| Age | Commit message (Collapse) | Author | Files | Lines |
|---|
|
metze
(This used to be commit b206c5e87c791ac8f2ecf5b7ef6b2622ad735f54)
|
|
In librpc, always try SMB level authentication, even if trying
schannel, but allow fallback to anonymous. This should better
function with servers that set restrict anonymous.
There are too many parts of Samba that get, parse and modify the
binding parameters. Avoid the extra work, and add a binding element
to the struct dcerpc_pipe
The libnet vampire code has been refactored, to reduce extra layers
and to better conform with the standard argument pattern. Also, take
advantage of the new libnet_Lookup code, so we don't require the silly
'password server' smb.conf parameter.
To better support forcing traffic to be sealed for the vampire
operation, the dcerpc_bind_auth() function now takes an auth level
parameter.
Andrew Bartlett
(This used to be commit d65b354959842326fdd4bd7eb7fbeea0390f4afa)
|
|
Andrew Bartlett
(This used to be commit 21f87f87a9b79da4463bddc993df502beae50a16)
|
|
the remote server's name, or in the absence of a local nbt_server to
communicate with (or without root access), a node status request.
The result is that we are in a better position to use kerberos, as well
as to remove the 'password server' mandatory parameter for the samsync
and samdump commands. (I need this to put these into SWAT).
The only problem I have is that I must create a messaging context, which
requires a server ID. As a client process, I don't expect to get
messages, but it is currently required for replies, so I generate a
random() number. We probably need the servers to accept connections on
streamed sockets too, for client-only tasks that want IRPC.
Because I wanted to test this code, I have put the NET-API-* tests into
our test scripts, to ensure they pass and keep passing. They are good
frontends onto the libnet system, and I see no reason not to test them.
In doing so the NET-API-RPCCONNECT test was simplified to take a
binding string on the command line, removing duplicate code, and
testing the combinations in the scripts instead.
(I have done a bit of work on the list shares code in libnet_share.c
to make it pass 'make test')
In the future, I would like to extend the libcli/findds.c code (based
off volker's winbind/wb_async_helpers.c, which is why it shows up a bit
odd in the patch) to handle getting multiple name replies, sending a
getdc request to each in turn.
(posted to samba-technical for review, and I'll happily update with
any comments)
Andrew Bartlett
(This used to be commit 7ccddfd3515fc2c0d6f447c768ccbf7a220c3380)
|
|
as well as ncacn_np.
rafal
(This used to be commit 70cf8a4b67657f7c51e95ae5321e5a2e7f52832d)
|
|
valgrind in 'make valgrindtest'
(This used to be commit b2030d527a75fecd907148d13860b4ba5193f218)
|
|
torture:quick is set
(This used to be commit b591b28567eba148509c5dec060efaef2fd95ff6)
|
|
structure that is more generic than just 'IP/port'.
It now passes make test, and has been reviewed and updated by
metze. (Thankyou *very* much).
This passes 'make test' as well as kerberos use (not currently in the
testsuite).
The original purpose of this patch was to have Samba able to pass a
socket address stucture from the BSD layer into the kerberos routines
and back again. It also removes nbt_peer_addr, which was being used
for a similar purpose.
It is a large change, but worthwhile I feel.
Andrew Bartlett
(This used to be commit 88198c4881d8620a37086f80e4da5a5b71c5bbb2)
|
|
to specific dirs)
(This used to be commit 243cf760b077e155f5ac508aeebf819f7708a84e)
|
|
metze
(This used to be commit 6647feb761a272b687d12685bc096e4ebdd02abe)
|
|
Andrew Bartlett
(This used to be commit 59c380e048423d706ab65513c09dbefecb5819ae)
|
|
(This used to be commit 568fc8a3412e07ac3084f441e693bc82b9ea912b)
|
|
(This used to be commit d73c343904f32956ba97e4ad82af9c9a75f5d70c)
|
|
(This used to be commit d96c84126dcc1ec97e39814f21de167528fe886f)
|
|
to add
trusted domains.
Volker
(This used to be commit 8b8bb85ad365721bfa1cf5309d53d851f2013c22)
|
|
(This used to be commit 63917616016133c623fc6ff59454bc313ee7dd8f)
|
|
(This used to be commit c722f665c90103f3ed57621c460e32ad33e7a8a3)
|
|
torture prototypes in seperate header
(This used to be commit 73610639b23ca3743077193fa0b1de7c7f65944d)
|
|
- we already call usleep() directly in some places,
so do it everywhere
metze
(This used to be commit 9eaf6e2c4d3dae3b6711e4aae3828222f5cab65e)
|
|
- do some tests with 0xBF and 0xBE, this shows that the '+' padding
should be done by the client
metze
(This used to be commit 5a257ba9811b247a0df2b44c99df00f59dacc1e0)
|
|
(This used to be commit 2b603d3ecf2f3108942422bda864e41c8addbf60)
|
|
(This used to be commit ce77c0e8bf4127027edd6291d2ae5d868e3372a1)
|
|
dependencies
with proto.h
(This used to be commit 9e0ba380374db028358158b9e4457dd930b5ab13)
|
|
subsystems.
This allows Samba libraries to be used by other projects (and parts of
Samba to be built as shared libraries).
(This used to be commit 44f0aba715bfedc7e1ee3d07e9a101a91dbd84b3)
|
|
(This used to be commit 70e7449318aa0e9d2639c76730a7d1683b2f4981)
|
|
Andrew Bartlett
(This used to be commit a328acc8fa73703bba72b94084063906ec63cdc3)
|
|
(This used to be commit ca8db1a0cd77682ac2c6dc4718f5d753a4fcc4db)
|
|
to run for 'make all'
(This used to be commit e71cd4778b9a872642619452e574f510e2491052)
|
|
(This used to be commit 2e5a6eb219feab3208f63d727340a852bfdb0b3f)
|
|
(This used to be commit 2055f978214c1a2732433efe38ebc0fb70ec4e70)
|
|
(This used to be commit ad3b8286636f4101fa6528cb447aeeb7ee7507a4)
|
|
(This used to be commit 0aca5fd5130d980d07398f3291d294202aefe3c2)
|
|
lookups in load_interfaces(). The reason was my eth0 interface was
down, and it was being interpreted as a DNS name.
This patch changes load_interfaces() to happening automatically when
interfaces are first needed instead of on the startup of every samba
binary. This means that (for example) ldbadd doesn't call
load_interfaces(), which means no slow DNS lookups.
I also reduced the number of static globals in interface.c to 1, and
changed from malloc to talloc
When you want to force a reload of the interfaces list, you now call
unload_interfaces(), which means the next call that needs the
interfaces list will reload it
(This used to be commit f79d90bd1364b970adb2981b2572e77066431f1e)
|
|
(note that this doesn't use the distinction between private
and public prototypes yet)
(This used to be commit 60e11f575821c1762b25ad66441b6e69ad1167ef)
|
|
Be a bit more strict when checking for duplicate interfaces
(This used to be commit b1286a6d27e2b5aa26f288f6aff70601b0d8ae74)
|
|
back and
forth between GUID structs and strings in several places.
(This used to be commit 3564e2f967ef72d6301b4f7e9a311cebcded4d75)
|
|
dcerpc_interface_table struct rather then a tuple of interface
name, UUID and version.
This removes the requirement for having a global list of DCE/RPC interfaces,
except for these parts of the code that use that list explicitly
(ndrdump and the scanner torture test).
This should also allow us to remove the hack that put the authservice parameter
in the dcerpc_binding struct as it can now be read directly from
dcerpc_interface_table.
I will now modify some of these functions to take a dcerpc_syntax_id
structure rather then a full dcerpc_interface_table.
(This used to be commit 8aae0f168e54c01d0866ad6e0da141dbd828574f)
|
|
password age), and test for the incorrect password error case.
Andrew Bartlett
(This used to be commit 85b7e3c493c65a9e1ea88325cbeaeb9bffceb9e2)
|
|
really as simple as it looks.
Andrew Bartlett
(This used to be commit a7e4062547470620b5b69dc295d5ac7dcec93116)
|
|
'librpc'
are the only two subsystems left to convert.
(This used to be commit f6bbc72996aeee8607fc583140fd60be0e06e969)
|
|
(This used to be commit c92ace494f92084ddf178626cdf392d151043bc7)
|
|
the difference between these at all, and in the future the
fact that INIT_OBJ_FILES include smb_build.h will be sufficient to
have recompiles at the right time.
(This used to be commit b24f2583edee38abafa58578d8b5c4b43e517def)
|
|
We now use a different system for initializing the modules for a subsystem.
Most subsystems now have an init function that looks something like this:
init_module_fn static_init[] = STATIC_AUTH_MODULES;
init_module_fn *shared_init = load_samba_modules(NULL, "auth");
run_init_functions(static_init);
run_init_functions(shared_init);
talloc_free(shared_init);
I hope to eliminate the other init functions later on (the
init_programname_subsystems; defines).
(This used to be commit b6d2ad4ce0a91c4be790dd258820c492ff1787ea)
|
|
(This used to be commit ff7ef98f34811952331e72095505a2eae430fec0)
|
|
'make' now
handles expanding the protoheader object list, rather then the build system,
which makes the makefile quite a bit shorter.
(This used to be commit a4088ccc704f1338c040c53596ff606cc1651d03)
|
|
metze
(This used to be commit b96eadb890a29cfbcff43ede390ef842e16827ad)
|
|
so remove
it.
I'll add it again later when I have more time for it.
Volker
(This used to be commit 84ae166e9173e6f16a60503a3a996dfb4f085926)
|
|
(This used to be commit 57ea480c24ff914dfa6cbc5a309020b21fa4af39)
|
|
metze
(This used to be commit 1c0586868083455780aec38f638277b313dcfa1a)
|
|
(This used to be commit 754e51b19d2d1fd6be8e01d62b6ec892688f934c)
|
