1
0
mirror of https://github.com/samba-team/samba.git synced 2025-10-25 19:33:18 +03:00
Commit Graph

86 Commits

Author SHA1 Message Date
Jelmer Vernooij
b9e3a4862e r26260: Store loadparm context in gensec context. 2007-12-21 05:47:34 +01:00
Jelmer Vernooij
2c6b755309 r26250: Avoid global_loadparm in a couple more places. 2007-12-21 05:47:28 +01:00
Jelmer Vernooij
80a6120050 r26249: Remove a couple more uses of global_loadparm. 2007-12-21 05:47:27 +01:00
Jelmer Vernooij
5b29ef7c03 r26236: Remove more uses of global_loadparm or specify loadparm_context explicitly. 2007-12-21 05:47:15 +01:00
Jelmer Vernooij
4b46888bd0 r26231: Spell check: credentails -> credentials. 2007-12-21 05:47:09 +01:00
Jelmer Vernooij
3a946d1ffd r26230: Use task-provided loadparm context in a couple more places, avoid loadparm context inside ntlm_auth. 2007-12-21 05:47:07 +01:00
Jelmer Vernooij
ba75f1613a r26228: Store loadparm context in auth context, move more loadparm_contexts up the call stack. 2007-12-21 05:47:05 +01:00
Jelmer Vernooij
6cbce47a3e r26226: Avoid more uses of global_loadparm. 2007-12-21 05:47:02 +01:00
Jelmer Vernooij
9243b551f3 r25454: Use standard bool types in a couple more places. 2007-10-10 15:07:38 -05:00
Jelmer Vernooij
3468952e77 r25446: Merge some changes I made on the way home from SFO:
2007-09-29 More higher-level passing around of lp_ctx.
2007-09-29 Fix warning.
2007-09-29 Pass loadparm contexts on a higher level.
2007-09-29 Avoid using global loadparm context.
2007-10-10 15:07:34 -05:00
Jelmer Vernooij
3fcc960839 r25398: Parse loadparm context to all lp_*() functions. 2007-10-10 15:07:25 -05:00
Stefan Metzmacher
d0306ed16b r25213: use talloc_strdup_append_buffer() instead of talloc_append_string()
metze
2007-10-10 15:06:55 -05:00
Jeremy Allison
0844dbf597 r25175: Change to talloc_asprintf_append_buffer().
Jeremy.
2007-10-10 15:06:46 -05:00
Jelmer Vernooij
abe8349f9b r25026: Move param/param.h out of includes.h 2007-10-10 15:05:38 -05:00
Jelmer Vernooij
6f224480b2 r25007: Remove more uses of pstring, move ntlmauth-specific utility function to ntlm-auth.c 2007-10-10 15:05:32 -05:00
Jelmer Vernooij
08bb1ef643 r25000: Fix some more C++ compatibility warnings. 2007-10-10 15:05:27 -05:00
Kai Blin
ba5ac4eeb8 r24796: Add bounds checking to ntlm_auth, increase initial buffer size to 300 to avoid
one talloc/fgets loop in the common case, which is slightly over 200 for the KK
response.
2007-10-10 15:03:11 -05:00
Kai Blin
2b72738e4e r24795: When talking to squid, allocate the buffer size dynamically. 2007-10-10 15:03:11 -05:00
Andrew Tridgell
fcf38a38ac r23792: convert Samba4 to GPLv3
There are still a few tidyups of old FSF addresses to come (in both s3
and s4). More commits soon.
2007-10-10 14:59:12 -05:00
Andrew Bartlett
2b569c42e0 r19598: Ahead of a merge to current lorikeet-heimdal:
Break up auth/auth.h not to include the world.

Add credentials_krb5.h with the kerberos dependent prototypes.

Andrew Bartlett
2007-10-10 14:25:00 -05:00
Jelmer Vernooij
d599bb8f98 r19558: Make behaviour of "OK" match that of Samba3's ntlm_auth. Patch by
Kai Blin.
2007-10-10 14:24:50 -05:00
Jelmer Vernooij
2167552b9a r19555: Silently ignore --use-cached-creds for compatibility with Samba3's ntlm_auth.
Patch by Kai Blin.
2007-10-10 14:24:50 -05:00
Jelmer Vernooij
8b622c5ded r18168: Use {NULL} rather than POPT_TABLEEND, which is not always available. 2007-10-10 14:17:45 -05:00
Andrew Bartlett
eb28aff4e0 r17577: Patch from Kai Blin <kai.blin@gmail.com>:
This is the Samba4 version of the ntlm_auth patch that was committed
to Samba3 in revision 17216.

The purpose of this patch is to return session key information, as
well as NTLMSSP negotiated flags to ntlm_auth's caller.  This allows
the bulk data signing and sealing to be handled in a library, supplied
by the caller.

This also allows the caller to ask for features, so that the right
flags get negotiated.
2007-10-10 14:15:38 -05:00
Stefan Metzmacher
679ac74e71 r17341: pass a messaging context to auth_context_create()
and gensec_server_start().

calling them with NULL for event context or messaging context
is no longer allowed!

metze
2007-10-10 14:15:17 -05:00
Jelmer Vernooij
f2ca71f122 r15363: Fix dependencies for shared library 2007-10-10 14:05:26 -05:00
Jelmer Vernooij
c19c2b51d3 r15328: Move some functions around, remove dependencies.
Remove some autogenerated headers (which had prototypes now autogenerated by pidl)
Remove ndr_security.h from a few places - it's no longer necessary
2007-10-10 14:05:17 -05:00
Jelmer Vernooij
137ace965e r15296: Move ntlm_auth-specific functions from util to ntlm_auth so libutil doesn't need ldb 2007-10-10 14:05:03 -05:00
Andrew Tridgell
3b66cf35a7 r14982: mark a deliberate missing break 2007-10-10 14:00:50 -05:00
Stefan Metzmacher
152e7e3d02 r14858: fix bugs noticed by the ibm code checker
metze
2007-10-10 13:59:43 -05:00
Jelmer Vernooij
3dd477ca51 r14464: Don't include ndr_BASENAME.h files unless strictly required, instead
try to include just the BASENAME.h files (containing only structs)
2007-10-10 13:57:27 -05:00
Jelmer Vernooij
1a16a6f1df r14380: Reduce the size of structs.h 2007-10-10 13:57:16 -05:00
Jelmer Vernooij
1228358767 r13924: Split more prototypes out of include/proto.h + initial work on header
file dependencies
2007-10-10 13:52:24 -05:00
Jelmer Vernooij
44f0aba715 r12620: Get rid of automatically generated lists of init functions of subsystems.
This allows Samba libraries to be used by other projects (and parts of
Samba to be built as shared libraries).
2007-10-10 13:49:06 -05:00
Jelmer Vernooij
70e7449318 r12608: Remove some unused #include lines. 2007-10-10 13:49:03 -05:00
Jelmer Vernooij
8aae0f168e r12510: Change the DCE/RPC interfaces to take a pointer to a
dcerpc_interface_table struct rather then a tuple of interface
name, UUID and version.

This removes the requirement for having a global list of DCE/RPC interfaces,
except for these parts of the code that use that list explicitly
(ndrdump and the scanner torture test).

This should also allow us to remove the hack that put the authservice parameter
in the dcerpc_binding struct as it can now be read directly from
dcerpc_interface_table.

I will now modify some of these functions to take a dcerpc_syntax_id
structure rather then a full dcerpc_interface_table.
2007-10-10 13:47:48 -05:00
Jelmer Vernooij
c92ace494f r12499: Move smb_build.h out of includes.h 2007-10-10 13:47:45 -05:00
Andrew Bartlett
708476d0b2 r11371: Fix the ntlm_auth build.
Andrew Bartlett
2007-10-10 13:45:27 -05:00
Andrew Bartlett
205f77c579 r11200: Reposition the creation of the kerberos keytab for GSSAPI and Krb5
authentication.  This pulls the creating of the keytab back to the
credentials code, and removes the special case of 'use keberos keytab
= yes' for now.

This allows (and requires) the callers to specify the credentials for
the server credentails to GENSEC.  This allows kpasswdd (soon to be
added) to use a different set of kerberos credentials.

The 'use kerberos keytab' code will be moved into the credentials
layer, as the layers below now expect a keytab.

We also now allow for the old secret to be stored into the
credentials, allowing service password changes.

Andrew Bartlett
2007-10-10 13:45:00 -05:00
Jelmer Vernooij
540155fad3 r10528: Add credentials.h back into includes.h as some compilers don't
seem to be able to handle incomplete enum types.
2007-10-10 13:39:02 -05:00
Jelmer Vernooij
a5b88bcd42 r10513: Reduce some use of pstring. The main reason some parts of the code still
use pstring is next_token() now.
2007-10-10 13:38:58 -05:00
Jelmer Vernooij
03647e1321 r10510: Decrease the amount of data included by includes.h a bit 2007-10-10 13:38:58 -05:00
Jelmer Vernooij
59083b7ba6 r10315: Remove use of fstring and pstring in dynconfig.c
Remove unused includes of dynconfig.h
2007-10-10 13:38:17 -05:00
Andrew Bartlett
04af95bd31 r9772: Make credentials callbacks more consistant with the abstraction
function interface used in the credentials code.

Fix bug in ntlm_auth, where we would overwrite the PW specified as a
first input.  (Reported and chased by Kai Blin <blin@gmx.net>, bug
#3040)

Andrew Bartlett
2007-10-10 13:34:59 -05:00
Andrew Bartlett
6202267f6e r9728: A *major* update to the credentials system, to incorporate the
Kerberos CCACHE into the system.

This again allows the use of the system ccache when no username is
specified, and brings more code in common between gensec_krb5 and
gensec_gssapi.

It also has a side-effect that may (or may not) be expected: If there
is a ccache, even if it is not used (perhaps the remote server didn't
want kerberos), it will change the default username.

Andrew Bartlett
2007-10-10 13:34:54 -05:00
Andrew Bartlett
8f53d995c6 r9396: ntlm_auth updates, including again support for the NTLMSSP client
mode, and specification of the workstation.

Andrew Bartlett
2007-10-10 13:33:33 -05:00
Tim Potter
8d376d56c7 r9357: Remove DBGC_CLASS cruft copied over from Samba 3. I would like to
replace this with something funkier.
2007-10-10 13:33:27 -05:00
Stefan Metzmacher
83d65d0d7e r9240: - move struct security_token to the idl file, with this we can
the ndr_pull/push/print functions for it in the ntacl-lsm module

- fix compiler warnings in the ldap_encode_ndr_* code

metze
2007-10-10 13:31:37 -05:00
Andrew Bartlett
b341bd4487 r8901: Fix ntlm_auth segfault (invalid free()). We have moved to talloc
here.

Andrew Bartlett
2007-10-10 13:30:16 -05:00
Andrew Tridgell
3c12b46e32 r8702: fixed ntlm_auth build. Andrew, can you check I got this right? 2007-10-10 13:29:55 -05:00