| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
New (major) patch
=================
- Enhances the "lsa.idl" file in the sense that it adds more values to
"PolicyInformation" to improve the "lsa_QueryInfoPolicy*" calls.
- Adds a minimal implementation for "AuditEvents" (also lsa_QueryInfoPolicy*
calls) to enable the "Audit" option in the "User Manager for Domains" (at least
readable).
- Adds to the "lsa.idl" file the system access mode flags needed for the calls
"lsa_*SystemAccessAccount".
- Fill in the "lsa_GetSystemAccessAccount" for enabling the "User Rights"
option in the "User Manager for Domains" (at least readable).
- Merge the two similar torture tests of the "lsa_QueryInfoPolicy*" calls in
one using "if"'s for a few separations.
- Add a torture test for "lsa_GetSystemAccessAccount".
- Some cosmetic-only changes (unifications) in output strings in the "LSA"
torture test.
The work has been done using the Microsoft WSPP docs.
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
|
| | | |
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
We supply this to krb5 as a plugin, so we must keep it around as long
as the krb5_context.
Andrew Bartlett
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
smaba4kpasswd will be used to test the kpasswdd componet of the KDC
(which is up until now untested), and rkpty is an expect-like wrapper
we can use to blackbox that utility.
Andrew Bartlett
|
| | | |
|
| |/ |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |\ |
|
| | |\ |
|
| | | |\
| | | | |
| | | | |
| | | | |
| | | | | |
Conflicts:
selftest/selftest.pl
|
| | | | | |
|
| | | | | |
|
| |/ / / |
|
| | | |
| | | |
| | | |
| | | | |
Guenther
|
| | | |
| | | |
| | | |
| | | | |
Guenther
|
| | | |
| | | |
| | | |
| | | | |
Guenther
|
| | | |
| | | |
| | | |
| | | | |
Guenther
|
| | | |
| | | |
| | | |
| | | | |
Guenther
|
| | | |
| | | |
| | | |
| | | | |
Guenther
|
| | | |
| | | |
| | | |
| | | | |
Guenther
|
| | | |
| | | |
| | | |
| | | | |
Guenther
|
| | | |
| | | |
| | | |
| | | | |
Guenther
|
| | | |
| | | |
| | | |
| | | | |
3.
|
| | | | |
|
| | | | |
|
| | | |
| | | |
| | | |
| | | | |
Guenther
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
This must have been broken since a while already.
Guenther
|
| | | |
| | | |
| | | |
| | | | |
Guenther
|
| | | |
| | | |
| | | |
| | | | |
Guenther
|
| |\ \ \ |
|
| | | | |
| | | | |
| | | | |
| | | | | |
it should always have been. Make it also async so that it is not a special case.
|
| | | | |
| | | | |
| | | | |
| | | | | |
Guenther
|
| | | | |
| | | | |
| | | | |
| | | | | |
Andrew Bartlett
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
By random I don't mean 'nice stream of ASCII chars, but pure random
passwords containing invalid UTF16 sequences etc.
Andrew Bartlett
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
I'm very glad we have such a comprehensive testsuite for the SAMR
password change process, as it makes this a much easier task to get
right.
Andrew Bartlett
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
This uses a virtual attribute 'clearTextPassword' (name chosen to
match references in MS-SAMR) that contains the length-limited blob
containing an allegidly UTF16 password. This ensures we do no
validation or filtering of the password before we get a chance to MD4
it. We can then do the required munging into UTF8, and in future
implement the rules Microsoft has provided us with for invalid inputs.
All layers in the process now deal with the strings as length-limited
inputs, incluing the krb5 string2key calls.
This commit also includes a small change to samdb_result_passwords()
to ensure that LM passwords are not returned to the application logic
if LM authentication is disabled.
The objectClass module has been modified to allow the
clearTextPassword attribute to pass down the stack.
Andrew Bartlett
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
This makes it operate in all partitions (minor), but more importantly
places it above some other modules that implement some extra schema
checks. (The linked_attributes module objects to unknown attributes,
which inclues clearTextPassword, which we need internally but is not
in the schema).
Andrew Bartlett
|
| |/ / /
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
This attribute is critical for the operation of nearly all the
Microsoft Mangement Console tools
Andrew Bartlett
|
| | | |
| | | |
| | | |
| | | | |
Guenther
|
| | | |
| | | |
| | | |
| | | | |
Guenther
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
jelmer, can you check if this is ok?
Guenther
|
| | | |
| | | |
| | | |
| | | | |
Guenther
|
| |\ \ \ |
|
| | | | |
| | | | |
| | | | |
| | | | | |
Guenther
|
| | | | |
| | | | |
| | | | |
| | | | | |
Guenther
|
| | | | | |
|
| | | | | |
|