| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
| |
can not figure that we got no ticket.
Volker
|
| |
|
|
|
|
|
|
|
|
|
| |
Server code *should* also work (I'll check shortly). May be the odd memory
leak. Problem was we (a) weren't setting signing on in the client krb5 sessionsetup
code (b) we need to ask for a subkey... (c). The client and server need to
ask for local and remote subkeys respectively.
Thanks to Paul Nelson @ Thursby for some sage advice on this :-).
Jeremy.
|
| |
|
|
|
|
|
|
| |
session key and auth verifier patches.
Andrew Bartlett
|
|
|
|
|
|
|
|
|
|
| |
- new kerberos code, allowing the account to change it's own password
without special SD settings required
- NTLMSSP client code, now seperated from cliconnect.c
- NTLMv2 client code
- SMB signing fixes
Andrew Bartlett
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- setenv() replacement
- mimir's ASN1/SPNEGO typo fixes
- (size_t)-1 fixes for push_* returns
- function argument signed/unsigned correction
- ASN1 error handling (ensure we don't use initiailsed data)
- extra net ads join error checking
- allow 'set security discriptor' to fail
- escape ldap strings in libads.
- getgrouplist() correctness fixes (include primary gid)
Andrew Bartlett
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- NTLMSSP over SPENGO (sesssion-setup-and-x) cleanup and code refactor.
- also consequential changes to the NTLMSSP and SPNEGO parsing functions
- and the client code that uses the same functions
- Add ntlm_auth, a NTLMSSP authentication interface for use by applications
like Squid and Apache.
- also consquential changes to use common code for base64 encode/decode.
- Winbind changes to support ntlm_auth (I don't want this program to need
to read smb.conf, instead getting all it's details over the pipe).
- nmbd changes for fstrcat() instead of fstrcpy().
Andrew Bartlett
|
| |
|
| |
|
| |
|
|
|
|
| |
Andrew Bartlett
|
|
|
|
| |
Changed "SMB/Netbios" to "SMB/CIFS" in file header.
|
| |
|
|
|
|
| |
cyrus-sasl which makes the code much less fragile. Also added code to auto-determine the server name or realm
|
|
|
|
|
| |
name is a "principal", not a principle. English majors will complain :-).
Jeremy.
|
| |
|
|
|
|
|
| |
it should give something for others to hack on and possibly find what
I'm doing wrong.
|
|
|
|
|
|
| |
loses things like username mapping. I wanted to get this in then
discuss it a bit to see how we want to split up the existing
session setup code
|
|
|
|
| |
in the asn1 spnego structures)
|
| |
|
|
enabled it by default if the server supports it. Let me know if this breaks anything. Choose kerberos with the -k flag to smbclient, otherwise it will use SPNEGO/NTLMSSP/NTLM
|