summaryrefslogtreecommitdiffstats
path: root/source4/auth
Commit message (Collapse)AuthorAgeFilesLines
* s4:kdc streamline context initializationSimo Sorce2010-01-312-37/+58
| | | | | Allow other plugins to init the context without having it try to grab sockets or set samba specific logging.
* s4:auth_sam: avoid usage of data_blob_talloc_reference() and copy the ↵Stefan Metzmacher2010-01-291-4/+14
| | | | | | session keys metze
* cleanup: remove trailing spaces and tabsSimo Sorce2010-01-281-37/+37
|
* s4: Fix a few warnings.Jelmer Vernooij2010-01-211-0/+1
|
* s4-kerberos: raise the general kerberos debug level to 3Andrew Tridgell2010-01-161-1/+1
| | | | level 2 for every krb request is a bit much
* Strip trailing spacesSimo Sorce2010-01-122-82/+82
|
* s4:ntlmssp: remove mem_ctx from check_password() callback to match s3Stefan Metzmacher2009-12-292-5/+2
| | | | metze
* s4:ntlmssp_server: always call ntlmssp_server_postauth() and decide there if ↵Stefan Metzmacher2009-12-291-5/+11
| | | | | | it's a noop metze
* s4:ntlmssp_server: don't use a mem_ctx for ntlmssp_server_auth()Stefan Metzmacher2009-12-291-13/+7
| | | | metze
* s4:ntlmssp_server: don't use mem_ctx in auth_ntlmssp_check_password()Stefan Metzmacher2009-12-291-16/+8
| | | | metze
* s4:ntlmssp_server: clear session key in ntlmssp_server_preauth()Stefan Metzmacher2009-12-291-3/+1
| | | | metze
* s4:ntlmssp: use data_blob_null in ntlmssp_server_auth()Stefan Metzmacher2009-12-291-4/+6
| | | | metze
* s4:ntlmssp_server: remove unused variableStefan Metzmacher2009-12-291-7/+0
| | | | metze
* s4:auth/ntlmssp: let get_challenge() return a NTSTATUS and fill a stack bufferStefan Metzmacher2009-12-292-13/+13
| | | | metze
* dsdb: Fix dependencies when building against system ldb.Jelmer Vernooij2009-12-291-1/+1
|
* s4:auth: add auth_get_server_info_principal() prototype to auth.hStefan Metzmacher2009-12-291-0/+5
| | | | metze
* s4:auth: make auth_challenge_may_be_modified() publicStefan Metzmacher2009-12-292-2/+2
| | | | metze
* s4:auth: remove autogenerated auth/ntlm/auth_proto.hStefan Metzmacher2009-12-291-50/+0
| | | | metze
* s4:ntlmssp: fix whitespaces in ntlmssp.hStefan Metzmacher2009-12-291-16/+16
| | | | metze
* s4:auth: change auth_check_password_send/recv to tevent_reqStefan Metzmacher2009-12-243-113/+143
| | | | metze
* s4:gensec: change gensec_update_send/recv to tevent_reqStefan Metzmacher2009-12-243-58/+83
| | | | metze
* s4:gensec Don't give a warning when Windows client connects with NTLMAndrew Bartlett2009-12-221-11/+20
| | | | | | | We have had the workaround for a long time, but at the time the log warnings remained. Andrew Bartlett
* s4:auth Change 'get_challenge' API to be more like Samba3Andrew Bartlett2009-12-227-34/+31
| | | | | | | It is just easier to fill in the known to be 8 byte challenge than stuff about with allocated pointers. Andrew Bartlett
* s4:auth generate the prototype file in the right placeAndrew Bartlett2009-12-221-1/+1
|
* s4:gensec: allow clearing local and remote address by passing NULLStefan Metzmacher2009-12-161-0/+10
| | | | metze
* s4-gensec: Remove obsolete socket_address vars and fns.Andreas Schneider2009-12-162-35/+0
|
* s4-gensec: Replace gensec_get_peer_addr with new tsocket based fn.Andreas Schneider2009-12-168-32/+29
|
* s4-gensec: Replace gensec_set_peer_addr with new tsocket based fn.Andreas Schneider2009-12-162-11/+0
|
* s4-gensec: Replace gensec_get_my_addr with new tsocket based fn.Andreas Schneider2009-12-163-23/+24
|
* s4-gensec: Replace gensec_set_my_addr() with new tsocket based fn.Andreas Schneider2009-12-162-10/+0
|
* s4-gensec: Added remote and local setter/getter using tsocket.Andreas Schneider2009-12-163-4/+127
|
* s4:credentials Put the 'secrets.keytab' in the same directory as secrets.ldbAndrew Bartlett2009-11-021-1/+3
| | | | | | | This avoids trouble when the secrets.ldb is updated with ldbedit but an smb.conf is not specified. Andrew Bartlett
* s4:gensec/schannel: remove unused talloc_reference() in schannel_update()Stefan Metzmacher2009-10-241-1/+1
| | | | | | We never expose creds to the caller in schannel_update(). metze
* s4-python: we need to include Python.h firstAndrew Tridgell2009-10-232-2/+2
| | | | | If we don't include Python.h first then we get a pile of warnings due to broken redefines of XOPEN_SOURCE in the Python includes.
* s4:gensec Use an index on computerName in schannel.ldbAndrew Bartlett2009-10-231-1/+4
|
* s4-ldbwrap: added re-use of ldb contexts in ldb_wrap_connect()Andrew Tridgell2009-10-231-1/+1
| | | | | | | | | This allows us to reuse a ldb context if it is open twice, instead of going through the expensive process of a full ldb open. We can reuse it if all of the parameters are the same. The change relies on callers using talloc_unlink() or free of a parent to close a ldb context.
* s4-dsdb: create a static system_session contextAndrew Tridgell2009-10-236-12/+27
| | | | | | This patch adds a system_session cache, preventing us from having to recreate it on every ldb open, and allowing us to detect when the same session is being used in ldb_wrap
* s4: ran minimal_includes.pl on source4/auth/gensecAndrew Tridgell2009-10-206-12/+0
|
* s4: ran minimal_includes.pl on source4/auth/ntlmsspAndrew Tridgell2009-10-204-8/+0
|
* s4: ran minimal_includes.pl on source4/auth/ntlmAndrew Tridgell2009-10-206-14/+0
|
* s4:auth - fixed problem reading bind DN from secrets databaseEndi S. Dewata2009-10-162-0/+8
|
* s4:auth_sam: Restructure tail in "authsam_get_server_info_principal" and fix ↵Matthias Dieter Wallnöfer2009-10-161-3/+8
| | | | a memory leak
* s4:ntlmssp server - use also here the new "lp_dnsdomain()" callMatthias Dieter Wallnöfer2009-10-151-2/+1
|
* s4:auth/credentials/credentials - fix uninitalised pointersMatthias Dieter Wallnöfer2009-10-151-7/+35
| | | | This should fix bug #6755.
* s4: Changes the old occurences of "lp_realm" in "lp_dnsdomain" where neededMatthias Dieter Wallnöfer2009-10-142-18/+9
| | | | | | For KERBEROS applications the realm should be upcase (function "lp_realm") but for DNS ones it should be used lowcase (function "lp_dnsdomain"). This patch implements the use of both in the right way.
* s4-pygensec: a bit closer to workingAndrew Tridgell2009-10-023-9/+56
| | | | | I'll need help from Andrew on how to get gensec to initialise it's ops element
* gensec: Avoid exposing lp_ctx on the API level.Jelmer Vernooij2009-09-263-14/+12
|
* pygensec: Add initial work on a gensec Python module.Jelmer Vernooij2009-09-263-0/+184
|
* s4:auth/gensec/schannel - fix a const warningMatthias Dieter Wallnöfer2009-09-251-1/+2
|
* s4:schannel: fix some compiler warningsStefan Metzmacher2009-09-251-2/+4
| | | | | | If we only do signing we can pass down a const data buffer. metze