summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
...
* auth/kerberos Add check for gss_inquire_sec_context_by_oidAndrew Bartlett2011-04-271-0/+1
| | | | | | | | | Not all kerberos distributions have this function. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Apr 27 07:39:08 CEST 2011 on sn-devel-104
* s4-gensec: Use new common 'obtain the PAC' functions.Andrew Bartlett2011-04-271-15/+4
| | | | | | | Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Apr 27 05:08:10 CEST 2011 on sn-devel-104
* s3-gse: Don't release the mech OID from gss_accept_security_contextAndrew Bartlett2011-04-271-0/+1
| | | | | | | | | | This is constant data according to the man pages I find for this fucntion, and causes a segfault to free() when linked to Heimdal. I am advised that while it is constant for gss_mech_krb5, it may not be for other mechanisms, so an assert will ensure this is dealt with by the programmer who extends this code in future. Andrew Bartlett
* libcli/auth Move Samba4's gssapi_error_string from GENSEC to libcli/authAndrew Bartlett2011-04-271-38/+0
| | | | | | This will allow the GSSAPI PAC fetch code to use it. Andrew Bartlett
* build: Move Heimdal/MIT compat build rules to heimdal_buildAndrew Bartlett2011-04-261-0/+13
| | | | | | This allows top level build rules to rely on these names at all times. Andrew Bartlett
* Fix release script to cope with moved Samba 4 build tools.Jelmer Vernooij2011-04-241-3/+2
|
* Fix case of libUTIL_LDB.Jelmer Vernooij2011-04-231-1/+1
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sat Apr 23 18:52:06 CEST 2011 on sn-devel-104
* Add check for krb5_free_unparsed_name, when using external heimdal.Jelmer Vernooij2011-04-231-2/+3
|
* Support the 'PYTHON' environment variable.Jelmer Vernooij2011-04-231-0/+6
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sat Apr 23 04:19:05 CEST 2011 on sn-devel-104
* s4:ldb: change version to 1.1.0 after adding new functions:Stefan Metzmacher2011-04-212-1/+254
| | | | | | | | | | | | | ldb_ldif_parse_modrdn() ldb_req_set_custom_flags() ldb_req_get_custom_flags() Signed-off-by: Simo Sorce <idra@samba.org> metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Apr 21 17:15:16 CEST 2011 on sn-devel-104
* ldb: add custom flags and functions for the application that wants to ↵Matthieu Patou2011-04-213-0/+54
| | | | | | | manipulate them Signed-off-by: Simo Sorce <idra@samba.org> Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s4:ldb/tests: add tests for ldbmodify and 'modrdn'Stefan Metzmacher2011-04-212-1/+16
| | | | | | Signed-off-by: Simo Sorce <idra@samba.org> metze
* s4:ldb/tools: add support for "modrdn" to ldbmodifyStefan Metzmacher2011-04-211-1/+23
| | | | | | Signed-off-by: Simo Sorce <idra@samba.org> metze
* s4:ldb/ldif: add support for "modrdn"Stefan Metzmacher2011-04-212-1/+226
| | | | | | | | | This add a ldb_ldif_parse_modrdn() helper function to parse the information out of a ldb_message structure. Signed-off-by: Simo Sorce <idra@samba.org> metze
* s4-smbtorture: restructure documentname handling in spoolss test a bit.Günther Deschner2011-04-201-3/+4
| | | | Guenther
* libcli/auth Move PAC parsing and verification in common.Andrew Bartlett2011-04-204-350/+28
| | | | | | | | This uses the source3 PAC code (originally from Samba4) with some small changes to restore functionality needed by the torture tests, and to have a common API. Andrew Bartlett
* selftest: Don't specify SELFTEST_TARGET as an env variableAndrew Bartlett2011-04-192-2/+1
| | | | | | | It is much more reliable to specify it as a direct parameter, and this is needed for the combined 'make test'. Andrew Bartlett
* s4-selftest Rename Samba4 'member' test environment to s4memberAndrew Bartlett2011-04-191-14/+14
| | | | | | This will avoid a conflict with the s3 'member' environment. Andrew Bartlett
* s4-selftest: Stop creating netbios aliases everywhereAndrew Bartlett2011-04-191-1/+0
| | | | | | | | | | This reduces some of the clutter when we have quite so many server configurations starting. The one case that actually needs an alias (dc environment for the test_nmblookup.sh test) will still keep it. Andrew Bartlett
* samba-tool: fix machinepw command so that we use the full path to the secret ↵Matthieu Patou2011-04-171-3/+6
| | | | | | | database and raise an error if secret can't be found Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sun Apr 17 13:12:27 CEST 2011 on sn-devel-104
* s4-heimdal: Allow any kvno to match when searching the keytab.Andrew Bartlett2011-04-161-2/+1
| | | | | | | | Windows does not use a KVNO when it checks it's passwords, and MIT doesn't check the KVNO when no acceptor identity is specified (looping over all keys in the keytab). Andrew Bartlett
* s4-heimdal_build: Add extra HAVE defines needed for the source3 krb5 codeAndrew Bartlett2011-04-161-0/+3
|
* selftest Remove selftest of the test subsystemAndrew Bartlett2011-04-161-1/+0
| | | | | | | The intereactions between selftest.pl and the target are now too complex to unit test like this any more. Andrew Bartlett
* selftest: Move Samba4 selftest wscript to the top levelAndrew Bartlett2011-04-161-201/+0
|
* selftest: Start using the binary mapping at the python layer as wellAndrew Bartlett2011-04-162-2/+2
|
* selftest: Remove duplication between BUILDIR and BINDIRAndrew Bartlett2011-04-169-9/+9
| | | | | | Just have BINDIR, and have it default to ./bin Andrew Bartlett
* s4-dsdb: Add more information on why we don't check the SD controlMatthieu Patou2011-04-151-0/+5
| | | | | | | Signed-off-by: Nadezhda Ivanova <nivanova@samba.org> Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Fri Apr 15 16:16:27 CEST 2011 on sn-devel-104
* s4-dsdb: If current attribute list is empty use the one from the requestMatthieu Patou2011-04-151-1/+1
| | | | | | This will avoid overwritting attribute list made by upper modules. Signed-off-by: Nadezhda Ivanova <nivanova@samba.org>
* s3-auth Rename smb_krb5_open_keytab to avoid a conflict with s3Andrew Bartlett2011-04-142-9/+9
| | | | | | The s3 function doesn't use the keytab_container concept. Andrew Bartlett
* libcli/auth Move krb5 wrapper functions from s3 into commonAndrew Bartlett2011-04-144-113/+79
| | | | | | | | | This requires a small rework of the build system to ensure that the correct #define statements are made in both the s3 and top level builds. We now define the various HAVE_ macros in config.h at all times, using heimdal_build/wscript_configure when that is in use. Andrew Bartlett
* s4/libcli: do not use netbios name in NTLMv2 blobs w/o spnegoChristian Ambach2011-04-141-4/+22
| | | | | | | | | | | | | | | | | | | I have seen domain controllers rejecting NTLMv2 blobs presented to NetrLogonSamLogonEx with LOGON_FAILURE when the MsvAvNbComputerName was a FQDN or an IP address I have not seen this field in NTLMv2 blobs send by Windows clients when extended security was not available, so omitting the field makes Samba similar to Windows. This prevents errors with some smbtorture testcases that disable spnego and when a target name is specified that is not a valid netbios name. Signed-off-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu Apr 14 02:19:08 CEST 2011 on sn-devel-104
* s4/libcli: do not announce NT error code support when it is disabledChristian Ambach2011-04-141-1/+4
| | | | | | | | when the support of NT error codes has been disabled in the options of a CLI connection, support for them should not be announced during protocol negotiation Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-test: added a test for E_deshash()Andrew Tridgell2011-04-133-1/+72
| | | | | | | | | | this particularly checks the boundary conditions near passwords of length 14 characters Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Wed Apr 13 07:31:55 CEST 2011 on sn-devel-104
* lib/util/charset Add many more charset testsAndrew Bartlett2011-04-131-0/+2
| | | | | | | | | This confirms that the behaviour of the convert_string() API (with the process-wide iconv handle). Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* lib/util/charset Rename convert_string test to allow a 'non_handle' testAndrew Bartlett2011-04-131-1/+1
| | | | | | | | | A future commit will test (with a subset of tests) the varient of this function without _handle. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4/torture Fix calls to charcnv functions to always supply converted_sizeAndrew Bartlett2011-04-132-2/+3
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* libcli/ldap pull LIBCLI_LDAP_MESSAGE and LIBCLI_LDAP_NDR into a libraryAndrew Bartlett2011-04-132-3/+3
| | | | | | This reduces symbol duplication Andrew Bartlett
* ldb:ldb/common/ldb_modules.c - change the request counter type to be "unsigned"Matthias Dieter Wallnöfer2011-04-081-1/+1
| | | | | | | | | | Just for consistency since all other LDB counters are unsigned as well. And also the debug output specifier has been chosen to be "%u" - so it really should be unsigned. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Fri Apr 8 09:17:47 CEST 2011 on sn-devel-104
* ldb:ldb/common/ldb_modules.c - trivial - fix integer output specifiersMatthias Dieter Wallnöfer2011-04-081-2/+2
|
* ldb:ldb_msg.c - make "ldb_msg_find_attr_as_*" more robust against invalid valuesMatthias Dieter Wallnöfer2011-04-071-19/+106
| | | | | | | | | | | | | - Integer handling was modeled after validate code from "schema_syntax.c". - Double handling was modeled similar, but with a dynamic buffer. I don't know if there is a maximum literal length for double values but an allocation shouldn't a problem here since doubles are rare. - String handlind is enhanced with a terminating "0" test for safety. Reviewed-by: abartlet + metze Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Thu Apr 7 16:38:57 CEST 2011 on sn-devel-104
* ldb:ldb_msg_check_sanity - clean it up from unneeded stuffMatthias Dieter Wallnöfer2011-04-071-4/+0
|
* dsdb:schema/schema_syntax.c - correctly check error code of ↵Matthias Dieter Wallnöfer2011-04-071-2/+1
| | | | | | | | "ldb_string_utc_to_time" This one doesn't set ERRNO. An error happens if the result is "0". Reviewed-by: abartlet
* dsdb:schema/schema_syntax.c - add some empty value checks on validate functionsMatthias Dieter Wallnöfer2011-04-071-0/+9
| | | | | | They are needed since the check in "ldb_msg_sanity_check" will be removed. Reviewed-by: abartlet
* s4:objectclass LDB module - "ldb_msg_sanity_check" call not really neededMatthias Dieter Wallnöfer2011-04-071-5/+0
| | | | | | | | | | | This call should only be performed at the beginning of a request. "ldb_msg_sanity_check" checks for DN validity (which should already have been done at the beginning of the request) and empty attributes (which should be done by the "objectclass_attrs" LDB module). Hence it is superflous here. Reviewed-by: abartlet
* ldb:ldbadd/modify tool - return error code when at least one operation has ↵Matthias Dieter Wallnöfer2011-04-072-5/+8
| | | | | | | | | failed This is required to better detect failures and should raise the compatiblity to "ldapadd"/"ldapmodify". Reviewed-by: abartlet
* ldb:tests - "init.ldif" - deactivate empty "seeAlso" attributeMatthias Dieter Wallnöfer2011-04-071-1/+2
|
* ldb:ldb/common/ldb_modules.c - always use LDB error codes if possibleMatthias Dieter Wallnöfer2011-04-071-6/+7
| | | | | | | The callers do compare against LDB error codes - hence don't give back "-1". Reviewed-by: Tridge + abartlet
* ldb:common/*.c - check for some OOM conditionsMatthias Dieter Wallnöfer2011-04-072-0/+7
| | | | Reviewed-by: abartlet
* s4:objectclass LDB module - fix a comment - add a ")"Matthias Dieter Wallnöfer2011-04-071-1/+1
| | | | Reviewed-by: abartlet
* s4-smbtorture: fix lsa forest trust test.Günther Deschner2011-04-071-1/+1
| | | | | | | | | | | | | lsa_lsaRSetForestTrustInformation takes a policy handle obtained from lsaopenpolicy/lsaopenpolicy2 and not a trusted domain handle (MS-LSAD 3.1.4.7.16 LsarSetForestTrustInformation (Opnum 74)). Sumit, please check. Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Thu Apr 7 14:52:52 CEST 2011 on sn-devel-104