1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
Commit Graph

5190 Commits

Author SHA1 Message Date
Stefan Metzmacher
133d41d43d r8052: that looks nicer:-)
metze
(This used to be commit dad0371a9f)
2007-10-10 13:19:03 -05:00
Andrew Tridgell
361d126d01 r8051: separate out the MAX EAs test, as it fills disk too much to be run regularly
(This used to be commit dac526845e)
2007-10-10 13:19:03 -05:00
Stefan Metzmacher
88df3c81ee r8050: - make use of more [value()] properties
- the out subcontext's need to have a fixed size of r->in.offered,
  to make windows clients happy

metze
(This used to be commit 054e1ca434)
2007-10-10 13:19:02 -05:00
Stefan Metzmacher
96a073fdea r8049: add function that returns the build version (of w2k3 here 3790)
metze
(This used to be commit 81abbdaeb1)
2007-10-10 13:19:02 -05:00
Stefan Metzmacher
fe94ba6e71 r8046: - add somemore failure checks in the RPC-SPOOLSS test
- test AddForm on the PrintServer object

- GetForm() isn't allowed on the PrintServer object so remove NTPTR
  function for it

- accept the dns name as servername in the spoolss server

metze
(This used to be commit d8c308a465)
2007-10-10 13:19:02 -05:00
Stefan Metzmacher
cee17efc7c r8045: fix valgrind warning, add zero padding when the string doesn't fill the full FIXLEN
metze
(This used to be commit d8175b01db)
2007-10-10 13:19:02 -05:00
Stefan Metzmacher
5d55ee570b r8044: give a better error code
metze
(This used to be commit fdbf822f1c)
2007-10-10 13:19:02 -05:00
Andrew Tridgell
f450b0a02a r8043: increase shell compatibility of ldb tests
(This used to be commit 60863b6faf)
2007-10-10 13:19:02 -05:00
Stefan Metzmacher
4a8c3a9e62 r8042: give better error message
metze
(This used to be commit 70118e9529)
2007-10-10 13:19:02 -05:00
Andrew Tridgell
978335ae94 r8041: remove a mis-spelled debug message :-)
(This used to be commit 912fa269d2)
2007-10-10 13:19:01 -05:00
Andrew Tridgell
93e2baaf76 r8040: run ldb test suite as part of samba 'make test'
(This used to be commit 3671459d9a)
2007-10-10 13:19:01 -05:00
Andrew Tridgell
036a7dd9f8 r8039: allow ldb test suite to be run outside of the ldb directory
(This used to be commit f3e3b2ccd9)
2007-10-10 13:19:01 -05:00
Andrew Tridgell
bd7812be31 r8038: - fixed indexing on binary values that need base64 encoding and canonicalisation
- added support for recognising the S- form of objectsid in search
  expressions. I thought this could be done with just a comparison
  modified comparison function, but it turns out it also needs a
  canonicalisation function so that indexing can work
(This used to be commit 7d2bee2c56)
2007-10-10 13:19:01 -05:00
Andrew Tridgell
a06d66a3a6 r8037: a fairly major update to the internals of ldb. Changes are:
- moved the knowledge of attribute types out of ldb_tdb and into the
   generic ldb code. This allows the ldb_match() message match logic
   to be generic, so it can be used by other backend

 - added the generic ability to load attribute handlers, for
   canonicalisation, compare, ldif read and ldif write. In the future
   this will be used by the schema module to allow us to correctly
   obey the attributetype schema elements

 - added attribute handlers for some of the core ldap attribute types,
   Integer, DirectoryString, DN, ObjectClass etc

 - added automatic registration of attribute handlers for well-known
   attribute names 'cn', 'dc', 'dn', 'ou' and 'objectClass'

 - converted the objectSid special handlers for Samba to the new system

 - added more correct handling of indexing in tdb backend based on the
   attribute canonicalisation function

 - added generic support for subclasses, moving it out of the tdb
   backend. This will be used in future by the schema module

 - fixed several bugs in the dn_explode code. It still needs more
   work, but doesn't corrupt ldb dbs any more.
(This used to be commit 944c5844ab)
2007-10-10 13:19:01 -05:00
Stefan Metzmacher
8ab3f59a10 r8036: revert rev 8023/8024 as they have a bugs.
metze
(This used to be commit 66d6b1d578)
2007-10-10 13:19:01 -05:00
Andrew Tridgell
324de0b36d r8035: added indexing tests. current ldb fails the integer indexing, will be fixed shortly
(This used to be commit a9c3244503)
2007-10-10 13:19:00 -05:00
Andrew Tridgell
64307e6351 r8033: - add easier valgrind testing
- add tests for the @SUBCLASSES ltdb special
(This used to be commit ad6e62fdcf)
2007-10-10 13:19:00 -05:00
Andrew Tridgell
9cfe2d83f1 r8032: added loop detection into talloc. Robert Collins found a way to make a
memory loop with talloc_unlink(), so now we detect it and handle it
(This used to be commit 563058e78b)
2007-10-10 13:19:00 -05:00
Stefan Metzmacher
7134b64292 r8028: fix a crash bug in ulogoff, when the tree_connect failed before
metze
(This used to be commit a2e34475d7)
2007-10-10 13:19:00 -05:00
Stefan Metzmacher
4e2ac8b458 r8024: avoid one memcpy in the ipc_trans dcesrv_output() callback
we now can reference the DATA_BLOB that is used inside the dcesrv subsystem

metze
(This used to be commit 078f42bc3f)
2007-10-10 13:19:00 -05:00
Stefan Metzmacher
5afa0a2d62 r8023: use a pointer to a DATA_BLOB for each reply,
that will allow the write_fn callback of dcesrv_output()
to reference the memory with a valid TALLOC pointer

metze
(This used to be commit d0574d407f)
2007-10-10 13:19:00 -05:00
Stefan Metzmacher
8a300c9248 r8021: we only need to return STATUS_BUFFER_OVERFLOW for the ipc_trans replies
and not for the ipc_read() replies as here the client explicit says how much data it wants

the write_fn() in dcesrv_output() now returns NTSTATUS

and the ipc specific implementations are moved to the ntvfs_ipc module

metze
(This used to be commit fe483dcd87)
2007-10-10 13:19:00 -05:00
Stefan Metzmacher
7a4496f606 r8020: - add --with-selftest-prefix option that specify the prefix used in make test
- also we use ./prefix test as default and not `pwd`/prefix-test
  to workaround the path length limit for unix sockets
  ... char sun_path[108]; ...

metze
(This used to be commit d04057b932)
2007-10-10 13:18:59 -05:00
Andrew Bartlett
ce5882e82f r8016: Get the keyblock arguments correct. (the context struct changed, but
I forgot to update the users)

Andrew Bartlett
(This used to be commit 44b86b7e65)
2007-10-10 13:18:59 -05:00
Andrew Bartlett
44f2d34bd3 r8013: Remember to add the header containing the prototype for the pac
generating function...

Andrew Bartlett
(This used to be commit 707cf5fba8)
2007-10-10 13:18:59 -05:00
Jelmer Vernooij
d6acd2fb16 r8012: Add UUID for NDR64 transfer syntax.
(This used to be commit 6a3f622222)
2007-10-10 13:18:58 -05:00
Andrew Tridgell
baa873b8a1 r8011: arrgh, commit the right version this time
(This used to be commit 5efea40ea6)
2007-10-10 13:18:58 -05:00
Andrew Tridgell
34c57c5629 r8010: added testing of wildcard attributes
(This used to be commit 25d3872a6e)
2007-10-10 13:18:58 -05:00
Andrew Tridgell
bed487f6a3 r8009: expanded the ldb test suite. It worried me that some changes I have
pending, which I know break lots of features, still passed our test
suite! Now they don't.
(This used to be commit 5801167c8d)
2007-10-10 13:18:58 -05:00
Andrew Tridgell
939cb07232 r8006: I have seen w2k3 send multiple encoding syntaxes in rpc bind
requests. This is a simple change to accept that, as long as the first
one is NDR.
(This used to be commit 330293ddff)
2007-10-10 13:18:58 -05:00
Andrew Tridgell
c645eba60b r8005: escape '"' characters in ldap expressions. Makes scripting easier.
(This used to be commit 2de986455c)
2007-10-10 13:18:58 -05:00
Andrew Tridgell
f792261654 r8004: added a maximum EAs size test from Kukks.
(This used to be commit 426c4d08ac)
2007-10-10 13:18:58 -05:00
Andrew Tridgell
1050a54a3b r8003: ensure that we don't try to send a trans request with more than 64k data or params
(This used to be commit b4f2d17ace)
2007-10-10 13:18:57 -05:00
Andrew Tridgell
c58c7c4164 r8002: favor addresses on our local interfaces in NBT name resolution if
possible. This is needed because w2k3 will return bogus IPs in its
name resolution replies when it has an unplugged network interface.
(This used to be commit 2fafc23052)
2007-10-10 13:18:57 -05:00
Andrew Bartlett
ddffc922df r8001: Also fill in the krbtgt checksum, and make sure to put the right
checksum in the right place...

Andrew Bartlett
(This used to be commit 90d0f502da)
2007-10-10 13:18:57 -05:00
Andrew Bartlett
0a8d694e80 r8000: It seems make proto is required, for reasons I can't explain.
Andrew Bartlett
(This used to be commit b10f224f55)
2007-10-10 13:18:57 -05:00
Rafal Szczesniak
396074a7fc r7999: Fix lacking structure definition.
rafal
(This used to be commit 6886aefe4c)
2007-10-10 13:18:57 -05:00
Andrew Bartlett
9a7481bcfe r7993: Further work on the Krb5 PAC.
We now generate the PAC, and can verifiy both our own PAC and the PAC
from Win2k3.

This commit adds the PAC generation code, spits out the code to get
the information we need from the NETLOGON server back into a auth/
helper function, and adds a number of glue functions.

In the process of building the PAC generation code, some hints in the
Microsoft PAC specification shed light on other parts of the code, and
the updates to samr.idl and netlogon.idl come from those hints.

Also in this commit:

The Heimdal build package has been split up, so as to only link the
KDC with smbd, not the client utils.

To enable the PAC to be veified with gensec_krb5 (which isn't quite
dead yet), the keyblock has been passed back to the calling layer.

Andrew Bartlett
(This used to be commit e2015671c2)
2007-10-10 13:18:57 -05:00
Andrew Bartlett
f4e75294be r7991: I forgot to free the keyblock once we are done with it.
Andrew Bartlett
(This used to be commit a68e348375)
2007-10-10 13:18:56 -05:00
Andrew Bartlett
4c0f86f828 r7990: An attempt at documenting the current state of cludges required to get
Samba4 going, with kerberos.

Andrew Bartlett
(This used to be commit d027d0f106)
2007-10-10 13:18:56 -05:00
Andrew Bartlett
f4607c6e55 r7989: Allow the use of hashed passwords in the kerberos client and server,
and create the in-memory keytab with the correct kvno, if available.

Andrew Bartlett
(This used to be commit 7b7b2b038e)
2007-10-10 13:18:56 -05:00
Andrew Bartlett
f62a70fe54 r7988: Store the KVNO for the machine account, and set it up in the provision.
Andrew Bartlett
(This used to be commit 90e94a4630)
2007-10-10 13:18:56 -05:00
Andrew Bartlett
cbbe4e816c r7986: Fix the compile, thanks to HotaruT.
This won't actually work until I get the keyblock filled in again, but
at least it will compile.

I first need to decide if we want to keep the server-side gensec_krb5
code at all, now we have the GSSAPI layer doing what we want.

Andrew Bartlett
(This used to be commit 28e49de929)
2007-10-10 13:18:56 -05:00
Andrew Bartlett
5daf957362 r7980: Forgot to add kerberos_pac.c to this config.mk file.
Andrew Bartlett
(This used to be commit bba58a1876)
2007-10-10 13:18:56 -05:00
Andrew Bartlett
66da650727 r7979: Metze reminded me to try one more combination, and we can now verify
the 'PAC', required for interopability with Active Directory.

This is still a cludge, as it doesn't handle different encryption
types, but that should be fairly easy to fix (needs PIDL/IDL changes).

Andrew Bartlett
(This used to be commit 690cfc44ce)
2007-10-10 13:18:56 -05:00
Andrew Bartlett
99777452f0 r7978: A start again on PAC verification. I have noticed that the kerberos
keys appear at the end of the PAC, which I feel is deliberate (it
makes this much easier).

I still can't make it work, but I'm sure we are closer.

Andrew Bartlett
(This used to be commit 6f0e1c80ae)
2007-10-10 13:18:55 -05:00
Andrew Tridgell
8dde165d0f r7977: split up 'make clean' a little more as it is overflowing the command line size limits
on some platforms
(This used to be commit e18dc32074)
2007-10-10 13:18:55 -05:00
Andrew Bartlett
2d95bf6da6 r7971: structs.h update
(This used to be commit 31e7df1392)
2007-10-10 13:18:55 -05:00
Andrew Bartlett
025e03de54 r7970: This SMB signing code (merged from 3.0) turned out to be bogus.
Andrew Bartlett
(This used to be commit 817160ec1a)
2007-10-10 13:18:55 -05:00
Andrew Bartlett
3ff7916571 r7969: It seems reasonable that our tickets be marked renewable, in the
absense of an apparent AD flag to control this behaviour.

Andrew Bartlett
(This used to be commit 9886aa6f0e)
2007-10-10 13:18:55 -05:00