1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-11 05:18:09 +03:00
Commit Graph

6396 Commits

Author SHA1 Message Date
Andrew Tridgell
c34d9569ff r10216: Chris Samuel pointed out that we should note the need to run provision
as a user with write permission on the install directory
(This used to be commit c0de3fd4c5)
2007-10-10 13:38:09 -05:00
Andrew Tridgell
a129ad36eb r10213: fixed a memory leak in the ldap client and server code spotted by Karl
Melcher. ldap_encode() now takes a memory context to use for the data
blob
(This used to be commit 09948a5933)
2007-10-10 13:38:09 -05:00
Deryck Hodge
234481fd40 r10212: An IE fix. Must set initial values in the onload function.
deryck
(This used to be commit 3264ccf743)
2007-10-10 13:38:08 -05:00
Jelmer Vernooij
5d2c2edc19 r10207: Add some const
(This used to be commit b1ad340b47)
2007-10-10 13:38:08 -05:00
Andrew Tridgell
45f760973d r10200: added a composite_trigger_done() call that allows a composite function
to cause an event to happen immediately. This allows metzes patch for
recognising IPs in resolve_name() to work, and also allows us to
remove some of the other code where we currently do specific checks
for is_ipaddress().
(This used to be commit 9cc000d868)
2007-10-10 13:38:08 -05:00
Andrew Tridgell
6bfea63356 r10199: added a LOCAL-RESOLVE torture test, useful for measuring the overhead of
the async name resolution mechanisms
(This used to be commit b3a9d759bb)
2007-10-10 13:38:08 -05:00
Tim Potter
6c22a5bcbd r10197: Assume that external dissectors are structs which I think is always the
case.
(This used to be commit 515f456fac)
2007-10-10 13:38:07 -05:00
Andrew Tridgell
bcc3ce695e r10193: r11632@blu: tridge | 2005-08-30 23:08:27 +1000
if we fail to erase a ldb during provision by traversing
 and deleting records (an in-place erase) then just unlink it
 and start it again. This makes provisioning much more robust
 to changes in ldb that make it not backward compatible with
 old DBs.
(This used to be commit 173655aec2)
2007-10-10 13:38:07 -05:00
Andrew Tridgell
68974a1c72 r10192: r11631@blu: tridge | 2005-08-30 23:06:37 +1000
added a ldb.close() method in js. Useful for re-opening the db
(This used to be commit 1f12364a0f)
2007-10-10 13:38:07 -05:00
Jelmer Vernooij
957d361cd1 r10191: Return the right error code in the case of a time skew. Windows will now
ignore Kerberos and fallback to NTLMSSP when joining. Thanks to Andrew Bartlett
for the assistence.
(This used to be commit 3b6bfbe8cf)
2007-10-10 13:38:07 -05:00
Jelmer Vernooij
342d229b40 r10190: Do some very basic input checking when provisioning.
(This used to be commit 87f25fe49c)
2007-10-10 13:38:06 -05:00
Tim Potter
f642fd96d0 r10185: Fix another two sets of unhandled enumeration warnings, plus correct some awful indentation. (-:
(This used to be commit 2f24fc7a7a)
2007-10-10 13:38:06 -05:00
Tim Potter
74eea860ba r10184: Fix a stack of unhandled enumeration warnings.
(This used to be commit aeb42a446b)
2007-10-10 13:38:06 -05:00
Jelmer Vernooij
e841621c0b r10181: Fix the build
(This used to be commit 231d01a3e7)
2007-10-10 13:38:06 -05:00
Andrew Bartlett
5d3d4093b3 r10174: This patch implements generic PAC verification, without assumptions
about the size of the signature.  In particular, this works with AES,
which was previously broken Samba4/Samba4.

Reviewed by metze (and thanks for help with the previous IDL commit).
(This used to be commit 3c8be196cc)
2007-10-10 13:38:06 -05:00
Jelmer Vernooij
a0bc674b52 r10173: Document new option
(This used to be commit efa6e3938d)
2007-10-10 13:38:05 -05:00
Jelmer Vernooij
3127d75883 r10172: Add --dump-ndr-tree argument
(This used to be commit 8eb69b3a6e)
2007-10-10 13:38:05 -05:00
Andrew Bartlett
ce7166752c r10171: This seems to work for encoding/decoding a PAC at the buffers only
level (required for signature verification).

Andrew Bartlett
(This used to be commit 76c224f288)
2007-10-10 13:38:05 -05:00
Stefan Metzmacher
76277d1813 r10167: add a test to check if we always get the same assoc_ctx, on one connection.
metze
(This used to be commit 589541b740)
2007-10-10 13:38:05 -05:00
Stefan Metzmacher
5c7de96d2c r10164: - add first assoc_ctx test
- handle the case where we're no valid pull partner of the tested server

metze
(This used to be commit d2e62dc205)
2007-10-10 13:38:05 -05:00
James Peach
3818f7793b r10161: Check for alloca.h to prevent incorrect local declaration.
(This used to be commit efc70d2672)
2007-10-10 13:38:04 -05:00
James Peach
0639375119 r10159: Dereference padsize before comparing to an int.
(This used to be commit 5767c05909)
2007-10-10 13:38:04 -05:00
James Peach
7b0471c66d r10157: Remove the last traces of heimdal/include.
(This used to be commit 6512490107)
2007-10-10 13:38:04 -05:00
Andrew Bartlett
c42e76f986 r10155: Add more notes on required gsskrb5 functions.
Andrew Bartlett
(This used to be commit cdfcc09343)
2007-10-10 13:38:04 -05:00
Andrew Bartlett
5edbeca141 r10153: This patch adds a new parameter to gensec_sig_size(), the size of the
data to be signed/sealed.  We can use this to split the data from the
signature portion of the resultant wrapped packet.

This required merging the gsskrb5_wrap_size patch from
lorikeet-heimdal, and fixes AES encrption issues on DCE/RPC (we no
longer use a static 45 byte value).

This fixes one of the krb5 issues in my list.

Andrew Bartlett
(This used to be commit e4f2afc343)
2007-10-10 13:38:04 -05:00
Andrew Bartlett
cfdcc32f84 r10149: Update Samba4 to current lorikeet-heimdal.
Andrew Bartlett
(This used to be commit b9695d5e7c)
2007-10-10 13:38:03 -05:00
Andrew Bartlett
00d69bdf23 r10148: Use samdb_base_dn() to find the local domain.
Andrew Bartlett
(This used to be commit 4969f86ac2)
2007-10-10 13:38:03 -05:00
Andrew Bartlett
d3b2db590a r10146: Clarify which test is failing in error messages.
Don't dump the pac to x.dat (accidental commit).

Andrew Bartlett
(This used to be commit a798d76a4a)
2007-10-10 13:38:03 -05:00
Andrew Bartlett
1757f8355c r10145: Allow a variable length signature, so we can support signing with
other than arcfour-hmac-md5.  Currently we still fail to verify other
signatures however.

Andrew Bartlett
(This used to be commit 2e5884fc24)
2007-10-10 13:38:03 -05:00
Stefan Metzmacher
869ae3b7a0 r10144: dump the whole data blob
metze
(This used to be commit 4f933165c2)
2007-10-10 13:38:02 -05:00
Stefan Metzmacher
859f270d03 r10143: don't exit when the not all bytes are consumed,
(this happens with relative pointers)

metze
(This used to be commit 3ba227aafd)
2007-10-10 13:38:02 -05:00
Stefan Metzmacher
0559bae277 r10141: if some of the LIBNDR_ALIGN_* flags and LIBNDR_FLAG_REMAINING are set,
ndr_pull_data_blob() doesn't work correct. so make them exclute each other.

jelmer, tridge: does that look correct? it fixes a problem, abartlet had
with krb5pac.idl, where the align flags are inherited from the parent, and we want to get the
[flag(NDR_REMAINING)] DATA_BLOB signature;

metze
(This used to be commit b9ea3e8f9f)
2007-10-10 13:38:02 -05:00
Stefan Metzmacher
759e816239 r10140: reorder some stuff, for nicer output
metze
(This used to be commit 517d0ded6b)
2007-10-10 13:38:02 -05:00
Jeremy Allison
5fd875ae74 r10138: Fix the mapping table (as tested in smbtorture). EXEC_ACCESS
should map to SEC_RIGHTS_FILE_READ, not READ|WRITE.
Jeremy.
(This used to be commit 26f63973e6)
2007-10-10 13:38:02 -05:00
Jeremy Allison
0ac1490a89 r10132: Confirm that openX with OPEN_EXEC implies read only.
Jeremy.
(This used to be commit da70b2ab2d)
2007-10-10 13:38:01 -05:00
Stefan Metzmacher
9cd63ddb5d r10129: fix sinple ip's in wins replication, packets
metze
(This used to be commit 7492afa48d)
2007-10-10 13:38:01 -05:00
Stefan Metzmacher
9ad5c988a4 r10126: WREPL_REPL_UPDATE also takes a wrepl_table
metze
(This used to be commit b897ad39bb)
2007-10-10 13:38:01 -05:00
Jelmer Vernooij
5d6706e077 r10123: Add more warnings. Support quotes in conformance command arguments
(This used to be commit e6842fcc98)
2007-10-10 13:38:01 -05:00
Jelmer Vernooij
6635e7b2ad r10116: Print out a couple more warnings.
(This used to be commit 0628dfa5c3)
2007-10-10 13:38:01 -05:00
Stefan Metzmacher
13f7e6a0c6 r10115: bind client connection to the best interface, to the partner
metze
(This used to be commit e44aca0a8e)
2007-10-10 13:38:00 -05:00
Stefan Metzmacher
63ef3c7fdc r10113: rename libcli/wins to libcli/wrepl
metze
(This used to be commit d8b84112bb)
2007-10-10 13:38:00 -05:00
Stefan Metzmacher
899ffd9ba0 r10112: - check attributes depending on the section type
metze
(This used to be commit d6af241d7b)
2007-10-10 13:38:00 -05:00
Jelmer Vernooij
8b5a953725 r10111: Make pidl by default assume the input file is an IDL file rather
then a .pidl file.
(This used to be commit d8a31d3048)
2007-10-10 13:38:00 -05:00
Jelmer Vernooij
79f476a112 r10110: Add some more warnings, implement FIELD_DESCRIPTION
(This used to be commit 1caeb3238d)
2007-10-10 13:38:00 -05:00
Tim Potter
289127b026 r10104: Fix code before declaration.
(This used to be commit 05c0201815)
2007-10-10 13:37:59 -05:00
Tim Potter
561a02d646 r10103: Put an #ifdef guard around ENOTSUP to fix systems that don't have it
(OpenBSD 3.7).
(This used to be commit cc24af6545)
2007-10-10 13:37:59 -05:00
James Peach
af87f98d15 r10100: Check for more networking headers so the resolv.h test can succeed.
(This used to be commit db75b2da1e)
2007-10-10 13:37:59 -05:00
James Peach
c1dcda0ca7 r10097: Remove extraneous include patch heimdal/include. Add configure
checks for getipnodeby*().
(This used to be commit 623c265312)
2007-10-10 13:37:52 -05:00
Jelmer Vernooij
b2f3a85f78 r10094: Support quoted arguments in conformance files
Update pidl manpage
(This used to be commit a69e88e7b1)
2007-10-10 13:37:52 -05:00
Jelmer Vernooij
d9cdaccaa7 r10093: Fix the HF_FIELD conformance file command
(This used to be commit 0c0a4b55cf)
2007-10-10 13:37:52 -05:00