Stefan Metzmacher
706333856b
s4:ntlmssp: split gensec_ntlmssp_unseal_packet() and ntlmssp_unseal_packet()
...
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:51 +01:00
Stefan Metzmacher
d4c2f252da
s4:ntlmssp: split gensec_ntlmssp_seal_packet() and ntlmssp_seal_packet()
...
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:51 +01:00
Stefan Metzmacher
1564b2a94b
s4:ntlmssp: split gensec_ntlmssp_check_packet() and ntlmssp_check_packet()
...
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:51 +01:00
Stefan Metzmacher
23507c022f
s4:ntlmssp: split gensec_ntlmssp_sign_packet() and ntlmssp_sign_packet()
...
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:51 +01:00
Stefan Metzmacher
b47a849df2
s4:ntlmssp: make user a 'const char *' in (gensec_)ntlmssp_state
...
metze
Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:51 +01:00
Stefan Metzmacher
36669bfcf1
s4:ntlmssp: remove server_name from (gensec_)ntlmssp_state and fill the server.* fields also for the client
...
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:51 +01:00
Stefan Metzmacher
282a2d8591
s4:ntlmssp: calculate server names at startup and store them in (gensec_)ntlmssp_state->server.*
...
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:50 +01:00
Stefan Metzmacher
133a3e4ce8
s4:ntlmssp: replace server_role by a server.is_standalone in (gensec_)ntlmssp_state
...
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:50 +01:00
Stefan Metzmacher
c33e72b8c5
s4:ntlmssp: remove more whitespaces...
...
metze
Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:50 +01:00
Stefan Metzmacher
4ab94f5836
s4:ntlmssp: add NTLMSSP_FEATURE_* flags from s3
...
metze
Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:50 +01:00
Stefan Metzmacher
ee240799b6
s4:ntlmssp: keep struct gensec_ntlmssp_context in gensec_security->private_data
...
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:50 +01:00
Stefan Metzmacher
a0522a5b26
s4:ntlmssp: remove gensec_security from (gensec_)ntlmssp_state
...
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:50 +01:00
Stefan Metzmacher
32d822af81
s4:ntlmssp: remove backend specifix stuff from (gensec_)ntlmssp_state
...
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:50 +01:00
Stefan Metzmacher
83cc137d5e
s4:ntlmssp: create a gensec_ntlmssp_context between gensec_security and ntlmssp_state
...
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:49 +01:00
Stefan Metzmacher
8df01705bf
s4:ntlmssp: add definition of gensec_ntlmssp_context
...
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:49 +01:00
Stefan Metzmacher
bd550df322
s4:ntlmssp: add a callback_private pointer to gensec_ntlmssp_state
...
We'll remove any gensec specific stuff from gensec_ntlmssp_state
and rename it to ntlmssp_state again.
Inspired by the NTLMSSP merge work by Andrew Bartlett.
metze
Signed-off-by: Günther Deschner <gd@samba.org>
2010-03-24 17:34:48 +01:00
Karolin Seeger
a6bfc1a2d0
s3-testparm: Throw warning when 'workgroup' and 'netbios name' are identical.
...
Address bug #7285 (NetBIOS Namespace Clash Handling).
Karolin
2010-03-24 15:09:23 +01:00
Kamen Mazdrashki
ef6976dad3
idl: drsuapi.idl - fix few more comments
2010-03-24 17:34:45 +02:00
Kamen Mazdrashki
9ad8f808f7
idl: Regenerate DRSUAPI idl files
2010-03-24 17:34:45 +02:00
Kamen Mazdrashki
aa572a4334
s4/drs: Pretty print for drsuapi_SecBufferType
...
It is a type and mask combined in one DRS field so
we have to make a custom ndr_print implementation for this type
2010-03-24 17:34:44 +02:00
Kamen Mazdrashki
842d75613b
s4/idl: DsAddEntry V3 request description
2010-03-24 17:34:43 +02:00
Kamen Mazdrashki
db02ca65a0
s4/drs: Implement DsAddEntry V3 error handling
2010-03-24 17:34:42 +02:00
Kamen Mazdrashki
6b3ff0de46
s4/idl: Remove drsuapi_DsAddEntryExtraErrorBuffer - it is not used anymore
2010-03-24 17:34:42 +02:00
Kamen Mazdrashki
3efad5a6d8
s4/idl: Complete drsuapi_DsAddEntryErrorInfo description
...
Members for Security, Service, Update and System errors renamed
to be more descriptive.
All those error types share same description.
2010-03-24 17:34:41 +02:00
Kamen Mazdrashki
0663799275
s4/idl: Add DsAddEntry Referral error definition
2010-03-24 17:34:40 +02:00
Kamen Mazdrashki
61e80fe3eb
s4/idl: Add DsAddEntry Name resolution error definition
2010-03-24 17:34:39 +02:00
Kamen Mazdrashki
04f4ea6ae2
s4/drs: Refactor error handling for DsAddEntry V3 replies
...
Dumping for specific error classes are to be implemented properly
in the near future.
2010-03-24 17:34:39 +02:00
Kamen Mazdrashki
fbaf3b3799
s4/drs: pretty print for drsuapi_DsAddEntry_AttrErrListItem_V1
2010-03-24 17:34:38 +02:00
Kamen Mazdrashki
98cbcf809f
s4/idl: redefine drsuapi_DsAddEntryErrorInfo1
...
This actually describes Attribute error during DsAddEntry execution.
Structure is renamed to drsuapi_DsAddEntryErrorInfo_Attr.
And structure to define Attribute error data are all
prefixed with drsuapi_DsAddEntry_AttrErr
2010-03-24 17:34:37 +02:00
Kamen Mazdrashki
00fce797e8
s4/drs: drsuapi_DsAddEntry_ErrData propagate structure def in source code
2010-03-24 17:34:37 +02:00
Kamen Mazdrashki
7b4341637c
s4/idl: drsuapi_DsAddEntryError refactored
...
Structure description and name was changed to be aligned with
WSPP definition.
Ref: [MS-DRSR] 4.1.1.1.23
2010-03-24 17:34:36 +02:00
Kamen Mazdrashki
427a1f3c62
s4/drs: DsAddEntry - extending error handling for V2 replies
...
After having more complete definition for DsAddEntryReply V2
structure, we can now handle error state in more robust way,
not just counting on number of objects returned.
2010-03-24 17:34:35 +02:00
Kamen Mazdrashki
fbc1528649
s4/idl: DsAddEntry - refactor DsAddEntryCtr2 structure
...
Reply structure definition was aligned with WSPP documentation
Ref: [MS-DRSR], section 4.1.1.1.7
2010-03-24 17:34:34 +02:00
Kamen Mazdrashki
58ddf31ad1
s4/drs: drsuapi_DsAddEntryErrorInfoX changes propagated to source code
2010-03-24 17:34:34 +02:00
Kamen Mazdrashki
4cdf4627a1
s4/idl: Update drsuapi_DsAddEntryErrorInfoX definition
...
drsuapi_DsAddEntryErrorInfoX is an extended error
description used by most of the error infos returned
by DsAddEntry RPC method.
2010-03-24 17:34:33 +02:00
Kamen Mazdrashki
818719f7ba
s4/idl: DIRERR error codes definition
...
DIRERR codes specify class of error returned from
DsAddEntry method call.
Ref: [MS-DRSR], section 4.1.1.1.25
2010-03-24 17:34:32 +02:00
Kamen Mazdrashki
05db9365b6
s4/drs: DsAddEntry - Propagating unsigned switches to source code
2010-03-24 17:34:31 +02:00
Kamen Mazdrashki
a4ed8dc1fd
s4/idl: DsAddEntry - switch types should be unsigned
2010-03-24 17:34:31 +02:00
Günther Deschner
fcad13500b
s4-smbtorture: add missing checks for WERROR results in RPC-SAMBA3 tests.
...
Guenther
2010-03-24 13:34:01 +01:00
Günther Deschner
8cd63a854e
s4-smbtorture: fix some invalid parameters in RPC-SAMSYNC test.
...
Guenther
2010-03-24 13:18:33 +01:00
Günther Deschner
9fd24eb9c5
s4-smbtorture: cleanup some of the RPC-SAMBA3 tests.
...
This avoids printf, uses simplication functions where appropriate, etc.
Guenther
2010-03-24 12:48:29 +01:00
Günther Deschner
5e87e8576c
s4-smbtorture: add rap_get_servername to RPC-SAMBA3 family of tests.
...
Guenther
2010-03-24 12:48:29 +01:00
Simo Sorce
7d89c7c17b
idl: fix comment and convert whitespaces to tabs
2010-03-24 07:46:00 -04:00
Andrew Bartlett
5592a9ba5a
s4:selftest Test --sign and --encrypt options to ldbsearch
2010-03-24 19:28:38 +11:00
Andrew Bartlett
bb7854afea
s4:cmdline Add --sign and --encrypt options to our common command line
...
This allows ldbsearch to accept --sign and --encrypt. I'll soon work
to integrate with the --signing= option in smbclient.
Andrew Bartlett
2010-03-24 19:28:38 +11:00
Andrew Bartlett
a2286bad67
s4:ntlmssp Ensure that we always negotiate signing if we negotiate sealing.
...
Without this, a sealed LDAP connection to windows does not work.
Andrew Bartlett
2010-03-24 19:28:37 +11:00
Volker Lendecke
fbdcaa929c
s3: Optimize gencache for smbd exit
...
If thousands of smbds try to gencache_stabilize at the same time because the
network died, all of them might be sitting in transaction_start. Don't do the
stabilize transaction if nothing has changed in gencache_notrans.tdb.
Volker
2010-03-24 08:57:29 +01:00
Andrew Tridgell
a599319d0a
libreplace: fixed declaration of dprintf() on FreeBSD
2010-03-24 07:11:38 +01:00
Andrew Tridgell
83aaf4829e
s4-provision: FreeBSD uses 'staff' for users
2010-03-24 07:11:38 +01:00
Andrew Tridgell
de2b841935
s4-provision: solaris uses the group "other"
2010-03-24 07:11:38 +01:00