samba - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author	Files	Lines
2007-10-10	r754: Implement the SetPassword operation on the netlogon pipe.	Andrew Bartlett	1	-16/+45
	This involves allowing the password set code in samdb to take an already hashed password, and some fixes to our torture code. Andrew Bartlett (This used to be commit f9f581b5804a20785df06cde157b23c952edc2ce)
2007-10-10	r743: Start on a NETLOGON server in Samba4.	Andrew Bartlett	2	-3/+52
	Currently this only authentiates the machine, not real users. As a consequence of running the Samba4 NETLOGON test against Samba4, I found a number of issues in the SAMR server, which I have addressed. There are more templates in the provison.ldif for this reason. I also added some debug to our credentials code, and fixed some bugs in the auth_sam module. The static buffer in generate_random_string() bit me badly, so I removed it in favor of a talloc based system. Andrew Bartlett (This used to be commit 94624e519b66def97758b8a48a01ffe9029176f0)
2007-10-10	r708: Clean up copyright headers, to reflect code that has come and gone	Andrew Bartlett	1	-4/+3
	over time. Andrew Bartlett (This used to be commit 1a53e5c8296a7c09563abde1eb4a66ce9cf45473)
2007-10-10	r611: Fix breakage from my last commit:	Andrew Bartlett	1	-6/+6
	Now that all session keys are DATA_BLOBs, fix the callers. This assumes some things about the behaviour of certain crypto algorithms, without the ability to test it on session keys != 16 bytes in length. We will just need to retest when we get the KRB5 support in (DES keys are 8 bytes). Andrew Bartlett (This used to be commit e4355a7ec1eba92bdecef8cc478272897276dbae)
2007-10-10	r610: - Merge the Samba3 'ntlm_auth --diagnostics' testsuite to Samba4.	Andrew Bartlett	4	-22/+65
	- This required using NETLOGON_NEG_AUTH2_FLAGS for the SetupCredentials2 negotiation flags, which is what Samba3 does, because otherwise the server uses different crypto. - This tests the returned session keys, which we decrypt. - Update the Samba4 notion of a 'session key' to be a DATA_BLOB in most places. - Fix session key code to return NT_STATUS_NO_SESSION_KEY if none is available. - Remove a useless argument to SMBsesskeygen_ntv1 - move netr_CredentialState from the .idl to the new credentials.h Andrew Bartlett (This used to be commit 44f8b5b53e6abd4de8a676f78d729988fadff320)
2007-10-10	r451: More NTLMSSP work.	Andrew Bartlett	2	-38/+157
	The work here is trying to get the LM_KEY option for NLTMSSP operating, however until that functions properly, it is now controlled by some new smb.conf options, defaulting off. Andrew Bartlett (This used to be commit c63eb35b45c6db6e4c5302d1832bb5cef49a14f6)
2007-10-10	r443: Update Samba4 to the auth and NTLMSSP code from Samba3.	Andrew Bartlett	5	-96/+689
	Not all the auth code is merged - only those parts that are actually being used in Samba4. There is a lot more work to do in the NTLMSSP area, and I hope to develop that work here. There is a start on this here - splitting NTLMSSP into two parts that my operate in an async fashion (before and after the actual authentication) Andrew Bartlett (This used to be commit 5876c78806e6a6c44613a1354e8d564b427d0c9f)
2007-10-10	r101: added lsa_SetSecret() and lsa_QuerySecret()	Andrew Tridgell	1	-0/+133
	this required some crypto infrastructure and some sid utilities (This used to be commit 37d0efa9c2af8532536bea88412f0dd3ed39ecfc)
2004-02-10	- modified the dcerpc client security code to be generic, so ntlmssp	Andrew Tridgell	2	-0/+344
	and schannel are both instances of possible security modules - added schannel sign and sign/seal support to the dcerpc client code. You select it with binding options of "schannel,sign" or "schannel,seal". (This used to be commit 05db0b9d942cad8f1dd574dc35b759e5e79d4195)
2003-12-15	make sure we allow clients to negotiate ntlmssp seal if they want it	Andrew Tridgell	1	-1/+2
	(This used to be commit a1275c1e89462f0a3cce73066777055c3c970b76)
2003-12-02	added netr_DatabaseSync(). It doesn't work as I haven't done schannel	Andrew Tridgell	1	-3/+9
	yet, but at least the request is understood by w2k3 Also modified pidl to allow multiple branches in a union to have the same element. This is used in netlogon. (This used to be commit 983c0e9683fa9666a6e055d1776ebeef8cd2e700)
2003-12-02	another big improvement in the credentials API. I think it now	Andrew Tridgell	1	-42/+69
	actually makes sense, and as a nice side effect it matches the debug output of the w2k3 netlogon.log (This used to be commit 3c7287c24e5970e5b7447ad042848505537c7d3b)
2003-12-02	* netr_ServerPasswordSet() now works - the test suite changes the	Andrew Tridgell	1	-0/+11
	machine account password. * neater handling on value() options in IDL. The auto-print code will now display the right value so you don't need to initialise it in your C code (This used to be commit 3dd978b12bb5571fba4e1839c0f7ee60cf729aa2)
2003-12-01	* another small API change in the credentials code	Andrew Tridgell	1	-20/+48
	* don't use static variables in the smbdes code (This used to be commit e6e09064646c347169852fa162c72fc0542c6d5c)
2003-12-01	neater credentials handling in netlogon client code	Andrew Tridgell	1	-159/+32
	(This used to be commit b7d748f499f79415b444e7cebe7d8de7186fbc94)
2003-12-01	fixed NTLMSSP_SIGN_VERSION (which I broke earlier today)	Andrew Tridgell	1	-2/+1
	(This used to be commit c8ef04077413f44101ba071187554e65a8e1c8fc)
2003-12-01	added netr_LogonSamLogon() and test code	Andrew Tridgell	1	-3/+0
	(This used to be commit 4fa3ad3ecbfd8f8663fcdfaba9a7db481e303f2b)
2003-12-01	added netr_ServerAuthenticate() and test code	Andrew Tridgell	1	-0/+213
	I would like the netlogon test suite to eventually do a new domain join using a fake workstation name, then remove itself afterwards, but for now I'm assuming we are already joined to the domain when the testsuite runs. This means you need to use the Samba3 net command to do a join before running RPC-NETLOGON (This used to be commit 8c7a9446a0892a4f7722cced5019667f7a9fafdd)
2003-12-01	* got rid of UNISTR2 and everything that depends on it	Andrew Tridgell	1	-0/+3
	* removed a bunch of code that needs to be rewritten using the new interfaces (This used to be commit 9b02b486ef5906516f8cad79dbff5e3dd54cde66)
2003-11-26	fixed some memory leaks in the dcerpc use of ntlmssp signing	Andrew Tridgell	1	-2/+6
	(This used to be commit abbc9993b8f7eb9f57e079db1d0b170d0b9aa443)
2003-11-26	signed DCERPC over TCP now works !	Andrew Tridgell	4	-0/+1901
	* moved ntlmssp code into libcli/auth/, and updated to latest ntlmssp code from samba3 (thanks Andrew! the new interface is great) * added signing/ntlmssp support in the dcerpc code * added a dcerpc_auth.c module for the various dcerpc auth mechanisms (This used to be commit c18c9b5585a3e5f7868562820c14f7cb529cdbcd)