samba.git/source3/auth/wscript_build, branch master

build: get rid of vars=locals() in source3/auth/wscript_build

2013-09-24T21:00:31+00:00

Signed-off-by: Michael Adam 
Reviewed-by: Günther Deschner

build: get rid of source-variables in source3/auth/wscript_build

2013-09-24T21:00:21+00:00

Signed-off-by: Michael Adam 
Reviewed-by: Günther Deschner

BUG #9295: Build standard auth modules as internal modules.

2012-10-18T09:33:17+00:00

Signed-off-by: Andreas Schneider

s3-auth: Remove auth_netlogond

2012-06-16T08:13:20+00:00

auth_netlogond was an important module in the development of the
combined Samba 4.0, and was the first module to link smbd with the AD
authentication store, showing that it was possible for NTLM
authentication to be offloaded to the AD server components.

We now have auth_samba4, which provides the full GENSEC stack to smbd,
which also matches exactly the group membership and privileges
assignment and which is supported and tested as part of the official
Samba 4.0 release configuration.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Sat Jun 16 10:13:20 CEST 2012 on sn-devel-104

Introduce system MIT krb5 build with --with-system-mitkrb5 option.

2012-05-23T14:51:50+00:00

System MIT krb5 build also enabled by specifying --without-ad-dc

When --with-system-mitkrb5 (or --withou-ad-dc) option is passed to top level
configure in WAF build we are trying to detect and use system-wide MIT krb5
libraries. As result, Samba 4 DC functionality will be disabled due to the fact
that it is currently impossible to implement embedded KDC server with MIT krb5.

Thus, --with-system-mitkrb5/--without-ad-dc build will only produce
  * Samba 4 client libraries and their Python bindings
  * Samba 3 server (smbd, nmbd, winbindd from source3/)
  * Samba 3 client libraries

In addition, Samba 4 DC server-specific tests will not be compiled into smbtorture.
This in particular affects spoolss_win, spoolss_notify, and remote_pac rpc tests.

s3:auth: remove unused auth_server.c

2012-05-15T06:18:29+00:00

metze

s3-auth: Remove security=share (depricated since 3.6).

2012-03-04T22:33:05+00:00

This patch removes security=share, which Samba implemented by matching
the per-share password provided by the client in the Tree Connect with
a selection of usernames supplied by the client, the smb.conf or
guessed from the environment.

The rationale for the removal is that for the bulk of security=share
users, we just we need a very simple way to run a 'trust the network'
Samba server, where users mark shares as guest ok.  This is still
supported, and the smb.conf options are documented at
https://wiki.samba.org/index.php/Public_Samba_Server

At the same time, this closes the door on one of the most arcane areas
of Samba authentication.

Naturally, full user-name/password authentication remain available in
security=user and above.

This includes documentation updates for username and only user, which
now only do a small amount of what they used to do.

Andrew Bartlett

                       --------------
                      /              \
                     /      REST      \
                    /        IN        \
                   /       PEACE        \
                  /                      \
                  |      SEC_SHARE       |
                  |    security=share    |
                  |                      |
                  |                      |
                  |       5 March        |
                  |                      |
                  |        2012          |
                 *|     *  *  *          | *
        _________)/\\_//(\/(/\)/\//\/\///|_)_______

s3-pdb: Break SECRETS3 dependency on PDB.

2012-01-27T17:11:10+00:00

This is causing circular depdnendcies that bring libpdb in all code and this is
BAD.

This change 'protects' the sid and guid of the domain by adding a special key
that makes them effectively read only.

Limit this temporarily to the samba 4 build, once it gets some good testing the
samba4 ifdefs can be dropped.

fix pdb dependencies

Signed-off-by: Andreas Schneider

s3-waf: auth_netlogond depends on tldap.

2012-01-12T16:33:10+00:00

Autobuild-User: Andreas Schneider 
Autobuild-Date: Thu Jan 12 17:33:10 CET 2012 on sn-devel-104

s3-auth split the auth_generic functions into a seperate file

2011-12-22T18:25:11+00:00

Signed-off-by: Stefan Metzmacher