summaryrefslogtreecommitdiffstats
path: root/libcli
Commit message (Collapse)AuthorAgeFilesLines
...
* libcli/security make sec_privilege_id() return SEC_PRIV_INVALID on failure.Andrew Bartlett2010-09-111-1/+1
| | | | | | Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Remove unused functions and constants.Andrew Bartlett2010-09-112-242/+14
| | | | | | | | All the callers to these functions have been removed or reworked. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Rename all privilege bitmaps constantsAndrew Bartlett2010-09-111-28/+28
| | | | | | | | | The idea here to to make it very clear how they differ from the enumerated LUID values. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Remove luid_to_se_priv() and luid_to_privilege_name()Andrew Bartlett2010-09-111-43/+4
| | | | | | | | These functions duplicate other functions in the merged code. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Improve dump of privileges: Just walk the tableAndrew Bartlett2010-09-111-5/+4
| | | | | | | | | This removes some logic recently added that was just too smart - it is easier to just walk the table and do a bit match here. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Remove pointer indirection from se_priv_to_privilege_set()Andrew Bartlett2010-09-112-3/+3
| | | | | | Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Don't export privs[] as a global variableAndrew Bartlett2010-09-112-41/+27
| | | | | | | | | | | | Instead, provide access functions for the LSA and net sam callers for the information they need. They still only enumerate the first 8 privileges that have traditionally been exposed. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Merge privilege lists from source3 and source4Andrew Bartlett2010-09-111-169/+126
| | | | | | | | | The LSA enumeration in source3 will not show the new privileges, but otherwise, they are now in common, and can be set by name. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Return number of entries in the old source3 listAndrew Bartlett2010-09-111-3/+4
| | | | | | | | | This ensures there isn't a behaviour change when the source3 list is combined with the longer source4 list. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/privileges Simplify get_privilege_luid() to return just the enumAndrew Bartlett2010-09-112-9/+4
| | | | | | | | | As Samba only deals with the lower 32 bits of the LUID, just return those and let the LSA layer deal with the upper 0 bits. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Don't memcpy a uint64_t value, just assign it.Andrew Bartlett2010-09-111-1/+1
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Use ARRAY_SIZE() consistantly.Andrew Bartlett2010-09-111-15/+16
| | | | | | | | | This avoids the use of SE_END, and has all callers walking the array using the same termination condition. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Fix and clarify privilege manipulation function commentsAndrew Bartlett2010-09-111-9/+9
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Make the two privileges tables share a common struct definitionAndrew Bartlett2010-09-112-27/+22
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Move source4/ privileges code into the common libcli/securityAndrew Bartlett2010-09-113-4/+331
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Move manual prototypes to common privileges.hAndrew Bartlett2010-09-111-0/+88
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Inline dump_se_priv into callers now that it's just a uint64_tAndrew Bartlett2010-09-111-9/+0
| | | | | | | | The previous 128 bit structure needed this helper function. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Use talloc_realloc() not TALLOC_REALLOC_ARRAY()Andrew Bartlett2010-09-111-1/+1
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Use C99 typesAndrew Bartlett2010-09-111-3/+3
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/security Use true and false, not True and FalseAndrew Bartlett2010-09-111-22/+22
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-privs Move source3/ privileges implmentation into commonAndrew Bartlett2010-09-112-0/+531
| | | | | | Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3/s4:libcli/tstream - add more "char *" casts in order to suppress Solaris ↵Matthias Dieter Wallnöfer2010-09-102-14/+14
| | | | warnings
* libcli/netlogon: add LOGON_REQUEST handling to pull_nbt_netlogon_response().Günther Deschner2010-09-091-0/+1
| | | | Guenther
* libcli/netlogon: add LOGON_RESPONSE2 to pull_nbt_netlogon_response().Günther Deschner2010-09-091-0/+9
| | | | Guenther
* libcli/netlogon: add NETLOGON_RESPONSE2 to push_nbt_netlogon_response().Günther Deschner2010-09-092-1/+12
| | | | Guenther
* libcli/auth/ntlm_check.c - fix parameter indentationMatthias Dieter Wallnöfer2010-08-261-3/+3
|
* manpages: Avoid using Samba-Team specific DTD, which requires net accessJelmer Vernooij2010-08-261-11/+1
| | | | or modification of /etc/catalogs.
* s3-dcerpc: avoid talloc_move on schannel creds in ↵Günther Deschner2010-08-242-1/+47
| | | | | | | | | | | | | | | | cli_rpc_pipe_open_schannel_with_key(). Initially, the schannel creds were talloc memduped, then, during the netlogon creds client merge (baf7274fed2f1ae7a9e3a57160bf5471566e636c) they were first talloc_referenced and then later (53765c81f726a8c056cc4e57004592dd489975c9) talloc_moved. The issue with using talloc_move here is that users of that function in winbind will only be able to have two schanneled connections, as the cached schannel credentials pointer from the netlogon pipe will be set to NULL. Do a deep copy of the struct instead. Guenther
* werror.h - fix order and duplicate DS error codesMatthias Dieter Wallnöfer2010-08-142-62/+54
|
* ntlmssp: fix unitialized variable in ntlmssp_server_postauth().Günther Deschner2010-08-121-1/+1
| | | | Guenther
* Fix a typoVolker Lendecke2010-08-121-1/+1
|
* libcli/auth Make the source3/ implementation of the NTLMSSP server commonAndrew Bartlett2010-08-102-0/+530
| | | | | | | | | This means that the core logic (but not the initialisation) of the NTLMSSP server is in common, but uses different authentication backends. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org>
* libcli/auth/ntlmssp: remove outdated comment. The version flag is well ↵Günther Deschner2010-08-101-2/+0
| | | | | | understood now. Guenther
* libcli/auth Move some source3/ NTLMSSP functions to the common code.Andrew Bartlett2010-08-103-0/+120
| | | | | | | | libcli/auth Use true and false rather than True and False in common code Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org>
* s4-loadparm: 2nd half of lp_ to lpcfg_ conversionAndrew Tridgell2010-07-161-2/+2
| | | | | | | this converts all callers that use the Samba4 loadparm lp_ calling convention to use the lpcfg_ prefix. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* libcli/netlogon: re-enable debugging.Günther Deschner2010-07-161-7/+0
| | | | | | | | | Now that we do not share binary objects anymore, we can safely enable debugging here again. Guenther This reverts commit 3eb122069b9f81196ac658375fcb828924af3e94.
* s3-libads: move spnego defines to their appropriate header file.Günther Deschner2010-07-011-0/+6
| | | | Guenther
* libcli: Fixed a build warning for a missing prototype.Andreas Schneider2010-06-301-0/+1
|
* schannel Change to TDB_CLEAR_IF_FIRST to reduce fsync()Andrew Bartlett2010-06-251-32/+1
| | | | | | | | | | | | By making this DB TDB_NOSYNC, and by making that safe with TDB_CLEAR_IF_FIRST, we greatly reduce the fsync() load on the server. This particularly helps the source4/ 'make test', which otherwise tries to disable fsync() in ldb. Andrew Bartlett Signed-off-by: Jeremy Allison <jra@samba.org>
* libcli/auth make open_schannel_session_store() publicAndrew Bartlett2010-06-252-7/+7
| | | | | | This will allow TDB_CLEAR_IF_FIRST to be used Signed-off-by: Jeremy Allison <jra@samba.org>
* libcli/named_pipe_auth: fix error handling in _tstream_npa_connect_recv()Stefan Metzmacher2010-06-211-0/+2
| | | | metze
* libcli/named_pipe_auth: fix memory handling for temporary dataStefan Metzmacher2010-06-211-5/+6
| | | | | | | | | | | In a tevent_req based function tevent_req_create() should be the first function! If it fails it's the only reason, why the function could every return NULL. And all temporary data belongs to 'state' and gets free'ed by tevent_req_received() in the _recv function. metze
* s3/s4 - remove "talloc_tos()" from common code since s4 doesn't support itMatthias Dieter Wallnöfer2010-06-212-5/+10
| | | | | Please don't use this in common code parts until we change the policy regarding it.
* libcli: Fixed a segfault in security_acl_dup when the acl is NULL.Brendan Powers2010-06-191-0/+4
| | | | | | This can happen when duplicating a security descriptor that is missing either sacls or dacls. Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
* Fix warning messages about unused result of talloc_move. We're really ↵Jeremy Allison2010-06-141-3/+3
| | | | talloc_steal'ing here.
* named_pipe_auth Always lower case the incoming pipe nameAndrew Bartlett2010-06-071-1/+7
| | | | | | | Windows connects to an upper case NETLOGON pipe, and we can't find the socket to connect to until we lower case the name. Andrew Bartlett
* s4:ntlmssp Use common code for ntlmssp_sign.cAndrew Bartlett2010-06-012-18/+19
| | | | | | | | | | The common code does not have a mem_ctx on ntlmssp_check_packet() and ntlmssp_unseal_packet(). We do however need some internal working of the code exposed, so some structures are moved to ntlmssp_sign.h Andrew Bartlett
* s3:ntlmssp Move ntlmssp_sign.c from source3 to common code.Andrew Bartlett2010-05-314-0/+696
| | | | | | | | | This needs a small re-arrangement of the supporting code. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Günther Deschner <gd@samba.org>
* ntlmssp: Make the ntlmssp.h from source3/ a common headerAndrew Bartlett2010-05-311-0/+139
| | | | | | | | | The code is not yet in common, but I hope to fix that soon. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Günther Deschner <gd@samba.org>
* libcli/nbt/lmhosts: fix missing prototype warning.Günther Deschner2010-05-311-0/+1
| | | | | | Andrew, please check. Guenther