sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-31 17:18:04 +03:00
Code
68,875 Commits 60 Branches 1,144 Tags 452 MiB
75f41c304a
Commit Graph

253 Commits

Author SHA1 Message Date
Andrew Bartlett
f768b32e37 libcli/security Provide a common, top level libcli/security/security.h 
This will reduce the noise from merges of the rest of the
libcli/security code, without this commit changing what code
is actually used.

This includes (along with other security headers) dom_sid.h and
security_token.h

Andrew Bartlett

Autobuild-User: Andrew Bartlett <abartlet@samba.org>
Autobuild-Date: Tue Oct 12 05:54:10 UTC 2010 on sn-devel-104
 2010-10-12 05:54:10 +00:00
Volker Lendecke
6ee0d866c2 s3: Lift talloc_autofree_context() from make_auth_context_fixed() 2010-09-26 01:12:37 +02:00
Volker Lendecke
242e329610 s3: Lift talloc_autofree_context() from make_auth_context_subsystem() 2010-09-26 01:12:37 +02:00
Simo Sorce
3453bc7b11 s3-dcerpc: make auth context opaque 
This way we always double check in advance that the context
is of the right type with talloc_get_type_abort instead of
potentially accessing random memory by addressing the wrong
structure in the union.

Signed-off-by: Günther Deschner <gd@samba.org>
 2010-09-23 10:54:24 -07:00
Günther Deschner
102a70e809 s3-util: use shared dom_sid_dup. 
Guenther
 2010-09-20 14:05:07 -07:00
Andrew Tridgell
dc59de5627 s4-netlogon: added IDL for netr_DsrUpdateReadOnlyServerDnsRecords 
this is used by a RODC to do DNS updates, as TSIG updates are not
allowed by RODCs

Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
 2010-09-16 21:09:17 +10:00
Simo Sorce
8ec7aaef48 s3-rpc_server: Moved ncacn_np declarations in common header file. 
Signed-off-by: Andreas Schneider <asn@samba.org>
 2010-09-15 12:53:42 +02:00
Volker Lendecke
5a6be0b314 s3: Remove smbd_server_fd() from srv_netlog_nt 
This is not actually used. If it was to be activated, we'd have to pass in a
pipes_struct.
 2010-08-29 21:55:25 +02:00
Günther Deschner
e978a3d3f4 s3-lsa: separate out init_lsa headers. 
Guenther
 2010-08-25 22:50:39 +02:00
Volker Lendecke
4b5e252354 s3: Add "client_id" to pipes_struct 2010-08-18 11:18:23 +02:00
Volker Lendecke
96ae457023 s3: Remove get_client_fd() 2010-08-16 13:13:10 +02:00
Volker Lendecke
51c47a3302 s3: Lift the smbd_messaging_context from netr_set_machine_account_password 2010-08-08 16:03:24 +02:00
Volker Lendecke
ae8619f703 s3: Lift the smbd_messaging_context from get_md4pw 2010-08-08 16:03:24 +02:00
Volker Lendecke
2d3623529f s3: Lift the smbd_messaging_context from rpc_pipe_open_internal 2010-08-08 16:03:15 +02:00
Volker Lendecke
19a908350e s3: Remove some references to smbd_messaging_context() 2010-08-07 13:16:48 +02:00
Simo Sorce
2463a87177 s3-dcerpc: Use dcerpc_AuthType in pipe_auth_data 2010-07-28 12:19:32 -04:00
Andreas Schneider
3fd138fae3 s3-netlogon: Use struct pipes_struct. 2010-07-28 10:39:23 +02:00
Simo Sorce
e60ed80754 s3-auth: Simplify how we free the auth_context 
Turn the freeing function into a destructor and attach it to the
auth_context.
Make all callers TALLOC_FREE() the auth_context instead of calling
the free function.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
 2010-07-19 14:20:00 +10:00
Simo Sorce
77fb3649ce s3-dceprc: Store opnum in its own variable 
Signed-off-by: Günther Deschner <gd@samba.org>
 2010-07-13 14:44:10 +02:00
Günther Deschner
690ed0c5e2 s3-rpc: when using rpc_pipe_open_internal, make sure to go through NDR. 
Otherwise a lot of information that is usually generated in the ndr_push remains
in an uninitialized state.

Guenther
 2010-07-08 16:35:26 +02:00
Günther Deschner
fca69a9e2f s3-netlogon: Fix crash bug in _netr_NetrEnumerateTrustedDomains(). 
Guenther
 2010-05-31 21:27:29 +02:00
Günther Deschner
98641648d8 s3-netlogon: use LSA in _netr_NetrEnumerateTrustedDomains. 
Guenther
 2010-05-31 15:31:00 +02:00
Günther Deschner
4bb7e91cfd s3-netlogon: use SAMR in _netr_ServerAuthenticate3. 
Guenther
 2010-05-31 15:31:00 +02:00
Günther Deschner
a7805811c4 s3-netlogon: use SAMR in _netr_ServerPasswordSet{2}. 
Guenther
 2010-05-31 15:30:59 +02:00
Matthias Dieter Wallnöfer
11e2608ba9 s3/s4:netrEnumerateTrustedDomains - this call returns a "NTSTATUS" result 
See MS-NRPC 3.5.5.6.3.
 2010-05-31 12:08:59 +02:00
Simo Sorce
d9cffc01be s3:auth use info3 in auth_serversupplied_info 
Signed-off-by: Günther Deschner <gd@samba.org>
 2010-05-28 00:55:53 +02:00
Jelmer Vernooij
b8268cf7b0 s3: Remove use of iconv_convenience. 2010-05-18 11:45:31 +02:00
Günther Deschner
1d2dd47d31 s3-crypto: only include crypto headers when crypto is done. 
Guenther
 2010-05-18 00:44:27 +02:00
Günther Deschner
c6ebab846d s3: only include gen_ndr headers where needed. 
This shrinks include/includes.h.gch by the size of 7 MB and reduces build time
as follows:

ccache build w/o patch
real    4m21.529s
ccache build with patch
real    3m6.402s

pch build w/o patch
real    4m26.318s
pch build with patch
real    3m6.932s

Guenther
 2010-05-06 00:22:59 +02:00
Günther Deschner
63b111bd32 s3: add iconv_convenience handle to pull/push sz helpers. 
Guenther
 2010-04-09 18:33:45 +02:00
Günther Deschner
8194fc3757 s3-netlogon: Fix bug #7237: _netr_SamLogon segfaults for clients sending NULL domain. 
Thanks to Marc Muehlfeld <muehlfeld@medizinische-genetik.de>.

Guenther
 2010-03-12 00:37:30 +01:00
Simo Sorce
1d0938c629 schannel_tdb: make code compilable in both trees 2010-02-23 12:46:50 -05:00
Simo Sorce
3b12c38ac0 s3:schannel streamline interface 
Make calling schannel much easier by removing the need to explicitly open the
database. Let the abstraction do it instead.
 2010-02-23 12:46:50 -05:00
Simo Sorce
b4c9dc3724 s3:schannel more readable check logic 
Make the initial schannel check logic more understandable.
Make it easy to define different policies depending on ther caller's security
requirements (Integrity/Privacy/Both/None)
 2010-02-23 12:46:50 -05:00
Simo Sorce
0c8608bbab s3 Fix the build 
I didn't mean to puch the GetForestTrustInformation patch just yet,
now that it is in fix the s3 build ...
 2010-02-22 21:18:07 -05:00
Volker Lendecke
081573091b s3: Remove the typedef for "auth_serversupplied_info" 2010-01-10 20:56:16 +01:00
Volker Lendecke
9bb4766bba s3: Remove the typedef for "auth_usersupplied_info" 2010-01-10 20:56:16 +01:00
Günther Deschner
5d706a2fd4 s3-rpc: running minimal_includes.pl on rpc_client and rpc_server. 
Guenther
 2009-11-26 20:17:07 +01:00
Günther Deschner
3d679a3b5f s3-rpc: Avoid including every pipe's client and server stubs everywhere in samba. 
Guenther
 2009-11-26 20:03:17 +01:00
Günther Deschner
d7ce873391 s3-netlogon: enable RPC-NETLOGON-ADMIN test against s3. 
Guenther
 2009-11-09 17:36:53 +01:00
Günther Deschner
53d49bb728 s3-netlogon: implement _netr_GetDcName and _netr_GetAnyDcName. 
Guenther
 2009-11-06 15:01:39 +01:00
Günther Deschner
ccdd1462cc s3-netlogon: make sure we protect some function codes in _netr_LogonControl2Ex(). 
Guenther
 2009-11-04 00:55:49 +01:00
Günther Deschner
bb2e1ff631 s3-netlogon: let s3 pass against RPC-NETLOGON-S3 again. 
Guenther
 2009-11-04 00:55:45 +01:00
Günther Deschner
40f3f456bc s3-netlogon: implement _netr_NETLOGON_INFO_4 in netr_LogonControl2Ex() and friends as well. 
Guenther
 2009-11-04 00:55:18 +01:00
Günther Deschner
b3a2147497 s3-netlogon: implement remote trust account changing in netr_LogonControl2Ex() and friends. 
Guenther
 2009-11-04 00:55:09 +01:00
Günther Deschner
8267564e1c s3-netlogon: Fix _netr_ServerPasswordSet2 cleartext blob handling. 
Following Andrew's advice, let's straight md4 the plaintext blob and avoid
trying to get a paintext string out of the input the client sends.

Guenther
 2009-10-16 14:54:57 +02:00
Günther Deschner
ebe0e64ba9 s3: use enum netr_SchannelType all over the place. 
Guenther
 2009-10-13 10:21:46 +02:00
Günther Deschner
3d3134a7d6 s3-netlogon: pure cosmetic indent fixes in _netr_LogonControl2Ex(). 
Guenther
 2009-10-07 10:36:22 +02:00
Günther Deschner
6c0abbdd35 s3-netlogon: properly implement _netr_NetrEnumerateTrustedDomains(). 
Guenther
 2009-09-30 00:37:13 +02:00
Günther Deschner
44e44310d1 s3-netlogon: support validation level 6 in netr_SamLogon calls. 
Guenther
 2009-09-16 18:00:03 +02:00