summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* s4-netlogon: fixed logic for setting DS_SERVER_WRITABLEAndrew Tridgell2010-09-151-1/+1
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-finddc: use NBT lookup for a 1C name if joining a short domain nameAndrew Tridgell2010-09-156-20/+105
| | | | | | | once we get the 1C lookup reply, use a CLDAP query to find the details for the server Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-selftest: use the full domain name in joinsAndrew Tridgell2010-09-151-4/+4
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-join: give a clear error when using short domain formAndrew Tridgell2010-09-151-1/+4
| | | | | | we now require the full domain name, for the DNS/CLDAP lookup Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-rodc: use python finddc code to avoid the need for --serverAndrew Tridgell2010-09-151-6/+12
| | | | | | The DC is now found via DNS/CLDAP Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-pynet: added finddc callAndrew Tridgell2010-09-151-0/+45
| | | | | | this gives access to the CLDAP/DNS finddc code from python Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-libcli: change finddcs.h -> finddc.hAndrew Tridgell2010-09-155-4/+4
| | | | | | | this prevents conflicts with old generated files and we can only even return one DC with this interface. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-finddcs: rename finddcs to finddcs_nbtAndrew Tridgell2010-09-152-37/+34
| | | | | | | finddcs_nbt is currently unused, but will later be a fallback is a cldap DC find fails. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-winbind: use finddcs_cldap() in winbindAndrew Tridgell2010-09-155-40/+52
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-libnet: use finddcs_cldap() in libnet_lookupAndrew Tridgell2010-09-151-11/+17
| | | | | | | this may later be changed to do fallback to NBT as well, but for now cldap is sufficient Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-cldap: don't set the writable bit when we are a RODCAndrew Tridgell2010-09-151-2/+6
| | | | | | | when we are a RODC, don't respond with the writable bit in the server type response of netlogon requests Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-finddcs: added finddcs_cldap()Andrew Tridgell2010-09-154-4/+284
| | | | | | | this finds DCs with a specified set of server_type bit using SRV lookups and CLDAP Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-secrets: fixed shadowed variable warningAndrew Tridgell2010-09-151-4/+4
| | | | we already have a 'v' in scope
* cldap: use ipv4 not up for unbound cldap socketsAndrew Tridgell2010-09-151-1/+5
| | | | | If we use "ip" we end up with a PF_INET6 socket which breaks sendto() for v4 addresses.
* s4-resolve: added resolve_name_multiple_recv()Andrew Tridgell2010-09-151-0/+34
| | | | | | this allows for multiple replies to a SRV lookup Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-dns: fixed lookup of SRV records using dns_exAndrew Tridgell2010-09-151-2/+2
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4: fixed some printf format errorsAndrew Tridgell2010-09-153-3/+3
|
* s4-libnet: converted finddcs call to tevent_reqAndrew Tridgell2010-09-154-89/+128
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-secrets: fetch secure channel type with domain SIDAndrew Tridgell2010-09-154-4/+27
| | | | | | The secure channel type is needed to work out what DC to connect to Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-auth: when we are a DC enable winbind authAndrew Tridgell2010-09-151-1/+3
| | | | | | As a RODC we need to forward some auth requests to a writable DC Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-auth: set the RODC bit for RODC schannelAndrew Tridgell2010-09-152-1/+5
| | | | | | | | When we are using SEC_CHAN_RODC we need to set the NETLOGON_NEG_RODC_PASSTHROUGH bit in the negotiated flags in ServerAuthenticate2 Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-schannel: fixed reference to context after freeAndrew Tridgell2010-09-151-2/+3
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-auth: allow multiple active auth backendsAndrew Tridgell2010-09-151-35/+43
| | | | | | | | | | when we are an RODC we need to be able to allow multiple auth backends to process a single auth request. First the sam backend will try to authenticate, using locally stored passwords. If this backend can't find local passwords then it will try the winbind backend and authenticate via a writeable DC Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-smb: serialise session setup operationsAndrew Tridgell2010-09-152-0/+16
| | | | | | | the mixture of async and sync code in gensec makes a EOF on a socket during a session setup cause a crash. The simplest solution is to stop processing events on the socket until the session setup is complete.
* talloc: fixed spelling errors in commentAndrew Tridgell2010-09-151-2/+2
|
* s4-rodc: add a trigger message for REPL_SECRET to auth_samAndrew Tridgell2010-09-153-0/+73
| | | | | | | | | when an RODC tries to authenticate against an account and the account has no password information it needs to send a message to the drepl server to tell it to try and replicate the secret information from a writeable DC Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-messaging: add support for no_reply in irpc messagesAndrew Tridgell2010-09-152-0/+8
| | | | | | | | | | | | It can be useful for a irpc message to be one-way, where the client sends a messages and the server does not reply. This will be used for things like a triger message from an auth context to the drepl server to tell it to try a REPL_SECRET on a user in a RODC. Previously we've used raw messaging for messages that have no reply, but that doesn't allow us to use messages described by IDL Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-kcc: removed redundent loop check Andrew Tridgell2010-09-151-1/+1
| | | | el has already been checked for NULL
* s4-smb: smbsrv_blob_push_string() can return -1Andrew Tridgell2010-09-151-8/+11
| | | | need to use ssize_t, not size_t for error handling
* s4-dsdb: check for invalid backend typeAndrew Tridgell2010-09-151-0/+2
|
* s4-rootdse: setup length after NULL checkAndrew Tridgell2010-09-151-2/+2
|
* s4-dsdb: fixed use after free for RODCAndrew Tridgell2010-09-151-2/+1
|
* s4-dsdb: free right context on failureAndrew Tridgell2010-09-151-1/+1
| | | | down_req is not initialised yet
* s4-dsdb: defer ac->msg after check for NULL acAndrew Tridgell2010-09-151-1/+3
|
* s4-anr: check for allocation failure before useAndrew Tridgell2010-09-151-1/+1
|
* s4: Fix two typosVolker Lendecke2010-09-141-2/+2
|
* Allows changing the maximum number of simultaneous clients in winbindd ↵Pierre Carrier2010-09-145-9/+30
| | | | | | through an smb.conf option. Signed-off-by: Jeremy Allison <jra@samba.org>
* Ensure incoming timespec values correctly wrap at nsecs.Jeremy Allison2010-09-142-0/+11
| | | | Jeremy.
* Fix string_to_sid() to allow non '\0' termination of the string - allowsJeremy Allison2010-09-141-11/+6
| | | | | | string_to_sid() to be used in formatted strings like FOO/S-1-5-XXXX-YYYY/BAR. Jeremy.
* s3-torture Add tests to show that the dom_sid parsing was faulty.Andrew Bartlett2010-09-141-0/+98
| | | | Andrew Bartlett
* s3-util_sid Use the NDR parser to parse struct dom_sidAndrew Bartlett2010-09-141-14/+8
| | | | | | | The manual parser failed to constrain the maximum number of sub-authorities to 15, allowing an overflow of the array. Andrew Bartlett
* libcli/security Use sid_append_rid() in dom_sid_append_rid()Andrew Bartlett2010-09-141-5/+5
| | | | | | | This ensures that the maximum number of sub-authorities is respected, otherwise we may run off the end of the array. Andrew Bartlett
* libcli/security Merge source3/ string_to_sid() to common codeAndrew Bartlett2010-09-142-143/+92
| | | | | | | | The source3 code repsects the limit of a maximum of 15 subauths, while the source4 code does not, creating a security issue as we parse string-form SIDs from clients. Andrew Bartlett
* s3-util_sid use ARRAY_SIZE() to ensure we never overflow the dom_sidAndrew Bartlett2010-09-141-1/+1
| | | | | | | This ensures that this, unlike the MAXSUBAUTHS macro, can't get out of sync with the structure. Andrew Bartlett
* s3-util_sid Accept S-1-5 as a SIDAndrew Bartlett2010-09-141-2/+10
|
* s3-dom_sid Use C99 types in dom_sid handlingAndrew Bartlett2010-09-141-7/+7
| | | | Andrew Bartlett
* s3/profile: remove the magical clock initialization from the profile codeBjörn Jacke2010-09-142-64/+3
| | | | | | there's no point in not profiling times if no monotonic clock is found - monotonic and realtime clock are equally fast. Just use clock_gettime_mono instead.
* s3/profiling: don't use CLOCK_PROCESS_CPUTIME_IDBjörn Jacke2010-09-143-36/+0
| | | | that clock is a CPU burnometer but we need a chronometer for profiling.
* libreplace: use CLOCK_HIGHRES when availableBjörn Jacke2010-09-141-3/+5
| | | | in Solaris 8 CLOCK_HIGHRES was the (only) name for CLOCK_MONOTONIC
* ntlmssp: when pushing an ntlmssp NEGOTIATE_MESSAGE deal with NULL strings.Günther Deschner2010-09-141-2/+2
| | | | Guenther
generated by cgit (git 2.34.1) at 2025-09-26 05:29:55 +0000