samba - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author	Files	Lines
2009-05-26	Don't use crossRef records to find our own domain	Andrew Bartlett	1	-118/+26
	A single AD server can only host a single domain, so don't stuff about with looking up our crossRef record in the cn=Partitions container. We instead trust that lp_realm() and lp_workgroup() works correctly. Andrew Bartlett
2009-05-25	fixed interpretation of ACB_PWNOTREQ	Andrew Tridgell	1	-14/+0
	This bit actually means that we should ignore the minimum password length field for this user. It doesn't mean that the password should be seen as empty
2009-04-14	Port Samba4 to the new combined libcli/auth functions	Andrew Bartlett	1	-1/+1
	For example, some of the new shared functionality was previously in the wkssvc torture test. Andrew Bartlett
2009-02-13	Push sam_get_server_info_principal into the auth subsystem	Andrew Bartlett	1	-9/+56
	This means it must be accessed via the supplied auth_context in the GENSEC server, and should remove the hard depenceny of GENSEC on the auth subsystem and ldb (allowing LDB not to rely on LDB is considered a good thing, apparently) Andrew Bartlett
2008-12-04	s4:kdc: allow a trusted domain to get kerberos tickets	Stefan Metzmacher	1	-1/+2
	metze
2008-11-01	Remove use of lp_*() from ntlm_check.c.	Jelmer Vernooij	1	-2/+3

2008-10-16	Create a 'straight paper path' for UTF16 passwords.	Andrew Bartlett	1	-1/+1
	This uses a virtual attribute 'clearTextPassword' (name chosen to match references in MS-SAMR) that contains the length-limited blob containing an allegidly UTF16 password. This ensures we do no validation or filtering of the password before we get a chance to MD4 it. We can then do the required munging into UTF8, and in future implement the rules Microsoft has provided us with for invalid inputs. All layers in the process now deal with the strings as length-limited inputs, incluing the krb5 string2key calls. This commit also includes a small change to samdb_result_passwords() to ensure that LM passwords are not returned to the application logic if LM authentication is disabled. The objectClass module has been modified to allow the clearTextPassword attribute to pass down the stack. Andrew Bartlett
2008-10-11	Fix include paths to new location of libutil.	Jelmer Vernooij	1	-1/+1

2008-08-08	Always set a session key, even for the 'no password' case.	Andrew Bartlett	1	-0/+2
	This is for bug 5664 reported by Tom <hto@arcor.de>. Andrew Bartlett (This used to be commit a106a4ccc435d149072fb884caf95e5517cd4204)
2008-05-05	Move NTLM authentication details into auth/ntlm	Andrew Bartlett	1	-0/+449
	This should help clarify the role of the various files around here (done on Jelmer's request). Andrew Bartlett (This used to be commit efa399037511ced8978f2e7661a71aac7a384883)