summaryrefslogtreecommitdiffstats
path: root/libcli
Commit message (Collapse)AuthorAgeFilesLines
* Fix bug #8811 - sd_has_inheritable_components segfaults on an SD that ↵Jeremy Allison2012-03-141-0/+4
| | | | | | | se_access_check accepts. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Mar 14 05:08:03 CET 2012 on sn-devel-104
* Fix bug #8795 - Samba does not handle the Owner Rights permissions at allRichard Sharpe2012-03-143-6/+49
| | | | | | | Signed-off-by: Jeremy Allison <jra@samba.org> Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Mar 14 02:26:34 CET 2012 on sn-devel-104
* tdb_wrap: Move to specific directory.Jelmer Vernooij2012-03-101-1/+1
| | | | | | | | | | It's a bit confusing to mix low-level and high-level libraries. We had multiple libraries in one directory, and there were have circular dependencies with other libraries outside that directory (in this case, samba-hostconfig). Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sat Mar 10 23:13:01 CET 2012 on sn-devel-104
* Fix bug #8797 - Samba does not correctly handle DENY ACEs when privileges apply.Richard Sharpe2012-03-101-26/+28
| | | | | | | Signed-off-by: Jeremy Allison <jra@samba.org> Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Sat Mar 10 01:33:45 CET 2012 on sn-devel-104
* libcli:smb: define SMB2_HDR_FLAG_REPLAY_OPERATIONMichael Adam2012-03-041-0/+1
| | | | | Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Sun Mar 4 15:10:38 CET 2012 on sn-devel-104
* smbXcli: add the possiblilty to negotiate client capabilites in smb >= 2.2Michael Adam2012-03-032-3/+11
| | | | Pair-Programmed-With: Stefan Metzmacher <metze@samba.org>
* libcli:smb: define SMB2_DHANDLE_FLAG_PERSISTENTMichael Adam2012-03-031-0/+5
|
* libcli:smb: add new SMB2 share flagsMichael Adam2012-03-031-1/+5
| | | | | | | * FORCE_LEVELII_OPLOCKS * ENABLE_HASH_V1 * ENABLE_HASH_V2 * ENCRYPT_DATA
* libcli:smb: upgrade SMB2_CAP_ALL to include the newly known capsMichael Adam2012-03-031-1/+8
|
* libcli:smb: add defines for SMB2.2 share capabilitiesMichael Adam2012-03-031-1/+4
| | | | | | * continuous avaliability * cluster * scaleout
* libcli:smb: add defines for SMB2.2 global capabilitiesMichael Adam2012-03-031-4/+9
| | | | | | | * multi channel * persistent handles * directory leasing * encryption
* libcli:smb: define DH2Q and DH2C tags for smb2 extra create blobsMichael Adam2012-03-031-0/+2
| | | | | | | | These are the tags for the SMB2_CREATE_DURABLE_HANDLE_REQUEST_V2 and SMB2_CREATE_DURABLE_HANDLE_RECONNECT_V2, the second version of the SMB2_CREATE_DURABLE_HANDLE_REQUEST (DHnQ) and SMB2_CREATE_DURABLE_HANDLE_RECONNECT (DHnC), which are only available for SMB 2.2 (and newer).
* smb2_constants: fix a typoChristian Ambach2012-03-031-1/+1
| | | | | Autobuild-User: Christian Ambach <ambi@samba.org> Autobuild-Date: Sat Mar 3 09:04:40 CET 2012 on sn-devel-104
* smb2_constants: add SMB2_WATCH_TREEChristian Ambach2012-03-021-0/+3
|
* libcli/smb/smb2_signing: rename smb2_key_deviration -> smb2_key_derivationMichael Adam2012-02-293-5/+5
| | | | | Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Wed Feb 29 09:01:54 CET 2012 on sn-devel-104
* libcli/smb/smbXcli: use smb2_key_deviration() to setup SMB 2.24 keysStefan Metzmacher2012-02-291-2/+41
| | | | | | | | | | | | This uses the key diveration function from "NIST Special Publication 800-108" in counter mode (section 5.1). Thanks to Jeremy, Michael and Volker for the debugging! metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Feb 29 04:54:48 CET 2012 on sn-devel-104
* libcli/smb/smb2_signing: implement aes_cmac_128 based signing for SMB 2.24Stefan Metzmacher2012-02-291-18/+58
| | | | metze
* libcli/smb/smb2_signing: add smb2_key_deviration()Stefan Metzmacher2012-02-292-0/+37
| | | | | | | | | This implements a simplified version of "NIST Special Publication 800-108" section 5.1 using hmac-sha256. Thanks to Jeremy, Michael and Volker for the debugging! metze
* libcli/smb/smb2_signing: pass down 'protocol' to smb2_signing_[sign|check]_pdu()Stefan Metzmacher2012-02-274-2/+11
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Feb 27 14:26:32 CET 2012 on sn-devel-104
* libcli/smb/smb2_signing: rename session_key to signing_keyStefan Metzmacher2012-02-272-9/+9
| | | | metze
* libcli/smb/smbXcli: remove unused if statement from ↵Stefan Metzmacher2012-02-271-3/+1
| | | | | | smb2cli_conn_dispatch_incoming() metze
* libcli/smb/smbXcli: add smb2cli_session_application_key()Stefan Metzmacher2012-02-272-0/+28
| | | | metze
* libcli/smb/smbXcli: maintain smb2 channel_signing_key separate from the ↵Stefan Metzmacher2012-02-272-58/+131
| | | | | | | | | | | | | | | signing_key The signing_key is fix across all channels and is used for session setups on a channel binding. Note: - the last session setup response is signed with the new channel signing key. - the reauth session setups are signed with the channel signing key. It's also not needed to remember the main session key. metze
* libcli/smb/smbXcli: remove unused checks from smb2cli_session_create_channel()Stefan Metzmacher2012-02-271-11/+0
| | | | metze
* libcli: Remove a pointless checkVolker Lendecke2012-02-251-3/+1
| | | | "n" is size_t, so it is always >=0.
* Honor SeTakeOwnershiPrivilege when client asks for SEC_STD_WRITE_OWNER but ↵Richard Sharpe2012-02-221-0/+5
| | | | | | | has no permission for that, but token has SeTakeOwnershipPrivilege Autobuild-User: Richard Sharpe <sharpe@samba.org> Autobuild-Date: Wed Feb 22 19:19:32 CET 2012 on sn-devel-104
* auth: Move the rest of the source4 gensec_ntlmssp code to the top levelAndrew Bartlett2012-02-172-3/+3
| | | | | | | | | | The ntlmssp_server code will be in common shortly, and aside from a symbol name or two, moving the client code causes no harm and makes less mess. We will also get the client code in common very soon. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* auth/kerberos: Move gse_get_session_key() to common code and use in ↵Andrew Bartlett2012-02-171-0/+17
| | | | | | | | | gensec_gssapi Thie ensures that both code bases use the same logic to determine the use of NEW_SPNEGO. Andrew Bartlett
* libcli/smb: Convert struct smb_trans_enc_state to tallocAndrew Bartlett2012-01-313-22/+2
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-libsmb: Remove unused enum smb_trans_enc_typeAndrew Bartlett2012-01-311-7/+0
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* libcli/util: fix typo in nt_errs[] for NT_STATUS_NETWORK_SESSION_EXPIREDStefan Metzmacher2012-01-291-1/+1
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sun Jan 29 14:11:12 CET 2012 on sn-devel-104
* libcli/smb: fix smbXcli_negprot(..., PROTOCOL_NT1, PROTOCOL_SMB2_02)Stefan Metzmacher2012-01-271-3/+6
| | | | | | | | | | The SMB1 negprot request already consumed the SMB2 sequence '0'. This also happens for the SMB 2.02 case. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri Jan 27 15:27:41 CET 2012 on sn-devel-104
* lib: use differing NTSTATUS and WERROR struct membersDavid Disseldorp2012-01-231-2/+2
| | | | | | | | | | | This allows the compiler to catch uses of incorrectly typed arguments for [NT_STATUS|W_ERROR]_IS_OK() and [NT_STATUS|W_ERROR]_EQUAL(). I.e. WERROR werr; werr = my_fn(); /* XXX returns WERROR type */ if (NT_STATUS_EQUAL(werr, NT_STATUS_OBJECT_NAME_COLLISION)) {
* s3-libsmb: Always allow SMB_TRANS_ENC_GSS to be definedAndrew Bartlett2012-01-211-4/+2
| | | | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sat Jan 21 01:28:54 CET 2012 on sn-devel-104
* s3-libsmb: Remove unused smb_tran_enc_state_gss and gssapi headersAndrew Bartlett2012-01-201-15/+0
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-libsmb: use struct gensec_security directlyAndrew Bartlett2012-01-202-7/+5
| | | | | | | | This is rather than via a now one-element union. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-libcli Change krb5 smb sealing to call via gensec and gensec_gseAndrew Bartlett2012-01-202-199/+4
| | | | | | | | | This also fixes the support for smb sealing with krb5 in make test, as this now relies on secrets.tdb rather than /etc/krb5.keytab. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* auth/kerberos: Remove unused TALLOC_CTX argument to check_pac_checksumAndrew Bartlett2012-01-121-2/+1
|
* Second part of fix for bug #8673 - NT ACL issue.Jeremy Allison2012-01-111-3/+4
| | | | | | | | | | | Ensure we process the entire ACE list instead of returning ACCESS_DENIED and terminating the walk - ensure we only return the exact bits that cause the access to be denied. Some of the S3 fileserver needs to know if we are only denied DELETE access before overriding it by looking at the containing directory ACL. Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Wed Jan 11 19:24:53 CET 2012 on sn-devel-104
* krb5: Require krb5_string_to_key be available to build with krb5Andrew Bartlett2012-01-101-1/+1
|
* krb5: Require krb5_principal_compare_any_realm be available to build with krb5Andrew Bartlett2012-01-101-28/+0
|
* krb5: Require krb5_c_verify_checksum is available to build with krb5Andrew Bartlett2012-01-101-63/+20
|
* libcli/smb: Add smbXcli_conn_samba_suicideVolker Lendecke2012-01-052-0/+105
| | | | This is a pure test tool against Samba servers
* Fix the build without kerberosVolker Lendecke2012-01-011-0/+2
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Sun Jan 1 23:56:24 CET 2012 on sn-devel-104
* auth/kerberos: Move gssapi_parse.c to the top levelAndrew Bartlett2011-12-281-0/+4
| | | | | | This will help with writing a gensec module for the s3 gse layer. Andrew Bartlett
* lib: Fix NT_STATUS_ALL_SIDS_FILTERED definitionVolker Lendecke2011-12-231-1/+1
| | | | | | | | | This seems to be more in line with all the other NT_STATUS definitions. Metze, please check. Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Fri Dec 23 23:19:17 CET 2011 on sn-devel-104
* libcli/smb: add PROTOCOL_SMB2_24 supportStefan Metzmacher2011-12-222-1/+3
| | | | metze
* libcli/smb: add SMB2_DIALECT_REVISION_224Stefan Metzmacher2011-12-221-0/+1
| | | | | | This is specified in the new [MS-SMB2] preview document. metze
* libcli/util: add NT_STATUS_NETWORK_SESSION_EXPIRED and ↵Stefan Metzmacher2011-12-172-0/+4
| | | | | | | | | NT_STATUS_ALL_SIDS_FILTERED metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Sat Dec 17 14:24:40 CET 2011 on sn-devel-104
* libcli: Remove an unused variableVolker Lendecke2011-12-121-1/+0
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Mon Dec 12 23:21:49 CET 2011 on sn-devel-104