1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-14 19:24:43 +03:00

17008 Commits

Author SHA1 Message Date
Michael Adam
46bb8aa357 libnet_become_cd: teach becomeDC_drsuapi_bind_recv() DsBindInfo48.
To work with w2k8.

Michael
(This used to be commit 7d80fab912576923c7474d77b8ed960b01296914)
2008-07-23 15:36:13 +02:00
Michael Adam
f9e6197924 dsdb: teach dreplsrv_out_drsuapi_bind_recv() knowledge of DsBindInfo48.
To make it work against w2k8.

Michael
(This used to be commit a8aea9274170a2b472c45c97a4904bd299d2a92e)
2008-07-23 15:36:13 +02:00
Stefan Metzmacher
34b10077f9 password_hash: add generation of the Primary:Kerberos-Newer-Keys blob
But it's still of by default until we now what triggers this generation.
It could be that the value is always generated but the KDC only
uses it when in a specific funtional level, but it could also
be that it's only generated in a specific functional level.

metze
(This used to be commit 08618bbd508ede0bb9e1922fae562cffdca41cbd)
2008-07-23 14:46:11 +02:00
Stefan Metzmacher
0842eb25a1 hdb-ldb: try to find Primary:Kerberos-Newer-Keys and fallback to Primary:Kerberos
Now provide AES tickets if we find the keys in the supplementalCredentials attribute

metze
(This used to be commit 8300259f103f8cfe014988fad0f7ee0d49bb1ac2)
2008-07-23 14:46:11 +02:00
Stefan Metzmacher
28a7e6f125 drsblobs.idl: add idl for Primary:Kerberos-Newer-Keys blob in supplementalCredentials
metze
(This used to be commit 97b7901afbccc9647ad2958d4cf12300de2655d1)
2008-07-23 14:46:10 +02:00
Stefan Metzmacher
b3d6c5ee31 password_hash: order the supplementalCredentials Packages in the same order like windows
metze
(This used to be commit ca9cd81a1798fb15195566422b3cad7c282fce89)
2008-07-23 14:46:10 +02:00
Stefan Metzmacher
12ac4c5666 password_hash: split the generation of krb5 keys into a different function
metze
(This used to be commit 4ad73a0bf8952783d3d9a7339c0c4fd8ca28981a)
2008-07-23 14:46:10 +02:00
Stefan Metzmacher
b783b28d70 password_hash: simplify the logic if we have cleartext we always generate the hashes
metze
(This used to be commit 5edff84429ef0d03b47a438e18861d26c97e17b6)
2008-07-23 14:46:09 +02:00
Stefan Metzmacher
e0f04e36ad password_hash: fix callers after idl change for package_PrimaryKerberos
metze
(This used to be commit 1bf552856f3a930c4716ceb73d9ba9adf7502d3d)
2008-07-23 14:46:09 +02:00
Stefan Metzmacher
e3434f8995 drsblobs.idl: fix unknowns in package_PrimaryKerberos idl
metze
(This used to be commit da9ceb2bf17f964334d9317829d40483e2c04b10)
2008-07-23 14:46:09 +02:00
Stefan Metzmacher
fa40b0709a hdb-ldb: check the SUPPLEMENTAL_CREDENTIALS_SIGNATURE
metze
(This used to be commit 7219740ef434091617c6bb727374251987ff2a62)
2008-07-23 14:46:08 +02:00
Stefan Metzmacher
fbea02accf password_hash: check the SUPPLEMENTAL_CREDENTIALS_SIGNATURE
metze
(This used to be commit 19b8c8e37bafab050ab61266c35006efada2947c)
2008-07-23 14:46:08 +02:00
Stefan Metzmacher
ecdd13389f drsblobs.idl: fix idl for supplementalCredentialsSubBlob
metze
(This used to be commit 24c5b10136f6e640832193aaf9e6d7e865c288bc)
2008-07-23 14:46:08 +02:00
Stefan Metzmacher
69d3f0e602 password_hash: ignore reserved value, but still set it like windows does
metze
(This used to be commit 5b860572686167d0291161f6597f143e538e2f3a)
2008-07-23 14:46:08 +02:00
Stefan Metzmacher
bb12c78d44 drsblobs.idl: rename unknown1 -> reserved
metze
(This used to be commit 9a70b2237d4fdd523edfbca0329ad35e71faf998)
2008-07-23 14:46:07 +02:00
Stefan Metzmacher
bcb0db3634 password_hash: don't add zero padding as w2k8 also don't add it
metze
(This used to be commit 26e9169d454349795ad0bc64d7f65059541ab89e)
2008-07-23 14:46:07 +02:00
Stefan Metzmacher
b4e9e8954a hdb-ldb: fix comment about padding
metze
(This used to be commit ca28d05b11e602e0f98cda0e02f973562c199dc6)
2008-07-23 14:46:06 +02:00
Stefan Metzmacher
75cdaa4c84 hdb-ldb: fix crash bug in the error path
metze
(This used to be commit ac02d6a0f765e3b66fb6796f129edb1a348ecd84)
2008-07-23 14:46:06 +02:00
Stefan Metzmacher
734d0c0a5d RPC-DSSYNC: print 'supplementalCredentials' more verbosely
metze
(This used to be commit 6a7637b12e4a34915a53e81a0f47571da21fdc5a)
2008-07-23 14:46:06 +02:00
Stefan Metzmacher
5bb679aa0f rpc_server: be more strict with the incoming assoc_group_id
Allow 0 and 0x12345678 only.
This fixes the RPC-HANDLES test.

metze
(This used to be commit c123e597cc84685abf2b0d3564e1a26d80bbef2f)
2008-07-23 14:46:05 +02:00
Michael Adam
a9c3f4700c smbtorture: add a warning for unknown BindInfo length to the RPC-DSSYNC test
Michael
(This used to be commit 7ee99105ea3a50d8ee2c83ecd39e834ed9efb98c)
2008-07-23 12:52:40 +02:00
Michael Adam
935a7b3389 smbtorture: add support for the DSBindInfo48 to the RPC-DSSYNC test.
Michael
(This used to be commit 67a99e445871861945fd0a45784cffb358bdccf3)
2008-07-23 12:52:40 +02:00
Stefan Metzmacher
945eedc4c1 libnet/become_dc: add a comment and explain why it's important to specify krb5
metze
(This used to be commit 26d1f9366d8611af1a69095b4cede2d2c95c982d)
2008-07-23 11:56:55 +02:00
Andrew Bartlett
ea7f2fedea Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
(This used to be commit ae311d89d2d477b235a6a9294a8bb463ed0a8c05)
2008-07-23 16:20:17 +10:00
Andrew Bartlett
768515f4ad The SMB session key must not be more than 16 bytes in SAMR (and
presumably LSA).

Tests show that Vista requires the sesion key to be truncated for a
domain join.

Andrew Bartlett
(This used to be commit af629a3738298d27eb2dbecf466ceb503cec9638)
2008-07-23 16:19:54 +10:00
Andrew Bartlett
9549ebc2ac Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
(This used to be commit 532ccbbe7aa360440f455dfa136f425b9996e998)
2008-07-23 16:15:46 +10:00
Andrew Bartlett
042eefe3eb Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-abartlet
(This used to be commit a93b20b85b7b35965c428f1543cb7bbe96e16d42)
2008-07-23 16:15:43 +10:00
Andrew Bartlett
d6fdd13dec Remove the 'accoc_group_id' check in the RPC server.
This check breaks more than it fixes, and while technically not
correct, is the best solution we have at this time.  Otherwise,
SCHANNEL binds from WinXP fail.

Andrew Bartlett
(This used to be commit f8628fa330abcd50923d995d5bda1f4811582ea9)
2008-07-23 16:14:20 +10:00
Andrew Bartlett
e0bd9e82ea Explain where some other OIDs are allocated.
This is an odd place for an OID registry - we perhaps need a central
wiki page.

Andrew Bartlett
(This used to be commit 1c909973977ae117703c1ccf7589acc4625e76e5)
2008-07-23 13:49:00 +10:00
Michael Adam
7fba6c649b Change occurrences of the u1 member of DsBindInfo* to pid after idl change.
Michael
(This used to be commit b91bbc5fe4a47e5823be6be5f2f203f1f14105de)
2008-07-22 15:35:23 +02:00
Michael Adam
e184b70768 drsuapi.idl: change the u1 field in DsBindInfo* to "pid".
According to the WSPP docs, section 5.35,
this is the "process identifyer" of the client.
It is meant for informational and debugging purposes
only and its assignment is implementation specific.

Michael
(This used to be commit 579306eb5b58b6c1142b3c489e4bcf6da50810d6)
2008-07-22 15:33:26 +02:00
Michael Adam
901e764fa7 drsuapi.idl: add drsuapi_SupportedExtensionsExt bitfield.
This knowledge is obtained from the wspp-docs (section 5.35).

Michael
(This used to be commit f5afb695045b1a2f3b8c00a4d82d40e8e50726c9)
2008-07-22 13:16:56 +02:00
Michael Adam
e7785a371a drsuapi.idl: the last 16 bytes in DsBindInfo48 ar the GUID of the config dn.
This bit seems not to be documented in the WSPP docs.

Michael
(This used to be commit 705f79bd0a5e93daa0cb11b5dcca36e75c75df93)
2008-07-22 13:16:40 +02:00
Michael Adam
2abe5e9240 drsuapi.idl: add drsuapi_DsBindInfo48.
This is necessary to make DsGetNcChanges work with win2008.

Michael
(This used to be commit dd278b069b8683a0e3721ebb7d0de06d2bc1c86f)
2008-07-22 13:16:31 +02:00
Volker Lendecke
a819f4e88c s3 cli_do_rpc_ndr does not use PI_* anymore
(This used to be commit e625c6b2516111002c99239c1a2188c6d5d87ab6)
2008-07-22 11:48:30 +02:00
Andrew Bartlett
c9c296b6bb Install'named.txt' to private/ as documentation.
This document is much more use when subbed with all the right things.

Andrew Bartlett
(This used to be commit 136a85599815670c807f212d7d4003ec53a13729)
2008-07-22 11:09:18 +10:00
Matthias Dieter Wallnöfer
fb3e663678 Improve DNS and Group poicy configurations.
- fixes bug #4813 (simplify DNS setup)
  - This reworks the named.conf to be a fully fledged include
  - This also moves the documentation into named.txt
 - improves bug #4900 (Group policy support in Samba)
   - by creating an empty GPT.INI
 - fixes bug #5582 (DNS: Enhanced zone file)
   - This is now closer to the zone file AD creates

committed by Andrew Bartlett
(This used to be commit 74d684f6b329d7dd573cdc55e16bb8e629474b02)
2008-07-22 11:06:47 +10:00
Jelmer Vernooij
24b03e1080 Properly cast array length in print functions.
(This used to be commit f321240fa91fa19c1131f119c42f64897d220682)
2008-07-21 12:47:08 +02:00
Andrew Bartlett
ecc13c3b1f Fix winbindd not to sit in a busy loop...
Clearly winbindd in Samba4 has not ever been run against windows, as
when we fixed the Samba4 server not to cause XP to loop like this,
Samba4's own client starts looping...

Andrew Bartlett
(This used to be commit 9741772190a85c7c42c17ff24a4aa3f53fbc9f3a)
2008-07-21 15:00:18 +10:00
Andrew Bartlett
d626a26374 Rename structures to better match the names in the WSPP IDL.
The 'comment' element in a number of domain structures is called
oem_information.  This was picked up actually because with OpenLDAP
doing the schema checking, it noticed that 'comment' was not a valid
attribute.

The rename tries to keep this consistant in both the LDB mappings and
IDL, so we don't make the same mistake in future.

This has no real schema impact, as this value isn't actually used for
anything, as 'comment' was not used in the provision.

Andrew Bartlett
(This used to be commit 65dc0d536590d055a5ee775606ac90ee5fcaee9a)
2008-07-21 13:42:07 +10:00
Andrew Bartlett
e16b2242e5 Remove bogus test in 'enum trusted domains' LSA server.
The change to the RPC-LSA test proves that when the remote server has
0 trusted domains, it will return NT_STATUS_NO_MORE_ENTRIES, not
NT_STATUS_OK.

Andrew Bartlett
(This used to be commit 40a55b34c2ce75267cf004dc4cfb8153c061e66b)
2008-07-21 12:05:53 +10:00
Andrew Bartlett
7d84b72a70 Merge branch 'v4-0-test' of ssh://git.samba.org/data/git/samba into 4-0-local
(This used to be commit 55bde3c9daeafdac04574365c23d181345639f34)
2008-07-21 11:27:23 +10:00
Andrew Bartlett
f4cae6a913 Sleep longer in the hope that the OpenLDAP backend might catch up
(This used to be commit 63c80c885dc3fb2228f082be8db752bb29e3962e)
2008-07-21 11:18:54 +10:00
Andrew Bartlett
ca46ad25b8 Fix ldb_map to add/remove the same 'extra' objectclass
The code previously added data->add_objectClass, but only removed the
fixed objectclass of extensibleObject.

Found by the ldap.py test.

Andrew Bartlett
(This used to be commit 4fa15c3173a997fa0b9041161d81e742e1fdb41c)
2008-07-21 11:18:21 +10:00
Andrew Bartlett
706140a1dc Make invalid 'member' detection work again.
This defines a rootdn globally, and due to OpenLDAP bugs, gives it
manage access to the whole database.  This makes the memberOf module
able to validate the links again, now we have database ACLs.

Andrew Bartlett
(This used to be commit 9fe3e9f09f89fd92f8a16768e53391ff5f8489ec)
2008-07-21 09:36:24 +10:00
Volker Lendecke
853ef0d5ef Fix RAW-OPEN against Samba3
This test assumed that fnums are recycled immediately after a close. This is
not true on Samba 3.

Andrew B., I assume this is just a bug in the test. Assuming recycled fnums
might be true on Windows and Samba 4, but I don't think we should assume this
everywhere.

Volker
(This used to be commit a4c3a59d47b2b1c794eda556d252c61907be1b3c)
2008-07-19 12:47:31 +02:00
Andrew Bartlett
3408a2d18f Make a seperate template for the refint configuration too
(This used to be commit d2a527acc5ee6fe9b943657dc9c3ace920b2d619)
2008-07-18 18:58:56 +10:00
Andrew Bartlett
cfc2063f23 Put the memberof template into a seperate setup/ file.
Set a memberof-dn in a fruitless attempt to fix the ACL problem I'm
having with OpenLDAP

Andrew Bartlett
(This used to be commit 6d6e03834a1a77a8ceba41fbe8c9d49680065ba3)
2008-07-18 18:44:07 +10:00
Andrew Bartlett
853194c308 More 'must be ignored' options from the MS-SMB doc.
Also in particular the 'sync' flags (which Samba has traditionally
ignored).

Thanks to Olivier Salamin <olivier.salamin@gmail.com> for pointing out
more flags that needed to be handled.

Andrew Bartlett
(This used to be commit 370bb39cd79fe49efd36a1ceb3e896d386e6d3ce)
2008-07-18 18:40:19 +10:00
Volker Lendecke
8025edf335 Add the interface ID to the rpc_pipe_register_commands call in s3 srv code
(This used to be commit efe249928312f730ee580e72b9c640ef88b0ed5b)
2008-07-16 22:22:38 +02:00