Andrew Bartlett
adae413042
r19731: Modify the ldb_map infrustructure to always map from requested
...
attributes to backend (remote) attributes.
We can't do a reverse mapping safely where the remote attribute may be
a source for multiple local attributes. (We end up with the wrong
attributes returned).
In doing this, I've modified the samba3sam.js test to be more
realistic, and fixed some failures in the handling of primaryGroupID.
I've added a new (private) helper function ldb_msg_remove_element() to
avoid a double lookup of the element name.
I've also re-formatted many of the function headers, to fit into
standard editor widths.
Andrew Bartlett
(This used to be commit 186766e309
)
2007-10-10 14:28:15 -05:00
Stefan Metzmacher
72ce2ab2ee
r19729: - split basedn related tests to a new function
...
- and add some 'netlogon' attriubte related tests
metze
(This used to be commit d643c3cc5c
)
2007-10-10 14:28:15 -05:00
Stefan Metzmacher
b7f7e8d4fd
r19727: make it possible to run the ldap.js tests against non global catalog servers
...
metze
(This used to be commit 463ed4c004
)
2007-10-10 14:28:15 -05:00
Stefan Metzmacher
76d0193bf3
r19726: when a client explicit asks for the 'netlogon' attriubute on LDAP
...
the result entry is skipped!
metze
(This used to be commit 62aa73f3d5
)
2007-10-10 14:28:14 -05:00
Stefan Metzmacher
146a4ff13a
r19724: add a helper functions to return an CLDAP error
...
metze
(This used to be commit 0a1ecb9116
)
2007-10-10 14:28:14 -05:00
Stefan Metzmacher
a4957315d8
r19723: don't use [,],(,) in test names to make the build-farm output happy
...
metze
(This used to be commit 8a0a92e2dc
)
2007-10-10 14:28:14 -05:00
Stefan Metzmacher
3c6b9db18f
r19722: fix memory leaks and hierachie bugs
...
metze
(This used to be commit fddcbf5d4c
)
2007-10-10 14:28:14 -05:00
Stefan Metzmacher
132b046ec8
r19721: ldapsrv_SearchCallback isn't needed any more
...
ldb_search_default_callback does the same...
metze
(This used to be commit 0edac60ec6
)
2007-10-10 14:28:13 -05:00
Stefan Metzmacher
c046f2e7a3
r19720: - don't pass a pointer reference to ldb_search_default_callback()
...
as it's ugly when it free's the callers memory on failure!
- only steal the controls on a LDB_REPLY_EXTENDED, LDB_REPLY_DONE
and ignore them on LDB_REPLY_ENTRY, LDB_REPLY_REFERRAL as we currently
have not way to return them in a ldb_result (we should fix this!)
metze
(This used to be commit 47da62b15a
)
2007-10-10 14:28:13 -05:00
Stefan Metzmacher
a39db63030
r19719: don't use 'new' as var name samba3 doesn't like it...
...
metze
(This used to be commit 7a4f46c1c9
)
2007-10-10 14:28:13 -05:00
Stefan Metzmacher
38272577f1
r19714: - add an explicit default target (needs to be the first target in the Makefile)
...
- let 'make nss' work alone
metze
(This used to be commit 5685b6c8a2
)
2007-10-10 14:28:12 -05:00
Rafal Szczesniak
52f53078bf
r19708: add a script for running net tests separately
...
rafal
(This used to be commit 0f913ef240
)
2007-10-10 14:28:12 -05:00
Stefan Metzmacher
65a50f46c8
r19699: - use better names for the site strings
...
- use the client_site when creating the server object
metze
(This used to be commit b02d0e1be3
)
2007-10-10 14:28:12 -05:00
Stefan Metzmacher
31f9ec1233
r19698: fix whitespaces...
...
metze
(This used to be commit fa439f5655
)
2007-10-10 14:28:12 -05:00
Stefan Metzmacher
f612da2848
r19697: use the same mailslot name as windows does,
...
this also let wireshark match the responses
metze
(This used to be commit 9e52b0b9b5
)
2007-10-10 14:28:11 -05:00
Volker Lendecke
57b482c04f
r19684: Talloc_guide text on multithreading by Remi Turboult
...
(This used to be commit 7b9b2e5358
)
2007-10-10 14:25:32 -05:00
Andrew Bartlett
9d39abf947
r19683: Guard GUID_from_string from walking off the end.
...
Andrew Bartlett
(This used to be commit 1c3e9b27a7
)
2007-10-10 14:25:31 -05:00
Andrew Bartlett
8539fb3aaa
r19682: Fix comments.
...
Andrew Bartlett
(This used to be commit 4c349f44f8
)
2007-10-10 14:25:31 -05:00
Andrew Bartlett
5a6288f458
r19681: Update to current lorikeet-heimdal. I'm looking at using the realm
...
lookup plugin, the new PAC validation code as well as Heimdal's SPNEGO
implementation.
Andrew Bartlett
(This used to be commit 05421f45ed
)
2007-10-10 14:25:31 -05:00
Jelmer Vernooij
9d7856122e
r19680: Allow specifying basedir for test data.
...
Create temporary directories in base directory.
(This used to be commit f111feb1d2
)
2007-10-10 14:25:30 -05:00
Jelmer Vernooij
cbbe5be832
r19679: Fix shared library build as well.
...
(This used to be commit ff9e1b4f06
)
2007-10-10 14:25:30 -05:00
Jelmer Vernooij
95caeb1046
r19678: Fix the build for now (ugly hack because of circular dependencies)
...
(This used to be commit 0953bb7d5f
)
2007-10-10 14:25:30 -05:00
Jelmer Vernooij
66494b1fc9
r19677: Fix more dependencies.
...
(This used to be commit 17c2557834
)
2007-10-10 14:25:29 -05:00
Jelmer Vernooij
c81f2930a2
r19676: Fix some more dependencies.
...
(This used to be commit 8768bec81f
)
2007-10-10 14:25:29 -05:00
Stefan Metzmacher
fff74b4bca
r19675: the process model don't depend on heimdal anymore
...
and only have private depdendencies
metze
(This used to be commit f37c9f4d92
)
2007-10-10 14:25:29 -05:00
Stefan Metzmacher
f0d975fd69
r19674: auth didn't depdend on process_model!
...
metze
(This used to be commit 30963753fc
)
2007-10-10 14:25:29 -05:00
Jelmer Vernooij
d7949f8a70
r19673: Build shared libs against shared libs.
...
(This used to be commit dad9156db9
)
2007-10-10 14:25:28 -05:00
Jelmer Vernooij
153349788c
r19672: Make LIBSAMBA-UTIL a subsystem again for now because it has interdependencies
...
with LIBSAMBA-CONFIG.
(This used to be commit 4a044fb529
)
2007-10-10 14:25:28 -05:00
Jelmer Vernooij
273d5f8666
r19671: Fix remaining unresolved symbols in shared library build.
...
Fix starting tests in shared library build.
(This used to be commit 3b65a0d6e4
)
2007-10-10 14:25:27 -05:00
Jelmer Vernooij
547eef2cf1
r19670: Reduce the number of unresolved symbols when building with shared libraries.
...
(This used to be commit 4422031d1d
)
2007-10-10 14:25:27 -05:00
Stefan Metzmacher
c779270116
r19664: fix compiler warnings...
...
should _krb5_find_type_in_ad() also take a const?
metze
(This used to be commit addc31bd93
)
2007-10-10 14:25:27 -05:00
Stefan Metzmacher
d822b963f9
r19663: merge changes from lorikeet heimdal:
...
support for netbios domain based realms
metze
(This used to be commit dcec6eebf1
)
2007-10-10 14:25:26 -05:00
Stefan Metzmacher
3ba2a9dfcf
r19662: windows 2003 kdc's only rewrite the realm to the full form,
...
when the client is using the netbios domain name as realm.
we should match this and not rewrite the principal.
This matches what windows give:
metze@SERNOX:~/prefix/lorikeet-heimdal/bin> ./kinit administrator@SERNOXDOM4
administrator@SERNOXDOM4's Password:
metze@SERNOX:~/prefix/lorikeet-heimdal/bin> ./klist
Credentials cache: FILE:/tmp/krb5cc_10000
Principal: administrator@SERNOXDOM4.MX.BASE
Issued Expires Principal
Nov 11 13:37:52 Nov 11 23:37:52 krbtgt/SERNOXDOM4@SERNOXDOM4.MX.BASE
Note:
I need to disable the principal checks in heimdal's
_krb5_extract_ticket() for the kinit to work.
Any ideas how to change heimdal to support this.
For the service principal we should use
the realm and principal in req->kdc_rep.enc_part
instead of the unencrypted req->kdc.ticket.sname
and req->kdc.ticket.realm to have a trusted value.
I'm not sure what we can do with the client realm...
metze
(This used to be commit cfee02143f
)
2007-10-10 14:25:26 -05:00
Stefan Metzmacher
71846e31fd
r19661: - add resolve stage to dcerpc connects over tcp
...
- remove ipv6 support untill the resolve layer can give ipv6 addresses
metze
(This used to be commit 1e518c3e67
)
2007-10-10 14:25:26 -05:00
Andrew Bartlett
47b7419fa7
r19660: Forgot to tell gsskrb5 not to canonicalize hostnames. Shoudl fix
...
valrind issues on fort, because we won't hit NSS any more.
Andrew Bartlett
(This used to be commit 6f67fa01ab
)
2007-10-10 14:25:26 -05:00
Andrew Bartlett
e5974a1b5f
r19650: Allow Samba to use Heimdal's SPNEGO code. Currently this can only
...
negotiate krb5, but if this works, I'll add NTLM as a GSSAPI backend
by some means or other.
Andrew Bartlett
(This used to be commit 476452e143
)
2007-10-10 14:25:25 -05:00
Andrew Bartlett
be5e793233
r19649: Fix indentation.
...
Andrew Bartlett
(This used to be commit ffce008775
)
2007-10-10 14:25:25 -05:00
Stefan Metzmacher
fe2a5a8abf
r19645: don't pass NULL as mem_ctx...
...
metze
(This used to be commit 643a38bc30
)
2007-10-10 14:25:25 -05:00
Andrew Bartlett
ed77e4e57b
r19644: Merge up to current lorikeet-heimdal, incling adding
...
gsskrb5_set_default_realm(), which should fix mimir's issues.
Andrew Bartlett
(This used to be commit 8117e76d2a
)
2007-10-10 14:25:24 -05:00
Stefan Metzmacher
a779d288a8
r19643: make process_model thread compile again
...
metze
(This used to be commit f02f7ed19d
)
2007-10-10 14:25:24 -05:00
Stefan Metzmacher
c71152180c
r19642: convert host.c to new composite api
...
metze
(This used to be commit a5d36a6dde
)
2007-10-10 14:25:24 -05:00
Stefan Metzmacher
8845a00fa1
r19641: ldap_delete() is only allowed as user, we need to give credentials to the ildap backend
...
metze
(This used to be commit a996d26336
)
2007-10-10 14:25:24 -05:00
Rafal Szczesniak
b5bdec2f54
r19640: add some comments
...
rafal
(This used to be commit 1ea37bf3b3
)
2007-10-10 14:25:23 -05:00
Stefan Metzmacher
3bc459f813
r19639: convert nbtlist.c to new composite api
...
metze
(This used to be commit 800999733e
)
2007-10-10 14:25:23 -05:00
Stefan Metzmacher
d5314b9f3f
r19638: convert resolve.c to the new composite api
...
metze
(This used to be commit 617f9c70c1
)
2007-10-10 14:25:23 -05:00
Rafal Szczesniak
bf16e43328
r19637: Leave --realm option only, as abartlet suggested.
...
rafal
(This used to be commit 73e3f7efa7
)
2007-10-10 14:25:23 -05:00
Jelmer Vernooij
dbe5084f8e
r19636: Add URLs to ldb and talloc pkg-config files.
...
Always build and install .pc files as they make sense for static libs
as well.
(This used to be commit 82cb91e2dd
)
2007-10-10 14:25:22 -05:00
Andrew Bartlett
cb3a884048
r19635: It appears that under CFX, different keys are used in each direction
...
(or something like that).
In any case, we need to stick with the initiator subkey for now, until
we figure out what Vista uses for the CIFS session key.
Andrew Bartlett
(This used to be commit b91a921e13
)
2007-10-10 14:25:22 -05:00
Jelmer Vernooij
667eedac90
r19634: Only use --allow-undef-shlib for modules.
...
(This used to be commit e8f2a086be
)
2007-10-10 14:25:21 -05:00
Andrew Bartlett
f722b07438
r19633: Merge to lorikeet-heimdal, removing krb5_rd_req_return_keyblock in favour of a more tasteful replacement.
...
Remove kerberos_verify.c, as we don't need that code any more.
Replace with code for using the new krb5_rd_req_ctx() borrowed from
Heimdal's accecpt_sec_context.c
Andrew Bartlett
(This used to be commit 13c9df1d4f
)
2007-10-10 14:25:21 -05:00