summaryrefslogtreecommitdiff
path: root/source4/auth/gensec/config.mk
AgeCommit message (Collapse)AuthorFilesLines
2010-02-23s4:schannel merge code with s3Simo Sorce1-11/+1
After looking at the s4 side of the (s)channel :) I found out that it makes more sense to simply make it use the tdb based code than redo the same changes done to s3 to simplify the interface. Ldb is slow, to the point it needs haks to pre-open the db to speed it up, yet that does not solve the lookup speed, with ldb it is always going to be slower. Looking through the history it is evident that the schannel database doesn't really need greate expanadability. And lookups are always done with a single Key. This seem a perfet fit for tdb while ldb looks unnecessarily complicated. The schannel database is not really a persistent one. It can be discared during an upgrade without causing any real issue. all it contains is temproary session data.
2009-12-24s4:gensec: change gensec_update_send/recv to tevent_reqStefan Metzmacher1-1/+1
metze
2009-12-16s4-gensec: Added remote and local setter/getter using tsocket.Andreas Schneider1-1/+1
2009-10-02s4-pygensec: a bit closer to workingAndrew Tridgell1-1/+1
I'll need help from Andrew on how to get gensec to initialise it's ops element
2009-09-26pygensec: Add initial work on a gensec Python module.Jelmer Vernooij1-0/+5
2009-09-17spnego: share spnego_parse.Günther Deschner1-1/+1
Guenther
2009-09-16schannel: move schannel_sign to main directory.Günther Deschner1-1/+1
Guenther
2009-06-02Fix dependencies when using shared libraries.Jelmer Vernooij1-1/+1
2009-04-14Push schannel_state.c into the top level.Andrew Bartlett1-1/+1
This is the server side state for netlogon credential chaining Andrew Bartlett
2009-02-13Push sam_get_server_info_principal into the auth subsystemAndrew Bartlett1-1/+1
This means it must be accessed via the supplied auth_context in the GENSEC server, and should remove the hard depenceny of GENSEC on the auth subsystem and ldb (allowing LDB not to rely on LDB is considered a good thing, apparently) Andrew Bartlett
2009-02-01Make schannel not depend on samdb anymore.Simo Sorce1-1/+1
2008-12-24Rename samba-socket -> samba_socket to fix a couple more compilerJelmer Vernooij1-1/+1
warnings.
2008-05-31Revert Jelmer's CFLAGS commit e2b71a0ecbf10a78a59a8ec6371bdee57b1bfa6cAndrew Bartlett1-2/+0
This commit broke the build, because not all files (libreplace, popt) were updated. Andrew Bartlett (This used to be commit 3faacf4351d68a10aea78b53768571d2059772ae)
2008-05-30Move CFLAGS handling out of smb_build.Jelmer Vernooij1-0/+2
(This used to be commit e2b71a0ecbf10a78a59a8ec6371bdee57b1bfa6c)
2008-05-18Fix a couple (well, little more than that..) of typos.Jelmer Vernooij1-4/+4
(This used to be commit a6b52119940a900fb0de3864b8bca94e2965cc24)
2008-05-18Create prototype headers from Makefile directory, without smb_build in the ↵Jelmer Vernooij1-2/+2
middle. (This used to be commit f4a77b96f9c17d853348b70794026e5b9e384942)
2008-05-18Avoid smb_build for prototype headers in some places.Jelmer Vernooij1-2/+4
(This used to be commit 4876c4efbbafb4e0afa3554cd9f748ab591a2927)
2008-05-18Use variables for source directory in a couple more places.Jelmer Vernooij1-9/+9
(This used to be commit 2860a7db5968c7007522cdb300eba390da929ab8)
2008-04-26Fix dependencies on gensec_krb5 and the NTLMSSP code.Andrew Bartlett1-1/+1
This is so that gensec_krb5 does not depend on the NTLM authentication code. Andrew Bartlett (This used to be commit 71ec5bfb3e973bd68649a598d006efcdda18f1b6)
2008-04-15Move SOVERSION, VERSION and PC_FILE out of smb_build but use make variables ↵Jelmer Vernooij1-3/+4
directly instead. (This used to be commit 9d0ae012b0b463278cd054d06788aa998acc2da2)
2008-04-14Fix unresolved symbols.Jelmer Vernooij1-1/+1
(This used to be commit 8573e828d1b68c47b3c1754e9be230b2e78d9d52)
2008-04-14Use _OBJ_FILES variables in a couple more places.Jelmer Vernooij1-7/+6
(This used to be commit 92856d5054106894b65cd1a1b5119c0facfc4cff)
2008-04-14Move object files lists to makefile rather than smb_build.Jelmer Vernooij1-9/+14
(This used to be commit 5628d58990144463fd87f8c847c9384ac2193681)
2008-04-02Reduce the number of installed headers.Jelmer Vernooij1-1/+1
(This used to be commit 2243e24024f09ff9c9c7d0eb735c3b39c9d84424)
2008-02-29Move public header accumulation out of the perl code.Jelmer Vernooij1-2/+3
Never install generated prototype files. It's easier to break the API when using them and they're not easily readable for 3rd party users. Conflicts: source/auth/config.mk source/auth/credentials/config.mk source/auth/gensec/config.mk source/build/smb_build/config_mk.pm source/build/smb_build/main.pl source/build/smb_build/makefile.pm source/dsdb/config.mk source/lib/charset/config.mk source/lib/tdr/config.mk source/lib/util/config.mk source/libcli/config.mk source/libcli/ldap/config.mk source/librpc/config.mk source/param/config.mk source/rpc_server/config.mk source/torture/config.mk (This used to be commit 6c659689ed4081f1d7a6253c538c7f01784197ba)
2008-02-18Get rid of 'INTEGRATED' build of modules - now replaced by 'MERGED_OBJ'Jelmer Vernooij1-1/+1
(This used to be commit 269cbf84d8b7dbf3bc88adc04ae283dc908af5ac)
2008-01-22build: Remove support for DESCRIPTION setting that is now unused.Jelmer Vernooij1-1/+0
(This used to be commit 91d7ba5202e6c375456a42c2c6861f63c7fcfc20)
2008-01-22gensec: Use manually written .pc file.Jelmer Vernooij1-0/+1
(This used to be commit 96a5ac9db2399019518e134a00c564ec1066f536)
2007-12-21r26483: Merge ldb module dependency fixes, fix auth python module.Jelmer Vernooij1-2/+2
(This used to be commit 85eeecf997a071ca7e7ad0247e8d34d49b7ffcbb)
2007-12-21r26385: Integrate gensec-socket into gensec.Jelmer Vernooij1-16/+5
(This used to be commit 78bb444b4b73df9a84f8702814f9b30b32ffd885)
2007-12-21r26203: Avoid using ldb_wrap for secrets database.Jelmer Vernooij1-0/+1
(This used to be commit b45093f01fc71714e14422a80a81cf1cc25df3e2)
2007-12-21r26136: Attempt to fix dependencies for auth.Jelmer Vernooij1-3/+3
(This used to be commit abf2600a044cdbab6c5d7880d18217bff3d15c39)
2007-10-10r22404: more dependencies which should be privateStefan Metzmacher1-8/+6
metze (This used to be commit e0e35965d1eaab182941d17da744b70c4234ca52)
2007-10-10r22397: hopefully fix the build on some aix hosts in the build-farmStefan Metzmacher1-1/+1
we need to make sure -Iheimdal/lib/gssapi comes before -I/usr/local/include metze (This used to be commit a6ba465fa8b0a4a0835593526d3f2670736c2c8e)
2007-10-10r19676: Fix some more dependencies.Jelmer Vernooij1-1/+1
(This used to be commit 8768bec81f57131a0c9754e8121b345c0be4a5d0)
2007-10-10r19598: Ahead of a merge to current lorikeet-heimdal:Andrew Bartlett1-4/+5
Break up auth/auth.h not to include the world. Add credentials_krb5.h with the kerberos dependent prototypes. Andrew Bartlett (This used to be commit 2b569c42e0fbb596ea82484d0e1cb22e193037b9)
2007-10-10r19507: Merge my DSO fixes branch. Building Samba's libraries as shared ↵Jelmer Vernooij1-2/+2
libraries works again now, by specifying --enable-dso to configure. (This used to be commit 7a01235067a4800b07b8919a6a475954bfb0b04c)
2007-10-10r18155: Add my work in progress, a module to link with Cyrus-SASL, for aAndrew Bartlett1-0/+10
DIGEST-MD5 implemenation in particular. However, I can't make this work: Cyrus-SASL isn't loading the mech... Andrew Bartlett (This used to be commit 0b193d28c896c9d212a536da7d87634543d971a5)
2007-10-10r17197: This patch moves the encryption of bulk data on SASL negotiated securityAndrew Bartlett1-0/+11
contexts from the application layer into the socket layer. This improves a number of correctness aspects, as we now allow LDAP packets to cross multiple SASL packets. It should also make it much easier to write async LDAP tests from windows clients, as they use SASL by default. It is also vital to allowing OpenLDAP clients to use GSSAPI against Samba4, as it negotiates a rather small SASL buffer size. This patch mirrors the earlier work done to move TLS into the socket layer. Unusual in this pstch is the extra read callback argument I take. As SASL is a layer on top of a socket, it is entirely possible for the SASL layer to drain a socket dry, but for the caller not to have read all the decrypted data. This would leave the system without an event to restart the read (as the socket is dry). As such, I re-invoke the read handler from a timed callback, which should trigger on the next running of the event loop. I believe that the TLS code does require a similar callback. In trying to understand why this is required, imagine a SASL-encrypted LDAP packet in the following formation: +-----------------+---------------------+ | SASL Packet #1 | SASL Packet #2 | ----------------------------------------+ | LDAP Packet #1 | LDAP Packet #2 | ----------------------------------------+ In the old code, this was illegal, but it is perfectly standard SASL-encrypted LDAP. Without the callback, we would read and process the first LDAP packet, and the SASL code would have read the second SASL packet (to decrypt enough data for the LDAP packet), and no data would remain on the socket. Without data on the socket, read events stop. That is why I add timed events, until the SASL buffer is drained. Another approach would be to add a hack to the event system, to have it pretend there remained data to read off the network (but that is ugly). In improving the code, to handle more real-world cases, I've been able to remove almost all the special-cases in the testnonblock code. The only special case is that we must use a deterministic partial packet when calling send, rather than a random length. (1 + n/2). This is needed because of the way the SASL and TLS code works, and the 'resend on failure' requirements. Andrew Bartlett (This used to be commit 5d7c9c12cb2b39673172a357092b80cd814850b0)
2007-10-10r15363: Fix dependencies for shared libraryJelmer Vernooij1-2/+3
(This used to be commit f2ca71f1229f4c20296895116c09bacbd6a53b55)
2007-10-10r15304: Fix smbd build, more updates on getting --enable-dso to build againJelmer Vernooij1-1/+1
(This used to be commit 3ef9326386ba1c210166302cbcf02d2ed3f19944)
2007-10-10r15298: Fix the build using a few hacks in the build system.Jelmer Vernooij1-1/+1
Recursive dependencies are now forbidden (the build system will bail out if there are any). I've split up auth_sam.c into auth_sam.c and sam.c. Andrew, please rename sam.c / move its contents to whatever/wherever you think suits best. (This used to be commit 6646384aaf3e7fa2aa798c3e564b94b0617ec4d0)
2007-10-10r15207: Introduce PRIVATE_DEPENDENCIES and PUBLIC_DEPENDENCIES as replacementJelmer Vernooij1-4/+4
for REQUIRED_SUBSYSTEMS. (This used to be commit adc8a019b6da256f104abed1b82bfde6998a2ac9)
2007-10-10r14572: Give libraries saner names, remove some .pc files, make some thingsJelmer Vernooij1-1/+1
subsystems in case a library doesn't make sense. (This used to be commit ed382873fd01457a53e0a1e1f5ba6753dfbc0646)
2007-10-10r14497: Fix build with shared librariesJelmer Vernooij1-2/+2
(This used to be commit c74fc55831ca24819ae7f5e0920d0351e2b46a08)
2007-10-10r14492: Fix shared libs - set SO_VERSION to 0 everywhere for now.Jelmer Vernooij1-1/+1
(This used to be commit 4682bc5ce047d81586447b9df82c91ed1fe677cf)
2007-10-10r14484: Install more headersJelmer Vernooij1-2/+2
(This used to be commit 430c6516d383bfd7f27287394bf8eef9f174b3e6)
2007-10-10r14327: Replace MAJOR_VERSION/MINOR_VERSION/RELEASE_VERSION with two parameters:Jelmer Vernooij1-3/+2
- VERSION: should contain the current version. Will be made part of the filename. - SO_VERSION: should contain the latest version that this on is compatible to. Will be used for setting the soname of the shared library. Fix sonames and use them on platforms that support them Remove symlinking code. ldconfig will take care of creating the symlinks now that we set the soname. (This used to be commit 7871b07e21c85c63d0ecac4c31b98dc112d18af5)
2007-10-10r14065: build gensec_schannel always static as libnet needs functions from itStefan Metzmacher1-0/+1
metze (This used to be commit 91a3a0b795ebe73d29b69bb40ae9e67b40f90212)
2007-10-10r13960: Generate makefile rules for installing/removing shared modules.Jelmer Vernooij1-10/+10
(This used to be commit 2c746980328431ab04852dc668899e3eb042da99)
generated by cgit (git 2.34.1) at 2024-11-01 05:15:49 +0000