sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-02-25 17:57:42 +03:00
Code
62,232 Commits 62 Branches 1,153 Tags
Commit Graph

1204 Commits

Author SHA1 Message Date
Andrew Tridgell
f1c523939b pytalloc: ensure talloc_ctx is directly after PyObject_HEAD 
the talloc python interface for tp_alloc and tp_dealloc relies on a
cast to a py_talloc_Object to find the talloc_ctx (see
py_talloc_dealloc). This means we rely on the talloc_ctx for the
object being directly after the PyObject_HEAD

This fixes the talloc free with references bug in samba_dnsupdate

The actual problem was the tp_alloc() call in
PyCredentialCacheContainer_from_ccache_container() which used a cast
from a py_talloc_Object to a PyCredentialCacheContainerObject. That
case effectively changed the parent/child relationship between the
talloc_ctx and the ccc ptr.

This patch changes all the structures that follow this pattern to put
the TALLOC_CTX directly after the PyObject_HEAD, to ensure that if
anyone else decides to do a dangerous cast like this that it won't
cause the same sort of subtle breakage.

Pair-Programmed-With: Rusty Russell <rusty@samba.org>
 2010-04-20 15:50:27 +10:00
Andrew Tridgell
e6cbbd9640 s4-python: PyErr_SetString() will crash on NULL strings 
use nt_errstr() when no error available
 2010-04-19 16:34:14 +10:00
Andrew Bartlett
589a42e2da s4:auth Change auth_generate_session_info to take an auth context 
The auth context was in the past only for NTLM authentication, but we
need a SAM, an event context and and loadparm context for calculating
the local groups too, so re-use that infrustructure we already have in
place.

However, to avoid problems where we may not have an auth_context (in
torture tests, for example), allow a simpler 'session_info' to be
generated, by passing this via an indirection in gensec and an
generate_session_info() function pointer in the struct auth_context.

In the smb_server (for old-style session setups) we need to change the
async context to a new 'struct sesssetup_context'.  This allows us to
use the auth_context in processing the authentication reply .

Andrew Bartlett
 2010-04-14 10:30:51 +10:00
Andrew Bartlett
4e2384e242 s4:auth Allow the simple 'struct auth_session_info' generator for all users 
This code isn't ideal, but it is better than needing to consult the
main SamDB in things like a torture test.

Andrew Bartlett
 2010-04-14 10:28:35 +10:00
Matthias Dieter Wallnöfer
1bd4735d87 s4:auth/auth_sam_reply.c - fix counter types 2010-04-12 18:49:01 +02:00
Stefan Metzmacher
2a727ef6e7 lib/replace/wscript: inline LIBREPLACE_EXT into 'replace' as the autoconf system does 
metze
 2010-04-12 12:31:14 +02:00
Andrew Bartlett
2c193fe91a s4:auth Remove event context from anonymous_session() 
This should always return a simple structure with no need to consult a
DB, so remove the event context, and simplfy to call helper functions
that don't look at privilages.

Andrew Bartlett
 2010-04-11 13:36:04 +10:00
Andrew Bartlett
aecaddfa1b s4:credentials Add the functions needed to do S4U2Self with cli_credentials 
A torture test to demonstrate will be added soon.

Andrew Bartlett
 2010-04-10 21:40:58 +10:00
Andrew Bartlett
18f0e24f55 s4:credentials talloc_free() any previous salt_principal 
This isn't used often, but it is generally better not to leak it onto
what may be a longer-term context.

Andrew Bartlett
 2010-04-10 21:40:58 +10:00
Jelmer Vernooij
814e20e7da pynet: Create a net class. 2010-04-08 23:22:55 +02:00
Matthias Dieter Wallnöfer
b7b464eeee s4:auth/ntlm/auth_developer.c - "fixed_challenge_get_challenge" - fix the assignment of the challenge 
This is a string buffer and not a DATA_BLOB.
 2010-04-06 14:54:10 +02:00
Jelmer Vernooij
449bdf3543 s4-python: Move set_session_info to PySambaLdb. 2010-04-06 13:12:43 +02:00
Andrew Tridgell
553324bc10 s4-waf: move to a universal method of recursing into subdirs 
This works with both standalone lib builds and bundled builds
 2010-04-06 20:27:25 +10:00
Andrew Tridgell
b690fedef5 s4-waf: removed the AUTOGENERATED markers 
we won't be using the mk -> wscript generator again
 2010-04-06 20:27:16 +10:00
Andrew Tridgell
b0fb567f04 s4-waf: more dependencies on talloc 
these are needed so we can support a system talloc without using the
bundled talloc.h
 2010-04-06 20:27:13 +10:00
Andrew Tridgell
01682f797f s4-waf: fixed some deps now we don't auto-include tevent and replace 
this is preparation for being able to use system versions of these
libraries
 2010-04-06 20:27:12 +10:00
Andrew Tridgell
f9eae32f4b s4-waf: mark the wscript files as python so vim/emacs knows how to highlight them 2010-04-06 20:27:11 +10:00
Andrew Tridgell
bd44f14d8f s4-waf: enable the pc_files in the build rules 2010-04-06 20:27:10 +10:00
Andrew Tridgell
aa5e08eb83 s4-waf: install the rest of the headers 2010-04-06 20:27:09 +10:00
Andrew Tridgell
026690af00 s4-waf: remove the need for some of the lib aliases 2010-04-06 20:27:05 +10:00
Andrew Tridgell
81d155af96 build: check libc first for several libraries 2010-04-06 20:26:56 +10:00
Andrew Tridgell
5db5772db1 build: fixed the build without sasl libraries 
We need to only enable the cyrus_sasl module if we have sasl/sasl.h
 2010-04-06 20:26:49 +10:00
Andrew Tridgell
844acb2260 build: waf quicktest nearly works 
Rewrote wafsamba using a new dependency handling system, and started
adding the waf test code
 2010-04-06 20:26:48 +10:00
Andrew Tridgell
845e0cbe6f build: commit all the waf build files in the tree 2010-04-06 20:26:48 +10:00
Andrew Tridgell
64ba3c7672 build: check for libsasl2 2010-04-06 20:26:44 +10:00
Andrew Tridgell
71b5f97cd0 build: check for pam 2010-04-06 20:26:44 +10:00
Matthias Dieter Wallnöfer
6d6c551d26 Revert "s4:gensec_gssapi.c - make sure that "GSS_C_DELEG_POLICY_FLAG" is available" 
This reverts commit 3e091a82167f51b7d9abf00755bede9354932c6b.

This should be fixed through the new build system when it lands in "master".
 2010-04-05 12:06:49 +02:00
Jelmer Vernooij
aed295b97e s4-python: Remove convenience macro PyErr_SetStringError. 
This macro assumed that all errors were runtime errors.
 2010-04-04 00:22:29 +02:00
Matthias Dieter Wallnöfer
3e091a8216 s4:gensec_gssapi.c - make sure that "GSS_C_DELEG_POLICY_FLAG" is available 
FreeBSD 7.2 needs this.
 2010-03-30 17:42:51 +02:00
Andrew Tridgell
7ed349cace pytalloc: allow for using a system libtalloc-dev with pytalloc 
When we have a system talloc library, we still need to grab pytalloc.h
from lib/talloc. We don't want to just use -Ilib/talloc, as otherwise
we'll get the in-tree talloc.h which may not be compatible with the
system talloc.h

So we need to give the path to pytalloc.h
 2010-03-29 21:34:29 +11:00
Matthias Dieter Wallnöfer
d570a0af0b s4:auth/credentials/credentials.c - initialise more content 
Now all data should be initialised
 2010-03-26 18:14:11 +01:00
Andrew Tridgell
fae84f98e3 libutil: moved the networking defines to util_net.h 
These were causing thousands of warnings on solaris8
 2010-03-26 17:36:02 +11:00
Stefan Metzmacher
25a89b7015 s4:ntlmssp: move sign/seal states to a private ntlmssp_crypt_state union 
metze

Signed-off-by: Günther Deschner <gd@samba.org>
 2010-03-24 17:34:54 +01:00
Stefan Metzmacher
598bfdcfd8 s4:ntlmssp: make use of dump_arc4_state() 
metze

Signed-off-by: Günther Deschner <gd@samba.org>
 2010-03-24 17:34:54 +01:00
Stefan Metzmacher
48d8157879 s4:ntlmssp: copy dump_arc4_state() from source3 
metze

Signed-off-by: Günther Deschner <gd@samba.org>
 2010-03-24 17:34:53 +01:00
Stefan Metzmacher
a69260642e s4:ntlmssp: avoid usage of calc_ntlmv2_key_talloc() 
metze

Signed-off-by: Günther Deschner <gd@samba.org>
 2010-03-24 17:34:53 +01:00
Stefan Metzmacher
00f99a3df5 s4:ntlmssp: make use of calc_ntlmv2_key() for seal keys 
metze

Signed-off-by: Günther Deschner <gd@samba.org>
 2010-03-24 17:34:53 +01:00
Stefan Metzmacher
fc120dd758 s4:ntlmssp: add calc_ntlmv2_key() from source3 
metze

Signed-off-by: Günther Deschner <gd@samba.org>
 2010-03-24 17:34:53 +01:00
Stefan Metzmacher
e0c7d9c8aa s4:ntlmssp: rename calc_ntlmv2_key => calc_ntlmv2_key_talloc 
metze

Signed-off-by: Günther Deschner <gd@samba.org>
 2010-03-24 17:34:53 +01:00
Stefan Metzmacher
c64e6e0a0f s4:ntlmssp: inline ntlmssp_weakend_keys() 
metze

Signed-off-by: Günther Deschner <gd@samba.org>
 2010-03-24 17:34:52 +01:00
Stefan Metzmacher
3220c84b72 s4:ntlmssp: use a 'bool ok' helper variable to make the code more readable 
metze

Signed-off-by: Günther Deschner <gd@samba.org>
 2010-03-24 17:34:52 +01:00
Stefan Metzmacher
e669ee4c9d s4:ntlmssp: fix some formating 
metze

Signed-off-by: Günther Deschner <gd@samba.org>
 2010-03-24 17:34:52 +01:00
Stefan Metzmacher
44ce126b84 s4:ntlmssp: move doing_ntlm2 to ntlmssp_server_auth_state 
metze

Signed-off-by: Günther Deschner <gd@samba.org>
 2010-03-24 17:34:52 +01:00
Stefan Metzmacher
40395eee5b s4:ntlmssp: move NTLM2 session_nonce to ntlmssp_server_auth_state 
metze

Signed-off-by: Günther Deschner <gd@samba.org>
 2010-03-24 17:34:52 +01:00
Stefan Metzmacher
1b20f7192a s4:ntlmssp: move encrypted_session_key to ntlmssp_server_auth_state 
metze

Signed-off-by: Günther Deschner <gd@samba.org>
 2010-03-24 17:34:52 +01:00
Stefan Metzmacher
a56ae60851 s4:ntlmssp: keep a ntlmssp_server_auth_state to transport variables from preauth to postauth hooks 
metze

Signed-off-by: Günther Deschner <gd@samba.org>
 2010-03-24 17:34:52 +01:00
Stefan Metzmacher
a42cad635f s4:ntlmssp: remove unused server_multiple_authentications feature. 
metze

Signed-off-by: Günther Deschner <gd@samba.org>
 2010-03-24 17:34:52 +01:00
Stefan Metzmacher
d3e7266676 s4:ntlmssp: rename gensec_ntlmssp_state => ntlmssp_state 
Inspired by the NTLMSSP merge work by Andrew Bartlett.

metze

Signed-off-by: Günther Deschner <gd@samba.org>
 2010-03-24 17:34:51 +01:00
Stefan Metzmacher
706333856b s4:ntlmssp: split gensec_ntlmssp_unseal_packet() and ntlmssp_unseal_packet() 
Inspired by the NTLMSSP merge work by Andrew Bartlett.

metze

Signed-off-by: Günther Deschner <gd@samba.org>
 2010-03-24 17:34:51 +01:00
Stefan Metzmacher
d4c2f252da s4:ntlmssp: split gensec_ntlmssp_seal_packet() and ntlmssp_seal_packet() 
Inspired by the NTLMSSP merge work by Andrew Bartlett.

metze

Signed-off-by: Günther Deschner <gd@samba.org>
 2010-03-24 17:34:51 +01:00