1 | -6/+6 | |
Signed-off-by: Stefan Metzmacher <metze@samba.org> | |||||
2010-01-18 | idl: switched to using the WSPP names for the 'neighbour' DRS options | Andrew Tridgell | 1 | -5/+5 | |
The documentation shows that all these functions in fact use the same flags variable type. To be consistent between functions, and to allow easy reference to the WSPP docs, it is better for us to also use this generic DrsOptions bitfield rather than one per operations. | |||||
2010-01-10 | s3: Replace most calls to sid_append_rid() by sid_compose() | Volker Lendecke | 1 | -10/+5 | |
2009-11-27 | s3-kerberos: only use krb5 headers where required. | Günther Deschner | 1 | -0/+1 | |
This seems to be the only way to deal with mixed heimdal/MIT setups during merged build. Guenther | |||||
2009-11-26 | s3-rpc: Avoid including every pipe's client and server stubs everywhere in ↵ | Günther Deschner | 3 | -0/+4 | |
samba. Guenther | |||||
2009-10-13 | s3-netlogon: pass down account name to remote password set functions. | Günther Deschner | 1 | -0/+1 | |
Guenther | |||||
2009-10-05 | Revert "s3: Attempt to fix machine password change" | Volker Lendecke | 1 | -4/+5 | |
This reverts commit 20a8ea91e10af167067cc794a251265aaf489e75. Ooops, this should not have been committed. | |||||
2009-10-05 | s3: Attempt to fix machine password change | Volker Lendecke | 1 | -5/+4 | |
2009-09-30 | w32err: WERR_DC_NOT_FOUND replaced with WERR_DCNOTFOUND | Kamen Mazdrashki | 1 | -2/+2 | |
It turns out in win32 ERROR_DC_NOT_FOUND exists and it is an error for Device Context (DC), not Domain Controller Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com> | |||||
2009-09-17 | w32err: use WERR_DC_NOT_FOUND name instead of WERR_DOMAIN_CONTROLLER_NOT_FOUND | Kamen Mazdrashki | 1 | -2/+2 | |
Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2009-09-15 | s3-dcerpc: use dcerpc_AuthLevel and remove duplicate set of flags. | Günther Deschner | 1 | -1/+1 | |
Guenther | |||||
2009-09-11 | s3-rpc_client: add dcerpc_transport_t to cli_rpc_pipe_open_schannel(). | Günther Deschner | 1 | -1/+2 | |
Guenther | |||||
2009-07-14 | s3-account_policy: add pdb_policy_type enum. | Günther Deschner | 1 | -9/+14 | |
Guenther | |||||
2009-06-26 | Don't use ads realm name for non-ads case. #6481 | Jim McDonough | 1 | -7/+9 | |
Also check that the connection to ads worked. | |||||
2009-06-22 | s3-libnet: fix libnet_unjoin_remove_machine_acct() when called without ads ↵ | Günther Deschner | 1 | -1/+7 | |
struct. Guenther | |||||
2009-06-19 | Don't require "Modify property" perms to unjoin bug #6481) | Jim McDonough | 1 | -14/+35 | |
"net ads leave" stopped working when "modify properties" permissions were not granted (meaning you had to be allowed to disable the account that you were about to delete). Libnetapi should not delete machine accounts, as this does not happen on win32. The WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE flag really means "disable" (both in practice and docs). However, to keep the functionality in "net ads leave", we will still try to do the delete. If this fails, we try to do the disable. Additionally, it is possible in windows to not disable or delete the account, but just tell the local machine that it is no longer in the account. libnet can now do this as well. | |||||
2009-05-16 | Move smb_create_user() in samsync | Simo Sorce | 1 | -0/+60 | |
It is not used anywhere else, so make it also static and remove it from proto.h | |||||
2009-04-24 | s3-libnetjoin: make acct_flags dependent on secure channel type. | Günther Deschner | 1 | -3/+12 | |
Guenther | |||||
2009-04-24 | s3-libnetjoin: add support for WKSSVC_JOIN_FLAGS_JOIN_UNSECURE. | Günther Deschner | 1 | -3/+59 | |
Guenther | |||||
2009-04-23 | Fix an uninitialized variable | Volker Lendecke | 1 | -0/+2 | |
2009-04-21 | s3-secdesc: use SEC_FLAG_MAXIMUM_ALLOWED instead of SEC_RIGHTS_MAXIMUM_ALLOWED. | Günther Deschner | 1 | -5/+5 | |
Guenther | |||||
2009-04-20 | Remove smb_mkstemp() - libreplace will now provide a secure mkstemp() if | Jelmer Vernooij | 1 | -2/+2 | |
the system one is broken. | |||||
2009-04-20 | Merge commit 'origin/master' into libcli-auth-merge-without-netlogond | Andrew Bartlett | 1 | -1/+1 | |
2009-04-20 | Remove use of talloc_reference in cli_rpc_pipe_open_schannel_with_key() | Andrew Bartlett | 1 | -1/+1 | |
2009-04-15 | Fix bug #6089 - Winbind samr_OpenDomain not possible with Samba 3.2.6+ | Jeremy Allison | 1 | -1/+1 | |
What a difference a name makes... :-). Just because something is missnamed SAMR_ACCESS_OPEN_DOMAIN, when it should actually be SAMR_ACCESS_LOOKUP_DOMAIN, don't automatically use it for a security check in _samr_OpenDomain(). Jeremy. | |||||
2009-04-14 | Make Samba3 use the new common libcli/auth code | Andrew Bartlett | 1 | -4/+4 | |
This is particuarly in the netlogon client (but not server at this stage) |