summaryrefslogtreecommitdiffstats
path: root/source3/librpc
Commit message (Collapse)AuthorAgeFilesLines
...
* s3-gse Remove or make static unused/local-only GSE functionsAndrew Bartlett2012-01-182-270/+33
| | | | | | | | | The GSE layer is now used via the GENSEC module, so we do not need these functions exposed any more. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc Remove layer around struct gensec_securityAndrew Bartlett2012-01-182-11/+9
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc: Simplify SPNEGO code now that all mechs use a struct gensec_securityAndrew Bartlett2012-01-183-80/+28
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc Call SPENGO/GSSAPI via the auth_generic layer and gensecAndrew Bartlett2012-01-183-120/+19
| | | | | | | | | | This simplifies a lot of code, as we know we are always dealing with a struct gensec_security, and allows the gensec module being used to implement GSSAPI to be swapped for AD-server operation. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc Allow spnego_generic_init_client to handle kerberos tooAndrew Bartlett2012-01-181-0/+2
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc Call GSSAPI via the auth_generic layer and gensecAndrew Bartlett2012-01-181-108/+3
| | | | | | | | | | This simplifies a lot of code, as we know we are always dealing with a struct gensec_security, and allows the gensec module being used to implement GSSAPI to be swapped when required for AD-server operation. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-gse Make gse available as a gensec client moduleAndrew Bartlett2012-01-182-1/+3
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-gse: Add gensec wrapper for gse GSSAPI clientAndrew Bartlett2012-01-181-0/+440
| | | | | | | | | This brings in part of the s4 gensec_gssapi as the boilerplate for the new module. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3: Put an indirection layer into share_mode_lockVolker Lendecke2012-01-121-1/+1
| | | | Signed-off-by: Jeremy Allison <jra@samba.org>
* s3-librpc Supply target service and server to spnego_generic_init_client()Andrew Bartlett2012-01-112-0/+16
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc: Rename spnego_ntlmssp_init_client and make genericAndrew Bartlett2012-01-112-4/+15
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc: rename get_ntlmssp_auth_footer to be more genericAndrew Bartlett2012-01-111-5/+5
| | | | | | | | This can handle any gensec auth type now. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc Return user principal name on supplied mem_ctxAndrew Bartlett2012-01-111-3/+3
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-libsmb Make auth_ntlmssp client more genericAndrew Bartlett2012-01-061-12/+13
| | | | | | | | | As well as renaming, this allows us to start the mech by DCE/RPC auth type or OID. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc remove unused headersAndrew Bartlett2012-01-051-2/+0
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3:gse: MIT krb5 1.8.1 has a bug in gss_wrap_iov()Stefan Metzmacher2012-01-051-1/+1
| | | | | | gss_krb5int_make_seal_token_v3_iov() doesn't set '*conf_state'. metze
* s3-librpc store the sign/seal flags we got in the gssapi clientAndrew Bartlett2012-01-051-1/+1
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-libads Factor out a new routine ↵Andrew Bartlett2012-01-051-3/+11
| | | | | | | | | | | | kerberos_get_principal_from_service_hostname() This is now used in the GSE GSSAPI client, so that when we connect to a target server at the CIFS level, we use the same name to connect at the DCE/RPC level. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc Use gsskrb5_get_subkey() where available to get the session keyAndrew Bartlett2012-01-051-0/+15
| | | | | | | | This allows gse_get_session_key() to work against Heimdal. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-librpc Use gensec_sig_size() instead of a fixed NTLMSSP_SIG_SIZEAndrew Bartlett2011-12-221-2/+7
| | | | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu Dec 22 20:57:27 CET 2011 on sn-devel-104
* s3-auth rename auth_ntlmssp_state -> auth_generic_stateAndrew Bartlett2011-12-221-1/+1
| | | | | | | | | This structure handles more than NTLMSSP now, at least when we are an AD DC and so changing the name may avoid some confusion in the future. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3: Convert open_files.idl to tab indentsVolker Lendecke2011-12-131-34/+34
|
* s3:messaging.idl: obsolete unused MSG_SMB_SAM_*Stefan Metzmacher2011-12-131-2/+2
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Dec 13 14:13:38 CET 2011 on sn-devel-104
* s3: Use autogenerated open_files.idlVolker Lendecke2011-12-022-1/+6
|
* s3: Add open_files.idlVolker Lendecke2011-12-021-0/+48
|
* s3: Remove some leftovers of old ctdb tdb2 codeVolker Lendecke2011-10-311-16/+1
|
* s3-ntlmssp Remove references to auth_ntlmssp_context from the rpc codeAndrew Bartlett2011-10-213-32/+35
| | | | | | | | | We always dereferenced auth_ntlmssp_state->gensec_security, so now we do not bother passing around the whole auth_ntlmssp_state. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp Remove auth_ntlmssp_session_key()Andrew Bartlett2011-10-211-2/+7
| | | | | | | | We now just call the gensec_session_key() directly. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp Remove auth_ntlmssp_want_feature()Andrew Bartlett2011-10-211-4/+4
| | | | | | | | We now just call the gensec_want_feature() directly. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp use gensec_{seal,unseal,sign,check}_packetAndrew Bartlett2011-10-212-50/+51
| | | | | | | | This avoids the indirection via the auth_ntlmsssp wrapper functions. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp Remove auth_ntlmssp_update wrapperAndrew Bartlett2011-10-211-2/+3
| | | | | | | | We now just call gensec_update directly. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlmssp split auth_ntlmssp_client_start() into two partsAndrew Bartlett2011-10-181-4/+7
| | | | | | | | | | | This will allow it to be a wrapper around a gensec module, which requires that they options be set on a context, but before the mechanism is started. This also simplfies the callers, by moving the lp_*() calls into one place. Andrew Bartlett
* ntlmssp: Move ntlmssp code to auth/ntlmsspAndrew Bartlett2011-10-182-2/+2
| | | | | | | | | This brings in the code from both libcli/auth and source4/auth/ntlmssp. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3: Remove an unused variableVolker Lendecke2011-09-301-2/+0
|
* s3-id_cache: Use better names for id cache management opsAndreas Schneider2011-08-211-3/+3
| | | | | | | The IDMAP term is normally associated with Winbind's idmap stuff. These functions deal with id caching not id mapping. Signed-off-by: Simo Sorce <idra@samba.org>
* s3-messaging: Add preforked child-parent message typesSimo Sorce2011-08-211-0/+3
| | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Signed-off-by: Simo Sorce <idra@samba.org>
* s3-rpc_server: Use rpc_epmapper_mode() in ep_register()Simo Sorce2011-08-211-6/+5
| | | | | Signed-off-by: Andreas Schneider <asn@samba.org> Signed-off-by: Simo Sorce <idra@samba.org>
* Revert "s3-messaging: IDMAP_ messages belongs to the Winbind range"Simo Sorce2011-08-191-4/+4
| | | | | | | | | | This reverts commit 102f39ae3e7df26faf81595c8e0120b2e2a45bbd. These messages are handled by smbd not winbind, and could potentially be of general interest. Autobuild-User: Simo Sorce <idra@samba.org> Autobuild-Date: Fri Aug 19 16:16:05 CEST 2011 on sn-devel-104
* s3-messaging: IDMAP_ messages belongs to the Winbind rangeSimo Sorce2011-08-161-4/+4
| | | | | Autobuild-User: Simo Sorce <idra@samba.org> Autobuild-Date: Tue Aug 16 22:27:05 CEST 2011 on sn-devel-104
* s3-messaging: Change classification of MSG_SMB_CONF_UPDATED.Simo Sorce2011-08-111-1/+4
| | | | | | | | smbd is not the only daemon interested in smb.conf changes. Move this message to the GENERAL class so that all interested partied (nmbd, winbindd, spoolssd, etc..) can receive this notification. Signed-off-by: Andreas Schneider <asn@samba.org>
* s3-messaging: Fix messaging classes.Simo Sorce2011-08-111-1/+1
| | | | | | | | | | | | This has been broken since ff0ac5b0 (May 2007). Basically all messages were belonging to the General class except for CTDB messages. This fixed the message_send_all() function to correctly compute the class, and fixes registrations to include all they need to cope with the fact not all messages are of calss general (registrations rotted a bit because as long as FLAG_MSG_GENERAL was defined the process woould receive all messages). Signed-off-by: Andreas Schneider <asn@samba.org>
* s3-messaging: Remove obsolete class.Simo Sorce2011-08-111-1/+1
| | | | | | | The FLAG_MSG_PRINT_NOTIFY class is actually obsolete and never used, as the only message belonging to it is not used either. Signed-off-by: Andreas Schneider <asn@samba.org>
* selftest: test plugin_s4_dc against all ncacn_np testsAndrew Bartlett2011-08-031-0/+2
| | | | | | | Changes to the s3 epmapper behaviour seem to have fixed the rest of these tests. Andrew Bartlett
* s3-ntlmssp Remove auth_ntlmssp_and_flags()Andrew Bartlett2011-08-031-7/+0
| | | | | | | | | | | There is no need to mask out these flags as they simply are not set yet. The correct abstraction is to ask for NTLMSSP features. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-ntlmssp Remove auth_ntlmssp_or_flagsAndrew Bartlett2011-08-031-5/+4
| | | | | | | | | We now just use auth_ntlmssp_want_feature to get extra flags on the NTLMSSP context Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-ntlmssp Remove calls to auth_ntlmssp_and_flags from the serverAndrew Bartlett2011-08-031-0/+1
| | | | | | | | | | | | This is changed so that the callers ask for the additional flags that they need, starting with no additional flags. This helps to create a proper abstraction layer in ntlmssp_wrap/auth_ntlmssp. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-ntlmssp Add mem_ctx argument to auth_ntlmssp_updateAndrew Bartlett2011-08-031-1/+1
| | | | | | | | This clarifies the lifetime of the returned token. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-ntlmssp Add mem_ctx argument to auth_ntlmssp_get_session_key()Andrew Bartlett2011-08-031-3/+2
|
* gensec: Remove mem_ctx from calls that do not return memoryAndrew Bartlett2011-08-031-2/+2
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-librpc: Remove obsolete dcerpc_binding_vector_create().Andreas Schneider2011-08-012-111/+0
|