sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-20 14:03:59 +03:00
Code
14,217 Commits 60 Branches 1,145 Tags
Commit Graph

38 Commits

Author SHA1 Message Date
Jeremy Allison
4632786cfb W00t! Client smb signing is now working correctly with krb5 and w2k server. 
Server code *should* also work (I'll check shortly). May be the odd memory
leak. Problem was we (a) weren't setting signing on in the client krb5 sessionsetup
code (b) we need to ask for a subkey... (c). The client and server need to
ask for local and remote subkeys respectively.
Thanks to Paul Nelson @ Thursby for some sage advice on this :-).
Jeremy.
(This used to be commit 3f9e3b60709df5ab755045a093e642510d4cde00)
 2003-07-25 23:15:30 +00:00
Jeremy Allison
8c38bb75b7 Add krb5_princ_component to Heimdal. Remove cli_ from mark packet signed. 
Jeremy.
(This used to be commit dd46f8b22d6e8411081a1279e1cd32929e40370b)
 2003-07-16 19:17:33 +00:00
Andrew Tridgell
1d008cd2cb use ZERO_STRUCT() instead of memset 
(This used to be commit 082084042307f5f7d532b28debdeac11753a05f9)
 2003-06-10 03:48:09 +00:00
Jim McDonough
4f276f9696 More on bug 137: rename more of krb5_xxx functions to not start with krb5_ 
(This used to be commit 10f1da3f4a9680a039a2aa26301b97e31c06c38d)
 2003-05-30 20:11:34 +00:00
Andrew Bartlett
ec458fa87e Merge from HEAD - sync up SessionSetup code to HEAD, including Luke Howard's 
session key and auth verifier patches.

Andrew Bartlett
(This used to be commit 3f9616a68a855acbae3f405c27ee2358fbe7ba2c)
 2003-03-17 22:45:16 +00:00
Jim McDonough
217945cfc8 Fix IRIX build...void fn can't return another void fn 
(This used to be commit e0c1f9ef61a0ec4f06a0b0e257497943195b5297)
 2003-02-21 14:38:14 +00:00
Jim McDonough
83a11f7f0e Sync with HEAD for verifying kerberos tickets. 
(This used to be commit 77e1178a888f0d380a5ef94911a8f07bf04a7ba3)
 2003-02-19 15:48:12 +00:00
Jim McDonough
d08116ffcb Sync w/HEAD - add DES_CBC_CRC encryption type 
(This used to be commit c7934f5cb56d54a90c9ffdbe2f7429a3c9227abe)
 2003-02-18 20:57:29 +00:00
Jeremy Allison
f6fbf0c9db Revert tpot's breakage of the Heimdal fixes. 
Jeremy.
(This used to be commit 90336900ad2a6d50e1d42f7bc59fdc7c762187d3)
 2003-01-30 18:01:03 +00:00
Tim Potter
cf292aead6 Sync of Heimdal kerberos stuff with HEAD. If this breaks I'm blaming 
the dog again.
(This used to be commit 6f89ee2c9dc7f03e3dbe7aa734bf67c6a434d135)
 2003-01-30 04:40:12 +00:00
Jeremy Allison
b1bce45141 Finally we compile with Heimdal as well as MIT ! Wonder if it works... :-). 
Jeremy.
(This used to be commit 1b71786c161cd8ec4c3c0c6b178370ed50feeef4)
 2003-01-28 03:31:33 +00:00
Jeremy Allison
755e33ee3f Get smbd to link with Heimdal. Still missing some client progs... 
Jeremy.
(This used to be commit 85dda434763bbcea260c800599e4b6b73afcf174)
 2003-01-28 00:33:21 +00:00
Jeremy Allison
6cf8ac019e Thanks Meeester Potter, for reverting *all* my Heimdal changes because 
I mistyped a comma :-).
Jeremy.
(This used to be commit 04cc149c756c396012cfa321a74724b077302b95)
 2003-01-23 18:15:18 +00:00
Tim Potter
c79eccad91 Merge of kerberos changes to make this branch build again! 
(This used to be commit 51b319f57f28e3993919d7f3db0251a724902332)
 2003-01-22 23:32:33 +00:00
Jeremy Allison
e545fe3c0a Get closer to Heimdal compile... Damn. HEAD has different code in 
kerberos_verify...
Jeremy.
(This used to be commit e8c4098da619a1429cc4c8251761333a7c0f3458)
 2003-01-21 20:43:26 +00:00
Jeremy Allison
18c2948bc5 Fixup proto generation to not include krb5 specific symbols 
if no kerberos selected. Noticed by Metze.
Jeremy.
(This used to be commit 0c98f779f05431ac4d298c9f021fca85d16aebae)
 2003-01-21 13:33:31 +00:00
Jeremy Allison
b0aadff202 More fixes getting us closer to full Heimdal compile.... 
Jeremy.
(This used to be commit a7ee6ed64500a0d949849da6996b7dc837518f00)
 2003-01-21 06:23:49 +00:00
Jim McDonough
51d3f61750 should be HAVE_KRB5_SET_REAL_TIME (HAVE_ was missing)...fix the build 
(This used to be commit 9f1f3cb8bb3d7d9b4fb414b06ad10356f775bb28)
 2003-01-20 19:37:11 +00:00
Jeremy Allison
812e093f02 Merge in more of the SuSE patches for Heimdal. These changes show how 
to add a function without an explicit #ifdef HEIMDAL which I'm trying
to avoid.
Jeremy.
(This used to be commit 92ecd0bf0fe2cc4f6c86ca48e6e458e726470a50)
 2003-01-19 22:27:32 +00:00
Andrew Bartlett
48dc324cd1 Merge from HEAD - vl's fix to my const patch. Also update the 'not have_krb5' 
case.

Andrew Bartlett
(This used to be commit 8129529c4faec5ea630acf70b7514a3efc0fbdcf)
 2003-01-04 09:06:46 +00:00
Andrew Bartlett
634c54310c Merge from HEAD - make Samba compile with -Wwrite-strings without additional 
warnings.  (Adds a lot of const).

Andrew Bartlett
(This used to be commit 3a7458f9472432ef12c43008414925fd1ce8ea0c)
 2003-01-03 08:28:12 +00:00
Gerald Carter
f2e3b68ce6 fix segfault 
(This used to be commit 36bcb312e95f46d196575ed3535679deeddd89b0)
 2002-11-15 17:57:25 +00:00
Gerald Carter
a834a73e34 sync'ing up for 3.0alpha20 release 
(This used to be commit 65e7b5273bb58802bf0c389b77f7fcae0a1f6139)
 2002-09-25 15:19:00 +00:00
Tim Potter
cd68afe312 Removed version number from file header. 
Changed "SMB/Netbios" to "SMB/CIFS" in file header.
(This used to be commit 6a58c9bd06d0d7502a24bf5ce5a2faf0a146edfa)
 2002-01-30 06:08:46 +00:00
Andrew Tridgell
9126a40e2c added trusted realm support to ADS authentication 
the method used for checking if a domain is a trusted domain is very
crude, we should really call a backend fn of some sort. For now I'm
using winbindd to do the dirty work.
(This used to be commit adf44a9bd0d997ba4dcfadc564a29149531525af)
 2001-12-19 09:53:30 +00:00
Andrew Tridgell
f6b962fba3 fixed some krb5 ifdefs 
(This used to be commit 23ef22f11700bbaa5778a9678a990a2b041fcefe)
 2001-11-28 23:54:07 +00:00
Andrew Tridgell
ad2974cd05 added "net join" command 
this completes the first stage of the smbd ADS support
(This used to be commit 058a5aee901e6609969ef7e1d482a720a84a4a12)
 2001-11-24 14:16:41 +00:00
Jeremy Allison
cfd68eaac4 Ok, I know it's a language thing and it shouldn't matter.... but a kerberos 
name is a "principal", not a principle. English majors will complain :-).
Jeremy.
(This used to be commit b668d7d656cdd066820fb8044f24bcd4fda29524)
 2001-10-21 20:51:27 +00:00
Andrew Bartlett
c41b64d814 Fix for compilation on non-krb5 systems 
(This used to be commit 44bdb8b12b3d6a7bf3148c2ac651a79f10776db6)
 2001-10-21 04:08:15 +00:00
Andrew Tridgell
bbcd9deb07 made smbclient cope better with arbitrary principle forms 
(This used to be commit d1341d74b7aa5f6b3f72e5409b245f87f1ad670b)
 2001-10-21 03:25:34 +00:00
Andrew Tridgell
93645be91f better krb5 error handling (thanks andrewb!) 
(This used to be commit fd3a3daef3b8f7140e7006d30d23d739ac3aad2f)
 2001-10-20 06:50:24 +00:00
Andrew Tridgell
5ad7448359 the beginnings of kerberos support in smbd. It doesn't work yet, but 
it should give something for others to hack on and possibly find what
I'm doing wrong.
(This used to be commit 353c290f059347265b9be2aa1010c2956da06485)
 2001-10-18 10:26:06 +00:00
Andrew Tridgell
b886c3b3fa fix heimdal compilation 
(This used to be commit 888183a17cfb12c0cbf7d1ed515064d6f1716114)
 2001-10-16 12:02:18 +00:00
Andrew Tridgell
9f7cb41f11 added NTLMSSP authentication to libsmb. It seems to work well so I have enabled it by default if the server supports it. Let me know if this breaks anything. Choose kerberos with the -k flag to smbclient, otherwise it will use SPNEGO/NTLMSSP/NTLM 
(This used to be commit 076aa97bee54d182288d9e93ae160ae22a5f7757)
 2001-10-12 04:49:42 +00:00
Andrew Tridgell
2b09ef2a2d improve the error handling in the ASN1 code a bit 
(This used to be commit 8b692d8326a1548a7dbbd2cecee9ece6aa60473a)
 2001-10-11 13:49:08 +00:00
Andrew Tridgell
7cd9c611e2 added a ASN.1 parser, so now I can properly parse the negTokenInit 
packet which means I can extract the service and realm, so we should
now work with realms other than the local realm.

it also means we now check the list of OIDs given by the server just
in case it says that it doesn't support kerberos. In that case we
should fall back to NTLMSSP but that isn't written yet.
(This used to be commit 395cfeea94febb5280ea57027e8a8a3c7c3f9291)
 2001-10-11 13:13:06 +00:00
Andrew Tridgell
8edc45ec4c fixed some memory leaks, started adding asn1 decoder for server side 
(This used to be commit 919734c1a6fd8b3bd0e12e96d878f47b6d6ff5e0)
 2001-10-11 10:29:17 +00:00
Andrew Tridgell
81f56139b6 initial kerberos/ADS/SPNEGO support in libsmb and smbclient. To 
activate you need to:

- install krb5 libraries
- run configure
- build smbclient
- run kinit to get a TGT
- run smbclient with the -k option to choose kerberos auth
(This used to be commit d33057585644e1337bac743e25ed7653bfb39eef)
 2001-10-11 07:42:52 +00:00