summaryrefslogtreecommitdiff
path: root/source4
AgeCommit message (Collapse)AuthorFilesLines
2008-08-08gsskrb5: try to be compatible with windows for gss_wrap* and cfxStefan Metzmacher2-11/+39
The good thing is that windows and heimdal both use EC=0 in the non DCE_STYLE case, so we need the windows compat hack only in DCE_STYLE mode. metze (This used to be commit 0fa41a94e466d5e11bcf362ccd8ff41b72733d1a)
2008-08-08gensec_gssapi: use gsskrb5_get_subkey() to get the session keyStefan Metzmacher1-3/+3
This is needed to get the correct key, when aes keys are used. metze (This used to be commit 7587a7d8b65f27a5865d6873f63a450488da02c9)
2008-08-08krb5: always generate the acceptor subkey as the same enctype as the used ↵Stefan Metzmacher1-0/+3
service key With this patch samba4 can use gsskrb5_get_subkey() to get the session key. metze (This used to be commit dbb94133e0313cae933d261af0bf1210807a6d11)
2008-08-08gsskrb5: add support for DCE_STYLE and des and des3 keysStefan Metzmacher2-22/+64
Only the des keys are tested as windows doesn't support des3 metze (This used to be commit 86848dd0f217774faed81af8fbf68618013e20a1)
2008-08-08Always set a session key, even for the 'no password' case.Andrew Bartlett1-0/+2
This is for bug 5664 reported by Tom <hto@arcor.de>. Andrew Bartlett (This used to be commit b345c9cf535af35c83da040ac965d9690dc802fe)
2008-08-08Clarify commentAndrew Bartlett1-2/+2
(This used to be commit 580cce9de38ddd9d59b272b58caadce528321d09)
2008-08-08We can't use ndr_pull_struct_blob_all in combinatin with relative pointersAndrew Bartlett1-3/+4
(This used to be commit d0a128f35b259d4891edc68fc24aa04a6da7aab7)
2008-08-07lib: prepare the build of zlibStefan Metzmacher4-0/+33
metze (This used to be commit 159df68c04c9ae437ab48991154e91161ef72754)
2008-08-07zlib: add inflateReset2()...Stefan Metzmacher3-3/+28
metze (This used to be commit 2a4fb661d7e3d601a5eb9ccecb4d4f2b07073097)
2008-08-07import of zlib-1.2.3Stefan Metzmacher200-0/+54035
We want to use zlib for the mszip ndr (de)compression later, we'll need to add some new functions to zlib. metze (This used to be commit 65c9e91a1bb24851a030a304d011558562cc50d6)
2008-08-07drsuapi: fix callers after idl changeStefan Metzmacher3-3/+3
metze (This used to be commit 7dee6fb62d5adbd2eaaaf4d8ba9e87a72ef9f94b)
2008-08-07drsuapi.idl: directly use mszip in level 2Stefan Metzmacher1-7/+1
This fixes the push because the switch_level doesn't work otherwise because the pointer is the same as for the outer switch_level. metze (This used to be commit a4c81ee68c91b2d7a9abe668e8b23246c5c9b00d)
2008-08-07rpc_server: add support for DCERPC_PFC_FLAG_SUPPORT_HEADER_SIGNStefan Metzmacher3-1/+14
you need "dcesrv:header signing=yes" to enable it. metze (This used to be commit bde2496e6b7034c99243b22434a97aebeb8f75b9)
2008-08-07librpc/rpc: add support DCERPC_PFC_FLAG_SUPPORT_HEADER_SIGNStefan Metzmacher4-1/+35
You can trigger it like this: ncacn_ip_tcp:172.31.9.234[sign,hdrsign] or ncacn_ip_tcp:172.31.9.234[seal,hdrsign] metze (This used to be commit 54f1fca582b1474693b5ee11b7b847086d27f75f)
2008-08-07librpc/rpc: pass struct dcerpc_pipe to dcerpc_auth3()Stefan Metzmacher2-6/+9
metze (This used to be commit 60b3523da485d845b1d930d990688d8434d39ef3)
2008-08-07gensec_gssapi: add support for GENSEC_FEATURE_SIGN_PKT_HEADERStefan Metzmacher1-4/+82
This only works for sign/verify_packet() yet, seal/unseal_packet() doesn't work yet... metze (This used to be commit c62e5d23a69789d23516a6d150fd3b756e270998)
2008-08-07gensec: add GENSEC_FEATURE_SIGN_PKT_HEADER flagStefan Metzmacher1-0/+1
metze (This used to be commit d7dfdbaf34843cb6783d8e686e659c53c5ac27ef)
2008-08-01Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into manpageJelmer Vernooij11-10/+122
(This used to be commit 8e201ecf3e86c3c8865c7276fad8dad07106efaf)
2008-08-01Add helper object Hostconfig to make it easier to get to e.g. theJelmer Vernooij3-3/+39
SAM database. (This used to be commit be75b2a36ee49f66ada3ec3ababa82d74085d559)
2008-08-01heimdal: add experimental --enable-external-heimdalStefan Metzmacher3-1/+78
This should only be used for testing and when you're absolutly sure the installed heimdal libraries support the features we need. (E.g. heimdal-1.2 or lower should NOT work) metze (This used to be commit 66b76b018d6048cec63a75b24ec4c099f6a2eb8c)
2008-08-01libreplace: include <krb5.h> and <com_err.h> and no heimdal specific headersStefan Metzmacher2-4/+14
metze (This used to be commit cffed8e19e22a1fa7b7a322b153df5d54e4c3be2)
2008-08-01auth/kerberos: remove dependencies to internal heimdalStefan Metzmacher2-2/+1
metze (This used to be commit ed0fc19ac6a1194e6fd9a6534cbf7453fa870066)
2008-08-01heimdal_build/internal: add some useful definesStefan Metzmacher1-0/+6
metze (This used to be commit b9727d612bd2e9cf67ca2d4a9c60dc13d4bed5be)
2008-08-01heimdal: fix dependencyStefan Metzmacher1-0/+1
metze (This used to be commit 9e8b95dc8d577ea33504f0fb463d4648393e045b)
2008-08-01lib/crypto: remove dependency to internal heimdalStefan Metzmacher1-2/+21
metze (This used to be commit 9138fc6639fae7a5567c395254277199c89b0dcb)
2008-08-01build: remove warning about missing generated include fileStefan Metzmacher1-1/+1
metze (This used to be commit 495d068df55a94d48f2a4d2e7f2060fb42f66dbd)
2008-08-01Use new style python classes.Jelmer Vernooij9-12/+27
(This used to be commit 2a39aae0cef310a79427feb1b85f6794ea36849a)
2008-08-01Move domain DN determination out of newuser function.Jelmer Vernooij1-6/+9
(This used to be commit cbac27e6faa99ebaa3e6d653017c968db836560a)
2008-08-01Actually fix missing substitution variables.Jelmer Vernooij1-4/+10
(This used to be commit 783412ecb27d646b171993da0ac2f11a821901d3)
2008-08-01Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into manpageJelmer Vernooij274-3749/+10633
(This used to be commit c87a8ba1fef1ba508ad6527d0bae4bcdd5b3cb69)
2008-08-01Fix some forgotten substitute variables in provision, add check to prevent ↵Jelmer Vernooij1-0/+2
this sort of regression in the future. (This used to be commit a461118f3b668779f907c4d77cebe1e76fa4e39f)
2008-08-01kdc: use mostly only public kerberos headersStefan Metzmacher4-8/+11
We shoule avoid using the private heimdal function _krb5_principalname2krb5_principal() metze (This used to be commit 10db07c69addce6e90851fb55738d5f9e142946b)
2008-08-01auth/kerberos: we don't need to include heimdal private headersStefan Metzmacher1-2/+0
metze (This used to be commit 6ec3887aee9bbb9c182ab966d37212edeaa16b5a)
2008-08-01gensec_gssapi: include <gssapi/gssapi.h>Stefan Metzmacher1-1/+1
metze (This used to be commit 49e01d00bded74190c8e3049ac5883fe211e86fd)
2008-08-01heimdal_build: we should only use PRIVATE_DEPENDENCIESStefan Metzmacher1-19/+7
metze (This used to be commit 694f5124a523538117bf5d35be1a2d4f275ad0c2)
2008-08-01build: autogenerate heimdal basicsStefan Metzmacher5-30/+4
metze (This used to be commit f19d2182b802a49449cbb9e4e6334f223ceb284d)
2008-08-01build: autogenarate VPATH by configureStefan Metzmacher5-3/+9
metze (This used to be commit 16147753adcdbdc0ee9faa16fafb1c74240a6858)
2008-08-01heimdal: add missing filesStefan Metzmacher2-0/+107
metze (This used to be commit b395cd7acdb3ca5b25368fbbad0606efe4699d04)
2008-08-01auth_server: set the workstation nameStefan Metzmacher1-0/+4
metze (This used to be commit 6d640ee4b84c72f6c2da0ee047c9bac916bf3e57)
2008-08-01heimdal: add missing file heimdal/lib/gssapi/mech/gss_pseudo_random.cStefan Metzmacher1-0/+69
metze (This used to be commit 3bd7e68a5cfe80733782367e327b570d04b21586)
2008-08-01build with the new heimdal versionStefan Metzmacher3-2/+12
(This used to be commit 3817d653faecb70bfafb850fe7d6e83aaed7e6d1)
2008-08-01heimdal: update to lorikeet-heimdal rev 801Stefan Metzmacher233-3563/+10176
metze (This used to be commit d6c54a66fb23c784ef221a3c1cf766b72bdb5a0b)
2008-08-01build: allow flex-2.34 together with bison-2.3Stefan Metzmacher3-3/+15
metze (This used to be commit 8bd30a7b4392642ef5184f959d801716d2db20b2)
2008-08-01auth/ntlmssp: don't crash when the backend give no challengeStefan Metzmacher1-0/+6
metze (This used to be commit c01fee80a79cd9e0f7bb295333bb03bd37328d05)
2008-08-01auth_server: fix the logic of server_get_challenge()Stefan Metzmacher1-4/+4
metze (This used to be commit 699e3cdb52acdf2524347d8c053730306c579dd9)
2008-08-01auth_server: fix segfault reported by Julien Kerihuel ↵Stefan Metzmacher1-1/+1
<j.kerihuel@openchange.org> metze (This used to be commit c2cc8ef943e8c2e02edb1eb20214de245cc6914c)
2008-08-01Revert "Start implementind domain trusts in our KDC."Stefan Metzmacher1-33/+7
This reverts commit 736ce50afd9da9b5fbc3db777fd5341dfa4b721a. This breaks the build... metze (This used to be commit afd07073b9caa4b5f7d2ad747e79afaec4203506)
2008-07-31Update to a working trustAuthIncoming and trustAuthOutgoing parser.Andrew Bartlett1-4/+25
This is based on the docs, as well as testing against a domain trust in windows. Clearly it needs to be more general - perhaps a non IDL parser? Andrew Bartlett (This used to be commit 816bb64a56a75d1eb5e879b4abf211af27243686)
2008-07-31Print trustAuthOutgoing and trustAuthIncoming in RPC-DSSYNCAndrew Bartlett1-6/+22
(This used to be commit 6673a6e62399c4956a44a06685aa91ce8145b92a)
2008-07-31Use the cldap reply to avoid segfaulting in RPC-DSSYNCAndrew Bartlett1-1/+13
Also don't fail the test if the server does not implement the NT4 changelog. Andrew Bartlett (This used to be commit 514d88580bee3bb17f1032262f5518e3ab2a349a)