1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-27 03:21:53 +03:00
Commit Graph

1185 Commits

Author SHA1 Message Date
Andrew Bartlett
291b0dfb2a Update RPC-LSA to (almost) pass against Windows 2008.
(This used to be commit a17cb558c2)
2008-08-26 09:49:54 +10:00
Andrew Bartlett
9eacc3a8f3 Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
(This used to be commit a555334db6)
2008-08-25 08:27:06 +10:00
Andrew Tridgell
e80876ef9e Merge commit 'origin/v4-0-test' into v4-0-test
(This used to be commit 93cf0b3c7e)
2008-08-22 18:39:52 +10:00
Andrew Tridgell
0a27ff953e Merge branch 'abartlet-4-0-local' into v4-0-test
(This used to be commit 469fac2669)
2008-08-22 17:37:43 +10:00
Stefan Metzmacher
e3319bf849 drsuapi.idl: use hand written push functions for the compressed blobs
This isn't really the final solution, as we compress the data twice,
but it works.

metze
(This used to be commit 6da1d41173)
2008-08-21 12:48:48 +02:00
Stefan Metzmacher
8acc7f7da7 krb5pac.idl: make use of subcontext(0xFFFFFC01) to handle the type Serialization header
Now we should be able to handle bigendian PAC_LOGON_INFO buffers.

metze
(This used to be commit adbff0b0f9)
2008-08-20 15:23:25 +02:00
Stefan Metzmacher
9d0db64d24 drsuapi.idl: readd type serialization headers to compressed DsGetNCChangesCtr*
metze
(This used to be commit 4e6937816f)
2008-08-20 15:22:05 +02:00
Matthias Dieter Wallnöfer
bec7a95207 Add extra bits to our 'netlogon' response in CLDAP and NBT.
I've studied now the netlogon attribute from the CLDAP request and
have compared them with the table presented in the WSPP docs
(http://msdn.microsoft.com/en-us/library/cc201036.aspx). The first two
bytes seem to be correct, but that the third and fourth one is
completely clear with SAMBA 4.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
(This used to be commit 3024a43c25)
2008-08-20 12:45:41 +10:00
Andrew Bartlett
ac503b140d Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
(This used to be commit b337369d5c)
2008-08-15 07:58:03 +10:00
Andrew Tridgell
0eb1840994 cope with arbitrary unknown pac buffer types, so when MS adds
a new one we don't break our server
(This used to be commit 5e08b28531)
2008-08-14 15:27:48 +10:00
Andrew Bartlett
bf002d1173 Rework the trustAuthInOutBlob with the help of a hand parser.
This produces a C structure that is sane, while still parsing the wire
blobs (as far as I can tell).

Andrew Bartlett
(This used to be commit b5dbe815e5)
2008-08-13 16:16:59 +10:00
Stefan Metzmacher
0965b22ec5 dcerpc.idl: remove used DCERPC_MAX_SIGN_SIZE
metze
(This used to be commit 54b873e49f)
2008-08-11 18:15:59 +02:00
Stefan Metzmacher
802b4596fe dcerpc.idl: add DCERPC_AUTH_TRAILER_LENGTH
metze
(This used to be commit ce36448d74)
2008-08-11 18:15:58 +02:00
Stefan Metzmacher
8a01bdc99a drsuapi.idl: directly use mszip in level 2
This fixes the push because the switch_level doesn't work
otherwise because the pointer is the same as for
the outer switch_level.

metze
(This used to be commit a4c81ee68c)
2008-08-07 18:44:49 +02:00
Andrew Bartlett
43d2329da6 Update to a working trustAuthIncoming and trustAuthOutgoing parser.
This is based on the docs, as well as testing against a domain trust
in windows.

Clearly it needs to be more general - perhaps a non IDL parser?

Andrew Bartlett
(This used to be commit 816bb64a56)
2008-07-31 23:17:20 +10:00
Andrew Bartlett
2b0ed1832a Update trustAuthInOutBlob in line with MS-ADTS 7.1.6.8.1
(This used to be commit 26c2a34dec)
2008-07-31 07:45:30 +10:00
Stefan Metzmacher
7a633ed96b dcerpc.idl: add DCERPC_PFC_FLAG_SUPPORT_HEADER_SIGN flag
metze
(This used to be commit 131a1cfdc9)
2008-07-26 21:44:30 +02:00
Stefan Metzmacher
8a86e3cb45 drsblobs.idl: unify the Primary:Kerberos and Primary:Kerberos-Newer-Keys structs
metze
(This used to be commit 4b79a76785)
2008-07-24 08:24:09 +02:00
Stefan Metzmacher
aaa29d2fa5 drsblobs.idl: give some unknowns a meaning
metze
(This used to be commit 231e6f5ab2)
2008-07-24 08:24:08 +02:00
Stefan Metzmacher
28a7e6f125 drsblobs.idl: add idl for Primary:Kerberos-Newer-Keys blob in supplementalCredentials
metze
(This used to be commit 97b7901afb)
2008-07-23 14:46:10 +02:00
Stefan Metzmacher
e3434f8995 drsblobs.idl: fix unknowns in package_PrimaryKerberos idl
metze
(This used to be commit da9ceb2bf1)
2008-07-23 14:46:09 +02:00
Stefan Metzmacher
ecdd13389f drsblobs.idl: fix idl for supplementalCredentialsSubBlob
metze
(This used to be commit 24c5b10136)
2008-07-23 14:46:08 +02:00
Stefan Metzmacher
bb12c78d44 drsblobs.idl: rename unknown1 -> reserved
metze
(This used to be commit 9a70b2237d)
2008-07-23 14:46:07 +02:00
Michael Adam
e184b70768 drsuapi.idl: change the u1 field in DsBindInfo* to "pid".
According to the WSPP docs, section 5.35,
this is the "process identifyer" of the client.
It is meant for informational and debugging purposes
only and its assignment is implementation specific.

Michael
(This used to be commit 579306eb5b)
2008-07-22 15:33:26 +02:00
Michael Adam
901e764fa7 drsuapi.idl: add drsuapi_SupportedExtensionsExt bitfield.
This knowledge is obtained from the wspp-docs (section 5.35).

Michael
(This used to be commit f5afb69504)
2008-07-22 13:16:56 +02:00
Michael Adam
e7785a371a drsuapi.idl: the last 16 bytes in DsBindInfo48 ar the GUID of the config dn.
This bit seems not to be documented in the WSPP docs.

Michael
(This used to be commit 705f79bd0a)
2008-07-22 13:16:40 +02:00
Michael Adam
2abe5e9240 drsuapi.idl: add drsuapi_DsBindInfo48.
This is necessary to make DsGetNcChanges work with win2008.

Michael
(This used to be commit dd278b069b)
2008-07-22 13:16:31 +02:00
Andrew Bartlett
d626a26374 Rename structures to better match the names in the WSPP IDL.
The 'comment' element in a number of domain structures is called
oem_information.  This was picked up actually because with OpenLDAP
doing the schema checking, it noticed that 'comment' was not a valid
attribute.

The rename tries to keep this consistant in both the LDB mappings and
IDL, so we don't make the same mistake in future.

This has no real schema impact, as this value isn't actually used for
anything, as 'comment' was not used in the provision.

Andrew Bartlett
(This used to be commit 65dc0d5365)
2008-07-21 13:42:07 +10:00
Stefan Metzmacher
033683b00e drsuapi.idl: fix unknowns in drsuapi_DsGetNCChangesCtr*
metze
(This used to be commit 9e99e59ca7)
2008-07-16 12:16:55 +02:00
Stefan Metzmacher
e81feb77a2 drsuapi.idl: fix unknowns in drsuapi_DsReplicaObject*
metze
(This used to be commit de2aed042d)
2008-07-16 12:15:37 +02:00
Stefan Metzmacher
9827cf832f drsuapi.idl: fix unknowns in drsuapi_DsReplicaCursor[2]
metze
(This used to be commit a681e55067)
2008-07-16 12:12:30 +02:00
Stefan Metzmacher
80fe14a211 drsuapi.idl: correctly handle xpress compressed payload
metze

Signed-off-by: Stefan Metzmacher <metze@samba.org>
(This used to be commit d9d19eef4f)
2008-07-16 12:12:29 +02:00
Jeremy Allison
87f1a6c151 (Hopefully) fix the build by re-adding security.NTACL
const char. The deletion earlier was a typo.
Jeremy.
(This used to be commit aa27344b96)
2008-07-09 17:46:11 -07:00
Jeremy Allison
526eaeb1e0 Add in a version2 of the NT security descriptor store
that can store a timestamp along with the SD. Allows
us to check for validity against the POSIX st_ctime.
Keeps the IDL consistent with Samba3.3 IDL.
Jeremy.
(This used to be commit 29843a6b33)
2008-07-09 16:55:51 -07:00
Stefan Metzmacher
b6327116dd dcerpc.idl: the signing overhead can be more than 32 bytes
Windows seems to use 64 here, so we do now.

Before we got nca_proto_error fault because we send fragments
larger than the negotiated max frag size.

If the max frag size is 5840, we're sending 5837 bytes
when the auth_len is 45 and that matches w2k3 traffic.

metze
(This used to be commit 351947dba3)
2008-07-03 15:49:56 +02:00
Stefan Metzmacher
1eb5756ca5 drsuapi.idl: remove some unknows from DsGetNCChanges()
metze
(This used to be commit 924ef407bd)
2008-06-30 17:40:01 +02:00
Stefan Metzmacher
0827b08a43 opendb: add write time handling
metze
(This used to be commit 3868d8ce63)
2008-06-03 14:03:49 +02:00
Andrew Bartlett
844a7ad15a Add in an enum for two future NTP signing ops.
I hope to extend this code to handle NTP clients getting authenticated
time too.

Andrew Bartlett
(This used to be commit 1854ab058b)
2008-05-29 15:22:01 +10:00
Andrew Bartlett
ce877cafdd Final fixes to for a functional NTP signing deamon.
Andrew Bartlett
(This used to be commit 4dcc0cd06e)
2008-05-29 11:16:03 +10:00
Andrew Tridgell
07b4cafb09 added a newline at the end of the IDL
(This used to be commit 6386155e99)
2008-05-28 18:47:39 +10:00
Andrew Bartlett
93d2f8ff9e Try adding a stub to fix the build
(This used to be commit a529c377ae)
2008-05-28 15:47:27 +10:00
Andrew Bartlett
51ae2302a6 Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
It seems the format of main.mk changed in my sleep...

Conflicts:

	source/main.mk
(This used to be commit 56f2288e4f)
2008-05-28 08:11:05 +10:00
Andrew Bartlett
5d0d239d1a Start an 'NTP signing server' in Samba4.
I am modifying the ntp.org server to talk to this service, to sign
packets per MS-SNTP.

Andrew Bartlett
(This used to be commit 0c15385e60)
2008-05-27 16:20:18 +10:00
Andrew Tridgell
af4f6f445a add a mask of invalid security bits
(This used to be commit ccbf523876)
2008-05-27 14:06:38 +10:00
Jelmer Vernooij
dce310ef4e Remove evil hack which breaks Python bindings.
(This used to be commit 1c179566cb)
2008-05-26 13:31:57 +02:00
Andrew Tridgell
c5c1b3706a allow larger streams using the TDB backend
(This used to be commit 8c0d756eb8)
2008-05-26 14:59:58 +10:00
Jelmer Vernooij
05194ccdf8 Add tests for new NDR pack/unpack functionality in Python DCE/RPC bindings.
(This used to be commit 468d35827f)
2008-05-24 19:50:09 +02:00
Andrew Bartlett
2f5a1d2b1c Manually handle the NETLOGON_SAM_LOGON_REQUEST too.
With the sid structure being both optional and aligned, it was too
hard to do this in just IDL.

This requried moving some things around, as otherwise we would have a
dependency loop.

Andrew Bartlett
(This used to be commit e28790ba48)
2008-05-21 14:26:38 +10:00
Andrew Bartlett
2f773ff347 Re-add alignment removed by metze in 0e2f6d481b
This manual alignment is required, because the structure is marked as
unaligned.

Andrew Bartlett
(This used to be commit ef5d1c8d32)
2008-05-21 10:23:02 +10:00
Andrew Bartlett
d975cd9d8c Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
(This used to be commit 60579269d1)
2008-05-17 21:16:22 +10:00