Age | Commit message (Collapse) | Author | Files | Lines |
|
(This used to be commit 70e7449318aa0e9d2639c76730a7d1683b2f4981)
|
|
(This used to be commit 874f16e055ec30bf2ee52a33464b4810a8f8cd89)
|
|
(This used to be commit 6198006ee466c6398f6a3da352d236034693ffb7)
|
|
Should we somehow link these, or just use the version in ldb?
Andrew Bartlett
(This used to be commit e98d14668e3fdee01b103adb5aec733790eee96d)
|
|
module is perhaps not the most efficient, but I think it is
reasonable.
This should restore operation of MMC against Samba4 (broken by the
templating fixes).
Andrew Bartlett
(This used to be commit 41948c4bdbfca1160a01a92994324f9e22422afe)
|
|
using pre-calculated passwords for all kerberos key types.
(Previously we could only use these for the NT# type).
The module handles all of the hash/string2key tasks for all parts of
Samba, which was previously in the rpc_server/samr/samr_password.c
code. We also update the msDS-KeyVersionNumber, and the password
history. This new module can be called at provision time, which
ensures we start with a database that is consistent in this respect.
By ensuring that the krb5key attribute is the only one we need to
retrieve, this also simplifies the run-time KDC logic. (Each value of
the multi-valued attribute is encoded as a 'Key' in ASN.1, using the
definition from Heimdal's HDB. This simplfies the KDC code.).
It is hoped that this will speed up the KDC enough that it can again
operate under valgrind.
(This used to be commit e9022743210b59f19f370d772e532e0f08bfebd9)
|
|
(This used to be commit ca8db1a0cd77682ac2c6dc4718f5d753a4fcc4db)
|
|
have to think about exactly what the right context to hang it of is.
Andrew Bartlett
(This used to be commit b1c8adcfe16c72252b0312e65676edcdbe472f09)
|
|
(This used to be commit 0aca5fd5130d980d07398f3291d294202aefe3c2)
|
|
Andrew Bartlett
(This used to be commit 31f65e510cdd46b1962cf06b3d51f152b1cecf37)
|
|
Andrew Bartlett
(This used to be commit 2f54d7f774434f2a8b89ae01e993c4a1d16ce861)
|
|
lookups in load_interfaces(). The reason was my eth0 interface was
down, and it was being interpreted as a DNS name.
This patch changes load_interfaces() to happening automatically when
interfaces are first needed instead of on the startup of every samba
binary. This means that (for example) ldbadd doesn't call
load_interfaces(), which means no slow DNS lookups.
I also reduced the number of static globals in interface.c to 1, and
changed from malloc to talloc
When you want to force a reload of the interfaces list, you now call
unload_interfaces(), which means the next call that needs the
interfaces list will reload it
(This used to be commit f79d90bd1364b970adb2981b2572e77066431f1e)
|
|
(This used to be commit 87f665a1d5ba74289974bf9d8f9441c162e6f1b1)
|
|
(note that this doesn't use the distinction between private
and public prototypes yet)
(This used to be commit 60e11f575821c1762b25ad66441b6e69ad1167ef)
|
|
back and
forth between GUID structs and strings in several places.
(This used to be commit 3564e2f967ef72d6301b4f7e9a311cebcded4d75)
|
|
dcerpc_interface_table struct rather then a tuple of interface
name, UUID and version.
This removes the requirement for having a global list of DCE/RPC interfaces,
except for these parts of the code that use that list explicitly
(ndrdump and the scanner torture test).
This should also allow us to remove the hack that put the authservice parameter
in the dcerpc_binding struct as it can now be read directly from
dcerpc_interface_table.
I will now modify some of these functions to take a dcerpc_syntax_id
structure rather then a full dcerpc_interface_table.
(This used to be commit 8aae0f168e54c01d0866ad6e0da141dbd828574f)
|
|
'librpc'
are the only two subsystems left to convert.
(This used to be commit f6bbc72996aeee8607fc583140fd60be0e06e969)
|
|
(This used to be commit c92ace494f92084ddf178626cdf392d151043bc7)
|
|
the difference between these at all, and in the future the
fact that INIT_OBJ_FILES include smb_build.h will be sufficient to
have recompiles at the right time.
(This used to be commit b24f2583edee38abafa58578d8b5c4b43e517def)
|
|
We now use a different system for initializing the modules for a subsystem.
Most subsystems now have an init function that looks something like this:
init_module_fn static_init[] = STATIC_AUTH_MODULES;
init_module_fn *shared_init = load_samba_modules(NULL, "auth");
run_init_functions(static_init);
run_init_functions(shared_init);
talloc_free(shared_init);
I hope to eliminate the other init functions later on (the
init_programname_subsystems; defines).
(This used to be commit b6d2ad4ce0a91c4be790dd258820c492ff1787ea)
|
|
(This used to be commit 865a2c9ecaeae83417509c01142ba4220c0b53d7)
|
|
(This used to be commit 45013467f57d646f3db099862665d2631272b446)
|
|
(This used to be commit 7ca00cd918760dccc51e56234126ead8535a22ef)
|
|
Andrew Bartlett
(This used to be commit 07df0bdb44413e4eb956458e549430c94b1a38ef)
|
|
- fix the calculation of TIME_T_MAX -> nttime -> TIME_T_MAX
metze
(This used to be commit 9caf4b9a42b02db85b3eb233c74316dcccb12537)
|
|
don't store it on disk, as this would cause confusing results
metze
(This used to be commit c3d3309ba1567a4363c7c0235842833b5e2b6771)
|
|
metze
(This used to be commit 00b7800695938e2374a26208273996efeb9ab258)
|
|
(hopefully fix the build on OpenBSD)
metze
(This used to be commit cbe06ade214bd29eab5c11fcd011a3c463bf78db)
|
|
This is for use on user-supplied arguments to printf style format
strings which will become ldb filters. I have used it on LSA, SAMR
and the auth/ code so far.
Also add comments to cracknames code.
Andrew Bartlett
(This used to be commit 8308cf6e0472790c1c9d521d19322557907f4418)
|
|
callback.
We may change this in future.
Andrew Bartlett
(This used to be commit 5fec784d4795af0cf82d36766586ded134f62165)
|
|
command line processing system.
This is a little ugly at the moment, but works. What I cannot manage
to get to work is the extraction and propogation of command line
credentials into the js interface to ldb.
Andrew Bartlett
(This used to be commit f34ede763e7f80507d06224d114cf6b5ac7c8f7d)
|
|
metze
(This used to be commit 35d76f733793aecb89d82ce30a8cecb7371d3e95)
|
|
from lockdir and they are typically set to piddir=/var/run/samba
and lockdir=/var/lib/samba, and we should keep the temporary stuff
under /var/run/samba
metze
(This used to be commit 571a870618cf595930da3057b147058489c8a37b)
|
|
installed.
Install pkg-config files.
(This used to be commit a86abe84e2cae7c6188c094a92c6b62aace02fdf)
|
|
events,
we need to initialy ask for read events too, otherwise we'll never get an
error back from socket_connect()
metze
(This used to be commit 7d94054d0fc954e6d810573430f2c5d35b73125d)
|
|
backend.
The idea is that every time we open an LDB, we can provide a
session_info and/or credentials. This would allow any ldb to be remote
to LDAP. We should also support provisioning to a authenticated ldap
server.
(They are separate so we can say authenticate as foo for remote, but
here we just want a token of SYSTEM).
Andrew Bartlett
(This used to be commit ae2f3a64ee0b07575624120db45299c65204210b)
|
|
in build/smb_build/, remove unused pstring macros
(This used to be commit 432296207400636dd81d0929ec7b1b4cebbcaa62)
|
|
(This used to be commit 754e51b19d2d1fd6be8e01d62b6ec892688f934c)
|
|
context into the ldb opaque. I'm sure this was done before, and must
have been lost by some other change.
Andrew Bartlett
(This used to be commit dddedf13717e860bda0dadd8a1dfc4f891e355b5)
|
|
displaying security descriptors in ldbsearch or ldbedit you can see
the SDDL version.
This also allows us to specify security descriptors in our
setup/*.ldif files in SDDL format, which is much more convenient than
the NDR binary format!
(This used to be commit 8185731c1846412c1b3366824cdb3d05b2d50b73)
|
|
set of results
(This used to be commit 2be62eb2dde9250f8bfe3a3272851e152a1d6b68)
|
|
you don't ask for.
with this patch the epoll mode behaves like the select mode
metze
(This used to be commit f26c28a3ae7951657cc304659f3d19c16f462dd8)
|
|
let our code make it explicit, to make it clear
metze
(This used to be commit cf733e2684ab0d43d83b1ab5c9d178d895f768a1)
|
|
for the case where, epoll isn't available at compile time
- only pass the private std_event_context, to the local function,
to get rid of the talloc_get_type() calls
- use the private pointer to std_event_context_init() to decide if we want to
disable epoll at runtime
metze
(This used to be commit de322ea8b761df5434e60879b7eae3796ea68007)
|
|
the events backend can store private flags
- add function to access the gtk event loop ops struct
metze
(This used to be commit a5cc0758a393f36a770cdd57e317214d03934c13)
|
|
metze
(This used to be commit 62c4ae8dde918d8393a3b181a5cac1be1e57e158)
|
|
metze
(This used to be commit 1dd5bb60a5047b94034eb084473bb8f4a9926e7c)
|
|
instead make the normal composite_done() and composite_error()
functions automatically trigger a delayed callback if the caller has
had no opportunity to setup a async callback
this removes one of the common mistakes in writing a composite function
(This used to be commit f9413ce792ded682e05134b66d433eeec293e6f1)
|
|
up what address the client has used, as the socket is maybe bound to '0.0.0.0'
metze
(This used to be commit 81d322f91aa7097a51c13648211a0556b0424fa4)
|
|
and don't assume out_len is >= sizeof(*in_addr)
metze
(This used to be commit 61dbe9e5070085117b12b5b37cf0e7fe4342e2a3)
|