Age | Commit message (Collapse) | Author | Files | Lines | |
---|---|---|---|---|---|
2009-03-01 | s4: Use same function signature for convert_* as s3. | Jelmer Vernooij | 1 | -1/+1 | |
2009-03-01 | Add allow_badcharcnv argument to all conversion function, for | Jelmer Vernooij | 1 | -1/+1 | |
consistency with Samba 3. | |||||
2009-02-13 | Push sam_get_server_info_principal into the auth subsystem | Andrew Bartlett | 8 | -63/+122 | |
This means it must be accessed via the supplied auth_context in the GENSEC server, and should remove the hard depenceny of GENSEC on the auth subsystem and ldb (allowing LDB not to rely on LDB is considered a good thing, apparently) Andrew Bartlett | |||||
2009-02-13 | Remove auth/ntlm as a dependency of GENSEC by means of function pointers. | Andrew Bartlett | 10 | -31/+136 | |
When starting GENSEC on the server, the auth subsystem context must be passed in, which now includes function pointers to the key elements. This should (when the other dependencies are fixed up) allow GENSEC to exist as a client or server library without bundling in too much of our server code. Andrew Bartlett | |||||
2009-02-05 | s4:auth/ntlm: fix c++ warning | Stefan Metzmacher | 1 | -1/+1 | |
metze | |||||
2009-02-05 | s4:pyauth: fix compiler warnings | Stefan Metzmacher | 1 | -1/+1 | |
metze | |||||
2009-02-05 | s4:pycredentials: fix compiler warnings | Stefan Metzmacher | 2 | -26/+25 | |
metze | |||||
2009-02-02 | s4:auth/credentials: the python bindings don't use swig anymore | Stefan Metzmacher | 1 | -4/+2 | |
metze | |||||
2009-02-02 | s4:auth: the python bindings don't use swig anymore | Stefan Metzmacher | 1 | -3/+2 | |
metze | |||||
2009-02-02 | s4:auth/kerberos: s/private/private_data | Stefan Metzmacher | 1 | -10/+10 | |
metze | |||||
2009-02-02 | s4:auth/gensec: s/private/private_data | Stefan Metzmacher | 1 | -10/+10 | |
metze | |||||
2009-02-01 | Make schannel not depend on samdb anymore. | Simo Sorce | 2 | -6/+61 | |
2009-01-31 | s4:auth: try to fix the build on Solaris | Stefan Metzmacher | 1 | -0/+1 | |
MAXHOSTNAMELEN comes in via system/network.h now. metze | |||||
2009-01-25 | Add prototypes required by samba-gtk. | Jelmer Vernooij | 1 | -0/+9 | |
2009-01-21 | s4:auth: move make_server_info_netlogon_validation() function arround | Stefan Metzmacher | 5 | -147/+141 | |
metze | |||||
2009-01-08 | Avoid using a utility header for Python replacements included in Samba, | Jelmer Vernooij | 1 | -1/+5 | |
since this will not be shipped with talloc/tdb/tevent/etc. | |||||
2009-01-07 | s3/s4 build: Fix Py_RETURN_NONE to work with python versions < 2.4 | Tim Prouty | 1 | -0/+1 | |
2009-01-06 | py: Properly increase the reference counter of Py_None. | Jelmer Vernooij | 1 | -6/+6 | |
2009-01-03 | s4:auth/kerberos: convert to tevent_* api | Stefan Metzmacher | 2 | -14/+13 | |
metze | |||||
2009-01-03 | s4:socket: use a socket_wrapper aware function to auto close the fd event ↵ | Stefan Metzmacher | 1 | -4/+5 | |
for sockets metze | |||||
2008-12-29 | s4:lib/tevent: rename structs | Stefan Metzmacher | 16 | -67/+67 | |
list="" list="$list event_context:tevent_context" list="$list fd_event:tevent_fd" list="$list timed_event:tevent_timer" for s in $list; do o=`echo $s | cut -d ':' -f1` n=`echo $s | cut -d ':' -f2` r=`git grep "struct $o" |cut -d ':' -f1 |sort -u` files=`echo "$r" | grep -v source3 | grep -v nsswitch | grep -v packaging4` for f in $files; do cat $f | sed -e "s/struct $o/struct $n/g" > $f.tmp mv $f.tmp $f done done metze | |||||
2008-12-24 | Rename samba-socket -> samba_socket to fix a couple more compiler | Jelmer Vernooij | 2 | -2/+2 | |
warnings. | |||||
2008-12-23 | Add missing includes, required for use of gensec by 3rd-party | Matthias Dieter Wallnöfer | 1 | -0/+3 | |
applications. | |||||
2008-12-22 | s4: Always link in auth, as some of the core infrastructure depends on it. | Jelmer Vernooij | 1 | -0/+1 | |
2008-12-22 | Add header for pyparam. | Jelmer Vernooij | 2 | -7/+2 | |
2008-12-21 | Fix various Python-related bugs. | Jelmer Vernooij | 1 | -1/+1 | |
2008-12-21 | Include errors.i verbatim in security.i, as it's the only file still using it. | Jelmer Vernooij | 1 | -4/+2 | |
2008-12-21 | Convert credentials Python module to "manual" C - no SWIG used to generate | Jelmer Vernooij | 6 | -4719/+350 | |
the C code. | |||||
2008-12-21 | Convert auth python module to "plain" C rather than using SWIG. | Jelmer Vernooij | 6 | -3348/+131 | |
2008-12-18 | s4:lib/socket: socket_connect_send() and socket_connect_ev() should only ↵ | Stefan Metzmacher | 1 | -2/+1 | |
wrok with addresses metze | |||||
2008-12-17 | s4: fix LIBEVENTS dependencies and use more forward declarations | Stefan Metzmacher | 2 | -1/+3 | |
We should only include events.h where we really need it and prefer forward declarations of 'struct event_context' metze | |||||
2008-12-04 | s4:kdc: allow a trusted domain to get kerberos tickets | Stefan Metzmacher | 3 | -7/+11 | |
metze | |||||
2008-11-18 | s3/s4 build: Fix execinfo and sasl build error when the libs/headers are in ↵ | Tim Prouty | 1 | -1/+5 | |
non-standard locations. These configure checks have the correct flags at configure time, so let's pass them through so they are used at compile time. | |||||
2008-11-02 | Fix the build. | Jelmer Vernooij | 3 | -19/+43 | |
2008-11-02 | Remove use of global_loadparm for disabled gensec backends. | Jelmer Vernooij | 3 | -4/+25 | |
2008-11-02 | Remove another use of global_loadparm. | Jelmer Vernooij | 1 | -0/+1 | |
Eventually, we should move some of these parameters into a separate struct (perhaps into smb_transport_options?), to avoid the long lists of parameters. | |||||
2008-11-02 | Fix the build. | Jelmer Vernooij | 2 | -2/+3 | |
2008-11-02 | Add gensec_settings structure. This wraps loadparm_context for now, but | Jelmer Vernooij | 9 | -77/+98 | |
should in the future only contain some settings required for gensec. | |||||
2008-11-02 | Remove two debug parameters, not used anywhere. | Jelmer Vernooij | 1 | -6/+2 | |
Andrew, I was pretty sure these could be removed but if not, please let me know. | |||||
2008-11-02 | Remove another use of global_loadparm. | Jelmer Vernooij | 1 | -0/+1 | |
2008-11-01 | Remove unused argument iconv_convenience. | Jelmer Vernooij | 4 | -8/+1 | |
2008-11-01 | Remove use of lp_*() from ntlm_check.c. | Jelmer Vernooij | 3 | -16/+18 | |
2008-10-24 | Remove unused include param/param.h. | Jelmer Vernooij | 3 | -3/+0 | |
2008-10-24 | Remove iconv_convenience argument from convert_string{,talloc}() but | Jelmer Vernooij | 1 | -1/+1 | |
make them wrappers around convert_string{,talloc}_convenience(). | |||||
2008-10-24 | Eliminate another instance of global_loadparm. | Jelmer Vernooij | 1 | -0/+2 | |
2008-10-24 | Remove iconv_convenience parameter from simple string push/pull | Jelmer Vernooij | 5 | -14/+7 | |
functions. | |||||
2008-10-20 | Make sure prototypes are always included, make some functions static and | Jelmer Vernooij | 14 | -16/+14 | |
remove some unused functions. | |||||
2008-10-16 | Create a 'straight paper path' for UTF16 passwords. | Andrew Bartlett | 1 | -1/+1 | |
This uses a virtual attribute 'clearTextPassword' (name chosen to match references in MS-SAMR) that contains the length-limited blob containing an allegidly UTF16 password. This ensures we do no validation or filtering of the password before we get a chance to MD4 it. We can then do the required munging into UTF8, and in future implement the rules Microsoft has provided us with for invalid inputs. All layers in the process now deal with the strings as length-limited inputs, incluing the krb5 string2key calls. This commit also includes a small change to samdb_result_passwords() to ensure that LM passwords are not returned to the application logic if LM authentication is disabled. The objectClass module has been modified to allow the clearTextPassword attribute to pass down the stack. Andrew Bartlett | |||||
2008-10-15 | Remove unused variable. | Jelmer Vernooij | 1 | -1/+0 | |
2008-10-12 | Use common util_file code. | Jelmer Vernooij | 1 | -1/+1 | |