summaryrefslogtreecommitdiffstats
path: root/source/libads/sasl.c
Commit message (Collapse)AuthorAgeFilesLines
* r25407: Revert Longhorn join patch as it is not correct for the 3.2 tree.Gerald Carter2007-09-281-3/+1
| | | | | | The translate_name() used by cli_session_setup_spnego() cann rely Winbindd since it is needed by the join process (and hence before Winbind can be run).
* r25403: grab latest changes form 3.2 tree in preparation for release of ↵Gerald Carter2007-09-281-1/+3
| | | | 3.2.0pre1
* r25387: Sync with 3.2.0 svn treeGerald Carter2007-09-271-51/+14
|
* r24804: As a temporary workaround, also try to guess the server's principal ↵Günther Deschner2007-08-301-41/+12
| | | | | | | | | in the "not_defined_in_RFC4178@please_ignore" case to make at least LDAP SASL binds succeed with windows server 2008. Guenther
* r24251: Neverending fun:Günther Deschner2007-08-061-1/+1
| | | | | | | | Heimdal doesn't accept all OIDs and gss_import_name() fails with GSS_S_BAD_NAMETYPE using this one. Use the GSS_KRB5_NT_PRINCIPAL_NAME OID instead (which works with at least MIT 1.6.1 and Heimdal 1.0.1). Guenther
* r24132: merge from SAMBA_3_2:Stefan Metzmacher2007-08-021-33/+44
| | | | | | | | | | - make it more clear what the different min and max fields mean - with the "GSSAPI" sasl mech the plain, sign or seal negotiation is independed from the req_flags and ret_flags - verify the server supports the wrapping type we want - better handling on negotiated buffer sizes metze
* r24129: merge from SAMBA_3_2:Stefan Metzmacher2007-08-021-6/+7
| | | | | | fix double free in error path metze
* r24105: merge from SAMBA_3_2:Stefan Metzmacher2007-07-311-3/+20
| | | | | | | add some useful debug messages, as not all LDAP libraries support wrapping hooks... metze
* r24099: merge from SAMBA_3_2:Stefan Metzmacher2007-07-311-61/+32
| | | | | | | | | - make use of the ads_service_principal abstraction also for the "GSSAPI" sasl mech. - also use the ads_kinit_password() fallback logic from the "GSS-SPNEGO" sasl mech. metze
* r24096: merge from SAMBA_3_2:Stefan Metzmacher2007-07-311-0/+20
| | | | | | | add one more fallback alternative to construct the principal metze
* r24094: merge from SAMBA_3_2:Stefan Metzmacher2007-07-311-88/+146
| | | | | | move gssapi/krb5 principal handling into a function metze
* r24063: merge from SAMBA_3_2:Stefan Metzmacher2007-07-271-1/+2
| | | | | | | fix logic for broken krb5 libs which always force sign and seal... metze
* r24045: merge from SAMBA_3_2:Stefan Metzmacher2007-07-251-1/+309
| | | | | | add support for krb5 sign and seal in LDAP via "GSS-SPNEGO" metze
* r24043: merge from SAMBA_3_0 (r22092-r22093):Stefan Metzmacher2007-07-251-1/+1
| | | | | | | | | | | | - make spnego_parse_auth_response() more generic and not specific for NTLMSSP - it's possible that the server sends a mechOID and authdata if negResult != SPNEGO_NEG_RESULT_INCOMPLETE, but we still force the mechOID to be present if negResult == SPNEGO_NEG_RESULT_INCOMPLETE - send also the correct OID_KERBEROS5 not only the broken OID_KERBEROS_OLD one. metze
* r24038: merge from SAMBA_3_2:Stefan Metzmacher2007-07-251-2/+4
| | | | | | only setup sasl wrapping after a successful bind metze
* r23953: Some C++ warningsVolker Lendecke2007-07-181-3/+6
|
* r23949: merge from SAMBA_3_2:Stefan Metzmacher2007-07-181-5/+135
| | | | | | | | add gsskrb5 sign and seal support for LDAP connections NOTE: only for the "GSSAPI" SASL mech yet metze
* r23947: merge from SAMBA_3_2:Stefan Metzmacher2007-07-181-1/+122
| | | | | | | | add support for NTLMSSP sign and seal NOTE: windows servers are broken with sign only... metze
* r23944: merge from SAMBA_3_2:Stefan Metzmacher2007-07-181-0/+8
| | | | | | | - always provide ads_setup_sasl_wrapping() function - read/write returning 0 means EOF and we need to return direct metze
* r23889: merge from SAMBA_3_2:Stefan Metzmacher2007-07-161-6/+6
| | | | | | | move elements belonging to the current ldap connection to a substructure. metze
* r23784: use the GPLv3 boilerplate as recommended by the FSF and the license textAndrew Tridgell2007-07-101-2/+1
|
* r23780: Find and fix more GPL2 -> GPL3.Jeremy Allison2007-07-091-1/+1
| | | | Jeremy.
* r23200: More merge's:Gerald Carter2007-05-291-5/+10
| | | | | * A little const * Metze's fix for GSS-SPNEGO against Win2k3
* r22844: Introduce const DATA_BLOB data_blob_null = { NULL, 0, NULL }; andVolker Lendecke2007-05-141-9/+9
| | | | replace all data_blob(NULL, 0) calls.
* r22079: Tsk, tsk, Metze didn't compile before check-in :-).Jeremy Allison2007-04-041-3/+3
| | | | | Merge the memory leak fix (with fix :-) to 3.0.25. Jeremy.
* r21850: After Jerry explained to me the HORRIBLE way in whichJeremy Allison2007-03-151-5/+15
| | | | | | | | the MIT gss libraries *SUCK*, move the frees to the end of the function so MIT doesn't segfault..... Add a comment so that another engineer knows why I did this. Jeremy.
* r21847: Fix memory leaks in error paths (and in main code path in one case...)Jeremy Allison2007-03-151-5/+13
| | | | | in sasl bind. Wonder why coverity didn't find these ? Jeremy.
* r21273: * Protect the sasl bind against a NULL principal string Gerald Carter2007-02-101-1/+29
| | | | in the SPNEGO negTokenInit
* r21241: Merge from 3_0:Günther Deschner2007-02-081-2/+6
| | | | | | | | | | | | | | | | | | | Fix longstanding Bug #4009. For the winbind cached ADS LDAP connection handling (ads_cached_connection()) we were (incorrectly) assuming that the service ticket lifetime equaled the tgt lifetime. For setups where the service ticket just lives 10 minutes, we were leaving hundreds of LDAP connections in CLOSE_WAIT state, until we fail to service entirely with "Too many open files". Also sequence_number() in winbindd_ads.c needs to delete the cached LDAP connection after the ads_do_search_retry() has failed to submit the search request (although the bind succeeded (returning an expired service ticket that we cannot delete from the memory cred cache - this will get fixed later)). Guenther
* r20158: get rid of defined but not used warning - static function only usedHerb Lewis2006-12-131-0/+2
| | | | inside the #ifdef HAVE_KRB5
* r18047: More C++ stuffVolker Lendecke2006-09-041-3/+3
|
* r18019: Fix a C++ warnings: Don't use void * in libads/ for LDAPMessage anymore.Volker Lendecke2006-09-031-1/+1
| | | | | | | Compiled it on systems with and without LDAP, I hope it does not break the build farm too badly. If it does, I'll fix it tomorrow. Volker
* r17899: Fix Stanford checker bug - possible null deref.Jeremy Allison2006-08-291-2/+5
| | | | Jeremy.
* r16945: Sync trunk -> 3.0 for 3.0.24 code. Still needJeremy Allison2006-07-111-2/+0
| | | | | | | to do the upper layer directories but this is what everyone is waiting for.... Jeremy.
* r15210: Add wrapper functions smb_krb5_parse_name, smb_krb5_unparse_name,Jeremy Allison2006-04-241-1/+1
| | | | | | | smb_krb5_parse_name_norealm_conv that pull/push from unix charset to utf8 (which krb5 uses on the wire). This should fix issues when the unix charset is not compatible with or set to utf8. Jeremy.
* r13316: Let the carnage begin....Gerald Carter2006-02-031-5/+18
| | | | Sync with trunk as off r13315
* r13137: make cleare where long ifdefs endsSimo Sorce2006-01-251-2/+2
|
* r11504: Added Andrew Bartletts removal of another NTLMSSP implementationJeremy Allison2005-11-041-85/+89
| | | | | patch. Jeremy.
* r10656: BIG merge from trunk. Features not copied overGerald Carter2005-09-301-1/+1
| | | | | | | * \PIPE\unixinfo * winbindd's {group,alias}membership new functions * winbindd's lookupsids() functionality * swat (trunk changes to be reverted as per discussion with Deryck)
* r8989: Fix a warningVolker Lendecke2005-08-031-1/+1
|
* r7139: trying to reduce the number of diffs between trunk and 3.0; changing ↵Gerald Carter2005-05-311-4/+1
| | | | version to 3.0.20pre1
* r6149: Fixes bugs #2498 and 2484.Derrell Lipman2005-03-311-1/+4
| | | | | | | | | | | | | | | | | | 1. using smbc_getxattr() et al, one may now request all access control entities in the ACL without getting all other NT attributes. 2. added the ability to exclude specified attributes from the result set provided by smbc_getxattr() et al, when requesting all attributes, all NT attributes, or all DOS attributes. 3. eliminated all compiler warnings, including when --enable-developer compiler flags are in use. removed -Wcast-qual flag from list, as that is specifically to force warnings in the case of casting away qualifiers. Note: In the process of eliminating compiler warnings, a few nasties were discovered. In the file libads/sasl.c, PRIVATE kerberos interfaces are being used; and in libsmb/clikrb5.c, both PRIAVE and DEPRECATED kerberos interfaces are being used. Someone who knows kerberos should look at these and determine if there is an alternate method of accomplishing the task.
* r5952: BUG 2469: patch from Jason Mader to cleanup compiler warning when not ↵Gerald Carter2005-03-221-0/+4
| | | | using krb5
* r4088: Get medieval on our ass about malloc.... :-). Take control of all our ↵Jeremy Allison2004-12-071-1/+1
| | | | | | | | | allocation functions so we can funnel through some well known functions. Should help greatly with malloc checking. HEAD patch to follow. Jeremy.
* r1378: Better debugging so I don't get confused what principal we mean.Jeremy Allison2004-07-071-2/+2
| | | | Jeremy.
* r541: fixing segfault in winbindd caused -r527 -- looks like a bug in ↵Gerald Carter2004-05-071-1/+1
| | | | heimdal; also initialize some pointers
* r533: More memory leak fixes from kawasa_r@itg.hitachi.co.jp. I need toJeremy Allison2004-05-061-8/+32
| | | | | valgrind winbindd with these in.... Jeremy.
* r2: import HEAD into svn+ssh://svn.samba.org/home/svn/samba/trunkCVS Import User2004-04-041-0/+438
metze
generated by cgit (git 2.34.1) at 2025-09-26 15:11:31 +0000