1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-11 05:18:09 +03:00
Commit Graph

2740 Commits

Author SHA1 Message Date
Andrew Bartlett
fd5135a63b r3686: The results of some work on the NETLOGON pipe:
Break out the samsync tests from RPC-NETLOGON into a new RPC-SAMSYNC,
that will cross-verify all the values.

Add support for the way netlogon credentials are shared between the
pipe that sets up schannel and the pipe that is encrypted with it.

Test this support, by calling both NETLOGON and SAMR operations in the
RPC-SCHANNEL test.

Move some of the Netlogon NEG flags into the .idl, now we have an idea
what a few of them really are.

Rename the sam_pwd_hash into a name that has meaning (all other crypto
functions were renamed in Samba4 ages ago).

Break out NTLMv2 functionality for operation on the NT hash - I intend
to do NTLMv2 logins in the samsync test in future, and naturally I
only have the hash.

Andrew Bartlett
(This used to be commit 6e6cc6fb98)
2007-10-10 13:05:43 -05:00
Andrew Bartlett
32e368502d r3680: Move the multiple runs of this test into a loop. Also check that no
flags individually have an impact (above what we already expect).

Andrew Bartlett
(This used to be commit 68dd173dc0)
2007-10-10 13:05:43 -05:00
Andrew Bartlett
189783e5b9 r3679: We now know a few more of the Netlogon negotiate flags.
Interestingly, all the interesting flags are a '4' (as hex digits in
the flag).

Andrew Bartlett
(This used to be commit 295e09fa3e)
2007-10-10 13:05:43 -05:00
Andrew Bartlett
8ea4cb31d9 r3678: Remove testing code accidentily commited.
Andrew Bartlett
(This used to be commit cd23ddd0a7)
2007-10-10 13:05:43 -05:00
Andrew Bartlett
a8db4dcf03 r3677: Seperate the SamLogon tests from the main RPC-NETLOGON test into a
RPC-SAMLOGON of their own.

I have expanded the tests to validate the use of various flags, which
change some of the crypto behaviour.

Andrew Bartlett
(This used to be commit 3a140a3691)
2007-10-10 13:05:43 -05:00
Andrew Bartlett
5afda90c95 r3676: Add a negitive test for NTLM2 session security (which should not
appear in netlogon, despite what the LM response may look like).

Make the logon tests less verbose - only print test names on failure.

Andrew Bartlett
(This used to be commit 49c335bcd8)
2007-10-10 13:05:43 -05:00
Jelmer Vernooij
0d696dc0e9 r3667: Small COM fixes
(This used to be commit 7484b9be74)
2007-10-10 13:05:43 -05:00
Volker Lendecke
f847f3a3e1 r3660: This simulates the logon sequence of a XP login session I'm currently tuning
Samba3/OpenLDAP for. For a concrete situation you have to adapt the domain,
pdcname and usernames/passwords. Sorry, not parametrized yet, but this should
be doable if necessary.

Volker
(This used to be commit 02f5205872)
2007-10-10 13:05:42 -05:00
Andrew Tridgell
e7810eeab7 r3658: use handle->fd == -1 as the primary indicator of a directory. This
fixes a directory creation problem from WinXP
(This used to be commit 4b3afc6c39)
2007-10-10 13:05:42 -05:00
Andrew Bartlett
70fbbdfdfd r3657: More netlogon torture. We now test both function calls (SamLogon and SamLogonWithFlags).
Andrew Bartlett
(This used to be commit 7937503849)
2007-10-10 13:05:42 -05:00
Andrew Tridgell
099d8cc972 r3656: allow easy testing of the "realloc changes the pointer" type of problem that abartlet
recently fixed.
(This used to be commit 70e53a21f2)
2007-10-10 13:05:42 -05:00
Andrew Bartlett
5805c780dc r3655: As required by the new torture test, add the LM session key output
parameter to SMBNTLMv2encrypt().

Andrew Bartlett
(This used to be commit 75ff351faf)
2007-10-10 13:05:42 -05:00
Andrew Bartlett
cb700e90c2 r3654: Add static and fix indentation.
Andrew Bartlett
(This used to be commit cef31134ec)
2007-10-10 13:05:42 -05:00
Andrew Bartlett
f1119474fa r3653: Move Interactive login tests up with the rest of the logon tests.
(Hmm, this whole section should be broken out into a new file, I
think).

Add new tests, particularly of the LM key for NTLMv2 responses, and
the (changed, apparently) session key for LMv2 only logins.

Next is to add SAMR modification and cross-validation.

Andrew Bartlett
(This used to be commit be99ee4719)
2007-10-10 13:05:42 -05:00
Andrew Bartlett
017bf499d4 r3652: Fix malloc-history dependent failures in smbtorture.
Because -r 3591 removed the over-allocation, realloc() had a chance of
returning a different pointer.  This broke the length calculations in
the trans2 send code.

I think the length calculations coudld be better expressed (less cute
PTR_DIFF tricks) but I'm not going to touch this any more than I need
to.

Andrew Bartlett
(This used to be commit 4bfc916a2c)
2007-10-10 13:05:42 -05:00
Andrew Bartlett
d1f4ba08df r3651: Add a new configure option --with-eparserdir
This allows us to call 'make eparser_idl', generate the files required
by the ethereal pidl plugin, and put them in the right place.  (See
lorikeet/ethereal)

Andrew Bartlett
(This used to be commit bd9497b092)
2007-10-10 13:05:41 -05:00
Jelmer Vernooij
7fb2523b4c r3636: Fix python build
(This used to be commit 0cf3978714)
2007-10-10 13:05:41 -05:00
Andrew Tridgell
cc0e670156 r3635: fixed the crash from the BASE-DISCONNECT test
(This used to be commit bdabb3f836)
2007-10-10 13:05:41 -05:00
Andrew Tridgell
77ff35de86 r3634: - fixed BASE-DISCONNECT test to force the async packets to be sent by
waiting for a chkpath response

- fixed open async send in BASE-DISCONNECT

with these changes BASE-DISCONNECT crashes Samba4, as it was designed
to do. I'll work on a fix :)
(This used to be commit 25e0138464)
2007-10-10 13:05:41 -05:00
Andrew Tridgell
4815480bb6 r3633: - moved module init functions to after smb.conf and command line
parsing, so that module init can take account of lp_ parms (thats
  why gensec:krb5=no wasn't working)

- added a BASE-DISCONNECT torture test that tests server response to
  clients disconnecting with open lock and open requests pending
(This used to be commit 5205f598b8)
2007-10-10 13:05:41 -05:00
Andrew Tridgell
3351f1aa8d r3632: added an index on "member" in default provision. This speeds up my
connect/disconnect test by a factor of 20x

when andrew gets a chance to change auth_sam.c to not do a search on
member= and instead use the memberOf attribute for the user then we
should delete this index attribute, as maintaining the index is
expensive
(This used to be commit 0443537be8)
2007-10-10 13:05:41 -05:00
Andrew Tridgell
47b91c97cd r3631: a couple of tweaks to the talloc hierarchy for async requests in
pvfs. This prevents a possible crash due to free ordering on
unexpected disconnect.
(This used to be commit bfca9eb7cb)
2007-10-10 13:05:41 -05:00
Jelmer Vernooij
0639758dd9 r3630: More work on DCOM server side
(This used to be commit e995a1c0e5)
2007-10-10 13:05:40 -05:00
Jelmer Vernooij
b3ef49946f r3629: A bit of work on the DCOM server architecture, small fixes
(This used to be commit e7b67ff22f)
2007-10-10 13:05:40 -05:00
Jelmer Vernooij
e056ed97d7 r3626: More minor DCOM fixes
(This used to be commit 709f279b19)
2007-10-10 13:05:40 -05:00
Jelmer Vernooij
73c1f61350 r3625: Couple of minor DCOM bugfixes
(This used to be commit 6f5bf44ade)
2007-10-10 13:05:40 -05:00
Andrew Tridgell
c077300a22 r3618: - this adds the special case for DENY_DOS semantics, as shown by the BASE-DENYDOS test.
- pvfs now passes BASE-DENY1 and BASE-DENYDOS.
(This used to be commit aa09df22ee)
2007-10-10 13:05:40 -05:00
Andrew Tridgell
19fc6e8f51 r3615: split out struct pvfs_file_handle from struct pvfs_file. This is in
preparation for adding code to pass the BASE-DENY1 and BASE-DENYDOS
tests, which require a shared filesystem handle for some specific
combinations of two DENY_DOS opens on the same connection.
(This used to be commit 6e4fdf01d1)
2007-10-10 13:05:40 -05:00
Andrew Tridgell
ce51a06f02 r3613: fixed a typo
(This used to be commit 891e3097ee)
2007-10-10 13:05:40 -05:00
Andrew Bartlett
3dbc38fd6b r3612: This appears to be the 'offical' way to initialise this struct.
Andrew Bartlett
(This used to be commit 47d67c6e5b)
2007-10-10 13:05:40 -05:00
Jelmer Vernooij
8c2e179d47 r3611: DCOM client support works!!
The torture test DCOM-SIMPLE now successfully does an
IStream_Read and a IStream_Write call.

This test can now be run successfully against the "Simple DCOM" Visual
Studio example.

(You have to quote out line 337 in pidl. pidl complains if the variable
 that contains the array size follows the array. I still need to fix this
 properly)

Next goals:
 - Clean up code
 - Server side support
 - Support custom marshalling
 - Support DCOM interfaces in files other then dcom.idl
(This used to be commit 8693344772)
2007-10-10 13:05:39 -05:00
Andrew Tridgell
009892846f r3610: prevent segv with heimdal and password krb5 init
(This used to be commit a4598e7fa1)
2007-10-10 13:05:38 -05:00
Andrew Bartlett
438ca20a3c r3609: Lets spew out a few less error messages for tridge, and hope to get
krb5 going on recent heimdal installs.

Andrew Bartlett
(This used to be commit a758725407)
2007-10-10 13:05:38 -05:00
Andrew Tridgell
d8565f89b7 r3608: added BASE-DENYDOS test
this test demonstrates how w2k3 handles the special semantics of
DENY_DOS when 2 opens happen on the same connection. The 2nd open
doesn't actually do a NTFS open, it happens as a secondary reference
to the same internal file handle in the CIFS layer. The evidence is
that the 2nd open shares the same POSITION_INFORMATION field as the
first open, but only for the special DENY_DOS cases that would
normally be refused.
(This used to be commit eeec57d4f6)
2007-10-10 13:05:38 -05:00
Tim Potter
e0586efe7a r3607: EnumDomainAlises doesn't take a max_size parameter.
(This used to be commit 996d042bf7)
2007-10-10 13:05:38 -05:00
Jelmer Vernooij
f2d715cd85 r3606: More DCOM fixes:
- OXID tables work now. IOXIDResolver is used if there is used for getting a STRINGBINDING if none is known yet
 - Add custom dissectors for STRINGARRAY and DUALSTRINGARRAY. If there's a way to get rid of these later on (by supporting them thru pidl somehow), I'd be happy to use that instead of doing it manually.

I can now get to the point where we have created an object and are connected to
it. The only thing left to do is being able to set the Object UUID properly..
(This used to be commit 54e1e5edca)
2007-10-10 13:05:38 -05:00
Jelmer Vernooij
add049380e r3602: Add looking up transport by endpoint protocol
(This used to be commit 76c02ecbe8)
2007-10-10 13:05:38 -05:00
Jelmer Vernooij
485df40bf9 r3601: Lots of smaller DCOM updates and fixes. Adds oxid tables, proper
use of contexts.
(This used to be commit 93eb3cd99c)
2007-10-10 13:05:38 -05:00
Andrew Tridgell
63b2fef51e r3600: fixed two debug typos
(This used to be commit d0149b173f)
2007-10-10 13:05:37 -05:00
Andrew Tridgell
930f9090ba r3599: fixed a couple of memory errors in the rpc netlogon server
(found with valgrind)
(This used to be commit 151dd4593d)
2007-10-10 13:05:37 -05:00
Andrew Tridgell
396b5bdafe r3598: hopefully fix the build on stratos
(This used to be commit e6e8a9c7f0)
2007-10-10 13:05:37 -05:00
Andrew Tridgell
0c5f2ba38e r3597: implement a suggestion from abartlet. By taking a refernce to the
database in the opendb lck, we ensure that the database is not closed
before the lock is gone. That ensures the lock destructor doesn't work
on a closed database.
(This used to be commit 218e01441a)
2007-10-10 13:05:37 -05:00
Andrew Tridgell
8e7f33e93d r3596: MODE_INFORMATION tests now pass. Only RENAME_INFORMATION level left to
support RAW-SFILEINFO
(This used to be commit 20fc3a25ef)
2007-10-10 13:05:37 -05:00
Andrew Tridgell
2db915e065 r3595: - fixed a talloc_free ordering problem on cleanup with pending requests
- added initial support for MODE_INFORMATION in setfileinfo (I have no
  idea what "mode information" on a file is - it takes a value of 0,
  2, 4 or 6. What could it be?)
(This used to be commit e53ec2f6b6)
2007-10-10 13:05:37 -05:00
Andrew Tridgell
5f608f23d3 r3594: continue conversion to __location__ from __LINE__ for error reporting
(This used to be commit 425e36ca4d)
2007-10-10 13:05:37 -05:00
Andrew Tridgell
92a9d90050 r3593: fixed the trans2 t2open reply to initialise all bytes (bug found by valgrind)
(This used to be commit b8ba6793c1)
2007-10-10 13:05:36 -05:00
Andrew Tridgell
51353ac559 r3592: auto-cleanup the test.$$ log files in these test scripts on control-C
(This used to be commit a07bca1707)
2007-10-10 13:05:36 -05:00
Andrew Tridgell
70bb74eefd r3591: to get a bit more useful info from valgrind I'm disabling the
deliberate over-allocation of request structures in smbd and
libcli/raw code for now.
(This used to be commit 07596d8721)
2007-10-10 13:05:36 -05:00
Tim Potter
e34ee4fdaa r3590: Add some more commands to rpcclient from a patch by jbm. Add
SamrQueryDomInfo, SamrQueryDomInfo2, SamrEnumDomainAliases, and
SamrEnumDomainUsers.
(This used to be commit 91eb405354)
2007-10-10 13:05:36 -05:00
Tim Potter
6c32daf320 r3589: Add some extra status codes.
(This used to be commit 6d918f1595)
2007-10-10 13:05:36 -05:00