sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-15 23:24:37 +03:00
Code
47,969 Commits 60 Branches 1,145 Tags
Commit Graph

47969 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Stefan Metzmacher
b7d2ff38f5 s4:libcli/smb_composite: we only check the signature when the server return OK 
We need to manually free the request, otherwise the timeout handler is
triggered later.

metze
 2008-09-24 04:08:31 +02:00
Günther Deschner
4962a4459b libcli: add nbt_proto.h that is no longer autogenerated. 
Guenther
 2008-09-24 03:51:25 +02:00
Günther Deschner
04979bcfb4 s3: fix idmap_adex. 
Guenther
 2008-09-24 03:34:24 +02:00
Günther Deschner
3ee016be9c libcli: add some basic debugging functions for netlogon helper. 
Guenther
 2008-09-24 03:34:23 +02:00
Günther Deschner
f07431f5ba s3-nbt: use the new generated nbt. 
Guenther
 2008-09-24 03:34:23 +02:00
Günther Deschner
e867ff52d7 s3: re-run make samba3-idl. 
Guenther
 2008-09-24 03:34:22 +02:00
Günther Deschner
a877745dc7 s3-nbt: full merge of s4 nbt idl. 
Guenther
 2008-09-24 03:34:22 +02:00
Günther Deschner
1ea185a340 s3: fix merged_build. 
Guenther
 2008-09-24 03:30:50 +02:00
Karolin Seeger
765e5d2282 printing: Add new parameter "cups timeout". 
The default timeout for connections to CUPS servers is set
to 5 minutes in the CUPS libraries. The smbd hangs on startup
until the timeout is reached if the CUPS server is unreachable.
This parameter makes the timeout configurable. The default value
is set to 30 seconds.

Karolin
 2008-09-23 16:57:58 -07:00
Günther Deschner
61a45c85de s3: fix make everything. 
Guenther
 2008-09-24 01:40:52 +02:00
Jeremy Allison
3807b30f44 Fix winbindd crash in an unusual failure mode. Bug #5737. Based on original patch from shargagan@novell.com 
Jeremy.
 2008-09-23 16:39:57 -07:00
Günther Deschner
7baaa87b93 libcli: add autogenerated libcli netlogon helper protos. 
Guenther
 2008-09-24 01:20:56 +02:00
Günther Deschner
ed23c66bf7 s4: remove autogeneration of libcli/netlogon protos. 
we do need to have them around for samba3.

Guenther
 2008-09-24 01:20:42 +02:00
Simo Sorce
508527890a Merge ldb_search() and ldb_search_exp_fmt() into a simgle function. 
The previous ldb_search() interface made it way too easy to leak results,
and being able to use a printf-like expression turns to be really useful.
 2008-09-23 18:17:46 -04:00
Jeremy Allison
d275cc762d Fix bug #5783 FindFirst fails where search pattern == mangled filename. 
That was an old and subtle bug.
Jeremy.
 2008-09-23 15:05:45 -07:00
Günther Deschner
0bbbe2c21f pam_winbind: attempt to fix build issue on solaris, bug #5784 
Guenther
 2008-09-23 23:42:08 +02:00
Günther Deschner
022947097f s3-ndr: add stub smb_iconv_convenience to some ndr_ functions. 
Guenther
 2008-09-23 23:35:14 +02:00
Günther Deschner
5fa451ea84 s3: re-run make samba3-idl. 
Guenther
 2008-09-23 23:35:04 +02:00
Günther Deschner
44f7c1c216 pidl: fix samba3 server wrt to samba4 ndr_pull_init_blob protype. 
this is in preparation for the final nbt merge.

Guenther
 2008-09-23 23:34:27 +02:00
Günther Deschner
de54bac54c s3: fix NETLOGON_NT_VERSION version flags. 
Guenther
 2008-09-23 23:20:10 +02:00
Günther Deschner
0950cce83d s3: re-run make samba3-idl. 
Guenther
 2008-09-23 23:20:01 +02:00
Günther Deschner
d62bc0e845 s3-nbt: start merging from samba4 idl. 
Guenther
 2008-09-23 23:19:54 +02:00
Günther Deschner
1147d05b47 s4-nbt: use moved libcli netlogon helpers. 
Guenther
 2008-09-23 23:18:00 +02:00
Günther Deschner
9d541f314f s4-libcli: move nbt/netlogon helper functions up one level. 
Guenther
 2008-09-23 23:17:51 +02:00
Günther Deschner
8bd302ab22 s3-build: let ctags/etags start from the toplevel dir. 
Guenther
 2008-09-23 23:16:35 +02:00
Volker Lendecke
1f8fe94ff3 S3 puts smb.conf and lmhosts in lib/, s4 into etc/ 2008-09-23 23:13:03 +02:00
Stefan Metzmacher
5477e1cbf9 s4:lib/charset: add missing prototype of talloc_strdup_upper() 
metze
 2008-09-23 21:07:43 +02:00
Andrew Tridgell
1c2e6978b8 fixed problem with ACLs with an empty DACL list 2008-09-23 11:17:43 -07:00
Andrew Tridgell
66092ced5e Merge branch 'master' of ssh://git.samba.org/data/git/samba 2008-09-23 11:15:46 -07:00
Stefan Metzmacher
353aaf26c5 selftest: run smb signing tests as part of make quicktest 
metze
 2008-09-23 11:30:04 +02:00
Stefan Metzmacher
61a38d9180 selftest: test some smb signing combinations against the member server 
metze
 2008-09-23 11:30:04 +02:00
Stefan Metzmacher
171349bc21 s4:smb_server: remove the bogus smbsrv_signing_restart() 
Real signing always starts with seqnumber 2, and once signing
is on the session key never change anymore for the complete
smb connection.

metze
 2008-09-23 11:30:04 +02:00
Stefan Metzmacher
c01426ce73 libcli/smb_composite: for spnego session setups check the smb signature manually 
We need to start signing when we got NT_STATUS_OK from the server
and manually check the signature of the servers response.

This is needed as the response might be signed with the krb5 acceptor subkey,
which comes within the server response.

With NTLMSSP this happens for the session setup:

request1  => BSRSPYL		seqnum: 0
response1 => BSRSPYL		seqnum: 0
request2  => BSRSPYL		seqnum: 0
response2  => <SIGNATURE>	seqnum: 1

and with krb5:

request1  => BSRSPYL		seqnum: 0
response1  => <SIGNATURE>	seqnum: 1

metze
 2008-09-23 11:30:03 +02:00
Stefan Metzmacher
8c3d969934 libcli/raw: real signing starts at seqnumber 2 
metze
 2008-09-23 11:30:03 +02:00
Stefan Metzmacher
7deacc615e libcli/raw: in SMB_SIGNING_ENGINE_BSRSPYL state it's ok to accept any signature 
Even if signing is mandatory.

With NTLMSSP this happens for the session setup:

request1  => BSRSPYL
response1 => BSRSPYL
request2  => BSRSPYL
response2  => <SIGNATURE>

and with krb5:

request1  => BSRSPYL
response1  => <SIGNATURE>

metze
 2008-09-23 11:30:03 +02:00
Stefan Metzmacher
e00ab641b4 libcli/raw: give the caller the chance to do the signing checks on its own. 
metze
 2008-09-23 11:30:02 +02:00
Stefan Metzmacher
781d7c4c1c libcli/raw: give the caller the chance to prevent the talloc_free(req) in the _recv functions 
metze
 2008-09-23 11:30:02 +02:00
Stefan Metzmacher
588af6901b gensec_krb5: only give away the session key, when the authentication is done 
metze
 2008-09-23 11:30:02 +02:00
Stefan Metzmacher
02cffed79d gensec_gssapi: only give away the session key, when the authentication is done 
metze
 2008-09-23 11:30:01 +02:00
Stefan Metzmacher
23e31350f5 ntlmssp: only give away the session key, when the authentication is done 
metze
 2008-09-23 11:30:01 +02:00
Stefan Metzmacher
70b0c8f79a RPC-PAC: loop in gensec_update() untill the server side is ready 
metze
 2008-09-23 11:30:01 +02:00
Günther Deschner
05e0966d85 s3-nbt: remove old samba3 libcli/nbt copy. 
Guenther
 2008-09-23 10:48:58 +02:00
Michael Adam
4432967532 [s3]winbindd_group: don't list the domain twice when expanding internal aliases 
Before this, "getent group builtin\\administrators" expanded
domain group members in the form DOMAIN\domain\user.

Michael
 2008-09-23 10:00:26 +02:00
Michael Adam
4205fab500 [s3]winbindd_group: sanely handle NULL domain in add_member(). 
Michael
 2008-09-23 10:00:26 +02:00
Michael Adam
49145bfefa [s3]winbindd_ads: honour "winbind use default domain" in lookup_groupmem(). 
This fixes the output of "getent group" when "winbind use default domain = yes"
with security = ads.

Michael
 2008-09-23 10:00:26 +02:00
Michael Adam
1f8a7739ac [s3]winbindd_rpc: add domain prefix to username in lookup_groupmem(). 
This makes the output of "getent group" of a domain group show the
domain prefix with "security = domain".

Michael
 2008-09-23 10:00:26 +02:00
Michael Adam
1b9c2ccb1f [s3]winbindd_util: add fill_domain_username_talloc(). 
A talloc version of fill_domain_username().

Michael
 2008-09-23 10:00:26 +02:00
Michael Adam
e401ce6de7 [s3]winbindd_util: add prototype for fill_domain_username_talloc(). 
A talloc version of fill_domain_username().

Michael
 2008-09-23 10:00:25 +02:00
Michael Adam
f0dccdca6a [s3]winbindd: fix a comment typo 
Michael
 2008-09-23 10:00:25 +02:00
Michael Adam
6c8c5d7113 [s3]winbind_util: fix an implicit cast compile warning. 
Michael
 2008-09-23 10:00:25 +02:00