summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
* olschema2ldif: be more strict where checking for open/closed bracesMatthieu Patou2012-05-051-3/+15
|
* s4:auth/kerberos: don't do tracing in MIT buildAlexander Bokovoy2012-05-041-17/+0
| | | | Signed-off-by: Simo Sorce <idra@samba.org>
* s4:torture: auth/pac.c: use Kerberos wrapper for krb5_keyblock_initAlexander Bokovoy2012-05-041-4/+4
| | | | Signed-off-by: Simo Sorce <idra@samba.org>
* Avoid using Heimdal-specific tests in MIT buildAlexander Bokovoy2012-05-043-3/+14
|
* s4:ntvfs: add missing headers to vfs_ipcAlexander Bokovoy2012-05-041-0/+2
| | | | | | vfs_ipc.c had system/kerberos.h and system/filesys.h missing Signed-off-by: Simo Sorce <idra@samba.org>
* Fix direct access to krb5_principal structureSimo Sorce2012-05-041-2/+4
|
* auth-session: MIT doesn't have import/export cred yetSimo Sorce2012-05-042-3/+7
| | | | | | | For now let's just loose this functionality with the MIT build. gss_import/export_cred should be availa ble when MIT 1.11 is released and this code is used only in some proxy scenario. Not normally needed for common configurations.
* krb5samba: Add a smb_krb5_cc_get_lifetime() function.Andreas Schneider2012-05-041-0/+1
| | | | Signed-off-by: Simo Sorce <idra@samba.org>
* s4-auth-krb: Make srv_keytab.c build against MIT KerberosSimo Sorce2012-05-041-8/+11
|
* Fix incompatible assignment warningSimo Sorce2012-05-041-1/+1
|
* krb5samba: Add compat krb5_make_principal for MIT buildSimo Sorce2012-05-041-0/+1
|
* Fix compiler warningSimo Sorce2012-05-041-1/+1
|
* s4-auth-krb: Use compat code to initialize keyblock contentsSimo Sorce2012-05-041-1/+1
|
* krb5samba: Add compat code to initialize keyblock contentsSimo Sorce2012-05-041-0/+1
|
* s4-auth-krb: Disable code in MIT buildSimo Sorce2012-05-041-1/+4
| | | | | | Unfortunately these functions are not available in MIT and there is no easy workaround or compat funciton I can see at this stage. Will fix properly once MIT gets the necessary functions or if another workaround can be found.
* Move keytab_copy to krb5samba libSimo Sorce2012-05-042-231/+1
| | | | | This is a helper fucntion that uses purely krb5 code, so it belongs to krb5samba which is the krb5 wrapper for samba.
* Fix keytab_copy to compile with MIT librariues tooSimo Sorce2012-05-041-10/+12
|
* keytab_copy: Fix style, whitespacesSimo Sorce2012-05-041-8/+17
|
* kerberos_pac: Fix code to work with MIT tooSimo Sorce2012-05-041-3/+3
|
* s4-auth-krb: smb_rd_req_return_stuff is used only in gensec_krb5Simo Sorce2012-05-045-2/+13
| | | | | | | Make it clearly a gensec_krb5 accessory file. This function should never be used anywhere else. This function was copied out from the Heimdal tree and is kept in a separate file for clarity and to keep the original license boilerplate.
* Split normal kinit from s4u2 flavored kinitSimo Sorce2012-05-041-7/+21
| | | | | | | This makes it simpler to slowly integrate MIT support and also amkes it somewhat clearer what operation is really requested. The 24u2 part is really only used by the cifs proxy code so we can temporarily disable it in the MIT build w/o major consequences.
* Move kerberos_kinit_password_cc to krb5samba libSimo Sorce2012-05-043-427/+1
|
* Move kerberos_kinit_keyblock_cc to krb5samba libSimo Sorce2012-05-043-55/+1
| | | | | Make it also work with MIT where krb5_get_in_tkt_with_keyblock is not available.
* krb-init: define out heimdal specific stuff in mitkrb buildSimo Sorce2012-05-041-3/+12
|
* s4-auth-krb: avoid useless conditionSimo Sorce2012-05-041-1/+1
| | | | Code bails out with ENOMEM 2 lines a bove if config_file is NULL anyways
* s4:torture: add a check for talloc success in test_session_reauthVolker Lendecke2012-05-041-0/+1
| | | | | Autobuild-User: Volker Lendecke <vl@samba.org> Autobuild-Date: Fri May 4 16:50:59 CEST 2012 on sn-devel-104
* s4-dsdb: Use data_blob_string_const and add explaination for open-coded ↵Andrew Bartlett2012-05-041-4/+6
| | | | | | | function in samldb Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri May 4 02:34:41 CEST 2012 on sn-devel-104
* s4-dsdb: Use strcasecmp_m() to compare possibly multibyte strings in samldbAndrew Bartlett2012-05-041-5/+5
|
* s4:samldb LDB module - make sure to not add identical ↵Matthias Dieter Wallnöfer2012-05-042-16/+88
| | | | | | | | | | "servicePrincipalName"s more than once The service principal names need to be case-insensitively unique, otherwise we end up in a LDB ERR_ATTRIBUTE_OR_VALUE_EXISTS error. This issue has been discovered on the technical mailing list (thread: cannot rename windows xp machine in samba4) when trying to rename a AD client workstation.
* UTIL_TDB: lowercase name.Jelmer Vernooij2012-05-033-3/+3
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Thu May 3 20:18:22 CEST 2012 on sn-devel-104
* s4:torture: add a new smb2.session.reauth3 test - getting security descriptorMichael Adam2012-05-031-0/+100
| | | | | Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Thu May 3 17:38:14 CEST 2012 on sn-devel-104
* provision: remove reference to no longer existing template files.Jelmer Vernooij2012-05-032-9/+6
|
* s4-samba-tool: make new samba-tool group listmembers use samAccountNameAndrew Bartlett2012-05-032-4/+4
| | | | | | | | | This is the unique username value. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Thu May 3 01:57:41 CEST 2012 on sn-devel-104
* s4-s3upgrade: Force ldapsam:trusted = yesAndrew Bartlett2012-05-031-0/+3
| | | | | | | | | | | | | While this setting is not the default in Samba3, any domain that is in a suitable condition to upgrade to Samba4 should already be in the layout that ldapsam:trusted uses. It can be turned off by setting ldapsam:trusted=false in the smb.conf. Many upgrades to Samba4 happen on a different host to the old Samba3 domain and this avoids the need to configure nss_ldap only for the duration of the upgrade. Andrew Bartlett
* Extension to the samba-tool group subcommand functionality to allow listing ↵Lukasz Zalewski2012-05-033-0/+91
| | | | of the members of an AD group
* s4-s3upgrade: Try harder to get group memberships on upgradeAndrew Bartlett2012-05-031-5/+20
| | | | | | | | | | | | This fixes an issue where some group types were not upgraded, as we did not upgrade alias memberships. It also uses enum_group_memberships() to try and find the memberships from the other direction, by asking which groups a user is a member of. As Samba3 (and NT4) does not implement nested groups, this should be safe. Andrew Bartlett
* s4:torture:rpc: add a new test samba3.smb2-pipe-read-logoffMichael Adam2012-05-021-0/+85
| | | | | | | | | | | - open a pipe via smb2 - trigger a read which hangs since there is nothing to read - do a logoff - wait for the read to return and check the status (STATUS_PIPE_BROKEN) Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Wed May 2 19:57:45 CEST 2012 on sn-devel-104
* s4:torture:rpc: add a new test samba3.smb2.pipe-read-tdisMichael Adam2012-05-021-0/+85
| | | | | | | | - open a pipe via smb2 - trigger a read which hangs since there is nothing to read - do a tree disconnect - wait for the read to return and check the status (STATUS_PIPE_BROKEN)
* s4:torture:rpc: add a test samba3.smb2-pipe-read-closeMichael Adam2012-05-021-0/+87
| | | | | | | | * open a pipe via smb2 * trigger a read which hangs since there is nothing to read * close the pipe file handle * wait for the read to reaturn and check the status (NT_STATUS_PIPE_BROKEN)
* s4:torture:rpc: fix a comment typo in samba3.smb2-reauth2Michael Adam2012-05-021-1/+1
|
* s4:torture:rpc: remove an accidentially committed character (in a comment)Michael Adam2012-05-021-1/+1
|
* s4-provision: Fix up --use-s3fs to create the directory for xattr.tdbAndrew Bartlett2012-05-021-4/+8
| | | | | Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed May 2 04:45:05 CEST 2012 on sn-devel-104
* s4-provision: Fix --use-s3fs to parse correctlyAndrew Bartlett2012-05-021-1/+1
|
* s4-provision: set 'dcerpc endpoint servers' but not 'vfs objects'Andrew Bartlett2012-05-021-1/+1
| | | | | | | The VFS objects are now set in the fileserver.conf, but this is only read by smbd, so the provision-time smb.conf needs to turn off the extra Samba4 DCE/RPC services. Andrew Bartlett
* s4-upgradedns: Update serverdn with only the attributes that have changedAmitay Isaacs2012-05-011-11/+21
| | | | | | | | This fixes the issue of ldb 'Operations Error' when trying to modify hasPartialReplicaNCs attribute. Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Tue May 1 05:28:04 CEST 2012 on sn-devel-104
* s4:samldb LDB module - homogenize LDB search attributes arraysMatthias Dieter Wallnöfer2012-04-301-13/+13
| | | | | | | | | | | First they do not need to be "static" any longer since we have abandoned asynchronous result handling (where global variables have been important). In addition add some "const" in order to protect us from unwanted writes. Reviewed-by: Andrew Bartlett Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Mon Apr 30 16:46:20 CEST 2012 on sn-devel-104
* s4-libnet: Add mem_ctx to libnet_rpc_groupdel calls (bug #8889)Andrew Bartlett2012-04-301-2/+3
| | | | | Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Apr 30 14:41:36 CEST 2012 on sn-devel-104
* s4-libnet: Add mem_ctx to libnet_rpc_groupadd calls (bug #8889)Andrew Bartlett2012-04-302-4/+5
|
* s4-libnet: Add mem_ctx to libnet_rpc_usermod calls (bug #8889)Andrew Bartlett2012-04-302-3/+4
|
* s4-libnet: Add mem_ctx to libnet_rpc_userdel calls (bug #8889)Andrew Bartlett2012-04-302-4/+5
|