Marc VanHeyningen
e06aa46b9f
Coverity fixes
...
(This used to be commit 3fc85d2259
)
2008-03-17 20:52:25 +01:00
Volker Lendecke
1ebfc66b2c
Use a separate tdb for mutexes
...
Another preparation to convert secrets.c to dbwrap: The dbwrap API does not
provide a sane tdb_lock_with_timeout abstraction. In the clustered case the DC
mutex is needed per-node anyway, so it is perfectly fine to use a local mutex
only.
(This used to be commit f94a63cd8f
)
2008-03-10 21:08:45 +01:00
Volker Lendecke
87805819f1
Fix Coverity ID 551
...
Correctly return if we can't create the temporary krb5.conf
Jeremy, please check!
(This used to be commit c2401811aa
)
2008-03-08 23:48:12 +01:00
Günther Deschner
7269a504fd
Add my copyright.
...
Guenther
(This used to be commit d078a87571
)
2008-02-27 19:38:48 +01:00
Volker Lendecke
3176392878
Fix some warnings
...
warning: ignoring return value of 'asprintf', declared with attribute warn_unused_result
(This used to be commit ad37b7b0ae
)
2008-02-25 16:09:26 +01:00
Günther Deschner
965774fa8f
Fix some more callers of PAC_DATA.
...
Guenther
(This used to be commit ea609d1b0e
)
2008-02-17 02:12:00 +01:00
Günther Deschner
3ea40eda94
Some more cleanup in authdata.c.
...
Guenther
(This used to be commit 5483f5fb44
)
2008-02-17 02:11:59 +01:00
Günther Deschner
86843631a2
Align our krb5 PAC decoding routines to the samba4 ones.
...
(while keeping all the trans krb5 lib support)
Guenther
(This used to be commit c06e507737
)
2008-02-17 02:11:59 +01:00
Volker Lendecke
b361956942
str_list_free is not needed anymore
...
(This used to be commit feddc1447d
)
2008-02-04 21:05:41 +01:00
Volker Lendecke
2762b9a975
Always pass a TALLOC_CTX to str_list_make and str_list_copy
...
(This used to be commit e2c9fc4cf5
)
2008-02-04 20:57:49 +01:00
Günther Deschner
6c764172e5
When running with debug level > 10, dump ads_struct in ads_connect().
...
Guenther
(This used to be commit 2dd7c64fa8
)
2008-01-31 11:05:25 +01:00
Günther Deschner
7cab0f5c0c
Fix the build. Avoid unrequired ndr_print_ads_struct dependencies.
...
Guenther
(This used to be commit c832882e49
)
2008-01-29 15:17:02 +01:00
Gerald W. Carter
c0c93dc2ba
Restrict the enctypes in the generated krb5.conf files to Win2003 types.
...
This fixes the failure observed on FC8 when joining a Windows 2008 RC1
domain. We currently do not handle user session keys correctly
when the KDC uses AES in the ticket replies.
(This used to be commit 8039a2518c
)
2008-01-28 11:32:09 -06:00
Volker Lendecke
587cf54c61
strtok -> strtok_r
...
(This used to be commit fd34ce4370
)
2008-01-23 15:08:04 +01:00
Günther Deschner
a92eb76688
Finally enable pidl generated SAMR & NETLOGON headers and clients.
...
Guenther
(This used to be commit f7100156a7
)
2008-01-17 16:54:46 +01:00
Jeremy Allison
70426bdd30
Tidy up code and debug for non-default krb5 IPv6 port.
...
Jeremy.
(This used to be commit 79b7972de4
)
2008-01-16 13:28:24 -08:00
Jeremy Allison
bd8abea49f
Fix IPv6 bug #5204 , which caused krb5 DNS lookups
...
for a name '[<ipv6 addr>'.
Jeremy.
(This used to be commit f2aa921505
)
2008-01-16 13:21:46 -08:00
Günther Deschner
fbcc7820c6
Fix memleak in ads_build_path().
...
Guenther
(This used to be commit b7a06b54e0
)
2008-01-16 16:06:15 +01:00
Günther Deschner
a32cca7f37
Print principal in debug statement in kerberos_kinit_password() as well.
...
Guenther
(This used to be commit 44d67e8462
)
2008-01-14 18:39:08 +01:00
Jeremy Allison
43717a16e2
Fix CID 476. Ensure a valid pac_data pointer is always passed to
...
ads_verify_ticket as it's always derefed.
Jeremy.
(This used to be commit 0599d57eff
)
2008-01-11 23:53:27 -08:00
Jeremy Allison
866af9a800
Coverity 512, uninitialized var.
...
Jeremy.
(This used to be commit 1b7cc80c61
)
2008-01-11 23:43:33 -08:00
Günther Deschner
f89fa0a6f8
Do not ignore provided machine_name in ads_get_upn().
...
Guenther
(This used to be commit ddc1307844
)
2008-01-08 14:07:01 +01:00
Michael Adam
4aba7475ef
Re-Indent function ldap_open_with_timeout().
...
This reverts commit #cafda34783f0961c9b463803c19cfcb69f836e3f .
I just learned (the hard way) that these indeted functions
are not indented by accident but that the intention of this
is to not include the prototype into proto.h.
Michael
(This used to be commit 2e5d01b214
)
2008-01-04 22:56:10 +01:00
Michael Adam
b54310cbaa
Add a debug message (when the LDAP server has really been connected).
...
Michael
(This used to be commit 7d9d2de390
)
2008-01-04 22:09:36 +01:00
Michael Adam
2cb68e3898
Untangle assignment and result check.
...
Michael
(This used to be commit 465a3b356c
)
2008-01-04 22:09:36 +01:00
Michael Adam
34e579fce5
Enhance DEBUG-verbosity of ldap_open_with_timeout().
...
Michael
(This used to be commit 9e70d1f24d
)
2008-01-04 22:09:36 +01:00
Michael Adam
4ad3464fb9
Unindent function header.
...
Michael
(This used to be commit cafda34783
)
2008-01-04 22:09:35 +01:00
Michael Adam
3f42428f9b
Fix a misleading DEBUG message.
...
At this stage, the (tcp) connection to the LDAP server has not
been established, this is what is about to be attempted. What
has been succesfully done, is a CLDAP netlogon query.
Michael
(This used to be commit 71c3c8ad4c
)
2008-01-04 22:09:35 +01:00
Günther Deschner
b076a7e802
Add ads_get_joinable_ous().
...
Guenther
(This used to be commit 5bbceac881
)
2008-01-03 18:15:59 +01:00
Volker Lendecke
240391be53
Make use of [un]marshall_sec_desc
...
(This used to be commit 54576733d6
)
2007-12-29 23:13:03 +01:00
Jeremy Allison
afc93255d1
Add SMB encryption. Still fixing client decrypt but
...
negotiation works.
Jeremy.
(This used to be commit d78045601a
)
2007-12-26 17:12:36 -08:00
Simo Sorce
4869ccfed6
While 'data' is usually 0 terminated, nothing in the spec requires that. The correct way is to copy only 'length' bytes.
...
Simo.
(This used to be commit 814c1b0e00
)
2007-12-17 15:26:08 -05:00
Volker Lendecke
d365a43785
make use of unmarshall_sec_desc
...
(This used to be commit ced0c42f05
)
2007-12-16 14:15:16 +01:00
Jeremy Allison
8e86b7bb65
Doh, fix typo in error exit.
...
Jeremy.
(This used to be commit 44918f39c0
)
2007-12-15 23:32:28 -08:00
Jeremy Allison
5dbc4a23bc
Added patch originally by Andreas Schneider <anschneider@suse.de>
...
to cause us to behave like Vista when looking for remote
machine principal. Modified by me.
Jeremy.
(This used to be commit d0e33840fb
)
2007-12-15 23:22:25 -08:00
Volker Lendecke
2e07c2ade8
s/sid_to_string/sid_to_fstring/
...
least surprise for callers
(This used to be commit eb523ba776
)
2007-12-15 22:47:30 +01:00
Volker Lendecke
14ef4cdec1
Replace sid_string_static with sid_to_string
...
This adds 28 fstrings on the stack, but I think an fstring on the stack is
still far better than a static one.
(This used to be commit c7c885078b
)
2007-12-15 22:09:37 +01:00
Volker Lendecke
54ae9dfcbc
Use sid_string_talloc where we have a tmp talloc ctx
...
(This used to be commit 0a911d38b8
)
2007-12-15 22:09:36 +01:00
Volker Lendecke
900288a2b8
Replace sid_string_static by sid_string_dbg in DEBUGs
...
(This used to be commit bb35e794ec
)
2007-12-15 22:09:36 +01:00
Michael Adam
d8ac0cecae
Remove an incredible amount of whitespace.
...
Sorry - could not resist. Michael
(This used to be commit 1000c98eae
)
2007-12-06 14:08:54 +01:00
Stefan Metzmacher
8fd3a7c43e
libads: fix typo
...
metze
(This used to be commit b55b19190d
)
2007-12-06 09:54:19 +01:00
Volker Lendecke
78c6ee0090
Remove some globals
...
(This used to be commit 31d0a846db
)
2007-12-05 14:39:07 +01:00
Jeremy Allison
6f46f75dfc
Make strhex_to_str clear on string limits. Remove pstring from web/*.c
...
Jeremy.
(This used to be commit f9c8d62389
)
2007-12-03 17:17:05 -08:00
Volker Lendecke
1011b32678
Remove some statics
...
(This used to be commit 1fab16ffb8
)
2007-11-27 14:18:47 +01:00
Volker Lendecke
d5b2325fcd
Remove a global
...
(This used to be commit 3088bc76f1
)
2007-11-26 17:48:40 +01:00
Jeremy Allison
de51d3dd5f
More pstring removal....
...
Jeremy.
(This used to be commit 809f5ab4c5
)
2007-11-20 18:55:36 -08:00
Jeremy Allison
acb829ecc3
Add MAX_DNS_NAME_LENGTH, remove more pstrings.
...
Jeremy.
(This used to be commit a1725f4ff7
)
2007-11-15 18:27:26 -08:00
Jeremy Allison
32dd016353
Fix the setup_kaddr() call to cope with IPv6.
...
This is the last obvious change I can see. At
this point we can start claiming IPv6 support
(Hurrah !:-).
Jeremy.
(This used to be commit bda8c0bf57
)
2007-10-29 15:03:36 -07:00
Jeremy Allison
e2d0526c97
Change our DNS code to cope with AAAA records. A6 records
...
look like a nightmare to use, so ignore them for now.
Jeremy.
(This used to be commit 814daded90
)
2007-10-29 13:34:00 -07:00
Jeremy Allison
f88b7a076b
This is a large patch (sorry). Migrate from struct in_addr
...
to struct sockaddr_storage in most places that matter (ie.
not the nmbd and NetBIOS lookups). This passes make test
on an IPv4 box, but I'll have to do more work/testing on
IPv6 enabled boxes. This should now give us a framework
for testing and finishing the IPv6 migration. It's at
the state where someone with a working IPv6 setup should
(theorecically) be able to type :
smbclient //ipv6-address/share
and have it work.
Jeremy.
(This used to be commit 98e154c312
)
2007-10-24 14:16:54 -07:00