sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-18 06:04:06 +03:00
Code
samba-mirror/source4/param/secrets.h

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

52 lines
2.1 KiB
C
Raw Normal View History

first public release of samba4 code (This used to be commit b0510b5428b3461aeb9bbe3cc95f62fc73e2b97f)
2003-08-13 01:53:07 +00:00
/*
* Unix SMB/CIFS implementation.
* secrets.tdb file format info
* Copyright (C) Andrew Tridgell 2000
*
* This program is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License as published by the
r23796: main COPYING file for samba4, plus some formatting varients (This used to be commit 76c6bfdeb51b5673bbabe0ca3d8bff3b74a327ee)
2007-07-10 03:04:16 +00:00
* Free Software Foundation; either version 3 of the License, or (at your
first public release of samba4 code (This used to be commit b0510b5428b3461aeb9bbe3cc95f62fc73e2b97f)
2003-08-13 01:53:07 +00:00
* option) any later version.
*
* This program is distributed in the hope that it will be useful, but WITHOUT
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
* more details.
*
* You should have received a copy of the GNU General Public License along with
r23801: The FSF has moved around a lot. This fixes their Mass Ave address. (This used to be commit 5c9b19271e0e3ad897499707003ce4703ffa4870)
2007-07-10 05:23:25 +00:00
* this program; if not, see <http://www.gnu.org/licenses/>.
first public release of samba4 code (This used to be commit b0510b5428b3461aeb9bbe3cc95f62fc73e2b97f)
2003-08-13 01:53:07 +00:00
*/
s4-param: Use a unique header name
2012-07-14 22:22:37 +10:00
#ifndef _SOURCE4_PARAM_SECRETS_H
#define _SOURCE4_PARAM_SECRETS_H
first public release of samba4 code (This used to be commit b0510b5428b3461aeb9bbe3cc95f62fc73e2b97f)
2003-08-13 01:53:07 +00:00
r4895: I missed this in my previous 'use secrets.ldb' commit. Andrew Bartlett (This used to be commit 53b98c674b28a85eec9748a079c950bd7fa88384)
2005-01-21 11:31:35 +00:00
#define SECRETS_PRIMARY_DOMAIN_DN "cn=Primary Domains"
r11201: New filters for searching in secrets.ldb Andrew Bartlett (This used to be commit b48c6df60c15ee6134a49d163bed90ea8b85550b)
2005-10-20 03:55:35 +00:00
#define SECRETS_PRINCIPALS_DN "cn=Principals"
r5988: Fix the -P option (use machine account credentials) to use the Samba4 secrets system, and not the old system from Samba3. This allowed the code from auth_domain to be shared - we now only lookup the secrets.ldb in lib/credentials.c. In order to link the resultant binary, samdb_search() has been moved from deep inside rpc_server into lib/gendb.c, along with the existing gendb_search_v(). The vast majority of this patch is the simple rename that followed, (Depending on the whole SAMDB for just this function seemed pointless, and brought in futher dependencies, such as smbencrypt.c). Andrew Bartlett (This used to be commit e13c671619bd290a8b3cae8555cb281a9a185ee0)
2005-03-23 01:30:43 +00:00
#define SECRETS_PRIMARY_DOMAIN_FILTER "(&(flatname=%s)(objectclass=primaryDomain))"
#define SECRETS_PRIMARY_REALM_FILTER "(&(realm=%s)(objectclass=primaryDomain))"
r11201: New filters for searching in secrets.ldb Andrew Bartlett (This used to be commit b48c6df60c15ee6134a49d163bed90ea8b85550b)
2005-10-20 03:55:35 +00:00
#define SECRETS_KRBTGT_SEARCH "(&((|(realm=%s)(flatname=%s))(samAccountName=krbtgt)))"
r11207: Correct principal search define (This used to be commit 90cf4f8e1a1051a58635e126d56118701875bc5d)
2005-10-20 05:08:24 +00:00
#define SECRETS_PRINCIPAL_SEARCH "(&(|(realm=%s)(flatname=%s))(servicePrincipalName=%s))"
s4:secrets Look for LDAP secret with a name that is indexed This avoids a very common unindexed lookup
2009-10-22 18:21:50 +11:00
#define SECRETS_LDAP_FILTER "(&(objectclass=ldapSecret)(cn=SAMDB Credentials))"
r5988: Fix the -P option (use machine account credentials) to use the Samba4 secrets system, and not the old system from Samba3. This allowed the code from auth_domain to be shared - we now only lookup the secrets.ldb in lib/credentials.c. In order to link the resultant binary, samdb_search() has been moved from deep inside rpc_server into lib/gendb.c, along with the existing gendb_search_v(). The vast majority of this patch is the simple rename that followed, (Depending on the whole SAMDB for just this function seemed pointless, and brought in futher dependencies, such as smbencrypt.c). Andrew Bartlett (This used to be commit e13c671619bd290a8b3cae8555cb281a9a185ee0)
2005-03-23 01:30:43 +00:00
r26205: Pass loadparm_context to secrets_db_connect() rather than using global context. (This used to be commit 5718b6cfee86ddfc9cf405c98c68ba848df4d9d7)
2007-11-29 16:01:16 +01:00
struct loadparm_context;
s4:lib/tevent: rename structs list="" list="$list event_context:tevent_context" list="$list fd_event:tevent_fd" list="$list timed_event:tevent_timer" for s in $list; do o=`echo $s | cut -d ':' -f1` n=`echo $s | cut -d ':' -f2` r=`git grep "struct $o" |cut -d ':' -f1 |sort -u` files=`echo "$r" | grep -v source3 | grep -v nsswitch | grep -v packaging4` for f in $files; do cat $f | sed -e "s/struct $o/struct $n/g" > $f.tmp mv $f.tmp $f done done metze
2008-12-29 20:24:57 +01:00
struct tevent_context;
s4-kerberos Move 'set key into keytab' code out of credentials. This code never really belonged in the credentials layer, and is easier done with direct access to the ldb_message that is in secrets.ldb. Andrew Bartlett
2010-09-23 17:01:44 +10:00
struct ldb_message;
struct ldb_context;
s4:param/secrets.h - fix "enum netr_SchannelType" include correctly
2010-11-27 19:32:03 +01:00
#include "librpc/gen_ndr/misc.h"
s4-param Rename secrets_init() -> randseed_init() This only sets up the random number generator callback these days, so use a different database for that. (All secrets data in Samba4 is in secrets.ldb) Andrew Bartlett
2011-05-03 13:24:10 +10:00
bool randseed_init(TALLOC_CTX *mem_ctx, struct loadparm_context *lp_ctx);
s4:param: add secrets_db_create() helper function Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>
2020-02-04 16:14:55 +01:00
struct ldb_context *secrets_db_create(TALLOC_CTX *mem_ctx,
struct loadparm_context *lp_ctx);
s4-param Refactor secrets code to not require an event context. A new event context is constructed by LDB when required for secrets.ldb This will be essentially unused, as LDB on TDB will only trigger 'fake' events, and blocks on transactions and lock operations anyway. Andrew Bartlett
2010-10-11 16:43:07 +11:00
struct ldb_context *secrets_db_connect(TALLOC_CTX *mem_ctx, struct loadparm_context *lp_ctx);
s4:param Modify secrets_get_domain_sid to give more useful errors This also moves the calls to secrets_get_domain_sid back into winbind_task_init(), so that we can terminate with a much more detailed error message. (The previous message was simply NT_STATUS_CANT_ACCESS_DOMAIN_INFO). Andrew Bartlett
2010-02-18 10:54:53 +11:00
struct dom_sid *secrets_get_domain_sid(TALLOC_CTX *mem_ctx,
struct loadparm_context *lp_ctx,
const char *domain,
s4-secrets: fetch secure channel type with domain SID The secure channel type is needed to work out what DC to connect to Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-09-13 12:15:52 +10:00
enum netr_SchannelType *sec_channel_type,
s4:param Modify secrets_get_domain_sid to give more useful errors This also moves the calls to secrets_get_domain_sid back into winbind_task_init(), so that we can terminate with a much more detailed error message. (The previous message was simply NT_STATUS_CANT_ACCESS_DOMAIN_INFO). Andrew Bartlett
2010-02-18 10:54:53 +11:00
char **errstring);
s4-kerberos Move 'set key into keytab' code out of credentials. This code never really belonged in the credentials layer, and is easier done with direct access to the ldb_message that is in secrets.ldb. Andrew Bartlett
2010-09-23 17:01:44 +10:00
char *keytab_name_from_msg(TALLOC_CTX *mem_ctx, struct ldb_context *ldb, struct ldb_message *msg);
r25028: Fix more warnings. (This used to be commit 3aa7ee4a0d8837471deeaa1c5a1f4a0d2a14aa6e)
2007-09-08 13:34:42 +00:00
r13938: Around round of splitups (This used to be commit 2d655f05285a86bb1bbb882e4dd843def15c9dfa)
2006-03-07 13:36:26 +00:00
s4-param: Use a unique header name
2012-07-14 22:22:37 +10:00
#endif /* _SOURCE4_PARAM_SECRETS_H */
Copy Permalink