Andrew Bartlett
690cad8083
r11370: Samba4 now passes it's own RPC-SAMLOGON test again.
...
This avoids the nasty user@DOMAIN test for now, as it has very odd
semantics with NTLMv2.
Allow only user accounts to do an interactive login.
Andrew Bartlett
2007-10-10 13:45:27 -05:00
Volker Lendecke
5718df44d9
r11369: Implement socket_connect_multi: Connect to multiple ipv4 tcp ports in
...
sequence, with a 2-millisecond timeout between firing the syn packets. Build
smbcli_sock_connect_send upon that.
Volker
2007-10-10 13:45:27 -05:00
Andrew Bartlett
abff53b633
r11367: Ensure to intialise the new logon_parameters (0 for session setups).
...
Andrew Bartlett
2007-10-10 13:45:26 -05:00
Andrew Bartlett
421e64c2b4
r11366: Pass around the flags which indicate if we should support plaintext
...
logins and NTLM machine account logins.
Andrew Bartlett
2007-10-10 13:45:26 -05:00
Andrew Tridgell
3333d71ab6
r11365: fixed a comment typo
2007-10-10 13:45:26 -05:00
Andrew Tridgell
b41b374b55
r11364: added a ldb_attr_dn() function for testing if an attribute name is
...
"dn" or "distinguishedName". This makes us a bit more consistent
2007-10-10 13:45:26 -05:00
Andrew Tridgell
62d5253a03
r11363: fixed a problem with provisioning when hklm already exists (the
...
problem is really caused by hklm not having objectclass attributes on
its records, but this is a workaround)
2007-10-10 13:45:26 -05:00
Tim Potter
fb313c19c6
r11362: Remove attempt to decode uint8 array as a security descriptor. Pidl thinks
...
that because it is an array, the import should also be an array, i.e of
security descriptors.
2007-10-10 13:45:25 -05:00
Andrew Bartlett
75b002746a
r11361: Test user@DOMAIN userPrincipalNames
...
Andrew Bartlett
2007-10-10 13:45:24 -05:00
Andrew Bartlett
b2810bd702
r11360: Pass down a flag indicating that this is an 'old password', and to
...
expect funny buisness.
Andrew Bartlett
2007-10-10 13:45:24 -05:00
Andrew Bartlett
35cbdd5c9d
r11359: More lovely cracknames tests...
...
Andrew Bartlett
2007-10-10 13:45:24 -05:00
Andrew Bartlett
82527491b2
r11358: Ensure domains are always upper-case as well. Helps NTLMv2.
...
Andrew Bartlett
2007-10-10 13:45:24 -05:00
Andrew Bartlett
8ed6156280
r11357: Add more standard 'servicePrincaipalName' entries to our host account
...
in provision.
Andrew Bartlett
2007-10-10 13:45:24 -05:00
Andrew Bartlett
476cd0c649
r11356: More cracknames work. This copes with a lookup for a
...
servicePrincipalName with a realm, which always returns 'domain only',
with the realm as the domain.
Andrew Bartlett
2007-10-10 13:45:23 -05:00
Andrew Bartlett
aa5b6cf7c4
r11355: Test for error returns when we don't specify the newly discovered
...
'workstation for account on NTLM' flag.
Andrew Bartlett
2007-10-10 13:45:23 -05:00
Andrew Tridgell
7f797e7097
r11354: - generate a ejs error on bad ldif to add/modify
...
- fixed a double free error in ldb.close()
2007-10-10 13:45:23 -05:00
Andrew Tridgell
896704f5c1
r11353: a bit of an improvement to the ldb_tdb error handling
2007-10-10 13:45:23 -05:00
Andrew Bartlett
a0ed41d379
r11352: Add newly discovered (via the radiator lists) flags for controlling
...
plaintext and machine account logins.
Update tests to confirm this behaviour.
Andrew Bartlett
2007-10-10 13:45:22 -05:00
Andrew Bartlett
326ffb2cc0
r11351: Another add-hoc test.
...
Andrew Bartlett
2007-10-10 13:45:22 -05:00
Andrew Bartlett
c56142c4ac
r11350: Add some debugs to assist tracking down kerberos issues in future.
...
(Make it easy to see what was put into the keytab, so we can tell when
gssapi screams that it can't pull it out).
Andrew Bartlett
2007-10-10 13:45:22 -05:00
Andrew Bartlett
63eede2ad3
r11349: Actually add all the new spns...
...
Andrew Bartlett
2007-10-10 13:45:22 -05:00
Andrew Bartlett
3821821d4c
r11348: Fixes for 'net join':
...
- Add more servicePrincipalNames
- Always add them, not just for BDC accounts, and not just the first
time the account is created (it might be an upgrade from an NT4
account).
This should fix us for being a domain member in ADS again.
2007-10-10 13:45:21 -05:00
Jelmer Vernooij
407b5e615f
r11343: Remove dependency on DEBUG()
2007-10-10 13:45:21 -05:00
Andrew Bartlett
eed8f4a031
r11342: Remove unused variables.
...
Andrew Bartlett
2007-10-10 13:45:21 -05:00
Andrew Bartlett
0a5bf9348a
r11339: Fix the build by adding the serviceprincial name cracknames helper.
...
Andrew Bartlett
2007-10-10 13:45:21 -05:00
Andrew Bartlett
3b5ef4208d
r11334: Print error status in debug.
...
Andrew Bartlett
2007-10-10 13:45:21 -05:00
Andrew Bartlett
f71149c88d
r11333: Push service principal lookups into the cracknames code, rather than
...
in the hdb-ldb code.
Andrew Bartlett
2007-10-10 13:45:20 -05:00
Stefan Metzmacher
d3049936a5
r11331: add conflict cases owned,released vs. replica
...
metze
2007-10-10 13:45:20 -05:00
Stefan Metzmacher
ba82ffb261
r11330: - split up owned,active vs replica and owned,released vs. replica
...
- complete owned,released tests
metze
2007-10-10 13:45:20 -05:00
Stefan Metzmacher
657d45d3e0
r11329: the 0x1C must be registered as group name
...
metze
2007-10-10 13:45:20 -05:00
Andrew Bartlett
89623af30f
r11325: Fix up some kerberos notes.
...
Andrew Bartlett
2007-10-10 13:45:20 -05:00
Andrew Bartlett
cf67af4216
r11322: Start moving towards using the cracknames code in the KDC.
...
Andrew Bartlett
2007-10-10 13:45:19 -05:00
Andrew Bartlett
81f020d3a4
r11321: Fix typos in warnings.
...
Andrew Bartlett
2007-10-10 13:45:19 -05:00
Tim Potter
5af1b6df0a
r11318: Tweak import statement for decoding KeySecurityData as a NT security
...
descriptor in ethereal.
2007-10-10 13:45:19 -05:00
Andrew Bartlett
57f811115e
r11317: An ugly hack to setup the global gssapi_krb5_context early, when we
...
have easy access to the event context.
This stops Samba dead-locking against itself when the winbindd client
tries to contact the KDC.
Andrew Bartlett
2007-10-10 13:45:19 -05:00
Andrew Bartlett
c46ef43224
r11316: Kill off a bit more of the old secrets system...
...
Andrew Bartlett
2007-10-10 13:45:19 -05:00
Andrew Bartlett
6a0beb29da
r11315: Sorry gd, I just removed all of your code that I just merged...
...
(We now ask the kerberos libraries to handle getting and unwapping the PAC).
Andrew Bartlett
2007-10-10 13:45:18 -05:00
Andrew Bartlett
25d5ea6d72
r11314: Use a patch from lha to have the kerberos libs extract the PAC, rather
...
than doing ASN.1 parsing in Samba.
Also use the API function for getting a client from a ticket, rather
than just digging in the structure.
Andrew Bartlett
2007-10-10 13:45:18 -05:00
Andrew Bartlett
204185576c
r11313: Typo
2007-10-10 13:45:18 -05:00
Andrew Bartlett
0800942dbb
r11312: Make it clear we are looking at the 'domain ref', not the domain
...
itself in the auth_sam module.
Andrew Bartlett
2007-10-10 13:45:18 -05:00
Jelmer Vernooij
990419bac7
r11311: Move some more logic to env
2007-10-10 13:45:18 -05:00
Andrew Bartlett
ede638c00b
r11310: Free the 'if_relevent' portion of the PAC when we build it.
...
Andrew Bartlett
2007-10-10 13:45:17 -05:00
Rafal Szczesniak
a50a5bef6e
r11308: Correctly return status code in case of js error or libnet
...
function execution error.
rafal
2007-10-10 13:45:17 -05:00
Jelmer Vernooij
9c211507c1
r11307: Add support for generating pkg-config files
2007-10-10 13:45:17 -05:00
Jelmer Vernooij
28931219a1
r11306: Move more static Makefile data to main.mk
...
Clean up smb_build::makefile a bit
2007-10-10 13:45:16 -05:00
Jelmer Vernooij
20870508dd
r11305: Use more recent guess and sub files
2007-10-10 13:45:16 -05:00
Jelmer Vernooij
90f49b6f70
r11304: Add support back in for loading shared modules (not used yet)
2007-10-10 13:45:16 -05:00
Jelmer Vernooij
b4745032a2
r11303: Support defining and installing public headers for libraries.
...
Support installing libraries.
Get rid of pkg-config file (will be autogenerated later on).
2007-10-10 13:45:16 -05:00
Jelmer Vernooij
98d1f9b1dc
r11300: Treat libraries as a special kind of subsystem
...
(one that can also be built as a library and installed).
2007-10-10 13:45:15 -05:00
Jelmer Vernooij
65c71bf354
r11299: Try to fix build on Stratos VOS (doesn't support ld -r)
2007-10-10 13:45:15 -05:00