1
0
mirror of https://github.com/samba-team/samba.git synced 2025-11-25 00:23:52 +03:00
Commit Graph

6715 Commits

Author SHA1 Message Date
Andrew Bartlett
801cd6c6ff r11212: Enable sealing of data with raw krb5, consolidate some code into the
main gensec_krb5_start and always ask for sequence numbers.

Andrew Bartlett
2007-10-10 13:45:03 -05:00
Tim Potter
b70dd7a757 r11211: Append an error message to COL_INFO if the RPC call returned an error. 2007-10-10 13:45:03 -05:00
Tim Potter
3416a6d78f r11210: Log registry open function name when starting hive tests. 2007-10-10 13:45:02 -05:00
Andrew Bartlett
ee9a93688d r11209: We can't read the priorSecret unless we ask for it.
Andrew Bartlett
2007-10-10 13:45:02 -05:00
Andrew Bartlett
7e01ff11fd r11208: Add DNS entries for finding the kpasswd server to the default zone.
Andrew Bartlett
2007-10-10 13:45:02 -05:00
Andrew Bartlett
90cf4f8e1a r11207: Correct principal search define 2007-10-10 13:45:02 -05:00
Andrew Bartlett
3b6c9c7cbc r11206: It appears to me that any account may operate as a server.
Andrew Bartlett
2007-10-10 13:45:02 -05:00
Andrew Bartlett
3810282a24 r11205: Another test for cracknames.
Andrew Bartlett
2007-10-10 13:45:01 -05:00
Andrew Bartlett
3dddf497cc r11204: Allow us to read credentials from secrets.ldb without a
secureChannelType (non machine join records).

Andrew Bartlett
2007-10-10 13:45:01 -05:00
Andrew Bartlett
df6a40c2d2 r11203: Use different variable names to make it easier to tell which assert fired.
Andrew Bartlett
2007-10-10 13:45:01 -05:00
Andrew Bartlett
b0f11d8521 r11202: Add more structs to structs.h 2007-10-10 13:45:01 -05:00
Andrew Bartlett
b48c6df60c r11201: New filters for searching in secrets.ldb
Andrew Bartlett
2007-10-10 13:45:01 -05:00
Andrew Bartlett
205f77c579 r11200: Reposition the creation of the kerberos keytab for GSSAPI and Krb5
authentication.  This pulls the creating of the keytab back to the
credentials code, and removes the special case of 'use keberos keytab
= yes' for now.

This allows (and requires) the callers to specify the credentials for
the server credentails to GENSEC.  This allows kpasswdd (soon to be
added) to use a different set of kerberos credentials.

The 'use kerberos keytab' code will be moved into the credentials
layer, as the layers below now expect a keytab.

We also now allow for the old secret to be stored into the
credentials, allowing service password changes.

Andrew Bartlett
2007-10-10 13:45:00 -05:00
Andrew Bartlett
a665b56085 r11199: Push an objectSid into the schannel state database, to match the new header.
Andrew Bartlett
2007-10-10 13:45:00 -05:00
Andrew Bartlett
24dbf34352 r11198: The recent changes to netlogon changed this from a RID to a SID.
Andrew Bartlett
2007-10-10 13:45:00 -05:00
Andrew Bartlett
a432ba105c r11197: indent 2007-10-10 13:45:00 -05:00
Andrew Bartlett
9292173874 r11196: Clean up memory leaks (pointed out by vl), and handle the case where
the client doesn't guess correctly on the mech to use.  It must back
off and try the mech the server selected from the list.

I'm not particularly attached to our SPNEGO parser, so while I can't
easily use the SPNEGO application logic in Heimdal, I'm going to look
closely at using the asn1 routines to avoid some pain here.

Andrew Bartlett
2007-10-10 13:44:59 -05:00
Andrew Bartlett
060a2a7bcc r11195: Add a new helper function (needed by my kpasswdd work, but hooked in
for netlogon as well) to change/set a user's password, given only
their SID.

This avoids the callers doing the lookups, and also performs the
actual 'set', as these callers do not wish any further buisness with
the entry.

Andrew Bartlett
2007-10-10 13:44:59 -05:00
Andrew Bartlett
2513c02c64 r11194: Use the special ldb attribute "canonicalName" (therefore testing that
codepath) in DRSUAPI CrackNames.

Fix the NT4 account return value.

Andrew Bartlett
2007-10-10 13:44:59 -05:00
Volker Lendecke
12a800bc85 r11193: Implement wbinfo -m 2007-10-10 13:44:59 -05:00
Volker Lendecke
134e104c3f r11192: Too many contexts around... :-) 2007-10-10 13:44:59 -05:00
Stefan Metzmacher
466baf737a r11189: add some more special group vs. special group tests,
to make sure that replicas from the same owner are blinding overwritten
in all cases

metze
2007-10-10 13:44:58 -05:00
Stefan Metzmacher
838323e58f r11188: - add multi homed vs. multi homed section
metze
2007-10-10 13:44:58 -05:00
Stefan Metzmacher
98c1e8e3df r11187: in case the msDS-KeyVersionNumber is replicated (I didn't assume this...)
show the string in the debug output, and show it with
--option="dssync:print_pwd_blobs=yes"

metze
2007-10-10 13:44:58 -05:00
Stefan Metzmacher
c043e56efd r11186: - get rid of some .extra = True cases
- add multihomed vs unique section
- update conflict handling for the above case

metze
2007-10-10 13:44:58 -05:00
Stefan Metzmacher
26c69348ca r11185: - resolve attid for "supplementalCredentials" into a name
- print "supplementalCredentials" also when --option="dssync:print_pwd_blobs=yes"
  is used

abartlet: this field may contain the krb5 keys...

metze
2007-10-10 13:44:57 -05:00
Jelmer Vernooij
97bbf4a460 r11184: Remove test that checks whether ftruncate() needs root, because I can't
find the file it tries to use (build/tests/ftruncroot.c) and the value
it defines is not used anywhere.
2007-10-10 13:44:57 -05:00
Jelmer Vernooij
47b8095a0a r11182: Explicitly add "." to perl include path so that perl doesn't use the
Config module instead of the configure-generated config.pm on case-insensitive
filesystems (MacOSX, OpenVMS)
2007-10-10 13:44:57 -05:00
Volker Lendecke
3821a17bdb r11181: Implement wbinfo -s and wbinfo --user-sids. The patch is so large because
--user-sids required the extension to trusted domains.

Implement "winbind sealed pipes" parameter for debugging purposes.

Volker
2007-10-10 13:44:57 -05:00
Stefan Metzmacher
d13315f3b1 r11179: revert to the old code, till jelmer find a solution how to
handle a UTF16 string in a uint8 array

metze
2007-10-10 13:44:56 -05:00
Stefan Metzmacher
e4edeeaa0a r11178: add some logic functions for the replica_vs_replica conflict handling
to our winsrepl server, but it handles only the simple cases (without merging)
and we still didn't apply records to our wins.ldb, we just print out what we would do

metze
2007-10-10 13:44:56 -05:00
Stefan Metzmacher
7545e4e716 r11177: move unique vs * and normal group vs * into this form
ACTIVE		vs ACTIVE
ACTIVE  	vs TOMBSTONE
RELEASED	vs ACTIVE
RELEASED	vs TOMBSTONE
TOMBSTONE	vs ACTIVE
TOMBSTONE	vs TOMBSTONE

as it seems that is all we need to test,
and w2k3 only decides between ACTIVE and NON-ACTIVE (REALEASED or TOMBSTONE)
when it gets new replica objects

also I have removed all the extra test, we only test the worst cases now,
and this will make the algorithms more clear when you look at the output
of the NBT-WINSREPLICATION torture test

metze
2007-10-10 13:44:56 -05:00
Stefan Metzmacher
62ddca0e1f r11176: - add multi homed vs. special group section
metze
2007-10-10 13:44:56 -05:00
Stefan Metzmacher
891416b79e r11175: - add multi homed vs. normal group section
metze
2007-10-10 13:44:55 -05:00
Stefan Metzmacher
7479760cbf r11174: - add special group vs. multi homed section
- disable special group vs. special group,
  I need to look closer at this, as I'm getting strange timeouts
  randomly, so the server might be doing some challegnes while
  doing the merging of special group records, witch reaches
  timeouts

metze
2007-10-10 13:44:55 -05:00
Stefan Metzmacher
d8e7e914bf r11173: print out the correct messages
metze
2007-10-10 13:44:55 -05:00
Stefan Metzmacher
ba2c100be6 r11172: - start with special group vs. special group testing
metze
2007-10-10 13:44:55 -05:00
Stefan Metzmacher
0d948cf430 r11171: fix the build
metze
2007-10-10 13:44:54 -05:00
Stefan Metzmacher
9903a47151 r11146: make sure we get the expected amount of addresses
metze
2007-10-10 13:44:54 -05:00
Stefan Metzmacher
03a8ff89d0 r11144: - add special group vs. normal group section
metze
2007-10-10 13:44:54 -05:00
Stefan Metzmacher
ba17276236 r11142: - add special group vs. unique section
metze
2007-10-10 13:44:54 -05:00
Jelmer Vernooij
55805b5ed9 r11141: Re-add paranoid string terminator check 2007-10-10 13:44:54 -05:00
Volker Lendecke
449cc714b8 r11122: Fix some talloc hierarchy errors 2007-10-10 13:44:53 -05:00
Stefan Metzmacher
4a22ce09b4 r11121: - add normal groups vs. multihomed section
- make sure we test the worst case,
  so that we don't need to test everything...
  - same ip(s)		=> not replace
  - different ip(s)	=> replace

metze
2007-10-10 13:44:53 -05:00
Volker Lendecke
256cf928d7 r11120: calling_name is used later in sesssetup_nt1, so hang the names to the right
talloc context.

Volker
2007-10-10 13:44:53 -05:00
Stefan Metzmacher
13703b5c35 r11119: add normal group vs. special group section
metze
2007-10-10 13:44:53 -05:00
Stefan Metzmacher
9a7689c745 r11117: add a normal group vs. normal group section
metze
2007-10-10 13:44:52 -05:00
Stefan Metzmacher
7f8c26cd33 r11116: - don't display cleanup updates
- add unique vs. multi homed section

metze
2007-10-10 13:44:52 -05:00
Stefan Metzmacher
980e1a39eb r11115: add unique vs special group section
metze
2007-10-10 13:44:52 -05:00
Andrew Tridgell
5ec486bb81 r11114: - fixed error handling on bad bind in ildap client
- added nicer error display, giving a string version of the error code
2007-10-10 13:44:52 -05:00