summaryrefslogtreecommitdiff
path: root/source4
AgeCommit message (Collapse)AuthorFilesLines
2008-08-14RAW-OPEN: be more strict in create_option checkingStefan Metzmacher1-2/+11
metze (This used to be commit d548f5dee5980eae0aea25f1314238eb4f963568)
2008-08-14Revert "krb5: always generate the acceptor subkey as the same enctype as the ↵Stefan Metzmacher1-3/+0
used service key" This reverts commit dbb94133e0313cae933d261af0bf1210807a6d11. As we fixed gensec_gssapi to only return a session key when it's have the correct session key, this hack isn't needed anymore. metze (This used to be commit 697cd1896bccaa55ee422f17d9312d787ca699ed)
2008-08-14gsskrb5: always return an acceptor subkeyStefan Metzmacher1-4/+18
For non cfx keys it's the same as the intiator subkey. This matches windows behavior. metze (This used to be commit 6a8b07c39558f240b89e833ecba15d8b9fc020e8)
2008-08-14gensec_gssapi: only cache the session key in STAGE_DONEStefan Metzmacher1-5/+9
The key may change because we switch from initiator to acceptor subkey. metze (This used to be commit 66244092a457b2cde6339cb31dcfa73b122ba9b5)
2008-08-14SMB2-CREATE: add a special test for FILE_ATTRIBUTE_ENCRYPTEDStefan Metzmacher1-2/+21
Some standalone server (and samba4) doesn't support this. metze (This used to be commit 6d8fd4c0089d7e632ec91027a77321aca8c6acc7)
2008-08-14SMB2-CREATE: be more strict in checking file attributesStefan Metzmacher1-12/+20
metze (This used to be commit ba9d0f6b3c60346df757e7c4c3f5704c0bf26d11)
2008-08-14SMB2-CREATE: be more strict in error checkingStefan Metzmacher1-1/+11
metze (This used to be commit d7d4df78c1de19d0cd7a63daaa2fa0863a243a12)
2008-08-14ntvfs_generic: fix handling of create_options for SMB2Stefan Metzmacher1-6/+4
metze (This used to be commit cbd585d2a1e179615eba773cb07385524369c686)
2008-08-14libcli/smb2: add SMB2_CREATE_OPTIONS_NOT_SUPPORTED_MASKStefan Metzmacher1-1/+3
SMB2 returns NOT_SUPPORTED to some more NTCREATE_OPTIONS. metze (This used to be commit 3ea08d430370717463ffab44fed9c42db1002d97)
2008-08-14pvfs: fix handling of create_option flagsStefan Metzmacher1-2/+12
metze (This used to be commit 3c6cadf76861d6522c5ec41953df1ba2fac4910d)
2008-08-14libcli/raw: fix the special NTCREATE_OPTIONS_*_MASK valuesStefan Metzmacher1-7/+20
We now reuse ignored values for the ntvfs backend private flags. metze (This used to be commit 14eda93aeface307e1ffd1ea012d8f236fa78290)
2008-08-14smb2srv: async replies with STATUS_PENDING are not signedStefan Metzmacher1-2/+29
..., but the they may have the sign flag set. metze (This used to be commit 43e43dead030f6bffd06631007fdb162c3c6b2b5)
2008-08-14smb2srv: sign replies when the request was also signedStefan Metzmacher2-7/+4
metze (This used to be commit dd2f4f7a491debcc30e590f571272afd99e52940)
2008-08-14smb2srv: use defines instead of hex valuesStefan Metzmacher1-3/+3
metze (This used to be commit 7c4abf6614c47471ae005a12abe27d85890d867f)
2008-08-14libcli/smb2: use smb2 signing in auto mode if the server supports itStefan Metzmacher1-1/+7
metze (This used to be commit fe74faf13dc64eaa58d757de156aedcb24abed1f)
2008-08-14libcli/smb2: we don't need check the same thing twice...Stefan Metzmacher1-6/+0
metze (This used to be commit 1380fb954a7d9d4b543c4650a060fef9f357af7b)
2008-08-14libcli/smb2: async replies with STATUS_PENDING are not signedStefan Metzmacher1-13/+11
metze (This used to be commit 3f6cbece4a199a42ad6583ea4bd4302629399625)
2008-08-14pidl: fix samba4.pidl.samba3-cli testStefan Metzmacher1-2/+0
metze (This used to be commit 0449a5c8267873d7986c7c50adce57029192c456)
2008-08-14NBT-WINSREPLICATION: be more robust to timing errorsStefan Metzmacher1-6/+6
Also reenable disabled tests. metze (This used to be commit 76878a9c798e0acb0387b8352972d66db989c09a)
2008-08-14expanded the SMB2-CREATE and RAW-OPEN tests to explore more of how theAndrew Tridgell2-8/+67
create options fields are supposed to work (This used to be commit 0576875eccaa21ad529c9db41db91781ad400d0f)
2008-08-14cope with arbitrary unknown pac buffer types, so when MS adds Andrew Tridgell1-1/+5
a new one we don't break our server (This used to be commit 5e08b285319e35afd3a9a6e6f5f59145350f2d80)
2008-08-14cope with not knowing the kdc keyAndrew Tridgell1-41/+56
(This used to be commit 7e48dad4c7724f3f11236171a777603574224c42)
2008-08-14Assert on failure to join domain in NBT-DGRAMAndrew Bartlett1-0/+4
(This used to be commit 0a8080d0f245ddf0177195dd8e7fb3e1cdc0785f)
2008-08-13Rework the trustAuthInOutBlob with the help of a hand parser.Andrew Bartlett5-26/+224
This produces a C structure that is sane, while still parsing the wire blobs (as far as I can tell). Andrew Bartlett (This used to be commit b5dbe815e5dd3f865c7735bc76e02017a869f09b)
2008-08-13Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-localAndrew Bartlett4-24/+206
(This used to be commit 0819922a0c7f48c2517d3572f98cd1359749c4ae)
2008-08-13Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartletAndrew Bartlett4-24/+206
(This used to be commit e85abe7db21eec47adecae8243a25f145aa7ec9a)
2008-08-12gensec_gssapi: add support for GENSEC_FEATURE_NEW_SPNEGOStefan Metzmacher1-0/+25
metze (This used to be commit 9246924effd4d0b08ca1ef87e45ad510020df93e)
2008-08-12gensec_gssapi: fix compiler warningsStefan Metzmacher1-2/+2
metze (This used to be commit f4f4bb7fe977301e468ab164ba750b69d9a92306)
2008-08-12gensec_gssapi: add a function to load the lucid structure onceStefan Metzmacher1-15/+44
metze (This used to be commit daa986d1d04e59550bb5d33b5075daa414d087ba)
2008-08-12gensec: add support for new style spnego and correctly handle mechListMICStefan Metzmacher3-7/+135
metze (This used to be commit 05a3403967d3cf64bca8b06536dc1b20cf835396)
2008-08-12Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartletAndrew Bartlett10-48/+139
(This used to be commit 7ad0d8dd4dab6119ca6f94b64b35c8f975a27d0a)
2008-08-12Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-localAndrew Bartlett224-71/+54380
(This used to be commit ce7b1424c711949e6feb0181d3759133b77391ff)
2008-08-12Add GenericInfo level for SamLogon calls from the WSPP IDL.Andrew Bartlett2-19/+46
Andrew Bartlett (This used to be commit ea58b650a81b48b0477edbcda1e4e26a3b2a9b9e)
2008-08-11dcerpc.idl: remove used DCERPC_MAX_SIGN_SIZEStefan Metzmacher1-1/+0
metze (This used to be commit 54b873e49ff363609632fa2862208bf6b4c1b6ed)
2008-08-11rpc_server: correct the chunk_size depending on the signature sizeStefan Metzmacher2-6/+14
metze (This used to be commit 20fc0d7bfdaa60d6a8ac939dc64733a91652587e)
2008-08-11librpc/rpc: correct the chunk_size depending on the signature sizeStefan Metzmacher1-4/+13
metze (This used to be commit 50eb0e726405580dc5ca3a8a3b15f3bd674f722a)
2008-08-11dcerpc.idl: add DCERPC_AUTH_TRAILER_LENGTHStefan Metzmacher1-0/+2
metze (This used to be commit ce36448d74b0c6cdf8928e10c088bf0248a95cf7)
2008-08-11Only allow trust accounts access to the NTP signing service.Andrew Bartlett1-3/+9
(This used to be commit 30da1b534f00ba6ef6cf86cba603732bc6e1ad43)
2008-08-08gensec_gssapi: use the correct signature size for cfx/rfc4121 style signaturesStefan Metzmacher1-1/+1
metze (This used to be commit fcabe24f96c9677146ca754a502f336c23050339)
2008-08-08gsskrb5: try to be compatible with windows for gss_wrap* and cfxStefan Metzmacher2-11/+39
The good thing is that windows and heimdal both use EC=0 in the non DCE_STYLE case, so we need the windows compat hack only in DCE_STYLE mode. metze (This used to be commit 0fa41a94e466d5e11bcf362ccd8ff41b72733d1a)
2008-08-08gensec_gssapi: use gsskrb5_get_subkey() to get the session keyStefan Metzmacher1-3/+3
This is needed to get the correct key, when aes keys are used. metze (This used to be commit 7587a7d8b65f27a5865d6873f63a450488da02c9)
2008-08-08krb5: always generate the acceptor subkey as the same enctype as the used ↵Stefan Metzmacher1-0/+3
service key With this patch samba4 can use gsskrb5_get_subkey() to get the session key. metze (This used to be commit dbb94133e0313cae933d261af0bf1210807a6d11)
2008-08-08gsskrb5: add support for DCE_STYLE and des and des3 keysStefan Metzmacher2-22/+64
Only the des keys are tested as windows doesn't support des3 metze (This used to be commit 86848dd0f217774faed81af8fbf68618013e20a1)
2008-08-08Always set a session key, even for the 'no password' case.Andrew Bartlett1-0/+2
This is for bug 5664 reported by Tom <hto@arcor.de>. Andrew Bartlett (This used to be commit b345c9cf535af35c83da040ac965d9690dc802fe)
2008-08-08Clarify commentAndrew Bartlett1-2/+2
(This used to be commit 580cce9de38ddd9d59b272b58caadce528321d09)
2008-08-08Always set a session key, even for the 'no password' case.Andrew Bartlett1-0/+2
This is for bug 5664 reported by Tom <hto@arcor.de>. Andrew Bartlett (This used to be commit a106a4ccc435d149072fb884caf95e5517cd4204)
2008-08-08Clarify commentAndrew Bartlett1-2/+2
(This used to be commit 719941e929ddb6fea011fcc0c8c6b91c26e586af)
2008-08-08We can't use ndr_pull_struct_blob_all in combinatin with relative pointersAndrew Bartlett1-3/+4
(This used to be commit d0a128f35b259d4891edc68fc24aa04a6da7aab7)
2008-08-08More work towards trusted domain support in the KDC.Andrew Bartlett1-25/+93
(This used to be commit c87d732b23ad7de8dc2f824bf11c9310fb4184e1)
2008-08-08We can't use ndr_pull_struct_blob_all in combinatin with relative pointersAndrew Bartlett1-3/+4
(This used to be commit 931890e028da8da756b7c7c62e2552a9fc04f7bc)