Stefan Metzmacher [Tue, 29 Dec 2009 16:25:47 +0000 (17:25 +0100)]
s3:ntlmssp: make use of C99 types in ntlmssp_sign.c
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Tue, 29 Dec 2009 16:25:20 +0000 (17:25 +0100)]
s3:ntlmssp: use uint8_t in calc_ntlmv2_key()
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Thu, 7 Jan 2010 09:10:13 +0000 (10:10 +0100)]
s4:ntlmssp: move sign/seal states to a private ntlmssp_crypt_state union
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Fri, 8 Jan 2010 21:11:10 +0000 (14:11 -0700)]
s4:ntlmssp: make use of dump_arc4_state()
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Wed, 6 Jan 2010 15:59:35 +0000 (16:59 +0100)]
s4:ntlmssp: copy dump_arc4_state() from source3
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Fri, 8 Jan 2010 20:58:42 +0000 (13:58 -0700)]
s4:ntlmssp: avoid usage of calc_ntlmv2_key_talloc()
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Fri, 8 Jan 2010 20:49:54 +0000 (13:49 -0700)]
s4:ntlmssp: make use of calc_ntlmv2_key() for seal keys
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Fri, 8 Jan 2010 20:37:43 +0000 (13:37 -0700)]
s4:ntlmssp: add calc_ntlmv2_key() from source3
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Fri, 8 Jan 2010 20:36:37 +0000 (13:36 -0700)]
s4:ntlmssp: rename calc_ntlmv2_key => calc_ntlmv2_key_talloc
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Fri, 8 Jan 2010 20:07:33 +0000 (13:07 -0700)]
s4:ntlmssp: inline ntlmssp_weakend_keys()
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Wed, 6 Jan 2010 15:58:52 +0000 (16:58 +0100)]
s4:ntlmssp: use a 'bool ok' helper variable to make the code more readable
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Thu, 7 Jan 2010 09:24:12 +0000 (10:24 +0100)]
s4:ntlmssp: fix some formating
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Wed, 6 Jan 2010 13:53:30 +0000 (14:53 +0100)]
s4:ntlmssp: move doing_ntlm2 to ntlmssp_server_auth_state
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Tue, 5 Jan 2010 17:24:02 +0000 (18:24 +0100)]
s4:ntlmssp: move NTLM2 session_nonce to ntlmssp_server_auth_state
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Tue, 5 Jan 2010 17:21:10 +0000 (18:21 +0100)]
s4:ntlmssp: move encrypted_session_key to ntlmssp_server_auth_state
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Tue, 5 Jan 2010 17:18:29 +0000 (18:18 +0100)]
s4:ntlmssp: keep a ntlmssp_server_auth_state to transport variables from preauth to postauth hooks
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Tue, 5 Jan 2010 16:51:53 +0000 (17:51 +0100)]
s4:ntlmssp: remove unused server_multiple_authentications feature.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Wed, 30 Dec 2009 16:57:54 +0000 (17:57 +0100)]
s4:ntlmssp: rename gensec_ntlmssp_state => ntlmssp_state
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Wed, 30 Dec 2009 15:02:37 +0000 (16:02 +0100)]
s4:ntlmssp: split gensec_ntlmssp_unseal_packet() and ntlmssp_unseal_packet()
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Wed, 30 Dec 2009 15:02:37 +0000 (16:02 +0100)]
s4:ntlmssp: split gensec_ntlmssp_seal_packet() and ntlmssp_seal_packet()
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Wed, 30 Dec 2009 15:01:28 +0000 (16:01 +0100)]
s4:ntlmssp: split gensec_ntlmssp_check_packet() and ntlmssp_check_packet()
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Wed, 30 Dec 2009 14:58:05 +0000 (15:58 +0100)]
s4:ntlmssp: split gensec_ntlmssp_sign_packet() and ntlmssp_sign_packet()
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Wed, 30 Dec 2009 14:23:37 +0000 (15:23 +0100)]
s4:ntlmssp: make user a 'const char *' in (gensec_)ntlmssp_state
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Wed, 30 Dec 2009 14:00:02 +0000 (15:00 +0100)]
s4:ntlmssp: remove server_name from (gensec_)ntlmssp_state and fill the server.* fields also for the client
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Wed, 30 Dec 2009 14:14:38 +0000 (15:14 +0100)]
s4:ntlmssp: calculate server names at startup and store them in (gensec_)ntlmssp_state->server.*
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Wed, 30 Dec 2009 09:14:07 +0000 (10:14 +0100)]
s4:ntlmssp: replace server_role by a server.is_standalone in (gensec_)ntlmssp_state
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Tue, 29 Dec 2009 16:29:47 +0000 (17:29 +0100)]
s4:ntlmssp: remove more whitespaces...
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Tue, 29 Dec 2009 15:46:05 +0000 (16:46 +0100)]
s4:ntlmssp: add NTLMSSP_FEATURE_* flags from s3
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Wed, 30 Dec 2009 07:23:13 +0000 (08:23 +0100)]
s4:ntlmssp: keep struct gensec_ntlmssp_context in gensec_security->private_data
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Wed, 30 Dec 2009 07:06:28 +0000 (08:06 +0100)]
s4:ntlmssp: remove gensec_security from (gensec_)ntlmssp_state
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Tue, 29 Dec 2009 16:56:56 +0000 (17:56 +0100)]
s4:ntlmssp: remove backend specifix stuff from (gensec_)ntlmssp_state
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Tue, 29 Dec 2009 16:01:28 +0000 (17:01 +0100)]
s4:ntlmssp: create a gensec_ntlmssp_context between gensec_security and ntlmssp_state
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Tue, 29 Dec 2009 15:48:38 +0000 (16:48 +0100)]
s4:ntlmssp: add definition of gensec_ntlmssp_context
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Stefan Metzmacher [Tue, 29 Dec 2009 15:47:11 +0000 (16:47 +0100)]
s4:ntlmssp: add a callback_private pointer to gensec_ntlmssp_state
We'll remove any gensec specific stuff from gensec_ntlmssp_state
and rename it to ntlmssp_state again.
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
Karolin Seeger [Wed, 24 Mar 2010 13:55:15 +0000 (14:55 +0100)]
s3-testparm: Throw warning when 'workgroup' and 'netbios name' are identical.
Address bug #7285 (NetBIOS Namespace Clash Handling).
Karolin
Kamen Mazdrashki [Wed, 17 Mar 2010 01:27:05 +0000 (03:27 +0200)]
idl: drsuapi.idl - fix few more comments
Kamen Mazdrashki [Wed, 17 Mar 2010 01:09:09 +0000 (03:09 +0200)]
idl: Regenerate DRSUAPI idl files
Kamen Mazdrashki [Wed, 17 Mar 2010 01:08:56 +0000 (03:08 +0200)]
s4/drs: Pretty print for drsuapi_SecBufferType
It is a type and mask combined in one DRS field so
we have to make a custom ndr_print implementation for this type
Kamen Mazdrashki [Wed, 17 Mar 2010 01:07:01 +0000 (03:07 +0200)]
s4/idl: DsAddEntry V3 request description
Kamen Mazdrashki [Mon, 15 Mar 2010 11:57:41 +0000 (13:57 +0200)]
s4/drs: Implement DsAddEntry V3 error handling
Kamen Mazdrashki [Tue, 16 Mar 2010 23:20:31 +0000 (01:20 +0200)]
s4/idl: Remove drsuapi_DsAddEntryExtraErrorBuffer - it is not used anymore
Kamen Mazdrashki [Tue, 16 Mar 2010 19:58:22 +0000 (21:58 +0200)]
s4/idl: Complete drsuapi_DsAddEntryErrorInfo description
Members for Security, Service, Update and System errors renamed
to be more descriptive.
All those error types share same description.
Kamen Mazdrashki [Mon, 15 Mar 2010 23:30:05 +0000 (01:30 +0200)]
s4/idl: Add DsAddEntry Referral error definition
Kamen Mazdrashki [Sun, 14 Mar 2010 14:07:49 +0000 (16:07 +0200)]
s4/idl: Add DsAddEntry Name resolution error definition
Kamen Mazdrashki [Fri, 12 Mar 2010 15:05:58 +0000 (17:05 +0200)]
s4/drs: Refactor error handling for DsAddEntry V3 replies
Dumping for specific error classes are to be implemented properly
in the near future.
Kamen Mazdrashki [Fri, 12 Mar 2010 13:06:19 +0000 (15:06 +0200)]
s4/drs: pretty print for drsuapi_DsAddEntry_AttrErrListItem_V1
Kamen Mazdrashki [Fri, 12 Mar 2010 12:55:05 +0000 (14:55 +0200)]
s4/idl: redefine drsuapi_DsAddEntryErrorInfo1
This actually describes Attribute error during DsAddEntry execution.
Structure is renamed to drsuapi_DsAddEntryErrorInfo_Attr.
And structure to define Attribute error data are all
prefixed with drsuapi_DsAddEntry_AttrErr
Kamen Mazdrashki [Wed, 10 Mar 2010 14:37:38 +0000 (16:37 +0200)]
s4/drs: drsuapi_DsAddEntry_ErrData propagate structure def in source code
Kamen Mazdrashki [Fri, 12 Mar 2010 12:30:05 +0000 (14:30 +0200)]
s4/idl: drsuapi_DsAddEntryError refactored
Structure description and name was changed to be aligned with
WSPP definition.
Ref: [MS-DRSR] 4.1.1.1.23
Kamen Mazdrashki [Fri, 12 Mar 2010 11:42:05 +0000 (13:42 +0200)]
s4/drs: DsAddEntry - extending error handling for V2 replies
After having more complete definition for DsAddEntryReply V2
structure, we can now handle error state in more robust way,
not just counting on number of objects returned.
Kamen Mazdrashki [Tue, 9 Mar 2010 00:59:34 +0000 (02:59 +0200)]
s4/idl: DsAddEntry - refactor DsAddEntryCtr2 structure
Reply structure definition was aligned with WSPP documentation
Ref: [MS-DRSR], section 4.1.1.1.7
Kamen Mazdrashki [Mon, 8 Mar 2010 01:52:14 +0000 (03:52 +0200)]
s4/drs: drsuapi_DsAddEntryErrorInfoX changes propagated to source code
Kamen Mazdrashki [Mon, 8 Mar 2010 01:51:37 +0000 (03:51 +0200)]
s4/idl: Update drsuapi_DsAddEntryErrorInfoX definition
drsuapi_DsAddEntryErrorInfoX is an extended error
description used by most of the error infos returned
by DsAddEntry RPC method.
Kamen Mazdrashki [Fri, 12 Mar 2010 11:39:52 +0000 (13:39 +0200)]
s4/idl: DIRERR error codes definition
DIRERR codes specify class of error returned from
DsAddEntry method call.
Ref: [MS-DRSR], section 4.1.1.1.25
Kamen Mazdrashki [Sun, 7 Mar 2010 19:46:39 +0000 (21:46 +0200)]
s4/drs: DsAddEntry - Propagating unsigned switches to source code
Kamen Mazdrashki [Sun, 7 Mar 2010 19:36:22 +0000 (21:36 +0200)]
s4/idl: DsAddEntry - switch types should be unsigned
Günther Deschner [Wed, 24 Mar 2010 12:34:01 +0000 (13:34 +0100)]
s4-smbtorture: add missing checks for WERROR results in RPC-SAMBA3 tests.
Guenther
Günther Deschner [Wed, 24 Mar 2010 12:18:33 +0000 (13:18 +0100)]
s4-smbtorture: fix some invalid parameters in RPC-SAMSYNC test.
Guenther
Günther Deschner [Mon, 22 Mar 2010 14:58:09 +0000 (15:58 +0100)]
s4-smbtorture: cleanup some of the RPC-SAMBA3 tests.
This avoids printf, uses simplication functions where appropriate, etc.
Guenther
Günther Deschner [Mon, 22 Mar 2010 16:24:38 +0000 (17:24 +0100)]
s4-smbtorture: add rap_get_servername to RPC-SAMBA3 family of tests.
Guenther
Simo Sorce [Wed, 24 Mar 2010 11:45:15 +0000 (07:45 -0400)]
idl: fix comment and convert whitespaces to tabs
Andrew Bartlett [Wed, 24 Mar 2010 08:27:18 +0000 (19:27 +1100)]
s4:selftest Test --sign and --encrypt options to ldbsearch
Andrew Bartlett [Wed, 24 Mar 2010 08:26:02 +0000 (19:26 +1100)]
s4:cmdline Add --sign and --encrypt options to our common command line
This allows ldbsearch to accept --sign and --encrypt. I'll soon work
to integrate with the --signing= option in smbclient.
Andrew Bartlett
Andrew Bartlett [Wed, 24 Mar 2010 05:09:02 +0000 (16:09 +1100)]
s4:ntlmssp Ensure that we always negotiate signing if we negotiate sealing.
Without this, a sealed LDAP connection to windows does not work.
Andrew Bartlett
Volker Lendecke [Tue, 23 Mar 2010 17:36:55 +0000 (18:36 +0100)]
s3: Optimize gencache for smbd exit
If thousands of smbds try to gencache_stabilize at the same time because the
network died, all of them might be sitting in transaction_start. Don't do the
stabilize transaction if nothing has changed in gencache_notrans.tdb.
Volker
Andrew Tridgell [Tue, 23 Mar 2010 18:06:25 +0000 (05:06 +1100)]
libreplace: fixed declaration of dprintf() on FreeBSD
Andrew Tridgell [Wed, 24 Mar 2010 05:52:37 +0000 (16:52 +1100)]
s4-provision: FreeBSD uses 'staff' for users
Andrew Tridgell [Tue, 23 Mar 2010 15:02:32 +0000 (11:02 -0400)]
s4-provision: solaris uses the group "other"
Andrew Tridgell [Mon, 22 Mar 2010 07:40:44 +0000 (18:40 +1100)]
build: fixed nss_wrapper on solaris
solaris has different getpwnam_r syntax
Simo Sorce [Tue, 23 Mar 2010 22:45:20 +0000 (18:45 -0400)]
idl: fix forest trust information idl
--validate now passes
Günther Deschner [Tue, 23 Mar 2010 17:32:06 +0000 (18:32 +0100)]
s4-smbtorture: remove tailing whitespace in samba3rpc testsuite.
Guenther
Stefan Metzmacher [Thu, 18 Mar 2010 17:55:49 +0000 (18:55 +0100)]
s4:librpc/rpc/pyrpc.h: librpc/rpc/dcerpc.h isn't needed anymore
metze
Stefan Metzmacher [Thu, 18 Mar 2010 18:36:50 +0000 (19:36 +0100)]
s4:lib/messaging: pymessaging needs libndr.h
metze
Stefan Metzmacher [Thu, 18 Mar 2010 17:55:00 +0000 (18:55 +0100)]
pidl:Samba4/Python: librpc/rpc/dcerpc.h isn't needed anymore
metze
Stefan Metzmacher [Fri, 19 Mar 2010 12:02:26 +0000 (13:02 +0100)]
s4:libnet: don't include librpc/rpc/dcerpc.h directly
metze
Stefan Metzmacher [Fri, 19 Mar 2010 18:16:35 +0000 (19:16 +0100)]
s3:librpc/rpc: move prototypes to dcerpc.h
metze
Günther Deschner [Tue, 23 Mar 2010 16:28:55 +0000 (17:28 +0100)]
s4-smbtorture: use torture_context in samsync test.
Guenther
Günther Deschner [Tue, 23 Mar 2010 16:16:23 +0000 (17:16 +0100)]
s4-smbtorture: remove trailing whitespace from samsync torture test.
Guenther
Günther Deschner [Tue, 23 Mar 2010 15:30:05 +0000 (16:30 +0100)]
s4-smbtorture: use torture_context in libnet domain tests as well.
Guenther
Matthias Dieter Wallnöfer [Tue, 23 Mar 2010 15:43:41 +0000 (16:43 +0100)]
s4:WINREG torture - fix an error (missing "break" in a "switch")
Sorry my fault - I didn't discover that earlier since we had binary data types
support activated in s4.
Matthias Dieter Wallnöfer [Tue, 23 Mar 2010 15:19:26 +0000 (16:19 +0100)]
s4:registry - "reg_ldb_pack_value" - provide workarounds when the server receives non-standard data.
For now we reset/delete the "data" attribute. Anyway there is the need to find
a better solution (we probably want to change the format and save all data as
we got it like Windows itself does).
These workarounds are needed since for example the Windows 2000 Registry Editor
initialises empty REG_SZ strings with content '\0' and length 1 (not a valid
UTF16 sequence - "convert_string_talloc" breaks). So we simply reset/delete the
"data" attribute which works (no content).
Matthias Dieter Wallnöfer [Tue, 23 Mar 2010 15:17:25 +0000 (16:17 +0100)]
s4:registry - "LDB backend" - fix indentation
Günther Deschner [Tue, 23 Mar 2010 14:31:27 +0000 (15:31 +0100)]
s4-smbtorture: use torture_context for debugging output everywhere in libnet torture tests.
Mimir, please check.
Guenther
Günther Deschner [Tue, 23 Mar 2010 15:04:30 +0000 (16:04 +0100)]
s4-smbtorture: remove trailing whitespace in libnet torture tests.
Guenther
Karolin Seeger [Tue, 23 Mar 2010 13:53:49 +0000 (14:53 +0100)]
s3-builtin: Add missing builtin groups.
Karolin
Karolin Seeger [Tue, 23 Mar 2010 14:24:25 +0000 (15:24 +0100)]
s3: Re-run make samba3-idl.
Karolin
Karolin Seeger [Tue, 23 Mar 2010 13:26:51 +0000 (14:26 +0100)]
security.idl: Add missing builtin groups.
Karolin
Stefan Metzmacher [Sat, 20 Mar 2010 10:29:46 +0000 (11:29 +0100)]
librpc/rpc: fix dcerpc_errstr() to handle all nca_s_* status codes and fallback to WERROR codes
metze
Günther Deschner [Tue, 23 Mar 2010 13:37:40 +0000 (14:37 +0100)]
s3:re-run make samba3-idl.
Guenther
Stefan Metzmacher [Sat, 20 Mar 2010 09:57:26 +0000 (10:57 +0100)]
dcerpc.idl: add nca_s_* status codes from the DCE 1.1 specification
metze
Karolin Seeger [Tue, 23 Mar 2010 10:39:05 +0000 (11:39 +0100)]
s3-builtin: Add some builtin groups.
Karolin
Simo Sorce [Tue, 23 Mar 2010 05:06:24 +0000 (01:06 -0400)]
idl:drsblobs add code to interpret msDS-TrustForestTrustInfo
Simo Sorce [Tue, 16 Mar 2010 20:15:39 +0000 (16:15 -0400)]
s4:lsa Functions to set Domain Trust Information
Simo Sorce [Mon, 22 Mar 2010 20:37:24 +0000 (16:37 -0400)]
s4:lsa move code to add trusted domain user into its own function
Simo Sorce [Mon, 22 Mar 2010 14:48:31 +0000 (10:48 -0400)]
s4:lsa Abstract crypto (un)wrapping in separate functions
Matthias Dieter Wallnöfer [Mon, 22 Mar 2010 23:24:32 +0000 (00:24 +0100)]
s4:registry - "LDB backend" - revert the length check for UTF16 strings
Let this do the "convert_string_talloc" function as it was before.
Matthias Dieter Wallnöfer [Mon, 22 Mar 2010 23:13:26 +0000 (00:13 +0100)]
Revert "s4:torture - WINREG RPC - reactivate test "SetValueExtended" for s4"
This reverts commit
0f2cf82e5e52da6fc71742df7b13c9f372bcf113.
Naturally we have to revert this for s4 until a new storage mechanism for binary
REG_SZ and REG_*WORD values has been found.
Matthias Dieter Wallnöfer [Mon, 22 Mar 2010 23:09:22 +0000 (00:09 +0100)]
s4:registry - "LDB backend" - revert the binary storage of "REG_SZ", "REG_DWORD" and "REG_QWORD"
We agreed that this hack isn't the best of the possible solutions.
Matthias Dieter Wallnöfer [Mon, 22 Mar 2010 22:53:17 +0000 (23:53 +0100)]
s4:ldb_modules/util.c - fix two counter variables to be "unsigned"
Jeremy Allison [Mon, 22 Mar 2010 22:57:31 +0000 (15:57 -0700)]
share_info.tdb could use non-canonicalized sharenames.
Fix this by moving canonicalization into lib/sharesec.c. Update the
db version to 3. Ensures we always find share names with security
descriptors attached.
Jeremy.
git.samba.org / sfrench / samba-autobuild / .git / log