| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
Andrew Bartlett
|
|
|
|
| |
Andrew Bartlett
|
| |
|
|
|
|
| |
Gunderson)
|
|
|
|
|
|
|
| |
Gunderson).
this still doesn't work as a bug in ldb causes it to not understand
escaped characters in DNs when parsing DNs
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
dependencies
with proto.h
|
|
|
|
|
|
|
| |
subsystems.
This allows Samba libraries to be used by other projects (and parts of
Samba to be built as shared libraries).
|
| |
|
|
|
|
| |
Andrew Bartlett
|
| |
|
|
|
|
|
|
| |
with debugging!
Andrew Bartlett
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
lookups in load_interfaces(). The reason was my eth0 interface was
down, and it was being interpreted as a DNS name.
This patch changes load_interfaces() to happening automatically when
interfaces are first needed instead of on the startup of every samba
binary. This means that (for example) ldbadd doesn't call
load_interfaces(), which means no slow DNS lookups.
I also reduced the number of static globals in interface.c to 1, and
changed from malloc to talloc
When you want to force a reload of the interfaces list, you now call
unload_interfaces(), which means the next call that needs the
interfaces list will reload it
|
| |
|
| |
|
|
|
|
| |
Be a bit more strict when checking for duplicate interfaces
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
dcerpc_interface_table struct rather then a tuple of interface
name, UUID and version.
This removes the requirement for having a global list of DCE/RPC interfaces,
except for these parts of the code that use that list explicitly
(ndrdump and the scanner torture test).
This should also allow us to remove the hack that put the authservice parameter
in the dcerpc_binding struct as it can now be read directly from
dcerpc_interface_table.
I will now modify some of these functions to take a dcerpc_syntax_id
structure rather then a full dcerpc_interface_table.
|
|
|
|
|
| |
now that it is guaranteed that the smbcalls modules are always initialized
after the EJS subsystem itself.
|
|
|
|
|
|
| |
'librpc'
are the only two subsystems left to convert.
|
| |
|
| |
|
| |
|
|
|
|
| |
its own credentials element
|
|
|
|
|
|
| |
server. Now to try another one...
Andrew Bartlett
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
backend.
The idea is that every time we open an LDB, we can provide a
session_info and/or credentials. This would allow any ldb to be remote
to LDAP. We should also support provisioning to a authenticated ldap
server.
(They are separate so we can say authenticate as foo for remote, but
here we just want a token of SYSTEM).
Andrew Bartlett
|
| |
|
|
|
|
|
|
|
| |
This is one of the last places using the latter function.
rafal
|
|
|
|
|
|
| |
to match all other _recv functions we have
metze
|
|
|
|
| |
metze
|
|
|
|
| |
metze
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This merges Samba4 up to current lorikeet-heimdal, which includes a
replacement for some Samba-specific hacks.
In particular, the credentials system now supplies GSS client and
server credentials. These are imported into GSS with
gss_krb5_import_creds(). Unfortunetly this can't take an MEMORY
keytab, so we now create a FILE based keytab as provision and join
time.
Because the keytab is now created in advance, we don't spend .4s at
negprot doing sha1 s2k calls. Also, because the keytab is read in
real time, any change in the server key will be correctly picked up by
the the krb5 code.
To mark entries in the secrets which should be exported to a keytab,
there is a new kerberosSecret objectClass. The new routine
cli_credentials_update_all_keytabs() searches for these, and updates
the keytabs.
This is called in the provision.js via the ejs wrapper
credentials_update_all_keytabs().
We can now (in theory) use a system-provided /etc/krb5.keytab, if
krb5Keytab: FILE:/etc/krb5.keytab
is added to the secrets.ldb record. By default the attribute
privateKeytab: secrets.keytab
is set, pointing to allow the whole private directory to be moved
without breaking the internal links.
|
| |
|
|
|
|
|
|
|
|
| |
2) Set credentials workstation name, otherwise rpc bind function
segfaults on auth stage
rafal
|
|
|
|
|
|
| |
smbsrv_connection
metze
|
|
|
|
|
|
|
| |
of smb.conf.
rafal
|
|
|
|
| |
rafal
|
|
|
|
|
|
|
|
|
|
|
|
| |
functionalities into groups of subcontexts of net subcontext just the
way it's done in net tool. This way we can pass common arguments when
creating subcontext. Also, this may allow easier writing net tool
completely as a script.
At the moment there's a name resolve code segfault to be fixed.
rafal
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This patch changes the way lsb_search is called and the meaning of the returned integer.
The last argument of ldb_search is changed from struct ldb_message to struct ldb_result
which contains a pointer to a struct ldb_message list and a count of the number of messages.
The return is not the count of messages anymore but instead it is an ldb error value.
I tryed to keep the patch as tiny as possible bu as you can guess I had to change a good
amount of places. I also tried to double check all my changes being sure that the calling
functions would still behave as before. But this patch is big enough that I fear some bug
may have been introduced anyway even if it passes the test suite. So if you are currently
working on any file being touched please give it a deep look and blame me for any error.
Simo.
|
| |
|
|
|
|
| |
argument to split()
|
|
|
|
|
| |
pieces a string is split into. This allows for a fix in the variable
substitution used in provisioning
|
|
|
|
| |
needed for mmc management of Samba4.
|
| |
|
|
|
|
|
| |
- speed up provisioning a bit using a ldb transaction (also means you
can't end up with a ldb being half done)
|
|
|
|
|
|
|
|
| |
js arrays are a special type of object where the length property is
automatic, and cannot be modified manually. Our code was manually
setting length, which made it abort when someone passed in a real ejs
array. To fix this we need to create real arrays instead of objects,
and remove the code that manually sets the length
|
|
|
|
|
|
| |
logon_parameters for the auth subsystem.
Andrew Bartlett
|
| |
|
|
|
|
|
| |
problem is really caused by hklm not having objectclass attributes on
its records, but this is a workaround)
|