sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-06-18 19:17:08 +03:00
Code
28,747 Commits 62 Branches 1,160 Tags
Commit Graph

125 Commits

Author SHA1 Message Date
Tim Potter
51b319f57f Merge of kerberos changes to make this branch build again! -
Jeremy Allison
e8c4098da6 Get closer to Heimdal compile... Damn. HEAD has different code in 
kerberos_verify...
Jeremy.
 -
Jeremy Allison
0c98f779f0 Fixup proto generation to not include krb5 specific symbols 
if no kerberos selected. Noticed by Metze.
Jeremy.
 -
Jeremy Allison
a7ee6ed645 More fixes getting us closer to full Heimdal compile.... 
Jeremy.
 -
Jim McDonough
9f1f3cb8bb should be HAVE_KRB5_SET_REAL_TIME (HAVE_ was missing)...fix the build -
Jeremy Allison
92ecd0bf0f Merge in more of the SuSE patches for Heimdal. These changes show how 
to add a function without an explicit #ifdef HEIMDAL which I'm trying
to avoid.
Jeremy.
 -
Andrew Bartlett
8129529c4f Merge from HEAD - vl's fix to my const patch. Also update the 'not have_krb5' 
case.

Andrew Bartlett
 -
Andrew Bartlett
3a7458f947 Merge from HEAD - make Samba compile with -Wwrite-strings without additional 
warnings.  (Adds a lot of const).

Andrew Bartlett
 -
Gerald Carter
36bcb312e9 fix segfault -
Gerald Carter
65e7b5273b sync'ing up for 3.0alpha20 release -
Tim Potter
6a58c9bd06 Removed version number from file header. 
Changed "SMB/Netbios" to "SMB/CIFS" in file header.
 -
Andrew Tridgell
adf44a9bd0 added trusted realm support to ADS authentication 
the method used for checking if a domain is a trusted domain is very
crude, we should really call a backend fn of some sort. For now I'm
using winbindd to do the dirty work.
 -
Andrew Tridgell
23ef22f117 fixed some krb5 ifdefs -
Andrew Tridgell
058a5aee90 added "net join" command 
this completes the first stage of the smbd ADS support
 -
Jeremy Allison
b668d7d656 Ok, I know it's a language thing and it shouldn't matter.... but a kerberos 
name is a "principal", not a principle. English majors will complain :-).
Jeremy.
 -
Andrew Bartlett
44bdb8b12b Fix for compilation on non-krb5 systems -
Andrew Tridgell
d1341d74b7 made smbclient cope better with arbitrary principle forms -
Andrew Tridgell
fd3a3daef3 better krb5 error handling (thanks andrewb!) -
Andrew Tridgell
353c290f05 the beginnings of kerberos support in smbd. It doesn't work yet, but 
it should give something for others to hack on and possibly find what
I'm doing wrong.
 -
Andrew Tridgell
888183a17c fix heimdal compilation -
Andrew Tridgell
076aa97bee added NTLMSSP authentication to libsmb. It seems to work well so I have enabled it by default if the server supports it. Let me know if this breaks anything. Choose kerberos with the -k flag to smbclient, otherwise it will use SPNEGO/NTLMSSP/NTLM -
Andrew Tridgell
8b692d8326 improve the error handling in the ASN1 code a bit -
Andrew Tridgell
395cfeea94 added a ASN.1 parser, so now I can properly parse the negTokenInit 
packet which means I can extract the service and realm, so we should
now work with realms other than the local realm.

it also means we now check the list of OIDs given by the server just
in case it says that it doesn't support kerberos. In that case we
should fall back to NTLMSSP but that isn't written yet.
 -
Andrew Tridgell
919734c1a6 fixed some memory leaks, started adding asn1 decoder for server side -
Andrew Tridgell
d330575856 initial kerberos/ADS/SPNEGO support in libsmb and smbclient. To 
activate you need to:

- install krb5 libraries
- run configure
- build smbclient
- run kinit to get a TGT
- run smbclient with the -k option to choose kerberos auth
 -