1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-14 19:24:43 +03:00

11842 Commits

Author SHA1 Message Date
Stefan Metzmacher
683eb22d3f r21404: packages just contain utf16 strings not guids:-)
metze
(This used to be commit 925f1f40cf8318d0a72fe3da958db52ccbf14b39)
2007-10-10 14:48:26 -05:00
Jelmer Vernooij
e586d112e2 r21403: Add netlogon tests.
(This used to be commit a620dc359476de9440f3b84dc8b45f569d103270)
2007-10-10 14:48:26 -05:00
Stefan Metzmacher
8a9a68b707 r21395: fix comments
metze
(This used to be commit 97fc985bd062b6ad5a58dd6ce883a637043283a1)
2007-10-10 14:48:25 -05:00
Stefan Metzmacher
613acb284f r21392: - decode the salt utf16 string into a unix string
- fix parsing of Primary:Kerberos blob

metze
(This used to be commit c6fa95ef2263774901c8871396b4eec5b7409c5e)
2007-10-10 14:48:25 -05:00
Stefan Metzmacher
03e0d675cf r21391: add supporting for
uint16 size;
[relative,subcontext(0),subcontext_size(size),flag(STR_NOTERM|NDR_REMAINING)] string *string;

as

uint16 size;
[relative,charset(UTF16)] uint8 *string[size];

isn't supported by pidl yet...

metze
(This used to be commit 9fcfa658430f04658c692eb26db9280fda6e4e25)
2007-10-10 14:48:25 -05:00
Stefan Metzmacher
ac8669cf5c r21390: move fetching the key version number into the function
which contrusts the keys...

later we need to get the key version number from the
"replPropertyMetaData" attribute entry to the (I assume)
the "unicodePwd" attribute.

msDs-KeyVersionNumber is a constructed attribute,
and is "1" when no "supplementalCredentials" is present.

we need to make some tests with a password change function
which don't give a cleartext to the server...

metze
(This used to be commit 9e4324221764c1413be34d5b14915a86740acc04)
2007-10-10 14:48:25 -05:00
Stefan Metzmacher
b3d0836eac r21389: give a better error when our parser hasn't consumed all data
metze
(This used to be commit 03b06398a405e491ce4e2bc91513a57e0d59466f)
2007-10-10 14:48:24 -05:00
Jelmer Vernooij
b7a46675fb r21386: Run all NDR tests in the buildfarm, import some functions from Samba3's IDL.
(This used to be commit 15a4b81ba0b5eeb25126a0b1a7bea7d3bf921ab2)
2007-10-10 14:48:24 -05:00
Jelmer Vernooij
0fd2600394 r21384: Change warning to pidl warning, fix uppercasing.
(This used to be commit a45a677084ba1bc63a8f74892c12ca6f0d9b5071)
2007-10-10 14:48:24 -05:00
Jelmer Vernooij
f86444b516 r21381: dfs tests.
(This used to be commit 3ef8a6834df63a0bfa68996daea6432e98243d40)
2007-10-10 14:48:24 -05:00
Stefan Metzmacher
f2d9c313c6 r21380: add idl for parsing the Primary:Kerberos blobs
inside the supplementalCredentials attribute

w2k uses keys1 and keys2 where both seem identical
w2k3 only uses keys1 and num_keys2 = 0

the Salt is only stored once for all keys

the following keys are stored:
ENTYPE_DES_CBC_MD5 = 3
ENTYPE_DES_CBC_CRC = 1

metze
(This used to be commit 03d7d05e4fa607271f84878bc238e7cf0560bc67)
2007-10-10 14:48:23 -05:00
Jelmer Vernooij
3a93b655dd r21378: Add simple NDR epmap test.
(This used to be commit b29170c8eaafa3a573b0e26efecd6cacd68250b6)
2007-10-10 14:48:23 -05:00
Jelmer Vernooij
f88c667e6a r21377: More tests.
(This used to be commit f3680ba118d4de4c535ceabda69e3b9f00424cd6)
2007-10-10 14:48:23 -05:00
Jelmer Vernooij
2ed0f61a62 r21376: More tests.
(This used to be commit 2e2b15e3d258b66c3a150b97748ff6b4eed69a9a)
2007-10-10 14:48:23 -05:00
Jelmer Vernooij
612cfb84d9 r21375: More lsa tests.
(This used to be commit 88fa90778a0e1f5efca08e5e6ba1b165399de30c)
2007-10-10 14:48:22 -05:00
Jelmer Vernooij
5f23c888af r21374: lsa tests
(This used to be commit bfc2a1c50596ac3aee871de63fdd99362a65d7d8)
2007-10-10 14:48:22 -05:00
Jelmer Vernooij
8bcad6b901 r21373: More tests.
(This used to be commit 83a47e30b59f5289cdcb68ba54aa236795bc42b2)
2007-10-10 14:48:22 -05:00
Jelmer Vernooij
a009659e46 r21372: Tests, more tests! Some are still commented out, because the code they test is broken at the moment.
(This used to be commit 8f039a25cd75e4acdaec0afce3cc159b0abe99ec)
2007-10-10 14:48:21 -05:00
Stefan Metzmacher
9a9b197856 r21364: cosmetic change: it's nicer to use the KEYTYPE_ macro
for the keytype field...

metze
(This used to be commit e96aa8980097712d7666a85f17c7214486d99618)
2007-10-10 14:48:20 -05:00
Stefan Metzmacher
cdafaa15b5 r21363: fallback to fetch the KEYTYPE_ARCFOUR out of the "unicodePwd" attribute
when no krb5key attribute is present or it doesn't contain the KEYTYPE_ARCFOUR
key.

metze
(This used to be commit b4af29da700a71fe021c5f31cad31a494d884e07)
2007-10-10 14:48:20 -05:00
Stefan Metzmacher
3b14713f6d r21362: rename:
"ntPwdHash" => "unicodePwd"
"lmPwdHash" => "dBCSPwd"
"sambaLMPwdHistory" => "lmPwdHistory"
"sambaNTPwdHistory" => "ntPwdHistory"

Note: you need to reprovision after this change!

metze
(This used to be commit dc4242c09c0402cbfdba912f82892df3153456ad)
2007-10-10 14:48:20 -05:00
Stefan Metzmacher
72162e08d3 r21360: - put in the correct machine account password into test_secrets.ldb
- don't overwrite the passwords with 'test' as we now understand the windows
  format for the password hashes

metze
(This used to be commit 252a4d67020da19de44893349bd476ec88d5b746)
2007-10-10 14:48:19 -05:00
Stefan Metzmacher
e4d2c67467 r21359: remove the rid encryption before storing the password hashes
We decided to store them plain in our ldb

metze
(This used to be commit ff13b21102641a308bd48a8efa6b94a98f567e15)
2007-10-10 14:48:19 -05:00
Stefan Metzmacher
ced4976d94 r21356: we have a function to get the sites dn
also it's not always under the domain dn

metze
(This used to be commit b8c940f1e2bbd65ed5d2f4279434dd526456ad8b)
2007-10-10 14:48:18 -05:00
Stefan Metzmacher
4878c4c782 r21355: work in child domains, CN=Configuration isn't always under the domain dn
metze
(This used to be commit cdfd4ee8e5202a3df1da2d82b592d8814a3209ba)
2007-10-10 14:48:18 -05:00
Stefan Metzmacher
b92c5d454e r21354: fix comment
metze
(This used to be commit 545f769c2fb29323f2fa06e076af894c0be678d0)
2007-10-10 14:48:18 -05:00
Simo Sorce
7ca399c075 r21351: Change ldb ejs bindings return codes.
We were returning just true/false and discarding error number and string.

This checking probably breaks swat, will fix it in next round as swat
is what made me look into this as I had no way to get back error messages
to show to the users.

Simo.
(This used to be commit 35886b4ae68be475b0fc8b2689ca04d766661261)
2007-10-10 14:48:18 -05:00
Jelmer Vernooij
bd7df755f3 r21350: Add more tests for the NDR layer of winreg. I actually discovered a pidl bug,
so there are still two tests commented out.
(This used to be commit b7f6ec5c1cf6f782991b0f4f05283d6da2c2dfe8)
2007-10-10 14:48:17 -05:00
Simo Sorce
d090fddd14 r21348: Fix the build.
(This used to be commit 4d52b429261de6712e25d9db9d3be597ff1d74b8)
2007-10-10 14:48:17 -05:00
Jelmer Vernooij
25a0c9146e r21347: All current tests in the testsuite mainly test the RPC code in general. Since
we're running the testsuite mainly against ourselves, we only check that the
push/pull functions work in our own environment, not whether they generate/parse
the same data that other systems do.

This commit adds the infrastructure for a testsuite for just the marshalling
code. The idea is that you provide a data blob, a function name and a function
to check the resulting struct for correctness.
(This used to be commit 9bd2421e44dcfcaf08ad61cf25bb7714cf885517)
2007-10-10 14:48:17 -05:00
Jelmer Vernooij
be852780b4 r21343: Add access masks, pointed out by Ronnie Sahlberg.
(This used to be commit e8cdfd0a61354b7a5da43c27e9af4695cfa168d6)
2007-10-10 14:48:16 -05:00
Stefan Metzmacher
57b22d9df2 r21342: add parsing code for the trustAuthIncoming/trustAuthOutgoing attributes
not everything has a meaning yet, but it's a start and we know how to get
to the password in cleartext

metze
(This used to be commit 65641181f782349f1f0192d1c95254e80e2b3887)
2007-10-10 14:48:16 -05:00
Jelmer Vernooij
600c167e3b r21341: Improve QueryKeyInfo idl, pointed out by Ronnie Sahlberg.
(This used to be commit 736330d23b1f723d3564043c0670dbd6bee3742f)
2007-10-10 14:48:16 -05:00
Jelmer Vernooij
627fc22791 r21340: Fix warning undef
(This used to be commit 2669f2c8ad09505b37f64104eefce6f0b10e9ab5)
2007-10-10 14:48:15 -05:00
Jelmer Vernooij
a7fa0d7063 r21338: Fix handling of top-level arrays for the Samba 3 client code. This doesn't
fix the winreg code yet (as that's an array on top of a pointer), but at least
it gets us closer.

Also added a couple of tests for the Samba 3 client code.
(This used to be commit 4a5b62ad622d7be08591e19bc2e89f665fff445a)
2007-10-10 14:48:15 -05:00
Stefan Metzmacher
98fce3d3b5 r21337: add hack option to use DsGetNCChanges level 5 against w2k
metze
(This used to be commit 66c8499e5f2f139995be8cb5770d238f383059d6)
2007-10-10 14:48:15 -05:00
Stefan Metzmacher
93690e31c3 r21335: add dssync:save_pwd_blobs_dir=path/ option to store the password blobs
in files for inspection with ndrdump

metze
(This used to be commit 54748ef5860ee59b5f84855965c84aa8787fb4b6)
2007-10-10 14:48:15 -05:00
Stefan Metzmacher
6496fab3b6 r21334: compare the original buffer and the validated one byte by byte
and print out the first mismatch

metze
(This used to be commit 6ac574660a0656341d7a311738d20b328f31ff78)
2007-10-10 14:48:14 -05:00
Stefan Metzmacher
76a1ecccc5 r21333: fix POPT handling in ndrdump
make --validate, --dump-data work again

metze
(This used to be commit 654acc67344c097106b2f9859b5cbd973d95340f)
2007-10-10 14:48:14 -05:00
Jelmer Vernooij
e50dc79226 r21332: Fix bug in pidl that prevented value(0) from working. Bug reported by metze.
(This used to be commit 8212a3b8e0d3d59264f659c3f657b165ececefeb)
2007-10-10 14:48:14 -05:00
Stefan Metzmacher
86c5fe1990 r21331: add comment about how the cleartext password is stored
metze
(This used to be commit 2b7d7487510898dffc900bfcec88ed57c709858c)
2007-10-10 14:48:14 -05:00
Stefan Metzmacher
bd3d88c69d r21330: move fetching of krb5 keys into its own function
metze
(This used to be commit 0f1eb00b418eabef5881f94d8df2b4d61f1dc1ef)
2007-10-10 14:48:13 -05:00
Stefan Metzmacher
9c21efd9d6 r21329: complete support for parsing the supplementalCredentials value
the package specific data is present as hex string,
we'll need to add parsers for each package later.

metze
(This used to be commit 6a725ae2610ba3d8f95782f90745593d436a4786)
2007-10-10 14:48:13 -05:00
Stefan Metzmacher
4dbf4e1917 r21323: add a start to parse the supplementalCredentials value,
it doesn't work yet but it's a start

metze
(This used to be commit 0417e12c84836c02e26f09c598ae5f2a7d5427b6)
2007-10-10 14:48:10 -05:00
Stefan Metzmacher
1f2b94b7b7 r21317: this happens very often when you have multihomed nodes
and isn't an error.

metze
(This used to be commit 6f5e084a7b9a80a3f86799f7e86a63aa0334fa2a)
2007-10-10 14:48:09 -05:00
Stefan Metzmacher
aa5677040c r21316: if we got an unexpected nbt packet that most times mean
we got a 2nd answer to a broadcast message and have already remove
the packet id from out list while getting the first response

metze
(This used to be commit 8c26e04900da02bdf440f1d48b512e2550e89c34)
2007-10-10 14:48:09 -05:00
Stefan Metzmacher
43a0c615a3 r21315: ldb now supports filters like (&(dn=%s)(&(objectClass=kerberosSecret)(privateKeytab=*))) again
we can use such a filter:-)

we should only update the keytab for records matching this filter,
that means we need to do a search before calling cli_credentials_set_secrets()

metze
(This used to be commit 23adca4e3426360fe0685548ae2b808578f6ba75)
2007-10-10 14:48:09 -05:00
Stefan Metzmacher
41771deb29 r21314: add more usefull debug output
metze
(This used to be commit a246e4bbaaab6f98f50a3c28b47d2c541af7b44a)
2007-10-10 14:48:08 -05:00
Stefan Metzmacher
f14c66ca30 r21311: fix very ugly "using free'ed memory" bug
This was there since 2005...

metze
(This used to be commit 393e4eeb82df8017eb0afb526f4d723cf8814311)
2007-10-10 14:48:08 -05:00
Stefan Metzmacher
08de05ce5a r21307: make it possible to pass in NULL for domain or rid,
if someone isn't interessted in one of it

metze
(This used to be commit 1fdc71918a430c35af91fa7788e191d381f76d56)
2007-10-10 14:48:08 -05:00