1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-04 05:18:06 +03:00
Commit Graph

3578 Commits

Author SHA1 Message Date
Stefan Metzmacher
64805e5dc5 r4637: log packets when the server code returns an DCERPC_FAULT
metze
2007-10-10 13:08:37 -05:00
Andrew Bartlett
f2bd7a5a69 r4636: Per tridge's wish (and probably correct behaviour), don't key off a
specific GENSEC mech type, but on the behaviour of the mech.

Andrew Bartlett
2007-10-10 13:08:37 -05:00
Andrew Bartlett
43e3516fc0 r4635: Fix NTLMSSP to return NT_STATUS_OK when it has constructed the auth
token in the client (the final token in the negotiation).

Consequential fixes in the SPNEGO code, which now uses the out.length
as the indicator of 'I need to send something to the other side'.

Merge the NTLM and SPNEGO DCE-RPC authentication routines in the client.

Fix the RPC-MULTIBIND test consequent to this merge.

Andrew Bartlett
2007-10-10 13:08:37 -05:00
Stefan Metzmacher
872c687184 r4634: disable sign and seal in ldap_server for now.
metze
2007-10-10 13:08:37 -05:00
Andrew Tridgell
4f30220a5a r4632: added spnego testing and no-auth testing in test_w2k3.sh 2007-10-10 13:08:36 -05:00
Andrew Tridgell
ba6caa99a4 r4631: don't consider an epmapper insert as a failure for the moment 2007-10-10 13:08:36 -05:00
Andrew Tridgell
59a5a0b218 r4630: for ncacn_np if we don't have an explicit request for one of the
advanced auth types we should do a plain bind. This fixes rpc
connections to ancient servers (like sun cascade)
2007-10-10 13:08:36 -05:00
Stefan Metzmacher
dd217f7916 r4629: we now have a global macro NT_STATUS_HAVE_NO_MEMORY()
so don't use a local one

metze
2007-10-10 13:08:36 -05:00
Stefan Metzmacher
590afa88f1 r4628: this function should be static
metze
2007-10-10 13:08:35 -05:00
Andrew Tridgell
9c0a3423f0 r4627: - simplified the dcerpc auth code using a common function
- added support for "spnego" in binding strings. This enables SPNEGO
  auth in the dcerpc client code, using as many allter_context calls as
  are needed

To try SPNEGO do this:

  smbtorture ncacn_ip_tcp:SERVER[spnego,seal] -Uadministrator%password RPC-SAMR
2007-10-10 13:08:35 -05:00
Andrew Tridgell
e59c5adf39 r4626: Jelmer, can you look at why this init is failing? It is preventing all tools from working 2007-10-10 13:08:35 -05:00
Andrew Tridgell
5f10a8f8d0 r4625: added a test that demonstrates that once a context_id is established,
it can't be changed (so you have to create a new context_id, not
change the interface bound to an existing one)
2007-10-10 13:08:35 -05:00
Jelmer Vernooij
1f8f4dd179 r4624: Several crash fixes for DCOM
More work on the example class implementation
2007-10-10 13:08:35 -05:00
Jelmer Vernooij
da3c7712d2 r4623: Convert values from UTF8 to UTF16 in gconf registry backend (caught
by Andrew Bartlett)
2007-10-10 13:08:35 -05:00
Volker Lendecke
e76d486b04 r4622: Clarify a comment a bit 2007-10-10 13:08:35 -05:00
Jelmer Vernooij
b1ff606670 r4621: Add torture tests for epm_Insert and epm_Delete 2007-10-10 13:08:35 -05:00
Stefan Metzmacher
3c0d16b823 r4620: - add interface functions to the auth subsystem so that callers doesn't need to
use function pointers anymore
- make the module init much easier
- a lot of cleanups

don't try to read the diff in auth/ better read the new files

it passes test_echo.sh and test_rpc.sh

abartlet: please fix spelling fixes

metze
2007-10-10 13:08:34 -05:00
Jelmer Vernooij
95e849bf94 r4619: Remove extern declaration of dcerpc_pipes, which is now static 2007-10-10 13:08:34 -05:00
Andrew Tridgell
dd1c54add8 r4618: - tidied up the alter_context client code a bit
- there is no alter_nak or alter_ack packet, its all done in an
  alter_response

- auto-allocated the contex_ids

- tried to fix up the dcom code to work again with
  alter_context. Jelmer, please take a look :)
2007-10-10 13:08:34 -05:00
Andrew Tridgell
0129ec947a r4617: basic alter_context requests now work in our client library. The test
just does a simple LSA/DSSETUP combo, which is what w2k does in the
ACL editor rpc calls that triggered this work
2007-10-10 13:08:34 -05:00
Andrew Tridgell
4004c69937 r4616: the first phase in the addition of proper support for
dcerpc_alter_context and multiple context_ids in the dcerpc client
library.

This stage does the following:

 - split "struct dcerpc_pipe" into two parts, the main part being "struct dcerpc_connection", which
   contains all the parts not dependent on the context, and "struct dcerpc_pipe" which has
   the context dependent part. This is similar to the layering in libcli_*() for SMB

 - disable the current dcerpc_alter code. I've used a #warning until i
   get the 2nd phase finished. I don't know how portable #warning is, but
   it won't be long before I add full alter context support anyway, so it won't last long

 - cleanup the allocation of dcerpc_pipe structures. The previous code
   was quite awkward.
2007-10-10 13:08:34 -05:00
Andrew Tridgell
0e61a422bd r4615: added acl checking on directory search in pvfs 2007-10-10 13:08:33 -05:00
Andrew Bartlett
ddb54d4ea1 r4614: Fix RPC-SAMLOGON, to use the workstation context (forgot to globally replace).
Andrew Bartlett
2007-10-10 13:08:33 -05:00
Tim Potter
20f9143221 r4613: Fix stuff I broke in the last commit with the /x regexp flag. 2007-10-10 13:08:33 -05:00
Andrew Tridgell
24ec8c4274 r4612: make the output for the w2k3 acl bug a bit clearer 2007-10-10 13:08:33 -05:00
Andrew Tridgell
76d905d12e r4611: - renamed add_socket() to smb_add_socket() as that is less confusing
- removed the spurious call to set_blocking() in the smb server setup.
2007-10-10 13:08:33 -05:00
Andrew Bartlett
a093c4f98e r4610: You can't join as a BDC and test against trusted domains. This test
only needs WS privilages anyway.

Andrew Bartlett
2007-10-10 13:08:33 -05:00
Stefan Metzmacher
11e006df16 r4609: add a usefull data_blob_dup_talloc() macro
metze
2007-10-10 13:08:33 -05:00
Stefan Metzmacher
372a8eeeef r4608: - use better error codes
- use new NT_STATUS_* macros for error checking return
- don't use talloc_p anymore

metze
2007-10-10 13:08:33 -05:00
Stefan Metzmacher
62c45635ff r4607: add some usefull macros to make the code more readable
metze
2007-10-10 13:08:32 -05:00
Tim Potter
c325859eb6 r4606: Start adding some more comments and some indentation for the eparser
regexps.  Hopefully this will make things a bit easier to understand
later on.
2007-10-10 13:08:32 -05:00
Volker Lendecke
fbd2a90bcd r4605: Fix a confusing comment :-) 2007-10-10 13:08:32 -05:00
Andrew Bartlett
96806136ea r4603: Test creating local and global secrets over LSA.
Andrew Bartlett
2007-10-10 13:08:32 -05:00
Tim Potter
25f6e11f31 r4600: Remove Data::Dumper import leftover from debugging.
Return more ethereal types and bases for hf fields.  Currently we
assume that enums always fit into a uint16 which will probably  have to
change soon.
2007-10-10 13:08:32 -05:00
Tim Potter
d39cb7ecb4 r4599: Remove some duplicated code in pidl.pl.
Start working on adding support for bitmaps and enums.

In progress tweaks for arrays of structures.
2007-10-10 13:08:32 -05:00
Volker Lendecke
edb918762e r4597: Recently I've come across a case where I suspect the GetAnyDCName request to
kill the domain controller I'm asking. In samba4 torturing the DC is just so
easy, commit the test to randomized ask for DCs for all trusted domains.

Volker
2007-10-10 13:08:31 -05:00
Andrew Tridgell
ebe6b00284 r4596: added a dynamic inheritance ACLs test. As far as I can tell w2k3 does not do
dynamic inheritance
2007-10-10 13:08:31 -05:00
Andrew Tridgell
5a1a17d3fc r4595: on create check access against parent not child ... 2007-10-10 13:08:31 -05:00
Andrew Bartlett
07295b3b07 r4594: Add more testes to the standard 'passes against win2k3' script.
Andrew Bartlett
2007-10-10 13:08:31 -05:00
Andrew Tridgell
2fe0e2528f r4593: don't use the _p function in the testsuite, as when built standalone it doesn't
use TALLOC_DEPRECATED
2007-10-10 13:08:30 -05:00
Andrew Tridgell
1177200dd9 r4592: fixed typo from talloc testsuite fixup for the new syntax 2007-10-10 13:08:30 -05:00
Andrew Tridgell
6e7754abd0 r4591: - converted the other _p talloc functions to not need _p
- added #if TALLOC_DEPRECATED around the _p functions

- fixes the code that broke from the above

while doing this I fixed quite a number of places that were
incorrectly using the non type-safe talloc functions to use the type
safe ones. Some were even doing multiplies for array allocation, which
is potentially unsafe.
2007-10-10 13:08:30 -05:00
Andrew Bartlett
7bb00a80ac r4590: Make RPC-SAMSYNC pass againt Win2k3.
Andrew Bartlett
2007-10-10 13:08:30 -05:00
Andrew Tridgell
f4337c988c r4589: forgot to commit the new NT_STATUS_RPC_PROTSEQ_NOT_SUPPORTED error code 2007-10-10 13:08:30 -05:00
Andrew Tridgell
b65a95c117 r4588: fixed the double bind in ncalrpc with dcerpc_secondary_connection() 2007-10-10 13:08:30 -05:00
Andrew Tridgell
244370d624 r4587: fixed dcerpc_secondary_connection() for ncacn_ip_tcp
this fixes RPC-SAMLOGON and some other tests on ncacn_ip_tcp
2007-10-10 13:08:29 -05:00
Andrew Tridgell
e252f80f2b r4586: RPC-LSA now passes against w2k3 2007-10-10 13:08:29 -05:00
Andrew Tridgell
429d79815c r4585: don't consider LookupSids3 failing with NT_STATUS_ACCESS_DENIED (as w2k3 does) or
NT_STATUS_RPC_PROTSEQ_NOT_SUPPORTED (as longhorn does) to be an error.

fixed the CreateTrustedDomain test to cope with the "torturedomain" being left over
from a previous aborted run
2007-10-10 13:08:29 -05:00
Andrew Tridgell
e729061bcd r4584: fix pvfs backend to pass the new enhanced RAW-ACLS test. Easy once I really the
strange behaviour I saw was a w2k3 bug :-)
2007-10-10 13:08:29 -05:00
Andrew Tridgell
f893ad9c45 r4583: print which bit failed in the owner bits check 2007-10-10 13:08:29 -05:00