Age | Commit message (Collapse) | Author | Files | Lines |
|
(This used to be commit 06ddac2bb1899937b79e3bf89cb84c750c3ce4c5)
|
|
(This used to be commit cbbc0d7cc4f589235d209011bdb0a0401b492d9e)
|
|
(This used to be commit 2b3d56e153b229119fddfa7b378f4d671ee0092c)
|
|
rafal
(This used to be commit 7dde77942bfcb73dfdd7a9840d3ba2a984c05064)
|
|
rafal
(This used to be commit 9ef2275f6179869f2683e96c6f91d9569a6360c8)
|
|
Now, each rpc interface (named pipe, tcp/ip, lrpc and unix
socket) works asynchronously.
Comments to follow.
rafal
(This used to be commit 789f9d43db7ea59e79d5aa498e2e9fd077448825)
|
|
Andrew Bartlett
(This used to be commit 273cb8fd4288f7bf15e0bcad9f6a4cbf4f142b24)
|
|
same time.
This was causing the kdc to shut itself down if 'bind interfaces only = no'.
Andrew Bartlett
(This used to be commit 02ff22a25050687478cfcca4dce35c2346cc2241)
|
|
make it possible to code the difference between a zero length and a NULL DATA_BLOB...
metze
(This used to be commit 54f0b19c55df8ad3882f31a114e2ea0e4cf940ae)
|
|
(prepare the next commit)
metze
(This used to be commit a1bbf7f2982185cb6cd544b65b4709ab33a850c5)
|
|
initialize
them for the internal use...
found by 'make valgrindtest'
metze
(This used to be commit 1db9501c5261a974c6da1938537c7991ff6cfefd)
|
|
specifically ask for iface_n_bcast() and have to check if it returns
NULL, in which case it is a non-broadcast interface
(This used to be commit d004e250b6710251ea089ac242775481f13b5c2b)
|
|
calculation code. This was originally done in 1997, and has been
morphed a lot since then, but fred should still get credit
(This used to be commit 172e41596fb3b4d2768d6885aea43295cc2f81c1)
|
|
We do need the gsskrb5_get_initiator_subkey() routine. But we should
ensure that we do always get a valid key, to prevent any segfaults.
Without this code, we get a different session key compared with
Win2k3, and so kerberised smb signing fails.
Andrew Bartlett
(This used to be commit cfd0df16b74b0432670b33c7bf26316b741b1bde)
|
|
Andrew Bartlett
(This used to be commit b90959f7968ebbfc82ac55d4775d5574b1fc6925)
|
|
Andrew Bartlett
(This used to be commit e1de45bce47292eef1f9c56ea5576c0436e6151d)
|
|
isn't every parameter on NTLMSSP, but it is most of the important
ones.
This showed up that we had the '128bit && LM_KEY' case messed up.
This isn't supported, so we must look instead at the 56 bit flag.
Andrew Bartlett
(This used to be commit 990da31b5f63f1e707651af8bf1a3241a8309811)
|
|
NTLM2 signing code.
Andrew Bartlett
(This used to be commit 16e5c968756c40b8595503da47a1adb9cb09c447)
|
|
We were causing mayhem by weakening the keys at the wrong point in time.
I think this is the correct place to do it. The session key for SMB
signing, and the 'smb session key' (used for encrypting password sets)
is never weakened.
The session key used for bulk data encryption/signing is weakened.
This also makes more sense, when we look at the NTLM2 code.
Andrew Bartlett
(This used to be commit 3fd32a12094ff2b6df52f5ab2af7c0ffceb5a4a0)
|
|
encryption behaviour.
Andrew Bartlett
(This used to be commit 2b3b2f33a4c531f2b0f65521cc352e6d762e95bd)
|
|
Andrew Bartlett
(This used to be commit f075497926f3b8131bf8427ee3a3d5c9e5ee77d7)
|
|
just NTLMSSP.
Andrew Bartlett
(This used to be commit 3e96975d910496db87e8e34e310f0f6d283210bf)
|
|
Andrew Bartlett
(This used to be commit 04e2fe8b6d293092af86a54215c1fa037bbb20e9)
|
|
emulate the behaviour of XP standalone if required).
Andrew Bartlett
(This used to be commit 7f821097fbdbc9f35d96e05f85cf008f36c0eea3)
|
|
The new RPC-SCHANNEL test shows that the full credentials state must
be kept in some shared memory, for some length of time. In
particular, clients will reconnect with SCHANNEL (after loosing all
connections) and expect that the credentials chain will remain in the
same place.
To achive this, we do the server-side crypto in a transaction,
including the fetch/store of the shared state.
Andrew Bartlett
(This used to be commit 982a6aa871c9fce17410a9712cd9fa726025ff90)
|
|
included in his last commit
(This used to be commit 487b374b4359b2cb5f4e249e595c43bfa568a853)
|
|
error (ie. zero is not an error).
(This used to be commit 1ab4674196b9df0b2b7b6eb4991358cc2f86c0d9)
|
|
we aren't linked against a C99 vsnprintf.
(This used to be commit 23782f899aaa5fe488d86d5e67e91be99ff7a146)
|
|
the form //server/share (ie. remote path missing).
(This used to be commit 443677f58d4ba8d6aa2963ca5848d3e717ee2cac)
|
|
the form //server. Make sure failure cases are well-defined.
(This used to be commit e0020df66bf38873eaaacb95cadac55e17f432be)
|
|
available under schannel, and performs a netlogon authentication.
Andrew Bartlett
(This used to be commit 561a690915f9d3ca2fbb76f16c47cf2f6be1b825)
|
|
the new socket.
We should also test netlogon operations, but there are issues with
what state is expected to be stored (far more than we currently do).
Andrew Bartlett
(This used to be commit 39ddba0d0dc4475f9f7c5b7aa19ffff42c9fd1f5)
|
|
still missing a configure test to make us
substitute our snprintf to system one when
the system one does not have positional parameters support
(This used to be commit 398f989d6580587eb1fa4fec0b1ed858b5cbe8e1)
|
|
(This used to be commit fc17a50b48189c60af60b9163695b48c6b87c5c7)
|
|
(This used to be commit 0e2cca9153619d646b90f32620905ab66b017c6a)
|
|
close after setting delete on close flag.
Jeremy.
(This used to be commit fbea18e78f8a3c6dbb36aa935b7044c0fcf61da4)
|
|
and use it in provisioning to fullfill rfc 3045 requirements
(This used to be commit 3fb9571a76481560304a826fc945983d52123299)
|
|
(This used to be commit dc20bb0ddc0824fc458e7fc4a9bce5059f4fc0d5)
|
|
seem still buggy, can't make w2k3 to like it yet
(This used to be commit e1318383e91f6f6db39e3e3c9946fbb089753947)
|
|
(This used to be commit fbee725ae87efbcf5887c923d55d7cb0d05476a6)
|
|
metze
(This used to be commit 24c6e2f73175befa33f9758634e3ee183916e387)
|
|
(This used to be commit a73b76a36a70703738945d42795da6cf90c85105)
|
|
(This used to be commit 5af9086deafc88aa1f9256cc0090592ecbd62203)
|
|
(This used to be commit 07fa55db32dcb93bfb4406baca0cfba31d3bc189)
|
|
Fix asq module, add a second_stage_init to register with rootdse
Fix asq control ldap parsing routines (this was nasty to find out)
(This used to be commit 933a80397d137f7d5b79c82a068d62bb6928ef47)
|
|
a plain ldbsearch would just crash
Fix kludge_acl, not passing on the second stage registration
phase to other modules
Simo
(This used to be commit bec99c5cb65d8c32fd4f636ed2f5383fb1b39830)
|
|
from Pete Rowley <prowley@redhat.com>
(This used to be commit bf20a848fda1607ca1b0d84791c299c0035793a1)
|
|
in attrib_handler.c functions
remove it again
Simo
(This used to be commit 513ff499071e6cb5e608a82430718021f72997bd)
|
|
Until we do not have an internal utf8 compliant
casefloding function we cannot pass this test
in the non-samba build
(This used to be commit 5d93c1eeba8f64784294f3aabcaefa4aaf798355)
|
|
safe function if the user provides an utf8
compliant casefold function to ldb.
- Fix toupper_m and tolower_m to not crash if
the case tables are not found
- Let load_case_table() search into the correct
directory in the search tree for the case
tables so that we can test utf8
Simo
(This used to be commit e12f070958eb3c144beb81c5cb878db122249021)
|