1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-12 09:18:10 +03:00
Commit Graph

5011 Commits

Author SHA1 Message Date
Andrew Bartlett
3f35cdb218 r7757: Add NTLMv2 support to the NT1 Session setup (ie, not SPNEGO/NTLMSSP)
Session Setup code.

Add a mem_ctx argument to a few of the NTLMv2 support functions, and
add smb.conf options to control client NTLMv2 behaviour.

Andrew Bartlett
2007-10-10 13:18:32 -05:00
Andrew Bartlett
edeb908aca r7756: Don't segfault by trying to search for the NULL DN, if the wrong
password was entered.  We would not use the results of the search in
any case.

Andrew Bartlett
2007-10-10 13:18:31 -05:00
Andrew Tridgell
1462da3b6d r7755: fixed an uninitialised event_ctx found by abartlet 2007-10-10 13:18:31 -05:00
Andrew Tridgell
56fe27623c r7754: fixed the local port of accepted sockets in socket_wrapper. This fixes
the problem with the ldap tests in 'make test'
2007-10-10 13:18:31 -05:00
Andrew Tridgell
51ea22db2d r7753: removed debugging code :-) 2007-10-10 13:18:31 -05:00
Andrew Tridgell
30da6a1cc4 r7751: only enable tls on the ldaps port in ldap server, and reject non-tls
connections on that port
2007-10-10 13:18:31 -05:00
Andrew Tridgell
135c3367ff r7750: handle STATUS_MORE_ENTRIES on send in tls 2007-10-10 13:18:31 -05:00
Andrew Tridgell
f22c3b84c8 r7749: some bug fixes from testing with socket:testnonblock
- fixed some infinite loops in asn1.c

- ensure asn1 callers know if an error is end of buffer or bad data

- handle npending 0 in ldap server
2007-10-10 13:18:30 -05:00
Rafal Szczesniak
345a71a08e r7748: Use state structure in connection with io to get returned address.
rafal
2007-10-10 13:18:30 -05:00
Andrew Tridgell
73cb4aad22 r7747: - simplified the ldap server buffer handling
- got rid of the special cases for sasl buffers

- added a tls_socket_pending() call to determine how much data is waiting on a tls connection

- removed the attempt at async handling of ldap calls. The buffers/sockets are all async, but the calls themselves
  are sync.
2007-10-10 13:18:30 -05:00
Andrew Tridgell
fed6f4cc6c r7746: - added TLS support to our ldap server
- this involved changing the buffer handling in the ldap server quite a
  lot, as it didn't handle partial packets at all

- removed completely bogus asn1_object_length() function. You can't
  do that with BER/DER
2007-10-10 13:18:30 -05:00
Andrew Tridgell
42d8a1a222 r7745: better handling of recv errors in tls library 2007-10-10 13:18:30 -05:00
Andrew Tridgell
023fc567ba r7744: converted the web server to use the lib/tls/ generic tls code 2007-10-10 13:18:30 -05:00
Andrew Tridgell
3d60b3a8ee r7743: be consistent in how stdin is supported for ldbadd and ldbmodify 2007-10-10 13:18:29 -05:00
Andrew Tridgell
950500f603 r7742: abstracted out the tls code from the web server, so that our other servers
can easily become tls enabled. This will be used to add support for ldaps
2007-10-10 13:18:29 -05:00
Andrew Tridgell
a440133140 r7741: fixed the verbose option in ldbedit 2007-10-10 13:18:29 -05:00
Andrew Tridgell
cf17f90a83 r7740: get rid of our duplicate base64 routines 2007-10-10 13:18:29 -05:00
Andrew Tridgell
fe2b77af23 r7739: fixed an off by one bug in the base64 decoder for ldb ldif 2007-10-10 13:18:28 -05:00
Rafal Szczesniak
ec29a1ffa7 r7738: It's actually an API function test.
rafal
2007-10-10 13:18:28 -05:00
Rafal Szczesniak
4655881fac r7737: Test for libnet_Lookup function.
rafal
2007-10-10 13:18:28 -05:00
Rafal Szczesniak
b0bae584a4 r7736: Propagate change in resolve_name function. Let's use default methods
in this case.

rafal
2007-10-10 13:18:28 -05:00
Rafal Szczesniak
121cf5ec3e r7735: Extend resolve_name function so that it's possible to pass resolve
methods explicitly or NULL for defaults saved in smb.conf.

rafal
2007-10-10 13:18:28 -05:00
Rafal Szczesniak
15e2a67fe0 r7734: A few missing pieces...
rafal
2007-10-10 13:18:28 -05:00
Rafal Szczesniak
12b468417d r7733: New io structure for name lookup function.
rafal
2007-10-10 13:18:27 -05:00
Rafal Szczesniak
b9deaa995d r7732: Implementation of very basic lookup function (to be used in more
specific routines like resolving a pdc).
Also, couple of formatting fixes.

rafal
2007-10-10 13:18:27 -05:00
Stefan Metzmacher
3a1ed83fd0 r7731: change debug level to not spam the build-farm smbd log
metze
2007-10-10 13:18:27 -05:00
Jelmer Vernooij
5122b9f608 r7729: Small fixes to the charset stuff. 2007-10-10 13:18:27 -05:00
Andrew Tridgell
57132344b4 r7728: handle 64 bit integers in INTEGER match 2007-10-10 13:18:27 -05:00
Andrew Tridgell
941509ee58 r7727: we need to mark some attributes as INTEGER, so that the standard searches
that w2k does work. For example, w2k asks for sAMAccountType=805306369 which
will only match if we know its an integer
2007-10-10 13:18:27 -05:00
Andrew Tridgell
8698a20fcc r7726: - removed some unused variables
- handle ldb_errstring() calls on failed connect
2007-10-10 13:18:27 -05:00
Andrew Tridgell
0f22306a9c r7725: fixed a bug with partial asn1 frames in the ldap client 2007-10-10 13:18:26 -05:00
Andrew Tridgell
82b1feeafe r7724: added encoding of LDB_OP_NOT search components 2007-10-10 13:18:26 -05:00
Andrew Tridgell
25d500b6e5 r7723: - fix a mismatched asn1 push/pop on bind
- add error checking to ldap_encode()

- fixed the asn1 codes for extended search

- use asn1 context macros
2007-10-10 13:18:26 -05:00
Andrew Tridgell
0603235304 r7722: when we get a zero read, the connection is dead 2007-10-10 13:18:26 -05:00
Andrew Tridgell
73a21737ce r7721: solve a problem with null arguments to testit() 2007-10-10 13:18:26 -05:00
Andrew Tridgell
09060994c1 r7720: - simplify the asn1 decode of ldap_search() a lot, taking advantage of
the fact that the ldap data structures now use ldb_message_element.

- fixed null termination of elements in ildap
2007-10-10 13:18:26 -05:00
Andrew Tridgell
f6c2c51907 r7719: make the ildap ldb backend use the defaultNamingContext if the basedn
is not specified, so:

  ldbsearch ldap://hostname '(objectclass=user)'

works without knowing the domain name
2007-10-10 13:18:26 -05:00
Andrew Tridgell
fc8feee560 r7717: fixed some typos 2007-10-10 13:18:25 -05:00
Andrew Tridgell
de5f265b6c r7716: a single wrapped ldap blob can contain multiple ldap messages 2007-10-10 13:18:25 -05:00
Andrew Tridgell
dc419fc899 r7715: ensure we don't print null strings in ldap_errstr() 2007-10-10 13:18:25 -05:00
Andrew Tridgell
6277c3923e r7714: enable samba credentials handling in ldb tools. So you can now do a
encrypted ldbedit against w2k3
2007-10-10 13:18:25 -05:00
Andrew Tridgell
abc9f4bd89 r7713: fixed error display in ildap_search() 2007-10-10 13:18:25 -05:00
Andrew Tridgell
aec0544962 r7712: ldb/common/util.c is gone 2007-10-10 13:18:25 -05:00
Andrew Tridgell
f852661463 r7711: update callers of ldb_connect() for new syntax 2007-10-10 13:18:24 -05:00
Andrew Tridgell
5e8db1c9b3 r7710: new command line handling code for ldb 2007-10-10 13:18:24 -05:00
Andrew Tridgell
f648fdf187 r7709: - convert ldb to use popt, so that it can interact with the samba
cmdline credentials code (which will be done soon)

- added a ldb_init() call, and changed ldb_connect() to take a ldb
  context. This allows for much better error handling in
  ldb_connect(), and also made the popt conversion easier

- fixed up all the existing backends with the new syntax

- improved error handling in *_connect()

- fixed a crash bug in the new case_fold_required() code

- ensured that ltdb_rename() and all ltdb_search() paths get the read lock

- added a ldb_oom() macro to make it easier to report out of memory
  situations in ldb code
2007-10-10 13:18:24 -05:00
Jelmer Vernooij
72efb69529 r7706: Move ParseExpr() to util. 2007-10-10 13:18:24 -05:00
Andrew Tridgell
0163d7fe99 r7705: prevent SIGPIPE. this is what causes BASE-NEGNOWAIT to sometimes fail 2007-10-10 13:18:24 -05:00
Andrew Tridgell
1011b1bf51 r7704: - fixed open_nbt_connection() to return NULL when the connection failed
- got rid of smbcli_shutdown() and use talloc_free() instead.
2007-10-10 13:18:23 -05:00
Jelmer Vernooij
7012e10bb6 r7702: Implement [charset()] attribute. 2007-10-10 13:18:23 -05:00