summaryrefslogtreecommitdiffstats
path: root/source4
Commit message (Collapse)AuthorAgeFilesLines
* ntlmssp: Add ntlmssp_blob_matches_magic()Andrew Bartlett2011-08-031-1/+1
| | | | | | | | | This avoids having the same check in 3 different parts of the code Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Aug 3 12:45:04 CEST 2011 on sn-devel-104
* selftest: test plugin_s4_dc against all ncacn_np testsAndrew Bartlett2011-08-031-1/+1
| | | | | | | Changes to the s3 epmapper behaviour seem to have fixed the rest of these tests. Andrew Bartlett
* selftest: Add kerberos tests to plugin_s4_dc testsAndrew Bartlett2011-08-031-3/+4
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* gensec: Don't keep a second copy of the auth4_context in gensec_ntlmssp_stateAndrew Bartlett2011-08-032-7/+4
| | | | | | | | | The auth4_context is already in the gensec_security structure, which is available by de-reference here anyway. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* selftest: Test encrypted RPC pipes against plugin_s4_dcAndrew Bartlett2011-08-031-4/+5
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s3-ntlmssp Add hooks to optionally call into GENSEC in auth_ntlmsspAndrew Bartlett2011-08-032-0/+2
| | | | | | | | | | This allows the current behaviour of the NTLMSSP code to be unchanged while adding a way to hook in an alternate implementation via an auth module. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* gensec: clarify memory ownership for gensec_session_info() and ↵Andrew Bartlett2011-08-0322-69/+63
| | | | | | | | | | | | | | | gensec_session_key() This is slightly less efficient, because we no longer keep a cache on the gensec structures, but much clearer in terms of memory ownership. Both gensec_session_info() and gensec_session_key() now take a mem_ctx and put the result only on that context. Some duplication of memory in the callers (who were rightly uncertain about who was the rightful owner of the returned memory) has been removed to compensate for the internal copy. Andrew Bartlett
* gensec: Remove mem_ctx from calls that do not return memoryAndrew Bartlett2011-08-037-26/+15
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* gensec: split GENSEC into mechanism-dependent and runtime functionsAndrew Bartlett2011-08-0315-923/+178
| | | | | | | | | The startup and runtime functions that have no dependencies are moved into the top level. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-libcli: Fix the fd leak. Close open file descriptor before return.Amitay Isaacs2011-08-031-2/+4
| | | | | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Wed Aug 3 07:49:12 CEST 2011 on sn-devel-104
* samba-tool: Rename samba-tool command gpo2 --> gpoAmitay Isaacs2011-08-031-1/+1
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* samba-tool: Remove C version of samba-toolAmitay Isaacs2011-08-035-1172/+0
| | | | | | | Python version of samba-tool has now implemented all the commands from C version and more. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* samba-tool: Add implementation of gpo create commandAmitay Isaacs2011-08-031-1/+176
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* samba-tool: Add functions to create directories and copy files over SMB shareAmitay Isaacs2011-08-031-0/+32
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-libcli: get_acl and set_acl require raw_open to set security descriptorAmitay Isaacs2011-08-031-15/+75
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-libcli: Check if short_name is not null, before converting to python stringAmitay Isaacs2011-08-031-1/+8
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-libcli: Replace smb_composite_connect() with smb_full_connection()Amitay Isaacs2011-08-031-24/+20
| | | | | | Python smb connection now uses smb_full_connection method. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-policy: Use the correct local directory for stat.Amitay Isaacs2011-08-031-1/+1
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* samba-tool: Rename copy_directory_recurse to copy_directory_remote_to_localAmitay Isaacs2011-08-031-11/+19
| | | | | | | | gpo fetch is remote->local and gpo create is local->remote local is local filesystem and remote is smb share. Need two functions to copy local->remote and remote->local. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* samba-tool: Addd functions to print GPO flags and GPlink optionsAmitay Isaacs2011-08-031-28/+22
| | | | | | | Use methods from python wrapper to convert gpo flags and gplink options to string. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-policy: Add python wrapper for ads_to_dir_access_mask() functionAmitay Isaacs2011-08-031-2/+17
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-policy: Expose gp_ads_to_dir_access_mask() functionAmitay Isaacs2011-08-032-1/+2
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4-libcli: Added python SMB methods for mkdir(), rmdir(), chkpath()Amitay Isaacs2011-08-031-11/+97
| | | | | | Updated docstrings for all methods. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:kdc: fix compiler warningStefan Metzmacher2011-08-021-1/+1
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Aug 2 06:06:15 CEST 2011 on sn-devel-104
* samba-tool: Don't install -c version, which is now deprecated.Jelmer Vernooij2011-08-021-1/+2
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Tue Aug 2 04:53:39 CEST 2011 on sn-devel-104
* dbcheck: Cancel transaction if operation fails.Jelmer Vernooij2011-08-021-10/+15
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Tue Aug 2 01:41:07 CEST 2011 on sn-devel-104
* acl: Improve error message when setting acls fails.Jelmer Vernooij2011-08-011-4/+12
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Mon Aug 1 18:59:12 CEST 2011 on sn-devel-104
* remove unnecessary dependency on 'events' from ldb modules.Jelmer Vernooij2011-08-011-35/+35
|
* heimdal_build: Use krb5-config to find heimdal include directory and library ↵Jelmer Vernooij2011-08-011-2/+19
| | | | path, rather than hardcoding.
* winsif.idl: fix comment about a pidl bugStefan Metzmacher2011-08-011-2/+1
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Aug 1 17:47:05 CEST 2011 on sn-devel-104
* s4-upgradeprovision: try to fix the detection of @provision recordMatthieu Patou2011-08-011-1/+1
| | | | | Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Mon Aug 1 13:43:50 CEST 2011 on sn-devel-104
* s4-kcc: correctly populate the neighbor object when taking information from ↵Matthieu Patou2011-07-311-0/+3
| | | | | | | repsTo Autobuild-User: Matthieu Patou <mat@samba.org> Autobuild-Date: Sun Jul 31 00:17:17 CEST 2011 on sn-devel-104
* samba-tool: use ldb.binary_encode() on search expression elementsAndrew Tridgell2011-07-299-24/+27
| | | | | | | | this allows us to deal with search elements containing characters that must be escaped in LDAP Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com>
* samba-tool: fixed binary encoding of usernames in setpasswordAndrew Tridgell2011-07-291-2/+2
| | | | | Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com> Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-auth Fill in the remainder of the unix info in auth_session_infoAndrew Bartlett2011-07-292-5/+45
| | | | | | | Signed-off-by: Andrew Tridgell <tridge@samba.org> Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri Jul 29 05:33:03 CEST 2011 on sn-devel-104
* s4-auth Move conversion of security_token to unix_token to authAndrew Bartlett2011-07-298-61/+129
| | | | | | | | This allows us to honour the AUTH_SESSION_INFO_UNIX_TOKEN flag. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* gensec: Add a way to request a unix token from GENSECAndrew Bartlett2011-07-293-5/+14
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* ntvfs: Use security_unix_token from auth.idlAndrew Bartlett2011-07-291-24/+16
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-lsa Use the supplied handle in LsaLookupNames2Andrew Bartlett2011-07-291-5/+5
| | | | | | | | | | | | In my rework of this function in 2006 with 459a2301a5d63f5a1a6b27996c8a0358b20f2ab2 I ignored the incoming handle, instead feching the LSA state again (dispite the commit message indicating otherwise). This means that data->access_mask is uninitialised, which doesn't matter right now, but will once we start checking that. Andrew Bartlett
* s4-debug: Start with DEBUG_DEFAULT_STDOUT, so we can log to a file in deamonsAndrew Bartlett2011-07-291-1/+1
| | | | | | | In commit 3c9d01e3e58e2217915317406541ac8c6f6dcf92 I changed the priority order and added DEBUG_DEFAULT_STDOUT, but did not check all the callers. Andrew Bartlett
* samba-tool: ensure prompting of passwords is in the right orderAndrew Tridgell2011-07-281-1/+3
| | | | | | | | | | | | ask the creds object for the password before prompting for the new password in the user password change code, to ensure the user is asked for the old password first Pair-Programmed-With: Amitay Isaacs <amitay@gmail.com> Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org> Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Thu Jul 28 08:35:45 CEST 2011 on sn-devel-104
* samba-tool: Added gpo fetch command implementation using python smb module.Amitay Isaacs2011-07-281-0/+94
| | | | | | | To copy the GPO files, use libcli python interface list() to get directory listing and loadfile() to read the contents of the file. Signed-off-by: Andrew Tridgell <tridge@samba.org>
* samba-tool: Change samba-tool gpo semantics (use gpo name instead of dn)Amitay Isaacs2011-07-281-78/+124
| | | | | | | | | | | Instead of using gpo dn as the key to refer to a gpo, use the gpo name as the key. If no URL is specified (-H option), find a writable DC and use that. Extract a commonly used method as get_gpo_info() to find details of a GPO. Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-libcli: Initialize stack structure variables to zero.Amitay Isaacs2011-07-281-14/+45
| | | | | | | Update do_smb_connect function to return NTSTATUS rather than raise python exception on error. Error checking done in py_smb_new(). Signed-off-by: Andrew Tridgell <tridge@samba.org>
* samba-tool: Add user password command to change user's own passwordAmitay Isaacs2011-07-281-0/+33
| | | | | | | This command is a user-level command and differs from setpassword command which is administrator command. Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-libnet: py_net Add change_password() python commandAmitay Isaacs2011-07-281-0/+53
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-libnet: py_net - Remove parsing for credentials argumentAmitay Isaacs2011-07-281-5/+6
| | | | | | py_creds are not used anywhere in the function. Signed-off-by: Andrew Tridgell <tridge@samba.org>
* samba-tool: Python routine to find writable/ldap-capable DCAmitay Isaacs2011-07-281-0/+13
| | | | Signed-off-by: Andrew Tridgell <tridge@samba.org>
* s4-libcli: Added python interface for file I/O using SMBAmitay Isaacs2011-07-282-0/+393
| | | | | | | | | This module will support file system access using SMB. based on smb_composite - loadfile(), savefile() based on raw - getacl(), setacl() Signed-off-by: Andrew Tridgell <tridge@samba.org>
* samba-tool: For samba-tool-c, help lists commands implemented only in CAmitay Isaacs2011-07-281-1/+1
| | | | | | | | The rest of the commands are available in python version of samba-tool. C version of samba-tool is for testing only and will be phased out once all the commands are ported to python. Signed-off-by: Andrew Tridgell <tridge@samba.org>