Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2011-07-21 | s3:loadparm: add support for P_BYTES to is_default() - fix build warning | Michael Adam | 1 | -0/+1 | |
2011-07-21 | s3:loadparm: add support for P_CMDLIST to print_parameter - fix build warning. | Michael Adam | 1 | -4/+14 | |
2011-07-21 | s3:loadparm: add support for P_BYTES to print_parameter() - fix build warning. | Michael Adam | 1 | -0/+1 | |
2011-07-21 | s3:loadparm: add support for P_CMDLIST to equal_parameter() - fix build warning | Michael Adam | 1 | -0/+1 | |
2011-07-21 | s3:loadparm: add suppor for P_BYTES to equal_parameter() - fix build warning | Michael Adam | 1 | -0/+1 | |
2011-07-21 | s3:loadparm: szNetbiosAliases is now a const char ** - cast properly | Michael Adam | 1 | -2/+2 | |
2011-07-21 | s3:loadparm: szWinbindNssInfo is now a const char ** instead of a char ** - ↵ | Michael Adam | 1 | -1/+1 | |
cast properly | |||||
2011-07-21 | s3:loadparm: fix a check that was accidentially an assignment in ↵ | Michael Adam | 1 | -1/+1 | |
lp_servicebynum() | |||||
2011-07-21 | s3:loadparm: untangle assignment from check in do_section() | Michael Adam | 1 | -2/+2 | |
2011-07-21 | s3-waf: fix a libcrypto configure check | Christian Ambach | 1 | -1/+1 | |
the parameters to conf.CHECK_FUNCS_IN were in the wrong order Autobuild-User: Christian Ambach <ambi@samba.org> Autobuild-Date: Thu Jul 21 16:49:52 CEST 2011 on sn-devel-104 | |||||
2011-07-21 | s3:winbindd remove an unused variable | Christian Ambach | 1 | -2/+0 | |
fixes a compiler warning | |||||
2011-07-21 | s3:utils fix a compiler warning | Christian Ambach | 1 | -0/+1 | |
fix a compiler warning about missing prototypes | |||||
2011-07-21 | s3:modules/vfs_afsacl fix a compiler warning | Christian Ambach | 1 | -1/+1 | |
2011-07-21 | s3:afs make path argument to afs_syscall const | Christian Ambach | 3 | -3/+3 | |
2011-07-21 | s3:modules/vfs_afsacl fix a compiler warning | Christian Ambach | 1 | -2/+1 | |
2011-07-21 | s3:modules/vfs_afsacl use stdbool types | Christian Ambach | 1 | -35/+35 | |
2011-07-21 | s3:modules/vfs_afsacl remove some unnecessary whitespace | Christian Ambach | 1 | -3/+3 | |
2011-07-21 | s3:lib/afs fix the build with --with-vfs-afsacl | Christian Ambach | 1 | -0/+4 | |
This fixes the second piece of Bug #8263 | |||||
2011-07-21 | s3:lib/afs use stdbool types | Christian Ambach | 2 | -22/+22 | |
2011-07-21 | s3:utils/net_afs fix compiler warnings | Christian Ambach | 1 | -2/+3 | |
2011-07-21 | s3:lib/afs_settoken fix some compiler warnings | Christian Ambach | 1 | -3/+4 | |
2011-07-21 | s3:lib/afs fix some compiler warnings | Christian Ambach | 1 | -2/+3 | |
2011-07-21 | s3:lib/afs fix the build with --with-fake-kaserver | Christian Ambach | 3 | -4/+15 | |
This fixes one piece of Bug #8263 | |||||
2011-07-20 | s3-torture: run_simple_posix_open_test(): replace cli_read_old() with | Björn Baumbach | 1 | -2/+9 | |
cli_read() Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jul 20 23:22:09 CEST 2011 on sn-devel-104 | |||||
2011-07-20 | s3-torture: rw_torture2(): replace cli_read_old() with cli_read() | Björn Baumbach | 1 | -4/+10 | |
Signed-off-by: Stefan Metzmacher <metze@samba.org> | |||||
2011-07-20 | s3-torture: rw_torture3(): replace cli_read_old() with cli_read() | Björn Baumbach | 1 | -10/+7 | |
Signed-off-by: Stefan Metzmacher <metze@samba.org> | |||||
2011-07-20 | s3-torture: rw_torture(): replace cli_read_old() with cli_read() | Björn Baumbach | 1 | -3/+11 | |
Signed-off-by: Stefan Metzmacher <metze@samba.org> | |||||
2011-07-20 | s3-libsmb: introduce new NTSTATUS cli_read() | Björn Baumbach | 2 | -0/+23 | |
Replacement for cli_read_old() Signed-off-by: Stefan Metzmacher <metze@samba.org> | |||||
2011-07-20 | s3-libsmb: replace cli_read() with cli_read_old() | Björn Baumbach | 10 | -28/+28 | |
Will introduce new cli_read() function. Signed-off-by: Stefan Metzmacher <metze@samba.org> | |||||
2011-07-20 | s3:libsmb: move cli->cnum to cli->smb1.tid and hide it behind ↵ | Stefan Metzmacher | 10 | -36/+55 | |
cli_state_[g|s]et_tid() metze | |||||
2011-07-20 | s3:libsmb: move cli->pid to cli->smb1.pid and hide it behind cli_[g|s]etpid() | Stefan Metzmacher | 5 | -12/+18 | |
metze | |||||
2011-07-20 | s3:libsmb: add cli->smb1.vc_num and hide it behind cli_state_get_vc_num() | Stefan Metzmacher | 4 | -3/+11 | |
This makes it clearer, why we send the pid value in the session setup. metze | |||||
2011-07-20 | s3:libsmb: move cli->mid to cli->smb1.mid | Stefan Metzmacher | 3 | -4/+8 | |
metze | |||||
2011-07-20 | s3:libsmb: smb_bytes_talloc_string() doesn't need a cli_state | Stefan Metzmacher | 1 | -3/+3 | |
metze | |||||
2011-07-20 | s3-gse Work around the MIT 1.9 gss_krb5_import_cred | Andrew Bartlett | 1 | -6/+16 | |
We detect this function at configure time, but it currently fails to operate the way we need - that is, when the principal is not specified, it gives this error. When the principal is specified we get 'wrong principal in request' in the GSS acceptor, so for now the best option is to fall back to the alternate approach. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Jul 20 06:35:05 CEST 2011 on sn-devel-104 | |||||
2011-07-20 | s3-gse Allow printing the partial error string | Andrew Bartlett | 1 | -6/+6 | |
We may not be able to obtain the full error string, so print what we can get. This is required when the error is the the GSSAPI layer, not the mechanism. Andrew Bartlett | |||||
2011-07-20 | s3-auth fix dummy function in the not-with-kerberos case | Andrew Bartlett | 1 | -1/+1 | |
2011-07-20 | s3-auth Replace False with false in auth_util.c | Andrew Bartlett | 1 | -10/+10 | |
Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Jul 20 02:31:15 CEST 2011 on sn-devel-104 | |||||
2011-07-20 | s3-auth Replace True with true in auth_util.c | Andrew Bartlett | 1 | -12/+12 | |
2011-07-20 | s3-auth Fix spelling | Andrew Bartlett | 1 | -7/+7 | |
2011-07-20 | s3-auth Remove pointless destructor in make_server_info | Andrew Bartlett | 1 | -10/+0 | |
All the callers allocate ->info3 as a talloc child already. As regardes the TALLOC_ZERO(), I added this originally out of parinoia many years ago. We do not consistantly zero session keys in memory, and for NTLMv2 and Kerberos they are random for each sesssion, so breaking into smbd far enough to read an old session key isn't a particularly interesting attack, compared with (say) reading the keytab or the password database. (NTLM and LM session keys are fixed derivitives of the passwords however). Andrew Bartlett | |||||
2011-07-20 | s3-auth inline make_auth_session_info into only caller | Andrew Bartlett | 3 | -25/+1 | |
2011-07-20 | s3-auth Remove seperate guest boolean | Andrew Bartlett | 10 | -21/+31 | |
Instead, we base our guest calculations on the presence or absense of the authenticated users group in the token, ensuring that we have only one canonical source of this important piece of authorization data Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2011-07-20 | auth: Set NETLOGON_GUEST and use it to determine guest status | Andrew Bartlett | 1 | -0/+3 | |
These additional measures should help ensure we do not accidentily upgrade a guest to an authenticated user in the future. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2011-07-20 | auth: Split out make_user_info_SamBaseInfo and add authenticated argument | Andrew Bartlett | 1 | -13/+5 | |
This will allow the source3 auth code to call this without needing to double-parse the SIDs Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2011-07-20 | s3-rpc_server remove per-element copies of auth_session_info | Andrew Bartlett | 2 | -44/+4 | |
This is not required any more now that they are the same structure, and shows the value in having a common structure across the codebase. In particular, now any additional state that needs to be added to the auth_session_info will be transparently available across the named pipe proxy, without a need to modify the mapping layer. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2011-07-20 | s3-auth Use the common auth_session_info | Andrew Bartlett | 42 | -228/+228 | |
This patch finally has the same structure being used to describe the authorization data of a user across the whole codebase. This will allow of our session handling to be accomplished with common code. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2011-07-20 | s3-auth use auth_user_info not netr_SamInfo3 in auth3_session_info | Andrew Bartlett | 18 | -99/+82 | |
This makes auth3_session_info identical to auth_session_info The logic to convert the info3 to a struct auth_user_info is essentially moved up the stack from the named pipe proxy in source3/rpc_server to create_local_token(). Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2011-07-20 | s3-rpc_server read and write the unix_token and unix_info across named_pipe_auth | Andrew Bartlett | 2 | -27/+42 | |
This ensures that the exact same token is used on both sides of the pipe, when a full token is passed (ie, source3 to source3, but not yet source4 to to source3 as the unix info isn't calculated there yet). If we do not have unix_token, we fall back to the old behaviour and go via create_local_token(). (However, in this case the security_token is now overwritten, as it is better to have it match the rest of the session_info create_local_token() builds). Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> | |||||
2011-07-20 | s3-auth reimplement copy_session_info via NDR pull/push | Andrew Bartlett | 1 | -57/+23 | |
This ensures we do not miss elements. Pattern copied from auth_netlogond. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org> |