1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-23 17:34:34 +03:00
Commit Graph

978 Commits

Author SHA1 Message Date
Günther Deschner
586b2ee826 s3-epmap: use correct dcerpc client header in dcerpc_ep.c
Guenther

Autobuild-User: Günther Deschner <gd@samba.org>
Autobuild-Date: Wed Feb  2 19:50:02 CET 2011 on sn-devel-104
2011-02-02 19:50:02 +01:00
Andreas Schneider
31779662b7 s3-librpc: Added dcerpc_binding_vector_create function. 2011-02-02 12:44:20 +01:00
Andreas Schneider
20afe97177 s3-librpc: Added dcerpc register endpoint functions. 2011-02-02 12:44:20 +01:00
Günther Deschner
c9f4fad75c idl: add file_id idl.
Guenther

Autobuild-User: Günther Deschner <gd@samba.org>
Autobuild-Date: Tue Jan 25 12:27:00 CET 2011 on sn-devel-104
2011-01-25 12:27:00 +01:00
Günther Deschner
f0b3c72bcc s3-libndr: remove cmdline_lp_ctx.
Guenther
2011-01-25 11:42:46 +01:00
Günther Deschner
7eac3100ea libndr: move ndr_print_bool to ndr_basic.c
Guenther
2011-01-25 11:42:46 +01:00
Stefan Metzmacher
b7d6d3b840 s3:librpc: remove prototype of dcerpc_binding_handle_set_ref_alloc()
This function doesn't exist anymore.

metze
2011-01-21 07:21:10 +01:00
David Disseldorp
0b188e7784 s3-printing: Initiate pcap reload from parent smbd
Since commit 7022554, smbds share a printcap cache (printer_list.tdb),
therefore ordering of events between smbd processes is important when
updating printcap cache information. Consider the following two process
example:
1) smbd1 receives HUP or printcap cache time expiry
2) smbd1 checks whether pcap needs refresh, it does
3) smbd1 marks pcap as refreshed
4) smbd1 forks child1 to obtain cups printer info
5) smbd2 receives HUP or printcap cache time expiry
6) smbd2 checks whether pcap needs refresh, it does not (due to step 3)
7) smbd2 reloads printer shares prior to child1 completion (stale pcap)
8) child1 completion, pcap cache (printer_list.tdb) is updated by smbd1
9) smbd1 reloads printer shares based on new pcap information

In this case both smbd1 and smbd2 are reliant on the pcap update
performed on child1 completion.
The prior commit "reload shares after pcap cache fill" ensures that
smbd1 only reloads printer shares following pcap update, however smbd2
continues to present shares based on stale pcap data.

This commit addresses the above problem by driving pcap cache and
printer share updates from the parent smbd process.
1) smbd0 (parent) receives a HUP or printcap cache time expiry
2) smbd0 forks child0 to obtain cups printer info
3) child0 completion, pcap cache (printer_list.tdb) is updated by smbd0
4) smbd0 reloads printer shares
5) smbd0 notifies child smbds of pcap update via message_send_all()
6) child smbds read fresh pcap data and reload printer shares

This architecture has the additional advantage that only a single
process (the parent smbd) requests printer information from the printcap
backend.

Use time_mono in housekeeping functions As suggested by Björn Jacke.
2011-01-07 15:37:39 -08:00
Stefan Metzmacher
fbcbeabd65 s3:build: don't use cli_wbint.c any more
metze
2011-01-04 16:37:19 +01:00
Stefan Metzmacher
2d466b41cd s3:librpc: use netsec_outgoing_sig_size() instead of a hardcoded signature
size

metze
2011-01-03 16:44:29 +01:00
Volker Lendecke
ab1b857f58 s3: Fix bug 7842: WINBIND_LOOKUPRIDS does not return the proper domain name
Autobuild-User: Jeremy Allison <jra@samba.org>
Autobuild-Date: Mon Dec  6 21:18:07 CET 2010 on sn-devel-104
2010-12-06 21:18:07 +01:00
Jelmer Vernooij
8cf61377aa waf: Remove lib prefix from libraries manually. 2010-10-26 10:17:17 -07:00
Günther Deschner
0a1ce77e29 s3-libndr: handle NDR_ERR_IPV6ADDRESS case in ndr_errstr().
Guenther
2010-10-05 13:09:05 +00:00
Volker Lendecke
bad98e37e7 s3: Add "smbcontrol winbindd ip-dropped <local-ip>"
This is supposed to improve the winbind reconnect time after an ip address
has been moved away from a box. Any kind of HA scenario will benefit from
this, because winbindd does not have to wait for the TCP timeout to kick in
when a local IP address has been dropped and DC replies are not received
anymore.
2010-09-30 14:30:33 +02:00
Günther Deschner
0e1588aa98 s3-waf: add NDR_PERFCOUNT subsystem.
Guenther
2010-09-28 01:16:48 +02:00
Günther Deschner
db4bec3f4c s3-waf: convert LIBNET et al into subsystems.
Guenther
2010-09-24 21:09:45 -07:00
Günther Deschner
fa3eb7f5d4 s3-waf: let winbind depend on SRV_NDR_WBINT and RPCCLI_NDR_WBINT.
Guenther
2010-09-24 12:14:23 -07:00
Günther Deschner
2b76785311 s3-waf: add RPC_NDR_WBINT to librpc/wscript_build.
Guenther
2010-09-24 12:14:11 -07:00
Günther Deschner
c54881b2e1 s3-waf: add wscript_build to s3 librpc dir for NDR_ subsystems.
Guenther
2010-09-24 11:12:39 -07:00
Simo Sorce
926a3f4fcd s3-dcerpc: Use spnego own sign/seal functions
Signed-off-by: Günther Deschner <gd@samba.org>
2010-09-23 10:54:24 -07:00
Simo Sorce
3453bc7b11 s3-dcerpc: make auth context opaque
This way we always double check in advance that the context
is of the right type with talloc_get_type_abort instead of
potentially accessing random memory by addressing the wrong
structure in the union.

Signed-off-by: Günther Deschner <gd@samba.org>
2010-09-23 10:54:24 -07:00
Simo Sorce
d10e192b83 s3-dcerpc: finally remove the legaqcy spnego_type variable from pipe_auth_data
Signed-off-by: Günther Deschner <gd@samba.org>
2010-09-23 10:54:23 -07:00
Simo Sorce
4cdee9b0ed s3-dcerpc: add spnego server helpers
squashed: add michlistMIC signature checks

Signed-off-by: Günther Deschner <gd@samba.org>
2010-09-23 10:54:23 -07:00
Simo Sorce
77c73a5ec9 spnego: make spnego_context public
Signed-off-by: Günther Deschner <gd@samba.org>
2010-09-23 10:54:23 -07:00
Simo Sorce
2c9f420d75 s3-dcerpc: move client spnego stuff in /librpc/crypto
Signed-off-by: Günther Deschner <gd@samba.org>
2010-09-23 10:54:22 -07:00
Simo Sorce
59722ef2fb spnego: avoid explicit dependency on dcerpc specific structures
Signed-off-by: Günther Deschner <gd@samba.org>
2010-09-23 10:54:22 -07:00
Simo Sorce
4194383cfe gssapi: remove unused function argument
Signed-off-by: Günther Deschner <gd@samba.org>
2010-09-23 10:36:54 -07:00
Simo Sorce
412ebad02b gssapi: avoid explicit dependency on dcerpc specific structures
Signed-off-by: Günther Deschner <gd@samba.org>
2010-09-23 10:36:54 -07:00
Simo Sorce
0e5eb82a6f s3-dcerpc: move crypto stuff in /librpc/crypto
Signed-off-by: Günther Deschner <gd@samba.org>
2010-09-23 10:36:54 -07:00
Günther Deschner
47a7a5830c libnetapi: deal with NULL data in I_NetLogonControl2().
Guenther
2010-09-19 02:47:10 +02:00
Simo Sorce
f7f9916dc7 s3-rpc_server: Added helper functions to read data from a ncacn socket.
Signed-off-by: Andreas Schneider <asn@cynapses.org>
2010-09-15 12:53:42 +02:00
Günther Deschner
45d772e0e6 libnetapi: add DOMAIN_CONTROLLER_INFO_FLAGS.
Guenther
2010-09-15 08:32:58 +02:00
Julien Kerihuel
e5e5a1110f Add unique IP address binding for client connections (EPM and ncacn_ip_tcp levels)
This allows for binding strings like this:

  ncacn_ip_tcp:host[localaddress=192.168.2.1,seal]

which will force the connection to be locally bound to the specified
IP address

Signed-off-by: Andrew Tridgell <tridge@samba.org>
2010-09-07 09:55:14 +10:00
Stefan Metzmacher
54d2dce7b1 librpc/rpc: add dcerpc_binding_handle_set_timeout()
metze
2010-09-04 09:01:19 +02:00
Stefan Metzmacher
27918981de librpc/rpc: add set_timeout() to dcerpc_binding_handle_ops
metze
2010-09-04 09:01:11 +02:00
Simo Sorce
804aaad526 s3-kerberos: use krb5 compat macros in fill_keytab_from_password()
This one uses the compat macro in the right way, without actually
breaking the code.

Signed-off-by: Günther Deschner <gd@samba.org>
2010-09-02 22:48:09 +02:00
Simo Sorce
d9c63fbe92 Revert "s3-kerberos: use krb5 compat macros in fill_keytab_from_password()."
This reverts commit 9986d25ed1.

This patch was causing us to free unallocated memory.

Signed-off-by: Günther Deschner <gd@samba.org>
2010-09-02 22:48:09 +02:00
Günther Deschner
d8c9756d53 s3-kerberos: use more krb5 compat macros in get_mem_keytab_from_secrets().
Guenther
2010-08-31 23:17:39 +02:00
Günther Deschner
765bee9d7a s3-kerberos: use smb_get_enctype_from_kt_entry() in
get_mem_keytab_from_secrets().

Guenther
2010-08-31 23:17:39 +02:00
Günther Deschner
e26a936333 s3-kerberos: use get_kerberos_allowed_etypes in fill_keytab_from_password().
Guenther
2010-08-31 23:17:39 +02:00
Günther Deschner
9986d25ed1 s3-kerberos: use krb5 compat macros in fill_keytab_from_password().
Guenther
2010-08-31 23:17:39 +02:00
Günther Deschner
3d78279fd4 s3-kerberos: fix flush_keytab() compile with heimdal.
krb5_kt_cursor is not a pointer in heimdal but a struct.

Guenther
2010-08-31 23:17:39 +02:00
Günther Deschner
9697687e25 dcerpc-gssapi: include missing dcerpc_krb5.h header.
Guenther
2010-08-30 14:47:52 +02:00
Günther Deschner
d524f58518 dcerpc-gssapi: fix "shadows a global declaration" warning when gssapi is unavailable.
Guenther
2010-08-30 14:44:13 +02:00
Simo Sorce
36fdb211a6 dcerpc-gssapi: add function to retrieve client name
Signed-off-by: Günther Deschner <gd@samba.org>
2010-08-30 14:34:01 +02:00
Simo Sorce
d15d76af5f dcerpc-gssapi: add function to extract authtime
Signed-off-by: Günther Deschner <gd@samba.org>
2010-08-30 14:33:14 +02:00
Simo Sorce
6c80e04120 dcerpc-gssapi: add function to extract authorization data (PAC) form gssapi context
Signed-off-by: Günther Deschner <gd@samba.org>
2010-08-30 14:33:01 +02:00
Simo Sorce
fb1aef085e dcerpc-gssapi: add function to check flags
Signed-off-by: Günther Deschner <gd@samba.org>
2010-08-30 14:32:47 +02:00
Simo Sorce
e6ed1dc249 dcerpc-gssapi: add initial server side code
Signed-off-by: Günther Deschner <gd@samba.org>
2010-08-30 14:32:33 +02:00
Simo Sorce
b31f75d8f6 s3-dcerpc: add krb5 helpers
Signed-off-by: Günther Deschner <gd@samba.org>
2010-08-30 14:27:48 +02:00