samba.git/auth, branch master

Fix the O3 developer build

2015-03-03T12:14:53+00:00

Different gcc versions complain at different places

Signed-off-by: Volker Lendecke 
Reviewed-by: Alexander Bokovoy 

Autobuild-User(master): Volker Lendecke 
Autobuild-Date(master): Tue Mar  3 13:14:53 CET 2015 on sn-devel-104

auth/credentials_krb5: fix memory leak in cli_credentials_failed_kerberos_login().

2015-01-26T18:56:57+00:00

Guenther

Signed-off-by: Günther Deschner 
Reviewed-by: Andreas Schneider 

Autobuild-User(master): Andreas Schneider 
Autobuild-Date(master): Mon Jan 26 19:56:57 CET 2015 on sn-devel-104

auth/credentials: add cli_credentials_set_utf16_password()

2014-12-19T12:15:13+00:00

We need a way to initialize the cli_credentials from the raw utf16 blob,
which might not be completely valid utf16, which means the conversion
from CH_UTF16MUNGED to CH_UTF8 might loose information.

This would result in an invalid nt_hash, when we convert back
from CH_UTF8 to CH_UTF16LE.

Bug: https://bugzilla.samba.org/show_bug.cgi?id=11016

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

auth/gensec: add support for SEC_CHAN_DNS_DOMAIN to schannel_update()

2014-12-19T12:15:13+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

auth/gensec: make sure we keep a DCERPC_AUTH_TYPE_SCHANNEL backend if required

2014-12-19T12:15:13+00:00

Even with CRED_MUST_USE_KERBEROS we should keep the DCERPC_AUTH_TYPE_SCHANNEL
backend arround, this can only be specified explicitely by the caller
and cli_credentials_get_netlogon_creds() != NULL is the strong indication
that the caller is using DCERPC_AUTH_TYPE_SCHANNEL *now*.

With trusts against AD domain we can reliable use kerberos and netlogon
secure channel for authentication.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

credentials test: Use samba.tests.subunitrun.

2014-11-22T01:23:10+00:00

Change-Id: I8970c66de9535cb8d48b17d88b2759b7d1e39cb8
Signed-off-by: Jelmer Vernooij 
Reviewed-by: Andrew Bartlett

Remove unused imports.

2014-11-19T01:46:03+00:00

Change-Id: I8915f62206edb53ffc2d89434e46d9e71db8bb9a
Signed-Off-By: Jelmer Vernooij 
Reviewed-by: Andrew Bartlett

auth: add missing includes to auth/wbc_auth_util.c

2014-11-14T22:27:05+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Jeremy Allison

auth/credentials: Ensure that we set the realm when reading secrets.tdb

2014-10-17T10:57:07+00:00

Otherwise, we try and kinit as host$@DOMAIN and that will not work.

Andrew Bartlett

Change-Id: Id2fde673423e74dfa1e6ac48f47f49c61ee59779
Signed-off-by: Andrew Bartlett 
Reviewed-by: Stefan Metzmacher

credentials: Allow the secret.tdb handle to be passed in to cli_credentials_set_machine_account()

2014-10-17T10:57:07+00:00

This adds a new wrapper, cli_credentials_set_machine_account_db_ctx()

Andrew Bartlett

Change-Id: Ia2cceefede4ba9cf7f8de41986daf9372c19d997
Signed-off-by: Andrew Bartlett 
Reviewed-by: Stefan Metzmacher