summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* s3-auth Use the common gensec_ntlmssp_update in gensec_ntlmssp3_serverAndrew Bartlett2012-02-174-25/+14
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-auth: Use common gensec_ntlmssp server functions for more of ↵Andrew Bartlett2012-02-174-189/+50
| | | | | | | | | | | gensec_ntlmssp3_server This is possible because we now supply the auth4_context abstraction that this code is looking for. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-auth: Add extra error messages on authentication or authorization failureAndrew Bartlett2012-02-173-0/+23
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* auth: Cope with NO_USER_SESSION_KEY from security=serverAndrew Bartlett2012-02-171-2/+8
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* auth: Move the rest of the source4 gensec_ntlmssp code to the top levelAndrew Bartlett2012-02-1711-90/+166
| | | | | | | | | | The ntlmssp_server code will be in common shortly, and aside from a symbol name or two, moving the client code causes no harm and makes less mess. We will also get the client code in common very soon. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-auth Hook checking passwords and generating session_info via the ↵Andrew Bartlett2012-02-174-62/+259
| | | | | | | | | | | | | | auth4_context This avoids creating a second auth_context, as it is a private pointer in the auth4_context that has already been passed in, and makes the gensec_ntlmssp code agnostic to the type of authentication backend behind it. This will in turn allow the ntlmssp server code to be further merged. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-build: Use credentials_ntlm.c in the autoconf build as wellAndrew Bartlett2012-02-171-0/+1
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* build: Add exceptions for callcatcher unused function detectionAndrew Bartlett2012-02-171-0/+22
| | | | | Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri Feb 17 09:12:47 CET 2012 on sn-devel-104
* wintest: Update Win2003 VMAndrew Bartlett2012-02-171-4/+4
|
* auth/kerberos: Move gse_get_session_key() to common code and use in ↵Andrew Bartlett2012-02-175-158/+155
| | | | | | | | | gensec_gssapi Thie ensures that both code bases use the same logic to determine the use of NEW_SPNEGO. Andrew Bartlett
* s3-gse: Allow kerberos key type OID to be optionalAndrew Bartlett2012-02-171-4/+11
|
* s3-gse: Fix OID to read for kerberos key typeAndrew Bartlett2012-02-171-2/+2
|
* s3-librpc: Remove backup declaration of GSS_C_DCE_STYLEAndrew Bartlett2012-02-171-4/+0
| | | | | | All our supported krb5 libs provide this. Andrew Bartlett
* s3-gse: Remove unused OID declarationAndrew Bartlett2012-02-171-9/+0
|
* wintest: give host longer to register the SRV recordAndrew Bartlett2012-02-171-1/+1
|
* wintest: use net rpc to put authenticated users into TelentClients if we need toAndrew Bartlett2012-02-171-0/+13
|
* wintest: Allow Windows VM to have no default routeAndrew Bartlett2012-02-171-3/+4
|
* Replace smbd_server_connection_loop_once() with tevent_loop_once() directly.Jeremy Allison2012-02-171-63/+6
| | | | | | | We no longer need to call poll() directly inside smbd ! Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Feb 17 02:49:13 CET 2012 on sn-devel-104
* lib/util: Remove sys_poll as it is no longer neededAndrew Bartlett2012-02-168-110/+14
| | | | | | | | | | | sys_poll() is only needed if the signal pipe is set up and used, but as no signal handler ever writes to the pipe, this can all be removed. signal based events are now handled via tevent. Andrew Bartlett Signed-off-by: Jeremy Allison <jra@samba.org>
* lib/util: Remove unused sys_select_signal()Andrew Bartlett2012-02-162-19/+0
| | | | | | | | Now sys_poll needs to be cleaned up not to refer to the pipe that is now not used. Andrew Bartlett Signed-off-by: Jeremy Allison <jra@samba.org>
* s3-librpc: Remove gse_verify_server_auth_flagsAndrew Bartlett2012-02-161-50/+0
| | | | | | | | | | | | | | | | gensec_update() ensures that DCE-style and sign/seal are negotiated correctly for DCE/RPC pipes. Also, the smb sealing client/server already check for the gensec_have_feature(). This additional check just keeps causing trouble, and is 'protecting' an already secure negoitated exchange. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Feb 16 21:19:44 CET 2012 on sn-devel-104
* docs-xml: remove docs for "send spnego principal"Stefan Metzmacher2012-02-161-28/+0
| | | | metze
* s3-param Remove off-by-default and unused "send spnego principal"Andrew Bartlett2012-02-162-11/+0
| | | | | | | | | | | | This is not honoured by the common SPNEGO code. This matches mondern windows versions which do not send this value, as it would be insecure for a client to rely on it. (See also the depricated client use spnego principal directive). Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-smbd Remove unused code now we always have SPNEGO via gensecAndrew Bartlett2012-02-164-49/+7
| | | | | | | | This was previously needed because SPNEGO was only available in the AD DC. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc: Use gensec_spnego for DCE/RPC authenticationAndrew Bartlett2012-02-1610-1009/+42
| | | | | | | | | | | | | This ensures that we use the same SPNEGO code on session setup and on DCE/RPC binds, and simplfies the calling code as spnego is no longer a special case in cli_pipe.c A special case wrapper function remains to avoid changing the application layer callers in this patch. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-gse: Use the session key type, not the lucid context to set NEW_SPNEGOAndrew Bartlett2012-02-161-67/+69
| | | | | | | | | | | | | | Using gss_krb5_export_lucid_sec_context() is a problem with MIT krb5, as it (reasonably, I suppose) invalidates the gssapi context on which it is called. Instead, we look to the type of session key which is negotiated, and see if it not AES (or newer). If we negotiated AES or newer, then we set GENSEC_FEATURE_NEW_SPENGO so that we know to generate valid mechListMic values in SPNEGO. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc: Remove unused bool gensec_hookAndrew Bartlett2012-02-161-2/+0
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3:rpc_client: fix commentStefan Metzmacher2012-02-161-1/+1
| | | | metze
* s3-librpc: make gensec result handling more genericAndrew Bartlett2012-02-161-11/+11
| | | | | | This prepares us for handling SPNEGO via gensec Signed-off-by: Stefan Metzmacher <metze@samba.org>
* wafsamba: exclude '.brzignore' from "make dist"Michael Adam2012-02-161-1/+1
| | | | | | | | .bzrignore can cause unwanted effects, if one e.g. maintains a packaging (like debian) of the generated distribution in bzr. Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Thu Feb 16 13:47:52 CET 2012 on sn-devel-104
* wafsamba: exclude '.gitignore' from "make dist"Michael Adam2012-02-161-0/+1
| | | | | .gitignore can cause unwanted effects, if one e.g. maintains a packaging (like debian) of the generated distribution in git
* wafsamba: fix blacklist handling in "make dist"Michael Adam2012-02-161-1/+1
|
* s4:provision: only print the adminpass if it was generated (not user-provided)Michael Adam2012-02-161-1/+5
|
* s4:provision: generate the adminpass provision() instead of provision_fill()Michael Adam2012-02-161-2/+3
| | | | | so that the adminpass can be logged at the end (otherwise we get "None")
* s4:provision: don't log the ldap admin password - it is internal onlyMichael Adam2012-02-161-3/+0
|
* s4-scripting: samba-tool: Fix domain info usage messageBjörn Baumbach2012-02-161-1/+1
| | | | Signed-off-by: Michael Adam <obnox@samba.org>
* s4-selftest: fix output of opened connections in torture_holdconBjörn Baumbach2012-02-161-1/+1
| | | | Signed-off-by: Michael Adam <obnox@samba.org>
* Rename obscure defined constants.Christopher R. Hertel (crh)2012-02-1611-25/+27
| | | | | | | | | | | | | | | Replaced the undescriptive SMB_PORT1 and SMB_PORT2 defined constants with the slightly more descriptive names NBT_SMB_PORT and TCP_SMB_PORT. Also replaced several hard-coded references to the well-known port numbers (139 and 445, respectively) as appropriate. Small changes to clarify some comments regarding the two transport types. Signed-off-by: Simo Sorce <idra@samba.org> Autobuild-User: Simo Sorce <idra@samba.org> Autobuild-Date: Thu Feb 16 08:29:41 CET 2012 on sn-devel-104
* s3-selftest: Remove .posix_s3 from s3 test namesAndrew Bartlett2012-02-163-10/+10
| | | | | | | | | | As far as I can tell, this simply referred to the posix_s3.sh script that originally ran these tests. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Feb 16 06:57:09 CET 2012 on sn-devel-104
* selftest: Remove 'if have_ads_support:' from tests.pyAndrew Bartlett2012-02-162-64/+41
| | | | | | The selftest system now skips launching these if the environment is not available. Andrew Bartlett
* s3-smbd: Avoid starting log lines with the word 'error'Andrew Bartlett2012-02-161-2/+10
|
* selftest: skip plugin_s4_dc if we do not have ADSAndrew Bartlett2012-02-161-0/+5
|
* selftest: Run nsstest against more environmentsAndrew Bartlett2012-02-161-4/+5
|
* selftest: skip targets that are not compiled in if we do not have ADSAndrew Bartlett2012-02-161-0/+25
|
* s3-selftest: Require SMB signing for ktest environmentAndrew Bartlett2012-02-161-0/+1
| | | | | | This will help weed out session key errors in the krb5 code. Andrew Bartlett
* selftest: Do not start up an already-running test environmentAndrew Bartlett2012-02-162-0/+8
| | | | | | | Otherwise we may re-provision the dc just because we started it via s3member or s4member first. Andrew Bartlett
* selftest: Make plugin_s4_dc set the cached environment correctlyAndrew Bartlett2012-02-161-10/+12
|
* wintest: update WinXP-1 snapshotAndrew Bartlett2012-02-161-1/+1
|
* wintest: Change Windows 7 VMAndrew Bartlett2012-02-161-3/+3
|
* wintest: Give the Windows VM a little more time to start back upAndrew Bartlett2012-02-161-1/+1
|
generated by cgit (git 2.34.1) at 2025-09-26 19:40:56 +0000