| Age | Commit message (Collapse) | Author | Files | Lines | |
|---|---|---|---|---|---|
| 2008-12-04 | s4:kdc: allow a trusted domain to get kerberos tickets | Stefan Metzmacher | 3 | -7/+11 | |
| metze | |||||
| 2008-11-18 | s3/s4 build: Fix execinfo and sasl build error when the libs/headers are in ↵ | Tim Prouty | 1 | -1/+5 | |
| non-standard locations. These configure checks have the correct flags at configure time, so let's pass them through so they are used at compile time. | |||||
| 2008-11-02 | Fix the build. | Jelmer Vernooij | 3 | -19/+43 | |
| 2008-11-02 | Remove use of global_loadparm for disabled gensec backends. | Jelmer Vernooij | 3 | -4/+25 | |
| 2008-11-02 | Remove another use of global_loadparm. | Jelmer Vernooij | 1 | -0/+1 | |
| Eventually, we should move some of these parameters into a separate struct (perhaps into smb_transport_options?), to avoid the long lists of parameters. | |||||
| 2008-11-02 | Fix the build. | Jelmer Vernooij | 2 | -2/+3 | |
| 2008-11-02 | Add gensec_settings structure. This wraps loadparm_context for now, but | Jelmer Vernooij | 9 | -77/+98 | |
| should in the future only contain some settings required for gensec. | |||||
| 2008-11-02 | Remove two debug parameters, not used anywhere. | Jelmer Vernooij | 1 | -6/+2 | |
| Andrew, I was pretty sure these could be removed but if not, please let me know. | |||||
| 2008-11-02 | Remove another use of global_loadparm. | Jelmer Vernooij | 1 | -0/+1 | |
| 2008-11-01 | Remove unused argument iconv_convenience. | Jelmer Vernooij | 4 | -8/+1 | |
| 2008-11-01 | Remove use of lp_*() from ntlm_check.c. | Jelmer Vernooij | 3 | -16/+18 | |
| 2008-10-24 | Remove unused include param/param.h. | Jelmer Vernooij | 3 | -3/+0 | |
| 2008-10-24 | Remove iconv_convenience argument from convert_string{,talloc}() but | Jelmer Vernooij | 1 | -1/+1 | |
| make them wrappers around convert_string{,talloc}_convenience(). | |||||
| 2008-10-24 | Eliminate another instance of global_loadparm. | Jelmer Vernooij | 1 | -0/+2 | |
| 2008-10-24 | Remove iconv_convenience parameter from simple string push/pull | Jelmer Vernooij | 5 | -14/+7 | |
| functions. | |||||
| 2008-10-20 | Make sure prototypes are always included, make some functions static and | Jelmer Vernooij | 14 | -16/+14 | |
| remove some unused functions. | |||||
| 2008-10-16 | Create a 'straight paper path' for UTF16 passwords. | Andrew Bartlett | 1 | -1/+1 | |
| This uses a virtual attribute 'clearTextPassword' (name chosen to match references in MS-SAMR) that contains the length-limited blob containing an allegidly UTF16 password. This ensures we do no validation or filtering of the password before we get a chance to MD4 it. We can then do the required munging into UTF8, and in future implement the rules Microsoft has provided us with for invalid inputs. All layers in the process now deal with the strings as length-limited inputs, incluing the krb5 string2key calls. This commit also includes a small change to samdb_result_passwords() to ensure that LM passwords are not returned to the application logic if LM authentication is disabled. The objectClass module has been modified to allow the clearTextPassword attribute to pass down the stack. Andrew Bartlett | |||||
| 2008-10-15 | Remove unused variable. | Jelmer Vernooij | 1 | -1/+0 | |
| 2008-10-12 | Use common util_file code. | Jelmer Vernooij | 1 | -1/+1 | |
| 2008-10-12 | Use common strlist implementation in Samba 3 and Samba 4. | Jelmer Vernooij | 1 | -1/+1 | |
| 2008-10-11 | Fix include paths to new location of libutil. | Jelmer Vernooij | 7 | -7/+7 | |
| 2008-10-11 | Move lib/util from source4 to top-level libutil. | Jelmer Vernooij | 1 | -1/+1 | |
| Conflicts: source4/Makefile | |||||
| 2008-10-11 | Provide the same set of helper functions for DEBUG in Samba 3 and Samba | Jelmer Vernooij | 1 | -11/+11 | |
| 4, even though the macros are still different. This makes it possible to use object code compiled with one DEBUG() macro from the other sourceX directory. | |||||
| 2008-10-06 | s4:gensec: pass down want_features to the spnego backend mech | Stefan Metzmacher | 3 | -1/+24 | |
| metze | |||||
| 2008-09-30 | Merge branch 'master' of ssh://git.samba.org/data/git/samba | Andrew Tridgell | 1 | -0/+1 | |
| 2008-09-30 | Pass session options around; saves another use of global_loadparm. | Jelmer Vernooij | 1 | -0/+1 | |
| 2008-09-29 | make the schannel creentials persistent | Andrew Tridgell | 1 | -1/+1 | |
| this makes testing with the WSPP test suite much easier over samba restarts | |||||
| 2008-09-24 | Cosmetic corrections for the KERBEROS library | Matthias Dieter Wallnöfer | 1 | -3/+1 | |
| This commit applies some cosmetic corrections for the KERBEROS library. | |||||
| 2008-09-24 | Kerberos cosmetic changes: Revert a part of the patch | Matthias Dieter Wallnöfer | 1 | -1/+3 | |
| Reverts a part of the patch because it changes the function of the code (suggested by Jelmer). | |||||
| 2008-09-24 | Cosmetic corrections for the KERBEROS library | Matthias Dieter Wallnöfer | 4 | -15/+13 | |
| This commit applies some cosmetic corrections for the KERBEROS library. | |||||
| 2008-09-24 | Merge branch 'master' of ssh://git.samba.org/data/git/samba into crypto | Jelmer Vernooij | 2 | -6/+8 | |
| 2008-09-24 | Move source4/lib/crypto to lib/crypto. | Jelmer Vernooij | 6 | -6/+6 | |
| 2008-09-24 | Fix nasty bug that would come up only if a client connection to a remote | Simo Sorce | 2 | -6/+8 | |
| ldap server suddenly dies. We were creating a wrong talloc hierarchy, so the event.fde was not freed automatically as expected. This in turn made the event system call the ldap io handlers with a null packet structure, causing a segfault. Fix also the ordering in ldap_connection_dead() Thanks to Metze for the huge help in tracking down this one. | |||||
| 2008-09-23 | Merge ldb_search() and ldb_search_exp_fmt() into a simgle function. | Simo Sorce | 1 | -1/+1 | |
| The previous ldb_search() interface made it way too easy to leak results, and being able to use a printf-like expression turns to be really useful. | |||||
| 2008-09-23 | gensec_krb5: only give away the session key, when the authentication is done | Stefan Metzmacher | 1 | -0/+4 | |
| metze | |||||
| 2008-09-23 | gensec_gssapi: only give away the session key, when the authentication is done | Stefan Metzmacher | 1 | -4/+5 | |
| metze | |||||
| 2008-09-23 | ntlmssp: only give away the session key, when the authentication is done | Stefan Metzmacher | 1 | -0/+4 | |
| metze | |||||
| 2008-09-19 | NTLMSSP Server: Correctly fills in the DNS server name and server domain | Matthias Dieter Wallnöfer | 1 | -21/+17 | |
| Don't rely on "get*" system calls but rather on SAMBA "lp_*" calls. Signed-off-by: Stefan Metzmacher <metze@samba.org> | |||||
| 2008-09-18 | Generate with 1.3.36. | Jelmer Vernooij | 4 | -27/+38 | |
| 2008-09-03 | Implement NETLOGON PAC verfication on the server-side | Andrew Bartlett | 1 | -5/+5 | |
| This is implemented by means of a message to the KDC, to avoid having to link most of the KDC into netlogon. Andrew Bartlett (This used to be commit 82fcd7941f5c54da2d994c8bd99dd8d86299a296) | |||||
| 2008-08-28 | Heimdal provides Kerberos PAC parsing routines. Use them. | Andrew Bartlett | 4 | -89/+170 | |
| This uses Heimdal's PAC parsing code in the: - LOCAL-PAC test - gensec_gssapi server - KDC (where is was already used, the support code refactored from here) In addition, the service and KDC checksums are recorded in the struct auth_serversupplied_info, allowing them to be extracted for validation across NETLOGON. Andrew Bartlett (This used to be commit 418b440a7b8cdb53035045f3981d47b078be6c1e) | |||||
| 2008-08-27 | Put the internal gensec_gssapi state into a header. | Andrew Bartlett | 2 | -43/+69 | |
| This will allow a torture suite to inspect some otherwise internal details. Andrew Bartlett (This used to be commit 9701149ef75f9771f42000e2b6f44963abfee938) | |||||
| 2008-08-14 | gensec_gssapi: only cache the session key in STAGE_DONE | Stefan Metzmacher | 1 | -5/+9 | |
| The key may change because we switch from initiator to acceptor subkey. metze (This used to be commit 66244092a457b2cde6339cb31dcfa73b122ba9b5) | |||||
| 2008-08-12 | gensec_gssapi: add support for GENSEC_FEATURE_NEW_SPNEGO | Stefan Metzmacher | 1 | -0/+25 | |
| metze (This used to be commit 9246924effd4d0b08ca1ef87e45ad510020df93e) | |||||
| 2008-08-12 | gensec_gssapi: fix compiler warnings | Stefan Metzmacher | 1 | -2/+2 | |
| metze (This used to be commit f4f4bb7fe977301e468ab164ba750b69d9a92306) | |||||
| 2008-08-12 | gensec_gssapi: add a function to load the lucid structure once | Stefan Metzmacher | 1 | -15/+44 | |
| metze (This used to be commit daa986d1d04e59550bb5d33b5075daa414d087ba) | |||||
| 2008-08-12 | gensec: add support for new style spnego and correctly handle mechListMIC | Stefan Metzmacher | 3 | -7/+135 | |
| metze (This used to be commit 05a3403967d3cf64bca8b06536dc1b20cf835396) | |||||
| 2008-08-08 | gensec_gssapi: use the correct signature size for cfx/rfc4121 style signatures | Stefan Metzmacher | 1 | -1/+1 | |
| metze (This used to be commit fcabe24f96c9677146ca754a502f336c23050339) | |||||
| 2008-08-08 | gensec_gssapi: use gsskrb5_get_subkey() to get the session key | Stefan Metzmacher | 1 | -3/+3 | |
| This is needed to get the correct key, when aes keys are used. metze (This used to be commit 7587a7d8b65f27a5865d6873f63a450488da02c9) | |||||
| 2008-08-08 | Always set a session key, even for the 'no password' case. | Andrew Bartlett | 1 | -0/+2 | |
| This is for bug 5664 reported by Tom <hto@arcor.de>. Andrew Bartlett (This used to be commit b345c9cf535af35c83da040ac965d9690dc802fe) | |||||
 |
index : samba | |
| Unnamed repository; edit this file 'description' to name the repository. | ben |
| summaryrefslogtreecommitdiff |