summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* s3: Add the PAC info3 struct to the netsamlogon_cache in ntlm_authVolker Lendecke2010-09-162-0/+5
|
* s3: Correctly unwrap the krb ticket in gss-spnegoVolker Lendecke2010-09-161-1/+52
|
* s3: Fall back to raw NTLMSSP for the gss-spnego protocolVolker Lendecke2010-09-161-0/+25
| | | | | | This is to handle the mod_auth_ntlm_winbind protocol sending "Negotiate" to IE, which sends raw NTLMSSP instead of a SPNEGO wrapped NTLMSSP blob.
* s3: Split off output generation from manage_squid_ntlmssp_requestVolker Lendecke2010-09-161-17/+41
|
* s3: Wrap the ntlm_auth loop with a talloc_stackframeVolker Lendecke2010-09-161-0/+2
|
* s4-smbtorture: add NDR spoolss_GetPrinterDriver2 in and out check functions.Günther Deschner2010-09-161-2/+49
| | | | Guenther
* s4-smbtorture: finally enable most of our NDR_OUT NDR tests that we couldnt ↵Günther Deschner2010-09-163-10/+6
| | | | | | handle previously. Guenther
* s4-smbtorture: add functions to do NDR_OUT ndr_pull validation including ↵Günther Deschner2010-09-162-0/+99
| | | | | | NDR_IN context. Guenther
* s4-smbtorture: fix some indentation in NDR testsuite.Günther Deschner2010-09-161-28/+30
| | | | Guenther
* s3-smbtorture: fixup trailing whitespace in ndr testsuite.Günther Deschner2010-09-162-35/+35
| | | | Guenther
* s4-smbtorture: add spoolss_GetPrinterDriver2 NDR tests.Günther Deschner2010-09-162-1/+213
| | | | Guenther
* s4-smbtorture: mention -v switch for hexdump imports into the NDR testsuites.Günther Deschner2010-09-161-1/+1
| | | | Guenther
* s4-smbtorture: activate spoolss_GetPrinterData NDR pull test.Günther Deschner2010-09-162-3/+3
| | | | Guenther
* s4-winbind: fixed two valgrind errorsAndrew Tridgell2010-09-162-2/+2
| | | | | | | | - allocate the dc info on the right structure - zero the number of group members when allocating the winbindd_gr return Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* wbclient: gr_mem can be NULLAndrew Tridgell2010-09-161-0/+5
| | | | | | | if the structure was partly created and an error occurred, then don't crash Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* wbclient: paranoid check for double freeAndrew Tridgell2010-09-161-0/+5
| | | | | | added while tracking down a crash in the wbinfo blackbox test Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* tdb: added TDB_NO_FSYNC env variableAndrew Tridgell2010-09-161-0/+4
| | | | this might help reduce test times and load on test machines
* torture/raw Allow one more 'not implemented' status return as a valid responseAndrew Bartlett2010-09-161-1/+2
| | | | | | | | The Samba4 server responds to most ioctl calls with NT_STATUS_NOT_SUPPORTED Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-torture assert that we get a temp datagram socket.Andrew Bartlett2010-09-161-4/+8
| | | | | | | | | | I've seen a segfault because we failed to check this isn't NULL before we use it. This will still of course fail, but not so spectacularly. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/auth/ntlmssp Be clear about talloc parents for session keysAndrew Bartlett2010-09-166-23/+36
| | | | | | | | | | The previous API was not clear as to who owned the returned session key. This fixes a valgrind-found use-after-free in the NTLMSSP key derivation code, and avoids making allocations - we steal and zero instead. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-kdc: prevent segfault on bad trust stringsAndrew Tridgell2010-09-161-4/+8
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-netlogon: added IDL for netr_DsrUpdateReadOnlyServerDnsRecordsAndrew Tridgell2010-09-163-0/+94
| | | | | | | this is used by a RODC to do DNS updates, as TSIG updates are not allowed by RODCs Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-rpcserver: allow saving of bad RPC packetsAndrew Tridgell2010-09-161-2/+28
| | | | | | | | | | | | | | use: dcesrv:stubs directory = . to save files like this: RPC-netlogon-48-pullfail.dat when a RPC packet can't be parsed or is unknown. Only enabled in developer builds Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* pidl: prevent ndr_print_*() dying on NULL pointersAndrew Tridgell2010-09-163-0/+13
| | | | | when using ndrdump you can get uninitialised structures containing pointers. Don't segfault when trying to print them
* idl: Added EPMAPPER_STATUS_CANT_PERFORM_OP.Andreas Schneider2010-09-161-0/+1
| | | | Signed-off-by: Günther Deschner <gd@samba.org>
* s4-dns: use a non-forwardable ticket in samba_dnsupdateAndrew Tridgell2010-09-161-2/+3
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-kerberos: obey the credentials setting for forwardable ticketsAndrew Tridgell2010-09-163-27/+40
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-pycredentials: expose forwardable setting via pythonAndrew Tridgell2010-09-161-0/+16
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-credentials: added ability to control forwardable attribute on krb5 ticketsAndrew Tridgell2010-09-162-0/+24
| | | | | | | with the latest bind9 nsupdate, we need to be able to control if the ticket we use is forwardable Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: make debugging DsUpdateRefs a bit easierAndrew Tridgell2010-09-161-1/+8
|
* s4-drs: initial skeleton for DrsReplica{Add,Del,Mod} callsAndrew Tridgell2010-09-164-4/+139
|
* s4-drs: removed a debug print in repl secretAndrew Tridgell2010-09-161-1/+0
|
* s4-test: enable valgrind on wbinfo testsAndrew Tridgell2010-09-161-1/+1
|
* s4-pydrs: fix for python 2.4Andrew Tridgell2010-09-161-1/+1
| | | | thanks to Kamen and David Gonzalez for spotting this
* s3: Add convenience make target buildfarm-test.Jelmer Vernooij2010-09-161-0/+3
|
* s3-selftest: Move Samba3-specific script to source3/selftest.Jelmer Vernooij2010-09-162-1/+1
|
* s3/printing: avoid a possible race condition in the cache timeoutBjörn Jacke2010-09-161-2/+1
|
* Fix all sid_parse returns to be checked. Tidy up some checks and errorJeremy Allison2010-09-153-7/+18
| | | | | | messages. Jeremy.
* s3-smbd: prevent call_nt_transact_ioctl() crash in FSCTL_FIND_FILES_BY_SID case.Günther Deschner2010-09-161-1/+4
| | | | | | Jeremy, please check. Guenther
* s4-smbtorture: try FSCTL_FIND_FILES_BY_SID with random blob data in RAW-IOCTL.Günther Deschner2010-09-161-0/+21
| | | | Guenther
* s4-repl: if we are an RODC don't set WRIT_REP in replicationAndrew Tridgell2010-09-161-2/+7
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-repl: add partial attribute set to getncchanges calls for RODCsAndrew Tridgell2010-09-164-9/+67
| | | | | | | when we are a RODC we must supply a partial attribute set in the getncchanges call Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-repl: added min_usn to extended replication callAndrew Tridgell2010-09-164-2/+9
| | | | | | | the repl_secret code needs to set it to avoid too many duplicate attributes Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-repl: added repl_secret handling Andrew Tridgell2010-09-162-2/+98
| | | | | | initiate a repl secret extended op when requested Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-repl: cleanup the extended op calls in repl serverAndrew Tridgell2010-09-165-21/+23
| | | | | | | - use generic parameter names - trigger a run of pending ops on all extended ops - don't prevent parallel fsmo transfers - moved extended op code into drepl_extended
* s4-pyjoin: use new pynet finddc interfaceAndrew Tridgell2010-09-161-1/+4
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-pynet: return the full netlogon response from python finddcAndrew Tridgell2010-09-161-7/+8
| | | | | | this gives the caller the other server parameters Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-pyjoin: fill in the dns name in the python replication methodAndrew Tridgell2010-09-163-0/+45
| | | | | | this is needed to get the repsFrom DNS entry right Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-drs: get lpcfg_dnsdomain() instead of lpcfg_realm()Andrew Tridgell2010-09-161-1/+1
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-pyrpc: added py_return_ndr_struct()Andrew Tridgell2010-09-162-0/+34
| | | | | | | This can be used to return structures from other python interfaces as python objects Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>