svn commit: samba r11520 - in branches/SAMBA_4_0/source/auth: .

Author: abartlet Date: 2005-11-05 10:51:13 + (Sat, 05 Nov 2005) New Revision: 11520 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11520 Log: indent Modified: branches/SAMBA_4_0/source/auth/auth_sam.c Changeset: Modified: branches/SAMBA_4_0/source/auth

svn commit: samba r11521 - in branches/SAMBA_4_0/source: auth/gensec libcli/ldap

Author: abartlet Date: 2005-11-05 11:02:37 + (Sat, 05 Nov 2005) New Revision: 11521 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11521 Log: Add in client support for checking supportedSASLmechanisms, and then determining a mechanism to use. Currently it doesn't

svn commit: samba r11522 - in branches/SAMBA_4_0/source: auth lib/ldb/ldb_ildap

Author: abartlet Date: 2005-11-05 11:13:22 + (Sat, 05 Nov 2005) New Revision: 11522 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11522 Log: Add support for delegated credentials and machine account credentials to ldb, based on the sessionInfo we now pass around

svn commit: samba r11523 - in branches/SAMBA_4_0/source/libcli/ldap: .

Author: abartlet Date: 2005-11-05 11:24:10 + (Sat, 05 Nov 2005) New Revision: 11523 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11523 Log: Working towards having Samba3 join Samba4, this allows the SASL credentials to be NULL, where the client is requesting

svn commit: samba r11524 - in branches/SAMBA_4_0/source/kdc: .

Author: abartlet Date: 2005-11-05 11:29:34 + (Sat, 05 Nov 2005) New Revision: 11524 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11524 Log: More work on our hdb backend in the KDC. The aim here is to restructure the queries to match the queries we do in auth

svn commit: samba r11525 - in branches/SAMBA_4_0/source: auth kdc

Author: abartlet Date: 2005-11-05 21:26:28 + (Sat, 05 Nov 2005) New Revision: 11525 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11525 Log: Move lookups (including the attribute search) for users from kdc/hdb-ldb.c to share the routines used for auth

svn commit: samba r11529 - in branches/SAMBA_4_0/source/heimdal/lib/krb5: .

Author: abartlet Date: 2005-11-06 01:46:12 + (Sun, 06 Nov 2005) New Revision: 11529 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11529 Log: Disable DNS lookups for forwarded credentials, unless really, really wanted. There is nothing that suggests that the host

svn commit: lorikeet r493 - in trunk/heimdal/lib/krb5: .

Author: abartlet Date: 2005-11-06 04:06:28 + (Sun, 06 Nov 2005) New Revision: 493 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=493 Log: Disable DNS lookups for forwarded credentials, unless really, really wanted. There is nothing that suggests that the host

svn commit: samba r11512 - in branches/SAMBA_4_0/source/lib/ldb/include: .

Author: abartlet Date: 2005-11-05 05:44:26 + (Sat, 05 Nov 2005) New Revision: 11512 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11512 Log: fix typo Modified: branches/SAMBA_4_0/source/lib/ldb/include/ldb.h Changeset: Modified: branches/SAMBA_4_0/source

svn commit: samba r11513 - in branches/SAMBA_4_0/source: ntvfs/cifs rpc_server/remote

Author: abartlet Date: 2005-11-05 06:36:42 + (Sat, 05 Nov 2005) New Revision: 11513 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11513 Log: Add the ability to use the local machine account instead of a static password or delegation. Add the ability to delegate

svn commit: samba r11514 - in branches/SAMBA_4_0/source/auth/gensec: .

Author: abartlet Date: 2005-11-05 06:38:47 + (Sat, 05 Nov 2005) New Revision: 11514 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11514 Log: Fixup debug message Modified: branches/SAMBA_4_0/source/auth/gensec/gensec_gssapi.c Changeset: Modified: branches

svn commit: samba r11497 - in branches/SAMBA_4_0/source/librpc/rpc: .

Author: abartlet Date: 2005-11-04 03:30:47 + (Fri, 04 Nov 2005) New Revision: 11497 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11497 Log: Don't name parameters 'floor'. Rename fl and floor to epm_floor for consistancy. Andrew Bartlett Modified: branches

svn commit: samba r11477 - in branches/SAMBA_4_0/source/heimdal/lib/gssapi: .

Author: abartlet Date: 2005-11-02 09:51:32 + (Wed, 02 Nov 2005) New Revision: 11477 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11477 Log: This seems really nasty, but as I understand it an attacker cannot change this checksum, as it is inside the encrypted

svn commit: lorikeet r492 - in trunk/heimdal/lib/gssapi: .

Author: abartlet Date: 2005-11-02 09:54:13 + (Wed, 02 Nov 2005) New Revision: 492 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=492 Log: Merge Samba3 compatability hack from Samba4. Andrew Bartlett Modified: trunk/heimdal/lib/gssapi/8003.c Changeset

svn commit: lorikeet r484 - in trunk/heimdal: . appl/telnet appl/telnet/libtelnet appl/test cf kcm kuser lib/asn1 lib/gssapi lib/krb5

Author: abartlet Date: 2005-11-01 08:52:34 + (Tue, 01 Nov 2005) New Revision: 484 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=484 Log: Update to Heimdal CVS as of 2005-10-31 Andrew Bartlett Modified: trunk/heimdal/ChangeLog trunk/heimdal/appl/telnet

svn commit: lorikeet r485 - in trunk/heimdal/lib/gssapi: .

Author: abartlet Date: 2005-11-01 12:29:04 + (Tue, 01 Nov 2005) New Revision: 485 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=485 Log: Add gssapi_krb5_init_ev to lorikeet-heimdal from Samba4. Andrew Bartlett Modified: trunk/heimdal/lib/gssapi/init.c

svn commit: samba r11437 - in branches/SAMBA_4_0/source/kdc: .

Author: abartlet Date: 2005-11-01 13:29:22 + (Tue, 01 Nov 2005) New Revision: 11437 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11437 Log: Fix (valid!) use of uninitialised value warnings. Andrew Bartlett Modified: branches/SAMBA_4_0/source/kdc/kpasswdd.c

svn commit: samba r11441 - in branches/SAMBA_4_0/source/auth: .

Author: abartlet Date: 2005-11-01 13:35:59 + (Tue, 01 Nov 2005) New Revision: 11441 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11441 Log: Remove the auth_domain module from Samba4, as we will only do things via winbindd in Samba4. Andrew Bartlett Removed

svn commit: lorikeet r486 - in trunk/heimdal/kdc: .

Author: abartlet Date: 2005-11-01 13:37:23 + (Tue, 01 Nov 2005) New Revision: 486 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=486 Log: Merge memory leak fix from Samba4. Andrew Bartlett Modified: trunk/heimdal/kdc/kerberos5.c Changeset: Modified

svn commit: lorikeet r487 - in trunk/heimdal/lib/gssapi: .

Author: abartlet Date: 2005-11-01 13:38:46 + (Tue, 01 Nov 2005) New Revision: 487 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=487 Log: Merge correctness fix by Volker from Samba4. Andrew Bartlett Modified: trunk/heimdal/lib/gssapi/cfx.c Changeset

svn commit: samba r11442 - in branches/SAMBA_4_0/source/script/tests: .

Author: abartlet Date: 2005-11-01 14:21:31 + (Tue, 01 Nov 2005) New Revision: 11442 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11442 Log: Don't use BASE-NEGNOWAIT any more. It is a mostly meaningless test. Andrew Bartlett Modified: branches/SAMBA_4_0

svn commit: lorikeet r488 - in trunk/heimdal/lib/gssapi: .

Author: abartlet Date: 2005-11-02 00:19:35 + (Wed, 02 Nov 2005) New Revision: 488 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=488 Log: Fix up credentials delegation, broken by the splitout for DCE_STYLE. Andrew Bartlett Modified: trunk/heimdal/lib

svn commit: samba r11462 - in branches/SAMBA_4_0/source/heimdal/lib/gssapi: .

Author: abartlet Date: 2005-11-02 02:22:35 + (Wed, 02 Nov 2005) New Revision: 11462 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11462 Log: Fix the build: somehow I lost the header for this samba-specific hack. Andrew Bartlett Modified: branches/SAMBA_4_0

svn commit: lorikeet r490 - in trunk/heimdal/lib/gssapi: .

Author: abartlet Date: 2005-11-02 02:23:40 + (Wed, 02 Nov 2005) New Revision: 490 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=490 Log: merge prototype for samba-specific hack back into lorikeet-heimdal Andrew Bartlett Modified: trunk/heimdal/lib/gssapi

svn commit: samba r11468 - in branches/SAMBA_4_0/source: auth/gensec heimdal/lib/gssapi

Author: abartlet Date: 2005-11-02 03:48:49 + (Wed, 02 Nov 2005) New Revision: 11468 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11468 Log: Merge a bit more of init_sec_context from Heimdal CVS into our DCE_STYLE modified version, and add parametric options

svn commit: samba r11469 - in branches/SAMBA_4_0/source/heimdal/lib/krb5: .

Author: abartlet Date: 2005-11-02 04:11:36 + (Wed, 02 Nov 2005) New Revision: 11469 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11469 Log: Fix typo, and use the correct (RFC4120) session key for delegating credentials. This means we now delegate to windows

svn commit: samba r11470 - in branches/SAMBA_4_0/source/auth/gensec: .

Author: abartlet Date: 2005-11-02 04:12:47 + (Wed, 02 Nov 2005) New Revision: 11470 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11470 Log: To a server trusted for delegation (checked for in the gss libs), delegate by default. Andrew Bartlett Modified

svn commit: samba r11471 - in branches/SAMBA_4_0/source/ntvfs/cifs: .

Author: abartlet Date: 2005-11-02 04:24:04 + (Wed, 02 Nov 2005) New Revision: 11471 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11471 Log: Describe how kerberos forwarding works with the ntvfs. Andrew Bartlett Modified: branches/SAMBA_4_0/source/ntvfs/cifs

svn commit: lorikeet r491 - in trunk/heimdal/lib: gssapi krb5

Author: abartlet Date: 2005-11-02 04:30:38 + (Wed, 02 Nov 2005) New Revision: 491 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=491 Log: Merge from Samba4 fixes for delegated credentials, as well as a typo fix in reference to RFC4120 (not 2140, TCP Control

svn commit: lorikeet r483 - in trunk/heimdal/lib/asn1: .

Author: abartlet Date: 2005-11-01 06:43:02 + (Tue, 01 Nov 2005) New Revision: 483 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=483 Log: Add missing file after last heimdal import. Andrew Bartlett Added: trunk/heimdal/lib/asn1/der_format.c Changeset

svn commit: samba r11401 - in branches/SAMBA_4_0/source/auth/credentials: .

Author: abartlet Date: 2005-10-31 00:23:38 + (Mon, 31 Oct 2005) New Revision: 11401 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11401 Log: A simple hack to have our central credentials system deny sending LM authentication for [EMAIL PROTECTED] logins

svn commit: samba r11402 - in branches/SAMBA_4_0/source: librpc/idl rpc_server/netlogon torture/rpc

Author: abartlet Date: 2005-10-31 02:12:13 + (Mon, 31 Oct 2005) New Revision: 11402 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11402 Log: In response to comments by volker, expand our Netlogon DsRGetDCName IDL and testsuites. The server-side of this remains

svn commit: samba r11404 - in branches/SAMBA_4_0/source: include libcli/util torture/rpc

Author: abartlet Date: 2005-10-31 02:46:15 + (Mon, 31 Oct 2005) New Revision: 11404 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11404 Log: Another torture test and a new WERR. Andrew Bartlett Modified: branches/SAMBA_4_0/source/include/doserr.h branches

svn commit: samba r11405 - in branches/SAMBA_4_0/source/torture/rpc: .

Author: abartlet Date: 2005-10-31 02:58:29 + (Mon, 31 Oct 2005) New Revision: 11405 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11405 Log: Ensure we can never have secret4 be uninitialised. Found after volker's urging on the use of -O1. Andrew Bartlett

svn commit: samba r11406 - in branches/SAMBA_4_0/source/torture/rpc: .

Author: abartlet Date: 2005-10-31 03:00:36 + (Mon, 31 Oct 2005) New Revision: 11406 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11406 Log: Clean up uninitialised value warnings found by -01. The warnings were caused by the structure assignements, which we

svn commit: samba r11407 - in branches/SAMBA_4_0/source: libnet torture/rpc

Author: abartlet Date: 2005-10-31 03:03:32 + (Mon, 31 Oct 2005) New Revision: 11407 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11407 Log: Push 'recreate account' logic into libnet/libnet_join.c. We don't return the pesky USER_EXISTS 'error' code any more

svn commit: samba r11410 - in branches/SAMBA_4_0/source/libnet: .

Author: abartlet Date: 2005-10-31 03:44:29 + (Mon, 31 Oct 2005) New Revision: 11410 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11410 Log: Fix rejoin as a BDC by modifying, rather than trying to recreate, the server reference. Andrew Bartlett Modified

svn commit: samba r11411 - in branches/SAMBA_4_0/source: nsswitch winbind

Author: abartlet Date: 2005-10-31 04:17:51 + (Mon, 31 Oct 2005) New Revision: 11411 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11411 Log: Add to Samba4 the Samba3 patch I just posted for machine account logins (changing the winbindd interface). Clean up

svn commit: samba r11412 - in branches/SAMBA_4_0/source/winbind: .

Author: abartlet Date: 2005-10-31 05:45:19 + (Mon, 31 Oct 2005) New Revision: 11412 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11412 Log: These comments may not be much, but my eyes scan code with even minimal comments much better (much like volker scans code

svn commit: samba r11413 - in branches/SAMBA_4_0/source/winbind: .

Author: abartlet Date: 2005-10-31 06:01:55 + (Mon, 31 Oct 2005) New Revision: 11413 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11413 Log: More comments, plus always check (and update) the credentials chain, regardless the authentication result on a particular

svn commit: samba r11393 - in branches/SAMBA_4_0/source/auth: .

Author: abartlet Date: 2005-10-29 11:11:05 + (Sat, 29 Oct 2005) New Revision: 11393 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11393 Log: Avoid error messages and get more correctness with long plaintext passwords. Andrew Bartlett Modified: branches

svn commit: samba r11394 - in branches/SAMBA_4_0/source/auth/gensec: .

Author: abartlet Date: 2005-10-29 13:13:52 + (Sat, 29 Oct 2005) New Revision: 11394 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11394 Log: Allow KDC unreachable as another 'forget about gssapi' error on SPNEGO. Andrew Bartlett Modified: branches/SAMBA_4_0

svn commit: samba r11399 - in branches/SAMBA_4_0/source/auth/gensec: .

Author: abartlet Date: 2005-10-30 00:56:39 + (Sun, 30 Oct 2005) New Revision: 11399 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11399 Log: Add another case where we need to fallback, if the KDC isn't there. Andrew Bartlett Modified: branches/SAMBA_4_0

svn commit: samba r11361 - in branches/SAMBA_4_0/source/torture/rpc: .

Author: abartlet Date: 2005-10-28 06:44:24 + (Fri, 28 Oct 2005) New Revision: 11361 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11361 Log: Test [EMAIL PROTECTED] userPrincipalNames Andrew Bartlett Modified: branches/SAMBA_4_0/source/torture/rpc

svn commit: samba r11366 - in branches/SAMBA_4_0/source: auth auth/ntlmssp rpc_server/netlogon

Author: abartlet Date: 2005-10-28 08:54:37 + (Fri, 28 Oct 2005) New Revision: 11366 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11366 Log: Pass around the flags which indicate if we should support plaintext logins and NTLM machine account logins. Andrew

svn commit: samba r11367 - in branches/SAMBA_4_0/source/smb_server: .

Author: abartlet Date: 2005-10-28 09:14:16 + (Fri, 28 Oct 2005) New Revision: 11367 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11367 Log: Ensure to intialise the new logon_parameters (0 for session setups). Andrew Bartlett Modified: branches/SAMBA_4_0

svn commit: samba r11370 - in branches/SAMBA_4_0/source: auth rpc_server/netlogon torture/rpc

Author: abartlet Date: 2005-10-28 11:20:48 + (Fri, 28 Oct 2005) New Revision: 11370 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11370 Log: Samba4 now passes it's own RPC-SAMLOGON test again. This avoids the nasty [EMAIL PROTECTED] test for now, as it has very

svn commit: samba r11321 - in branches/SAMBA_4_0/source/kdc: .

Author: abartlet Date: 2005-10-27 10:44:41 + (Thu, 27 Oct 2005) New Revision: 11321 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11321 Log: Fix typos in warnings. Andrew Bartlett Modified: branches/SAMBA_4_0/source/kdc/pac-glue.c Changeset: Modified

svn commit: samba r11322 - in branches/SAMBA_4_0/source/kdc: .

Author: abartlet Date: 2005-10-27 10:45:16 + (Thu, 27 Oct 2005) New Revision: 11322 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11322 Log: Start moving towards using the cracknames code in the KDC. Andrew Bartlett Modified: branches/SAMBA_4_0/source/kdc

svn commit: samba r11325 - in branches/SAMBA_4_0/source/auth/kerberos: .

Author: abartlet Date: 2005-10-27 12:26:28 + (Thu, 27 Oct 2005) New Revision: 11325 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11325 Log: Fix up some kerberos notes. Andrew Bartlett Modified: branches/SAMBA_4_0/source/auth/kerberos/kerberos-notes.txt

svn commit: samba r11333 - in branches/SAMBA_4_0/source/kdc: .

Author: abartlet Date: 2005-10-27 13:54:30 + (Thu, 27 Oct 2005) New Revision: 11333 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11333 Log: Push service principal lookups into the cracknames code, rather than in the hdb-ldb code. Andrew Bartlett Modified

svn commit: samba r11334 - in branches/SAMBA_4_0/source/libcli/dgram: .

Author: abartlet Date: 2005-10-27 14:33:12 + (Thu, 27 Oct 2005) New Revision: 11334 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11334 Log: Print error status in debug. Andrew Bartlett Modified: branches/SAMBA_4_0/source/libcli/dgram/dgramsocket.c

svn commit: samba r11339 - in branches/SAMBA_4_0/source/dsdb/samdb: .

Author: abartlet Date: 2005-10-27 22:27:51 + (Thu, 27 Oct 2005) New Revision: 11339 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11339 Log: Fix the build by adding the serviceprincial name cracknames helper. Andrew Bartlett Modified: branches/SAMBA_4_0

svn commit: samba r11342 - in branches/SAMBA_4_0/source/auth/gensec: .

Author: abartlet Date: 2005-10-27 22:37:48 + (Thu, 27 Oct 2005) New Revision: 11342 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11342 Log: Remove unused variables. Andrew Bartlett Modified: branches/SAMBA_4_0/source/auth/gensec/gensec_gssapi.c Changeset

svn commit: samba r11348 - in branches/SAMBA_4_0/source/libnet: .

Author: abartlet Date: 2005-10-28 02:09:35 + (Fri, 28 Oct 2005) New Revision: 11348 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11348 Log: Fixes for 'net join': - Add more servicePrincipalNames - Always add them, not just for BDC accounts, and not just

svn commit: samba r11349 - in branches/SAMBA_4_0/source/libnet: .

Author: abartlet Date: 2005-10-28 02:13:14 + (Fri, 28 Oct 2005) New Revision: 11349 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11349 Log: Actually add all the new spns... Andrew Bartlett Modified: branches/SAMBA_4_0/source/libnet/libnet_join.c Changeset

svn commit: samba r11350 - in branches/SAMBA_4_0/source/auth/kerberos: .

Author: abartlet Date: 2005-10-28 02:29:32 + (Fri, 28 Oct 2005) New Revision: 11350 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11350 Log: Add some debugs to assist tracking down kerberos issues in future. (Make it easy to see what was put into the keytab, so

svn commit: samba r11351 - in branches/SAMBA_4_0/source/torture/rpc: .

Author: abartlet Date: 2005-10-28 03:39:14 + (Fri, 28 Oct 2005) New Revision: 11351 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11351 Log: Another add-hoc test. Andrew Bartlett Modified: branches/SAMBA_4_0/source/torture/rpc/drsuapi_cracknames.c

svn commit: samba r11352 - in branches/SAMBA_4_0/source: librpc/idl torture/rpc

Author: abartlet Date: 2005-10-28 03:40:10 + (Fri, 28 Oct 2005) New Revision: 11352 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11352 Log: Add newly discovered (via the radiator lists) flags for controlling plaintext and machine account logins. Update tests

svn commit: samba r11355 - in branches/SAMBA_4_0/source/torture/rpc: .

Author: abartlet Date: 2005-10-28 04:58:33 + (Fri, 28 Oct 2005) New Revision: 11355 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11355 Log: Test for error returns when we don't specify the newly discovered 'workstation for account on NTLM' flag. Andrew Bartlett

svn commit: samba r11356 - in branches/SAMBA_4_0/source/dsdb/samdb: .

Author: abartlet Date: 2005-10-28 05:14:51 + (Fri, 28 Oct 2005) New Revision: 11356 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11356 Log: More cracknames work. This copes with a lookup for a servicePrincipalName with a realm, which always returns 'domain only

svn commit: samba r11357 - in branches/SAMBA_4_0/source/setup: .

Author: abartlet Date: 2005-10-28 05:16:25 + (Fri, 28 Oct 2005) New Revision: 11357 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11357 Log: Add more standard 'servicePrincaipalName' entries to our host account in provision. Andrew Bartlett Modified

svn commit: samba r11358 - in branches/SAMBA_4_0/source/auth/credentials: .

Author: abartlet Date: 2005-10-28 05:17:19 + (Fri, 28 Oct 2005) New Revision: 11358 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11358 Log: Ensure domains are always upper-case as well. Helps NTLMv2. Andrew Bartlett Modified: branches/SAMBA_4_0/source/auth

svn commit: samba r11359 - in branches/SAMBA_4_0/source/torture/rpc: .

Author: abartlet Date: 2005-10-28 05:46:22 + (Fri, 28 Oct 2005) New Revision: 11359 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11359 Log: More lovely cracknames tests... Andrew Bartlett Modified: branches/SAMBA_4_0/source/torture/rpc/drsuapi_cracknames.c

svn commit: samba r11360 - in branches/SAMBA_4_0/source/torture/rpc: .

Author: abartlet Date: 2005-10-28 05:57:35 + (Fri, 28 Oct 2005) New Revision: 11360 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11360 Log: Pass down a flag indicating that this is an 'old password', and to expect funny buisness. Andrew Bartlett Modified

svn commit: samba r11310 - in branches/SAMBA_4_0/source/heimdal/kdc: .

Author: abartlet Date: 2005-10-26 23:34:15 + (Wed, 26 Oct 2005) New Revision: 11310 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11310 Log: Free the 'if_relevent' portion of the PAC when we build it. Andrew Bartlett Modified: branches/SAMBA_4_0/source

svn commit: samba r11312 - in branches/SAMBA_4_0/source/auth: .

Author: abartlet Date: 2005-10-26 23:38:37 + (Wed, 26 Oct 2005) New Revision: 11312 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11312 Log: Make it clear we are looking at the 'domain ref', not the domain itself in the auth_sam module. Andrew Bartlett Modified

svn commit: samba r11313 - in branches/SAMBA_4_0/source/auth/credentials: .

Author: abartlet Date: 2005-10-26 23:39:04 + (Wed, 26 Oct 2005) New Revision: 11313 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11313 Log: Typo Modified: branches/SAMBA_4_0/source/auth/credentials/credentials_ntlm.c Changeset: Modified: branches/SAMBA_4_0

svn commit: samba r11314 - in branches/SAMBA_4_0/source: auth/gensec auth/kerberos heimdal/lib/krb5 heimdal_build

Author: abartlet Date: 2005-10-26 23:41:01 + (Wed, 26 Oct 2005) New Revision: 11314 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11314 Log: Use a patch from lha to have the kerberos libs extract the PAC, rather than doing ASN.1 parsing in Samba. Also use

svn commit: lorikeet r482 - in trunk/heimdal/lib/krb5: .

Author: abartlet Date: 2005-10-26 23:59:45 + (Wed, 26 Oct 2005) New Revision: 482 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=482 Log: Merge patch from lha (just commited to Samba4) to make the kerberos libs parse the auth_data (and therefore find the PAC

svn commit: samba r11315 - in branches/SAMBA_4_0/source/auth/kerberos: .

Author: abartlet Date: 2005-10-27 00:05:07 + (Thu, 27 Oct 2005) New Revision: 11315 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11315 Log: Sorry gd, I just removed all of your code that I just merged... (We now ask the kerberos libraries to handle getting

svn commit: samba r11316 - in branches/SAMBA_4_0/source/passdb: .

Author: abartlet Date: 2005-10-27 05:31:20 + (Thu, 27 Oct 2005) New Revision: 11316 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11316 Log: Kill off a bit more of the old secrets system... Andrew Bartlett Modified: branches/SAMBA_4_0/source/passdb/secrets.c

svn commit: samba r11317 - in branches/SAMBA_4_0/source: heimdal/lib/gssapi smbd

Author: abartlet Date: 2005-10-27 05:33:49 + (Thu, 27 Oct 2005) New Revision: 11317 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11317 Log: An ugly hack to setup the global gssapi_krb5_context early, when we have easy access to the event context. This stops

svn commit: samba r11287 - in branches/SAMBA_4_0/source: libnet torture/rpc

Author: abartlet Date: 2005-10-25 12:14:08 + (Tue, 25 Oct 2005) New Revision: 11287 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11287 Log: Understand the new behaviour of the LSA pipe on ncacn_ip_tcp in Win2k3 SP1. Only a few operations are supported

svn commit: samba r11288 - in branches/SAMBA_4_0/source: librpc/idl rpc_server/lsa

Author: abartlet Date: 2005-10-25 12:15:29 + (Tue, 25 Oct 2005) New Revision: 11288 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11288 Log: Fill out LSA LookupNames4 and LookupSids3, including a server-side implementation. Andrew Bartlett Modified: branches

svn commit: samba r11289 - in branches/SAMBA_4_0/source/rpc_server/netlogon: .

Author: abartlet Date: 2005-10-25 12:37:20 + (Tue, 25 Oct 2005) New Revision: 11289 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11289 Log: Fix comment. Andrew Bartlett Modified: branches/SAMBA_4_0/source/rpc_server/netlogon/dcerpc_netlogon.c Changeset

svn commit: samba r11290 - in branches/SAMBA_4_0/source/heimdal_build: .

Author: abartlet Date: 2005-10-25 12:38:35 + (Tue, 25 Oct 2005) New Revision: 11290 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11290 Log: Make it clear that Heimdal is always included, no need for the test any more. Andrew Bartlett Modified: branches

svn commit: samba r11291 - in branches/SAMBA_4_0/source/rpc_server/lsa: .

Author: abartlet Date: 2005-10-25 12:39:14 + (Tue, 25 Oct 2005) New Revision: 11291 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11291 Log: Fix implementation of LookupNames4. Andrew Bartlett Modified: branches/SAMBA_4_0/source/rpc_server/lsa/dcesrv_lsa.c

svn commit: samba r11293 - in branches/SAMBA_4_0/source/auth: .

Author: abartlet Date: 2005-10-25 13:38:00 + (Tue, 25 Oct 2005) New Revision: 11293 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11293 Log: Use the right search when forming the data for the PAC. Andrew Bartlett Modified: branches/SAMBA_4_0/source/auth

svn commit: samba r11294 - in branches/SAMBA_4_0/source/heimdal: kdc lib/asn1 lib/gssapi lib/hdb lib/krb5 lib/roken

Author: abartlet Date: 2005-10-25 13:43:37 + (Tue, 25 Oct 2005) New Revision: 11294 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11294 Log: Update Heimdal in Samba4 to lorikeet-heimdal (which is in turn updated to CVS of 2005-10-24). Andrew Bartlett Modified

svn commit: samba r11297 - in branches/SAMBA_4_0/source/torture/rpc: .

Author: abartlet Date: 2005-10-26 05:37:35 + (Wed, 26 Oct 2005) New Revision: 11297 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11297 Log: Move the RPC-SCHANNEL test to using the credentials system for converting username/pass into the NTLM responses. Andrew

svn commit: samba r11298 - in branches/SAMBA_4_0/source/torture/rpc: .

Author: abartlet Date: 2005-10-26 05:56:44 + (Wed, 26 Oct 2005) New Revision: 11298 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11298 Log: Consolidate the 'short' samlogon tests, and move to using the credentials system for password - NTLM translation. Andrew

svn commit: samba r11272 - in branches/SAMBA_4_0/source: auth auth/kerberos torture/auth

Author: abartlet Date: 2005-10-24 07:11:40 + (Mon, 24 Oct 2005) New Revision: 11272 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11272 Log: In trying to track down why Win2k3 is again rejecting our PAC, ensure we can round-trip all the way back to a server_info

svn commit: samba r11273 - in branches/SAMBA_4_0/source/auth: .

Author: abartlet Date: 2005-10-24 07:59:19 + (Mon, 24 Oct 2005) New Revision: 11273 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11273 Log: Initialise the new server_info-logon_server element. Andrew Bartlett Modified: branches/SAMBA_4_0/source/auth

svn commit: samba r11282 - in branches/SAMBA_4_0/source/torture/auth: .

Author: abartlet Date: 2005-10-25 02:26:10 + (Tue, 25 Oct 2005) New Revision: 11282 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11282 Log: Fix memory leak in LOCAL-PAC test. Andrew Bartlett Modified: branches/SAMBA_4_0/source/torture/auth/pac.c Changeset

svn commit: samba r11270 - in branches/SAMBA_4_0/source: auth auth/gensec dsdb dsdb/samdb include kdc rpc_server rpc_server/drsuapi

Author: abartlet Date: 2005-10-23 22:20:42 + (Sun, 23 Oct 2005) New Revision: 11270 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11270 Log: Move the core CrackNames code from rpc_server/drsuapi to dsdb/samdb. I'm sure this will not be the final resting place

svn commit: lorikeet r481 - in trunk/heimdal: . appl/ftp appl/ftp/ftp appl/ftp/ftpd appl/login appl/popper appl/rcp appl/rsh appl/su appl/telnet appl/telnet/libtelnet appl/telnet/telnet appl/xnlock cf

Author: abartlet Date: 2005-10-23 23:12:08 + (Sun, 23 Oct 2005) New Revision: 481 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=481 Log: Update to Heimdal CVS as of 2005-10-24 Andrew Bartlett Added: trunk/heimdal/doc/standardisation/draft-ietf-cat

svn commit: samba r11212 - in branches/SAMBA_4_0/source/auth/gensec: .

Author: abartlet Date: 2005-10-20 07:36:08 + (Thu, 20 Oct 2005) New Revision: 11212 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11212 Log: Enable sealing of data with raw krb5, consolidate some code into the main gensec_krb5_start and always ask for sequence

svn commit: samba r11215 - in branches/SAMBA_4_0/source/auth/kerberos: .

Author: abartlet Date: 2005-10-20 10:10:40 + (Thu, 20 Oct 2005) New Revision: 11215 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11215 Log: Remove no-op prompter intended to work around bugs in old kerberos libs. I'm also worried this might cause loops, if we

svn commit: samba r11216 - in branches/SAMBA_4_0/source/auth: gensec kerberos

Author: abartlet Date: 2005-10-20 10:15:31 + (Thu, 20 Oct 2005) New Revision: 11216 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11216 Log: Upgrade to gd's PAC extraction code from Samba3. While I still want to make some this the kerberos library's problem, we

svn commit: samba r11217 - in branches/SAMBA_4_0/source/scripting/libjs: .

Author: abartlet Date: 2005-10-20 10:18:45 + (Thu, 20 Oct 2005) New Revision: 11217 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11217 Log: Ensure the realm is substituted in UPPER case. Andrew Bartlett Modified: branches/SAMBA_4_0/source/scripting/libjs

svn commit: samba r11218 - in branches/SAMBA_4_0/source: auth/kerberos setup

Author: abartlet Date: 2005-10-20 10:21:04 + (Thu, 20 Oct 2005) New Revision: 11218 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11218 Log: Always return the mutual authentication reply (needed for kpasswd), and remove now duplicated unwrap_pac(). Andrew

svn commit: samba r11219 - in branches/SAMBA_4_0/source/auth/gensec: .

Author: abartlet Date: 2005-10-20 10:25:51 + (Thu, 20 Oct 2005) New Revision: 11219 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11219 Log: Now that we have the credentials hooked in here, we have a much more reasonable value to fill in for the mechListMIC

svn commit: samba r11220 - in branches/SAMBA_4_0/source/auth: credentials kerberos

Author: abartlet Date: 2005-10-20 10:28:16 + (Thu, 20 Oct 2005) New Revision: 11220 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11220 Log: Add the ability to handle the salt prinicpal as part of the credentials. This works with the setup/secrets.ldif change

svn commit: samba r11221 - in branches/SAMBA_4_0/source/rpc_server/samr: .

Author: abartlet Date: 2005-10-20 10:29:41 + (Thu, 20 Oct 2005) New Revision: 11221 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11221 Log: I don't quite know how I tested this before, but clearly I didn't. The samdb_set_password_sid helper function now works

svn commit: samba r11222 - in branches/SAMBA_4_0/source: scripting/libjs setup

Author: abartlet Date: 2005-10-20 11:19:03 + (Thu, 20 Oct 2005) New Revision: 11222 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11222 Log: Small provision fixes: canonicalName is now generated, and the DC= list should be from the dnsdomain (ie lowercae

svn commit: samba r11223 - in branches/SAMBA_4_0/source/rpc_server/drsuapi: .

Author: abartlet Date: 2005-10-20 11:19:52 + (Thu, 20 Oct 2005) New Revision: 11223 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11223 Log: Only pass around the ldb handle (make this code easier to seperate into a general lib). Andrew Bartlett Modified

svn commit: samba r11225 - in branches/SAMBA_4_0/source/ldap_server: .

Author: abartlet Date: 2005-10-20 13:10:20 + (Thu, 20 Oct 2005) New Revision: 11225 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11225 Log: Remove pointless goto. Andrew Bartlett Modified: branches/SAMBA_4_0/source/ldap_server/ldap_bind.c Changeset

svn commit: samba r11226 - in branches/SAMBA_4_0/source/auth/gensec: .

Author: abartlet Date: 2005-10-20 13:11:06 + (Thu, 20 Oct 2005) New Revision: 11226 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11226 Log: Cope with Samba3's behaviour on LDAP with GSS-SPNEGO. Andrew Bartlett Modified: branches/SAMBA_4_0/source/auth/gensec

svn commit: samba r11239 - in branches/SAMBA_4_0/source: auth/gensec kdc param rpc_server/drsuapi setup

Author: abartlet Date: 2005-10-21 01:25:55 + (Fri, 21 Oct 2005) New Revision: 11239 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=11239 Log: Use ${REALM} for the realm in rootdse.ldif Add the kpasswd server to our KDC, implementing the 'original' and Microsoft

<    9   10   11   12   13   14   15   16   17   18   >