summaryrefslogtreecommitdiff
path: root/source4/torture/rpc/remote_pac.c
AgeCommit message (Collapse)AuthorFilesLines
2011-05-18s4:auth/credentials: pass 'self_service' to ↵Stefan Metzmacher1-3/+4
cli_credentials_set_impersonate_principal() This also adds a cli_credentials_get_self_service() helper function. In order to support S4U2Proxy we need to be able to set the service principal for the S4U2Self step independent of the target principal. metze
2011-02-09s4-auth Rework auth subsystem to remove struct auth_serversupplied_infoAndrew Bartlett1-36/+40
This changes auth_serversupplied_info into the IDL-defined struct auth_user_info_dc. This then in turn contains a struct auth_user_info, which is the only part of the structure that is mainted into the struct session_info. The idea here is to avoid keeping the incomplete results of the authentication (such as session keys, lists of SID memberships etc) in a namespace where it may be confused for the finalised results. Andrew Barltett
2011-01-20s4-auth Remove special case for account_sid from auth_serversupplied_infoAndrew Bartlett1-12/+8
This makes everything reference a server_info->sids list, which is now a struct dom_sid *, not a struct dom_sid **. This is in keeping with the other sid lists in the security_token etc. In the process, I also tidy up the talloc tree (move more structures under their logical parents) and check for some possible overflows in situations with a pathological number of sids. Andrew Bartlett
2011-01-18s4-torture Remove unused temp dirs from the RPC-PAC test.Andrew Bartlett1-9/+0
The code previously required the creation of a messaging context, but this isn't done any more, so we don't need the tmp dir to put it in. Andrew Bartlett
2010-12-11s4-smbtorture: Make test names lowercase and dot-separated.Jelmer Vernooij1-1/+1
This is consistent with the test names used by selftest, should make the names less confusing and easier to integrate with other tools. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sat Dec 11 04:16:13 CET 2010 on sn-devel-104
2010-11-02s4-torture Add tests for DES-only accounts PAC behaviour/validation.Andrew Bartlett1-3/+42
Previously we didn't support DES-only in a Samba4 domain. This is important for some legacy systems that have not yet migrated from this weak crypto. Andrew Bartlett
2010-10-12libcli/security Use common security.hAndrew Bartlett1-1/+1
This includes dom_sid.h and security_token.h and will be moved to the top level shortly. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 12 03:35:36 UTC 2010 on sn-devel-104
2010-07-16s4-loadparm: 2nd half of lp_ to lpcfg_ conversionAndrew Tridgell1-6/+6
this converts all callers that use the Samba4 loadparm lp_ calling convention to use the lpcfg_ prefix. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2010-06-17s4:torture/rpc/remote_pac: use dcerpc_netr_LogonSamLogon_r() instead of ↵Stefan Metzmacher1-1/+2
dcerpc_netr_LogonSamLogon() metze
2010-05-20s4:torture Add tests to demonstrate S2U4Self in the RPC-PAC testAndrew Bartlett1-8/+306
We also compare against SamLogon to try and validate the whole thing. Note that we must represent NULL as "" when comparing between the PAC and SamLogon, due to different marshalling of the structures. Andrew Bartlett
2010-05-18Finish removal of iconv_convenience in public API's.Jelmer Vernooij1-3/+3
2010-04-14s4:torture/rpc: rename rpc.h => torture_rpc.hStefan Metzmacher1-1/+1
The reason for this is that some systems include <rpc/rpc.h> from within system headers. HP-UX 11.00 does so somewhere deep inside of <shadow.h>. For torture/winbind/struct_based.c <rpc/rpc.h> resolves to torture/rpc/rpc.h and breaks the build. metze
2010-03-29s4:torture/rpc/remote_pac.c: add explicit check for NTSTATUS r.out.resultGünther Deschner1-10/+15
Guenther Signed-off-by: Stefan Metzmacher <metze@samba.org>
2010-03-17s4:torture/rpc/remote_pac.c: make use of dcerpc_binding_handle stubsStefan Metzmacher1-5/+6
metze
2009-10-20s4-torture: ran minimal_includes.pl over source4/tortureAndrew Tridgell1-6/+0
This reduces compile time somewhat.
2009-06-29s4-smbtorture: add torture_suite_add_machine_workstation_rpc_iface_tcase.Günther Deschner1-1/+1
Unlike torture_suite_add_machine_bdc_rpc_iface_tcase() which joins as a BDC (ACB_SRVTRUST) this joins as a member workstation (ACB_WSTRUST). Guenther
2009-04-14Rework Samba4 to use the new common libcli/auth codeAndrew Bartlett1-13/+14
In particular, this is the rename from creds_ to netlogon_creds_, as well as other links to use the new common crypto. Andrew Bartlett
2009-02-13Remove useless invocation of messaging_init() in RPC-PAC testAndrew Bartlett1-9/+0
2009-02-13Remove auth/ntlm as a dependency of GENSEC by means of function pointers.Andrew Bartlett1-1/+1
When starting GENSEC on the server, the auth subsystem context must be passed in, which now includes function pointers to the key elements. This should (when the other dependencies are fixed up) allow GENSEC to exist as a client or server library without bundling in too much of our server code. Andrew Bartlett
2008-11-02Add gensec_settings structure. This wraps loadparm_context for now, butJelmer Vernooij1-2/+5
should in the future only contain some settings required for gensec.
2008-10-29s4-netlogon: merge netr_LogonSamLogon{Ex,WithFlags} from s3 idl.Günther Deschner1-8/+26
Guenther
2008-09-23RPC-PAC: loop in gensec_update() untill the server side is readyStefan Metzmacher1-5/+1
metze
2008-09-22Remove unused variableAndrew Bartlett1-2/+0
2008-09-22This torture test and skipping of the server-side check was bogus.Andrew Bartlett1-49/+0
The IDL is declared to force the MessageType to 3 on output, so we instead checked the same thing 255 times... Andrew Bartlett
2008-09-03Test a few more error cases in RPC-PACAndrew Bartlett1-2/+179
(This used to be commit 50502b3b8faf89cf5ad396102f4fe80eaa213908)
2008-08-29It turns out that the Netlogon PAC verification is encrypted.Andrew Bartlett1-1/+3
This test now passes against Win2k3, and a implementation in the Samba4 server should follow shortly. Andrew Bartlett (This used to be commit c6b8ba893dd3ed90bca32c0ae89fd33be729c238)
2008-08-28Further rework the RPC-PAC test.Andrew Bartlett1-34/+15
This would seem to match the documentation requirements for the PAC verfication over NETLOGON, but I can't get Win2k3 to accept it so far. Andrew Bartlett (This used to be commit acfa87f3411a61bdd9066fbbba2bcfbe2a60cbbe)
2008-08-27Add a test to explore Netlogon PAC validationAndrew Bartlett1-0/+220
However, I have still not figured out this protocol yet, and the docs are rather unclear... :-( Andrew Bartlett (This used to be commit d878643071a1477435a267e2944461d367cdfa79)