Author: metze Date: 2005-09-16 05:57:49 +0000 (Fri, 16 Sep 2005) New Revision: 10254
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=10254 Log: [EMAIL PROTECTED] (orig r10171): abartlet | 2005-09-12 15:16:56 +0200 This seems to work for encoding/decoding a PAC at the buffers only level (required for signature verification). Andrew Bartlett [EMAIL PROTECTED] (orig r10172): jelmer | 2005-09-12 15:49:51 +0200 Add --dump-ndr-tree argument [EMAIL PROTECTED] (orig r10173): jelmer | 2005-09-12 15:52:15 +0200 Document new option [EMAIL PROTECTED] (orig r10174): abartlet | 2005-09-12 16:19:05 +0200 This patch implements generic PAC verification, without assumptions about the size of the signature. In particular, this works with AES, which was previously broken Samba4/Samba4. Reviewed by metze (and thanks for help with the previous IDL commit). [EMAIL PROTECTED] (orig r10181): jelmer | 2005-09-12 23:10:40 +0200 Fix the build [EMAIL PROTECTED] (orig r10184): tpot | 2005-09-12 23:37:18 +0200 Fix a stack of unhandled enumeration warnings. [EMAIL PROTECTED] (orig r10185): tpot | 2005-09-12 23:40:40 +0200 Fix another two sets of unhandled enumeration warnings, plus correct some awful indentation. (-: [EMAIL PROTECTED] (orig r10190): jelmer | 2005-09-13 01:52:25 +0200 Do some very basic input checking when provisioning. [EMAIL PROTECTED] (orig r10191): jelmer | 2005-09-13 02:01:24 +0200 Return the right error code in the case of a time skew. Windows will now ignore Kerberos and fallback to NTLMSSP when joining. Thanks to Andrew Bartlett for the assistence. [EMAIL PROTECTED] (orig r10192): tridge | 2005-09-13 03:01:55 +0200 [EMAIL PROTECTED]: tridge | 2005-08-30 23:06:37 +1000 added a ldb.close() method in js. Useful for re-opening the db [EMAIL PROTECTED] (orig r10193): tridge | 2005-09-13 03:02:06 +0200 [EMAIL PROTECTED]: tridge | 2005-08-30 23:08:27 +1000 if we fail to erase a ldb during provision by traversing and deleting records (an in-place erase) then just unlink it and start it again. This makes provisioning much more robust to changes in ldb that make it not backward compatible with old DBs. [EMAIL PROTECTED] (orig r10197): tpot | 2005-09-13 08:39:40 +0200 Assume that external dissectors are structs which I think is always the case. [EMAIL PROTECTED] (orig r10199): tridge | 2005-09-13 14:44:33 +0200 added a LOCAL-RESOLVE torture test, useful for measuring the overhead of the async name resolution mechanisms [EMAIL PROTECTED] (orig r10200): tridge | 2005-09-13 14:46:03 +0200 added a composite_trigger_done() call that allows a composite function to cause an event to happen immediately. This allows metzes patch for recognising IPs in resolve_name() to work, and also allows us to remove some of the other code where we currently do specific checks for is_ipaddress(). [EMAIL PROTECTED] (orig r10207): jelmer | 2005-09-13 19:28:18 +0200 Add some const [EMAIL PROTECTED] (orig r10212): deryck | 2005-09-13 23:31:40 +0200 An IE fix. Must set initial values in the onload function. deryck [EMAIL PROTECTED] (orig r10213): tridge | 2005-09-14 00:05:45 +0200 fixed a memory leak in the ldap client and server code spotted by Karl Melcher. ldap_encode() now takes a memory context to use for the data blob [EMAIL PROTECTED] (orig r10216): tridge | 2005-09-14 00:58:38 +0200 Chris Samuel pointed out that we should note the need to run provision as a user with write permission on the install directory [EMAIL PROTECTED] (orig r10225): deryck | 2005-09-14 17:08:46 +0200 Adding back a style rule to qooxdoo that was originally removed. This is a cross browser hack that makes for better performance amone differing browsers. deryck [EMAIL PROTECTED] (orig r10228): deryck | 2005-09-14 23:48:03 +0200 Reorganizing a bit, trying to simplify. This is an attempt to find what's going wrong in IE formatting. This is some better, but still IE needs help. deryck [EMAIL PROTECTED] (orig r10231): idra | 2005-09-15 00:39:24 +0200 seem I flipped these, fix. [EMAIL PROTECTED] (orig r10232): idra | 2005-09-15 00:45:49 +0200 Some work on ldb_sqlite3. It is still far from being usable in samba4 but I want to commit so that the work does not get lost by mistake. This is also a good way to get comments if somebody is interested. Sorry Derrell I ended up rewriting large parts of the code but I find this style much more readable. Thanks for the hard work done. Your work was a good reference for me. ah the current code also shows some good numbers sqlite3 generic test: uid search took 0.05 seconds real 0m12.492s user 0m0.492s sys 0m0.345s with tdb we still get better numbers: uid search took 0.46 seconds real 0m0.892s user 0m0.360s sys 0m0.468s but most of the time is spent in adding operations and I think there's still a lot of space for improvement. Simo. [EMAIL PROTECTED] (orig r10233): idra | 2005-09-15 01:14:42 +0200 add commented PRAGMA to avoid fsyncs [EMAIL PROTECTED] (orig r10236): idra | 2005-09-15 09:23:15 +0200 fix (C) note [EMAIL PROTECTED] (orig r10237): metze | 2005-09-15 11:55:16 +0200 fix parameter, how have I missed this...? metze [EMAIL PROTECTED] (orig r10238): tpot | 2005-09-15 12:20:08 +0200 Add a entry for sec_info to treat it as a uint32 for now. [EMAIL PROTECTED] (orig r10245): jelmer | 2005-09-15 21:52:13 +0200 Get rid of XFILE in a few places. Add fdprintf() and vfdprintf() helper functions. [EMAIL PROTECTED] (orig r10246): jelmer | 2005-09-15 22:03:35 +0200 Remove unused function Move auth-specific file to auth/ [EMAIL PROTECTED] (orig r10250): idra | 2005-09-16 01:06:57 +0200 the comparison is caseless so we must caseless subtract otherwise we get the wrong result when comparing upper case chars with lower case chars [EMAIL PROTECTED] (orig r10251): idra | 2005-09-16 01:10:07 +0200 some more work on ldb_sqlite3 I must say that writing a new module is a very good way to find lot of subtle bugs laying in the code We need more tests! commit oLschema2ldif.c to keep it safe from data losses (rm -fr :-) update test generic to reflect the fix made on comparsion functions [EMAIL PROTECTED] (orig r10252): tridge | 2005-09-16 05:18:49 +0200 a recent checkin from simo changed the handling of BASE and SUBTREE searches in ldb to be more ldap compliant, but broke the wins server and the ejs ldb code. This fixes those up so 'make test' passes again. [EMAIL PROTECTED] (orig r10253): tridge | 2005-09-16 05:52:42 +0200 a fairly large tdb cleanup and re-organise. Nearly all of this change just involves splitting up the core tdb.c code into separate files on logical boundaries, but there are some minor functional changes as well: - move the 'struct tdb_context' into tdb_private.h, hiding it from users. This was done to allow the structure to change without breaking code that uses tdb. - added accessor functions tdb_fd(), tdb_name(), and tdb_log_fn() to access the elements of struct tdb_context that were used by external code but are no longer visible - simplied tdb_append() to use tdb_fetch()/tdb_store(), which is just as good due to the way tdb locks work - changed some of the types (such as tdb_off to tdb_off_t) to make syntax highlighting work better - removed the old optional spinlock code. It was a bad idea. - fixed a bug in tdb_reopen_all() that caused tdbtorture to sometimes fail or report nasty looking errors. This is the only real bug fixed in this commit. Jeremy/Jerry, you might like to pickup this change for Samba3, as that could definately affect smbd in Samba3. The aim of all of these changes is to make the tdb transactions/journaling code I am working on easier to write. I started to write it on top of the existing tdb.c code and it got very messy. Splitting up the code makes it much easier to follow. There are more cleanups we could do in tdb, such as using uint32_t instead of u32 (suggested by metze). I'll leave those for another day. Added: branches/tmp/samba4-winsrepl/source/auth/pam_errors.c branches/tmp/samba4-winsrepl/source/lib/tdb/common/dump.c branches/tmp/samba4-winsrepl/source/lib/tdb/common/error.c branches/tmp/samba4-winsrepl/source/lib/tdb/common/freelist.c branches/tmp/samba4-winsrepl/source/lib/tdb/common/io.c branches/tmp/samba4-winsrepl/source/lib/tdb/common/lock.c branches/tmp/samba4-winsrepl/source/lib/tdb/common/open.c branches/tmp/samba4-winsrepl/source/lib/tdb/common/tdb_private.h branches/tmp/samba4-winsrepl/source/lib/tdb/common/traverse.c branches/tmp/samba4-winsrepl/source/lib/tdb/include/tdbconfig.h.in branches/tmp/samba4-winsrepl/source/torture/local/resolve.c Removed: branches/tmp/samba4-winsrepl/source/lib/pam_errors.c branches/tmp/samba4-winsrepl/source/lib/tdb/common/spinlock.c branches/tmp/samba4-winsrepl/source/lib/tdb/include/spinlock.h Modified: branches/tmp/samba4-winsrepl/ branches/tmp/samba4-winsrepl/howto.txt branches/tmp/samba4-winsrepl/source/auth/config.mk branches/tmp/samba4-winsrepl/source/auth/kerberos/kerberos_pac.c branches/tmp/samba4-winsrepl/source/gtk/tools/gregedit.c branches/tmp/samba4-winsrepl/source/heimdal/kdc/kerberos5.c branches/tmp/samba4-winsrepl/source/ldap_server/ldap_rootdse.c branches/tmp/samba4-winsrepl/source/ldap_server/ldap_server.c branches/tmp/samba4-winsrepl/source/lib/basic.mk branches/tmp/samba4-winsrepl/source/lib/cmdline/readline.c branches/tmp/samba4-winsrepl/source/lib/credentials.c branches/tmp/samba4-winsrepl/source/lib/db_wrap.c branches/tmp/samba4-winsrepl/source/lib/ldb/common/attrib_handlers.c branches/tmp/samba4-winsrepl/source/lib/ldb/common/ldb_dn.c branches/tmp/samba4-winsrepl/source/lib/ldb/ldb_sqlite3/ldb_sqlite3.c branches/tmp/samba4-winsrepl/source/lib/ldb/ldb_sqlite3/ldb_sqlite3.h branches/tmp/samba4-winsrepl/source/lib/ldb/ldb_tdb/ldb_search.c branches/tmp/samba4-winsrepl/source/lib/ldb/ldb_tdb/ldb_tdb_wrap.c branches/tmp/samba4-winsrepl/source/lib/ldb/tests/test-generic.sh branches/tmp/samba4-winsrepl/source/lib/ldb/tests/test-sqlite3.sh branches/tmp/samba4-winsrepl/source/lib/ldb/tools/oLschema2ldif.c branches/tmp/samba4-winsrepl/source/lib/registry/common/reg_interface.c branches/tmp/samba4-winsrepl/source/lib/registry/reg_backend_dir.c branches/tmp/samba4-winsrepl/source/lib/registry/reg_backend_ldb.c branches/tmp/samba4-winsrepl/source/lib/registry/reg_backend_nt4.c branches/tmp/samba4-winsrepl/source/lib/registry/reg_backend_rpc.c branches/tmp/samba4-winsrepl/source/lib/registry/reg_backend_w95.c branches/tmp/samba4-winsrepl/source/lib/registry/regf.idl branches/tmp/samba4-winsrepl/source/lib/registry/registry.h branches/tmp/samba4-winsrepl/source/lib/socket/connect.c branches/tmp/samba4-winsrepl/source/lib/tdb/Makefile.in branches/tmp/samba4-winsrepl/source/lib/tdb/autogen.sh branches/tmp/samba4-winsrepl/source/lib/tdb/common/tdb.c branches/tmp/samba4-winsrepl/source/lib/tdb/common/tdbutil.c branches/tmp/samba4-winsrepl/source/lib/tdb/config.m4 branches/tmp/samba4-winsrepl/source/lib/tdb/config.mk branches/tmp/samba4-winsrepl/source/lib/tdb/configure.in branches/tmp/samba4-winsrepl/source/lib/tdb/include/tdb.h branches/tmp/samba4-winsrepl/source/lib/tdb/include/tdbutil.h branches/tmp/samba4-winsrepl/source/lib/tdb/tools/tdbdump.c branches/tmp/samba4-winsrepl/source/lib/tdb/tools/tdbtest.c branches/tmp/samba4-winsrepl/source/lib/tdb/tools/tdbtool.c branches/tmp/samba4-winsrepl/source/lib/tdb/tools/tdbtorture.c branches/tmp/samba4-winsrepl/source/lib/util_file.c branches/tmp/samba4-winsrepl/source/libcli/cldap/cldap.c branches/tmp/samba4-winsrepl/source/libcli/composite/composite.c branches/tmp/samba4-winsrepl/source/libcli/composite/connect.c branches/tmp/samba4-winsrepl/source/libcli/ldap/ldap.c branches/tmp/samba4-winsrepl/source/libcli/ldap/ldap_client.c branches/tmp/samba4-winsrepl/source/libcli/resolve/resolve.c branches/tmp/samba4-winsrepl/source/libcli/security/access_check.c branches/tmp/samba4-winsrepl/source/librpc/idl/krb5pac.idl branches/tmp/samba4-winsrepl/source/librpc/idl/winreg.cnf branches/tmp/samba4-winsrepl/source/librpc/rpc/dcerpc_util.c branches/tmp/samba4-winsrepl/source/nbt_server/wins/winsdb.c branches/tmp/samba4-winsrepl/source/param/generic.c branches/tmp/samba4-winsrepl/source/pidl/lib/Parse/Pidl/Ethereal/NDR.pm branches/tmp/samba4-winsrepl/source/pidl/pidl branches/tmp/samba4-winsrepl/source/pidl/pidl.1.xml branches/tmp/samba4-winsrepl/source/script/build_idl.sh branches/tmp/samba4-winsrepl/source/scripting/ejs/smbcalls_ldb.c branches/tmp/samba4-winsrepl/source/scripting/libjs/provision.js branches/tmp/samba4-winsrepl/source/setup/provision branches/tmp/samba4-winsrepl/source/setup/provision.zone branches/tmp/samba4-winsrepl/source/torture/config.mk branches/tmp/samba4-winsrepl/source/torture/torture.c branches/tmp/samba4-winsrepl/swat/desktop/index.esp branches/tmp/samba4-winsrepl/swat/install/provision.esp branches/tmp/samba4-winsrepl/swat/scripting/client/desktop.js branches/tmp/samba4-winsrepl/swat/scripting/header_desktop.esp branches/tmp/samba4-winsrepl/swat/style/qooxdoo/layouts/application.css Changeset: Sorry, the patch is too large (12236 lines) to include; please use WebSVN to see it! WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=10254
