summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
* Introduce system MIT krb5 build with --with-system-mitkrb5 option.Alexander Bokovoy2012-05-2329-434/+511
| | | | | | | | | | | | | | | | | System MIT krb5 build also enabled by specifying --without-ad-dc When --with-system-mitkrb5 (or --withou-ad-dc) option is passed to top level configure in WAF build we are trying to detect and use system-wide MIT krb5 libraries. As result, Samba 4 DC functionality will be disabled due to the fact that it is currently impossible to implement embedded KDC server with MIT krb5. Thus, --with-system-mitkrb5/--without-ad-dc build will only produce * Samba 4 client libraries and their Python bindings * Samba 3 server (smbd, nmbd, winbindd from source3/) * Samba 3 client libraries In addition, Samba 4 DC server-specific tests will not be compiled into smbtorture. This in particular affects spoolss_win, spoolss_notify, and remote_pac rpc tests.
* s4: samba-tool is usable without export-keytab command, make sure it does ↵Alexander Bokovoy2012-05-231-19/+22
| | | | | | | | not break When export_keytab is not compiled in (pure client-side Samba 4 build as with system MIT krb5), export-keytab command of samba-tool will not be available. Make sure it is not provided but its absence does not break the Python tool.
* dns: fix comments and make s4/libcli/resolve dns resolver workingAlexander Bokovoy2012-05-231-1/+1
| | | | | | | | After migrating to use libaddns, reply_to_addrs() needed to change the way answers are iterated through. Originally libroken implementation gave all answers as separate records with last one being explicitly NULL. libaddns unmarshalling code gives all non-NULL answers and should be iterated with explicit reply->num_answers in use.
* gensec_gssapi: Make it possible to build with MIT krb5Simo Sorce2012-05-232-11/+21
| | | | | | | | | | We need to ifdef out some minor things here because there is no available API to set these options in MIT. The realm and canonicalize options should be not interesting in the client case. Same for the send_to_kdc hacks. Also the OLD DES3 enctype is not at all interesting. I am not aware that Windows will ever use DES3 and no modern implementation relies on that enctype anymore as it has been fully deprecated long ago, so we can simply ignore it.
* auth and s4-rpc_server: Do not use features we currently can't implement ↵Simo Sorce2012-05-231-0/+6
| | | | with MIT Kerbros build
* s4-resolve: Remove dependency on librokenSimo Sorce2012-05-232-198/+153
| | | | Use available native samba resolver functions
* s4-dsdb: allow modification of some deleted object if the show-deleted ↵Matthieu Patou2012-05-191-4/+9
| | | | | | | control is presented Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sat May 19 20:28:01 CEST 2012 on sn-devel-104
* s4-dsdb: naming context needs to have the extended-dn syntax tooMatthieu Patou2012-05-191-0/+1
|
* s4:torture: Add raw.session.reauth2 testVolker Lendecke2012-05-181-0/+142
| | | | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Fri May 18 18:25:42 CEST 2012 on sn-devel-104
* s4:torture: rename raw.session.reauth => raw.session.reauth1Stefan Metzmacher2012-05-181-3/+3
| | | | metze
* s4-torture: Improve torture test boilerplate, use torture_assert()Andrew Bartlett2012-05-1818-279/+93
| | | | | | | | | This ensures that if this fails, it is reported as a subunit error correctly. Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri May 18 09:35:13 CEST 2012 on sn-devel-104
* s4-torture: Always use torture_assert() to handle failuresAndrew Bartlett2012-05-181-9/+6
|
* s4-torture: provide correct torture failures for failure to connectAndrew Bartlett2012-05-181-11/+9
|
* s4-torture: Fix rpc.samr.priv test to use torture_assert() macrosAndrew Bartlett2012-05-181-51/+16
|
* pygensec: Fix init of variable if not specified.Jelmer Vernooij2012-05-181-1/+1
| | | | | | | | | Thanks to Wolfgang Sourdeau for reporting this. Bug: https://bugzilla.samba.org/show_bug.cgi?id=8946 Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Fri May 18 04:50:17 CEST 2012 on sn-devel-104
* s4:torture: add smb2.session.expire1Stefan Metzmacher2012-05-171-1/+116
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Thu May 17 21:53:11 CEST 2012 on sn-devel-104
* s4:torture: add smb2.session.reconnect2 testStefan Metzmacher2012-05-171-0/+64
| | | | | | | This uses just one transport connection and demonstrates the implicit logoff of the previous session. metze
* s4:torture: rename smb2.session.reconnect to smb2.session.reconnect1Stefan Metzmacher2012-05-171-2/+2
| | | | metze
* s4:torture: remove unused vars in smb2.session.reauth*Stefan Metzmacher2012-05-171-2/+2
| | | | metze
* s4:auth/gensec_gssapi: add "gensec_gssapi:requested_life_time" optionStefan Metzmacher2012-05-171-1/+6
| | | | metze
* s4:auth/gensec: implement gensec_gssapi_expire_time()Stefan Metzmacher2012-05-171-0/+13
| | | | metze
* s4:auth/gensec_gssapi: add missing 'break' statementsStefan Metzmacher2012-05-171-0/+2
| | | | metze
* s4:auth/gensec_gssapi: remember the expire timeStefan Metzmacher2012-05-172-2/+9
| | | | metze
* s4:ntvfs/smb2: remove misleading comment regarding security=serverStefan Metzmacher2012-05-151-1/+0
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue May 15 10:12:53 CEST 2012 on sn-devel-104
* s4:ntvfs/cifs: remove misleading comment regarding security=serverStefan Metzmacher2012-05-151-1/+0
| | | | metze
* s4:auth: remove unused auth_server.cStefan Metzmacher2012-05-152-245/+0
| | | | metze
* s4:param/tests: remove "security=server" testStefan Metzmacher2012-05-151-10/+0
| | | | metze
* samba-upgradedns: Use the correct magic incantation of sys.path.insert()Amitay Isaacs2012-05-151-1/+1
| | | | | | | | This replaces "bin/python" with the correct path for python libraries. The pattern requires double quotes (") instead of single quotes ('). Autobuild-User: Amitay Isaacs <amitay@samba.org> Autobuild-Date: Tue May 15 05:19:46 CEST 2012 on sn-devel-104
* s4:lib/events: no longer define TEVENT_COMPAT_DEFINESStefan Metzmacher2012-05-141-3/+0
| | | | metze
* s4:lib/events: remove unused event_context_find() prototypeStefan Metzmacher2012-05-141-1/+0
| | | | metze
* move the dbwrap library to the top levelMichael Adam2012-05-141-3/+3
| | | | | Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Mon May 14 04:04:55 CEST 2012 on sn-devel-104
* s4:lib: remove unused wscript_build fileMichael Adam2012-05-111-7/+0
| | | | | This only contains a "GENCACHE" subsystem that is not referenced anywhere.
* When listing group members allow fallback to cn attribute when ↵Lukasz Zalewski2012-05-101-2/+5
| | | | samAccountName is not available
* s4:smb_server/smb: only create a new session with vuid == 0Stefan Metzmacher2012-05-093-9/+17
| | | | metze
* s4:torture/raw/context: test a session setup with a given invalid vuidStefan Metzmacher2012-05-091-17/+29
| | | | | | | | | | On a session setup with EXTENDED_SECURITY we'll get ERRSRV:ERRbaduid, while a session setup without EXTENDED_SECURITY ignores the given vuid. Before this test was doing a reauth of a given vuid, which works for newer Windows versions, but Windows 2000 gives INVALID_PARAMETER. metze
* s4:libcli:raw: fix a comment typo in smb_setfileinfo()Michael Adam2012-05-081-1/+1
| | | | | Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Tue May 8 20:45:16 CEST 2012 on sn-devel-104
* s4:torture: add a new smb2.session.reauth5 test: rename after reauth to anon ↵Michael Adam2012-05-081-0/+228
| | | | - fails
* s4:torture: add a new smb2.session.reauth4 test: setting security descriptor ↵Michael Adam2012-05-081-0/+122
| | | | after reauth to anon - works
* s4 dns: unify error handling when bailing outKai Blin2012-05-081-12/+11
| | | | | Autobuild-User: Kai Blin <kai@samba.org> Autobuild-Date: Tue May 8 15:48:25 CEST 2012 on sn-devel-104
* krb5samba: Add smb_krb5_make_pac_checksum.Andreas Schneider2012-05-081-0/+1
| | | | | | | Signed-off-by: Simo Sorce <idra@samba.org> Autobuild-User: Simo Sorce <idra@samba.org> Autobuild-Date: Tue May 8 08:30:52 CEST 2012 on sn-devel-104
* s4-auth: Use smb_krb5_make_pac_checksum.Andreas Schneider2012-05-081-54/+24
| | | | Signed-off-by: Simo Sorce <idra@samba.org>
* krb5samba: Add krb5_free_checksum_contents wrapperSimo Sorce2012-05-081-0/+1
|
* s4-provision Ensure we have posix ACLs before we permit a s3fs-based Samba4 ↵Andrew Bartlett2012-05-081-0/+14
| | | | to be configured
* s4:torture/raw/context: add subtests as torture testcasesStefan Metzmacher2012-05-081-46/+20
| | | | | | | | | | | | | TODO: add test_session with 'use spnego = false'. We need a way to do set an option just for one test case. Note: the 'use spnego = false' was ignored before as it's only used on the first session setup on a connection. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue May 8 04:50:39 CEST 2012 on sn-devel-104
* s4:torture/raw/context: INVALID_PARAMETER vs. LOGON_FAILURE...Stefan Metzmacher2012-05-081-1/+7
| | | | | | | | If the try a session setup without EXTENDED_SECURITY after one with EXTENDED_SECURITY Windows 2008 R2 returns INVALID_PARAMETER, while Windows 2000 sp4 returns LOGON_FAILURE... metze
* s4:torture/raw: make torture_raw_context a test suiteStefan Metzmacher2012-05-082-3/+12
| | | | metze
* s4:torture/raw/context: make use of torture_* macros and avoid 'printf'Stefan Metzmacher2012-05-081-100/+87
| | | | metze
* s4:torture/raw/context: pass tctx to test_pid_exit_only_sees_open()Stefan Metzmacher2012-05-081-1/+3
| | | | metze
* s4:torture/raw/session: make sure we got a reauth of the existing sessionStefan Metzmacher2012-05-081-0/+2
| | | | metze
* heimdal: Cope with newer Heimdal versions accepting a keyset argument toJelmer Vernooij2012-05-072-4/+26
| | | | | | | hdb_enctype2key. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Mon May 7 18:33:10 CEST 2012 on sn-devel-104