summaryrefslogtreecommitdiffstats
path: root/source4/auth/ntlm
Commit message (Collapse)AuthorAgeFilesLines
* auth/ntlm: Use name consistent with other service names.Jelmer Vernooij2010-11-151-1/+1
|
* credentials: Lowercase library name,Jelmer Vernooij2010-11-071-1/+1
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Nov 7 01:48:44 UTC 2010 on sn-devel-104
* samdb: Lowercase library name.Jelmer Vernooij2010-11-071-2/+2
|
* s4/auth: Add logon_parameters to authenticate_username_pwAnatoliy Atanasov2010-11-051-1/+4
| | | | | | | | We need to be able to set the logon parameters in the same way as in the ntlm server so we can handle openldap simple authentication call correctly. Autobuild-User: Anatoliy Atanasov <anatoliy@samba.org> Autobuild-Date: Fri Nov 5 06:32:43 UTC 2010 on sn-devel-104
* s4:waf - fix the build on Gentoo platformsPhilip M. White2010-11-031-2/+4
| | | | Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
* s4-modules: get rid of the remaining static prototypes for modulesAndrew Tridgell2010-11-011-7/+2
| | | | the waf build now generates the prototype declarations for us
* s4: Remove the old perl/m4/make/mk-based build system.Jelmer Vernooij2010-10-311-80/+0
| | | | | | | | The new waf-based build system now has all the same functionality, and the old build system has been broken for quite some time. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Oct 31 02:01:44 UTC 2010 on sn-devel-104
* waf: Remove lib prefix from libraries manually.Jelmer Vernooij2010-10-261-3/+3
|
* s4: Drop duplicate 'lib' prefix for private libraries.Jelmer Vernooij2010-10-261-1/+1
|
* s4: Rename WBCLIENT to wbclient.Jelmer Vernooij2010-10-241-1/+1
|
* s4: Rename LIBSAMBA-* to libsamba-*Jelmer Vernooij2010-10-241-3/+3
|
* s4: Rename LIBSECURITY{_SESSION,} to libsecurity{_session,}Jelmer Vernooij2010-10-241-5/+5
|
* s4: Rename NSS_WRAPPER to nss_wrapper.Jelmer Vernooij2010-10-231-1/+1
| | | | | | | Only link to nss_wrapper when it is enabled. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sat Oct 23 23:05:44 UTC 2010 on sn-devel-104
* s4: Rename UID_WRAPPER to uid_wrapper.Jelmer Vernooij2010-10-231-2/+2
| | | | Only link to uid_wrapper when it is enabled.
* s4-auth: make auth a private libraryAndrew Tridgell2010-10-211-5/+6
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4:"util_ldb" - remove some really unused dependanciesMatthias Dieter Wallnöfer2010-10-181-1/+0
|
* Revert "s4:remove "util_ldb" submodule and integrate the three gendb_* calls ↵Matthias Dieter Wallnöfer2010-10-171-0/+1
| | | | | | | | | | | | in "dsdb/common/util.c"" This reverts commit 8a2ce5c47cee499f90b125ebde83de5f9f1a9aa0. Jelmer pointed out that these are also in use by other LDB databases - not only SAMDB ones. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Oct 17 13:37:16 UTC 2010 on sn-devel-104
* s4:remove "util_ldb" submodule and integrate the three gendb_* calls in ↵Matthias Dieter Wallnöfer2010-10-171-1/+0
| | | | | | | | | "dsdb/common/util.c" They're only in use by SAMDB code. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Oct 17 09:40:13 UTC 2010 on sn-devel-104
* libcli/security Use common security.hAndrew Bartlett2010-10-121-1/+1
| | | | | | | | | | This includes dom_sid.h and security_token.h and will be moved to the top level shortly. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 12 03:35:36 UTC 2010 on sn-devel-104
* samdb_common, ntlm: Add missing dependency on libsamba-hostconfig.Jelmer Vernooij2010-10-111-1/+1
|
* credentials: Split up into several subsystems.Jelmer Vernooij2010-10-111-1/+1
|
* samdb: Add flags argument to samdb_connect().Jelmer Vernooij2010-10-101-1/+1
|
* s4-auth: allow multiple active auth backendsAndrew Tridgell2010-09-151-35/+43
| | | | | | | | | | when we are an RODC we need to be able to allow multiple auth backends to process a single auth request. First the sam backend will try to authenticate, using locally stored passwords. If this backend can't find local passwords then it will try the winbind backend and authenticate via a writeable DC Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-rodc: add a trigger message for REPL_SECRET to auth_samAndrew Tridgell2010-09-151-0/+52
| | | | | | | | | when an RODC tries to authenticate against an account and the account has no password information it needs to send a message to the drepl server to tell it to try and replicate the secret information from a writeable DC Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4:auth_winbind: use irpc_binding_handle_by_name()Stefan Metzmacher2010-09-032-8/+8
| | | | metze
* s4:auth_winbind: remove unused winbind_samba3 backendStefan Metzmacher2010-09-032-122/+1
| | | | | | This uses the winbind protocol directly, which needs to be avoided! metze
* s4:auth_winbind: fix segfault in winbind_check_password_wbclient()Stefan Metzmacher2010-09-031-1/+5
| | | | | | We should only look at err if WBC_ERR_AUTH_ERROR is returned. metze
* s4:auth_winbind: fix compiler warningsStefan Metzmacher2010-09-031-4/+11
| | | | metze
* s4:ntlm/auth.c - add a whitespace in a debug outputMatthias Dieter Wallnöfer2010-08-261-1/+1
|
* s4:auth Move struct auth_usersupplied_info to a common locationAndrew Bartlett2010-08-142-4/+4
| | | | | | | | | This also changes the calling convention slightly - we should always allocate this with talloc_zero() to allow some elements to be optional. Some elements may only make sense in Samba3, which I hope will use this common structure. Andrew Bartlett
* s4-loadparm: 2nd half of lp_ to lpcfg_ conversionAndrew Tridgell2010-07-166-34/+34
| | | | | | | this converts all callers that use the Samba4 loadparm lp_ calling convention to use the lpcfg_ prefix. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:auth Change auth_generate_session_info to take flagsAndrew Bartlett2010-05-201-1/+7
| | | | | | | | | | | | | | This allows us to control what groups should be added in what use cases, and in particular to more carefully control the introduction of the 'authenticated' group. In particular, in the 'service_named_pipe' protocol, we do not have control over the addition of the authenticated users group, so we key of 'is this user the anonymous SID'. This also takes more care to allocate the right length ptoken->sids Andrew Bartlett
* s4:auth Push check for messaging context into winbind backendAndrew Bartlett2010-05-202-5/+5
| | | | | | | If we don't use the winbind backend, we don't (for now) need a messaging context- and we don't have one in LDB at the moment. Andrew Bartlett
* s4:auth Add dependency from the operational module onto authAndrew Bartlett2010-05-203-7/+33
| | | | | | | We had to split up the auth module into a module loaded by main deamon and a subsystem we manually init in the operational module. Andrew Bartlett
* s4:auth Allow the operational module to get a user's tokenGroups from authAndrew Bartlett2010-05-202-36/+120
| | | | | | | | This creates a new interface to the auth subsystem, to allow an auth_context to be created from the ldb, and then tokenGroups to be calculated in the same way that the auth subsystem would. Andrew Bartlett
* s3: Remove use of iconv_convenience.Jelmer Vernooij2010-05-181-1/+0
|
* Finish removal of iconv_convenience in public API's.Jelmer Vernooij2010-05-181-7/+4
|
* s4:auth Change auth_generate_session_info to take an auth contextAndrew Bartlett2010-04-143-14/+18
| | | | | | | | | | | | | | | | | | The auth context was in the past only for NTLM authentication, but we need a SAM, an event context and and loadparm context for calculating the local groups too, so re-use that infrustructure we already have in place. However, to avoid problems where we may not have an auth_context (in torture tests, for example), allow a simpler 'session_info' to be generated, by passing this via an indirection in gensec and an generate_session_info() function pointer in the struct auth_context. In the smb_server (for old-style session setups) we need to change the async context to a new 'struct sesssetup_context'. This allows us to use the auth_context in processing the authentication reply . Andrew Bartlett
* lib/replace/wscript: inline LIBREPLACE_EXT into 'replace' as the autoconf ↵Stefan Metzmacher2010-04-121-1/+1
| | | | | | system does metze
* s4:auth/ntlm/auth_developer.c - "fixed_challenge_get_challenge" - fix the ↵Matthias Dieter Wallnöfer2010-04-061-5/+2
| | | | | | assignment of the challenge This is a string buffer and not a DATA_BLOB.
* s4-waf: more dependencies on tallocAndrew Tridgell2010-04-061-1/+2
| | | | | these are needed so we can support a system talloc without using the bundled talloc.h
* s4-waf: mark the wscript files as python so vim/emacs knows how to highlight ↵Andrew Tridgell2010-04-061-0/+2
| | | | them
* s4-waf: remove the need for some of the lib aliasesAndrew Tridgell2010-04-061-1/+1
|
* build: waf quicktest nearly worksAndrew Tridgell2010-04-061-5/+1
| | | | | Rewrote wafsamba using a new dependency handling system, and started adding the waf test code
* build: commit all the waf build files in the treeAndrew Tridgell2010-04-061-0/+64
|
* s4-dsdb: added dsdb_search_one() and cleanup dsdb_find_dn_by_guid()Andrew Tridgell2010-02-161-4/+6
| | | | | | | | dsdb_find_dn_by_guid() now takes a struct GUID instead of a guid_string. All the callers in fact wanted a struct GUID, so we now avoid the extra conversion. Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4:auth: make auth_challenge_may_be_modified() publicStefan Metzmacher2009-12-291-1/+1
| | | | metze
* s4:auth: remove autogenerated auth/ntlm/auth_proto.hStefan Metzmacher2009-12-291-50/+0
| | | | metze
* s4:auth: change auth_check_password_send/recv to tevent_reqStefan Metzmacher2009-12-242-108/+136
| | | | metze
* s4:auth Change 'get_challenge' API to be more like Samba3Andrew Bartlett2009-12-225-29/+23
| | | | | | | It is just easier to fill in the known to be 8 byte challenge than stuff about with allocated pointers. Andrew Bartlett