summaryrefslogtreecommitdiff
path: root/source4/auth
AgeCommit message (Collapse)AuthorFilesLines
2008-05-08Install session.h, required by OpenChange's proxy.Jelmer Vernooij1-1/+1
(This used to be commit 44d8b70004247729862b194ea66444e0cf296660)
2008-05-06Tiago Batista posted a patch to fix the build:Tiago Batista1-1/+1
Trying to compile the latest git tree, I got some errors "auth/pam_error.h not found" errors, it looks like it moved to auth/ntlm/pam_errors.h. Andrew Bartlett (This used to be commit 95831a015ae076b52256961f771f50dd9b278e33)
2008-05-05Fix the build after the auth/ -> auth/ntlm/ renameAndrew Bartlett8-8/+8
I need to fix up the header inclusion, but this fixes things for now. Andrew Bartlett (This used to be commit 7c07edb24b31e7dc3e9b836ec4a6680ee2b04276)
2008-05-05Move NTLM authentication details into auth/ntlmAndrew Bartlett16-82/+256
This should help clarify the role of the various files around here (done on Jelmer's request). Andrew Bartlett (This used to be commit efa399037511ced8978f2e7661a71aac7a384883)
2008-05-05Add a new implementation of security=server.Andrew Bartlett3-323/+184
This is not intended for general use, and will not be easily exposed (if I have anything to do with it), but should allow the CIFS proxy to re-use the connection. A work in progress. Andrew Bartlett (This used to be commit a1e60ebc6d1e794011df5f69f691f4ec8622e991)
2008-05-05Allow an NTLM response to be specified into the auth subsystem.Andrew Bartlett3-18/+63
This allows it to be proxied for NTLM pass-though authentication (aka security=server and associated man-in-the-middle attacks). Andrew Bartlett (This used to be commit 6ffabb38d03ad90d8731ab3e0eb692438db967ee)
2008-04-26Fix dependencies on gensec_krb5 and the NTLMSSP code.Andrew Bartlett2-2/+2
This is so that gensec_krb5 does not depend on the NTLM authentication code. Andrew Bartlett (This used to be commit 71ec5bfb3e973bd68649a598d006efcdda18f1b6)
2008-04-24Add documentation to session token functions.Andrew Bartlett2-5/+16
(This used to be commit ec4a108d1d35cd4bb2170f1bb122546266b9b745)
2008-04-21Remove more event_context_init() uses from function calls within deep down ↵Simo Sorce1-17/+5
the code. Make sure we pass around the event_context where we need it instead. All test but a few python ones fail. Jelmer promised to fix them. (This used to be commit 3045d391626fba169aa26be52174883e18d323e9)
2008-04-17Specify event_context to ldb_wrap_connect explicitly.Jelmer Vernooij10-16/+28
(This used to be commit b4e1ae07a284c044704322446c94351c2decff91)
2008-04-17Remove event context tracking from the credentials struct.Jelmer Vernooij7-50/+60
(This used to be commit 4d7fc946b2ec50e774689c9036423b6feef99b8e)
2008-04-15Move SOVERSION, VERSION and PC_FILE out of smb_build but use make variables ↵Jelmer Vernooij1-3/+4
directly instead. (This used to be commit 9d0ae012b0b463278cd054d06788aa998acc2da2)
2008-04-15Fix the build.Jelmer Vernooij1-1/+1
(This used to be commit ecaa5bb83b5cf319718d15aff96152d70fa19f7f)
2008-04-14Fix unresolved symbols.Jelmer Vernooij1-1/+1
(This used to be commit 8573e828d1b68c47b3c1754e9be230b2e78d9d52)
2008-04-14Use _OBJ_FILES variables in a couple more places.Jelmer Vernooij2-9/+8
(This used to be commit 92856d5054106894b65cd1a1b5119c0facfc4cff)
2008-04-14Move object files lists to makefile rather than smb_build.Jelmer Vernooij5-46/+59
(This used to be commit 5628d58990144463fd87f8c847c9384ac2193681)
2008-04-14Remove prototypes from build.h in preparation of removing build.hJelmer Vernooij2-0/+11
altogether. (This used to be commit dbeab2a9cdee4e5f69afeb2603ba29cbed56debd)
2008-04-05Extend credentials python API to include set_machine_account.Andrew Bartlett4-29/+78
Andrew Bartlett (This used to be commit 88b7a3980c7be90ea0099a3ecf08ad00fa89ea1a)
2008-04-02Reduce the number of installed headers.Jelmer Vernooij3-4/+4
(This used to be commit 2243e24024f09ff9c9c7d0eb735c3b39c9d84424)
2008-04-02Install public header files again and include required prototypes.Jelmer Vernooij30-102/+408
(This used to be commit 47ffbbf67435904754469544390b67d34c958343)
2008-03-28Fix and test python scripts and kerberosAndrew Bartlett4-15/+111
This fixes up the python credentials interface in a number of areas, with the aim of supporting '-k yes' as a command line option. (This enables the use of kerberos). As such, I've had to change the get_credentials call to take a loadparm context, so that the credentials can be initialised correctly. The test_kinit script has been modified to prove that this continues to work, as well as to provide greater code coverage of the kerberos paths. Andrew Bartlett (This used to be commit 727ef40c2b56910028ef3c1092b8eab1bfa6ce63)
2008-03-25Remove useless extra argument to samdb_result_account_expires().Andrew Bartlett1-2/+2
Andrew Bartlett (This used to be commit bc607c334ff86624b891886a6f874da2bcff113e)
2008-03-17Don't require users of credentials.h to have krb5.h and gssapi.hAndrew Bartlett4-11/+24
Rather than require users of Samba4's headers to have krb5-devel installed (presumably in their system paths), don't expose the minor functions which require this by default. Andrew Bartlett (This used to be commit f14737e4d2040d2f401a3b20c5e78d0d793cfc3a)
2008-03-07Update account expiration to use new samdb_result_account_expires() function.Andrew Kroeger1-2/+2
(This used to be commit 2b6b4e5a1611744eea5dd9ec17c416916d7edab4)
2008-02-29Change remaining prototype headers to be private.Jelmer Vernooij1-3/+3
(This used to be commit 2f7ff409e89c9682e681ddcf54439db9e3b6ccb4)
2008-02-29Move public header accumulation out of the perl code.Jelmer Vernooij3-6/+10
Never install generated prototype files. It's easier to break the API when using them and they're not easily readable for 3rd party users. Conflicts: source/auth/config.mk source/auth/credentials/config.mk source/auth/gensec/config.mk source/build/smb_build/config_mk.pm source/build/smb_build/main.pl source/build/smb_build/makefile.pm source/dsdb/config.mk source/lib/charset/config.mk source/lib/tdr/config.mk source/lib/util/config.mk source/libcli/config.mk source/libcli/ldap/config.mk source/librpc/config.mk source/param/config.mk source/rpc_server/config.mk source/torture/config.mk (This used to be commit 6c659689ed4081f1d7a6253c538c7f01784197ba)
2008-02-29Simplify the 'password must change' logicAndrew Bartlett1-5/+6
This takes the previous patches further, so we catch all the cases (the KDC looked at the time directly). Andrew Bartlett (This used to be commit cda4642a937d249399e25eaa6e5e20a0d440bcbf)
2008-02-28Generate ACB_PW_EXPIRED correctlyAndrew Bartlett2-18/+22
More correctly handle expired passwords, and do not expire machine accounts. Test that the behaviour is consistant with windows, using the RPC-SAMR test. Change NETLOGON to directly query the userAccountControl, just because we don't want to do the extra expiry processing here. Andrew Bartlett (This used to be commit acda1f69bc9b9c43e157e254d0bae54d11363661)
2008-02-21Remove more uses of global_loadparm.Jelmer Vernooij1-1/+1
(This used to be commit a1715b1f48ba44bd94844418cc9299649aaf1a5e)
2008-02-21Avoid use of global_loadparm.Jelmer Vernooij4-5/+16
(This used to be commit c5a95bbe0ce55c29e135a9c6058bf192ec3bb546)
2008-02-20Make more module init functions public, since they are compiled with ↵Jelmer Vernooij5-5/+5
-fvisibility=hidden. Not doing this causes failures on Mac OS X. (This used to be commit da1a9438bd89569077ef1eaa9dc977b5f9d62836)
2008-02-20Make all auth module init functions public, since they are compiled with ↵Jelmer Vernooij5-5/+5
-fvisibility=hidden. Not doing this causes failures on Mac OS X. (This used to be commit 675bab738085cb5a9f17c1f159fbd97c4daafed2)
2008-02-18Rename include to mkinclude to emphasize it is different from make's include.Jelmer Vernooij1-4/+4
(This used to be commit 0e1d0a874ae3d22b8f97a79b81fe0af3ef53a771)
2008-02-18Get rid of 'INTEGRATED' build of modules - now replaced by 'MERGED_OBJ'Jelmer Vernooij2-2/+2
(This used to be commit 269cbf84d8b7dbf3bc88adc04ae283dc908af5ac)
2008-02-15cyrus_sasl: fix compiler warningsStefan Metzmacher1-1/+4
metze (This used to be commit 558c717c6c279b739633e26855910b61b792e7b6)
2008-01-24Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into v4-0-trivialJelmer Vernooij1-1/+1
(This used to be commit d4d4120b715dc37b708b1c6074eab4f5c23d6b8f)
2008-01-24netlogon.idl: make use of bitmap samr_GroupAttrsStefan Metzmacher1-1/+1
metze (This used to be commit 6d68161e676d381600c77c3f862bd7e013968724)
2008-01-24python: Add bindings for cli_credentials_set_cmdline_callbacks().Jelmer Vernooij5-1/+38
(This used to be commit 557207f86ba901262e76704df5c51888b2737ddf)
2008-01-23Default to creating anonymous credentials.Jelmer Vernooij2-2/+2
(This used to be commit f93bd899f1402a9d89f55d5dca67318a60f5a72b)
2008-01-22build: Remove support for DESCRIPTION setting that is now unused.Jelmer Vernooij1-1/+0
(This used to be commit 91d7ba5202e6c375456a42c2c6861f63c7fcfc20)
2008-01-22gensec: Use manually written .pc file.Jelmer Vernooij2-0/+12
(This used to be commit 96a5ac9db2399019518e134a00c564ec1066f536)
2008-01-15util: Move asn1 to lib/util to trim down the number of subsystems.Jelmer Vernooij2-2/+2
(This used to be commit 44e1cfd2d0ef62e4ee541cec00581a7151d951b3)
2008-01-14pidl/python: Pass credentials and loadparm context when connecting using ↵Jelmer Vernooij2-0/+33
DCE/RPC. (This used to be commit 4c87af95310e4aaee3f2e2da02d0ea70ed1ec25b)
2008-01-03r26652: msrpc_parse/msrpc_gen: Add iconv_convenience argument.Jelmer Vernooij5-11/+31
(This used to be commit e886f1bc0dc694971979716d1991535c7d2e08de)
2008-01-02r26644: Janitorial: Pass resolve_context explicitly to various SMB ↵Jelmer Vernooij1-3/+3
functions, should help fix the build for OpenChange. (This used to be commit 385ffe4f4cc9a21a760c0f00410f56e2592fd507)
2008-01-01r26640: Janitorial: Remove some more uses of global_loadparm.Jelmer Vernooij1-2/+3
(This used to be commit c863f4ebde8efa1a695b4469142d6719e30bc419)
2008-01-01r26639: librpc: Pass iconv convenience on from RPC connection to NDR ↵Jelmer Vernooij3-9/+17
library, so it can be overridden by OpenChange. (This used to be commit 2f29f80e07adef1f020173f2cd6d947d0ef505ce)
2008-01-01r26638: libndr: Require explicitly specifying iconv_convenience for ↵Jelmer Vernooij2-7/+21
ndr_struct_push_blob(). (This used to be commit 61ad78ac98937ef7a9aa32075a91a1c95b7606b3)
2007-12-29r26626: Install auth/session.hJelmer Vernooij1-0/+1
(This used to be commit 57bf390068d36d85819dac561bdf1224db5c071b)
2007-12-24r26580: Include sentinel in build.h, in case the list is empty.Jelmer Vernooij2-2/+2
(This used to be commit f1997dabed584bdc864c4b7235c29603c312ef46)