1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-04 17:47:26 +03:00

1280 Commits

Author SHA1 Message Date
Andrew Bartlett
b0d94c8e7d r1440: GENSEC improvements:
- Infrustructure for kerberos
 - Don't segfault on un-implemented backend functions
 - Add comments.

Andrew Bartlett
(This used to be commit 1c31aa42710421917428d6ba86328ea5179751bd)
2007-10-10 12:56:56 -05:00
Andrew Bartlett
43e7d4109f r1439: Once we are authenticated, always return NT_STATUS_OK. (Makes SPENGO
easier to code, as it may return an 'ok' with an empty blob).

Andrew Bartlett
(This used to be commit e48557158ed99eee7d3ef8231c629bbd14cda9d3)
2007-10-10 12:56:56 -05:00
Andrew Bartlett
47fc62a097 r1438: Record the principal name we are sent in the SPENGO mechListMIC in a
seperate char *, not a DATA_BLOB.

This allows us to tell if we were sent a string here, or a real MIC.
(This used to be commit 06b997c826e3ec00e0528da800e3eae0e3497a54)
2007-10-10 12:56:56 -05:00
Andrew Bartlett
b0d61c8b42 r1437: Intermediate commit of krb5 for GENSEC.
The session key in the client is wrong, we don't do signing/sealing
and we are sending raw Kerberos, not GSSAPI.

But it's a start, and if we continue to have to call Krb5 directly,
this will be the basis.

I also intend to provide an alternate implementation, using just
GSSAPI.

Andrew Bartlett
(This used to be commit eb0dd4a821dc3dbe370aea9a9c9fb05cf2592e4d)
2007-10-10 12:56:56 -05:00
Andrew Bartlett
74508c718b r1436: Move GENSEC across to config.mk
Andrew Bartlett
(This used to be commit 2de3a3082344fd292b1084a73a332549d6b2e25d)
2007-10-10 12:56:55 -05:00
Andrew Bartlett
30c15f37cc r1435: talloc_steal is very useful - add a function to do it with a DATA_BLOB
Andrew Bartlett
(This used to be commit 66d6e2611084d579a20833a4c0daa5d72ef9393c)
2007-10-10 12:56:55 -05:00
Andrew Bartlett
462d27d7e6 r1434: Merge this function in from Samba 3.0, but use a mem_ctx rather than
an fstring.

Andrew Bartlett
(This used to be commit e8de8905b2f328395d71afdd73c77301c9366a66)
2007-10-10 12:56:55 -05:00
Jelmer Vernooij
a25651cd22 r1433: Properly use GtkTreeView:
- When a key is selected the values are immediately shown in gregedit
 - Only allow deleting jobs if one is selected.
(This used to be commit afb5f4d765cb15ba8824d8db19879bad83829561)
2007-10-10 12:56:55 -05:00
Jelmer Vernooij
e3fd2d0492 r1432: - Move the various Gtk-specific parts from the registry code into a directory gtk/
- Move common "Samba-Gtk" code into gtk/common/ ("Connect to RPC pipe"-dialog, etc)
- Add a new utility 'gwcrontab' that can currently list, delete and add 'atsvc' jobs. It still displays times and dates as integers though, will fix that later.

Some screenshots available at:
 http://samba.org/~jelmer/gwcrontab/
(This used to be commit d321cf20f1f0ff33603b013c26d370669f255868)
2007-10-10 12:56:55 -05:00
Stefan Metzmacher
efb010202f r1429: enable spnego in smbclient too.
metze
(This used to be commit ae2e6b58629397d75a3e446ff0c50b594d029206)
2007-10-10 12:56:55 -05:00
Andrew Bartlett
102f5bc17d r1426: Fix some of my silly compile errors...
Andrew Bartlett
(This used to be commit c283837556109b9392a8cdcd867e5ae0dac1509b)
2007-10-10 12:56:55 -05:00
Andrew Bartlett
82e59d11c3 r1423: Make sure to destory the mem_ctx.
Andrew Bartlett
(This used to be commit c5a1529d54e6b8ec2bbf7017a2f48d7535f1f016)
2007-10-10 12:56:55 -05:00
Andrew Bartlett
f929ee3e4e r1422: StrnCaseCmp now needs to be non-static.
Andrew Bartlett
(This used to be commit 6709c7010df2912eec3dfc086343cb3cb7910459)
2007-10-10 12:56:55 -05:00
Stefan Metzmacher
7caf17319a r1421: fix a uninitialized var (thanks valgrind:-)
add a view debug messages

metze
(This used to be commit 79953dccc1f21dbabddff73a4b6d862eace29eb9)
2007-10-10 12:56:54 -05:00
Stefan Metzmacher
7381ba30c4 r1420: be more strict reject if the context has the wrong type
metze
(This used to be commit db19d6047c25698d0c3b7aeaab77b2a02385dbb5)
2007-10-10 12:56:54 -05:00
Stefan Metzmacher
b119ebeab0 r1419: spnego inside of dcerpc using alter_context/alter_context_resp
instead of auth3

metze
(This used to be commit 19b0567ee533744a0f2778bf8549636a25d96526)
2007-10-10 12:56:54 -05:00
Andrew Bartlett
bdb0b60861 r1418: Merge Samba 3.0's recent kerberos changes into Samba4. None of this
is used yet.

Andrew Bartlett
(This used to be commit 7596f311c9a18314716f64476030ce3dfcdd98bb)
2007-10-10 12:56:54 -05:00
Stefan Metzmacher
2c87cb390d r1409: if we have no user name don't use extended security
the capabilities in the union smb_sesssetup should be used to decide
if we can use extented security

metze
(This used to be commit e3760fcc17cc645d942f0fc7f7325976391309ea)
2007-10-10 12:56:54 -05:00
Stefan Metzmacher
0fa2b94c56 r1406: I got spnego in the smb client working
so I set 'use spnego = True'

metze
(This used to be commit e06898f88c82c286574f9d73de1a9de829b1ded8)
2007-10-10 12:56:54 -05:00
Stefan Metzmacher
4b3b32a2f1 r1403: commit volkers initial RAP torture test
we'll try to autogenerate the specific calls in future by pidl
and create a new subsystem for the rap lib

after that the server side will be added

metze
(This used to be commit f1bbde6bb4790f915c1fdbb53f6452c5ea454936)
2007-10-10 12:56:54 -05:00
Stefan Metzmacher
25cae4dc0c r1402: we should prompt for a password if it's not given by -U
metze
(This used to be commit acde1358c940ed159a67e433e662c255103a1a02)
2007-10-10 12:56:54 -05:00
Stefan Metzmacher
cfc4350e05 r1377: add examples for config.mk sections
so you want/need to use the new build system
just look at the top of build/smb_build/public.m4

and look at the examples in the rest of the tree

metze
(This used to be commit afe2efd1437a7951d2ed6fcf7b4e06fdd4b95beb)
2007-10-10 12:56:54 -05:00
Tim Potter
34ca729f73 r1374: Fix signed/unsigned warnings (actually found by g++) after unsigned int
changes in r1018.
(This used to be commit 45b4016530fc0bfa13146f73a503866b5dbed517)
2007-10-10 12:56:54 -05:00
Andrew Bartlett
e59e82b902 r1372: Remove the 'default' case from the SPENGO state machine, and fix up
some compiler warnings that allowed us to see.

Andrew Bartlett
(This used to be commit 1a6c2018dd49519e6fccdd5a7f35d70b67d45275)
2007-10-10 12:56:53 -05:00
Stefan Metzmacher
7c139a6815 r1367: SPNEGO know uses gensec_subcontext_start() in all places
metze
(This used to be commit f7379324025c599cd201ce6d0905f0ca2c24ce73)
2007-10-10 12:56:53 -05:00
Stefan Metzmacher
4b7cd833a0 r1366: handle the case where the client need to send the negTokenInit before
getting something from the server.
(this is needed by SPNEGO in dcerpc)

metze
(This used to be commit ec978555f0bd612b80dfa49ccc880a3858285879)
2007-10-10 12:56:53 -05:00
Stefan Metzmacher
c688a1e18f r1365: in SPNEGO_SERVER_TARG we should not check the spnego_negResult
because the client don't send this

metze
(This used to be commit b1217a4ef6592082bb02fd0596a0563bacdf1d8e)
2007-10-10 12:56:53 -05:00
Stefan Metzmacher
6f0d8e67ff r1364: the SPNEGO_SERVER_TARG state is different from the SPNEGO_CLIENT_TARG
the client checks but not send spnego_negResult

metze
(This used to be commit 49e4d375e9504f595aaa64ac62ddb421f082c424)
2007-10-10 12:56:53 -05:00
Stefan Metzmacher
215c400aee r1363: add SPNEGO_NONE_RESULT as spnego_negResult value
this should indicate that we don't send a spnego_negResult t all over the wire

metze
(This used to be commit 69d685d81784e5fb33e41d3244498ac620a2f5f0)
2007-10-10 12:56:53 -05:00
Stefan Metzmacher
1432bb01f3 r1360: - remove unused state SPNEGO_CLIENT_SEND_MECHS
- remove unsed gensec_user forward, it's done by the gensec layer know

metze
(This used to be commit e19e5a91f2fd988546f42473bf241dff3c2fe198)
2007-10-10 12:56:53 -05:00
Stefan Metzmacher
f9c7b6303c r1359: fix uninit var - found by valgrind
metze
(This used to be commit 264afea9ec3ada4df51e5f5de4c0b977024af40b)
2007-10-10 12:56:53 -05:00
Andrew Bartlett
14e8aab182 r1358: Re-indent the SPENGO implementation, and work on the basis of a
switch, rather than a series of if statements.

Also start to use the GENSEC subcontexts, and add some comments
explaining some of the 'odd' logic in parts.

I'll probably break these out into subfunctions soon.

Thanks to metze for getting me to do this :-)

Andrew Bartlett
(This used to be commit 73e03596d3b2ad5927e8154d0fbfbdae9ec3f717)
2007-10-10 12:56:53 -05:00
Andrew Bartlett
93665a132d r1357: Work on GENSEC:
- Add the concept of a 'subcontext' into gensec, so that the spengo
   code doesn't have to figure out how to make one.
   (A subcontext inherits the username, domain, password (or callback)
   from the main context).

 - Add comments to some other routines, and explain a bit about what
   the various 'start' functions are for.

Andrew Bartlett
(This used to be commit 7aedbfbdd92b4ca93cbd0babff16e7526201ee88)
2007-10-10 12:56:53 -05:00
Andrew Bartlett
66ac77dd12 r1356: Fix logic bugs in ntlm_auth.
Andrew Bartlett
(This used to be commit 871e98ce5771bc96527f7ad4da07a7d6c1ae1c3c)
2007-10-10 12:56:52 -05:00
Andrew Bartlett
d9f4a8328e r1355: Add const (I missed this when I changed the function prototype earlier)
Andrew Bartlett
(This used to be commit dbe484a0c2c1ef99b71621208fb3fec68fe4fada)
2007-10-10 12:56:52 -05:00
Andrew Bartlett
25f396edfb r1354: Make it clear that the first gensec_update takes a NULL data_blob.
Andrew Bartlett
(This used to be commit 842a5dfc1f313b771fef14a484be6eea8c6eedf8)
2007-10-10 12:56:52 -05:00
Andrew Bartlett
674ad23789 r1353: Fix compile with new ASN1 peek code.
Andrew Bartlett
(This used to be commit 9039a2a1128d8af278cae76c0aa6d5362b3671e4)
2007-10-10 12:56:52 -05:00
Andrew Bartlett
b359f5d893 r1352: Add a 'peek' function to our ASN1 code, so we can safely perform the
various switches without looking one byte past te end of the buffer.
(This used to be commit 5bce188d429b4166f3d0314922ae40204de182a7)
2007-10-10 12:56:52 -05:00
Stefan Metzmacher
3b7872f69f r1351: add derpc spengo wrapper
not yet used and not working because of bugs in the gensec spnego code

metze
(This used to be commit b9795ed5735ad88a2ba9608d3d8804edf77e4cd4)
2007-10-10 12:56:52 -05:00
Stefan Metzmacher
49d6c46fa3 r1350: - init nt_status- found by valgrind
- set auth_type = DCERPC_AUTH_TYPE_SPNEGO

metze
(This used to be commit 7354521f3cfaa2ead8fac38a68b7704d43731f72)
2007-10-10 12:56:52 -05:00
Stefan Metzmacher
3acfc94511 r1349: don't segfault with empty data_blob
metze
(This used to be commit a826accd55e90cb0628f198886ba1ae6c845e68b)
2007-10-10 12:56:51 -05:00
Stefan Metzmacher
1828f5d506 r1348: get gensec backend by OID instead of name
metze
(This used to be commit 38e00f87191b86901b603e66aec1e7e71f74c29f)
2007-10-10 12:56:51 -05:00
Stefan Metzmacher
fff5d40ab5 r1347: - remove typedef
- pass down gensec_user to the sub context

- if segfault when mechType is NULL

metze
(This used to be commit 3f84263c27add3bf01eea88618f707da925bed5c)
2007-10-10 12:56:51 -05:00
Stefan Metzmacher
50ce5fd990 r1346: revert my last spnego changes
metze
(This used to be commit 7b8237bfb3c302a448a7db0236c0a953603dcd89)
2007-10-10 12:56:51 -05:00
Stefan Metzmacher
4f0e5e0690 r1345: add extended security spnego support to the smb client
code

set lp_use_spnego = False, because I can't get it working yet
but I commit it so others can help me

metze
(This used to be commit 2445cceba9ab9bd928c8bc50927a39509e4526b0)
2007-10-10 12:56:51 -05:00
Stefan Metzmacher
8bebc53df8 r1344: add gensec_start_mech_by_name()
some gensec spnego fixes
(NULL pointer and length checks)

metze
(This used to be commit 41ff6d0cd47f6295fe7fe1d31fec7306416ce199)
2007-10-10 12:56:51 -05:00
Stefan Metzmacher
854665fb1b r1343: formating
metze
(This used to be commit 442905394b5e2f74baa4d83b2f4ba5159f321dd2)
2007-10-10 12:56:51 -05:00
Volker Lendecke
0fa0eaa383 r1342: When fixing _lsa_lookupsids in samba3 I wanted to find out the number of SIDs
w2k3 can handle in a single request. With the samba3 client rpc libs I can do
about 21000 SIDs in a single request. test_many_LookupSIDs with 10000 SIDs
fails on the subsequent request with a NET_WRITE_FAULT. Maybe the Samba4 DCE
people want to take a look at this -- I don't see the problem.

Bug fix: SID components should be treated as unsigned when parsing

Volker
(This used to be commit 8c997a2ad2e89a640f854b556ef76a3d52c15963)
2007-10-10 12:56:51 -05:00
Stefan Metzmacher
458cadff4f r1337: use sess->nt1. in sesssetup_nt1 :-)
metze
(This used to be commit ee711c71fedd9d24b5a78b51d9dc3e166645260f)
2007-10-10 12:56:51 -05:00
Stefan Metzmacher
5f4a153a0b r1336: check the vuid in old style sessionsetup too
metze
(This used to be commit 32e307857ccc99b446e7574d46b610c63ee03583)
2007-10-10 12:56:50 -05:00