summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Revert "Fix bug #8139 - smbclient fails if server does not support Echo ↵Stefan Metzmacher2012-01-311-5/+1
| | | | | | | | | | | request." This reverts commit 1fdc96ecaff8ca12e9aa0082527468ad4242a8a9. This is wrong in master as the error codes are different compared to 3.5.x. The correct way to handle this is to call cli_state_is_connected(). metze
* s3:smbd: inline code in reply_sesssetup_and_X_spnego()Stefan Metzmacher2012-01-311-102/+71
| | | | | | | | | This makes the logic much easier to follow. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Jan 31 21:52:45 CET 2012 on sn-devel-104
* s3:smbd: the spnego session setup don't need to copy the in blobStefan Metzmacher2012-01-311-10/+5
| | | | metze
* s3:smbd: rework reply_spnego_ntlmssp to reply_spnego_genericStefan Metzmacher2012-01-311-27/+5
| | | | | | This removes the unused spnego_gen_auth_response() wrapping. metze
* s3:smbd: remove unused code from sesssetup.cStefan Metzmacher2012-01-312-549/+0
| | | | metze
* s3:smbd: remove pending_auth_data logicStefan Metzmacher2012-01-312-269/+0
| | | | | | This is handled by the gensec_spnego module. metze
* s3:smbd: always use the gensec code path in sesssetup.cStefan Metzmacher2012-01-311-67/+32
| | | | | | | The other code pathes are unused, because we always have the spnego gensec module. metze
* s3:smbd: rework smbd_smb2_*_ntlmssp_auth* to smbd_smb2_auth_generic*Stefan Metzmacher2012-01-311-22/+28
| | | | metze
* s3:smbd: always use the gensec code path in smb2_sesssetup.cStefan Metzmacher2012-01-311-460/+7
| | | | | | | The other code pathes are unused, because we always have the spnego gensec module. metze
* libcli/smb: Convert struct smb_trans_enc_state to tallocAndrew Bartlett2012-01-315-81/+20
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-libsmb: Remove unused enum smb_trans_enc_typeAndrew Bartlett2012-01-312-11/+3
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-libsmb: Use gensec_spnego in smb seal clientAndrew Bartlett2012-01-312-41/+7
| | | | | | | | | This is intead of the inline, manual spnego code currently in use. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-smbd: Use gensec_spnego in smb seal serverAndrew Bartlett2012-01-311-304/+29
| | | | | | | | | This is instead of the inline, manual spnego code currently in use. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3:libsmb/auth_generic: make use of gensec_spnego in the clientStefan Metzmacher2012-01-311-4/+9
| | | | metze
* s3:auth/auth_generic: make use of gensec_spnego in the serverStefan Metzmacher2012-01-311-4/+9
| | | | metze
* s3: Unify stream testing in open_directoryVolker Lendecke2012-01-311-9/+5
| | | | | | | | | | The second if-statement could never have kicked in, assuming the SMB_ASSERT above was right. Jeremy, please check! Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Jan 31 20:15:36 CET 2012 on sn-devel-104
* s3: Re-indent an && sequence for better understandingVolker Lendecke2012-01-311-2/+2
|
* s3: Fix "smbcontrol smbd close-share"Volker Lendecke2012-01-311-0/+11
|
* s3:net ads join: remove a useless empty comment blockMichael Adam2012-01-311-2/+1
| | | | | Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Tue Jan 31 18:37:45 CET 2012 on sn-devel-104
* s3:net ads join: add a comment for the call to _net_ads_join_dns_update()Michael Adam2012-01-311-0/+5
|
* s3:net ads join: reduce indentation in _net_ads_join_dns_updates()Michael Adam2012-01-311-46/+47
|
* s3:net ads join: move dns update code out to new function ↵Michael Adam2012-01-311-77/+84
| | | | _net_ads_join_dns_updates()
* s3:net ads join: improve comment for dns update blockMichael Adam2012-01-311-4/+4
|
* s3:net ads join: improve status evaluation for call to net_update_dns()Michael Adam2012-01-311-2/+5
| | | | untangle assignment from check and log error code in message if failed.
* s3:net ads join: interpret return code of ads_kinit_password() in dns update ↵Michael Adam2012-01-311-1/+8
| | | | | | block If failed, print according error message and skip the attempt to do dns update.
* s3:net ads join: check for malloc success and react accordingly in dns ↵Michael Adam2012-01-311-0/+5
| | | | update block
* s3:net ads join: check for success of fetching machine password in dns ↵Michael Adam2012-01-311-0/+5
| | | | | | update block log and cleanup accordingly if failed
* s3:net ads join: untangle assignment from check, fix return code and improve ↵Michael Adam2012-01-311-2/+8
| | | | | | | error logging only the dns update failed, not the join. Also do proper memory cleanup
* s3:net ads join: reduce indentation and improve logging in the dns update ↵Michael Adam2012-01-311-13/+17
| | | | | | code block by doing an early goto done upon error condition
* s3:net ads join: untangle assignment from check.Michael Adam2012-01-311-1/+2
|
* s3:net registry: fix a copy and paste error in a help textMichael Adam2012-01-311-2/+2
|
* tevent: Fix python documentation stringsAmitay Isaacs2012-01-311-2/+2
| | | | | Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Tue Jan 31 16:59:29 CET 2012 on sn-devel-104
* replace: Only include C files from which there are actually functions used.Jelmer Vernooij2012-01-311-2/+21
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Tue Jan 31 15:21:04 CET 2012 on sn-devel-104
* replace: use libbsd for strlcat/strlcpy when available.Jelmer Vernooij2012-01-311-15/+21
|
* s4-s3-upgrade: Check if there are duplicate sids for users and groupsAmitay Isaacs2012-01-311-0/+4
| | | | | Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Tue Jan 31 02:23:17 CET 2012 on sn-devel-104
* s4-s3-upgrade: Use lowercase hostname as hostname for provisionAmitay Isaacs2012-01-311-1/+1
|
* Fix bug #8139 - smbclient fails if server does not support Echo request.Jeremy Allison2012-01-311-1/+5
| | | | | | | Based on work by Matthias Scheler <tron@NetBSD.org> Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Tue Jan 31 00:47:19 CET 2012 on sn-devel-104
* s3-winbind: don't try to do clever thing if the username is not found while ↵Matthieu Patou2012-01-301-1/+2
| | | | | | | | | | | | | authenticating through winbind This could cause that we authenticate a user with a bogus domain to winbind's domain if the password supplied for the PAM_AUTH match. The problem was reported by Jeff Venable (jvenable@juniper.net). Patch from Andrew Bartlett (abartlett@samba.org). Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Mon Jan 30 18:58:12 CET 2012 on sn-devel-104
* s3: check that a user in a bogus domain name is mapped to the localnetbios ↵Matthieu Patou2012-01-302-0/+21
| | | | | | | | | name of a domain member This means that if we authentify for BOGUS\administrator in AD domain FOREST with samba being domain member with the netbiosname MEMBER then BOGUS\administrator will be mapped to MEMBER\administrator if the password match.
* s3-auth: Remove duplicate check for NT_STATUS_IS_OK(nt_status)Andrew Bartlett2012-01-301-4/+0
| | | | | Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Jan 30 09:38:47 CET 2012 on sn-devel-104
* gensec: inline gensec_generate_session_info() into only callerAndrew Bartlett2012-01-304-43/+27
| | | | | | | | | | | | | | This avoids casting to and from the struct auth_user_info_dc *user_info_dc to to this, the if (user_info_dc->info->authenticated) is moved into auth_generate_session_info_wrapper(), which is the function that gensec_security->auth_context->generate_session_info points to. Andrew Bartlett
* s4-auth: Return NT_STATUS_NOT_IMPLEMENTED if the challenge cannot be obtainedAndrew Bartlett2012-01-301-1/+1
|
* auth: Make check_password and generate_session_info hook genericAndrew Bartlett2012-01-306-41/+74
| | | | | | | | gensec_ntlmssp does not need to know the internal form of the struct user_info_dc or auth_serversupplied_info. This will allow the calling logic to be put in common. Andrew Bartlett
* tdb2: make --enable-tdb2 the default.Rusty Russell2012-01-301-2/+2
| | | | | | | | | We still use the tdb1 on-disk format, but we do so via the tdb2 library. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au> Autobuild-User: Rusty Russell <rusty@rustcorp.com.au> Autobuild-Date: Mon Jan 30 08:02:43 CET 2012 on sn-devel-104
* tdb2: add -1 and -2 options to tdbtortureRusty Russell2012-01-301-1/+18
| | | | | (For now, -1 is the default).
* tdb2:tdbtorture: use TEST_DATA_PREFIX for filesRusty Russell2012-01-301-9/+34
| | | | | | TDB2 version of commit b83672b36c1ea8c35833c40c3919b63809f16624. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
* tdb2: name tools the same as TDB1 tools.Rusty Russell2012-01-301-5/+5
| | | | | | | | Otherwise, when we switch everyone's scripts will break (including our own tests!). Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
* tdb2: tools/tdb2backupRusty Russell2012-01-302-0/+374
| | | | | | | Minor changes from tdb/tools/tdbbackup.c. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
* samdb: use compat wrappers for tdb_fetch().Rusty Russell2012-01-301-6/+6
| | | | | | | | TDB2's tdb_fetch() returns an error code; use tdb_fetch_compat() for now. Similarly, tdb_errorstr() -> tdb_errorstr_compat(). Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>
* tdb_compat: only use hashsize attribute when O_CREATRusty Russell2012-01-301-1/+1
| | | | | | | | tdb2 complains if you specify a tdb1 hashsize, and you're not actually trying to create a new database. Signed-off-by: Rusty Russell <rusty@rustcorp.com.au>