Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2010-08-13 | s3:libnet Add other required headers for libnet_samsync_keytab.c | Andrew Bartlett | 1 | -0/+3 | |
Due to missing defines in modern kerberos libraries, this code was not compiled and so this wasn't noticed. Andrew Bartlett Signed-off-by: Simo Sorce <idra@samba.org> | |||||
2010-08-13 | tdb: add TDB_DEPS variable filled with required libraries | Björn Jacke | 2 | -1/+3 | |
This is required for Solaris, which needs to link in librt to make use of fdatasync(). | |||||
2010-08-13 | s3-build: pointless to link in libads and dcutils into smbcacls. | Günther Deschner | 1 | -1/+1 | |
Guenther | |||||
2010-08-13 | s3-build: separate out libads_printer. | Günther Deschner | 1 | -3/+5 | |
Guenther | |||||
2010-08-13 | s3-waf: separate out libads_printer. | Günther Deschner | 1 | -2/+4 | |
Guenther | |||||
2010-08-13 | s3-selftest: add testparm tests to selftest. | Günther Deschner | 1 | -0/+1 | |
Guenther | |||||
2010-08-12 | Fix bug #7617 - smbd coredump due to uninitialized variables in the ↵ | Jeremy Allison | 1 | -2/+2 | |
performance counter code. In the file rpc_server.c, function _winreg_QueryValue() uint8_t *outbuf Should be : uint8_t *outbuf = NULL; As it is later freed by if (free_buf) SAFE_FREE(outbuf); in some cases, this frees the unintialized outbuf, which causes a coredump. | |||||
2010-08-12 | s3-libnet: fix bug #6364: Pull realm from supplied username on libnet join | Jim McDonough | 1 | -0/+7 | |
2010-08-12 | s3-waf: fix the build. | Günther Deschner | 1 | -0/+21 | |
Guenther | |||||
2010-08-12 | s3: fall back to cups-config for underlinked libs | Björn Jacke | 1 | -4/+10 | |
some OpenBSD systems have underlinked cups libraries. If linking against cups alone fails, try to link against all the cups-config --libs cruft, which we usually don't want. (bugzila #7244) | |||||
2010-08-12 | Revert "s3: Use cups-config --libs" | Björn Jacke | 1 | -1/+1 | |
This reverts commit 911db761148. This was introduced in 18f1f5b56b140 intentionally. | |||||
2010-08-12 | s3:Makefile: link in dcerpc client stubs | Stefan Metzmacher | 1 | -0/+20 | |
metze | |||||
2010-08-12 | s3:winbindd: add wbint dcerpc_binding_handle backend | Stefan Metzmacher | 1 | -0/+262 | |
metze | |||||
2010-08-12 | s3:rpc_server: add rpc_pipe_open_internal dcerpc_binding_handle backend | Stefan Metzmacher | 1 | -0/+272 | |
metze | |||||
2010-08-12 | s3:rpc_client: add dcerpc_binding_handle backend | Stefan Metzmacher | 4 | -0/+376 | |
metze | |||||
2010-08-12 | s3: Reduce the load on the echo handler | Volker Lendecke | 1 | -0/+2 | |
If the parent is fast enough, the echo handler should not step in. When the socket becomes readable, the echo handler goes to sleep for a second. If within that second, the parent has picked up the SMB request from the net, the echo handler will just go back to select(). | |||||
2010-08-12 | s3: Slightly simplify the logic in smbd_server_echo_handler | Volker Lendecke | 1 | -1/+4 | |
2010-08-12 | s3: Slightly simplify the logic in smbd_server_connection_handler | Volker Lendecke | 1 | -1/+4 | |
2010-08-12 | s3: ?true:false is a *bit* pointless :-) | Volker Lendecke | 1 | -1/+1 | |
2010-08-11 | s3-waf: fix the waf build with more recent MIT krb5 libs. | Günther Deschner | 2 | -1/+4 | |
(such as MIT krb5 1.7.1 on fedora 13). This whole area needs more work and love later, for now it builds at least. Kai, please check. Guenther | |||||
2010-08-10 | libcli/auth Make the source3/ implementation of the NTLMSSP server common | Andrew Bartlett | 1 | -527/+0 | |
This means that the core logic (but not the initialisation) of the NTLMSSP server is in common, but uses different authentication backends. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-08-10 | s3:ntlmssp Split the NTLMSSP server into before and after authentication | Andrew Bartlett | 1 | -62/+148 | |
This allows for a future where the auth subsystem is async, and the session key generation needs to happen in a callback. This code is originally reworked into this style by metze for the source4/ implementation. The other change here is to introduce an 'out_mem_ctx', which makes the API match that used in source4. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-08-10 | s3:ntlmssp Always call ntlmssp_sign_init() | Andrew Bartlett | 1 | -3/+1 | |
There is no code path that sets nt_status before this point, without a return. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-08-10 | s3:ntlmssp Don't use talloc_tos() for NTLMSSP blobs for now | Andrew Bartlett | 1 | -2/+2 | |
This code will, I hope, soon be merged in common, and the Samba4 use case does not currently support talloc_tos() properly. Use another context for now. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-08-10 | s3:ntlmssp Don't permit LM_KEY in combination with NTLMv2 | Andrew Bartlett | 1 | -1/+4 | |
This is another 'belts and braces' check to avoid the use of the weak 'LM_KEY' encryption when the client has chosen NTLMv2. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-08-10 | s3:ntlmssp Don't reply with the LM_KEY negotiation flag when not available | Andrew Bartlett | 1 | -0/+15 | |
This ensures the client isn't confused and we don't enter this weaker authentication scheme when we don't really, really need to. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-08-10 | s3:ntlmssp Don't use the lm key if the user didn't supply one. | Andrew Bartlett | 1 | -3/+3 | |
This may help to avoid a number of possible MITM attacks where LM_KEY is spoofed into the session. If the login wasn't with lanman (and so the user chose to disclose their lanman response), don't disclose back anything based on their lanman password. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-08-10 | s3:ntlmssp Add extra DEBUG() message for auth system failures | Andrew Bartlett | 1 | -0/+2 | |
Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-08-10 | s3:ntlmssp Redirect lp_lanman_auth() via 'allow_lm_key' | Andrew Bartlett | 1 | -2/+4 | |
This will allow this to be handled via common code in the future Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-08-10 | s3: fix the waf build. | Günther Deschner | 1 | -1/+2 | |
Guenther | |||||
2010-08-10 | libcli/auth Move some source3/ NTLMSSP functions to the common code. | Andrew Bartlett | 2 | -88/+2 | |
libcli/auth Use true and false rather than True and False in common code Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org> | |||||
2010-08-09 | Fix bug #7608 - Win7 SMB2 authentication causes smbd panic | Jeremy Allison | 1 | -2/+4 | |
We need to call setup_ntlmssp_server_info() if status==NT_STATUS_OK, or if status is anything except NT_STATUS_MORE_PROCESSING_REQUIRED, as this can trigger map to guest. Jeremy. | |||||
2010-08-09 | s3-winbind: Fix Bug #7568: Make sure cm_connect_lsa_tcp does not reset the ↵ | Günther Deschner | 1 | -7/+13 | |
secure channel. This is an important fix as the following could and is happening: * winbind authenticates a user via schannel secured netlogon samlogonex call, current secure channel cred state is stored in winbind state, winbind sucessfully decrypts session key from the info3 * winbind sets up a new schannel ncacn_ip_tcp lsa pipe (and thereby resets the secure channel on the dc) * subsequent samlogonex calls use the new secure channel creds on the dc to encrypt info3 session key, while winbind tries to use old schannel creds for decryption Guenther | |||||
2010-08-08 | s3: Remove the smbd_messaging_context from load_printers | Volker Lendecke | 4 | -7/+8 | |
2010-08-08 | s3: Remove the smbd_messaging_context from pcap_cache_reload | Volker Lendecke | 4 | -7/+10 | |
2010-08-08 | s3: Remove the smbd_messaging_context from cups_cache_reload | Volker Lendecke | 3 | -9/+9 | |
2010-08-08 | s3: Remove the smbd_messaging_context from cups_pcap_load_async | Volker Lendecke | 1 | -5/+7 | |
2010-08-08 | s3: Remove the smbd_messaging_context from smb_conf_updated | Volker Lendecke | 1 | -1/+1 | |
2010-08-08 | s3: Remove the smbd_messaging_context from spoolss_init_cb | Volker Lendecke | 1 | -2/+4 | |
2010-08-08 | s3: Remove some smbd_messaging_context references from smbd_process | Volker Lendecke | 1 | -7/+7 | |
2010-08-08 | s3: Pass sconn to smbd_process | Volker Lendecke | 3 | -32/+32 | |
2010-08-08 | s3: Lift the server_messaging_context from housekeeping_fn | Volker Lendecke | 1 | -3/+6 | |
2010-08-08 | s3: Lift the server_messaging_context from check_reload | Volker Lendecke | 1 | -4/+4 | |
2010-08-08 | s3: Make check_reload() static | Volker Lendecke | 2 | -2/+1 | |
2010-08-08 | s3: Lift the server_messaging_context from spoolss_setjob_1 | Volker Lendecke | 1 | -3/+4 | |
2010-08-08 | s3: Lift the server_messaging_context from construct_printer_info6 | Volker Lendecke | 1 | -2/+3 | |
2010-08-08 | s3: Lift the server_messaging_context from construct_printer_info2 | Volker Lendecke | 1 | -3/+4 | |
2010-08-08 | s3: Lift the server_messaging_context from construct_notify_jobs_info | Volker Lendecke | 1 | -5/+6 | |
2010-08-08 | s3: Lift the server_messaging_context from construct_notify_printer_info | Volker Lendecke | 1 | -6/+8 | |
2010-08-08 | s3: Pass messaging_context through s_notify_info_data_table | Volker Lendecke | 1 | -37/+70 | |