1
0
mirror of https://github.com/samba-team/samba.git synced 2025-10-29 04:23:51 +03:00
Commit Graph

6820 Commits

Author SHA1 Message Date
Andrew Bartlett
690cad8083 r11370: Samba4 now passes it's own RPC-SAMLOGON test again.
This avoids the nasty user@DOMAIN test for now, as it has very odd
semantics with NTLMv2.

Allow only user accounts to do an interactive login.

Andrew Bartlett
2007-10-10 13:45:27 -05:00
Volker Lendecke
5718df44d9 r11369: Implement socket_connect_multi: Connect to multiple ipv4 tcp ports in
sequence, with a 2-millisecond timeout between firing the syn packets. Build
smbcli_sock_connect_send upon that.

Volker
2007-10-10 13:45:27 -05:00
Andrew Bartlett
abff53b633 r11367: Ensure to intialise the new logon_parameters (0 for session setups).
Andrew Bartlett
2007-10-10 13:45:26 -05:00
Andrew Bartlett
421e64c2b4 r11366: Pass around the flags which indicate if we should support plaintext
logins and NTLM machine account logins.

Andrew Bartlett
2007-10-10 13:45:26 -05:00
Andrew Tridgell
3333d71ab6 r11365: fixed a comment typo 2007-10-10 13:45:26 -05:00
Andrew Tridgell
b41b374b55 r11364: added a ldb_attr_dn() function for testing if an attribute name is
"dn" or "distinguishedName". This makes us a bit more consistent
2007-10-10 13:45:26 -05:00
Andrew Tridgell
62d5253a03 r11363: fixed a problem with provisioning when hklm already exists (the
problem is really caused by hklm not having objectclass attributes on
its records, but this is a workaround)
2007-10-10 13:45:26 -05:00
Tim Potter
fb313c19c6 r11362: Remove attempt to decode uint8 array as a security descriptor. Pidl thinks
that because it is an array, the import should also be an array, i.e of
security descriptors.
2007-10-10 13:45:25 -05:00
Andrew Bartlett
75b002746a r11361: Test user@DOMAIN userPrincipalNames
Andrew Bartlett
2007-10-10 13:45:24 -05:00
Andrew Bartlett
b2810bd702 r11360: Pass down a flag indicating that this is an 'old password', and to
expect funny buisness.

Andrew Bartlett
2007-10-10 13:45:24 -05:00
Andrew Bartlett
35cbdd5c9d r11359: More lovely cracknames tests...
Andrew Bartlett
2007-10-10 13:45:24 -05:00
Andrew Bartlett
82527491b2 r11358: Ensure domains are always upper-case as well. Helps NTLMv2.
Andrew Bartlett
2007-10-10 13:45:24 -05:00
Andrew Bartlett
8ed6156280 r11357: Add more standard 'servicePrincaipalName' entries to our host account
in provision.

Andrew Bartlett
2007-10-10 13:45:24 -05:00
Andrew Bartlett
476cd0c649 r11356: More cracknames work. This copes with a lookup for a
servicePrincipalName with a realm, which always returns 'domain only',
with the realm as the domain.

Andrew Bartlett
2007-10-10 13:45:23 -05:00
Andrew Bartlett
aa5b6cf7c4 r11355: Test for error returns when we don't specify the newly discovered
'workstation for account on NTLM' flag.

Andrew Bartlett
2007-10-10 13:45:23 -05:00
Andrew Tridgell
7f797e7097 r11354: - generate a ejs error on bad ldif to add/modify
- fixed a double free error in ldb.close()
2007-10-10 13:45:23 -05:00
Andrew Tridgell
896704f5c1 r11353: a bit of an improvement to the ldb_tdb error handling 2007-10-10 13:45:23 -05:00
Andrew Bartlett
a0ed41d379 r11352: Add newly discovered (via the radiator lists) flags for controlling
plaintext and machine account logins.

Update tests to confirm this behaviour.

Andrew Bartlett
2007-10-10 13:45:22 -05:00
Andrew Bartlett
326ffb2cc0 r11351: Another add-hoc test.
Andrew Bartlett
2007-10-10 13:45:22 -05:00
Andrew Bartlett
c56142c4ac r11350: Add some debugs to assist tracking down kerberos issues in future.
(Make it easy to see what was put into the keytab, so we can tell when
gssapi screams that it can't pull it out).

Andrew Bartlett
2007-10-10 13:45:22 -05:00
Andrew Bartlett
63eede2ad3 r11349: Actually add all the new spns...
Andrew Bartlett
2007-10-10 13:45:22 -05:00
Andrew Bartlett
3821821d4c r11348: Fixes for 'net join':
- Add more servicePrincipalNames
 - Always add them, not just for BDC accounts, and not just the first
   time the account is created (it might be an upgrade from an NT4
   account).

This should fix us for being a domain member in ADS again.
2007-10-10 13:45:21 -05:00
Jelmer Vernooij
407b5e615f r11343: Remove dependency on DEBUG() 2007-10-10 13:45:21 -05:00
Andrew Bartlett
eed8f4a031 r11342: Remove unused variables.
Andrew Bartlett
2007-10-10 13:45:21 -05:00
Andrew Bartlett
0a5bf9348a r11339: Fix the build by adding the serviceprincial name cracknames helper.
Andrew Bartlett
2007-10-10 13:45:21 -05:00
Andrew Bartlett
3b5ef4208d r11334: Print error status in debug.
Andrew Bartlett
2007-10-10 13:45:21 -05:00
Andrew Bartlett
f71149c88d r11333: Push service principal lookups into the cracknames code, rather than
in the hdb-ldb code.

Andrew Bartlett
2007-10-10 13:45:20 -05:00
Stefan Metzmacher
d3049936a5 r11331: add conflict cases owned,released vs. replica
metze
2007-10-10 13:45:20 -05:00
Stefan Metzmacher
ba82ffb261 r11330: - split up owned,active vs replica and owned,released vs. replica
- complete owned,released tests

metze
2007-10-10 13:45:20 -05:00
Stefan Metzmacher
657d45d3e0 r11329: the 0x1C must be registered as group name
metze
2007-10-10 13:45:20 -05:00
Andrew Bartlett
89623af30f r11325: Fix up some kerberos notes.
Andrew Bartlett
2007-10-10 13:45:20 -05:00
Andrew Bartlett
cf67af4216 r11322: Start moving towards using the cracknames code in the KDC.
Andrew Bartlett
2007-10-10 13:45:19 -05:00
Andrew Bartlett
81f020d3a4 r11321: Fix typos in warnings.
Andrew Bartlett
2007-10-10 13:45:19 -05:00
Tim Potter
5af1b6df0a r11318: Tweak import statement for decoding KeySecurityData as a NT security
descriptor in ethereal.
2007-10-10 13:45:19 -05:00
Andrew Bartlett
57f811115e r11317: An ugly hack to setup the global gssapi_krb5_context early, when we
have easy access to the event context.

This stops Samba dead-locking against itself when the winbindd client
tries to contact the KDC.

Andrew Bartlett
2007-10-10 13:45:19 -05:00
Andrew Bartlett
c46ef43224 r11316: Kill off a bit more of the old secrets system...
Andrew Bartlett
2007-10-10 13:45:19 -05:00
Andrew Bartlett
6a0beb29da r11315: Sorry gd, I just removed all of your code that I just merged...
(We now ask the kerberos libraries to handle getting and unwapping the PAC).

Andrew Bartlett
2007-10-10 13:45:18 -05:00
Andrew Bartlett
25d5ea6d72 r11314: Use a patch from lha to have the kerberos libs extract the PAC, rather
than doing ASN.1 parsing in Samba.

Also use the API function for getting a client from a ticket, rather
than just digging in the structure.

Andrew Bartlett
2007-10-10 13:45:18 -05:00
Andrew Bartlett
204185576c r11313: Typo 2007-10-10 13:45:18 -05:00
Andrew Bartlett
0800942dbb r11312: Make it clear we are looking at the 'domain ref', not the domain
itself in the auth_sam module.

Andrew Bartlett
2007-10-10 13:45:18 -05:00
Jelmer Vernooij
990419bac7 r11311: Move some more logic to env 2007-10-10 13:45:18 -05:00
Andrew Bartlett
ede638c00b r11310: Free the 'if_relevent' portion of the PAC when we build it.
Andrew Bartlett
2007-10-10 13:45:17 -05:00
Rafal Szczesniak
a50a5bef6e r11308: Correctly return status code in case of js error or libnet
function execution error.

rafal
2007-10-10 13:45:17 -05:00
Jelmer Vernooij
9c211507c1 r11307: Add support for generating pkg-config files 2007-10-10 13:45:17 -05:00
Jelmer Vernooij
28931219a1 r11306: Move more static Makefile data to main.mk
Clean up smb_build::makefile a bit
2007-10-10 13:45:16 -05:00
Jelmer Vernooij
20870508dd r11305: Use more recent guess and sub files 2007-10-10 13:45:16 -05:00
Jelmer Vernooij
90f49b6f70 r11304: Add support back in for loading shared modules (not used yet) 2007-10-10 13:45:16 -05:00
Jelmer Vernooij
b4745032a2 r11303: Support defining and installing public headers for libraries.
Support installing libraries.
Get rid of pkg-config file (will be autogenerated later on).
2007-10-10 13:45:16 -05:00
Jelmer Vernooij
98d1f9b1dc r11300: Treat libraries as a special kind of subsystem
(one that can also be built as a library and installed).
2007-10-10 13:45:15 -05:00
Jelmer Vernooij
65c71bf354 r11299: Try to fix build on Stratos VOS (doesn't support ld -r) 2007-10-10 13:45:15 -05:00