1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-28 01:58:17 +03:00

6509 Commits

Author SHA1 Message Date
Andrew Bartlett
1377cca5f4 r10810: This adds the hooks required to communicate the current user from the
authenticated session down into LDB.  This associates a session info
structure with the open LDB, allowing a future ldb_ntacl module to
allow/deny operations on that basis.

Along the way, I cleaned up a few things, and added new helper functions
to assist.  In particular the LSA pipe uses simpler queries for some of
the setup.

In ldap_server, I have removed the 'ldasrv:hacked' module, which hasn't
been worked on (other than making it continue to compile) since January,
and I think the features of this module are being put into ldb anyway.

I have also changed the partitions in ldap_server to be initialised
after the connection, with the private pointer used to associate the ldb
with the incoming session.

Andrew Bartlett
(This used to be commit fd7203789a2c0929eecea8125b57b833a67fed71)
2007-10-10 13:39:32 -05:00
Andrew Bartlett
5158636aff r10809: Add struct decl
(This used to be commit aa30c16de0405f43ed35a28764ef25e234f3b2a7)
2007-10-10 13:39:31 -05:00
Andrew Bartlett
f1af78a539 r10807: Make the split-out files actually compile...
Andrew Bartlett
(This used to be commit a4282c14d5cf6b5eceb293d657c7cd5eaea89046)
2007-10-10 13:39:31 -05:00
Andrew Bartlett
439a89d96c r10806: Add missing file.
(This used to be commit 9becd2c0d6ed8fe6de4b8bca0f2290f81fea28f7)
2007-10-10 13:39:31 -05:00
Andrew Bartlett
d76f425b30 r10805: Move RPC-SAMLOGON to C99 initialisation
Andrew Bartlett
(This used to be commit 0f994275ce5d84bdb746524c5da7d9661fbadb63)
2007-10-10 13:39:31 -05:00
Andrew Bartlett
89a63bf14b r10804: Move the DRSUAPI cracknames test into a seperate file, and collapse
the file size by converting it to a table-driven system.

Andrew Bartlett
(This used to be commit f5499877722d6c4636036325efb75d35aa853cc4)
2007-10-10 13:39:30 -05:00
Andrew Bartlett
c6e683cc23 r10803: Remove a duplicate krbtgt test, and add a test looking for the
'support account'.  This shows that we need to be searching on
displayName, and probably CN too.

Andrew Bartlett
(This used to be commit 28194504951af22a76cf26f3de749cb448518bbc)
2007-10-10 13:39:30 -05:00
Andrew Bartlett
d4e35eb4b4 r10800: Indent
(This used to be commit 057cede8b44e1b53f5d94a7270e9b6a90d50de4c)
2007-10-10 13:39:30 -05:00
Andrew Bartlett
05c5d145e7 r10796: Make getting an anonymous session info a utility function.
Andrew Bartlett
(This used to be commit 6021fa373405f8788dc216aae82a3f4a80df4ba7)
2007-10-10 13:39:30 -05:00
Andrew Bartlett
5e0fd505ab r10791: Add copyright, fix comments (this isn't the timestamps module any more)
Andrew Bartlett
(This used to be commit efdc6d834aecbf978f538365c72149fa7afe0828)
2007-10-10 13:39:29 -05:00
Andrew Tridgell
f6a09fb8f8 r10790: allow updating of existing ldb opaque values (thanks to abartlet for
spotting this)
(This used to be commit ef13569ca94da00cc410318e61505e70f3606674)
2007-10-10 13:39:29 -05:00
Jelmer Vernooij
c5069ba7e3 r10788: - Give unions a name
- Check initialisation function return value
(This used to be commit ebb8e75ebd572d62bdb3615d41c210bcc918fa41)
2007-10-10 13:39:29 -05:00
Jelmer Vernooij
0ef0467039 r10787: Fix silly nodiscriminant-issue
(This used to be commit 43a5c863bf81af9b8415b6ccf8a386c36d4fa7f9)
2007-10-10 13:39:29 -05:00
Stefan Metzmacher
f7cd569828 r10768: add a function to create a stream_connection from an already
existing socket connection, that's used for protocols
which switch the client/server roles inside a session

metze
(This used to be commit d4b4d963353e6986da5b42680739329069f5affe)
2007-10-10 13:39:29 -05:00
Stefan Metzmacher
6799fde75d r10766: - make it possible to mark a wrepl_request as send only,
used for WREPL_REPL_INFORM* messsages
- make it possible to close the connection after a request was send
  used for WREPL_ASSOCIATION_STOP
- fix the torture test that tests the assoc context handling
  between connections, you can issue a request and get the reply
  on another connection, I think we should not implement that in our server
  code, as I think it's a security hole, you can cause a windows server
  to send the replies to someone another client, that doesn't wait for data,
  and as there're no massage_id in the protocol the client would be confused
  by a replies that doesn't belong to a query

metze
(This used to be commit dfc95de8fa7ded8ea92cafe58cf86efcc7920156)
2007-10-10 13:39:28 -05:00
Jelmer Vernooij
093a30d7ed r10765: Actually use VALS() setting for enums
(This used to be commit 6b33e3eedd13ade5c7c9f4b5062e8b8f919fe39c)
2007-10-10 13:39:28 -05:00
Andrew Bartlett
39daa629ff r10764: To match Win2k3 SP1, we need to set an anonymous user token for
schannel connections.

Test for Win2k3 SP1 behaviour in RPC-SCHANNEL.

Andrew Bartlett
(This used to be commit 1c3911374ec65e4770c2fe9109d7b7d3ecd99f6a)
2007-10-10 13:39:28 -05:00
Andrew Bartlett
8af30ce313 r10763: PROOF of the single, easily understood cause of all of our schannel PAIN!
This test currently passes against Win2k3 SP0, but not SP1.  The
problem was not a convoluted series of changes in policy handles, but
a simple rule that schannel logins would be regarded as ANONYMOUS not
SYSTEM.

Andrew Bartlett
(This used to be commit e843a7fcba496b91b014ec1bff2f2dfb2a2fcdb1)
2007-10-10 13:39:28 -05:00
Stefan Metzmacher
03b634042f r10761: we need to use a pointer to a nbt_name to fix compiler warnings, because we can
only use a pointers to unknown types in proto.h

metze
(This used to be commit 2f46e54e1bcf43f1bee062ff9a21e646cc3676e9)
2007-10-10 13:39:28 -05:00
Stefan Metzmacher
4812a5d3fd r10760: remove only one star from the pointers, and not from the stars that
come from the array nesting

this fixes a compiler warning and but in the eventlog.h,
where the idl uses nstring strings[num_strings]

metze
(This used to be commit c4a252bd4678ef991705aaaf91c03c697f2f568e)
2007-10-10 13:39:27 -05:00
Andrew Tridgell
78d0e79c9f r10759: make modules easier to write by allowing modules to only implement the
functions they care about, instead of all functions. This also makes
it more likely that future changes to ldb will not break existing
modules
(This used to be commit 45f0c967b58e7c1b2e900a4d74cfde2a2c527dfa)
2007-10-10 13:39:27 -05:00
Andrew Tridgell
01e6c56208 r10757: remove the proxy module (it is not complete yet)
(This used to be commit 3c5f3032fcb092545580b986e0ce58bb49e4d9cb)
2007-10-10 13:39:27 -05:00
Andrew Tridgell
3cb96c8db9 r10756: another fix for the construction of expressions from subtrees for
SUBSTRING searches. This time fix multi-part substring searches.
(This used to be commit bf5cef6f00466fc1dc3c2864a109f1ccd92681b0)
2007-10-10 13:39:27 -05:00
Andrew Tridgell
12399c9b5e r10755: fixed the construction of expressions from subtrees for SUBSTRING searches
(This used to be commit 71c06778d4a3ac1ca4198071ae3351acdc0656d9)
2007-10-10 13:39:26 -05:00
Andrew Tridgell
97e8c5bcec r10754: fixed a valgrind error for unmatched SMB replies
(This used to be commit b714ab64fd79d5cabc39779774fae7c3861a84da)
2007-10-10 13:39:26 -05:00
Andrew Tridgell
5fd031c97d r10753: don't require every ldb module to implement both a search_bytree() and
a search() function, instead each module now only implements the
bytree method, and the expression based search is handled generically
by the modules code. This makes for more consistency and less code
duplication.

fixed the tdb backend to handle BASE searches much more
efficiently. They now always only lookup one record, regardless of the
search expression
(This used to be commit 7e44f9153c5578624e2fca04cdc0a00af0fd9eb4)
2007-10-10 13:39:26 -05:00
Andrew Tridgell
92da5aa6b8 r10752: make sure we set the exist status correctly for the tdb tests
(This used to be commit e83635941c1829d8cb8c0784b7f7303c85654199)
2007-10-10 13:39:26 -05:00
Jelmer Vernooij
be9af1a4e8 r10742: Support multi-level pointers + ref pointer fixes
(This used to be commit 258b762dc62b257f99d1d859c5a3d850aba3e9fa)
2007-10-10 13:39:26 -05:00
Jelmer Vernooij
765f69ce42 r10739: Reduce number of calls to prs_align_custom()
(This used to be commit ebeeec5406308d493d45b1088963a87cdb953cac)
2007-10-10 13:39:25 -05:00
Jelmer Vernooij
f72dee9e39 r10737: Fix some alignment issues
(This used to be commit 2b4270a2e965eb5c6fe0b25d22d2977e60bb7d43)
2007-10-10 13:39:25 -05:00
Jelmer Vernooij
4bbb584ff0 r10734: Generate ptr, size, offset, and length elements in unions just once.
(This used to be commit 12bfa5d01bcb4cb9dad5167e1a3721fd68f06275)
2007-10-10 13:39:25 -05:00
Jelmer Vernooij
5df3b426ee r10732: Generate _ctr structures for unions
(This used to be commit bd8fcb05003ad75f521783ad9603c923eacafc1a)
2007-10-10 13:39:25 -05:00
Andrew Tridgell
7838e13e91 r10726: fix to talloc_parent() from Michael O'Brien
(This used to be commit f31a2376f3fef1cc2b40b37fb4d94a4b67eec6d4)
2007-10-10 13:39:25 -05:00
Jelmer Vernooij
d220237b19 r10721: Handle allocations and primitive / deferred data correctly. In theory,
the generated output for DFS should work now (it compiles cleanly, but
I haven't tested it yet).

Not supported:
 - subcontexts()
 - relative pointers
 - unions of pointers
 - DATA_BLOB
 - several other things

Also still need to do:
 - Remove some spurious spaces in the output
 - Do range() checking

Example output is still available at http://samba.org/~jelmer/pidl_samba3/
(This used to be commit e2d7e382bb645f1bddd2047669bed10f121b59d2)
2007-10-10 13:39:24 -05:00
Jelmer Vernooij
1e0823d0a5 r10719: Remove __FUNCTION__ macro as it might not be available at all systems
(pointed out by John E. Malmberg)
(This used to be commit 3169bbc15703b39943a11939e9dcccb2a9b4ad5d)
2007-10-10 13:39:24 -05:00
Jelmer Vernooij
3d6279402c r10718: Another large set of small improvements. All generated files compile
without warnings now. The only things left to do that are
required for DFS:
 - add allocation of arrays in marshalling phase
 - handling primitive and deferred data in embedded structures / unions.

Example output is again available from http://samba.org/~jelmer/pidl_samba3/
(This used to be commit 9fe724f6fb026d95306587f696c065f348aaf219)
2007-10-10 13:39:24 -05:00
Jelmer Vernooij
9879bc6aa6 r10717: Another bunch of small updates. All generated files except parse_dfs.c
compile now when generated from Samba4's dfs.idl.
(This used to be commit 2b315b1942e77640eca8e0a3347b2a9ed1920f6a)
2007-10-10 13:39:24 -05:00
Jelmer Vernooij
eea74cde05 r10716: Use correct Samba3 data types for strings. Also use Samba3 types
for a couple of other types (policy handles, SIDs, times)
(This used to be commit c2527217b4b4c120d82044e65b979dd3b7d2609e)
2007-10-10 13:39:24 -05:00
Jelmer Vernooij
81c306472a r10715: More Samba3 parser generator improvements:
- Actually generate parsers for unions and structs.
- Support some more builtin types.
- Some more work on supporting arrays.
- Several other small fixes.

I've updated the example output at http://samba.org/~jelmer/
(This used to be commit b229c033ebc7ec972b32f1b75b60a9c68a36db97)
2007-10-10 13:39:23 -05:00
Jelmer Vernooij
55065d27ce r10713: Couple more updates to the Samba3 parser generators.
Unions and enums have been improved, init functions are now generated
properly, some other small improvements.
(This used to be commit 8a60e79175eb27ef9fa4b8dea72a518bbaab900f)
2007-10-10 13:39:23 -05:00
Andrew Bartlett
49dd5e4b1d r10712: Use data_blob_talloc, thanks to valgrind for finding the errors.
Andrew Bartlett
(This used to be commit 1f6fec8e6b0845ae6000eeda65641435fb18c9e3)
2007-10-10 13:39:23 -05:00
Andrew Bartlett
c690be462d r10711: An error of 'user exists' is not an error, just an indication of how
the join was processed.

Andrew Bartlett
(This used to be commit 0d93f11c894927a9ab69f7a31b9fbedde9d698b6)
2007-10-10 13:39:23 -05:00
Andrew Tridgell
a04f65b1c7 r10709: fixed a crash bug rather similar to the one volker found in the dcerpc
code, where a stream_terminate_connection() while processing a request
can cause a later defererence of the connection structure to die.
(This used to be commit efbcb0f74176058a74d7134dae4658b891fc6f16)
2007-10-10 13:39:23 -05:00
Andrew Tridgell
63d4cb4802 r10708: a bit more error checking in the idap ldb backend
(This used to be commit 63ebaad393e38b28c8f97f33e2b22f2445733405)
2007-10-10 13:39:22 -05:00
Andrew Tridgell
7b38c1db1b r10706: split out the irpc server functions in the NBT server, so the mainline
NBT server code remains reabable. Also fixed the copyright header to
include Volker, as he wrote the getdc server function
(This used to be commit a973197d3e0045a76a2f14153f5541b9e36e6c8a)
2007-10-10 13:39:22 -05:00
Andrew Tridgell
3a7e251f27 r10705: fixed a crash bug in the getdcname irpc server for winbind. The
problem was that the return string was declared as:

	[out] astring dcname

which means "this is a non-NULL string". The server code sometimes
returned NULL however (on getdc lookup failure), which caused the NDR
marshalling code to crash. When you declare a non-pointer return value
you are promising that the value can never be NULL.

The trivial fix is to use:

	[out] astring *dcname

which leaves the API alone, but includes a pointer in the wire format,
which in turn means it is valid to send a NULL string as a response.
(This used to be commit e39bac61960f6ce8957f148a482e39499a8e9096)
2007-10-10 13:39:22 -05:00
Andrew Tridgell
2c3e4bdadf r10704: don't try to free the netlogon pipe twice
(This used to be commit 2c3a9f04db5d61305f4eca8b44e33c2dd15a6dc4)
2007-10-10 13:39:22 -05:00
Andrew Bartlett
c8bec9dd3a r10703: Add a new user account, change the password and test it in the SAMLOGON test.
The semantics for the user account are very odd, the old password is
still valid, but the session keys appear to be blanked out.

Andrew Bartlett
(This used to be commit bbfaf4821d81116efa91313655acb75d6f577953)
2007-10-10 13:39:21 -05:00
Andrew Bartlett
582595c215 r10702: Fix a silly error that caused a rejoin/delete in the torture code to fault...
Andrew Bartlett
(This used to be commit 0fa6d040f287dbf6b0588e3507d53037a04f85d4)
2007-10-10 13:39:21 -05:00
Andrew Bartlett
2e3c917957 r10701: Ensure we return the right user handle.
Andrew Bartlett
(This used to be commit 732b247a498e0b90b9f0c711baaac51ad6402496)
2007-10-10 13:39:21 -05:00