summaryrefslogtreecommitdiffstats
path: root/source4/auth
Commit message (Collapse)AuthorAgeFilesLines
...
* s4-auth: fixed crash in krb5 authAndrew Tridgell2010-11-141-2/+1
| | | | remote_addr was used after free
* s4-test: we need to import testtools before subunit/pythonAndrew Tridgell2010-11-131-1/+1
| | | | | | | subunit/python depends on testtools Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Sat Nov 13 02:02:45 UTC 2010 on sn-devel-104
* s4/test: Expand BindTestAnatoliy Atanasov2010-11-111-20/+60
| | | | | | | The test now binds with user@realm, domain\user, user dn, computer dn Autobuild-User: Anatoliy Atanasov <anatoliy.atanasov@postpath.com> Autobuild-Date: Thu Nov 11 16:15:30 UTC 2010 on sn-devel-104
* s4-auth Supply more useful error messages on Kerberos failureAndrew Bartlett2010-11-083-13/+28
| | | | | | | | | The practice of returning only NT_STATUS_INVALID_PARAMETER hasn't helped our users to debug problems effectivly, and so we now return more errors and try and give a more useful debug message when then happen. Andrew Bartlett
* s4-auth Fix typos in samba4 auth codeBrad Hards2010-11-081-7/+7
|
* credentials: Lowercase library name,Jelmer Vernooij2010-11-075-20/+20
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Nov 7 01:48:44 UTC 2010 on sn-devel-104
* samdb: Lowercase library name.Jelmer Vernooij2010-11-072-5/+5
|
* s4-kerberos Mention the remote address we fail to contact the KDC onAndrew Bartlett2010-11-051-1/+10
|
* s4/auth: Add logon_parameters to authenticate_username_pwAnatoliy Atanasov2010-11-052-8/+12
| | | | | | | | We need to be able to set the logon parameters in the same way as in the ntlm server so we can handle openldap simple authentication call correctly. Autobuild-User: Anatoliy Atanasov <anatoliy@samba.org> Autobuild-Date: Fri Nov 5 06:32:43 UTC 2010 on sn-devel-104
* s4/test: Added test for simple bind with machine accountAnatoliy Atanasov2010-11-051-0/+116
| | | | | Samba4 returns error on simple bind, when we do it using openldap simple_bind_s api.
* s4-auth: unconditionally set previous_evAndrew Tridgell2010-11-041-3/+1
| | | | | | we need the caller to know when the previous_ev was NULL Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4:waf - fix the build on Gentoo platformsPhilip M. White2010-11-031-2/+4
| | | | Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
* s4-modules: get rid of the remaining static prototypes for modulesAndrew Tridgell2010-11-012-18/+4
| | | | the waf build now generates the prototype declarations for us
* s4-auth: added a dependency on com_errAndrew Tridgell2010-10-311-1/+1
| | | | | | | | | | | this helps with the gentoo build. The problem is that without the depenency, we don't add the cflags from the pkgconfig for com_err to the build of auth/gensec. That really reflects a more general problem with propogation of include dependencies, but this simple fix should be enough for now. Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Sun Oct 31 13:13:33 UTC 2010 on sn-devel-104
* s4: Remove the old perl/m4/make/mk-based build system.Jelmer Vernooij2010-10-319-841/+0
| | | | | | | | The new waf-based build system now has all the same functionality, and the old build system has been broken for quite some time. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sun Oct 31 02:01:44 UTC 2010 on sn-devel-104
* s4-cmdline: make cmdline-credentials a private libraryAndrew Tridgell2010-10-301-1/+1
|
* s4-auth: make KERBEROS subsystem into authkrb5 private libraryAndrew Tridgell2010-10-302-9/+10
| | | | | | this fixes some double linking. The name 'KERBEROS' was also a bit confusing, as it sounded like a base kerberos library, when it is in fact part of auth
* s4-credentials: make a private library from CREDENTIALS subsystemAndrew Tridgell2010-10-301-8/+9
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* auth/credentials Give a sensible behaviour for resetting the krb5 contextAndrew Bartlett2010-10-271-3/+8
| | | | | | | | | | | This extra code isn't used at the moment, but I noticed the old API was rather supprising in it's behaviour, and might catch someone out at some later time. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Oct 27 05:24:22 UTC 2010 on sn-devel-104
* talloc: change pytalloc-util to be a public library.Jelmer Vernooij2010-10-263-3/+3
|
* waf: Remove lib prefix from libraries manually.Jelmer Vernooij2010-10-263-6/+6
|
* s4: Drop duplicate 'lib' prefix for private libraries.Jelmer Vernooij2010-10-264-4/+4
|
* s4: Rename WBCLIENT to wbclient.Jelmer Vernooij2010-10-241-1/+1
|
* s4: Rename LIBSAMBA-* to libsamba-*Jelmer Vernooij2010-10-243-5/+5
|
* s4: Rename LIBSECURITY{_SESSION,} to libsecurity{_session,}Jelmer Vernooij2010-10-243-7/+7
|
* s4: Rename NSS_WRAPPER to nss_wrapper.Jelmer Vernooij2010-10-231-1/+1
| | | | | | | Only link to nss_wrapper when it is enabled. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Sat Oct 23 23:05:44 UTC 2010 on sn-devel-104
* s4: Rename UID_WRAPPER to uid_wrapper.Jelmer Vernooij2010-10-231-2/+2
| | | | Only link to uid_wrapper when it is enabled.
* s4: Rename LIBEVENTS to libevents.Jelmer Vernooij2010-10-231-1/+1
|
* s4-waf: removed the XATTR and SASL aliasesAndrew Tridgell2010-10-211-1/+1
| | | | | | these were hangovers from the old build system names Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-auth: make auth a private libraryAndrew Tridgell2010-10-211-5/+6
| | | | Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-auth Add DEBUG() for invalid DNs and errors expanding user groups.Andrew Bartlett2010-10-191-0/+5
| | | | | | | Against the OpenLDAP backend, I currently get failures. This makes it possible to debug those failures. Andrew Bartlett
* s4-gensec Don't give more to sasl_encode() than it will permitAndrew Bartlett2010-10-191-3/+10
| | | | | | | | | We need to ask the library how much data to pass in at any time. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 19 08:37:45 UTC 2010 on sn-devel-104
* s4-gensec Don't upgrade all DIGEST-MD5 connections to sealAndrew Bartlett2010-10-191-12/+21
| | | | | | | | The issue here is that when props.max_ssf = UINT_MAX was always set, as was the maxbufsize, and the connection would always be upgraded, regardless of the callers wishes. Andrew Bartlett
* s4:"util_ldb" - remove some really unused dependanciesMatthias Dieter Wallnöfer2010-10-184-4/+2
|
* s4-gensec: Add dependency on com_err to GENSEC_KRB5.Andreas Schneider2010-10-181-1/+1
|
* Revert "s4:remove "util_ldb" submodule and integrate the three gendb_* calls ↵Matthias Dieter Wallnöfer2010-10-175-3/+5
| | | | | | | | | | | | in "dsdb/common/util.c"" This reverts commit 8a2ce5c47cee499f90b125ebde83de5f9f1a9aa0. Jelmer pointed out that these are also in use by other LDB databases - not only SAMDB ones. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Oct 17 13:37:16 UTC 2010 on sn-devel-104
* s4:remove "util_ldb" submodule and integrate the three gendb_* calls in ↵Matthias Dieter Wallnöfer2010-10-175-5/+3
| | | | | | | | | "dsdb/common/util.c" They're only in use by SAMDB code. Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org> Autobuild-Date: Sun Oct 17 09:40:13 UTC 2010 on sn-devel-104
* s4:dsdb - remove "samdb_result_uint", "samdb_result_int64", ↵Matthias Dieter Wallnöfer2010-10-151-10/+10
| | | | | | | | | "samdb_result_uint64" and "samdb_result_string" We have ldb_msg_find_attr_as_* calls which do exactly the same. Therefore this reduces only code redundancies. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* libcli/security Use common security.hAndrew Bartlett2010-10-121-1/+1
| | | | | | | | | | This includes dom_sid.h and security_token.h and will be moved to the top level shortly. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 12 03:35:36 UTC 2010 on sn-devel-104
* s4-credentials Allocate ldb result on correct memory contextAndrew Bartlett2010-10-121-1/+1
|
* libcli/security Add debug class to security_token_debug() et alAndrew Bartlett2010-10-121-1/+1
| | | | | | This will allow it to replace functions in source3 that use debug classes. Andrew Bartlett
* samdb_common, ntlm: Add missing dependency on libsamba-hostconfig.Jelmer Vernooij2010-10-111-1/+1
|
* s4-credentials Add explicit event context handling to Kerberos calls (only)Andrew Bartlett2010-10-1111-81/+183
| | | | | | | | | | | | | | By setting the event context to use for this operation (only) onto the krb5_context just before we call that operation, we can try and emulate the specification of an event context to the actual send_to_kdc() This eliminates the specification of an event context to many other cli_credentials calls, and the last use of event_context_find() Special care is taken to restore the event context in the event of nesting in the send_to_kdc function. Andrew Bartlett
* s4-param Refactor secrets code to not require an event context.Andrew Bartlett2010-10-111-1/+1
| | | | | | | | A new event context is constructed by LDB when required for secrets.ldb This will be essentially unused, as LDB on TDB will only trigger 'fake' events, and blocks on transactions and lock operations anyway. Andrew Bartlett
* s4-kerberos Remove unused parameterAndrew Bartlett2010-10-112-3/+1
|
* s4-kerberos Remove unsued variableAndrew Bartlett2010-10-111-1/+0
|
* credentials: Avoid unnecessary includes.Jelmer Vernooij2010-10-111-2/+0
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Mon Oct 11 13:01:36 UTC 2010 on sn-devel-104
* credentials: Fix the build.Jelmer Vernooij2010-10-115-2/+7
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Mon Oct 11 02:47:50 UTC 2010 on sn-devel-104
* credentials: Split up into several subsystems.Jelmer Vernooij2010-10-115-10/+22
|
* kerberos_util: Put into separate subsystem.Jelmer Vernooij2010-10-114-3/+11
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Mon Oct 11 00:34:56 UTC 2010 on sn-devel-104