1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-12 09:18:10 +03:00
Commit Graph

11359 Commits

Author SHA1 Message Date
Andrew Bartlett
adae413042 r19731: Modify the ldb_map infrustructure to always map from requested
attributes to backend (remote) attributes.

We can't do a reverse mapping safely where the remote attribute may be
a source for multiple local attributes.  (We end up with the wrong
attributes returned).

In doing this, I've modified the samba3sam.js test to be more
realistic, and fixed some failures in the handling of primaryGroupID.

I've added a new (private) helper function ldb_msg_remove_element() to
avoid a double lookup of the element name.

I've also re-formatted many of the function headers, to fit into
standard editor widths.

Andrew Bartlett
(This used to be commit 186766e309)
2007-10-10 14:28:15 -05:00
Stefan Metzmacher
72ce2ab2ee r19729: - split basedn related tests to a new function
- and add some 'netlogon' attriubte related tests

metze
(This used to be commit d643c3cc5c)
2007-10-10 14:28:15 -05:00
Stefan Metzmacher
b7f7e8d4fd r19727: make it possible to run the ldap.js tests against non global catalog servers
metze
(This used to be commit 463ed4c004)
2007-10-10 14:28:15 -05:00
Stefan Metzmacher
76d0193bf3 r19726: when a client explicit asks for the 'netlogon' attriubute on LDAP
the result entry is skipped!

metze
(This used to be commit 62aa73f3d5)
2007-10-10 14:28:14 -05:00
Stefan Metzmacher
146a4ff13a r19724: add a helper functions to return an CLDAP error
metze
(This used to be commit 0a1ecb9116)
2007-10-10 14:28:14 -05:00
Stefan Metzmacher
a4957315d8 r19723: don't use [,],(,) in test names to make the build-farm output happy
metze
(This used to be commit 8a0a92e2dc)
2007-10-10 14:28:14 -05:00
Stefan Metzmacher
3c6b9db18f r19722: fix memory leaks and hierachie bugs
metze
(This used to be commit fddcbf5d4c)
2007-10-10 14:28:14 -05:00
Stefan Metzmacher
132b046ec8 r19721: ldapsrv_SearchCallback isn't needed any more
ldb_search_default_callback does the same...

metze
(This used to be commit 0edac60ec6)
2007-10-10 14:28:13 -05:00
Stefan Metzmacher
c046f2e7a3 r19720: - don't pass a pointer reference to ldb_search_default_callback()
as it's ugly when it free's the callers memory on failure!

- only steal the controls on a LDB_REPLY_EXTENDED, LDB_REPLY_DONE
  and ignore them on LDB_REPLY_ENTRY, LDB_REPLY_REFERRAL as we currently
  have not way to return them in a ldb_result (we should fix this!)

metze
(This used to be commit 47da62b15a)
2007-10-10 14:28:13 -05:00
Stefan Metzmacher
a39db63030 r19719: don't use 'new' as var name samba3 doesn't like it...
metze
(This used to be commit 7a4f46c1c9)
2007-10-10 14:28:13 -05:00
Stefan Metzmacher
38272577f1 r19714: - add an explicit default target (needs to be the first target in the Makefile)
- let 'make nss' work alone

metze
(This used to be commit 5685b6c8a2)
2007-10-10 14:28:12 -05:00
Rafal Szczesniak
52f53078bf r19708: add a script for running net tests separately
rafal
(This used to be commit 0f913ef240)
2007-10-10 14:28:12 -05:00
Stefan Metzmacher
65a50f46c8 r19699: - use better names for the site strings
- use the client_site when creating the server object

metze
(This used to be commit b02d0e1be3)
2007-10-10 14:28:12 -05:00
Stefan Metzmacher
31f9ec1233 r19698: fix whitespaces...
metze
(This used to be commit fa439f5655)
2007-10-10 14:28:12 -05:00
Stefan Metzmacher
f612da2848 r19697: use the same mailslot name as windows does,
this also let wireshark match the responses

metze
(This used to be commit 9e52b0b9b5)
2007-10-10 14:28:11 -05:00
Volker Lendecke
57b482c04f r19684: Talloc_guide text on multithreading by Remi Turboult
(This used to be commit 7b9b2e5358)
2007-10-10 14:25:32 -05:00
Andrew Bartlett
9d39abf947 r19683: Guard GUID_from_string from walking off the end.
Andrew Bartlett
(This used to be commit 1c3e9b27a7)
2007-10-10 14:25:31 -05:00
Andrew Bartlett
8539fb3aaa r19682: Fix comments.
Andrew Bartlett
(This used to be commit 4c349f44f8)
2007-10-10 14:25:31 -05:00
Andrew Bartlett
5a6288f458 r19681: Update to current lorikeet-heimdal. I'm looking at using the realm
lookup plugin, the new PAC validation code as well as Heimdal's SPNEGO
implementation.

Andrew Bartlett
(This used to be commit 05421f45ed)
2007-10-10 14:25:31 -05:00
Jelmer Vernooij
9d7856122e r19680: Allow specifying basedir for test data.
Create temporary directories in base directory.
(This used to be commit f111feb1d2)
2007-10-10 14:25:30 -05:00
Jelmer Vernooij
cbbe5be832 r19679: Fix shared library build as well.
(This used to be commit ff9e1b4f06)
2007-10-10 14:25:30 -05:00
Jelmer Vernooij
95caeb1046 r19678: Fix the build for now (ugly hack because of circular dependencies)
(This used to be commit 0953bb7d5f)
2007-10-10 14:25:30 -05:00
Jelmer Vernooij
66494b1fc9 r19677: Fix more dependencies.
(This used to be commit 17c2557834)
2007-10-10 14:25:29 -05:00
Jelmer Vernooij
c81f2930a2 r19676: Fix some more dependencies.
(This used to be commit 8768bec81f)
2007-10-10 14:25:29 -05:00
Stefan Metzmacher
fff74b4bca r19675: the process model don't depend on heimdal anymore
and only have private depdendencies

metze
(This used to be commit f37c9f4d92)
2007-10-10 14:25:29 -05:00
Stefan Metzmacher
f0d975fd69 r19674: auth didn't depdend on process_model!
metze
(This used to be commit 30963753fc)
2007-10-10 14:25:29 -05:00
Jelmer Vernooij
d7949f8a70 r19673: Build shared libs against shared libs.
(This used to be commit dad9156db9)
2007-10-10 14:25:28 -05:00
Jelmer Vernooij
153349788c r19672: Make LIBSAMBA-UTIL a subsystem again for now because it has interdependencies
with LIBSAMBA-CONFIG.
(This used to be commit 4a044fb529)
2007-10-10 14:25:28 -05:00
Jelmer Vernooij
273d5f8666 r19671: Fix remaining unresolved symbols in shared library build.
Fix starting tests in shared library build.
(This used to be commit 3b65a0d6e4)
2007-10-10 14:25:27 -05:00
Jelmer Vernooij
547eef2cf1 r19670: Reduce the number of unresolved symbols when building with shared libraries.
(This used to be commit 4422031d1d)
2007-10-10 14:25:27 -05:00
Stefan Metzmacher
c779270116 r19664: fix compiler warnings...
should _krb5_find_type_in_ad() also take a const?

metze
(This used to be commit addc31bd93)
2007-10-10 14:25:27 -05:00
Stefan Metzmacher
d822b963f9 r19663: merge changes from lorikeet heimdal:
support for netbios domain based realms

metze
(This used to be commit dcec6eebf1)
2007-10-10 14:25:26 -05:00
Stefan Metzmacher
3ba2a9dfcf r19662: windows 2003 kdc's only rewrite the realm to the full form,
when the client is using the netbios domain name as realm.

we should match this and not rewrite the principal.

This matches what windows give:

metze@SERNOX:~/prefix/lorikeet-heimdal/bin> ./kinit administrator@SERNOXDOM4
administrator@SERNOXDOM4's Password:

metze@SERNOX:~/prefix/lorikeet-heimdal/bin> ./klist
Credentials cache: FILE:/tmp/krb5cc_10000
Principal: administrator@SERNOXDOM4.MX.BASE

Issued           Expires          Principal
Nov 11 13:37:52  Nov 11 23:37:52  krbtgt/SERNOXDOM4@SERNOXDOM4.MX.BASE

Note:
I need to disable the principal checks in heimdal's
_krb5_extract_ticket() for the kinit to work.

Any ideas how to change heimdal to support this.

For the service principal we should use
the realm and principal in req->kdc_rep.enc_part
instead of the unencrypted req->kdc.ticket.sname
and req->kdc.ticket.realm to have a trusted value.

I'm not sure what we can do with the client realm...

metze
(This used to be commit cfee02143f)
2007-10-10 14:25:26 -05:00
Stefan Metzmacher
71846e31fd r19661: - add resolve stage to dcerpc connects over tcp
- remove ipv6 support untill the resolve layer can give ipv6 addresses

metze
(This used to be commit 1e518c3e67)
2007-10-10 14:25:26 -05:00
Andrew Bartlett
47b7419fa7 r19660: Forgot to tell gsskrb5 not to canonicalize hostnames. Shoudl fix
valrind issues on fort, because we won't hit NSS any more.

Andrew Bartlett
(This used to be commit 6f67fa01ab)
2007-10-10 14:25:26 -05:00
Andrew Bartlett
e5974a1b5f r19650: Allow Samba to use Heimdal's SPNEGO code. Currently this can only
negotiate krb5, but if this works, I'll add NTLM as a GSSAPI backend
by some means or other.

Andrew Bartlett
(This used to be commit 476452e143)
2007-10-10 14:25:25 -05:00
Andrew Bartlett
be5e793233 r19649: Fix indentation.
Andrew Bartlett
(This used to be commit ffce008775)
2007-10-10 14:25:25 -05:00
Stefan Metzmacher
fe2a5a8abf r19645: don't pass NULL as mem_ctx...
metze
(This used to be commit 643a38bc30)
2007-10-10 14:25:25 -05:00
Andrew Bartlett
ed77e4e57b r19644: Merge up to current lorikeet-heimdal, incling adding
gsskrb5_set_default_realm(), which should fix mimir's issues.

Andrew Bartlett
(This used to be commit 8117e76d2a)
2007-10-10 14:25:24 -05:00
Stefan Metzmacher
a779d288a8 r19643: make process_model thread compile again
metze
(This used to be commit f02f7ed19d)
2007-10-10 14:25:24 -05:00
Stefan Metzmacher
c71152180c r19642: convert host.c to new composite api
metze
(This used to be commit a5d36a6dde)
2007-10-10 14:25:24 -05:00
Stefan Metzmacher
8845a00fa1 r19641: ldap_delete() is only allowed as user, we need to give credentials to the ildap backend
metze
(This used to be commit a996d26336)
2007-10-10 14:25:24 -05:00
Rafal Szczesniak
b5bdec2f54 r19640: add some comments
rafal
(This used to be commit 1ea37bf3b3)
2007-10-10 14:25:23 -05:00
Stefan Metzmacher
3bc459f813 r19639: convert nbtlist.c to new composite api
metze
(This used to be commit 800999733e)
2007-10-10 14:25:23 -05:00
Stefan Metzmacher
d5314b9f3f r19638: convert resolve.c to the new composite api
metze
(This used to be commit 617f9c70c1)
2007-10-10 14:25:23 -05:00
Rafal Szczesniak
bf16e43328 r19637: Leave --realm option only, as abartlet suggested.
rafal
(This used to be commit 73e3f7efa7)
2007-10-10 14:25:23 -05:00
Jelmer Vernooij
dbe5084f8e r19636: Add URLs to ldb and talloc pkg-config files.
Always build and install .pc files as they make sense for static libs
as well.
(This used to be commit 82cb91e2dd)
2007-10-10 14:25:22 -05:00
Andrew Bartlett
cb3a884048 r19635: It appears that under CFX, different keys are used in each direction
(or something like that).

In any case, we need to stick with the initiator subkey for now, until
we figure out what Vista uses for the CIFS session key.

Andrew Bartlett
(This used to be commit b91a921e13)
2007-10-10 14:25:22 -05:00
Jelmer Vernooij
667eedac90 r19634: Only use --allow-undef-shlib for modules.
(This used to be commit e8f2a086be)
2007-10-10 14:25:21 -05:00
Andrew Bartlett
f722b07438 r19633: Merge to lorikeet-heimdal, removing krb5_rd_req_return_keyblock in favour of a more tasteful replacement.
Remove kerberos_verify.c, as we don't need that code any more.
Replace with code for using the new krb5_rd_req_ctx() borrowed from
Heimdal's accecpt_sec_context.c

Andrew Bartlett
(This used to be commit 13c9df1d4f)
2007-10-10 14:25:21 -05:00