Author: abartlet
Date: 2006-01-03 04:25:12 + (Tue, 03 Jan 2006)
New Revision: 12687
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12687
Log:
Push the real list of supported GENSEC mechanisms out on
supportedSASLMechanism in the rootdse. (Second half of a patch
Author: abartlet
Date: 2005-12-30 08:36:25 + (Fri, 30 Dec 2005)
New Revision: 12598
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12598
Log:
Make the 'objectClass' part of the templating process actually work.
We need to add to the multivalued objectClass
Author: abartlet
Date: 2005-12-30 08:40:16 + (Fri, 30 Dec 2005)
New Revision: 12599
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12599
Log:
This new LDB module (and associated changes) allows Samba4 to operate
using pre-calculated passwords for all kerberos key
Author: abartlet
Date: 2005-12-30 08:50:47 + (Fri, 30 Dec 2005)
New Revision: 12600
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12600
Log:
Add a new module to sort the objectclass attribute on store. The
module is perhaps not the most efficient, but I think
Author: abartlet
Date: 2005-12-30 08:57:33 + (Fri, 30 Dec 2005)
New Revision: 12601
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12601
Log:
Syncronise both copies of dlinklist.h.
Should we somehow link these, or just use the version in ldb?
Andrew Bartlett
Author: abartlet
Date: 2005-12-30 23:54:19 + (Fri, 30 Dec 2005)
New Revision: 512
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=512
Log:
Delete autogenerated file, and fix SEGFAULT in the KDC where we use a
db hdb backend. (Which does not provide a 'free
Author: abartlet
Date: 2005-12-31 00:46:44 + (Sat, 31 Dec 2005)
New Revision: 12625
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12625
Log:
More 'useful' names for the DNS zone.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/setup/provision.zone
Author: abartlet
Date: 2005-12-31 01:42:32 + (Sat, 31 Dec 2005)
New Revision: 12627
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12627
Log:
This magic comment keeps minimal_includes.pl from suggesting the
removal of this header.
Andrew Bartlett
Modified
Author: abartlet
Date: 2005-12-31 02:03:26 + (Sat, 31 Dec 2005)
New Revision: 12629
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12629
Log:
Add a comment so minimal_includes.pl doesn't try and remove this.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source
Author: abartlet
Date: 2005-12-31 02:40:58 + (Sat, 31 Dec 2005)
New Revision: 12630
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12630
Log:
Remove attributes which should be automaticly generated.
This fixes a problem I had with kpasswd, as the account had
Author: abartlet
Date: 2005-12-31 02:49:41 + (Sat, 31 Dec 2005)
New Revision: 12631
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12631
Log:
Now we have fixed the provision script, we don't need to work around
it here.
Andrew Bartlett
Modified:
branches
Author: abartlet
Date: 2005-12-31 03:43:36 + (Sat, 31 Dec 2005)
New Revision: 12632
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12632
Log:
Build fixes from Brad Hards [EMAIL PROTECTED]
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/lib/ldb/Makefile.in
Author: abartlet
Date: 2005-12-30 03:57:11 + (Fri, 30 Dec 2005)
New Revision: 12594
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12594
Log:
Jelmer pushed some proposed header reductions to the list today. This
commits some of these that I know to be correct
Author: abartlet
Date: 2005-12-30 06:48:16 + (Fri, 30 Dec 2005)
New Revision: 12595
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12595
Log:
There was no comment on the mailing list, so kill the 'ldapsrv:samdb'
parameter. It isn't useful with so many other
Author: abartlet
Date: 2005-12-30 06:48:56 + (Fri, 30 Dec 2005)
New Revision: 12596
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12596
Log:
This variable is unused.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/scripting/ejs/smbcalls_auth.c
Author: abartlet
Date: 2005-12-30 06:49:36 + (Fri, 30 Dec 2005)
New Revision: 12597
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12597
Log:
One less void *
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/torture/rpc/schannel.c
Changeset:
Modified
Author: abartlet
Date: 2005-12-28 09:24:21 + (Wed, 28 Dec 2005)
New Revision: 12538
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12538
Log:
Clarify why we are doing the delete here.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/libnet
Author: abartlet
Date: 2005-12-28 11:34:19 + (Wed, 28 Dec 2005)
New Revision: 12540
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12540
Log:
Provide more information in the ldb error string.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/lib/ldb/ldb_tdb
Author: abartlet
Date: 2005-12-28 22:43:12 + (Wed, 28 Dec 2005)
New Revision: 12553
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12553
Log:
Steal the error string onto this context, so that the caller doesn't
have to think about exactly what the right context
Author: abartlet
Date: 2005-12-27 08:02:35 + (Tue, 27 Dec 2005)
New Revision: 12507
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12507
Log:
This file has had my grubby paws all over it ;-)
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/rpc_server/samr
Author: abartlet
Date: 2005-12-28 03:57:26 + (Wed, 28 Dec 2005)
New Revision: 12533
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12533
Log:
Get the ldb.errstring() out to the user on failure. It helps a lot
with debugging!
Andrew Bartlett
Modified
Author: abartlet
Date: 2005-12-28 04:14:58 + (Wed, 28 Dec 2005)
New Revision: 12534
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12534
Log:
Make the transaction code fill the error string on failure.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/lib
Author: abartlet
Date: 2005-12-26 23:06:09 + (Mon, 26 Dec 2005)
New Revision: 12502
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12502
Log:
A bit of work on the RPC-SAMR torture test. Prove that ridToSid is
really as simple as it looks.
Andrew Bartlett
Author: abartlet
Date: 2005-12-26 23:14:56 + (Mon, 26 Dec 2005)
New Revision: 12503
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12503
Log:
This function was just too simple to leave unimplemented.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source
Author: abartlet
Date: 2005-12-26 23:47:19 + (Mon, 26 Dec 2005)
New Revision: 12504
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12504
Log:
Fix one more transaction cancel bail-out path, and correct comments.
Andrew Bartlett
Modified:
branches/SAMBA_4_0
Author: abartlet
Date: 2005-12-27 07:48:11 + (Tue, 27 Dec 2005)
New Revision: 12505
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12505
Log:
Cope better with NT_STATUS_PASSWORD_RESTRICTION (due to minimum
password age), and test for the incorrect password error
Author: abartlet
Date: 2005-12-27 07:49:34 + (Tue, 27 Dec 2005)
New Revision: 12506
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12506
Log:
Fix up issues shown up by the expanded RPC-SAMR testsuite, and add ldb
transactions to the SAMR password change code
Author: abartlet
Date: 2005-12-22 09:32:26 + (Thu, 22 Dec 2005)
New Revision: 12427
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12427
Log:
Move SAMR CreateUser2 to transactions, and re-add support for
different computer account types. (Earlier code changes
Author: abartlet
Date: 2005-12-22 09:58:51 + (Thu, 22 Dec 2005)
New Revision: 12430
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12430
Log:
Clarify libnet_join code. Add/fix comments.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/libnet/libnet_join.c
Author: abartlet
Date: 2005-12-22 11:26:12 + (Thu, 22 Dec 2005)
New Revision: 12432
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12432
Log:
Re-indent and consistantly cancel the transaction.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/rpc_server
Author: abartlet
Date: 2005-12-22 11:26:41 + (Thu, 22 Dec 2005)
New Revision: 12433
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12433
Log:
Add comment describing this function.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/lib/gendb.c
Changeset
Author: abartlet
Date: 2005-12-22 20:34:00 + (Thu, 22 Dec 2005)
New Revision: 12436
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12436
Log:
Fix Samba4 as a server to Win2000 for the domain join.
We still have Win2000 issues, but now we correctly handle the case
Author: abartlet
Date: 2005-12-21 22:02:52 + (Wed, 21 Dec 2005)
New Revision: 12411
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12411
Log:
Add 'net samdump keytab keytab'.
This extracts a remote windows domain into a keytab, suitable for use
in ethereal
Author: abartlet
Date: 2005-12-22 06:47:00 + (Thu, 22 Dec 2005)
New Revision: 12421
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12421
Log:
Handle the case where we are a joining as different account types far better.
Andrew Bartlett
Modified:
branches
Author: abartlet
Date: 2005-12-22 06:50:04 + (Thu, 22 Dec 2005)
New Revision: 12422
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12422
Log:
Some kerberos comments and clarifications.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/auth/kerberos/kerberos
Author: abartlet
Date: 2005-12-22 06:58:26 + (Thu, 22 Dec 2005)
New Revision: 12423
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12423
Log:
Remove DEBUG(0) printouts in favor of more information to the caller.
I assume this works better with SWAT and the like
Author: abartlet
Date: 2005-12-19 22:37:46 + (Mon, 19 Dec 2005)
New Revision: 12373
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12373
Log:
Add RPC-JOIN as a test to always run.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/script/tests/test_rpc.sh
Author: abartlet
Date: 2005-12-19 23:29:47 + (Mon, 19 Dec 2005)
New Revision: 12381
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12381
Log:
Try not to segfault on an anonymous LDAP bind, and map to a guest login.
Andrew Bartlett
Modified:
branches
Author: abartlet
Date: 2005-12-19 23:43:17 + (Mon, 19 Dec 2005)
New Revision: 12382
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12382
Log:
Ensure to return OK on anonymous mapping.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/dsdb/samdb/cracknames.c
Author: abartlet
Date: 2005-12-20 00:00:48 + (Tue, 20 Dec 2005)
New Revision: 12383
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12383
Log:
Fixes for Apple's AD client. Don't segfualt in the KDC, and they
require the isSynchronized flag in the rootDSE.
Andrew
Author: abartlet
Date: 2005-12-20 00:02:08 + (Tue, 20 Dec 2005)
New Revision: 12384
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12384
Log:
I can't spell...
Modified:
branches/SAMBA_4_0/source/setup/provision_init.ldif
Changeset:
Modified: branches
Author: abartlet
Date: 2005-12-18 22:50:01 + (Sun, 18 Dec 2005)
New Revision: 12327
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12327
Log:
ENT_TYPE_ANY isn't used anywhere in Samba4, so don't implement it in hdb-ldb.
Andrew Bartlett
Modified:
branches
Author: abartlet
Date: 2005-12-19 06:56:45 + (Mon, 19 Dec 2005)
New Revision: 12360
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12360
Log:
Add simple bind support into our LDAP server.
Needs changes to our client code for automated testing.
Andrew Bartlett
Author: abartlet
Date: 2005-12-19 07:07:11 + (Mon, 19 Dec 2005)
New Revision: 12361
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12361
Log:
Add a new function: ldb_binary_encode_string()
This is for use on user-supplied arguments to printf style format
strings
Author: abartlet
Date: 2005-12-19 07:11:58 + (Mon, 19 Dec 2005)
New Revision: 12362
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12362
Log:
Along with a cracknames change in the previous commit, this should
allow Win2000 machines to again use kerberos
Author: abartlet
Date: 2005-12-18 05:01:15 + (Sun, 18 Dec 2005)
New Revision: 12310
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12310
Log:
Link simple bind support in our internal LDAP libs to LDB and the
command line processing system.
This is a little ugly
Author: abartlet
Date: 2005-12-15 16:17:02 + (Thu, 15 Dec 2005)
New Revision: 510
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=510
Log:
Less const, due to embedded private pointer.
Andrew Bartlett
Modified:
trunk/heimdal/kdc/kerberos5.c
trunk/heimdal
Author: abartlet
Date: 2005-12-15 17:40:38 + (Thu, 15 Dec 2005)
New Revision: 511
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=511
Log:
These prototypes moved to a -private.h in the last merge.
Andew Bartlett
Added:
trunk/heimdal/kdc/kdc-private.h
Author: abartlet
Date: 2005-12-15 20:25:37 + (Thu, 15 Dec 2005)
New Revision: 12267
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12267
Log:
Try to avoid segfault in kerberos libs, because we talloc_free()'ed
the old event context in the standard process modal
Author: abartlet
Date: 2005-12-15 20:29:02 + (Thu, 15 Dec 2005)
New Revision: 12268
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12268
Log:
Use transactions to ensure that the schannel db is consistant.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source
Author: abartlet
Date: 2005-12-15 20:38:24 + (Thu, 15 Dec 2005)
New Revision: 12269
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12269
Log:
Update to current lorikeet-heimdal. This changed the way the hdb
interface worked, so hdb-ldb.c and the glue have been
Author: abartlet
Date: 2005-12-14 17:16:06 + (Wed, 14 Dec 2005)
New Revision: 12232
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12232
Log:
I hate SWAT code being outside 'source'. Add in code to push the
user's session info into ldb structure for the ldb tests
Author: abartlet
Date: 2005-12-15 02:39:29 + (Thu, 15 Dec 2005)
New Revision: 12252
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12252
Log:
With this change (hack) we can now do an provision onto Samba4's LDAP
server. Now to try another one...
Andrew Bartlett
Author: abartlet
Date: 2005-12-15 06:33:23 + (Thu, 15 Dec 2005)
New Revision: 509
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=509
Log:
Love has updated upstream Heidmal again, and this brings us up to 2005-12-14.
The main change here is that lha chose
Author: abartlet
Date: 2005-12-13 15:35:22 + (Tue, 13 Dec 2005)
New Revision: 506
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=506
Log:
In lorikeet-heimdal, if the local hostname is not fully qualified, we
will not do DNS lookups to try and guess a realm
Author: abartlet
Date: 2005-12-13 15:42:33 + (Tue, 13 Dec 2005)
New Revision: 507
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=507
Log:
Merge to Heimdal CVS as of 2005-12-12.
I needed to do a bit of work to have 'make check' pass: In particular
I ensured
Author: abartlet
Date: 2005-12-13 15:52:37 + (Tue, 13 Dec 2005)
New Revision: 508
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=508
Log:
Love fixed many of the same (and more) bugs regarding need to zero
hdb_entry_ex structures that I did, so update to Heimdal
Author: abartlet
Date: 2005-12-14 07:22:25 + (Wed, 14 Dec 2005)
New Revision: 12227
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12227
Log:
I realised that I wasn't yet seeing authenticated LDAP for the ldb
backend.
The idea is that every time we open an LDB
Author: abartlet
Date: 2005-12-11 08:27:14 + (Sun, 11 Dec 2005)
New Revision: 12178
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12178
Log:
Make ldb_ildap work against localhost again, by setting the event
context into the ldb opaque. I'm sure this was done
Author: abartlet
Date: 2005-12-11 08:31:46 + (Sun, 11 Dec 2005)
New Revision: 12179
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12179
Log:
Allow our KDC to use LDAP to get to the backend database.
To avoid a circular depenency, it is not allowed to use Krb5
Author: abartlet
Date: 2005-12-04 12:17:02 + (Sun, 04 Dec 2005)
New Revision: 12056
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12056
Log:
Some clarification fixes for the keytab code, and use the right
function for enctype to string.
Andrew Bartlett
Modified
Author: abartlet
Date: 2005-12-05 01:36:53 + (Mon, 05 Dec 2005)
New Revision: 12058
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12058
Log:
Set an anonymous fallback, if the machine account isn't available.
Andrew Bartlett
Modified:
branches/SAMBA_4_0
Author: abartlet
Date: 2005-12-05 01:38:26 + (Mon, 05 Dec 2005)
New Revision: 12059
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12059
Log:
Use random keytab names (so we get different keytabs, rather than
share the MEMORY: keytab).
Andrew Bartlett
Modified
Author: abartlet
Date: 2005-12-05 03:20:40 + (Mon, 05 Dec 2005)
New Revision: 12060
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12060
Log:
Work towards allowing the credentials system to allow/deny certain
GENSEC mechansims. This will allow a machine join
Author: abartlet
Date: 2005-12-05 03:42:28 + (Mon, 05 Dec 2005)
New Revision: 12061
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12061
Log:
Add missing file to previous commit. This provides a hook on which to
attach a restriction on available GENSEC mechanisms
Author: abartlet
Date: 2005-12-05 04:10:13 + (Mon, 05 Dec 2005)
New Revision: 12062
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12062
Log:
SASL negotiation now requires a gensec_security context, so that we
only try permitted mechanims.
Andrew Bartlett
Author: abartlet
Date: 2005-12-02 22:37:07 + (Fri, 02 Dec 2005)
New Revision: 12035
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12035
Log:
Fix memory leaks in the KDC.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/kdc/hdb-ldb.c
Changeset:
Modified
Author: abartlet
Date: 2005-12-03 00:32:32 + (Sat, 03 Dec 2005)
New Revision: 503
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=503
Log:
Test krb5_kt_remove_entry in the test_keytab, and therefore find a
MEMORY keytab bug on systems where realloc(ptr, 0
Author: abartlet
Date: 2005-12-03 00:37:48 + (Sat, 03 Dec 2005)
New Revision: 504
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=504
Log:
I think this is a better fix for the realloc/free bugs.
Andrew Bartlett
Modified:
trunk/heimdal/lib/krb5
Author: abartlet
Date: 2005-12-03 00:46:23 + (Sat, 03 Dec 2005)
New Revision: 12036
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12036
Log:
Fix more KDC memory leaks (and there are probably still more...).
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source
Author: abartlet
Date: 2005-12-03 00:47:51 + (Sat, 03 Dec 2005)
New Revision: 12037
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12037
Log:
Fix malloc corruption caused by double-free(), where realloc(ptr, 0)
is equivilant to free().
This is the issue tridge
Author: abartlet
Date: 2005-12-01 21:07:37 + (Thu, 01 Dec 2005)
New Revision: 501
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=501
Log:
Make the implementation match the comment: change password only makes
sense on client-style names. (Not that Samba4 uses
Author: abartlet
Date: 2005-12-01 21:36:07 + (Thu, 01 Dec 2005)
New Revision: 502
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=502
Log:
Update lorikeet-heimdal to upstream Heimdal CVS as of 2005-12-02.
Importantly, this includes reference counting
Author: abartlet
Date: 2005-12-01 22:18:34 + (Thu, 01 Dec 2005)
New Revision: 12000
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=12000
Log:
Update to current lorikeet-heimdal, including in particular support
for referencing an existing in-MEMORY keytab (required
Author: abartlet
Date: 2005-12-01 04:52:54 + (Thu, 01 Dec 2005)
New Revision: 11988
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11988
Log:
Setup the sessionInfo just before the connect, rather than earlier
when we havn't finished popt.
Andrew Bartlett
Author: abartlet
Date: 2005-12-01 04:54:28 + (Thu, 01 Dec 2005)
New Revision: 11989
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11989
Log:
Rather than grabbing the machine account details at this point, grab
them 'later'. We will need to handle the errors when
Author: abartlet
Date: 2005-12-01 04:55:18 + (Thu, 01 Dec 2005)
New Revision: 11990
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11990
Log:
Set the password set time as 'now', so it isn't expired back in 2004.
Andrew Bartlett
Modified:
branches/SAMBA_4_0
Author: abartlet
Date: 2005-12-01 04:58:15 + (Thu, 01 Dec 2005)
New Revision: 11991
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11991
Log:
Null termainte the list of backends. (Makes it easier to walk the list).
Andrew Bartlett
Modified:
branches
Author: abartlet
Date: 2005-12-01 05:06:52 + (Thu, 01 Dec 2005)
New Revision: 11992
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11992
Log:
Potentially allow SPNEGO to be disabled (as occours on WinXP
standalone), and use only NTLMSSP.
(But doing so would break
Author: abartlet
Date: 2005-12-01 05:09:28 + (Thu, 01 Dec 2005)
New Revision: 11993
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11993
Log:
As well as making an in-MEMORY keytab, allow a file-based keytab to be updated.
This allows a new password to be written
Author: abartlet
Date: 2005-12-01 05:10:37 + (Thu, 01 Dec 2005)
New Revision: 11994
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11994
Log:
This function no longer needs a special declaration.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/auth
Author: abartlet
Date: 2005-12-01 05:20:39 + (Thu, 01 Dec 2005)
New Revision: 11995
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11995
Log:
A big kerberos-related update.
This merges Samba4 up to current lorikeet-heimdal, which includes a
replacement for some
Author: abartlet
Date: 2005-11-29 11:07:21 + (Tue, 29 Nov 2005)
New Revision: 500
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=500
Log:
Fix the other half of the merge error.
Andrew Bartlett
Modified:
trunk/heimdal/lib/gssapi/gssapi.h
Changeset
Author: abartlet
Date: 2005-11-28 07:59:46 + (Mon, 28 Nov 2005)
New Revision: 11940
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11940
Log:
Love has clarified why this code does what it does.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/auth/kerberos
Author: abartlet
Date: 2005-11-28 21:17:20 + (Mon, 28 Nov 2005)
New Revision: 495
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=495
Log:
Merge changes (particularly hdb_entry_ex) from Samba4 into lorikeet-heimdal.
These don't work at the moment, but I'll
Author: abartlet
Date: 2005-11-28 23:08:22 + (Mon, 28 Nov 2005)
New Revision: 496
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=496
Log:
Update to Heimdal 2005-11-29, including removal of hacks now replaced
by proper implementations in upstream Heimdal
Author: abartlet
Date: 2005-11-28 23:17:18 + (Mon, 28 Nov 2005)
New Revision: 497
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=497
Log:
These memsets should ensure that we don't call hdb function pointers (such as
the new fetch_entry_ex) that don't exist
Author: abartlet
Date: 2005-11-29 01:23:17 + (Tue, 29 Nov 2005)
New Revision: 498
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=498
Log:
A couple of updates to bring us in line with Heimdal CVS on 2005-11-29
(Love intergrated some of the fixes, including
Author: abartlet
Date: 2005-11-27 02:00:37 + (Sun, 27 Nov 2005)
New Revision: 11929
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11929
Log:
Add static, comments.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/auth/auth_sam.c
Changeset:
Modified
Author: abartlet
Date: 2005-11-27 02:02:44 + (Sun, 27 Nov 2005)
New Revision: 11930
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11930
Log:
Add socket/packet handling code for kpasswdd
Allow ticket requests with only a netbios name to be considered 'null
Author: abartlet
Date: 2005-11-27 02:03:42 + (Sun, 27 Nov 2005)
New Revision: 11931
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11931
Log:
Add a short README explaining what this directory is all about.
Andrew Bartlett
Added:
branches/SAMBA_4_0/source
Author: abartlet
Date: 2005-11-06 14:15:34 + (Sun, 06 Nov 2005)
New Revision: 11536
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11536
Log:
Add a hook for client-principal access control to hdb-ldb, re-using
the code in auth/auth_sam.c for consistancy
Author: abartlet
Date: 2005-11-06 14:16:34 + (Sun, 06 Nov 2005)
New Revision: 11537
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11537
Log:
Make the authsam_account_ok routine callable by external users (the KDC).
Andrew Bartlett
Modified:
branches
Author: abartlet
Date: 2005-11-06 14:17:00 + (Sun, 06 Nov 2005)
New Revision: 11538
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11538
Log:
More notes on things we need.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/auth/kerberos/kerberos-notes.txt
Author: abartlet
Date: 2005-11-07 02:19:19 + (Mon, 07 Nov 2005)
New Revision: 11540
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11540
Log:
Some notes to myself on RFC complience.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/kdc/kdc.c
Changeset
Author: abartlet
Date: 2005-11-07 02:24:50 + (Mon, 07 Nov 2005)
New Revision: 11541
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11541
Log:
More logical (I think...) delegation semantics.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/heimdal/lib
Author: abartlet
Date: 2005-11-07 02:25:37 + (Mon, 07 Nov 2005)
New Revision: 11542
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11542
Log:
Add the netbios name type. We will need it when we start to handle
allowedWorkstations on Krb5.
Andrew Bartlett
Author: abartlet
Date: 2005-11-07 02:29:37 + (Mon, 07 Nov 2005)
New Revision: 11543
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11543
Log:
A major upgrade to our KDC and PAC handling.
We now put the PAC in the AS-REP, so that the client has it in the
TGT. We
Author: abartlet
Date: 2005-11-07 02:40:38 + (Mon, 07 Nov 2005)
New Revision: 11544
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11544
Log:
Allow delegation in a Samba4 realm.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/kdc/hdb-ldb.c
Changeset
Author: abartlet
Date: 2005-11-07 03:05:34 + (Mon, 07 Nov 2005)
New Revision: 11545
WebSVN:
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11545
Log:
Remove old #define.
Andrew Bartlett
Modified:
branches/SAMBA_4_0/source/include/ads.h
Changeset:
Modified: branches
1201 - 1300 of 3454 matches
Mail list logo