1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-13 13:18:06 +03:00

3406 Commits

Author SHA1 Message Date
Andrew Bartlett
cec158231b r4678: Add some const to LDB.
Andrew Bartlett
(This used to be commit d4da9fb1600dba5daca9acb83f528c8f5f42f0ce)
2007-10-10 13:08:42 -05:00
Stefan Metzmacher
0385de8b1f r4677: stub.pm must be synced with server.pm
metze
(This used to be commit b467635c2dd90dc40e2358b8d18bec238a85786f)
2007-10-10 13:08:41 -05:00
Stefan Metzmacher
945180f676 r4676: NTTIME_1sec is a standard NTTIME for the calling code
as it's already converted in the pull/push code

metze
(This used to be commit 0d2286ba56fa8d25244a5554e75b5be24eba28b0)
2007-10-10 13:08:41 -05:00
Andrew Bartlett
1a71331ebc r4675: Prevent global warming, and save tridge's sainity by short-cutting the
testsuite for all the different flag types.  (We really only need to
know if we are getting the session key crypto stuff right, and one
call can tell us that).

Andrew Bartlett
(This used to be commit 8807498f6d3ff248c4d42bf18db45cfe25bd3b2f)
2007-10-10 13:08:41 -05:00
Andrew Bartlett
7b4d1a4448 r4674: Test SetSecret behaviour for local and global secrets, when setting
only the OLD secret value.

Andrew Bartlett
(This used to be commit 5853af89c8dd5c4d6220f395bcc18708398999af)
2007-10-10 13:08:41 -05:00
Andrew Bartlett
462ef44745 r4673: Fix the IDL for the QuerySecret LSA call.
This call uses a new IDL type, NTTIME_hyper.  This is 8-byte aligned,
as the name suggests.

Expand the QuerySecret LSA calls in RPC-SAMLOGON and RPC-LSA, to
validate the behaviour of times, and of the old secrets.

Thanks to tridge for spotting the use of HYPER!

Andrew Bartlett
(This used to be commit 1fed79cb0f2ae7940639d08ef99576559d4cd06e)
2007-10-10 13:08:40 -05:00
Andrew Tridgell
70071c2114 r4672: added the "spnego" flag to the binding string docs
(This used to be commit 360aa583e7359a2e653d385a8d3c7977fd9614d1)
2007-10-10 13:08:40 -05:00
Andrew Bartlett
4e89127786 r4671: Expand the RPC-LSA test to set secret values twice.
Andrew Bartlett
(This used to be commit 357d9114f002a607f80985588bbac150fa40d2bc)
2007-10-10 13:08:40 -05:00
Andrew Tridgell
097d568383 r4670: abartlet was worried about floating point precision with my first
version - here is one based purely on 64 bit math
(This used to be commit 1ff04b0dc3e680b6288622576bb373359a594c2f)
2007-10-10 13:08:40 -05:00
Andrew Tridgell
a7a5c98e29 r4669: a timeval_to_nttime() function as requested by abartlet. Andrew, its
your responsibility to use/test this :-)
(This used to be commit 2107b0cd7661a631952742bae241cb165b05c5f2)
2007-10-10 13:08:40 -05:00
Andrew Bartlett
fdfa2adcb1 r4667: Don't follow a NULL pointer for an idle event handler.
Fix up some header comments.

Andrew Bartlett
(This used to be commit 62005a3924e2af52c7173098b0b38eca14e03609)
2007-10-10 13:08:40 -05:00
Andrew Tridgell
a36f456adf r4664: SPNEGO auth in our rpc server now works, so add it to the battery of
tests in test_rpc.sh
(This used to be commit 69ffbd4cedaddd71fad9bab2375dc634479c0ed6)
2007-10-10 13:08:40 -05:00
Andrew Tridgell
5423fd3b35 r4663: fixed SPNEGO auth in the rpc server
(This used to be commit 439cbb9ead2443513ecc84f5638924e056ebdc73)
2007-10-10 13:08:40 -05:00
Andrew Bartlett
daf67d76fc r4660: Test what we should return for a secret that does not exist.
Andrew Bartlett
(This used to be commit a17a8fbf9a843c2c9e10940878b43ad8e1583091)
2007-10-10 13:08:39 -05:00
Andrew Bartlett
4fc38af93b r4659: Revert -r 4657 committed by mistake, until I review and test the
changes (which were to use the common ARCFOUR code for random number
generation).

Andrew Bartlett
(This used to be commit 50b3f64a8d555941499f41a7f43819474b81d4b8)
2007-10-10 13:08:39 -05:00
Andrew Bartlett
28236430f4 r4658: (grr, commited wrong file last time).
We really should have a seperate structure for this (the ARCFOUR
sbox), but for now, get the declaration right.

Andrew Bartlett
(This used to be commit 2e16f3a8d31954fdfe4a8832637fcd9191ecab96)
2007-10-10 13:08:39 -05:00
Andrew Bartlett
7b91c309b8 r4657: This really should be made a structure, so we can't get it wrong, but
in the meantime, get the declaration right...

Andrew Bartlett
(This used to be commit 1c65db94f03457335133210bda488e2e21209f9a)
2007-10-10 13:08:39 -05:00
Stefan Metzmacher
fd4831f1f0 r4650: - make more use of bitmap and enum's
- move some structs out of misc.idl

metze
(This used to be commit b6543a6e3057b5588ec50a2ebf6c7c932209efe6)
2007-10-10 13:08:39 -05:00
Stefan Metzmacher
860a3fb216 r4649: make more use of bitmap and enum's
metze
(This used to be commit fa798fe1f0c39dfee7d4c86a8cd5924be8a32922)
2007-10-10 13:08:39 -05:00
Stefan Metzmacher
a070551e7a r4648: fix netr_ServerPasswordSet() bugs
metze
(This used to be commit 7feface9b77f2be4f592d04a6131348af761a8e8)
2007-10-10 13:08:39 -05:00
Stefan Metzmacher
0457324cc8 r4647: - use talloc_zero() instead of ZERO_STRUCTP()
- fix uninitialized memory bug found by valgrind

metze
(This used to be commit 1118a1b1bb09c9a369bb9600fbe8ad3523b7e36f)
2007-10-10 13:08:38 -05:00
Andrew Tridgell
cab7e90ae5 r4644: allow DSSETUP on ncacn_ip_tcp
(This used to be commit 6f2019c307161953291f6bb5401eefaa7edc3857)
2007-10-10 13:08:38 -05:00
Andrew Tridgell
8de979d313 r4643: RPC-ALTERCONTEXT now passes
(This used to be commit 153e068711623af94f9a53b20d114b254d42c2a3)
2007-10-10 13:08:38 -05:00
Andrew Tridgell
34f6485dda r4642: added support for alter_context in the server for adding new interfaces to an existing pipe
(This used to be commit b6af57c86829aadc261cd7b79091cef17c15b967)
2007-10-10 13:08:38 -05:00
Andrew Bartlett
e8c06b9221 r4641: Push a few more details into the schannel ldb, and into the
credentials struct it maintains.

Clearly much of this will be replaced with some system to pass and
store the session_info, as that is the 'right way' to handle this.

Andrew Bartlett
(This used to be commit c6fcb33a887fbf0c0b42c3bc331df942a985128c)
2007-10-10 13:08:38 -05:00
Andrew Tridgell
577218b2ad r4640: first stage in the server side support for multiple context_ids on one pipe
this stage does the following:

 - simplifies the dcerpc_handle handling, and all the callers of it

 - split out the context_id depenent state into a linked list of established contexts

 - fixed some talloc handling in several rpc servers that i noticed while doing the above
(This used to be commit fde042b3fc609c94e2c7eedcdd72ecdf489cf63b)
2007-10-10 13:08:38 -05:00
Stefan Metzmacher
3136462ea9 r4639: initialize all struct members!
tridge: sorry for making you such a pain...
        could you check if that fixes your bugs

metze
(This used to be commit c215372eb0916df1e532b77c8365f401a8c32a38)
2007-10-10 13:08:37 -05:00
Andrew Tridgell
0c75667594 r4638: expose lsa and drsuapi on ncalrpc
(This used to be commit 4e62bd2a349c0cce8cb82a401fdf1cc33828af6f)
2007-10-10 13:08:37 -05:00
Stefan Metzmacher
d4f4f4b9f3 r4637: log packets when the server code returns an DCERPC_FAULT
metze
(This used to be commit 64805e5dc58ad1d1fefc3e36158131fa2d531592)
2007-10-10 13:08:37 -05:00
Andrew Bartlett
e2c71f0bf5 r4636: Per tridge's wish (and probably correct behaviour), don't key off a
specific GENSEC mech type, but on the behaviour of the mech.

Andrew Bartlett
(This used to be commit f2bd7a5a699b91d99d7dc2a0b3b6c7006274a59c)
2007-10-10 13:08:37 -05:00
Andrew Bartlett
7db9de3ea9 r4635: Fix NTLMSSP to return NT_STATUS_OK when it has constructed the auth
token in the client (the final token in the negotiation).

Consequential fixes in the SPNEGO code, which now uses the out.length
as the indicator of 'I need to send something to the other side'.

Merge the NTLM and SPNEGO DCE-RPC authentication routines in the client.

Fix the RPC-MULTIBIND test consequent to this merge.

Andrew Bartlett
(This used to be commit 43e3516fc03008e97ebb4ad1a0cde464303f43c6)
2007-10-10 13:08:37 -05:00
Stefan Metzmacher
047d41cc49 r4634: disable sign and seal in ldap_server for now.
metze
(This used to be commit 872c687184e5317b4477a184e0a954e6de0b8e9e)
2007-10-10 13:08:37 -05:00
Andrew Tridgell
d45e54ea57 r4632: added spnego testing and no-auth testing in test_w2k3.sh
(This used to be commit 4f30220a5aafb2843e486be4a743e0fe9e9f462c)
2007-10-10 13:08:36 -05:00
Andrew Tridgell
2126b75664 r4631: don't consider an epmapper insert as a failure for the moment
(This used to be commit ba6caa99a454cb3393c8898f1e5be4a432b820c4)
2007-10-10 13:08:36 -05:00
Andrew Tridgell
e1f0e09203 r4630: for ncacn_np if we don't have an explicit request for one of the
advanced auth types we should do a plain bind. This fixes rpc
connections to ancient servers (like sun cascade)
(This used to be commit 59a5a0b218f7182c541a06ffc4528c1160699033)
2007-10-10 13:08:36 -05:00
Stefan Metzmacher
b343cc97de r4629: we now have a global macro NT_STATUS_HAVE_NO_MEMORY()
so don't use a local one

metze
(This used to be commit dd217f7916c885e1395f6f2a78e38e10f56e5f0f)
2007-10-10 13:08:36 -05:00
Stefan Metzmacher
e1426c51ab r4628: this function should be static
metze
(This used to be commit 590afa88f15c32bc14b2c23e2c57b3401d9c3de7)
2007-10-10 13:08:35 -05:00
Andrew Tridgell
5da3f75a59 r4627: - simplified the dcerpc auth code using a common function
- added support for "spnego" in binding strings. This enables SPNEGO
  auth in the dcerpc client code, using as many allter_context calls as
  are needed

To try SPNEGO do this:

  smbtorture ncacn_ip_tcp:SERVER[spnego,seal] -Uadministrator%password RPC-SAMR
(This used to be commit 9c0a3423f03111c110d21c0d3910e16aa1a8bf87)
2007-10-10 13:08:35 -05:00
Andrew Tridgell
f6596e4ae7 r4626: Jelmer, can you look at why this init is failing? It is preventing all tools from working
(This used to be commit e59c5adf39c2c840a40a62485195167f80b9ef53)
2007-10-10 13:08:35 -05:00
Andrew Tridgell
575e981639 r4625: added a test that demonstrates that once a context_id is established,
it can't be changed (so you have to create a new context_id, not
change the interface bound to an existing one)
(This used to be commit 5f10a8f8d04d627927d9870c87d6e7d8b98d563c)
2007-10-10 13:08:35 -05:00
Jelmer Vernooij
1b1b678cc8 r4624: Several crash fixes for DCOM
More work on the example class implementation
(This used to be commit 1f8f4dd179d5aa0472c676d115dc2fc1749ce32d)
2007-10-10 13:08:35 -05:00
Jelmer Vernooij
1303f51099 r4623: Convert values from UTF8 to UTF16 in gconf registry backend (caught
by Andrew Bartlett)
(This used to be commit da3c7712d234291f9c5a3c48daae02bdf0878bf0)
2007-10-10 13:08:35 -05:00
Volker Lendecke
fd9a4436c0 r4622: Clarify a comment a bit
(This used to be commit e76d486b04ee114087a69a659fbc47e585e71510)
2007-10-10 13:08:35 -05:00
Jelmer Vernooij
9ca6e19767 r4621: Add torture tests for epm_Insert and epm_Delete
(This used to be commit b1ff60667038aa1e2d7c6ad2015ba33ac5a90dc6)
2007-10-10 13:08:35 -05:00
Stefan Metzmacher
46a32687da r4620: - add interface functions to the auth subsystem so that callers doesn't need to
use function pointers anymore
- make the module init much easier
- a lot of cleanups

don't try to read the diff in auth/ better read the new files

it passes test_echo.sh and test_rpc.sh

abartlet: please fix spelling fixes

metze
(This used to be commit 3c0d16b8236451f2cfd38fc3db8ae2906106d847)
2007-10-10 13:08:34 -05:00
Jelmer Vernooij
b61b22d73a r4619: Remove extern declaration of dcerpc_pipes, which is now static
(This used to be commit 95e849bf94160ae4807a54b28e351539c1119215)
2007-10-10 13:08:34 -05:00
Andrew Tridgell
e74b3ed6f1 r4618: - tidied up the alter_context client code a bit
- there is no alter_nak or alter_ack packet, its all done in an
  alter_response

- auto-allocated the contex_ids

- tried to fix up the dcom code to work again with
  alter_context. Jelmer, please take a look :)
(This used to be commit dd1c54add8884376601f2f8a56c01bfb8add030c)
2007-10-10 13:08:34 -05:00
Andrew Tridgell
ab9ca55926 r4617: basic alter_context requests now work in our client library. The test
just does a simple LSA/DSSETUP combo, which is what w2k does in the
ACL editor rpc calls that triggered this work
(This used to be commit 0129ec947aa1fa5a7104dc3a666af3cb9bd104f1)
2007-10-10 13:08:34 -05:00
Andrew Tridgell
6836f5d0b1 r4616: the first phase in the addition of proper support for
dcerpc_alter_context and multiple context_ids in the dcerpc client
library.

This stage does the following:

 - split "struct dcerpc_pipe" into two parts, the main part being "struct dcerpc_connection", which
   contains all the parts not dependent on the context, and "struct dcerpc_pipe" which has
   the context dependent part. This is similar to the layering in libcli_*() for SMB

 - disable the current dcerpc_alter code. I've used a #warning until i
   get the 2nd phase finished. I don't know how portable #warning is, but
   it won't be long before I add full alter context support anyway, so it won't last long

 - cleanup the allocation of dcerpc_pipe structures. The previous code
   was quite awkward.
(This used to be commit 4004c69937be7e5dae56f9567ca607f982d395d3)
2007-10-10 13:08:34 -05:00
Andrew Tridgell
3feb4423f3 r4615: added acl checking on directory search in pvfs
(This used to be commit 0e61a422bd9a1596a284c176f033e958bbeaa8ce)
2007-10-10 13:08:33 -05:00