summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
...
* s4:python/samba/ndr.py: add an optional 'allow_remaining' to ndr_unpack()Stefan Metzmacher2012-01-091-2/+3
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Jan 9 10:28:30 CET 2012 on sn-devel-104
* ntlmssp: merge initial packet implementationsAndrew Bartlett2012-01-061-6/+25
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* samba-tool:dns: Check through all the DNS records for a matchAmitay Isaacs2012-01-061-16/+16
| | | | | | | There can be multiple dns records for a specified record type. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Fri Jan 6 02:41:22 CET 2012 on sn-devel-104
* s4-rpc:dnsserver: Do not replace @ with zone_name in update operationAmitay Isaacs2012-01-061-1/+6
| | | | This fixes the problem when updating DNS record for '@' or domain name.
* s3-librpc Use gsskrb5_get_subkey() where available to get the session keyAndrew Bartlett2012-01-051-0/+1
| | | | | | | | This allows gse_get_session_key() to work against Heimdal. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4:repl_meta_data LDB module - set "isRecycled" time correctlyMatthias Dieter Wallnöfer2012-01-051-9/+8
| | | | | | | | | | "unix_to_nt_time()" which is based on "time_t" behaves differently for literals > 32 bit on 32 and 64 bit platforms. Reviewed-by: ekacnet Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Thu Jan 5 11:59:20 CET 2012 on sn-devel-104
* s4:pyrpc: add 'user_session_key' getter to the connection objectStefan Metzmacher2012-01-042-1/+45
| | | | | | | | | This gets the session key from gensec for usage in DRSUAPI. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jan 4 22:31:52 CET 2012 on sn-devel-104
* s4:pygensec/tests: check that the client and server have the same session keyStefan Metzmacher2012-01-041-1/+4
| | | | metze
* s4:pygensec: add session_key() methodStefan Metzmacher2012-01-041-0/+29
| | | | metze
* LDAP-CLDAP: demonstrate that pdc name is not an unc pathStefan Metzmacher2012-01-041-0/+9
| | | | | | | | | | | | | For LOGON_SAM_LOGON_RESPONSE_EX and LOGON_SAM_LOGON_USER_UNKNOWN_EX, pdc name is not in unc path form. [MS-ADTS] 7.3.1.* uses UnicodeLogonServer, which seems to be in unc form, while NetbiosComputerName is not in unc form. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jan 4 20:06:14 CET 2012 on sn-devel-104
* s4:torture/nbt/dgram.c - NBT samlogon requests don't return the PDC name as ↵Matthias Dieter Wallnöfer2012-01-041-0/+5
| | | | | | UNC path Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4:cldap_server/netlogon.c: it is wrong to specify "\\" in front of the hostnameStefan Metzmacher2012-01-041-2/+6
| | | | | | | | | | | | For LOGON_SAM_LOGON_RESPONSE_EX and LOGON_SAM_LOGON_USER_UNKNOWN_EX, pdc name is not in unc path form. [MS-ADTS] 7.3.1.* uses UnicodeLogonServer, which seems to be in unc form, while NetbiosComputerName is not in unc form. Bases on a patch from Matthias Dieter Wallnöfer <mdw@samba.org>. metze
* LDAP-CLDAP: demonstrate that pdc name is an unc pathStefan Metzmacher2012-01-041-0/+6
| | | | | | | | | | | | | | For LOGON_SAM_LOGON_RESPONSE and LOGON_SAM_LOGON_USER_UNKNOWN, I assume all levels without _EX in the name, pdc name is in unc path form. [MS-ADTS] 7.3.1.* uses UnicodeLogonServer, which seems to be in unc form, while NetbiosComputerName is not in unc form. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jan 4 13:37:42 CET 2012 on sn-devel-104
* s4:torture/nbt/dgram.c: NBT samlogon requests without _EX return the PDC ↵Stefan Metzmacher2012-01-041-0/+22
| | | | | | name as UNC path metze
* dlz_bind9: create session info from PAC using auth contextAmitay Isaacs2012-01-041-7/+59
| | | | | | | | This fixes the creation of session info from PAC, after changes in gensec code. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Wed Jan 4 01:59:09 CET 2012 on sn-devel-104
* upgradeprovision: do not hold references to messageElementsMatthieu Patou2012-01-031-10/+17
| | | | | Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Tue Jan 3 08:20:02 CET 2012 on sn-devel-104
* upgradeprovision: treat provision without oem attribute as quite recent, ↵Matthieu Patou2012-01-031-1/+1
| | | | it's provision that comes from Windows replication
* s4-provision: Fix the problem of DnsProperty values not being set correctlyAmitay Isaacs2012-01-031-0/+7
| | | | | | | | | | | | | DnsProperty can have empty 'data' member. To parse Dnsproperty with empty data, dnsp.idl has a hack as follows: [switch_is(wDataLength?id:DSPROPERTY_ZONE_EMPTY)] dnsPropertyData data; This implies, to set 'data' value, wDataLength has to be set to a non-zero value first. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Tue Jan 3 05:26:32 CET 2012 on sn-devel-104
* s4:torture/rpc/netlogon.c - enhance the "DsRGetDCName*" testsMatthias Dieter Wallnöfer2012-01-021-0/+96
| | | | | | | | | | To check for the expected behaviour (DS_* flags). Always according to MS-NRPC 2.2.1.2.1. Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Jan 2 20:43:05 CET 2012 on sn-devel-104
* s4-provision: Fix tdbdump path lookup in make test.Andreas Schneider2012-01-021-1/+1
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4: Happy New Year 2012Stefan Metzmacher2012-01-011-1/+1
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sun Jan 1 22:23:48 CET 2012 on sn-devel-104
* pyregistry: Remove directory support.Jelmer Vernooij2011-12-291-32/+0
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Thu Dec 29 19:59:57 CET 2011 on sn-devel-104
* Remove the 'dir' registry backend.Jelmer Vernooij2011-12-294-491/+1
| | | | This backend was incomplete, and we already have plenty of other backends.
* s4-toture: Rename memory contexts in rpc.pac for greater clarityAndrew Bartlett2011-12-291-13/+13
| | | | | | | | | | | This should better follow the mem_ctx/tmp_ctx pattern used elsewhere in Samba. Thankyou Simo for the suggestion. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Dec 29 14:14:06 CET 2011 on sn-devel-104
* s4-gensec: Rename memory contexts in gensec_util for greater clarityAndrew Bartlett2011-12-291-2/+2
| | | | | | | | This should better follow the mem_ctx/tmp_ctx pattern used elsewhere in Samba. Thankyou Simo for the suggestion. Andrew Bartlett
* s4-gensec: Rename memory contexts in gensec_krb5 for greater clarityAndrew Bartlett2011-12-291-16/+16
| | | | | | | | This should better follow the mem_ctx/tmp_ctx pattern used elsewhere in Samba. Thankyou Simo for the suggestion. Andrew Bartlett
* s4-gensec: Rename memory contexts in gensec_gssapi for greater clarityAndrew Bartlett2011-12-291-16/+16
| | | | | | | | This should better follow the mem_ctx/tmp_ctx pattern used elsewhere in Samba. Thankyou Simo for the suggestion. Andrew Bartlett
* s4-auth: Rename memory contexts for greater clarityAndrew Bartlett2011-12-292-10/+10
| | | | | | | | This should better follow the mem_ctx/tmp_ctx pattern used elsewhere in Samba. Thankyou Simo for the suggestion. Andrew Bartlett
* s4-gensec remove auth_session dep from gensec_gssapi.cAndrew Bartlett2011-12-291-1/+1
| | | | | Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Dec 29 05:37:11 CET 2011 on sn-devel-104
* s4-gensec Remove fallback for simple privilegesAndrew Bartlett2011-12-291-6/+2
| | | | | | | | | This makes the dependencies simpler, as this code path is no longer required. (That is, it makes no sense to have an NTLM login without an auth context, and the gensec_gssapi and gensec_krb5 modules call the PAC blob function below instead). Andrew Bartlett
* s4-torture: Demonstrate handling of the PAC in a custom auth_contextAndrew Bartlett2011-12-293-62/+85
| | | | | | | This demonstrates how a different function pointer can be supplied to handle the PAC blob, without depending on the provisioned samdb etc. Andrew Bartlett
* s4-gensec: Pass the auth context in during gensec testAndrew Bartlett2011-12-291-2/+3
|
* s4-pyauth: Make sure event context allows nestingAndrew Bartlett2011-12-291-1/+2
|
* s4-gensec: Move parsing of the PAC blob and creating the session_info into authAndrew Bartlett2011-12-298-169/+247
| | | | | | | | | | | | | This uses a single callback to handle the PAC from the DATA_BLOB format until it becomes a struct auth_session_info. This allows a seperation between the GSS acceptor code and the PAC interpretation code based on the supplied auth context. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Dec 29 01:10:59 CET 2011 on sn-devel-104
* s4-gensec: fix cyrus sasl module after update() protype changeAndrew Bartlett2011-12-291-0/+1
|
* s4-auth Remove unused auth_context_create_from_ldb()Andrew Bartlett2011-12-282-27/+0
|
* s4-gensec: Allow a PAC to be obtained from any GSS mechAndrew Bartlett2011-12-281-7/+0
| | | | | | | This may allow Luke Howard's moonshot to work with a little less effort at some point in the future. Andrew Bartlett
* auth/kerberos: Move gssapi_parse.c to the top levelAndrew Bartlett2011-12-282-123/+2
| | | | | | This will help with writing a gensec module for the s3 gse layer. Andrew Bartlett
* s4-ntlmssp Do not allow LM key without a LM passwordAndrew Bartlett2011-12-281-3/+5
|
* s4:torture/rpc/netlogon.c - factor out the computer name check in an own testMatthias Dieter Wallnöfer2011-12-231-11/+61
| | | | | | | | | | | | This check is by no ways specific to "DsRGetSiteName" and hence it should be factored out in an own function. Samba at the moment does not implement the expected behaviour so I have added the "torture_skip" action. Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Dec 23 12:17:48 CET 2011 on sn-devel-104
* s4:netlogon RPC server - dcesrv_netr_DsRGetSiteName - add a small explainationMatthias Dieter Wallnöfer2011-12-231-0/+5
| | | | | | NETLOGON pipe is only thought for DCs. Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4:libcli/finddcs_nbt.c - free "req" consistently with "finddcs_cldap.c"Matthias Dieter Wallnöfer2011-12-231-2/+4
| | | | | | It is more obvious to free where the context for the first time appears. Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4:drsuapi/getncchanges: the default for isRecycled is FALSEStefan Metzmacher2011-12-231-1/+1
| | | | | | | metze Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Fri Dec 23 09:30:09 CET 2011 on sn-devel-104
* s4-drsuapi: we store boolean in upppercase so we need to test them in uppercaseMatthieu Patou2011-12-231-4/+4
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4-kcc: Remove also deleted objects that are not in the Deleted Object containerMatthieu Patou2011-12-232-2/+38
| | | | | | | | For the configuration container we do a full scan at every run of the kcc-delete service. For the base DN we introduce a new parameter that avoid the full scan to kick just when samba starts. Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4-ldb: Add isRecycled when is defined in the schemaMatthieu Patou2011-12-231-3/+9
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4:rpc-dnsserver: Set the rank for the new DNS record correctlyAmitay Isaacs2011-12-231-0/+8
| | | | | Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Fri Dec 23 07:56:34 CET 2011 on sn-devel-104
* test:dnsserver: Add zone creation and deletion testAmitay Isaacs2011-12-231-0/+51
|
* samba-tool:dns: Fix a typoAmitay Isaacs2011-12-231-1/+1
|
* samba-tool:dns: Add zone create/delete commandsAmitay Isaacs2011-12-231-0/+85
|