summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* s4:kdc Rework the 'allowed enc types' calculationAndrew Bartlett2010-06-291-41/+35
| | | | | | | | | | This changes the calculation to apply the allowed enc types to all uses of the key (no point allowing a weak kinit to a key the server wanted strongly protected). It also ensures that all the non-DES keys are available on the krbtgt in particular, even as it does not have a msds-SupportedEncryptionTypes attributes. Andrew Bartlett
* s4:auth Query LDB for msds-SupportedEncryptionTypes for the KDCAndrew Bartlett2010-06-291-0/+1
| | | | | | The KDC needs this to determine what encryption types an entry supports Andrew Bartlett
* s4:kerberos Add functions to convert msDS-SupportedEncryptionTypesAndrew Bartlett2010-06-292-0/+60
| | | | | | This will allow us to interpret this attibute broadly in Samba. Andrew Bartlett
* s4:libnet_join Fix typo in msDS-SupportedEncryptionTypesAndrew Bartlett2010-06-291-1/+1
|
* s4:provision Add an msDS-SupportedEncryptionTypes entry to our DCAndrew Bartlett2010-06-293-2/+35
| | | | | | | | This ensures that our DC will use all the available encyption types. (The KDC reads this entry to determine what the server supports) Andrew Bartlett
* build: only use git when found by configureAndrew Tridgell2010-06-293-17/+35
| | | | | | this rebuilds version.h whenever the git version changes, so we always get the right version with samba -V. That adds about 15s to the build time on each git commit, which shouldn't be too onerous
* build: allow LOAD_ENVIRONMENT() to pass when no configure has been runAndrew Tridgell2010-06-291-2/+5
| | | | this returns an empty environment
* build: allow always=True/False on SAMBA_GENERATOR()Andrew Tridgell2010-06-291-1/+5
| | | | | | | this allows us to force a rule to always run. Will be used by samba_version Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4/repl_meta_data: remove duplicated (and commented out) logKamen Mazdrashki2010-06-291-6/+0
|
* s4/ndr: Fix tuncating of constant to a 'long' typeKamen Mazdrashki2010-06-291-2/+2
|
* s4:lib/registry/ldb.c - add a missing braceMatthias Dieter Wallnöfer2010-06-281-1/+1
| | | | Sorry didn't check that earlier.
* s4:lib/registry/ldb.c - fix memory handling in "ldb_open_key"Matthias Dieter Wallnöfer2010-06-281-1/+4
|
* s4:lib/ldb/registry.c - handle the classname in the right wayMatthias Dieter Wallnöfer2010-06-281-1/+8
| | | | This is for "ldb_get_key_info".
* s4:lib/registry/ldb.c - remove really useless "local_ctx"Matthias Dieter Wallnöfer2010-06-281-8/+2
| | | | "mem_ctx" should fit for these few local allocations.
* s4:lib/registry/ldb.c - retrieve the classname correctly in ↵Matthias Dieter Wallnöfer2010-06-281-7/+6
| | | | "ldb_get_subkey_by_id"
* s4:lib/registry/ldb.c - change the "ldb_get_value" implementation to use the ↵Matthias Dieter Wallnöfer2010-06-281-20/+17
| | | | | | value cache and not an LDB lookup In addition this fixes the use of special characters in registry object names.
* s3: Change exit on immediate socket failure.Ira Cooper2010-06-281-4/+4
| | | | | | | This change makes it so socket errors early in the smbd child process cause orderly exits not coredumps. Signed-off-by: Jeremy Allison <jra@samba.org>
* s4:auth/sam.c - "authsam_expand_nested_groups" - small performance improvementMatthias Dieter Wallnöfer2010-06-281-3/+7
| | | | | We can save one search operation if "only_childs" is false and when we had no SID passed as extended DN component.
* s4:auth/sam.c - "authsam_expand_nested_groups" - cosmetic/commentsMatthias Dieter Wallnöfer2010-06-281-9/+11
|
* s4:auth/sam.c - "authsam_expand_nested_groups" - use "dsdb_search_dn" where ↵Matthias Dieter Wallnöfer2010-06-281-3/+11
| | | | | | possible And always catch LDB errors
* selftest: Remove accidentally committed dummy test.Jelmer Vernooij2010-06-281-1/+0
|
* s4/spnupdate: Fixed spnupdate to use secrets credentials when accessing SamDB.Endi S. Dewata2010-06-281-3/+30
| | | | Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
* s4/libcli: Register LDB_CONTROL_REVEAL_INTERNALS and ↵Endi S. Dewata2010-06-281-0/+4
| | | | | | DSDB_CONTROL_PASSWORD_CHANGE_STATUS_OID controls. Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
* s4/dsdb: Fixed partition_search() not to pass special DN's to LDAP backend.Endi S. Dewata2010-06-281-6/+8
| | | | Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
* s4/auth: Fixed authsam_expand_nested_groups() to find entry SID if not ↵Endi S. Dewata2010-06-281-1/+8
| | | | | | available in the DN. Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
* s3: Make some routines static in smbldapVolker Lendecke2010-06-282-4/+2
|
* s4:repl_meta_data LDB module - fix counter typeMatthias Dieter Wallnöfer2010-06-281-1/+1
|
* s4:acl LDB module - fix counter typeMatthias Dieter Wallnöfer2010-06-281-1/+2
|
* s4:dcesrv_drsuapi.c - fix a counter variableMatthias Dieter Wallnöfer2010-06-281-2/+1
|
* s4:selftest - also "rpc.samr.users.privileges" does work nowMatthias Dieter Wallnöfer2010-06-281-1/+0
|
* s4:lsa RPC server - Fix up "dcesrv_lsa_DeleteObject"Matthias Dieter Wallnöfer2010-06-281-3/+6
| | | | | | - Return always "NT_STATUS_OK" on success - Remove "talloc_free"s on handles since the frees are automatically performed by the DCE/RPC server code
* s4:knownfail - "pwdLastSet" test does work nowMatthias Dieter Wallnöfer2010-06-281-1/+0
|
* s4:torture/rpc/samr.c - test_SetPassword_LastSet - introduce the delays also ↵Matthias Dieter Wallnöfer2010-06-281-1/+2
| | | | for s4
* s4:torture - SAMR password tests - activate support for password sets on ↵Matthias Dieter Wallnöfer2010-06-281-22/+17
| | | | level "18" and "21"
* s4:selftest - activate the lanman password changesMatthias Dieter Wallnöfer2010-06-281-0/+1
| | | | This is needed for a working "OemChangePasswordUser2" operation.
* s4:dcesrv_samr_SetUserInfo - implement right "pwdLastSet" behaviourMatthias Dieter Wallnöfer2010-06-281-1/+72
| | | | Behaviour as the torture SAMR passwords tests show.
* s4:dcesrv_samr_SetUserInfo - deny operations when "fields_present" is 0Matthias Dieter Wallnöfer2010-06-281-0/+9
| | | | Taken from s3
* s4:dcesrv_samr_SetUserInfo - port the "SAMR_FIELD_LAST_PWD_CHANGE" check ↵Matthias Dieter Wallnöfer2010-06-281-0/+8
| | | | from s3 to s4
* s4:dcesrv_samr_SetUserInfo - implement password set level 21Matthias Dieter Wallnöfer2010-06-281-0/+33
|
* s4:dcesrv_samr_SetUserInfo - implement case 18 which allows to reset the ↵Matthias Dieter Wallnöfer2010-06-281-0/+10
| | | | user password
* s4:OemChangePasswordUser2 - return "NT_STATUS_WRONG_PASSWORD" when we ↵Matthias Dieter Wallnöfer2010-06-281-1/+1
| | | | | | haven't activated the the lanman auth This is what s3 does.
* s4:samr_password.c - add a function which sets the password through ↵Matthias Dieter Wallnöfer2010-06-281-0/+48
| | | | | | encrypted password hashes Used for password sets on "samr_SetUserInfo" level 18 and 21.
* s4-smbtorture: fix typo.Günther Deschner2010-06-281-1/+1
| | | | | | Not my day... Guenther
* s4:torture/rpc/samr.c - test_SetPassword_LastSet - fix "pwdLastSet" testMatthias Dieter Wallnöfer2010-06-281-33/+31
| | | | | | | | - Remove superflous checks (on level 18, 24, 26 we do always have "pwdLastSet" resets if "password_expired" > 0) - Fixed some bugs Signed-off-by: Günther Deschner <gd@samba.org>
* s4-smbtorture: add trustDomainPasswords blob test to LOCAL-NDR testsuite.Günther Deschner2010-06-281-0/+64
| | | | | | | | | | Our parsing of this struct is incorrect atm. and apparently also causes the s4 server to crash. Thanks to Sumit Bose <sbose@redhat.com> for providing the auth data retrieved from a w2k3 domain.msc operation. Guenther
* s3-registry: missed one perflib keyname delimiter.Günther Deschner2010-06-281-1/+1
| | | | Guenther
* s3: More cleanup in winbindd_ads.c:query_userVolker Lendecke2010-06-281-13/+10
| | | | We can't ads_msgfree after the ads struct has been killed. Do early returns.
* s3: Fix a valgrind errorVolker Lendecke2010-06-281-2/+1
| | | | nss_get_info_cached does not necessarily fill in gid
* s3: Re-arrange winbindd_ads.c:query_userVolker Lendecke2010-06-281-23/+24
| | | | | We can't access the LDAP message after nss_get_info_cached has potentially destroyed the ads_struct
* s3: free -> SAFE_FREEVolker Lendecke2010-06-281-1/+1
|