1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-27 03:21:53 +03:00
Commit Graph

8158 Commits

Author SHA1 Message Date
Rafal Szczesniak
5fa874453f r13572: Comments to async pipe open functions and copyright note.
rafal
(This used to be commit 7dde77942b)
2007-10-10 13:51:57 -05:00
Rafal Szczesniak
2b2dfc0117 r13568: Comments to async rpc connect functions.
rafal
(This used to be commit 9ef2275f61)
2007-10-10 13:51:57 -05:00
Rafal Szczesniak
32a3aa932d r13561: Turn all dcerpc connect and socket functions to async version.
Now, each rpc interface (named pipe, tcp/ip, lrpc and unix
socket) works asynchronously.
Comments to follow.

rafal
(This used to be commit 789f9d43db)
2007-10-10 13:51:57 -05:00
Andrew Bartlett
aa4a3449c2 r13551: Add an accessor function for the user sid.
Andrew Bartlett
(This used to be commit 273cb8fd42)
2007-10-10 13:51:57 -05:00
Andrew Bartlett
576cdc713c r13516: We can't bind to both 0.0.0.0 and specific network interfaces at the
same time.

This was causing the kdc to shut itself down if 'bind interfaces only = no'.

Andrew Bartlett
(This used to be commit 02ff22a250)
2007-10-10 13:51:56 -05:00
Stefan Metzmacher
7449f4d803 r13508: some ASN.1 element in LDAP are optional,
make it possible to code the difference between a zero length and a NULL DATA_BLOB...

metze
(This used to be commit 54f0b19c55)
2007-10-10 13:51:56 -05:00
Stefan Metzmacher
37bd0b655f r13507: the 'data' element of LDAP controls is optional.
(prepare the next commit)

metze
(This used to be commit a1bbf7f298)
2007-10-10 13:51:56 -05:00
Stefan Metzmacher
f2e88ab7cf r13506: zero memory as some ASN.1 elements are optional, and we should initialize
them for the internal use...

found by 'make valgrindtest'

metze
(This used to be commit 1db9501c52)
2007-10-10 13:51:56 -05:00
Andrew Tridgell
048704a7e5 r13505: allow servers to bind to non-broadcast interfaces. Servers now
specifically ask for iface_n_bcast() and have to check if it returns
NULL, in which case it is a non-broadcast interface
(This used to be commit d004e250b6)
2007-10-10 13:51:56 -05:00
Andrew Tridgell
8c7a593bcd r13504: add back in a comment noting fred as the contributor of the address
calculation code. This was originally done in 1997, and has been
morphed a lot since then, but fred should still get credit
(This used to be commit 172e41596f)
2007-10-10 13:51:55 -05:00
Andrew Bartlett
26421fb2dc r13481: As far as I can tell, my changes in -r 12863 were dangerously untested.
We do need the gsskrb5_get_initiator_subkey() routine.  But we should
ensure that we do always get a valid key, to prevent any segfaults.

Without this code, we get a different session key compared with
Win2k3, and so kerberised smb signing fails.

Andrew Bartlett
(This used to be commit cfd0df16b7)
2007-10-10 13:51:55 -05:00
Andrew Bartlett
e9815c38dd r13480: Explain a little about how these credentials structures should be used.
Andrew Bartlett
(This used to be commit b90959f796)
2007-10-10 13:51:55 -05:00
Andrew Bartlett
358122c688 r13479: Return the joined domain SID and user SID as structures, not strings.
Andrew Bartlett
(This used to be commit e1de45bce4)
2007-10-10 13:51:55 -05:00
Andrew Bartlett
e7630ebe47 r13472: After Volker's advise, try every combination of parameters. This
isn't every parameter on NTLMSSP, but it is most of the important
ones.

This showed up that we had the '128bit && LM_KEY' case messed up.
This isn't supported, so we must look instead at the 56 bit flag.

Andrew Bartlett
(This used to be commit 990da31b5f)
2007-10-10 13:51:54 -05:00
Andrew Bartlett
e9e8096641 r13471: With more 'try all options' testing, I found this 'simple' but in the
NTLM2 signing code.

Andrew Bartlett
(This used to be commit 16e5c96875)
2007-10-10 13:51:54 -05:00
Andrew Bartlett
e218c8442d r13470: Thanks to a report from VL:
We were causing mayhem by weakening the keys at the wrong point in time.

I think this is the correct place to do it.  The session key for SMB
signing, and the 'smb session key' (used for encrypting password sets)
is never weakened.

The session key used for bulk data encryption/signing is weakened.

This also makes more sense, when we look at the NTLM2 code.

Andrew Bartlett
(This used to be commit 3fd32a1209)
2007-10-10 13:51:54 -05:00
Andrew Bartlett
ba04ff6736 r13467: Add new parametric options (for testing) controlling LM_KEY and 56-bit
encryption behaviour.

Andrew Bartlett
(This used to be commit 2b3b2f33a4)
2007-10-10 13:51:54 -05:00
Andrew Bartlett
93d6990dd4 r13466: Make it easier to understand what this function actually does.
Andrew Bartlett
(This used to be commit f075497926)
2007-10-10 13:51:53 -05:00
Andrew Bartlett
debf1c9a92 r13405: Allow a fallback if SPNEGO is somehow disabled in the client, to just NTLMSSP.
Andrew Bartlett
(This used to be commit 3e96975d91)
2007-10-10 13:51:53 -05:00
Andrew Bartlett
7546864a78 r13404: Comments, whitespace.
Andrew Bartlett
(This used to be commit 04e2fe8b6d)
2007-10-10 13:51:53 -05:00
Andrew Bartlett
941c1566e5 r13403: Try to better handle a case where SPNEGO isn't available (allow us to
emulate the behaviour of XP standalone if required).

Andrew Bartlett
(This used to be commit 7f821097fb)
2007-10-10 13:51:53 -05:00
Andrew Bartlett
5cecce1761 r13402: Make Samba4 pass a nastier RPC-SCHANNEL test.
The new RPC-SCHANNEL test shows that the full credentials state must
be kept in some shared memory, for some length of time.  In
particular, clients will reconnect with SCHANNEL (after loosing all
connections) and expect that the credentials chain will remain in the
same place.

To achive this, we do the server-side crypto in a transaction,
including the fetch/store of the shared state.

Andrew Bartlett
(This used to be commit 982a6aa871)
2007-10-10 13:51:53 -05:00
Andrew Tridgell
4c78d1bfa2 r13401: remove the rename of the snprintf functions that simo accidentially
included in his last commit
(This used to be commit 487b374b43)
2007-10-10 13:51:52 -05:00
James Peach
b56dab83a4 r13400: Only return NULL from talloc_asprintf if vsnprintf returns an
error (ie. zero is not an error).
(This used to be commit 1ab4674196)
2007-10-10 13:51:52 -05:00
James Peach
f9f55ad5fc r13397: Propagate the error return from vsnprintf to trap the case where
we aren't linked against a C99 vsnprintf.
(This used to be commit 23782f899a)
2007-10-10 13:51:52 -05:00
James Peach
56e097e994 r13388: Report a more helpful error with malformed file options of
the form //server/share (ie. remote path missing).
(This used to be commit 443677f58d)
2007-10-10 13:51:52 -05:00
James Peach
b7f7adb2e1 r13387: Make sure smbcli_parse_unc reports a failure for strings of
the form //server. Make sure failure cases are well-defined.
(This used to be commit e0020df66b)
2007-10-10 13:51:52 -05:00
Andrew Bartlett
d32b14c2bc r13381: Test the SamLogonEx SamLogon call in the schannel test. This is only
available under schannel, and performs a netlogon authentication.

Andrew Bartlett
(This used to be commit 561a690915)
2007-10-10 13:51:51 -05:00
Andrew Bartlett
e45ce50a61 r13380: Drop the socket, then try SAMR operations secured with netlogon on the new socket.
We should also test netlogon operations, but there are issues with
what state is expected to be stored (far more than we currently do).

Andrew Bartlett
(This used to be commit 39ddba0d0d)
2007-10-10 13:51:51 -05:00
Simo Sorce
b8a9bec662 r13374: new revision of the snprintf replace code
still missing a configure test to make us
substitute our snprintf to system one when
the system one does not have positional parameters support
(This used to be commit 398f989d65)
2007-10-10 13:51:51 -05:00
James Peach
716b0ee234 r13373: Implement the -p option for smbtorture.
(This used to be commit fc17a50b48)
2007-10-10 13:51:51 -05:00
Simo Sorce
f7def09a1e r13372: fixes ... still no joy
(This used to be commit 0e2cca9153)
2007-10-10 13:51:51 -05:00
Jeremy Allison
2b163e64f5 r13370: Added deltest21 - pull the rug out from a connection by socket
close after setting delete on close flag.
Jeremy.
(This used to be commit fbea18e78f)
2007-10-10 13:51:50 -05:00
Simo Sorce
b56282dec7 r13369: let's have a way to show the samba4 version through ejs
and use it in provisioning to fullfill rfc 3045 requirements
(This used to be commit 3fb9571a76)
2007-10-10 13:51:50 -05:00
James Peach
52f01e2081 r13362: Rename variables for better consistency.
(This used to be commit dc20bb0ddc)
2007-10-10 13:51:50 -05:00
Simo Sorce
338c410fec r13361: initial implementation of the vlv control
seem still buggy, can't make w2k3 to like it yet
(This used to be commit e1318383e9)
2007-10-10 13:51:50 -05:00
Simo Sorce
6addde849f r13360: Fix crash bug when 0 results are returned on the internal base search
(This used to be commit fbee725ae8)
2007-10-10 13:51:50 -05:00
Stefan Metzmacher
5b26ea841c r13359: make sure we don't look at s[-1]
metze
(This used to be commit 24c6e2f731)
2007-10-10 13:51:49 -05:00
Andrew Tridgell
00c0545665 r13358: removed some unused functions and make some local functions static
(This used to be commit a73b76a36a)
2007-10-10 13:51:49 -05:00
Simo Sorce
5972e01163 r13357: more docs
(This used to be commit 5af9086dea)
2007-10-10 13:51:49 -05:00
Simo Sorce
0c45a12b65 r13356: test utf8 usernames
(This used to be commit 7ddec83a60)
2007-10-10 13:51:48 -05:00
Simo Sorce
289a5994a9 r13355: check controls are correctly exported
(This used to be commit 07fa55db32)
2007-10-10 13:51:48 -05:00
Simo Sorce
3721bca79d r13354: Add tests to check that controls work properly
Fix asq module, add a second_stage_init to register with rootdse
Fix asq control ldap parsing routines (this was nasty to find out)
(This used to be commit 933a80397d)
2007-10-10 13:51:48 -05:00
Simo Sorce
096c2dc103 r13353: Fix a crash bug in rootdse when we do not pass in credentials
a plain ldbsearch would just crash

Fix kludge_acl, not passing on the second stage registration
phase to other modules

Simo
(This used to be commit bec99c5cb6)
2007-10-10 13:51:48 -05:00
Simo Sorce
ad5e8bbe9d r13352: Integrate Patch to support the ManageDSAIT control
from Pete Rowley <prowley@redhat.com>
(This used to be commit bf20a848fd)
2007-10-10 13:51:48 -05:00
Simo Sorce
76036d37b4 r13349: In the end I could not use ldb_caseless_cmp
in attrib_handler.c functions

remove it again

Simo
(This used to be commit 513ff49907)
2007-10-10 13:51:47 -05:00
Simo Sorce
18a0ece2cc r13348: Put a reminder for now.
Until we do not have an internal utf8 compliant
casefloding function we cannot pass this test
in the non-samba build
(This used to be commit 5d93c1eeba)
2007-10-10 13:51:47 -05:00
Simo Sorce
e1e693792c r13347: - Now we compare values with an optimized utf8
safe function if the user provides an utf8
compliant casefold function to ldb.

- Fix toupper_m and tolower_m to not crash if
the case tables are not found

- Let load_case_table() search into the correct
directory in the search tree for the case
tables so that we can test utf8

Simo
(This used to be commit e12f070958)
2007-10-10 13:51:47 -05:00
Stefan Metzmacher
1a53c1dc92 r13346: use private proto header files for the torture tests
metze
(This used to be commit 67837dbd2b)
2007-10-10 13:51:47 -05:00
Stefan Metzmacher
289e9baa1d r13345: let us replicate with NT4sp6a
I don't yet know what the extra data in the start_association call mean...

This also let w2k use WREPL_REPL_INFORM messages to us, but w2k3 doesn't
it do it yet...

metze
(This used to be commit 02d6dfa1da)
2007-10-10 13:51:47 -05:00