sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-24 21:34:56 +03:00
Code
63,116 Commits 60 Branches 1,144 Tags 452 MiB
2e171239f9
Commit Graph

20 Commits

Author SHA1 Message Date
Andrew Bartlett
9c6b637ce8 s4:auth Change auth_generate_session_info to take flags 
This allows us to control what groups should be added in what use
cases, and in particular to more carefully control the introduction of
the 'authenticated' group.

In particular, in the 'service_named_pipe' protocol, we do not have
control over the addition of the authenticated users group, so we key
of 'is this user the anonymous SID'.

This also takes more care to allocate the right length ptoken->sids

Andrew Bartlett
 2010-05-20 17:39:10 +10:00
Jelmer Vernooij
f9ca9e46ad Finish removal of iconv_convenience in public API's. 2010-05-18 11:45:30 +02:00
Stefan Metzmacher
ba703cb8e9 s4:service_named_pipe: use the passed client and server addresses 
This gives the rpc server code the correct client and server
ip addresses for ncacn_np.

metze
 2010-04-27 13:00:25 +02:00
Andrew Bartlett
589a42e2da s4:auth Change auth_generate_session_info to take an auth context 
The auth context was in the past only for NTLM authentication, but we
need a SAM, an event context and and loadparm context for calculating
the local groups too, so re-use that infrustructure we already have in
place.

However, to avoid problems where we may not have an auth_context (in
torture tests, for example), allow a simpler 'session_info' to be
generated, by passing this via an indirection in gensec and an
generate_session_info() function pointer in the struct auth_context.

In the smb_server (for old-style session setups) we need to change the
async context to a new 'struct sesssetup_context'.  This allows us to
use the auth_context in processing the authentication reply .

Andrew Bartlett
 2010-04-14 10:30:51 +10:00
Andreas Schneider
81bb8f67fa s4-smb: Migrate named_pipe_server to tsocket. 
This is an improved version of commit 69d5cea2e5,
which was reverted by commit 71c20f703b.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
 2010-02-26 08:57:31 +01:00
Andrew Tridgell
781ad038c9 s4-krb5: propogate errors from a lot more kerberos functions 
We need to be able to give sensible error messages when a kerberos
calls fails. This propogates the kerberos error up the stack to the
caller.

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
 2010-02-26 13:59:16 +11:00
Simo Sorce
71c20f703b Revert "s4-smb: Migrate named_pipe_server to tsocket." 
This reverts commit 69d5cea2e5.

This commit causes issues with the RPC server, revert it until we find the
exact issue and possibly have a torture test to avoid it happening again.
Found playing with w2k8r2 and forest trusts.
 2010-02-24 18:35:47 -05:00
Andreas Schneider
69d5cea2e5 s4-smb: Migrate named_pipe_server to tsocket. 2010-02-23 13:48:21 +01:00
Brad Hards
1e986c1cb3 More spelling fixes across source4/ 
Signed-off-by: Matthias Dieter Wallnöfer <mwallnoefer@yahoo.de>
 2010-02-22 21:45:38 +01:00
Andrew Tridgell
72c60db126 s4-smbd: removed unnecessary includes 2009-09-19 14:11:58 -07:00
Andrew Tridgell
e9a589feac s4-server: kill main daemon if a task fails to initialise 
When one of our core tasks fails to initialise it can now ask for the
server as a whole to die, rather than limping along in a degraded
state.
 2009-09-18 18:05:55 -07:00
Stefan Metzmacher
bb0644175a s4:service_named_pipe: accept delegated credentials 
metze
 2009-09-18 20:34:41 +02:00
Stefan Metzmacher
2ae92c7599 s4:smbd: add support for named_pipe_auth level 2 in service_named_pipe... 
metze
 2009-05-01 17:42:06 +02:00
Stefan Metzmacher
d9c30894a1 s4:service_stream: s/private/private_data 
metze
 2009-02-02 13:09:00 +01:00
Stefan Metzmacher
29cc638c2c s4:smbd: s/private/private_data 
metze
 2009-02-02 13:08:36 +01:00
Stefan Metzmacher
a83feb2fe3 s4:auth: move make_server_info_netlogon_validation() function arround 
metze
 2009-01-21 13:36:11 +01:00
Stefan Metzmacher
47d532fa68 s4:smbd: convert to tevent_* api 
metze
 2009-01-03 19:58:57 +01:00
Stefan Metzmacher
183c379fe5 s4:lib/tevent: rename structs 
list=""
list="$list event_context:tevent_context"
list="$list fd_event:tevent_fd"
list="$list timed_event:tevent_timer"

for s in $list; do
	o=`echo $s | cut -d ':' -f1`
	n=`echo $s | cut -d ':' -f2`
	r=`git grep "struct $o" |cut -d ':' -f1 |sort -u`
	files=`echo "$r" | grep -v source3 | grep -v nsswitch | grep -v packaging4`
	for f in $files; do
		cat $f | sed -e "s/struct $o/struct $n/g" > $f.tmp
		mv $f.tmp $f
	done
done

metze
 2008-12-29 20:46:40 +01:00
Stefan Metzmacher
081f8883ba s4: fix LIBEVENTS dependencies and use more forward declarations 
We should only include events.h where we really need it
and prefer forward declarations of 'struct event_context'

metze
 2008-12-17 11:04:45 +01:00
Stefan Metzmacher
21aa4ea6b9 s4: smbd: implement stream_socket_named_pipe() 
For now implement just a very simple protocol
to negotiate the transport session info.

We may need to pass more info later,
e.g. client ip or name...

metze
 2008-11-06 21:39:13 +01:00