Andrew Bartlett [Wed, 29 Jun 2005 22:31:45 +0000 (22:31 +0000)]
r8000: It seems make proto is required, for reasons I can't explain.
Andrew Bartlett
(This used to be commit
b10f224f5515a97fc4fd5c40b304180593df79ea)
Rafal Szczesniak [Wed, 29 Jun 2005 20:30:12 +0000 (20:30 +0000)]
r7999: Fix lacking structure definition.
rafal
(This used to be commit
6886aefe4c78e3e208eacb3c4b76f1189bd1352a)
Andrew Bartlett [Wed, 29 Jun 2005 13:55:09 +0000 (13:55 +0000)]
r7993: Further work on the Krb5 PAC.
We now generate the PAC, and can verifiy both our own PAC and the PAC
from Win2k3.
This commit adds the PAC generation code, spits out the code to get
the information we need from the NETLOGON server back into a auth/
helper function, and adds a number of glue functions.
In the process of building the PAC generation code, some hints in the
Microsoft PAC specification shed light on other parts of the code, and
the updates to samr.idl and netlogon.idl come from those hints.
Also in this commit:
The Heimdal build package has been split up, so as to only link the
KDC with smbd, not the client utils.
To enable the PAC to be veified with gensec_krb5 (which isn't quite
dead yet), the keyblock has been passed back to the calling layer.
Andrew Bartlett
(This used to be commit
e2015671c2f7501f832ff402873ffe6e53b89466)
Andrew Bartlett [Wed, 29 Jun 2005 13:48:51 +0000 (13:48 +0000)]
r7991: I forgot to free the keyblock once we are done with it.
Andrew Bartlett
(This used to be commit
a68e348375ab026385e7d5162ed8da8f2adbd84e)
Andrew Bartlett [Wed, 29 Jun 2005 07:55:16 +0000 (07:55 +0000)]
r7990: An attempt at documenting the current state of cludges required to get
Samba4 going, with kerberos.
Andrew Bartlett
(This used to be commit
d027d0f10682ca5906d2f1ae2889d476db61be9a)
Andrew Bartlett [Wed, 29 Jun 2005 03:01:35 +0000 (03:01 +0000)]
r7989: Allow the use of hashed passwords in the kerberos client and server,
and create the in-memory keytab with the correct kvno, if available.
Andrew Bartlett
(This used to be commit
7b7b2b038e25f3d767b5db7d6e41dd947fdde091)
Andrew Bartlett [Wed, 29 Jun 2005 02:28:57 +0000 (02:28 +0000)]
r7988: Store the KVNO for the machine account, and set it up in the provision.
Andrew Bartlett
(This used to be commit
90e94a4630c24282cd93ee05e258877b38e24a57)
Andrew Bartlett [Tue, 28 Jun 2005 22:13:53 +0000 (22:13 +0000)]
r7986: Fix the compile, thanks to HotaruT.
This won't actually work until I get the keyblock filled in again, but
at least it will compile.
I first need to decide if we want to keep the server-side gensec_krb5
code at all, now we have the GSSAPI layer doing what we want.
Andrew Bartlett
(This used to be commit
28e49de9293002ee89f0666144c9028daefdde88)
Andrew Bartlett [Tue, 28 Jun 2005 10:58:41 +0000 (10:58 +0000)]
r7980: Forgot to add kerberos_pac.c to this config.mk file.
Andrew Bartlett
(This used to be commit
bba58a1876353effbef540dd0db9e66db5343c35)
Andrew Bartlett [Tue, 28 Jun 2005 09:37:04 +0000 (09:37 +0000)]
r7979: Metze reminded me to try one more combination, and we can now verify
the 'PAC', required for interopability with Active Directory.
This is still a cludge, as it doesn't handle different encryption
types, but that should be fairly easy to fix (needs PIDL/IDL changes).
Andrew Bartlett
(This used to be commit
690cfc44cef9b349cc31417d8353b6ce1c7832e1)
Andrew Bartlett [Tue, 28 Jun 2005 08:27:50 +0000 (08:27 +0000)]
r7978: A start again on PAC verification. I have noticed that the kerberos
keys appear at the end of the PAC, which I feel is deliberate (it
makes this much easier).
I still can't make it work, but I'm sure we are closer.
Andrew Bartlett
(This used to be commit
6f0e1c80ae7b1e31e7a3fbff84f07442ee5a31cf)
Andrew Tridgell [Tue, 28 Jun 2005 02:49:35 +0000 (02:49 +0000)]
r7977: split up 'make clean' a little more as it is overflowing the command line size limits
on some platforms
(This used to be commit
e18dc32074fe56d7ccbcf9cc621a4b88abe957b1)
Andrew Bartlett [Tue, 28 Jun 2005 00:57:38 +0000 (00:57 +0000)]
r7971: structs.h update
(This used to be commit
31e7df1392f39e170e3d072b8356e746208d0621)
Andrew Bartlett [Tue, 28 Jun 2005 00:57:15 +0000 (00:57 +0000)]
r7970: This SMB signing code (merged from 3.0) turned out to be bogus.
Andrew Bartlett
(This used to be commit
817160ec1a85724c8bf482f128ea687396de0888)
Andrew Bartlett [Tue, 28 Jun 2005 00:56:39 +0000 (00:56 +0000)]
r7969: It seems reasonable that our tickets be marked renewable, in the
absense of an apparent AD flag to control this behaviour.
Andrew Bartlett
(This used to be commit
9886aa6f0e64cdb30774bfba3f2c683a3dbec9c4)
Andrew Bartlett [Tue, 28 Jun 2005 00:55:44 +0000 (00:55 +0000)]
r7968: Pull the PAC from within GSSAPI, rather than only when using our own
'mock GSSAPI'.
Many thanks to Luke Howard for the work he has done on Heimdal for
XAD, to provide the right API hooks in GSSAPI.
Next step is to verify the signatures, and to build the PAC for the
KDC end.
Andrew Bartlett
(This used to be commit
2e82743c98e563e97c5a215d09efa0121854d0f7)
Andrew Bartlett [Tue, 28 Jun 2005 00:52:10 +0000 (00:52 +0000)]
r7967: We don't have the ms_krb5 stuff any more.
Andrew Bartlett
(This used to be commit
56a5ccd7d924343609698b034b91b4891fb3f08a)
Andrew Bartlett [Tue, 28 Jun 2005 00:51:35 +0000 (00:51 +0000)]
r7966: We need a better way to do this, but enable the KDC by default, if we
have kerberos.
Andrew Bartlett
(This used to be commit
3d82b1417b9f2e31089cb8ee7e4f98bd226f2e75)
Andrew Bartlett [Tue, 28 Jun 2005 00:50:40 +0000 (00:50 +0000)]
r7965: Remove the GENSEC password callback structure members, as these are no
longer used.
Andrew Bartlett
(This used to be commit
14be7d95694dd7557af67dc94ee83a983d2f05f6)
Jelmer Vernooij [Mon, 27 Jun 2005 22:07:28 +0000 (22:07 +0000)]
r7958: More debian packaging updates; packages build now with
a few minor issues.
Move ldb manpages one level higher - there is no longer a need to have
subdirectories.
(This used to be commit
e8e3524b2394f4107230715ea38fb619332e0251)
Stefan Metzmacher [Mon, 27 Jun 2005 19:32:52 +0000 (19:32 +0000)]
r7955: we should not free a struct which is passed as a parameter, to a function
the caller should free it
this fixed a double free bug noticed by
Дейтер Александр Валериевич <tiamat@komi.mts.ru>
metze
(This used to be commit
ee1a5d5419f4d79af5c447a6b397a0f4dc89310a)
Jelmer Vernooij [Mon, 27 Jun 2005 12:09:52 +0000 (12:09 +0000)]
r7943: Add 'make manpages', fix 'make installman' and 'make uninstallman'.
Not part of the "all" make target yet, as it requires xsltproc
(This used to be commit
fd3f4636438cf1d9c0dd802064033271b9e4d935)
Jelmer Vernooij [Mon, 27 Jun 2005 10:00:43 +0000 (10:00 +0000)]
r7942: Debian packages updates and fixes. Use dh_install for diverting
files to different packages.
(This used to be commit
da706b14ab9391cc8af1789f3533a94ab935150f)
Andrew Tridgell [Mon, 27 Jun 2005 07:02:39 +0000 (07:02 +0000)]
r7941: fixed handling of ASN.1 objects bigger than 64k
(This used to be commit
f88a6018821163a52bdf384142c7d16f5011ab4e)
Andrew Tridgell [Mon, 27 Jun 2005 05:46:45 +0000 (05:46 +0000)]
r7940: use local path first for ldbadd in provisioning
(This used to be commit
cff7507f593816a831a14f03862f7bdb24c15d4f)
Andrew Tridgell [Mon, 27 Jun 2005 05:28:09 +0000 (05:28 +0000)]
r7939: fix default hostname in provision
(This used to be commit
79d174005e3508745ea8b0bda2321abd184bf68b)
Simo Sorce [Mon, 27 Jun 2005 00:00:50 +0000 (00:00 +0000)]
r7937: main file was missing
(This used to be commit
3898cdb0dc4722a7eb60a61b54ef778dab475aed)
Simo Sorce [Sun, 26 Jun 2005 23:59:22 +0000 (23:59 +0000)]
r7936: new ldb_dn_explode and ldb_dn_casefold functions and co
(This used to be commit
7ccf21ab4eeb9821e457308a239f2103a106fb12)
Andrew Bartlett [Sun, 26 Jun 2005 23:21:25 +0000 (23:21 +0000)]
r7935: auth_unix now uses crypt(), so depend on -lcrypt.
This builds on the work tridge did to make -lcrypt conditional, rather
than globally linked. This was needed for Heimdal stuff, but then I
'fixed' heimdal, and we now reintroduce it here.
Andrew Bartlett
(This used to be commit
83d9d8f4827280a68dfd07beccf2924c9e0825b0)
Simo Sorce [Sun, 26 Jun 2005 22:33:50 +0000 (22:33 +0000)]
r7934: ported samba3 pass_check functions to auth_unix.c
not having these platforms they are untested,
let's hope the buildfarm can catch any problem
(This used to be commit
08ec299dcbdc8dba12568b95b636866f147b2e7c)
Andrew Tridgell [Sun, 26 Jun 2005 12:06:29 +0000 (12:06 +0000)]
r7933: darn, forgot to add this
(This used to be commit
773f7afb7a99ae1f6df45dcf52cc358b52c0ba22)
Stefan Metzmacher [Sun, 26 Jun 2005 11:35:50 +0000 (11:35 +0000)]
r7932: don't use the nbt called name as server name, for dcerpc_server_name()
in the ncacn_np trnaport
it's now supported to use the ip address in smbtorture for ncacn_np tests
that use dcerpc_server_name(),
and we can now pass the dns host name in the tree connect when we have the dns name
on the smbtorture command line
metze
(This used to be commit
e29edbc7e62c738564ae842c9c01c969f5c70e5d)
Andrew Tridgell [Sun, 26 Jun 2005 11:34:34 +0000 (11:34 +0000)]
r7931: fixed a bug in the cifs backend found with the new test code
(This used to be commit
447d5fcc1bdbdeaf2d96dbcace36b480b5a18c73)
Andrew Tridgell [Sun, 26 Jun 2005 11:34:03 +0000 (11:34 +0000)]
r7930: - added testing of the cifs passthru backend
- removed redundent $ADDARG code in selftest
(This used to be commit
e431d0e9525c633c663ca48baea321369e39b226)
Andrew Tridgell [Sun, 26 Jun 2005 10:47:31 +0000 (10:47 +0000)]
r7929: yet another attempt at fixing installswat on freebsd 5
nodie assures me this works now ...
(This used to be commit
3c17207487a84ac4f71a88e2efe57c153e9889b4)
Tim Potter [Sun, 26 Jun 2005 07:34:55 +0000 (07:34 +0000)]
r7928: Add rename, unlink and list commands.
list() returns a list of strings, but maybe it should be a list of
objects with size, attrib, short name etc.
(This used to be commit
696aa182d5a159c26b80829e1eae9a9894cb7986)
Andrew Tridgell [Sun, 26 Jun 2005 07:31:45 +0000 (07:31 +0000)]
r7927: fixed an error on partial socket writes in the rpc server
(This used to be commit
3c7b5de67294ef161289af7da6716b44ffc5d526)
Andrew Tridgell [Sun, 26 Jun 2005 06:09:03 +0000 (06:09 +0000)]
r7926: poptGetNextOpt() returns int, not char
this was breaking ldbadd on some platforms
(This used to be commit
dd0ac3f68d709c0364d992673e76db73398c0369)
Andrew Tridgell [Sun, 26 Jun 2005 06:08:19 +0000 (06:08 +0000)]
r7925: small tidyup (please keep lines at a reasonable length)
(This used to be commit
0bfd91c32a62e651e81ce8d3b102158ec9c680fe)
Tim Potter [Sun, 26 Jun 2005 05:43:16 +0000 (05:43 +0000)]
r7924: Add mkdir() and rmdir() functions.
Write a macro to check tree handle parameters.
(This used to be commit
043feb131f1877886a9ab7e25ada5e54692f6487)
Andrew Tridgell [Sun, 26 Jun 2005 05:19:48 +0000 (05:19 +0000)]
r7923: removed dependence on Data::Dumper
please use util::MyDumper() rather than adding this back in
(This used to be commit
155da538f91c28e845a60065f19b042bf8c167ff)
Tim Potter [Sun, 26 Jun 2005 05:18:50 +0000 (05:18 +0000)]
r7922: Comment out complicated connect/session/tree API for the moment. Replace
with tree_connect() and tree_disconnect() functions.
(This used to be commit
9ed763f7fa9e6138d8c1da29c1e0adf2e18cb5e1)
Andrew Tridgell [Sun, 26 Jun 2005 04:58:26 +0000 (04:58 +0000)]
r7921: fixed newuser script (letting samldb module allocate the sid)
(This used to be commit
45d08e94d27f837ab7788471b07e8c0c9b061c39)
Andrew Tridgell [Sun, 26 Jun 2005 04:30:48 +0000 (04:30 +0000)]
r7920: another attempt at making installswat.sh portable
(This used to be commit
46416ebd9d61038eff96ede77ca0823ea43923a6)
Andrew Tridgell [Sun, 26 Jun 2005 03:39:48 +0000 (03:39 +0000)]
r7919: use more portable shell syntax for MALLOC_CHECK_
(This used to be commit
694882ffa62ae88e43e78e8e496720575630e523)
Andrew Tridgell [Sun, 26 Jun 2005 03:29:26 +0000 (03:29 +0000)]
r7918: fixed a crash bug in the ldap server
(This used to be commit
44ded17bc2501cd8d03fb3a94a3b7c502f5a2128)
Andrew Tridgell [Sun, 26 Jun 2005 02:01:32 +0000 (02:01 +0000)]
r7917: macosx doesn't have a group called 'users'
(This used to be commit
2b39736c35168b2e6b1ef094de4d83b604ea39f1)
Andrew Tridgell [Sun, 26 Jun 2005 01:11:12 +0000 (01:11 +0000)]
r7916: - got rid of the in_client global
- make not finding smb.conf a level 1 message, not level 0. Most of our
tools handle no smb.conf, and those that don't should check for the
specific parameters they need, or use the defaults
(This used to be commit
8c17b61f8e0f6eefa6a1f853abc06d023627bbbb)
Andrew Tridgell [Sun, 26 Jun 2005 00:23:06 +0000 (00:23 +0000)]
r7915: report the number of failed tests so far when running 'make test' interactively
(This used to be commit
56aff58e93cdaa9b9bd90827de8f9ea9cefc6c12)
Andrew Tridgell [Sun, 26 Jun 2005 00:22:33 +0000 (00:22 +0000)]
r7914: - we don't need to override the database locations in selftest any more
- make sure we create the tls directory
(This used to be commit
0b1323f086acff331be20ee341966113a288393e)
Andrew Tridgell [Sun, 26 Jun 2005 00:20:22 +0000 (00:20 +0000)]
r7913: prevent recursion in the socket wrapper code
(This used to be commit
c1a0c2042d5bfce5781197919482481c007ff1b3)
Andrew Tridgell [Sun, 26 Jun 2005 00:12:44 +0000 (00:12 +0000)]
r7912: make private_path() recognise a non-relative filename, so we can have
sam database = sam.ldb
and it will know to put it in the private dir, but if you use
sam database = ldap://server
it knows to use it as-is
(This used to be commit
c5bccbc366db144d3e1cb7b21f0e3284d841dd06)
Andrew Tridgell [Sat, 25 Jun 2005 23:53:14 +0000 (23:53 +0000)]
r7911: task_terminate() is defined in the macosx headers, so change the name
to task_server_terminate()
(This used to be commit
a7447e25ac203f0ee09ffdf72df1094eb70e7c0c)
Andrew Tridgell [Sat, 25 Jun 2005 23:38:03 +0000 (23:38 +0000)]
r7910: fixed typo in _SAMBA_BUILD_ macro
(This used to be commit
d2e9e95ea2cab80badc23f0f1d416295f0a4bf9c)
Andrew Tridgell [Sat, 25 Jun 2005 23:35:37 +0000 (23:35 +0000)]
r7909: don't consider not finding a list of network interfaces from the kernel a fatal error,
the individual services that need at least one known interface check for it anyway
this should fix provisioning on macosx
(This used to be commit
5ad0dc97d01e28dbce8bc9d6793db01809ad09b0)
Andrew Tridgell [Sat, 25 Jun 2005 14:18:34 +0000 (14:18 +0000)]
r7907: the old solaris perl doesn't handle mkdir() without a mode
(This used to be commit
54d698c4888ce453926aed6102621d20fe744031)
Andrew Tridgell [Sat, 25 Jun 2005 14:18:01 +0000 (14:18 +0000)]
r7906: some portability fixes for ldap testing on solaris (solaris grep doesn't handle ^)
(This used to be commit
b196502ffbe24c8dcdce17dfcea79cd98e7ad3cb)
Andrew Tridgell [Sat, 25 Jun 2005 14:12:30 +0000 (14:12 +0000)]
r7905: this should fix installswat on FreeBSD. Thanks to nodie for testing this for me
(This used to be commit
858ed1c463a0e60f00f94766c43b5bf7add9c5f3)
Andrew Tridgell [Sat, 25 Jun 2005 06:13:29 +0000 (06:13 +0000)]
r7901: check if system supports UTF-16LE at all in LOCAL-ICONV test
(This used to be commit
aa9e7cf63a0e5ce7c9b7d121a4df064cd6fae90f)
Andrew Tridgell [Sat, 25 Jun 2005 05:03:29 +0000 (05:03 +0000)]
r7900: the existing ltdb indexing code does in fact cope with binary fields, so re-enable
indexing on objectSid
(This used to be commit
5781c83ba4ef919520e9668a40aafc8f74fe5700)
Andrew Tridgell [Sat, 25 Jun 2005 04:56:06 +0000 (04:56 +0000)]
r7899: fixed a crash bug in the RAW-CONTEXT test
(This used to be commit
470ad9a93fcbf961d7d89fd96f751ded39660f74)
Andrew Tridgell [Sat, 25 Jun 2005 04:48:20 +0000 (04:48 +0000)]
r7898: don't die on bad iconv libs in LOCAL-ICONV test
(This used to be commit
fe7055df94ecc81d6758ee7ff82534451d620d6a)
Derrell Lipman [Sat, 25 Jun 2005 03:43:33 +0000 (03:43 +0000)]
r7897: work in progress
(This used to be commit
8e1431efcf0df797bc50ef584c38fce6a03429b3)
Andrew Tridgell [Sat, 25 Jun 2005 03:40:34 +0000 (03:40 +0000)]
r7896: don't output null rules for blank targets (caued make failure on irix)
(This used to be commit
8b299e1518b6864dc3ca5b86441290047ef6ed14)
Andrew Tridgell [Sat, 25 Jun 2005 03:18:22 +0000 (03:18 +0000)]
r7895: hopefully this will fix the popt build on solaris
(This used to be commit
8f0b4ece48b6bf28891dc89e47ebffa81c431bd7)
Andrew Tridgell [Sat, 25 Jun 2005 03:10:57 +0000 (03:10 +0000)]
r7894: remove portability experiments until its working in the smb-build test project
(this change broke irix)
(This used to be commit
ac807d0aef3113e29796e2404eabb8165d44a197)
Jelmer Vernooij [Fri, 24 Jun 2005 22:49:14 +0000 (22:49 +0000)]
r7891: Improve output of unused macro find script
Remove duplicate find-missing-doc script (already in samba-docs repository)
(This used to be commit
aa5ade43427eaa38e0d0a1d3d7880246b7f8152d)
Stefan Metzmacher [Fri, 24 Jun 2005 09:55:34 +0000 (09:55 +0000)]
r7875: try to see if this is portable
metze
(This used to be commit
a3439d9365c2af471a4669373c1a0b5327e6a01b)
Andrew Tridgell [Fri, 24 Jun 2005 05:20:27 +0000 (05:20 +0000)]
r7874: reverted metzes patch svn 7837 as it is not portable to make on
several platforms (such as FreeBSD)
(This used to be commit
8cdebf5ce3b5908bfc0032151f17ba0f0e59e785)
Andrew Tridgell [Fri, 24 Jun 2005 05:17:36 +0000 (05:17 +0000)]
r7873: hopefully fixed build of ldb_explode_dn() on AIX
I'd really rather see this code completely replaced, but I'll leave
that to simo (he has volunteered) :-)
(This used to be commit
cc2e08d68e27aa203ccc26e8d544a86de3399877)
Andrew Tridgell [Fri, 24 Jun 2005 04:42:05 +0000 (04:42 +0000)]
r7872: another place we were relying on the old behaviour of value()
(This used to be commit
25a64f8946274e07ca233751bc745b160ff3e7c1)
Andrew Tridgell [Fri, 24 Jun 2005 04:33:37 +0000 (04:33 +0000)]
r7871: setup spoolss, wins and hklm dbs correctly in selftest
(This used to be commit
59a0fe2c0451d1aa947fd74a5fe8c631dc951bf6)
Andrew Tridgell [Fri, 24 Jun 2005 04:25:40 +0000 (04:25 +0000)]
r7870: fixed the RPC-SCHANNEL test. It turned out it was my const changes, as
they slightly changed the semantics of value() in pidl, which broke
a optimisation hack in some of our IDL files.
I've changed the idl files to remove the hack for now. Sometime we
need to find a better way to handle these :-)
(This used to be commit
765f75ea630b13b1605409ff47a52cc11a1e496b)
Andrew Tridgell [Fri, 24 Jun 2005 03:52:08 +0000 (03:52 +0000)]
r7869: revert the configure changes from jelmers commit for heimdal_build
(they are needed when you use the in-tree heimdal)
(This used to be commit
53b2cdcda56746256b2ede3f0f482e854c700b3f)
Andrew Tridgell [Fri, 24 Jun 2005 01:58:40 +0000 (01:58 +0000)]
r7868: canonicalise the message before using ldb_add() in the ldbadd utility.
(This used to be commit
56f4af5f210da472d41d9bcf6918647181f6ad16)
Andrew Tridgell [Fri, 24 Jun 2005 01:50:50 +0000 (01:50 +0000)]
r7867: a couple of bug fixes for newuser.pl from kukks
I'm looking forward to deleting this file when we can add users using
the web intgerface (and maybe ejs scripts for the command line)
(This used to be commit
836e5782fda9edef6746adc6453d8a40df2a1765)
Jelmer Vernooij [Fri, 24 Jun 2005 01:27:34 +0000 (01:27 +0000)]
r7866: Remove some unused autoconf macro calls.
Some of these should probably be re-added again later when
we need them. They should then be added to the appropriate config.m4 file
in the source tree rather then in rewrite.m4.
(This used to be commit
4eca613470139f6425f454aea016566f9deffa3e)
Andrew Tridgell [Fri, 24 Jun 2005 01:18:56 +0000 (01:18 +0000)]
r7865: changed pidl to take a "const void *" instead of a "void *" for the
structure in ndr_push_*() and ndr_print_*(). The push and print
functions really should not modify the structure.
metze, to make this work I had to change your spoolss hand
marshaller. Can you please check it is OK? I think that the IN and OUT
sides of that function are not ever called on the same structure, so I
think that attempt at remembering the value by assigning to
r->in._offered was not doing anything anyway, but please correct me if
I have misunderstood it.
If you really do need to remember something on those structures I'd
suggest the ndr_token_store() and ndr_token_retrieve() functions,
which are used by pidl for just this sort of thing.
(This used to be commit
eee528be97fa43ca53bdc5652b4d29a0a2caf563)
Andrew Tridgell [Fri, 24 Jun 2005 01:14:43 +0000 (01:14 +0000)]
r7864: fixed some const bugs
(This used to be commit
616f54015ff8c7b25fa500cb03d025a9950ed6cf)
Andrew Tridgell [Fri, 24 Jun 2005 01:13:57 +0000 (01:13 +0000)]
r7863: removed an unused variable
(This used to be commit
9ee3dbad6b0bc65f4f3ee64a52db765af8016738)
Andrew Bartlett [Fri, 24 Jun 2005 01:13:35 +0000 (01:13 +0000)]
r7862: Updates to the Kerberos notes, based on recent changes and discoveries.
Andrew Bartlett
(This used to be commit
7d791d13bcd70288467bf3574d0394d34f973f18)
Jelmer Vernooij [Fri, 24 Jun 2005 00:35:20 +0000 (00:35 +0000)]
r7861: Nicer output, remove some false warnings.
(This used to be commit
f5587fe5671fb28bcfb7b71acec0748e0e506993)
Andrew Tridgell [Fri, 24 Jun 2005 00:18:20 +0000 (00:18 +0000)]
r7860: switch our ldb storage format to use a NDR encoded objectSid. This is
quite a large change as we had lots of code that assumed that
objectSid was a string in S- format.
metze and simo tried to convince me to use NDR format months ago, but
I didn't listen, so its fair that I have the pain of fixing all the
code now :-)
This builds on the ldb_register_samba_handlers() and ldif handlers
code I did earlier this week. There are still three parts of this
conversion I have not finished:
- the ltdb index records need to use the string form of the objectSid
(to keep the DNs sane). Until that it done I have disabled indexing on
objectSid, which is a big performance hit, but allows us to pass
all our tests while I rejig the indexing system to use a externally
supplied conversion function
- I haven't yet put in place the code that allows client to use the
"S-xxx-yyy" form for objectSid in ldap search expressions. w2k3
supports this, presumably by looking for the "S-" prefix to
determine what type of objectSid form is being used by the client. I
have been working on ways to handle this, but am not happy with
them yet so they aren't part of this patch
- I need to change pidl to generate push functions that take a
"const void *" instead of a "void*" for the data pointer. That will
fix the couple of new warnings this code generates.
Luckily it many places the conversion to NDR formatted records
actually simplified the code, as it means we no longer need as many
calls to dom_sid_parse_talloc(). In some places it got more complex,
but not many.
(This used to be commit
d40bc2fa8ddd43560315688eebdbe98bdd02756c)
Jelmer Vernooij [Fri, 24 Jun 2005 00:07:04 +0000 (00:07 +0000)]
r7859: Merge a few scripts to one script that checks for the following unused
(used in configure.in, but their output is never used) autoconf macros:
- AC_DEFINE
- AC_CHECK_FUNC
- AC_CHECK_FUNCS
- AC_CHECK_HEADER
- AC_CHECK_HEADERS
(This used to be commit
897d7b7d390815778adea1adf5e73b94f75a3048)
Andrew Tridgell [Fri, 24 Jun 2005 00:06:04 +0000 (00:06 +0000)]
r7858: removed some unused variables
(This used to be commit
8d43eb5b9790a6b24c792919386cac5c0b8ea7ac)
Andrew Tridgell [Fri, 24 Jun 2005 00:05:41 +0000 (00:05 +0000)]
r7857: improved the handling of end-of-file on sockets in the smb server
(This used to be commit
6ee98c5f6505824826955f9d60a7964471fa6c26)
Andrew Tridgell [Fri, 24 Jun 2005 00:04:26 +0000 (00:04 +0000)]
r7856: fixed warning of 'methods' shadowed variable
(This used to be commit
c435843c66a5dcc003d157374529c3c5ac733e36)
Andrew Tridgell [Fri, 24 Jun 2005 00:03:47 +0000 (00:03 +0000)]
r7855: fixed a typo
(This used to be commit
a1155651e722e28496be02b729c950afae5db9a9)
Andrew Tridgell [Fri, 24 Jun 2005 00:03:17 +0000 (00:03 +0000)]
r7854: only enable wrapping in the ldap server if it was negotiated by gensec
(This used to be commit
355983493bc87b9e812152ef81773dccb23e03d5)
Simo Sorce [Thu, 23 Jun 2005 23:19:31 +0000 (23:19 +0000)]
r7851: We are case preserving let the DN be returned the same the user put it into.
sss
(This used to be commit
5b41e3202456549250e6e5b1c63bd45ea7500fa3)
Jelmer Vernooij [Thu, 23 Jun 2005 22:30:26 +0000 (22:30 +0000)]
r7850: Support mkdir() with just one parameter. Patch from
Steven Edwards <steven_ed4153@yahoo.com>.
I've moved the Win32-specific tests to win32.m4 so it does not
make any of the POSIX configure stuff more complicated.
(This used to be commit
bf85fdd01552f75b745fdf3159a7a87cd6521ed2)
Stefan Metzmacher [Thu, 23 Jun 2005 15:23:02 +0000 (15:23 +0000)]
r7845: remove unused files
and remove all generated files with make distclean and make realdistclean
metze
(This used to be commit
f964e228c9ceeb3dc4d0afd1b6b092734e06e372)
Derrell Lipman [Thu, 23 Jun 2005 04:26:23 +0000 (04:26 +0000)]
r7844: eliminate superfluous attribute tables
(This used to be commit
863beef35b769c5a531819c974754aea2a790921)
Andrew Bartlett [Thu, 23 Jun 2005 01:50:04 +0000 (01:50 +0000)]
r7843: Use the new Heimdal gsskrb_acquire_creds API. This has the right
lifetime constraints, and works with the in-memory keytab.
Move initialize_krb5_error_table() into our kerberos startup code,
rather than in the GSSAPI code explitly. (Hmm, we probably don't need
this at all..)
Andrew Bartlett
(This used to be commit
bedf92da5c81066405c87c9e588842d3ca5ba945)
Stefan Metzmacher [Wed, 22 Jun 2005 15:29:54 +0000 (15:29 +0000)]
r7837: use some more 'make' features
(I just commit this to see how portable it is)
I have a patch that remove the need of the recursiv make
and also fixes the HEIMDAL_EXTERNAL stuff cleanly
metze
(This used to be commit
21d930cfc3706fec9e0421a799668f022d8aef7c)
Andrew Tridgell [Wed, 22 Jun 2005 04:01:27 +0000 (04:01 +0000)]
r7834: added comment about the "((" search test
(This used to be commit
42c42f6611fa295ca60782661781d023c4fdaf8b)
Andrew Tridgell [Wed, 22 Jun 2005 03:10:40 +0000 (03:10 +0000)]
r7833: changed ldbsearch and ldbedit to have command line syntax closer to
ldapsearch. They look for an '=' in the first argument to see if it is
a search expression, and if not then it does an 'all records' search
(This used to be commit
91cc009fedefa7b263b345dfa511800e0f4f66a8)
Andrew Tridgell [Wed, 22 Jun 2005 03:09:25 +0000 (03:09 +0000)]
r7832: missed one
(This used to be commit
20c84f5c5219c6f306888771b56e0dfdeb8fd774)
Andrew Tridgell [Wed, 22 Jun 2005 03:08:06 +0000 (03:08 +0000)]
r7831: use cn=TEST as base of test DNs so we don't interfere with potentially real records
(This used to be commit
2a426f654db668f4bfc899771dd11598e295b774)
Derrell Lipman [Wed, 22 Jun 2005 02:39:07 +0000 (02:39 +0000)]
r7828: Although there is still plenty to do, ldb_sqlite3 now passes the set of tests
in tests/test-sqlite3.sh (tests/test-generic.sh).
There are lots of optimizations still TBD, and some things are REALLY slow
right now (e.g. each add() operation takes 1/3 - 1/2 second) but it's ready for
interested parties to poke it and prod it and see how (un)reasonable it is.
Play away.
Still to be implemented or improved:
- tdb specials (@MODULES, @SUBCLASSES, etc.)
- all DNs are case-folded in their entirty right now (since doing otherwise
would require @ATTRIBUTES to be implemented)
- speed improvements and optimizations. I am quite confident that the
excessively slow add() operation can be much improved, and other areas
can be somewhat improved.
(This used to be commit
1dd865005594671e7effe06fb088fa97fa08de0b)