sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
Code
11,136 Commits 60 Branches 1,144 Tags 452 MiB
c81f2930a2
Commit Graph

11136 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jelmer Vernooij
c81f2930a2 r19676: Fix some more dependencies. 
(This used to be commit 8768bec81f)
 2007-10-10 14:25:29 -05:00
Stefan Metzmacher
fff74b4bca r19675: the process model don't depend on heimdal anymore 
and only have private depdendencies

metze
(This used to be commit f37c9f4d92)
 2007-10-10 14:25:29 -05:00
Stefan Metzmacher
f0d975fd69 r19674: auth didn't depdend on process_model! 
metze
(This used to be commit 30963753fc)
 2007-10-10 14:25:29 -05:00
Jelmer Vernooij
d7949f8a70 r19673: Build shared libs against shared libs. 
(This used to be commit dad9156db9)
 2007-10-10 14:25:28 -05:00
Jelmer Vernooij
153349788c r19672: Make LIBSAMBA-UTIL a subsystem again for now because it has interdependencies 
with LIBSAMBA-CONFIG.
(This used to be commit 4a044fb529)
 2007-10-10 14:25:28 -05:00
Jelmer Vernooij
273d5f8666 r19671: Fix remaining unresolved symbols in shared library build. 
Fix starting tests in shared library build.
(This used to be commit 3b65a0d6e4)
 2007-10-10 14:25:27 -05:00
Jelmer Vernooij
547eef2cf1 r19670: Reduce the number of unresolved symbols when building with shared libraries. 
(This used to be commit 4422031d1d)
 2007-10-10 14:25:27 -05:00
Stefan Metzmacher
c779270116 r19664: fix compiler warnings... 
should _krb5_find_type_in_ad() also take a const?

metze
(This used to be commit addc31bd93)
 2007-10-10 14:25:27 -05:00
Stefan Metzmacher
d822b963f9 r19663: merge changes from lorikeet heimdal: 
support for netbios domain based realms

metze
(This used to be commit dcec6eebf1)
 2007-10-10 14:25:26 -05:00
Stefan Metzmacher
3ba2a9dfcf r19662: windows 2003 kdc's only rewrite the realm to the full form, 
when the client is using the netbios domain name as realm.

we should match this and not rewrite the principal.

This matches what windows give:

metze@SERNOX:~/prefix/lorikeet-heimdal/bin> ./kinit administrator@SERNOXDOM4
administrator@SERNOXDOM4's Password:

metze@SERNOX:~/prefix/lorikeet-heimdal/bin> ./klist
Credentials cache: FILE:/tmp/krb5cc_10000
Principal: administrator@SERNOXDOM4.MX.BASE

Issued           Expires          Principal
Nov 11 13:37:52  Nov 11 23:37:52  krbtgt/SERNOXDOM4@SERNOXDOM4.MX.BASE

Note:
I need to disable the principal checks in heimdal's
_krb5_extract_ticket() for the kinit to work.

Any ideas how to change heimdal to support this.

For the service principal we should use
the realm and principal in req->kdc_rep.enc_part
instead of the unencrypted req->kdc.ticket.sname
and req->kdc.ticket.realm to have a trusted value.

I'm not sure what we can do with the client realm...

metze
(This used to be commit cfee02143f)
 2007-10-10 14:25:26 -05:00
Stefan Metzmacher
71846e31fd r19661: - add resolve stage to dcerpc connects over tcp 
- remove ipv6 support untill the resolve layer can give ipv6 addresses

metze
(This used to be commit 1e518c3e67)
 2007-10-10 14:25:26 -05:00
Andrew Bartlett
47b7419fa7 r19660: Forgot to tell gsskrb5 not to canonicalize hostnames. Shoudl fix 
valrind issues on fort, because we won't hit NSS any more.

Andrew Bartlett
(This used to be commit 6f67fa01ab)
 2007-10-10 14:25:26 -05:00
Andrew Bartlett
e5974a1b5f r19650: Allow Samba to use Heimdal's SPNEGO code. Currently this can only 
negotiate krb5, but if this works, I'll add NTLM as a GSSAPI backend
by some means or other.

Andrew Bartlett
(This used to be commit 476452e143)
 2007-10-10 14:25:25 -05:00
Andrew Bartlett
be5e793233 r19649: Fix indentation. 
Andrew Bartlett
(This used to be commit ffce008775)
 2007-10-10 14:25:25 -05:00
Stefan Metzmacher
fe2a5a8abf r19645: don't pass NULL as mem_ctx... 
metze
(This used to be commit 643a38bc30)
 2007-10-10 14:25:25 -05:00
Andrew Bartlett
ed77e4e57b r19644: Merge up to current lorikeet-heimdal, incling adding 
gsskrb5_set_default_realm(), which should fix mimir's issues.

Andrew Bartlett
(This used to be commit 8117e76d2a)
 2007-10-10 14:25:24 -05:00
Stefan Metzmacher
a779d288a8 r19643: make process_model thread compile again 
metze
(This used to be commit f02f7ed19d)
 2007-10-10 14:25:24 -05:00
Stefan Metzmacher
c71152180c r19642: convert host.c to new composite api 
metze
(This used to be commit a5d36a6dde)
 2007-10-10 14:25:24 -05:00
Stefan Metzmacher
8845a00fa1 r19641: ldap_delete() is only allowed as user, we need to give credentials to the ildap backend 
metze
(This used to be commit a996d26336)
 2007-10-10 14:25:24 -05:00
Rafal Szczesniak
b5bdec2f54 r19640: add some comments 
rafal
(This used to be commit 1ea37bf3b3)
 2007-10-10 14:25:23 -05:00
Stefan Metzmacher
3bc459f813 r19639: convert nbtlist.c to new composite api 
metze
(This used to be commit 800999733e)
 2007-10-10 14:25:23 -05:00
Stefan Metzmacher
d5314b9f3f r19638: convert resolve.c to the new composite api 
metze
(This used to be commit 617f9c70c1)
 2007-10-10 14:25:23 -05:00
Rafal Szczesniak
bf16e43328 r19637: Leave --realm option only, as abartlet suggested. 
rafal
(This used to be commit 73e3f7efa7)
 2007-10-10 14:25:23 -05:00
Jelmer Vernooij
dbe5084f8e r19636: Add URLs to ldb and talloc pkg-config files. 
Always build and install .pc files as they make sense for static libs
as well.
(This used to be commit 82cb91e2dd)
 2007-10-10 14:25:22 -05:00
Andrew Bartlett
cb3a884048 r19635: It appears that under CFX, different keys are used in each direction 
(or something like that).

In any case, we need to stick with the initiator subkey for now, until
we figure out what Vista uses for the CIFS session key.

Andrew Bartlett
(This used to be commit b91a921e13)
 2007-10-10 14:25:22 -05:00
Jelmer Vernooij
667eedac90 r19634: Only use --allow-undef-shlib for modules. 
(This used to be commit e8f2a086be)
 2007-10-10 14:25:21 -05:00
Andrew Bartlett
f722b07438 r19633: Merge to lorikeet-heimdal, removing krb5_rd_req_return_keyblock in favour of a more tasteful replacement. 
Remove kerberos_verify.c, as we don't need that code any more.
Replace with code for using the new krb5_rd_req_ctx() borrowed from
Heimdal's accecpt_sec_context.c

Andrew Bartlett
(This used to be commit 13c9df1d4f)
 2007-10-10 14:25:21 -05:00
Andrew Bartlett
e10791a364 r19632: This got missed in the heimdal merge. Without this, we don't keep the 
full database name.  The existing code (needed for when we use the HDB
as a keytab, such as for the kpasswd service) only works for HDB
keytabs not prefixed with a type.

Andrew Bartlett
(This used to be commit 12dc157dae)
 2007-10-10 14:25:21 -05:00
Jelmer Vernooij
c4ee1af3fb r19631: Re-enable shared libraries, but don't use -rpath-link unless 
shared libraries are actually used.
(This used to be commit 93e4f093b9)
 2007-10-10 14:25:20 -05:00
Rafal Szczesniak
e6a5fd44d0 r19630: Support specifying the realm name from command line. 
Useful when testing calls against windows servers with krb auth.

rafal
(This used to be commit 0725e2ddeb)
 2007-10-10 14:25:20 -05:00
Andrew Bartlett
daa463070c r19629: No need to special case use of DCE_STYLE sign and seal away any more... 
Andrew Bartlett
(This used to be commit 247b9f1ca9)
 2007-10-10 14:25:20 -05:00
Andrew Bartlett
a77b25cea7 r19628: This hint via Love at the IETF meeting: 
Larry told me that most context flags needed to be set to, otherwise
it wouldn't work.

This fixes DCE_STYLE against Win2k3 SP1.  It seems they just tightened
up their end of the GSSAPI code, as DCE_STYLE is explicity rejected in
the session setup too (being the wrong layer).

Andrew Bartlett
(This used to be commit b2b77f34a4)
 2007-10-10 14:25:20 -05:00
Stefan Metzmacher
640047e947 r19625: not all linkers like -Wl,rpath-link, so don't use it till we have configure checks 
and working shared libraries

metze
(This used to be commit 25376f748c)
 2007-10-10 14:25:19 -05:00
Stefan Metzmacher
9dfa85d89b r19624: we have timegm in libreplace so heimdal should not replace it 
metze
(This used to be commit b6d1fd1b24)
 2007-10-10 14:25:19 -05:00
Stefan Metzmacher
ff2d656fab r19623: disable building of shared libs until we have fixed them, 
they all have unresolved symbols and are useless
and produce noise in the build-farm

metze
(This used to be commit 3f8b776f63)
 2007-10-10 14:25:17 -05:00
Stefan Metzmacher
0fc10ccb65 r19622: - remove unused var 
- fix default for enable-dso to no

metze
(This used to be commit 47b113e5db)
 2007-10-10 14:25:17 -05:00
Stefan Metzmacher
84e08dad21 r19621: move enable-dso to check_ld.m4 again and add some checks and generate more output 
metze
(This used to be commit a07b11924c)
 2007-10-10 14:25:17 -05:00
Jelmer Vernooij
8b063f9843 r19620: Remove old (outdated) files. 
(This used to be commit 3bec179de6)
 2007-10-10 14:25:16 -05:00
Jelmer Vernooij
ddc9382456 r19619: Add pointer to (up-to-date) packaging from the Debian Samba packaging repository. 
(This used to be commit 75162a873c)
 2007-10-10 14:25:16 -05:00
Stefan Metzmacher
ead66ffddf r19618: pass -D_SAMBA_HOSTCC_ when using the hostcompiler 
metze
(This used to be commit 846553085e)
 2007-10-10 14:25:16 -05:00
Stefan Metzmacher
14b00f10d9 r19616: the heimdal spnego mech doesn't seem to use roken.h and isn't portable 
(it doesn't compile on suse 10.1 because gethostname() isn't found,
 unistd.h isn't included...)

as we don't need the spnego mech, disable it till it gets fixed in heimdal

metze
(This used to be commit 0a52e11a9c)
 2007-10-10 14:25:06 -05:00
Stefan Metzmacher
6f9bed3d3e r19615: include roken.h.in as this still includes the ifdef's we need in samba4 
this should fix the portability of samba4

metze
(This used to be commit 497543a17e)
 2007-10-10 14:25:06 -05:00
Stefan Metzmacher
9f30272b27 r19614: fix compiler warnings 
metze
(This used to be commit 1ca8651a59)
 2007-10-10 14:25:05 -05:00
Stefan Metzmacher
7b1551c4c6 r19613: remove diff between samba4 and lorikeet 
metze
(This used to be commit bec1783c4c)
 2007-10-10 14:25:05 -05:00
Stefan Metzmacher
b14dafc3e2 r19612: fix the build with auto dependencies 
the samba4 heimdal copy should do not need to use socket_wrapper

metze
(This used to be commit 704fe73940)
 2007-10-10 14:25:05 -05:00
Stefan Metzmacher
5249d8187f r19611: we have heimdal 0.8pre currently 
metze
(This used to be commit df4c2b9c79)
 2007-10-10 14:25:04 -05:00
Stefan Metzmacher
0671e54079 r19610: fix the build 
metze
(This used to be commit 59fe6cfaba)
 2007-10-10 14:25:04 -05:00
Stefan Metzmacher
22a155af05 r19609: fix uninitialized perl variabel, we need AC_SUBST() for all configure vars 
we want to use in perl...

metze
(This used to be commit 2b021e2d8c)
 2007-10-10 14:25:04 -05:00
Stefan Metzmacher
438f14701a r19608: - basics comes in with $(ALL_PREDEP) 
(this fixes the auto dependency build)

metze
(This used to be commit 0798e678e7)
 2007-10-10 14:25:04 -05:00
Stefan Metzmacher
0a4e05493b r19607: - remove mech_switch.h from objectfile list 
(fix the build the auto dependencies)
- add tabs

metze
(This used to be commit 03afa231ff)
 2007-10-10 14:25:03 -05:00