summaryrefslogtreecommitdiff
path: root/source4
AgeCommit message (Collapse)AuthorFilesLines
2007-10-10r1476: Don't print messages about the CCACHE not being found - this is normal.Andrew Bartlett1-2/+6
Andrew Bartlett (This used to be commit 30d88580efe45dc792f8d5c04f4abe0497d1551c)
2007-10-10r1475: More kerberos workAndrew Bartlett10-53/+347
- We can now connect to hosts that follow the SPNEGO RFC, and *do not* give us their principal name in the mechListMIC. - The client code now remembers the hostname it connects to - We now kinit for a user, if there is not valid ticket already - Re-introduce clock skew compensation TODO: - See if the username in the ccache matches the username specified - Use a private ccache, rather then the global one, for a 'new' kinit - Determine 'default' usernames. - The default for Krb5 is the one in the ccache, then $USER - For NTLMSSP, it's just $USER Andrew Bartlett (This used to be commit de5da669397db4ac87c6da08d3533ca3030da2b0)
2007-10-10r1474: It is useful if talloc_strdup() behaves like strdup()Andrew Bartlett1-0/+3
- NULL in, NULL out Andrew Bartlett (This used to be commit 2cc0b3a2f1785c53268f018999a87c26539fd4a6)
2007-10-10r1470: Get the smb_trans2 structure out of the rap_cli_call struct.Volker Lendecke8-19/+546
Initial attempt at RAP server infrastructure. Look at rap_server.c for the dummy functions that are supposed to implement the core functionality. ipc_rap.c contains all the data shuffling. _rap_shareenum and _rap_serverenum2 in ipc_rap.c are (I think) regular enough to be auto-generated. I did not test all the corner cases yet, but nevertheless I would like some comments on the general style. Volker P.S: samba-3 smbclient now doesn't freak out anymore, although the results are not entirely correct :-) (This used to be commit 08140cc1a838b4eaa23c897b280a46c95b7ef3e0)
2007-10-10r1469: fix a segfault and compiler warning,Stefan Metzmacher1-3/+2
introduced by the "compiler warning fix" in rev 1460... metze (This used to be commit ffb7ba35cdb2fb19b8271a3585eef075948bef9c)
2007-10-10r1467: disable gensec_krb5 by default till abartletStefan Metzmacher1-1/+2
add the kinit code metze (This used to be commit 9a876be76cee3983676d8c89549162b5c4eba8b0)
2007-10-10r1466: the name "oid" is taken by some silly system headers - avoid it in ↵Andrew Tridgell1-2/+2
our code (This used to be commit ea5659b051f95402441e69ba4ce5aea1ed6f5c86)
2007-10-10r1465: always do a full C prototype, even if its only (void).Andrew Tridgell2-3/+3
this declaration: int foo(); is *not* the same as this one: int foo(void); the first means "I don't know what arguments it takes". The second means "it takes no arguments" (This used to be commit 6724932810772a10e7e51d2f6f2b106c02eafb73)
2007-10-10r1464: the recent build changes completely lost the speed advantage of usingAndrew Tridgell1-1/+1
PCH (in fact, it meant that PCH was a slowdown, not a speedup). To gain speed with PCH you must ensure that the .gch file is compiled with _exactly_ the same options as the normal object files. this fixes the .gch build options (This used to be commit 910ca1748648a58daaea6a04d5c96e6c62f79c40)
2007-10-10r1463: fix the krb5 buildStefan Metzmacher3-1/+6
metze (This used to be commit fc8d00b8ab28535da4ec0b7e6931bbf402a37013)
2007-10-10r1462: GENSEC Kerberos and SPENGO work:Andrew Bartlett10-111/+178
- Spelling - it's SPNEGO, not SPENGO - SMB signing - Krb5 logins are now correctly signed - SPNEGO - Changes to always tell GENSEC about incoming packets, empty or not. Andrew Bartlett (This used to be commit cea578d6f39a2ea4a24e7a0064c95193ab6f6df7)
2007-10-10r1461: ntlm_check.c is a server-side peice of code, so it belongs in AUTH.Andrew Bartlett2-1/+2
Andrew Bartlett (This used to be commit 67ac9600664e93aa2fe9426127313b57ddaec2cf)
2007-10-10r1460: Avoid a compile warning.Andrew Bartlett1-2/+5
Andrew Bartlett (This used to be commit 10a973da88441b255eda7cbc263ef5c4f2f0fcae)
2007-10-10r1458: Add a new configure option, to make it possible to both find errors,Andrew Bartlett1-0/+6
and compile with gtk. The --enable-developer option was just too noisy with buggy GTK headers. Andrew Bartlett (This used to be commit 54c3d98baf3d4f4b6fe40201b50922caf7364285)
2007-10-10r1457: Add the GSSAPI layer to our gensec_krb5 code.Andrew Bartlett2-33/+142
Andrew Bartlett (This used to be commit 893a9a3865d7046d8b1cb0418aaf48b88beefa05)
2007-10-10r1456: Rename this parameter to avoid shadowing a badly-named GTK global.Andrew Bartlett1-3/+3
Andrew Bartlett (This used to be commit 39d8949d25793e2602e0ab5ec37e213f9ccae658)
2007-10-10r1455: More Gtk+ updates:Jelmer Vernooij12-65/+1194
- Start working on 'gwsam' - Add GtkSelectDomainDialog and GtkSelectHostDialog (This used to be commit bea47671aa791f3c4d22263f9444aea1a73f47f1)
2007-10-10r1454: Today is the day of broken builds, now I get my share ... :-)Volker Lendecke2-0/+85
Add a missing file. Volker (This used to be commit 2bc6147c118a61f7f37f3414cce3df44625ade65)
2007-10-10r1453: Change the RAP client to use the ndr routines for moving bytes around.Volker Lendecke1-295/+100
Volker (This used to be commit 1506da85b9e53c71a470b1ef0579e0096451b5a7)
2007-10-10r1452: Thanks to Volker for spotting that this code was certainly not tested...Andrew Bartlett1-0/+1
(make sure to actually return the result). Andrew Bartlett (This used to be commit 8d449bbe2b9aa29315e894be1400a9475ef99468)
2007-10-10r1451: More missing files...Jelmer Vernooij2-0/+12
(This used to be commit 7e9884799e4f450b9693b6e29d7490288ebc969e)
2007-10-10r1450: Oops.. Missing files :-)Jelmer Vernooij2-0/+47
(This used to be commit eaa2940ba039f59e13d44c6e2dda919ed8e388f5)
2007-10-10r1449: Use the config system somewhat better in libcli/authJelmer Vernooij5-33/+5
(This used to be commit 69de0d95c585c1a73072e921884cbd427c160176)
2007-10-10r1448: Indent this so proto doesn't pick it up.Andrew Bartlett1-1/+1
Andrew Bartlett (This used to be commit 1164be10af8e1b47824df391196ec37c395a4040)
2007-10-10r1447: Fix compile.Andrew Bartlett1-1/+1
Andrew Bartlett (This used to be commit b97ea8a63f044d2c20781c876575978cc4725285)
2007-10-10r1446: Another funciton to avoid in proto.hAndrew Bartlett1-0/+6
Andrew Bartlett (This used to be commit 310a570936c0d2d5af168aeca1b33206622d8355)
2007-10-10r1445: Ensure get_auth_data_from_tkt doesn't get into proto.hAndrew Bartlett2-2/+4
Andrew Bartlett (This used to be commit 159c234589e8e148180217f9ef4853b3031877db)
2007-10-10r1443: More changes towards Kerberos in Samba4's GENSEC.Andrew Bartlett2-132/+24
The kerberos context is now tied in life to the GENSEC context. Andrew Bartlett (This used to be commit 64e99170c3b53a14d7f8d29cf78283f2bc22c1f7)
2007-10-10r1442: I was going to rename kerberos.c -> kerberos_kinit.c, but didn't.Andrew Bartlett1-1/+1
Fix config.mk... (oh, and this file is somehow marked as binary...) Andrew Bartlett (This used to be commit 3e9aa67e3fdd9be18bdead6d45a982d30e5fd5b4)
2007-10-10r1441: Indentation and comment fixes.Andrew Bartlett1-3/+3
Andrew Bartlett (This used to be commit 231e505dea9e9aca28eb336bcbcfb2b7b83c089c)
2007-10-10r1440: GENSEC improvements:Andrew Bartlett2-1/+66
- Infrustructure for kerberos - Don't segfault on un-implemented backend functions - Add comments. Andrew Bartlett (This used to be commit 1c31aa42710421917428d6ba86328ea5179751bd)
2007-10-10r1439: Once we are authenticated, always return NT_STATUS_OK. (Makes SPENGOAndrew Bartlett1-1/+1
easier to code, as it may return an 'ok' with an empty blob). Andrew Bartlett (This used to be commit e48557158ed99eee7d3ef8231c629bbd14cda9d3)
2007-10-10r1438: Record the principal name we are sent in the SPENGO mechListMIC in aAndrew Bartlett2-3/+3
seperate char *, not a DATA_BLOB. This allows us to tell if we were sent a string here, or a real MIC. (This used to be commit 06b997c826e3ec00e0528da800e3eae0e3497a54)
2007-10-10r1437: Intermediate commit of krb5 for GENSEC.Andrew Bartlett2-40/+360
The session key in the client is wrong, we don't do signing/sealing and we are sending raw Kerberos, not GSSAPI. But it's a start, and if we continue to have to call Krb5 directly, this will be the basis. I also intend to provide an alternate implementation, using just GSSAPI. Andrew Bartlett (This used to be commit eb0dd4a821dc3dbe370aea9a9c9fb05cf2592e4d)
2007-10-10r1436: Move GENSEC across to config.mkAndrew Bartlett2-17/+25
Andrew Bartlett (This used to be commit 2de3a3082344fd292b1084a73a332549d6b2e25d)
2007-10-10r1435: talloc_steal is very useful - add a function to do it with a DATA_BLOBAndrew Bartlett1-0/+15
Andrew Bartlett (This used to be commit 66d6e2611084d579a20833a4c0daa5d72ef9393c)
2007-10-10r1434: Merge this function in from Samba 3.0, but use a mem_ctx rather thanAndrew Bartlett1-0/+17
an fstring. Andrew Bartlett (This used to be commit e8de8905b2f328395d71afdd73c77301c9366a66)
2007-10-10r1433: Properly use GtkTreeView:Jelmer Vernooij2-8/+24
- When a key is selected the values are immediately shown in gregedit - Only allow deleting jobs if one is selected. (This used to be commit afb5f4d765cb15ba8824d8db19879bad83829561)
2007-10-10r1432: - Move the various Gtk-specific parts from the registry code into a ↵Jelmer Vernooij11-175/+1017
directory gtk/ - Move common "Samba-Gtk" code into gtk/common/ ("Connect to RPC pipe"-dialog, etc) - Add a new utility 'gwcrontab' that can currently list, delete and add 'atsvc' jobs. It still displays times and dates as integers though, will fix that later. Some screenshots available at: http://samba.org/~jelmer/gwcrontab/ (This used to be commit d321cf20f1f0ff33603b013c26d370669f255868)
2007-10-10r1429: enable spnego in smbclient too.Stefan Metzmacher1-6/+11
metze (This used to be commit ae2e6b58629397d75a3e446ff0c50b594d029206)
2007-10-10r1426: Fix some of my silly compile errors...Andrew Bartlett2-2/+2
Andrew Bartlett (This used to be commit c283837556109b9392a8cdcd867e5ae0dac1509b)
2007-10-10r1423: Make sure to destory the mem_ctx.Andrew Bartlett1-2/+4
Andrew Bartlett (This used to be commit c5a1529d54e6b8ec2bbf7017a2f48d7535f1f016)
2007-10-10r1422: StrnCaseCmp now needs to be non-static.Andrew Bartlett1-1/+1
Andrew Bartlett (This used to be commit 6709c7010df2912eec3dfc086343cb3cb7910459)
2007-10-10r1421: fix a uninitialized var (thanks valgrind:-)Stefan Metzmacher1-5/+15
add a view debug messages metze (This used to be commit 79953dccc1f21dbabddff73a4b6d862eace29eb9)
2007-10-10r1420: be more strict reject if the context has the wrong typeStefan Metzmacher1-0/+1
metze (This used to be commit db19d6047c25698d0c3b7aeaab77b2a02385dbb5)
2007-10-10r1419: spnego inside of dcerpc using alter_context/alter_context_respStefan Metzmacher6-11/+170
instead of auth3 metze (This used to be commit 19b0567ee533744a0f2778bf8549636a25d96526)
2007-10-10r1418: Merge Samba 3.0's recent kerberos changes into Samba4. None of thisAndrew Bartlett4-134/+291
is used yet. Andrew Bartlett (This used to be commit 7596f311c9a18314716f64476030ce3dfcdd98bb)
2007-10-10r1409: if we have no user name don't use extended securityStefan Metzmacher2-1/+2
the capabilities in the union smb_sesssetup should be used to decide if we can use extented security metze (This used to be commit e3760fcc17cc645d942f0fc7f7325976391309ea)
2007-10-10r1406: I got spnego in the smb client workingStefan Metzmacher2-1/+4
so I set 'use spnego = True' metze (This used to be commit e06898f88c82c286574f9d73de1a9de829b1ded8)
2007-10-10r1403: commit volkers initial RAP torture testStefan Metzmacher4-1/+651
we'll try to autogenerate the specific calls in future by pidl and create a new subsystem for the rap lib after that the server side will be added metze (This used to be commit f1bbde6bb4790f915c1fdbb53f6452c5ea454936)