summaryrefslogtreecommitdiffstats
path: root/source4/auth
Commit message (Collapse)AuthorAgeFilesLines
...
* pycredentials: Use talloc.Object.Jelmer Vernooij2010-12-011-2/+5
|
* s4:auth/gensec/gensec_tstream.c - quiet warnings on Solaris "cc"Matthias Dieter Wallnöfer2010-11-291-2/+2
|
* s4:auth/ntlmssp/ntlmssp_server.c - remove unnecessary ";"Matthias Dieter Wallnöfer2010-11-291-1/+1
|
* s4:auth/gensec/gensec_gssapi.c - always print error messages on the same ↵Matthias Dieter Wallnöfer2010-11-291-2/+2
| | | | talloc context
* s4-tests/bind.py: Use samba.tests.connect_samdb() instead of directly using ↵Kamen Mazdrashki2010-11-281-7/+10
| | | | | | | | | | | | | SamDB class connect_samdb() functino will correctly handle things like: - session_info param - it will create system_session() using supplied LoadParm parameter and thus avoiding creation of multiple LoadParm instances (LoadParm() will mask certain command line supplied options) - host url will be prefixed with ldap:// automatically Autobuild-User: Kamen Mazdrashki <kamenim@samba.org> Autobuild-Date: Sun Nov 28 03:00:41 CET 2010 on sn-devel-104
* s4-tests: Modified bind.py to use samba.tests.delete_forceNadezhda Ivanova2010-11-251-7/+2
|
* Avoid the use of PyAPI_DATA, which is for internal Python API's.Arnaud Faucher2010-11-221-2/+2
| | | | | | | Signed-off-by: Jelmer Vernooij <jelmer@samba.org> Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Mon Nov 22 00:52:56 CET 2010 on sn-devel-104
* s4-gensec: zero the gssapi_stateAndrew Tridgell2010-11-171-1/+1
| | | | | | this fixes a use of the target_principal before initialisation Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-gensec Indicate if GENSEC is in client or server mode in the debugAndrew Bartlett2010-11-151-2/+4
|
* auth/ntlm: Use name consistent with other service names.Jelmer Vernooij2010-11-151-1/+1
|
* auth/gensec Handle incorrect username or password in Kerberos client codeAndrew Bartlett2010-11-152-0/+3
| | | | | | | Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Mon Nov 15 02:09:40 UTC 2010 on sn-devel-104
* s4-auth: fixed infinite loop in krb5 authAndrew Tridgell2010-11-141-1/+1
| | | | | | | | we were continually trying the first address returned, instead of moving to the next address Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Sun Nov 14 04:11:28 UTC 2010 on sn-devel-104
* s4-auth: fixed crash in krb5 authAndrew Tridgell2010-11-141-2/+1
| | | | remote_addr was used after free
* s4-test: we need to import testtools before subunit/pythonAndrew Tridgell2010-11-131-1/+1
| | | | | | | subunit/python depends on testtools Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Sat Nov 13 02:02:45 UTC 2010 on sn-devel-104
* s4/test: Expand BindTestAnatoliy Atanasov2010-11-111-20/+60
| | | | | | | The test now binds with user@realm, domain\user, user dn, computer dn Autobuild-User: Anatoliy Atanasov <anatoliy.atanasov@postpath.com> Autobuild-Date: Thu Nov 11 16:15:30 UTC 2010 on sn-devel-104
* s4-auth Supply more useful error messages on Kerberos failureAndrew Bartlett2010-11-083-13/+28
| | | | | | | | | The practice of returning only NT_STATUS_INVALID_PARAMETER hasn't helped our users to debug problems effectivly, and so we now return more errors and try and give a more useful debug message when then happen. Andrew Bartlett
* s4-auth Fix typos in samba4 auth codeBrad Hards2010-11-081-7/+7
|
* credentials: Lowercase library name,Jelmer Vernooij2010-11-075-20/+20
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Nov 7 01:48:44 UTC 2010 on sn-devel-104
* samdb: Lowercase library name.Jelmer Vernooij2010-11-072-5/+5
|
* s4-kerberos Mention the remote address we fail to contact the KDC onAndrew Bartlett2010-11-051-1/+10
|
* s4/auth: Add logon_parameters to authenticate_username_pwAnatoliy Atanasov2010-11-052-8/+12
| | | | | | | | We need to be able to set the logon parameters in the same way as in the ntlm server so we can handle openldap simple authentication call correctly. Autobuild-User: Anatoliy Atanasov <anatoliy@samba.org> Autobuild-Date: Fri Nov 5 06:32:43 UTC 2010 on sn-devel-104
* s4/test: Added test for simple bind with machine accountAnatoliy Atanasov2010-11-051-0/+116
| | | | | Samba4 returns error on simple bind, when we do it using openldap simple_bind_s api.
* s4-auth: unconditionally set previous_evAndrew Tridgell2010-11-041-3/+1
| | | | | | we need the caller to know when the previous_ev was NULL Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4:waf - fix the build on Gentoo platformsPhilip M. White2010-11-031-2/+4
| | | | Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
* s4-modules: get rid of the remaining static prototypes for modulesAndrew Tridgell2010-11-012-18/+4
| | | | the waf build now generates the prototype declarations for us
* s4-auth: added a dependency on com_errAndrew Tridgell2010-10-311-1/+1
| | | | | | | | | | | this helps with the gentoo build. The problem is that without the depenency, we don't add the cflags from the pkgconfig for com_err to the build of auth/gensec. That really reflects a more general problem with propogation of include dependencies, but this simple fix should be enough for now. Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Sun Oct 31 13:13:33 UTC 2010 on sn-devel-104
* s4: Remove the old perl/m4/make/mk-based build system.Jelmer Vernooij2010-10-319-841/+0
| | | | | | | | The new waf-based build system now has all the same functionality, and the old build system has been broken for quite some time. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Oct 31 02:01:44 UTC 2010 on sn-devel-104
* s4-cmdline: make cmdline-credentials a private libraryAndrew Tridgell2010-10-301-1/+1
|
* s4-auth: make KERBEROS subsystem into authkrb5 private libraryAndrew Tridgell2010-10-302-9/+10
| | | | | | this fixes some double linking. The name 'KERBEROS' was also a bit confusing, as it sounded like a base kerberos library, when it is in fact part of auth
* s4-credentials: make a private library from CREDENTIALS subsystemAndrew Tridgell2010-10-301-8/+9
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* auth/credentials Give a sensible behaviour for resetting the krb5 contextAndrew Bartlett2010-10-271-3/+8
| | | | | | | | | | | This extra code isn't used at the moment, but I noticed the old API was rather supprising in it's behaviour, and might catch someone out at some later time. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Oct 27 05:24:22 UTC 2010 on sn-devel-104
* talloc: change pytalloc-util to be a public library.Jelmer Vernooij2010-10-263-3/+3
|
* waf: Remove lib prefix from libraries manually.Jelmer Vernooij2010-10-263-6/+6
|
* s4: Drop duplicate 'lib' prefix for private libraries.Jelmer Vernooij2010-10-264-4/+4
|
* s4: Rename WBCLIENT to wbclient.Jelmer Vernooij2010-10-241-1/+1
|
* s4: Rename LIBSAMBA-* to libsamba-*Jelmer Vernooij2010-10-243-5/+5
|
* s4: Rename LIBSECURITY{_SESSION,} to libsecurity{_session,}Jelmer Vernooij2010-10-243-7/+7
|
* s4: Rename NSS_WRAPPER to nss_wrapper.Jelmer Vernooij2010-10-231-1/+1
| | | | | | | Only link to nss_wrapper when it is enabled. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sat Oct 23 23:05:44 UTC 2010 on sn-devel-104
* s4: Rename UID_WRAPPER to uid_wrapper.Jelmer Vernooij2010-10-231-2/+2
| | | | Only link to uid_wrapper when it is enabled.
* s4: Rename LIBEVENTS to libevents.Jelmer Vernooij2010-10-231-1/+1
|
* s4-waf: removed the XATTR and SASL aliasesAndrew Tridgell2010-10-211-1/+1
| | | | | | these were hangovers from the old build system names Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-auth: make auth a private libraryAndrew Tridgell2010-10-211-5/+6
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-auth Add DEBUG() for invalid DNs and errors expanding user groups.Andrew Bartlett2010-10-191-0/+5
| | | | | | | Against the OpenLDAP backend, I currently get failures. This makes it possible to debug those failures. Andrew Bartlett
* s4-gensec Don't give more to sasl_encode() than it will permitAndrew Bartlett2010-10-191-3/+10
| | | | | | | | | We need to ask the library how much data to pass in at any time. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 19 08:37:45 UTC 2010 on sn-devel-104
* s4-gensec Don't upgrade all DIGEST-MD5 connections to sealAndrew Bartlett2010-10-191-12/+21
| | | | | | | | The issue here is that when props.max_ssf = UINT_MAX was always set, as was the maxbufsize, and the connection would always be upgraded, regardless of the callers wishes. Andrew Bartlett
* s4:"util_ldb" - remove some really unused dependanciesMatthias Dieter Wallnöfer2010-10-184-4/+2
|
* s4-gensec: Add dependency on com_err to GENSEC_KRB5.Andreas Schneider2010-10-181-1/+1
|
* Revert "s4:remove "util_ldb" submodule and integrate the three gendb_* calls ↵Matthias Dieter Wallnöfer2010-10-175-3/+5
| | | | | | | | | | | | in "dsdb/common/util.c"" This reverts commit 8a2ce5c47cee499f90b125ebde83de5f9f1a9aa0. Jelmer pointed out that these are also in use by other LDB databases - not only SAMDB ones. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Oct 17 13:37:16 UTC 2010 on sn-devel-104
* s4:remove "util_ldb" submodule and integrate the three gendb_* calls in ↵Matthias Dieter Wallnöfer2010-10-175-5/+3
| | | | | | | | | "dsdb/common/util.c" They're only in use by SAMDB code. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Oct 17 09:40:13 UTC 2010 on sn-devel-104
* s4:dsdb - remove "samdb_result_uint", "samdb_result_int64", ↵Matthias Dieter Wallnöfer2010-10-151-10/+10
| | | | | | | | | "samdb_result_uint64" and "samdb_result_string" We have ldb_msg_find_attr_as_* calls which do exactly the same. Therefore this reduces only code redundancies. Signed-off-by: Andrew Bartlett <abartlet@samba.org>