Volker Lendecke [Sun, 22 May 2011 12:16:46 +0000 (14:16 +0200)]
s3: Remove the smbtorture3 OPLOCK3 test
This is the last user of cli_receive_smb. Oplocks are nowadays tested
in smbtorture4, this mainly has historic value
Volker Lendecke [Sun, 22 May 2011 16:50:16 +0000 (18:50 +0200)]
s3: Convert the OPEN4 test to async oplock handling
This removes a caller of cli_receive_smb
Volker Lendecke [Sat, 21 May 2011 20:20:18 +0000 (22:20 +0200)]
s3: Remove clistr_align_out
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Sat May 21 23:31:12 CEST 2011 on sn-devel-104
Volker Lendecke [Sat, 21 May 2011 18:14:30 +0000 (20:14 +0200)]
s3: Remove unused cli_setup_bcc
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Sat May 21 21:24:13 CEST 2011 on sn-devel-104
Matthieu Patou [Sat, 21 May 2011 10:35:58 +0000 (14:35 +0400)]
s4:sam.py - add tests to check that setting "userAccountValue" on usersdon't impact the "primaryGroupID" attribute
Notice: The domain administrators groups isn't referenced as "Domain Admins"
since this name could differ.
Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-User: Matthias Dieter Wallnöfer <mdw@samba.org>
Autobuild-Date: Sat May 21 19:19:57 CEST 2011 on sn-devel-104
Matthieu Patou [Sat, 21 May 2011 07:56:45 +0000 (11:56 +0400)]
s4:samldb LDB module - don't change the "primaryGroupId" on LDB modifications unless we are a computer/dc/rodc
Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
Matthias Dieter Wallnöfer [Wed, 13 Apr 2011 07:01:42 +0000 (09:01 +0200)]
s4:lsa RPC server - handle LDB flags as "unsigned"
Signed-off-by: Metze
Matthias Dieter Wallnöfer [Sun, 10 Apr 2011 17:54:31 +0000 (19:54 +0200)]
s4:ldb-samba/ldb_wrap.*-dsdb/samdb/samdb.c - handle LDB connection flags as unsigned
The LDB API ("ldb_connect") prescribes that they should be "unsigned".
Signed-off-by: Metze
Matthias Dieter Wallnöfer [Sun, 10 Apr 2011 17:48:07 +0000 (19:48 +0200)]
ldb:pyldb.c - all flags should be unsigned
Adapt it to the previous commits
Reviewed-by: Jelmer + Metze
Matthias Dieter Wallnöfer [Wed, 13 Apr 2011 07:05:34 +0000 (09:05 +0200)]
ldb:ldb_sqlite3.c - all LDB flags should be handled as "unsigned"
Signed-off-by: Metze
Matthias Dieter Wallnöfer [Sun, 10 Apr 2011 17:44:53 +0000 (19:44 +0200)]
ldb:tools/cmdline.c + tools/ldbtest.c - the connection flags are typed as "unsigned"
Signed-off-by: Metze
Matthias Dieter Wallnöfer [Wed, 11 May 2011 12:25:11 +0000 (14:25 +0200)]
ldb:ldbtest.c - make more use of LDB constants
Signed-off-by: Metze
Matthias Dieter Wallnöfer [Sat, 7 May 2011 09:06:38 +0000 (11:06 +0200)]
s4:torture - always cast correctly when using the "%x" format string argument
Signed-off-by: Metze
Matthias Dieter Wallnöfer [Sat, 7 May 2011 08:37:24 +0000 (10:37 +0200)]
s4:auth/ntlmssp/ntlmssp_server.c - add "const" in front of "dnsdomain"
Signed-off-by: Metze
Matthieu Patou [Mon, 7 Feb 2011 06:55:26 +0000 (09:55 +0300)]
add a demo script for dirsync
Signed-off-by: Andrew Tridgell <tridge@samba.org>
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Sat May 21 15:40:26 CEST 2011 on sn-devel-104
Matthieu Patou [Sun, 27 Feb 2011 09:24:45 +0000 (12:24 +0300)]
s4-dsdb: add unit tests for dirsync control
Signed-off-by: Andrew Tridgell <tridge@samba.org>
Matthieu Patou [Thu, 13 Jan 2011 18:55:11 +0000 (21:55 +0300)]
s4-dsdb: implementation of the dirsync control
Signed-off-by: Andrew Tridgell <tridge@samba.org>
Matthieu Patou [Sat, 19 Mar 2011 22:20:22 +0000 (01:20 +0300)]
s4-dsdb: introduce dsdb_module_search_tree
With this function your own search tree can be specified
This function is similar to ldb_build_search_req_ex as it allows to
pass a parse tree structure.
Signed-off-by: Andrew Tridgell <tridge@samba.org>
Matthieu Patou [Mon, 7 Mar 2011 22:02:32 +0000 (01:02 +0300)]
s4-dsdb: relax a bit the checks on read acl when dirsync control is specified
Signed-off-by: Andrew Tridgell <tridge@samba.org>
Matthieu Patou [Sat, 16 Apr 2011 07:46:40 +0000 (11:46 +0400)]
s4-dsdb: create flag for requesting ACL relax in case of DIRSYNC request
Signed-off-by: Andrew Tridgell <tridge@samba.org>
Matthieu Patou [Mon, 7 Feb 2011 06:58:17 +0000 (09:58 +0300)]
s4: do not change the critical flag when it's on a dirsync control
Signed-off-by: Andrew Tridgell <tridge@samba.org>
Matthieu Patou [Thu, 14 Apr 2011 05:48:14 +0000 (09:48 +0400)]
selftest: Allow to test samba4 with ACL on read set
Signed-off-by: Andrew Tridgell <tridge@samba.org>
Matthieu Patou [Fri, 20 May 2011 19:50:55 +0000 (23:50 +0400)]
s4: add blackbox test for rename
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Sat May 21 09:50:34 CEST 2011 on sn-devel-104
Matthieu Patou [Fri, 20 May 2011 19:50:11 +0000 (23:50 +0400)]
upgradeprovision: add hostname in the blackbox tests
Matthieu Patou [Fri, 20 May 2011 16:45:43 +0000 (20:45 +0400)]
Make the purge first so that the provision can reused during tests
Matthieu Patou [Mon, 25 Apr 2011 20:04:32 +0000 (00:04 +0400)]
Add a script for renaming a DC
Matthieu Patou [Sat, 23 Apr 2011 09:47:27 +0000 (13:47 +0400)]
s4-python: Remove not used imports
Matthieu Patou [Fri, 20 May 2011 15:43:19 +0000 (19:43 +0400)]
s4-python: move function find_provision_key_parameters to provision namespace as it can be used not only for upgradeprovision
Jeremy Allison [Fri, 20 May 2011 21:43:50 +0000 (14:43 -0700)]
Patch for bug #8156 - net ads join fails to use the user's kerberos ticket.
If kerberos_get_realm_from_hostname() or kerberos_get_default_realm_from_ccache() fails due to
a misconfigured krb5.conf, try the "realm =" from smb.conf as a fallcback before going back to
NTLMSSP (which we'll do anyway).
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Sat May 21 00:58:09 CEST 2011 on sn-devel-104
Jeremy Allison [Fri, 20 May 2011 21:34:18 +0000 (14:34 -0700)]
The "workgroup" parameter is not used at all in cli_session_setup_kerberos(). Remove it.
Jeremy Allison [Fri, 20 May 2011 19:27:02 +0000 (12:27 -0700)]
Fix bug #8157 - std_pcap_cache_reload() fails to parse a cups printcap file correctly.
The parsing code made some strange assumptions about what is a printer
name, and what is a comment.
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Fri May 20 22:52:23 CEST 2011 on sn-devel-104
Jeremy Allison [Thu, 19 May 2011 23:39:18 +0000 (16:39 -0700)]
Fix bug 8133 - strange behavior for the file (whose filename first character is period ) in SMB2 case.
When doing SMB2 renames, we need to match all filetypes (no attributes field in the SMB2 call).
By default a file starting with a period is returned as FILE_ATTRIBUTE_HIDDEN in Samba.
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Fri May 20 19:26:04 CEST 2011 on sn-devel-104
Jeremy Allison [Thu, 19 May 2011 23:38:11 +0000 (16:38 -0700)]
Optimization. If the attributes passed to can_rename() include both FILE_ATTRIBUTE_HIDDEN and FILE_ATTRIBUTE_SYSTEM then there's no point in reading the source DOS attribute, as we're not going to deny the rename on attribute match.
Christian Ambach [Fri, 20 May 2011 12:17:36 +0000 (14:17 +0200)]
s3:smbd remove unused code
in the early CTDB days, the RELEASE_IP message was defined
and some code was added to react on such a message to make
smbd exit if the IP address it was using for the server socket
is removed by CTDB.
Later, it was discovered that we need to stop smbd immediately
and logic was added to ctdb_conn to call release_ip() without
going through the messaging system.
So this code is not used and can be removed
Autobuild-User: Christian Ambach <ambi@samba.org>
Autobuild-Date: Fri May 20 16:18:24 CEST 2011 on sn-devel-104
Volker Lendecke [Fri, 20 May 2011 11:07:17 +0000 (13:07 +0200)]
s3: Fork the echo handler only after SMB1 negprot is done
This enables activating the echo responder also if SMB2 is enabled, albeit it
will only be used for SMB1 at this moment.
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Fri May 20 15:06:03 CEST 2011 on sn-devel-104
Volker Lendecke [Fri, 20 May 2011 11:25:31 +0000 (13:25 +0200)]
s3: Fix Coverity ID 2573: UNUSED_VALUE
Andrew B., please check!
Volker Lendecke [Fri, 20 May 2011 13:21:43 +0000 (15:21 +0200)]
s3: Fix an uninitialized variable
Stefan Metzmacher [Fri, 20 May 2011 06:31:16 +0000 (08:31 +0200)]
s3:testparm: don't return an error for a warning message
metze
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Fri May 20 13:14:39 CEST 2011 on sn-devel-104
Andreas Schneider [Wed, 18 May 2011 10:10:42 +0000 (12:10 +0200)]
s3-epmapper: Fixed endpoint registration.
Autobuild-User: Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date: Fri May 20 12:03:18 CEST 2011 on sn-devel-104
Volker Lendecke [Fri, 20 May 2011 06:36:46 +0000 (08:36 +0200)]
s3: Remove unused cli_setup_packet()
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Fri May 20 10:51:36 CEST 2011 on sn-devel-104
Matthieu Patou [Fri, 20 May 2011 06:30:54 +0000 (10:30 +0400)]
torture-dfs: fix a typo that was causing the test to be flacky
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Fri May 20 09:39:12 CEST 2011 on sn-devel-104
Christian Ambach [Thu, 19 May 2011 16:13:40 +0000 (18:13 +0200)]
Fix Bug 8152 - smbd crash in release_ip()
release_ip() needs the private_data, but it was never saved away
to feed it into release_ip() later
Autobuild-User: Christian Ambach <ambi@samba.org>
Autobuild-Date: Thu May 19 21:21:14 CEST 2011 on sn-devel-104
Volker Lendecke [Thu, 19 May 2011 16:48:09 +0000 (18:48 +0200)]
s3: Remove a use of cli_send_smb
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Thu May 19 20:11:33 CEST 2011 on sn-devel-104
Volker Lendecke [Thu, 19 May 2011 15:37:19 +0000 (17:37 +0200)]
fix the WAF build
Autobuild-User: Volker Lendecke <vlendec@samba.org>
Autobuild-Date: Thu May 19 18:46:51 CEST 2011 on sn-devel-104
Volker Lendecke [Thu, 19 May 2011 11:43:15 +0000 (13:43 +0200)]
s3: Do central cli_set_error
Volker Lendecke [Thu, 19 May 2011 07:12:13 +0000 (09:12 +0200)]
s3: Remove the use of cli->inbuf/outbuf from cli_session_request
Volker Lendecke [Thu, 19 May 2011 06:36:54 +0000 (08:36 +0200)]
s3: Add sync read_smb
Volker Lendecke [Thu, 19 May 2011 06:23:50 +0000 (08:23 +0200)]
s3: Make read_smb_send/recv public
Jeremy Allison [Wed, 18 May 2011 22:28:28 +0000 (15:28 -0700)]
Fix bug found when building on an IPv6-only system by Kai Blin.
When building on IPv6-only, doing:
hints.ai_family = AF_INET;
getaddrinfo("0.0.0.0", NULL, &hints, &ppres)
fails as AF_INET is unavailable on an IPv6-only system. This
causes us to fallback to our replacement getaddrinfo code
which is IPv4-only.
As we're only trying to detect a specific AIX bug here,
broaden the tests to find that bug, and also test for
working getaddrinfo in an IPv6-only safe way.
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Thu May 19 02:21:54 CEST 2011 on sn-devel-104
Michael Adam [Wed, 18 May 2011 08:35:42 +0000 (10:35 +0200)]
packaging(RHEL-CTDB): honour rpm build target options handed in to makerpms.sh
This allows to call e.g. "makerpms.sh -bs" to only build the source rpm.
Autobuild-User: Michael Adam <obnox@samba.org>
Autobuild-Date: Wed May 18 23:10:59 CEST 2011 on sn-devel-104
Michael Adam [Fri, 6 May 2011 15:22:06 +0000 (17:22 +0200)]
packaging(RHEL-CTDB): adapt configure.rpm
Michael Adam [Fri, 6 May 2011 15:21:10 +0000 (17:21 +0200)]
packaging(RHEL-CTDB): enforce building of libtdb and libtalloc
Michael Adam [Fri, 6 May 2011 10:29:10 +0000 (12:29 +0200)]
packaging(RHEL-CTDB): build libtdb and libtalloc packages ourselves
and add appropriate dependencies to the samba-common package.
It should also be possible to run with appropriate system talloc
and tdb packages.
Michael Adam [Fri, 6 May 2011 16:36:38 +0000 (18:36 +0200)]
packaging(RHEL-CTDB): update configure.rpm (--disable-smbtorture4)
Michael Adam [Fri, 6 May 2011 16:35:55 +0000 (18:35 +0200)]
packaging(RHEL-CTDB): disable smbtorture4 in the rpm build
Michael Adam [Fri, 6 May 2011 10:03:52 +0000 (12:03 +0200)]
packaging(RHEL-CTDB): Remove the packaging of the winbind-32bit compat package
Volker Lendecke [Wed, 27 Apr 2011 08:25:05 +0000 (10:25 +0200)]
packaging(RHEL-CTDB): create the rpm directories
In RHEL6, rpms are built in /root/rpmbuild, and those directories do not
necessarily exist.
Holger Hetterich [Wed, 18 May 2011 13:24:23 +0000 (15:24 +0200)]
Make protocol version 2 the default protocol, and only run on version 1 if V1 is explcitly given as a module option.
I haven't received a single line of feedback on protocol v1
for at least 1 1/2 years, whereas protocol v2 has an active
userbase and more people developing around it.
This patch includes a manpage update, describing the new
version handling, as well as documenting the recent changes
making the module transfer the IP address of the client machine
as submitted with
464c69609aa7e582f484c1d357b7c6d3eb2bcbe3.
Signed-off-by: Jeremy Allison <jra@samba.org>
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Wed May 18 21:36:44 CEST 2011 on sn-devel-104
Andrew Bartlett [Wed, 18 May 2011 13:57:10 +0000 (23:57 +1000)]
lib/util/charset: Remove unused strcasecmp_w and strncasecmp_w
Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Wed May 18 17:22:15 CEST 2011 on sn-devel-104
Andrew Bartlett [Wed, 18 May 2011 04:13:18 +0000 (14:13 +1000)]
s3-selftest Remove unused and unimplemented info3cache test
Andrew Bartlett [Wed, 18 May 2011 03:57:26 +0000 (13:57 +1000)]
lib/util/charset use talloc_stackframe() rather than talloc_tos()
This is common code, and we can't assume a talloc_stackframe() so we
must create it.
Andrew Bartlett
Andrew Bartlett [Wed, 18 May 2011 02:06:25 +0000 (12:06 +1000)]
selftest: Re-enable strings.py from source3/stf as a python subunit test
Andrew Bartlett [Wed, 18 May 2011 01:53:34 +0000 (11:53 +1000)]
s3-testparm Warn more on incorrect use of 'password server'
Andrew Bartlett [Wed, 18 May 2011 01:51:37 +0000 (11:51 +1000)]
lib/util/charset Don't allow invalid 'dos charset = utf8'
No DOS client used UTF8, and this creates subtle, difficult to
disagnose breakage of schannel (domain membership).
Andrew Bartlett
Andrew Bartlett [Wed, 18 May 2011 00:34:03 +0000 (10:34 +1000)]
s3-selftest Remove unused sambalib.py from comfychair test system
The test binary t_snprintf has moved to lib/replace
Andrew Bartlett [Fri, 13 May 2011 18:23:36 +0000 (20:23 +0200)]
s3-lib Replace StrnCaseCmp() with strncasecmp_m()
strncasecmp_m() never needs to call to talloc, and via next_codepoint()
still has an ASCII fast-path bypassing iconv() calls.
Andrew Bartlett
Andrew Bartlett [Fri, 13 May 2011 18:21:30 +0000 (20:21 +0200)]
s3-lib Replace StrCaseCmp() with strcasecmp_m()
strcasecmp_m() never needs to call to talloc, and via next_codepoint()
still has an ASCII fast-path bypassing iconv() calls.
Andrew Bartlett
Andrew Bartlett [Mon, 16 May 2011 12:27:28 +0000 (22:27 +1000)]
s3-param: Remove unused snum2params_static
Andrew Bartlett [Mon, 16 May 2011 12:26:00 +0000 (22:26 +1000)]
s3-param: remove unused share_iterator functions
Andrew Bartlett [Mon, 16 May 2011 12:55:29 +0000 (22:55 +1000)]
s4-libnet: Remove libnet_Join and create libnet_Join_member
libnet_Join conflicts with a function in the source3 netapi of the
same name, and the ability to join as a DC via this particular method
is unused.
Andrew Bartlett
Andrew Bartlett [Mon, 16 May 2011 11:57:27 +0000 (21:57 +1000)]
build: Add 'cap' as a dependency of samba3core
Andrew Bartlett [Mon, 16 May 2011 11:20:36 +0000 (21:20 +1000)]
build: Make POPT_SAMBA3 a library
This avoids some duplicate symbols when libnet and libsmbclient are
linked into the same binary (smbtorture4).
Andrew Bartlett
Andrew Bartlett [Mon, 16 May 2011 11:18:25 +0000 (21:18 +1000)]
librpc/ndr Merge ndr_print_sockaddr_storage() into common code
There is no longer a reason to leave this source3 specific, and this
brings it into a library (avoiding duplicate symbols).
Andrew Bartlett
Andrew Bartlett [Mon, 16 May 2011 11:14:48 +0000 (21:14 +1000)]
build: Make util_reg subsystem in libcli/registry a library
Andrew Bartlett [Mon, 16 May 2011 11:08:20 +0000 (21:08 +1000)]
build: Add rpc_client grouping library
Andrew Bartlett [Mon, 16 May 2011 11:08:06 +0000 (21:08 +1000)]
build: Add depenencies needed by Samba3 subsystems
Andrew Bartlett [Mon, 16 May 2011 11:06:22 +0000 (21:06 +1000)]
build: Make auth_sam_reply a library
Andrew Bartlett [Sat, 14 May 2011 19:54:57 +0000 (21:54 +0200)]
build: Make msrpc3 a library
Andrew Bartlett [Sat, 14 May 2011 17:55:57 +0000 (19:55 +0200)]
build: Expand dcerpc-samba grouping library
This is possible in common now because the generated RPC code does not
rely on a particular dcerpc layer.
Andrew Bartlett
Andrew Bartlett [Thu, 12 May 2011 18:12:07 +0000 (20:12 +0200)]
waf-build: Add more libraries to avoid duplicate symbols
The new source of duplicates is calling libnetapi from inside smbtorture.
Andrew Bartlett
Andrew Bartlett [Tue, 17 May 2011 09:39:25 +0000 (19:39 +1000)]
s4-selftest: gensec test is finished, don't skip
Andrew Bartlett [Tue, 17 May 2011 09:26:40 +0000 (19:26 +1000)]
selftest: Don't skip Samba3 tests in the top level build
The regular expressions here were not specific enough, they matched
the samba3. names from the source3/selftest/tests.py
Found by Andreas Schneider
Andrew Bartlett
Günther Deschner [Wed, 18 May 2011 11:15:01 +0000 (13:15 +0200)]
s3-smbtorture: fix build warning (shadowed NTSTATUS variable).
Guenther
Autobuild-User: Günther Deschner <gd@samba.org>
Autobuild-Date: Wed May 18 14:17:13 CEST 2011 on sn-devel-104
Matthieu Patou [Wed, 18 May 2011 04:44:05 +0000 (08:44 +0400)]
torture: desactivate the level 4 tests for DFS referral
Autobuild-User: Matthieu Patou <mat@samba.org>
Autobuild-Date: Wed May 18 13:04:00 CEST 2011 on sn-devel-104
Matthieu Patou [Tue, 17 May 2011 21:14:24 +0000 (01:14 +0400)]
s4-dfs: Add workaround so that XP really works well
XP seems to have problems working at a correct speed (or even
working at all if we return referral of level 4).
Björn Baumbach [Mon, 16 May 2011 12:25:01 +0000 (14:25 +0200)]
s3-modules: Fix the build of gpfs.c on RHEL 6.0 with gpfs 3.4.0-4
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Wed May 18 11:58:14 CEST 2011 on sn-devel-104
Björn Baumbach [Thu, 3 Feb 2011 10:06:57 +0000 (11:06 +0100)]
s3-docs: change eventlog path from lockdir to statedir
See elog_tdbname() in source3/lib/eventlog/eventlog.c.
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Björn Baumbach [Mon, 7 Feb 2011 10:27:02 +0000 (11:27 +0100)]
s3-torture/nbio.c: Fix cli_errstr() usage (part of bug #7864)
Convert cli_errstr() to nt_errstr()
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Björn Baumbach [Mon, 7 Feb 2011 10:27:02 +0000 (11:27 +0100)]
s3-client/clitar.c: Fix cli_errstr() usage (part of bug #7864)
Convert cli_errstr() to nt_errstr()
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Björn Baumbach [Tue, 1 Feb 2011 15:58:48 +0000 (16:58 +0100)]
s3-net_rpc_printer.c: Fix cli_errstr() usage (part of bug #7864)
Convert cli_errstr() to nt_errstr()
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Björn Baumbach [Fri, 4 Feb 2011 13:25:52 +0000 (14:25 +0100)]
s3-libsmb/passchange.c: Fix cli_errstr() usage (part of bug #7864)
Convert cli_errstr() to nt_errstr()
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Björn Baumbach [Tue, 1 Feb 2011 10:27:55 +0000 (11:27 +0100)]
s3-torture/mangle_test.c: Fix cli_errstr() usage (part of bug #7864)
Convert cli_errstr() to nt_errstr()
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Björn Baumbach [Thu, 20 Jan 2011 13:21:40 +0000 (14:21 +0100)]
s3-torture: torture.c: Fix cli_errstr() usage (part of bug #7864)
Convert cli_errstr() to nt_errstr()
Signed-off-by: Stefan Metzmacher <metze@samba.org>
Stefan Metzmacher [Mon, 2 May 2011 10:51:58 +0000 (12:51 +0200)]
s4:ntvfs/cifs: return NT_STATUS_INTERNAL_ERROR if no credentials are available
This is a configuration problem on the server, no invalid parameter
from the client.
metze
Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Wed May 18 08:49:00 CEST 2011 on sn-devel-104
Stefan Metzmacher [Thu, 7 Apr 2011 09:16:55 +0000 (11:16 +0200)]
s4:kdc: split s4u2self and s4u2proxy checks
metze
Stefan Metzmacher [Thu, 7 Apr 2011 10:16:16 +0000 (12:16 +0200)]
s4:kdc: UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION => flags.trusted_for_delegation
metze
Stefan Metzmacher [Thu, 28 Apr 2011 15:10:03 +0000 (17:10 +0200)]
s4:auth/credentials: S4U2Self should force CRED_MUST_USE_KERBEROS
Otherwise we would not impersonate the desired principal.
This still doesn't work for plaintext auth, but should
avoid ntlmssp.
metze
Stefan Metzmacher [Fri, 22 Apr 2011 09:22:50 +0000 (11:22 +0200)]
s4:auth/credentials: pass 'self_service' to cli_credentials_set_impersonate_principal()
This also adds a cli_credentials_get_self_service() helper function.
In order to support S4U2Proxy we need to be able to set
the service principal for the S4U2Self step independent of the
target principal.
metze
Stefan Metzmacher [Fri, 25 Mar 2011 14:44:50 +0000 (15:44 +0100)]
s4:gensec_gssapi: avoid delegation if s4u2self/proxy is used
metze
Stefan Metzmacher [Thu, 7 Apr 2011 12:40:54 +0000 (14:40 +0200)]
HEIMDAL:kdc: check and regenerate the PAC in the s4u2proxy case
TODO: we need to add a S4U_DELEGATION_INFO to the PAC later.
metze