svn commit: lorikeet r140 - in trunk/heimdal: doc/standardisation include lib/hdb lib/roken

2004-12-24 Thread abartlet
Author: abartlet
Date: 2004-12-24 08:28:13 + (Fri, 24 Dec 2004)
New Revision: 140

WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=140

Log:
Commit a few missing files from the Heimdal upgrade.

Andrew Bartlett

Added:
   trunk/heimdal/doc/standardisation/draft-brezak-win2k-krb-authz-01.txt
   trunk/heimdal/doc/standardisation/draft-hartman-gss-naming-01.txt
   trunk/heimdal/doc/standardisation/draft-ietf-cat-kerberos-pk-init-21.txt
   trunk/heimdal/doc/standardisation/draft-ietf-cat-kerberos-pk-init-22.txt
   trunk/heimdal/doc/standardisation/draft-ietf-kitten-2478bis-00.txt
   trunk/heimdal/doc/standardisation/draft-ietf-kitten-2478bis-02.txt
   trunk/heimdal/doc/standardisation/draft-ietf-kitten-gss-naming-00.txt
   trunk/heimdal/doc/standardisation/draft-ietf-krb-wg-kerberos-referrals-05.txt
   trunk/heimdal/doc/standardisation/draft-ietf-krb-wg-ocsp-for-pkinit-01.txt
   trunk/heimdal/doc/standardisation/draft-ietf-krb-wg-ocsp-for-pkinit-02.txt
   trunk/heimdal/doc/standardisation/draft-ietf-krb-wg-preauth-framework-02.txt
   trunk/heimdal/doc/standardisation/draft-josefsson-sasl-kerberos5-01.txt
   
trunk/heimdal/doc/standardisation/draft-morris-java-gssapi-update-for-csharp-00.txt
   
trunk/heimdal/doc/standardisation/draft-williams-gssapi-domain-based-names-00.txt
   
trunk/heimdal/doc/standardisation/draft-williams-gssapi-extensions-iana-00.txt
   trunk/heimdal/doc/standardisation/draft-williams-gssapi-prf-00.txt
   
trunk/heimdal/doc/standardisation/draft-williams-gssapi-store-deleg-creds-01.txt
   trunk/heimdal/doc/standardisation/draft-williams-gssapi-v3-guide-to-00.txt
   
trunk/heimdal/doc/standardisation/draft-williams-krb5-gssapi-domain-based-names-00.txt
   trunk/heimdal/doc/standardisation/draft-williams-krb5-gssapi-prf-00.txt
   trunk/heimdal/doc/standardisation/draft-yu-krb-wg-kerberos-extensions-01.txt
   trunk/heimdal/doc/standardisation/draft-yu-krb-wg-kerberos-extensions-02.txt
   trunk/heimdal/doc/standardisation/draft-zhu-spnego-2478bis-00.txt
   trunk/heimdal/include/rc2.h
   trunk/heimdal/include/test-mem.h
   trunk/heimdal/lib/hdb/hdb.schema
   trunk/heimdal/lib/roken/parse_time-test.c
   trunk/heimdal/lib/roken/test-mem.c


Changeset:
Sorry, the patch is too large (30010 lines) to include; please use WebSVN to 
see it!
WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=lorikeetrev=140


svn commit: samba r4355 - in branches/SAMBA_4_0/source: include ldap_server libads libcli/auth librpc/rpc passdb smb_server

2004-12-24 Thread abartlet
Author: abartlet
Date: 2004-12-24 09:54:23 + (Fri, 24 Dec 2004)
New Revision: 4355

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4355

Log:
More work from the elves on Christmas eve:

 - Update Samba4's kerberos code to match the 'salting' changes in
   Samba3 (and many other cleanups by jra).

 - Move GENSEC into the modern era of talloc destructors.  This avoids
   many of the memory leaks in this code, as we now can't somehow
   'forget' to call the end routine.
  - This required fixing some of the talloc hierarchies.

 - The new krb5 seems more sensitive to getting the service name
   right, so start actually setting the service name on the krb5 context.

Andrew Bartlett

Modified:
   branches/SAMBA_4_0/source/include/secrets.h
   branches/SAMBA_4_0/source/ldap_server/ldap_bind.c
   branches/SAMBA_4_0/source/libads/config.m4
   branches/SAMBA_4_0/source/libcli/auth/clikrb5.c
   branches/SAMBA_4_0/source/libcli/auth/gensec.c
   branches/SAMBA_4_0/source/libcli/auth/gensec.h
   branches/SAMBA_4_0/source/libcli/auth/gensec_krb5.c
   branches/SAMBA_4_0/source/libcli/auth/gensec_ntlmssp.c
   branches/SAMBA_4_0/source/libcli/auth/kerberos.c
   branches/SAMBA_4_0/source/libcli/auth/kerberos.h
   branches/SAMBA_4_0/source/libcli/auth/kerberos_verify.c
   branches/SAMBA_4_0/source/libcli/auth/ntlmssp.c
   branches/SAMBA_4_0/source/libcli/auth/spnego.c
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc_schannel.c
   branches/SAMBA_4_0/source/passdb/secrets.c
   branches/SAMBA_4_0/source/smb_server/sesssetup.c


Changeset:
Sorry, the patch is too large (1869 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4355


svn commit: samba r4356 - in branches/SAMBA_4_0/source/libcli/raw: .

2004-12-24 Thread abartlet
Author: abartlet
Date: 2004-12-24 09:57:44 + (Fri, 24 Dec 2004)
New Revision: 4356

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4356

Log:
Allow anonymous connections to use NTLMSSP.  The silly bugs that
prevented this are gone.

Andrew Bartlett

Modified:
   branches/SAMBA_4_0/source/libcli/raw/clitree.c


Changeset:
Modified: branches/SAMBA_4_0/source/libcli/raw/clitree.c
===
--- branches/SAMBA_4_0/source/libcli/raw/clitree.c  2004-12-24 09:54:23 UTC 
(rev 4355)
+++ branches/SAMBA_4_0/source/libcli/raw/clitree.c  2004-12-24 09:57:44 UTC 
(rev 4356)
@@ -223,7 +223,6 @@
setup.generic.in.password = NULL;
setup.generic.in.user = ;
setup.generic.in.domain = ;
-   setup.generic.in.capabilities = ~CAP_EXTENDED_SECURITY;
} else {
setup.generic.in.password = password;
setup.generic.in.user = user;



svn commit: samba r4357 - in branches/SAMBA_4_0/source/libcli/auth: .

2004-12-24 Thread abartlet
Author: abartlet
Date: 2004-12-24 10:56:23 + (Fri, 24 Dec 2004)
New Revision: 4357

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4357

Log:
Return a more sensible error code if a NULL (as opposed to the valid
) username is asked for.

Andrew Bartlett

Modified:
   branches/SAMBA_4_0/source/libcli/auth/ntlmssp.c


Changeset:
Modified: branches/SAMBA_4_0/source/libcli/auth/ntlmssp.c
===
--- branches/SAMBA_4_0/source/libcli/auth/ntlmssp.c 2004-12-24 09:57:44 UTC 
(rev 4356)
+++ branches/SAMBA_4_0/source/libcli/auth/ntlmssp.c 2004-12-24 10:56:23 UTC 
(rev 4357)
@@ -145,10 +145,11 @@
 
 NTSTATUS ntlmssp_set_username(struct ntlmssp_state *ntlmssp_state, const char 
*user) 
 {
-   ntlmssp_state-user = talloc_strdup(ntlmssp_state, user);
if (!user) {
-   ntlmssp_state-user = NULL;
+   /* it should be at least  */
+   return NT_STATUS_INVALID_PARAMETER;
}
+   ntlmssp_state-user = talloc_strdup(ntlmssp_state, user);
if (!ntlmssp_state-user) {
return NT_STATUS_NO_MEMORY;
}



Re: svn commit: samba r4355 - in branches/SAMBA_4_0/source: include ldap_server libads libcli/auth librpc/rpc passdb smb_server

2004-12-24 Thread Stefan (metze) Metzmacher
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
[EMAIL PROTECTED] schrieb:
| Author: abartlet
| Date: 2004-12-24 09:54:23 + (Fri, 24 Dec 2004)
| New Revision: 4355
|
| WebSVN: 
http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4355
|
| Log:
| More work from the elves on Christmas eve:
|
|  - Update Samba4's kerberos code to match the 'salting' changes in
|Samba3 (and many other cleanups by jra).
|
|  - Move GENSEC into the modern era of talloc destructors.  This avoids
|many of the memory leaks in this code, as we now can't somehow
|'forget' to call the end routine.
|   - This required fixing some of the talloc hierarchies.
Hi Andrew!
nice work!
it would be very nice if you could you also remove gensec_end() and replace it 
with talloc_free()
so we could get rid of the destructor for gensec_spnego and some others...
I'll try to do this for the auth subsystem with my coming patch...
- --
metze
Stefan Metzmacher metze at samba.org www.samba.org
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFBzH1bm70gjA5TCD8RAt2XAKDK6Gs/mPXMkSctr24ZoQMcSy+lugCffjk+
uodkw40anQQ+h6bEZVux/QI=
=kXhQ
-END PGP SIGNATURE-


svn commit: samba r4358 - in branches/SAMBA_4_0/source: libcli/auth librpc/rpc rpc_server smb_server utils

2004-12-24 Thread abartlet
Author: abartlet
Date: 2004-12-24 23:02:39 + (Fri, 24 Dec 2004)
New Revision: 4358

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4358

Log:
At metze's request, the Christmas elves have removed gensec_end in
favor of talloc_free().

Andrew Bartlett

Modified:
   branches/SAMBA_4_0/source/libcli/auth/gensec.c
   branches/SAMBA_4_0/source/libcli/auth/spnego.c
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc.c
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc_auth.c
   branches/SAMBA_4_0/source/librpc/rpc/dcerpc_schannel.c
   branches/SAMBA_4_0/source/rpc_server/dcerpc_server.c
   branches/SAMBA_4_0/source/smb_server/sesssetup.c
   branches/SAMBA_4_0/source/utils/ntlm_auth.c


Changeset:
Sorry, the patch is too large (252 lines) to include; please use WebSVN to see 
it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=revroot=sambarev=4358