Tim Potter [Thu, 10 Nov 2005 03:37:49 +0000 (03:37 +0000)]
r11625: NULL terminate list of strings. For some reason this wasn't causing a
crash on i386 but was on ia64.
(This used to be commit
12c77bb2e17ef3cb3264da86852832dffb5474c1)
Tim Potter [Thu, 10 Nov 2005 03:01:21 +0000 (03:01 +0000)]
r11624: Use enum names instead of magic numbers.
(This used to be commit
f177c223e6b881a65ed49ceacf9106e42d2a7d0a)
Andrew Tridgell [Thu, 10 Nov 2005 02:23:59 +0000 (02:23 +0000)]
r11623: convert the dcerpc socket layer to the generic packet code
(This used to be commit
4ea66e6e80de0d70b53bf9cd16c1dfd1c400f57e)
Andrew Tridgell [Thu, 10 Nov 2005 01:41:47 +0000 (01:41 +0000)]
r11622: convert the ldap server to the generic packet code
(This used to be commit
6ef4ba0c81002c9960dc5fe4fbfd0622957d492a)
Andrew Tridgell [Thu, 10 Nov 2005 00:36:53 +0000 (00:36 +0000)]
r11621: some minor fixes from comments by metze
(This used to be commit
6ab808223475ba7c52dbe4d639af9a8e7f64b202)
Andrew Tridgell [Thu, 10 Nov 2005 00:28:02 +0000 (00:28 +0000)]
r11620: switch the ldap client code over to using the generic packet code
(This used to be commit
1d29ad2a27d89454e5e3c4a3cf05cc5edde0208c)
Andrew Tridgell [Thu, 10 Nov 2005 00:26:26 +0000 (00:26 +0000)]
r11619: use the 32 bit length helper in the kdc.
(This used to be commit
24f20eed0e242aab76ce8f0f8db7266ddc9ec97b)
Andrew Tridgell [Thu, 10 Nov 2005 00:25:57 +0000 (00:25 +0000)]
r11618: added a generic '32 bit length prefix' full packet helper to the packet code
(This used to be commit
b4dbe55105cc2807a17d7e5bf8db9756cc526a3b)
Jeremy Allison [Wed, 9 Nov 2005 19:36:33 +0000 (19:36 +0000)]
r11616: Replace old crc32 code with one from the FreeBSD tree.
* COPYRIGHT (C) 1986 Gary S. Brown. You may use this program, or
* code or tables extracted from it, as desired without restriction.
Jeremy.
(This used to be commit
d42644927d46154c6366f3a7d10bea09989ed813)
Stefan Metzmacher [Wed, 9 Nov 2005 18:06:36 +0000 (18:06 +0000)]
r11611: don't use unions without a instance name, not all compilers support that...
fix the build with cc on IRIX 6.5 us4
tridge: we should post this to the appweb maintainers, also with my
hex constant fix from a few weeks ago!
metze
(This used to be commit
5cc44994fb17211009e68f941e3db56acf0ca236)
Andrew Tridgell [Wed, 9 Nov 2005 14:00:31 +0000 (14:00 +0000)]
r11609: fixed handling of one way requests with new send code
(This used to be commit
d2b568a1114015839ca59c6f32bde4b06ea81ef9)
Andrew Tridgell [Wed, 9 Nov 2005 13:49:38 +0000 (13:49 +0000)]
r11608: switched the kdc to use the generic packet send code
(This used to be commit
2cbcc8a919a5164bd57143ffc778f49011b9eee6)
Andrew Tridgell [Wed, 9 Nov 2005 13:42:56 +0000 (13:42 +0000)]
r11607: switched the smb server to use the generic packet send code
(This used to be commit
9eee7bafa12553a894536db8ce5cc2d268e09ae6)
Andrew Tridgell [Wed, 9 Nov 2005 13:34:36 +0000 (13:34 +0000)]
r11606: use the generic packet send code in libcli/raw/
(This used to be commit
0bcea45b15b08cb42d7f6fbbb3a25f73b95f362c)
Andrew Tridgell [Wed, 9 Nov 2005 13:33:53 +0000 (13:33 +0000)]
r11605: added handling of the send queue to the generic packet handling code
(This used to be commit
f98d499b2ef93cf2d060acafbc424754add322a8)
Andrew Tridgell [Wed, 9 Nov 2005 11:13:02 +0000 (11:13 +0000)]
r11604: converted the kdc code to use the new packet lib. Andrew, I'm not sure
how to test this, can you have a look and see if it works for you? Is
there some hidden switch to kinit to use tcp?
(This used to be commit
0a797712fb9b11996ce035a77907000130b6f616)
Andrew Tridgell [Wed, 9 Nov 2005 10:51:26 +0000 (10:51 +0000)]
r11603: converted the smb server to use the new generic packet code
(This used to be commit
0fc496bb6f520ddf6d85cc2f3df80f93b871cfe9)
Andrew Tridgell [Wed, 9 Nov 2005 10:50:39 +0000 (10:50 +0000)]
r11602: added packet_set_serialise() to allow the generic packet layer to
handle optional request serialisation (this is something that is
commonly needed on stream connections)
(This used to be commit
d860eb795693d8c292eec2a639ece4793d28dc38)
Stefan Metzmacher [Wed, 9 Nov 2005 10:17:05 +0000 (10:17 +0000)]
r11601: try to fix the build on IRIX 6.5 us4
abartlet, tridge, lha: is there a better way?
metze
(This used to be commit
b2b4969bdcdd85b1093d91184ff10eff9f74e550)
Stefan Metzmacher [Wed, 9 Nov 2005 09:28:59 +0000 (09:28 +0000)]
r11600: remove unused code
metze
(This used to be commit
06ccbc3fa99dc6396b2fe46adb51ef42431669eb)
Stefan Metzmacher [Wed, 9 Nov 2005 09:16:32 +0000 (09:16 +0000)]
r11599: remove local (and broken) version of strhaslower() strhasupper()
metze
(This used to be commit
35e17abb8763e4d90725d007fefa76965260c124)
Andrew Tridgell [Wed, 9 Nov 2005 08:45:00 +0000 (08:45 +0000)]
r11598: fixed strhaslower() and strhasupper() to not falsely recognise
caseless characters as lower/upper
(This used to be commit
74fb317f2acf7a5963f37c0cd9e21a34d7da2f4f)
Simo Sorce [Wed, 9 Nov 2005 08:23:33 +0000 (08:23 +0000)]
r11597: revert a commit by mistake
(This used to be commit
09e6f494b490127ace1a9d1077c2757d813abc55)
Andrew Tridgell [Wed, 9 Nov 2005 08:13:41 +0000 (08:13 +0000)]
r11596: switched the libcli/raw/ code over to using the lib/stream/ generic
packet parsing code. This simplifies the logic in the raw client
library a fair bit
(This used to be commit
f8d43f1f67876360e1295d85a3c3702d1d60ed7b)
Andrew Tridgell [Wed, 9 Nov 2005 08:11:50 +0000 (08:11 +0000)]
r11595: added a helper layer to parse streams into individual packets. This is
something that Andrew Bartlett has been asking for for a while, and
when I started having to re-invent this packet parsing code yet again
for SMB2 I decided it was time to do it generically
you use it by providing a "is this a full packet yet?" helper function
to the packet_*() functions, which then handle all the logic of
partial packet buffering.
This also goes to great lengths to operate efficiently, minimising the
number of recv system calls.
(This used to be commit
e6c47b954a6f09c53ea419800ce873295fcd0be9)
Andrew Tridgell [Wed, 9 Nov 2005 08:07:38 +0000 (08:07 +0000)]
r11594: ensure ldb_search() sets *res to NULL on failure (some of the updated
ldb_result code coud rely on that)
(This used to be commit
cd567bcb24125827c746c1c0902631b0e7c2cea5)
Andrew Tridgell [Wed, 9 Nov 2005 08:06:56 +0000 (08:06 +0000)]
r11593: added a data_blob_realloc() function
(This used to be commit
e04262d391d81f863256a9fe69a2884fbce641af)
Andrew Tridgell [Wed, 9 Nov 2005 05:19:57 +0000 (05:19 +0000)]
r11592: fixed a crash bug from the ldb_result changes (res was being used after being freed)
(This used to be commit
5c7f3fef3e2324f0d1edda0f0f06f662bbcf7e08)
Rafal Szczesniak [Wed, 9 Nov 2005 00:38:46 +0000 (00:38 +0000)]
r11588: Remove unused (at the moment) variable and quiet compiler warning.
rafal
(This used to be commit
90db7f13bc0df0a276dc736d2f9439616cb3b2f7)
Rafal Szczesniak [Tue, 8 Nov 2005 23:23:16 +0000 (23:23 +0000)]
r11587: Trivial testing code giving an idea of how could using
subcontexts look like.
rafal
(This used to be commit
5a338b04f37f6160f4aaf7d9758aa2d817516eb1)
Rafal Szczesniak [Tue, 8 Nov 2005 23:22:21 +0000 (23:22 +0000)]
r11586: Further work on ejs interface for libnet. The idea is to split libnet
functionalities into groups of subcontexts of net subcontext just the
way it's done in net tool. This way we can pass common arguments when
creating subcontext. Also, this may allow easier writing net tool
completely as a script.
At the moment there's a name resolve code segfault to be fixed.
rafal
(This used to be commit
25310d05927dab69d37248977f974bcaedbd081b)
Andrew Bartlett [Tue, 8 Nov 2005 02:30:42 +0000 (02:30 +0000)]
r11572: Add support for accountExpires and password expiry (should cause the
ticket to be reduced in validity).
Andrew Bartlett
(This used to be commit
5575a1443b5225140f401bde7f897f96dfe73b39)
Andrew Bartlett [Tue, 8 Nov 2005 01:17:41 +0000 (01:17 +0000)]
r11568: Debuging aids: Let the administrator know when a key/entry expired,
rather than just the fact of the expiry.
Andrew Bartlett
(This used to be commit
31c4ab26d7ab1e550c2ecc7c3ae6c44b87140aa3)
Simo Sorce [Tue, 8 Nov 2005 00:11:45 +0000 (00:11 +0000)]
r11567: Ldb API change patch.
This patch changes the way lsb_search is called and the meaning of the returned integer.
The last argument of ldb_search is changed from struct ldb_message to struct ldb_result
which contains a pointer to a struct ldb_message list and a count of the number of messages.
The return is not the count of messages anymore but instead it is an ldb error value.
I tryed to keep the patch as tiny as possible bu as you can guess I had to change a good
amount of places. I also tried to double check all my changes being sure that the calling
functions would still behave as before. But this patch is big enough that I fear some bug
may have been introduced anyway even if it passes the test suite. So if you are currently
working on any file being touched please give it a deep look and blame me for any error.
Simo.
(This used to be commit
22c8c97e6fb466b41859e090e959d7f1134be780)
Stefan Metzmacher [Mon, 7 Nov 2005 15:36:51 +0000 (15:36 +0000)]
r11555: - change socket_wrapper to support multiple IP's
- SOCKET_WRAPPER_DEFAULT_IFACE=X specifies the default interface
for 127.0.0.X
- we now use multiple interfaces for smbtorture in make test
127.0.0.26-127.0.0.31
- and 127.0.0.1 only for smbd
the are more work needed for better support for broacast messages...
but this is enough for the winsrepl tests
metze
(This used to be commit
dbd01110d1a3e0f5914ae8d156723d6d6edf160c)
Stefan Metzmacher [Mon, 7 Nov 2005 15:32:52 +0000 (15:32 +0000)]
r11554: make us able to run without depending on 127.0.0.1
metze
(This used to be commit
6bae17d279205a0d75f609f6a026b5c99d73cea5)
Stefan Metzmacher [Mon, 7 Nov 2005 15:07:41 +0000 (15:07 +0000)]
r11553: give an error when the lookup failed
metze
(This used to be commit
363c000944ad40c3f8ba2b28f4cfed2bbd26fd65)
Stefan Metzmacher [Mon, 7 Nov 2005 14:34:49 +0000 (14:34 +0000)]
r11552: fix indent
metze
(This used to be commit
021060b4292dfe2495bcea635f6ce6467ca731ad)
Stefan Metzmacher [Mon, 7 Nov 2005 13:22:51 +0000 (13:22 +0000)]
r11547: - don't do pull replication when pullIntervall is 0
- don't do push replication when pushChangeCount is 0
metze
(This used to be commit
4122e9ec3a4394738fa3c261dc92938ea86c3822)
Stefan Metzmacher [Mon, 7 Nov 2005 11:44:08 +0000 (11:44 +0000)]
r11546: add more errno ntstatus mappings, to get more usefull errors from socket_wrapper
metze
(This used to be commit
6375a9a95da1eb2d5fd60b265047d98b264ff93f)
Andrew Bartlett [Mon, 7 Nov 2005 03:05:34 +0000 (03:05 +0000)]
r11545: Remove old #define.
Andrew Bartlett
(This used to be commit
5adaf00e4486f5f4895fd816c9db45133db38f1a)
Andrew Bartlett [Mon, 7 Nov 2005 02:40:38 +0000 (02:40 +0000)]
r11544: Allow delegation in a Samba4 realm.
Andrew Bartlett
(This used to be commit
c4a9d025d6485c19bf1f2e98f83ac68b276247e4)
Andrew Bartlett [Mon, 7 Nov 2005 02:29:37 +0000 (02:29 +0000)]
r11543: A major upgrade to our KDC and PAC handling.
We now put the PAC in the AS-REP, so that the client has it in the
TGT. We then validate it (and re-sign it) on a TGS-REQ, ie when the
client wants a ticket.
This should also allow us to interop with windows KDCs.
If we get an invalid PAC at the TGS stage, we just drop it.
I'm slowly trying to move the application logic out of hdb-ldb.c, and
back in with the rest of Samba's auth system, for consistancy. This
continues that trend.
Andrew Bartlett
(This used to be commit
36973b1eef7db5983cce76ba241e54d5f925c69c)
Andrew Bartlett [Mon, 7 Nov 2005 02:25:37 +0000 (02:25 +0000)]
r11542: Add the netbios name type. We will need it when we start to handle
allowedWorkstations on Krb5.
Andrew Bartlett
(This used to be commit
dbf73a82fc7d1f82e2ad45e545cefdd9a5b24215)
Andrew Bartlett [Mon, 7 Nov 2005 02:24:50 +0000 (02:24 +0000)]
r11541: More logical (I think...) delegation semantics.
Andrew Bartlett
(This used to be commit
6bb1b244284a209ebcb50c17ad59d4528658da0b)
Andrew Bartlett [Mon, 7 Nov 2005 02:19:19 +0000 (02:19 +0000)]
r11540: Some notes to myself on RFC complience.
Andrew Bartlett
(This used to be commit
6d439cae989efff7530d75e5dd21faa8e5230059)
Jelmer Vernooij [Sun, 6 Nov 2005 14:31:01 +0000 (14:31 +0000)]
r11539: Fix indentation in templates. Always generate lower-case
UUID strings as GUID_from_string seems to have trouble with
uppercased ones.
(This used to be commit
16ea96c81ed88f197007335f442c9e62b4ccd6de)
Andrew Bartlett [Sun, 6 Nov 2005 14:17:00 +0000 (14:17 +0000)]
r11538: More notes on things we need.
Andrew Bartlett
(This used to be commit
890ad0412b9ee285fa25e8bab785a960a201057e)
Andrew Bartlett [Sun, 6 Nov 2005 14:16:34 +0000 (14:16 +0000)]
r11537: Make the authsam_account_ok routine callable by external users (the KDC).
Andrew Bartlett
(This used to be commit
1643ad169cff56f20ba03644dec12124139ac44a)
Andrew Bartlett [Sun, 6 Nov 2005 14:15:34 +0000 (14:15 +0000)]
r11536: Add a hook for client-principal access control to hdb-ldb, re-using
the code in auth/auth_sam.c for consistancy. This will also allow us
to have one place for a backend directory hook.
I will use a very similar hook to add the PAC.
Andrew Bartlett
(This used to be commit
4315836cd8c94eb8340c4050804face4d0066810)
Jelmer Vernooij [Sun, 6 Nov 2005 13:53:37 +0000 (13:53 +0000)]
r11535: Support void functions when generating templates.
(This used to be commit
e8926a4e171a7bf74c220fa825ef5fa9e297fa47)
Jelmer Vernooij [Sun, 6 Nov 2005 13:21:22 +0000 (13:21 +0000)]
r11534: Consider ntvfs as a library
(This used to be commit
f9bbc83f5316773520ce06c267ac9c0f1eb189e6)
Volker Lendecke [Sun, 6 Nov 2005 12:24:33 +0000 (12:24 +0000)]
r11533: Be a bit less intrusive
(This used to be commit
f341c8b4c8e8b8096c604b5842b9b7f7c4c9653c)
Volker Lendecke [Sun, 6 Nov 2005 12:19:34 +0000 (12:19 +0000)]
r11532: Enable kerberos session setup for winbind smb connections
(This used to be commit
f0e4075db5e913d2262058bb7234c446160823d9)
Andrew Bartlett [Sun, 6 Nov 2005 01:46:12 +0000 (01:46 +0000)]
r11529: Disable DNS lookups for forwarded credentials, unless really, really
wanted. There is nothing that suggests that the host we forward
credentials to will not have other interfaces, unassoicated with their
service name. Likewise, the name may be a netbios, not DNS name.
This should avoid some nasty DNS lookups.
Andrew Bartlett
(This used to be commit
da0ff19856a8f41eb64787990d47d2961824711d)
Volker Lendecke [Sat, 5 Nov 2005 23:46:57 +0000 (23:46 +0000)]
r11528: Separate finding dcs from initializing a domain. Makes it easier to possibly
support cldap and other stuff in the future.
This temporarily disables wbinfo -t, but that will come back soon.
Try an ldap bind using gss-spnego. This got me krb5 binds against "our" w2k3
and a trusted w2k, although with some memleaks from krb5 and a BAD_OPTION
tgs-rep error.
Volker
(This used to be commit
d14948fdf687c8f70ef9ec35445b7eb04da84253)
Volker Lendecke [Sat, 5 Nov 2005 23:14:30 +0000 (23:14 +0000)]
r11527: Has this ever been run?
(This used to be commit
419b28d02d6c5a03bd33eaeabf1b42bfab9155dd)
Volker Lendecke [Sat, 5 Nov 2005 23:09:23 +0000 (23:09 +0000)]
r11526: And another warning...
(This used to be commit
16467008c64d84f29bec0ea45767bb1050726b34)
Andrew Bartlett [Sat, 5 Nov 2005 21:26:28 +0000 (21:26 +0000)]
r11525: Move lookups (including the attribute search) for users from
kdc/hdb-ldb.c to share the routines used for auth/
This will require keeping the attribute list in sync, but I think it
is worth it for the next steps (sharing the server_info generation).
Andrew Bartlett
(This used to be commit
da38bcefa752a508abd28e8ff6277b493d24c2dd)
Andrew Bartlett [Sat, 5 Nov 2005 11:29:34 +0000 (11:29 +0000)]
r11524: More work on our hdb backend in the KDC.
The aim here is to restructure the queries to match the queries we do
in auth, then to share the code that does the actual query (at least
for user logins).
Then we can generate the PAC from that shared query, rather than a
seperate query.
Andrew Bartlett
(This used to be commit
4395d087e19286536dbb41fa5758491b302fa437)
Andrew Bartlett [Sat, 5 Nov 2005 11:24:10 +0000 (11:24 +0000)]
r11523: Working towards having Samba3 join Samba4, this allows the SASL
credentials to be NULL, where the client is requesting a CIFS style
server-first negTokenInit.
Andrew Bartlett
(This used to be commit
eba652ecc89766304fdad14463072dc311693701)
Andrew Bartlett [Sat, 5 Nov 2005 11:13:22 +0000 (11:13 +0000)]
r11522: Add support for delegated credentials and machine account credentials
to ldb, based on the sessionInfo we now pass around.
Andrew Bartlett
(This used to be commit
84e16e4ea7240409f15efd9f64344f9e0cec8111)
Andrew Bartlett [Sat, 5 Nov 2005 11:02:37 +0000 (11:02 +0000)]
r11521: Add in client support for checking supportedSASLmechanisms, and then
determining a mechanism to use.
Currently it doesn't to fallbacks like SPNEGO does, but this could be
added (to GENSEC, not to here).
This also adds a new function to GENSEC, which returns a list of SASL
names in our preference order (currently determined by the build
system of all things...).
Also make the similar function used for OIDs in SPNEGO do the same.
This is all a very long-winded way of moving from a hard-coded NTLM to
GSS-SPNEGO in our SASL client...
Andrew Bartlett
(This used to be commit
130eb9bb9a37957614c87e0e6846a812abb51e00)
Andrew Bartlett [Sat, 5 Nov 2005 10:51:13 +0000 (10:51 +0000)]
r11520: indent
(This used to be commit
ce611eb5f31bc63fc23700e7a2c47e68b8f826aa)
Volker Lendecke [Sat, 5 Nov 2005 10:00:18 +0000 (10:00 +0000)]
r11519: And an uninitialized variable...
(This used to be commit
dc0e9f8d1a2285623e99dcccf055b4860ddd1294)
Volker Lendecke [Sat, 5 Nov 2005 09:59:00 +0000 (09:59 +0000)]
r11518: Fix a warning
(This used to be commit
4a32df49e66b49b20b78bf165869b7592bb626fd)
Volker Lendecke [Sat, 5 Nov 2005 09:34:07 +0000 (09:34 +0000)]
r11517: Cleanup time, this looks larger than it is. This mainly gets rid of
wb_domain_request, now that we have queued rpc requests.
Volker
(This used to be commit
848522d1b64c1c283ac1ea7ce7f1a7a1b014a2aa)
Volker Lendecke [Sat, 5 Nov 2005 09:32:15 +0000 (09:32 +0000)]
r11516: Fix a valgrind bug I introduce with queued requests
(This used to be commit
3e4ab756f421acd747e9ea4c48b0f61d48dfa8fd)
Volker Lendecke [Sat, 5 Nov 2005 09:31:24 +0000 (09:31 +0000)]
r11515: Add some talloc_get_type
(This used to be commit
558c29971d5855308a9d8dfd21e8ac7ec24abc01)
Andrew Bartlett [Sat, 5 Nov 2005 06:38:47 +0000 (06:38 +0000)]
r11514: Fixup debug message
(This used to be commit
b2372cad367a29d7dca596dace703a349b381a09)
Andrew Bartlett [Sat, 5 Nov 2005 06:36:42 +0000 (06:36 +0000)]
r11513: Add the ability to use the local machine account instead of a static
password or delegation.
Add the ability to delegate for RPC pipes on the RPC proxy backend
(the backend itself seems be having problems however).
Andrew Bartlett
(This used to be commit
a7e946bc37e4acfbe2c483b4f1ead0341f9b3d19)
Andrew Bartlett [Sat, 5 Nov 2005 05:44:26 +0000 (05:44 +0000)]
r11512: fix typo
(This used to be commit
4143c22e3077bd5aecb3427ff0a8857dab799400)
Stefan Metzmacher [Fri, 4 Nov 2005 11:02:35 +0000 (11:02 +0000)]
r11503: be quite...
metze
(This used to be commit
e992119bf3a7004c095214b3279c78e59f2c5e2b)
Stefan Metzmacher [Fri, 4 Nov 2005 08:02:20 +0000 (08:02 +0000)]
r11502: make sure we always use the 7 chars for the unix socket name.
this is to test if that works on irix 6.4 where we can only use 16 chars for the sun_path
of the unix sockets.
the plan is to make multiple interfaces possible with socket wrapper,
and the format will change to ("%c%02X%04X", type, iface, port),
which is also 7 char to the file name
metze
(This used to be commit
e60d491864ad7ea7f981bc1918ace4ee3fb2d77a)
Andrew Tridgell [Fri, 4 Nov 2005 04:07:45 +0000 (04:07 +0000)]
r11501: change provision code to use the new display specifiers
(This used to be commit
696fa87a212e65d6337c39a84f682b64b52593a5)
Andrew Tridgell [Fri, 4 Nov 2005 04:07:24 +0000 (04:07 +0000)]
r11500: fixed a bug in the variable substition code using the new limit argument to split()
(This used to be commit
25131efea8c1a2b0bfa7f999766ebcbab8fa8006)
Andrew Tridgell [Fri, 4 Nov 2005 04:06:35 +0000 (04:06 +0000)]
r11499: added a minimal set of display specifiers for mmc to use to display
the core elements of a Samba4 domain
(This used to be commit
bee45531eaa1f7b96f123c146af3bc30681ebdec)
Andrew Tridgell [Fri, 4 Nov 2005 04:05:48 +0000 (04:05 +0000)]
r11498: added an optional extra argument to split to limit the number of
pieces a string is split into. This allows for a fix in the variable
substitution used in provisioning
(This used to be commit
be06785d4835abcbc7d75c0176c85a8ecc0cc11d)
Andrew Bartlett [Fri, 4 Nov 2005 03:30:47 +0000 (03:30 +0000)]
r11497: Don't name parameters 'floor'. Rename fl and floor to epm_floor for
consistancy.
Andrew Bartlett
(This used to be commit
8787eb982f899c68a490fb9c71c21ec1d9ec0308)
Andrew Tridgell [Fri, 4 Nov 2005 02:23:50 +0000 (02:23 +0000)]
r11496: add a minimal ads-compatible schema into our sam.ldb setup. This is
needed for mmc management of Samba4.
(This used to be commit
cbbce4fe403efc0b9e63052c2aa1fbb5972f2abe)
Stefan Metzmacher [Thu, 3 Nov 2005 19:22:01 +0000 (19:22 +0000)]
r11489: add the one replication cycle test to NBT-WINSREPLICATION-QUICK
metze
(This used to be commit
fc53eab2f1bdae471ee68c4b67f57b1eb0821f61)
Stefan Metzmacher [Thu, 3 Nov 2005 19:12:36 +0000 (19:12 +0000)]
r11488: handle the stupid name release demand a windows there send...
metze
(This used to be commit
1b62959a3dd11fface6642e5843224752e188b4a)
Stefan Metzmacher [Thu, 3 Nov 2005 18:38:41 +0000 (18:38 +0000)]
r11487: thanks to make test I noticed a dead lock bug, in the last change,
this only happens with socket_wrapper as socket_connect() returns NT_STATUS_OK
instead of NT_STATUS_MORE_PROCESSING_REQUIRED, and we missed to replace the
fde event handler...
metze
(This used to be commit
f04001f28007ad6bbecdcdf0d1d5887e378d2467)
Stefan Metzmacher [Thu, 3 Nov 2005 16:24:57 +0000 (16:24 +0000)]
r11485: prevent us from calling the request handler recursiv when
the handler calls talloc_free(wrepl_socket)
metze
(This used to be commit
bf0b96f057c7f4ac39409c8710ec0cfb55d9fb04)
Stefan Metzmacher [Thu, 3 Nov 2005 13:13:45 +0000 (13:13 +0000)]
r11484: test some multi homed record merging
metze
(This used to be commit
630f571934c1119dc3156a1e4b909fc6d5ae95fc)
Jelmer Vernooij [Wed, 2 Nov 2005 19:31:04 +0000 (19:31 +0000)]
r11481: Disable pre-linking on VMS
(This used to be commit
2b3ad67b5d53e8c63d81e9fe4ef237c5c927d595)
Stefan Metzmacher [Wed, 2 Nov 2005 17:15:17 +0000 (17:15 +0000)]
r11480: demonstrate the only the positive name query response cares,
not the addresses that are returned in it
metze
(This used to be commit
82e19d68086e795d68cd11eda21448f695aac0a3)
Stefan Metzmacher [Wed, 2 Nov 2005 16:48:22 +0000 (16:48 +0000)]
r11479: fix compiler warning
metze
(This used to be commit
5f45d070208eedaef59bff5f7e05f37719285d84)
Stefan Metzmacher [Wed, 2 Nov 2005 15:56:24 +0000 (15:56 +0000)]
r11478: add owned,active,multi homed vs. * section
metze
(This used to be commit
0231926e0a017bb65a900867a6dee7ca52d7ffe9)
Andrew Bartlett [Wed, 2 Nov 2005 09:51:32 +0000 (09:51 +0000)]
r11477: This seems really nasty, but as I understand it an attacker cannot
change this checksum, as it is inside the encrypted packets.
Where the client (such as Samba3) fakes up GSSAPI, allow it to
continue. We can't rid the world of all Samba3 and similar clients...
Andrew Bartlett
(This used to be commit
e60cdb63fb37e44252f83a56a6302f0bd22dec4d)
Andrew Tridgell [Wed, 2 Nov 2005 07:27:06 +0000 (07:27 +0000)]
r11476: finally fixed the intermittent registry server bug! This has been
cropping up occasionally for ages. The problem was the generic reg
code setting up a backend_data value, which it has no business doing
(backend_data is for backends ...)
(This used to be commit
9d6d03fd1d360e15883bb1b8917ccedcc0d97a5d)
Andrew Tridgell [Wed, 2 Nov 2005 06:49:08 +0000 (06:49 +0000)]
r11475: removed a extraneous ldb_delete() call (i had it there for debugging)
(This used to be commit
daa9dcd8f4b1dde801091ec64faa8158481d171c)
Andrew Tridgell [Wed, 2 Nov 2005 06:41:11 +0000 (06:41 +0000)]
r11474: - enable ldb transactions from ejs
- speed up provisioning a bit using a ldb transaction (also means you
can't end up with a ldb being half done)
(This used to be commit
91dfe304cf688bb81b69ff3192ac84b78b34b311)
Volker Lendecke [Wed, 2 Nov 2005 05:34:17 +0000 (05:34 +0000)]
r11473: Based on work by Jelmer, implement the [async] flag for rpc requests. If it's
not there (it's not yet on *any* call... :-)), the rpc client strictly
sequences calls to an rpc pipe. Might need some more work on the exact
sequencing semantics when a pipe with both sync and async calls is actually
deployed, but I want it in for winbind simplification.
Volker
(This used to be commit
b8f324e4f000971b7dafc263c16dd4af958ee7f9)
Andrew Tridgell [Wed, 2 Nov 2005 04:49:45 +0000 (04:49 +0000)]
r11472: use talloc_get_type() to try to catch an intermittent failure I'm seeing in the ldb winreg backend
(This used to be commit
a56a3696cc6a5186f736e503704c288589e5a833)
Andrew Bartlett [Wed, 2 Nov 2005 04:24:04 +0000 (04:24 +0000)]
r11471: Describe how kerberos forwarding works with the ntvfs.
Andrew Bartlett
(This used to be commit
66d7a51394b26bf9e8737477af965d08d9efde6d)
Andrew Bartlett [Wed, 2 Nov 2005 04:12:47 +0000 (04:12 +0000)]
r11470: To a server trusted for delegation (checked for in the gss libs),
delegate by default.
Andrew Bartlett
(This used to be commit
49d489c81d5b5c86e032ed6edfda4590d1d1f2be)
Andrew Bartlett [Wed, 2 Nov 2005 04:11:36 +0000 (04:11 +0000)]
r11469: Fix typo, and use the correct (RFC4120) session key for delegating
credentials. This means we now delegate to windows correctly.
Andrew Bartlett
(This used to be commit
d6928a3bf86f1ab89f29eac538ceb701c6669913)
Andrew Bartlett [Wed, 2 Nov 2005 03:48:49 +0000 (03:48 +0000)]
r11468: Merge a bit more of init_sec_context from Heimdal CVS into our
DCE_STYLE modified version, and add parametric options to control
delegation.
It turns out the only remaining issue is sending delegated credentials
to a windows server, probably due to the bug lha mentions in his blog
(using the wrong key).
If I turn delgation on in smbclient, but off in smbd, I can proxy a
cifs session.
I can't wait till Heimdal 0.8, so I'll see if I can figure out the fix
myself :-)
Andrew Bartlett
(This used to be commit
fd5fd03570c13f5644e53ff89ac8eca7c0985740)
Andrew Tridgell [Wed, 2 Nov 2005 03:23:05 +0000 (03:23 +0000)]
r11467: yay! mmc now accepts our schema. The trick was to get all the OID
mappings right for the attributeTypes field of the aggregate schema
now to add the display specifiers and I won't need the proxy module
any more
(This used to be commit
69264362bd408f493487482a8d5e9779d9a0d475)