svn commit: samba r11440 - in branches/SAMBA_4_0/source/auth/credentials: .

Author: abartlet Date: 2005-11-01 13:33:05 + (Tue, 01 Nov 2005) New Revision: 11440 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11440 Log: Actually check the right thing for 'is this a machine account' (thanks metze). Andrew Bartlett Mod

svn commit: samba r11441 - in branches/SAMBA_4_0/source/auth: .

Author: abartlet Date: 2005-11-01 13:35:59 + (Tue, 01 Nov 2005) New Revision: 11441 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11441 Log: Remove the auth_domain module from Samba4, as we will only do things via winbindd in Samba4. Andrew Bartlett

svn commit: lorikeet r486 - in trunk/heimdal/kdc: .

Author: abartlet Date: 2005-11-01 13:37:23 + (Tue, 01 Nov 2005) New Revision: 486 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=486 Log: Merge memory leak fix from Samba4. Andrew Bartlett Modified: trunk/heimdal/kdc/kerberos5.c Changeset:

svn commit: lorikeet r487 - in trunk/heimdal/lib/gssapi: .

Author: abartlet Date: 2005-11-01 13:38:46 + (Tue, 01 Nov 2005) New Revision: 487 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=487 Log: Merge correctness fix by Volker from Samba4. Andrew Bartlett Modified: trunk/heimdal/lib/gssapi/cfx.c C

svn commit: samba r11442 - in branches/SAMBA_4_0/source/script/tests: .

Author: abartlet Date: 2005-11-01 14:21:31 + (Tue, 01 Nov 2005) New Revision: 11442 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11442 Log: Don't use BASE-NEGNOWAIT any more. It is a mostly meaningless test. Andrew Bartlett Modified: branc

svn commit: lorikeet r488 - in trunk/heimdal/lib/gssapi: .

Author: abartlet Date: 2005-11-02 00:19:35 + (Wed, 02 Nov 2005) New Revision: 488 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=488 Log: Fix up credentials delegation, broken by the splitout for DCE_STYLE. Andrew Bartlett Modified: trunk/hei

svn commit: lorikeet r489 - in trunk/heimdal/lib/gssapi: .

Author: abartlet Date: 2005-11-02 00:29:07 + (Wed, 02 Nov 2005) New Revision: 489 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=489 Log: As we now have gss_krb5_import_ccache we don't need our Samba4 specific hack in gsskrb5_acquire_cred. An

svn commit: samba r11452 - in branches/SAMBA_4_0/source: auth auth/credentials auth/gensec auth/kerberos heimdal/lib/gssapi heimdal/lib/krb5 ntvfs/cifs

Author: abartlet Date: 2005-11-02 00:31:22 + (Wed, 02 Nov 2005) New Revision: 11452 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11452 Log: Update Heimdal to current lorikeet, including removing the ccache side of the gsskrb5_acquire_cred hack. Add

svn commit: samba r11453 - in branches/SAMBA_4_0/source/torture/rpc: .

Author: abartlet Date: 2005-11-02 00:34:25 + (Wed, 02 Nov 2005) New Revision: 11453 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11453 Log: Fix warning, for a case that just can't happen. Andrew Bartlett Modified: branches/SAMBA_4_0/sourc

svn commit: samba r11462 - in branches/SAMBA_4_0/source/heimdal/lib/gssapi: .

Author: abartlet Date: 2005-11-02 02:22:35 + (Wed, 02 Nov 2005) New Revision: 11462 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11462 Log: Fix the build: somehow I lost the header for this samba-specific hack. Andrew Bartlett Modified:

svn commit: lorikeet r490 - in trunk/heimdal/lib/gssapi: .

Author: abartlet Date: 2005-11-02 02:23:40 + (Wed, 02 Nov 2005) New Revision: 490 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=490 Log: merge prototype for samba-specific hack back into lorikeet-heimdal Andrew Bartlett Modified: trunk/hei

svn commit: samba r11466 - in branches/SAMBA_4_0/source: client libcli/raw

Author: abartlet Date: 2005-11-02 03:08:52 + (Wed, 02 Nov 2005) New Revision: 11466 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11466 Log: Clear up some memory leaks in smbclient. Andrew Bartlett Modified: branches/SAMBA_4_0/source/client/

svn commit: samba r11468 - in branches/SAMBA_4_0/source: auth/gensec heimdal/lib/gssapi

Author: abartlet Date: 2005-11-02 03:48:49 + (Wed, 02 Nov 2005) New Revision: 11468 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11468 Log: Merge a bit more of init_sec_context from Heimdal CVS into our DCE_STYLE modified version, and add parametric op

svn commit: samba r11469 - in branches/SAMBA_4_0/source/heimdal/lib/krb5: .

Author: abartlet Date: 2005-11-02 04:11:36 + (Wed, 02 Nov 2005) New Revision: 11469 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11469 Log: Fix typo, and use the correct (RFC4120) session key for delegating credentials. This means we now delegate to

svn commit: samba r11470 - in branches/SAMBA_4_0/source/auth/gensec: .

Author: abartlet Date: 2005-11-02 04:12:47 + (Wed, 02 Nov 2005) New Revision: 11470 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11470 Log: To a server trusted for delegation (checked for in the gss libs), delegate by default. Andrew Bartlett

svn commit: samba r11471 - in branches/SAMBA_4_0/source/ntvfs/cifs: .

Author: abartlet Date: 2005-11-02 04:24:04 + (Wed, 02 Nov 2005) New Revision: 11471 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11471 Log: Describe how kerberos forwarding works with the ntvfs. Andrew Bartlett Modified: branches/SAMBA_4_0/sour

svn commit: lorikeet r491 - in trunk/heimdal/lib: gssapi krb5

Author: abartlet Date: 2005-11-02 04:30:38 + (Wed, 02 Nov 2005) New Revision: 491 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=491 Log: Merge from Samba4 fixes for delegated credentials, as well as a typo fix in reference to RFC4120 (not 2140, TCP

svn commit: samba r11477 - in branches/SAMBA_4_0/source/heimdal/lib/gssapi: .

Author: abartlet Date: 2005-11-02 09:51:32 + (Wed, 02 Nov 2005) New Revision: 11477 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11477 Log: This seems really nasty, but as I understand it an attacker cannot change this checksum, as it is inside the e

svn commit: lorikeet r492 - in trunk/heimdal/lib/gssapi: .

Author: abartlet Date: 2005-11-02 09:54:13 + (Wed, 02 Nov 2005) New Revision: 492 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=492 Log: Merge Samba3 compatability hack from Samba4. Andrew Bartlett Modified: trunk/heimdal/lib/gssapi/8003.c C

svn commit: samba r11497 - in branches/SAMBA_4_0/source/librpc/rpc: .

Author: abartlet Date: 2005-11-04 03:30:47 + (Fri, 04 Nov 2005) New Revision: 11497 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11497 Log: Don't name parameters 'floor'. Rename fl and floor to epm_floor for consistancy. An

svn commit: samba r11512 - in branches/SAMBA_4_0/source/lib/ldb/include: .

Author: abartlet Date: 2005-11-05 05:44:26 + (Sat, 05 Nov 2005) New Revision: 11512 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11512 Log: fix typo Modified: branches/SAMBA_4_0/source/lib/ldb/include/ldb.h Changeset: Modified: branches/SAMBA_4_

svn commit: samba r11513 - in branches/SAMBA_4_0/source: ntvfs/cifs rpc_server/remote

Author: abartlet Date: 2005-11-05 06:36:42 + (Sat, 05 Nov 2005) New Revision: 11513 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11513 Log: Add the ability to use the local machine account instead of a static password or delegation. Add the ab

svn commit: samba r11514 - in branches/SAMBA_4_0/source/auth/gensec: .

Author: abartlet Date: 2005-11-05 06:38:47 + (Sat, 05 Nov 2005) New Revision: 11514 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11514 Log: Fixup debug message Modified: branches/SAMBA_4_0/source/auth/gensec/gensec_gssapi.c Changeset: Modified:

svn commit: samba r11520 - in branches/SAMBA_4_0/source/auth: .

Author: abartlet Date: 2005-11-05 10:51:13 + (Sat, 05 Nov 2005) New Revision: 11520 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11520 Log: indent Modified: branches/SAMBA_4_0/source/auth/auth_sam.c Changeset: Modified: branches/SAMBA_4_0/sou

svn commit: samba r11521 - in branches/SAMBA_4_0/source: auth/gensec libcli/ldap

Author: abartlet Date: 2005-11-05 11:02:37 + (Sat, 05 Nov 2005) New Revision: 11521 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11521 Log: Add in client support for checking supportedSASLmechanisms, and then determining a mechanism to use. Curr

svn commit: samba r11522 - in branches/SAMBA_4_0/source: auth lib/ldb/ldb_ildap

Author: abartlet Date: 2005-11-05 11:13:22 + (Sat, 05 Nov 2005) New Revision: 11522 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11522 Log: Add support for delegated credentials and machine account credentials to ldb, based on the sessionInfo we

svn commit: samba r11523 - in branches/SAMBA_4_0/source/libcli/ldap: .

Author: abartlet Date: 2005-11-05 11:24:10 + (Sat, 05 Nov 2005) New Revision: 11523 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11523 Log: Working towards having Samba3 join Samba4, this allows the SASL credentials to be NULL, where the client is requ

svn commit: samba r11524 - in branches/SAMBA_4_0/source/kdc: .

Author: abartlet Date: 2005-11-05 11:29:34 + (Sat, 05 Nov 2005) New Revision: 11524 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11524 Log: More work on our hdb backend in the KDC. The aim here is to restructure the queries to match the queries we do

svn commit: samba r11525 - in branches/SAMBA_4_0/source: auth kdc

Author: abartlet Date: 2005-11-05 21:26:28 + (Sat, 05 Nov 2005) New Revision: 11525 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11525 Log: Move lookups (including the attribute search) for users from kdc/hdb-ldb.c to share the routines used for aut

svn commit: samba r11529 - in branches/SAMBA_4_0/source/heimdal/lib/krb5: .

Author: abartlet Date: 2005-11-06 01:46:12 + (Sun, 06 Nov 2005) New Revision: 11529 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11529 Log: Disable DNS lookups for forwarded credentials, unless really, really wanted. There is nothing that suggests

svn commit: lorikeet r493 - in trunk/heimdal/lib/krb5: .

Author: abartlet Date: 2005-11-06 04:06:28 + (Sun, 06 Nov 2005) New Revision: 493 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=493 Log: Disable DNS lookups for forwarded credentials, unless really, really wanted. There is nothing that suggests

svn commit: samba r11536 - in branches/SAMBA_4_0/source: heimdal/kdc heimdal/lib/hdb kdc

Author: abartlet Date: 2005-11-06 14:15:34 + (Sun, 06 Nov 2005) New Revision: 11536 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11536 Log: Add a hook for client-principal access control to hdb-ldb, re-using the code in auth/auth_sam.c for consistanc

svn commit: samba r11537 - in branches/SAMBA_4_0/source/auth: .

Author: abartlet Date: 2005-11-06 14:16:34 + (Sun, 06 Nov 2005) New Revision: 11537 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11537 Log: Make the authsam_account_ok routine callable by external users (the KDC). Andrew Bartlett Modified:

svn commit: samba r11538 - in branches/SAMBA_4_0/source/auth/kerberos: .

Author: abartlet Date: 2005-11-06 14:17:00 + (Sun, 06 Nov 2005) New Revision: 11538 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11538 Log: More notes on things we need. Andrew Bartlett Modified: branches/SAMBA_4_0/source/auth/kerberos/kerberos-n

svn commit: samba r11540 - in branches/SAMBA_4_0/source/kdc: .

Author: abartlet Date: 2005-11-07 02:19:19 + (Mon, 07 Nov 2005) New Revision: 11540 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11540 Log: Some notes to myself on RFC complience. Andrew Bartlett Modified: branches/SAMBA_4_0/source/kdc/kdc.c C

svn commit: samba r11541 - in branches/SAMBA_4_0/source/heimdal/lib/gssapi: .

Author: abartlet Date: 2005-11-07 02:24:50 + (Mon, 07 Nov 2005) New Revision: 11541 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11541 Log: More logical (I think...) delegation semantics. Andrew Bartlett Modified: branches/SAMBA_4_0/source/hei

svn commit: samba r11542 - in branches/SAMBA_4_0/source/heimdal/lib/krb5: .

Author: abartlet Date: 2005-11-07 02:25:37 + (Mon, 07 Nov 2005) New Revision: 11542 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11542 Log: Add the netbios name type. We will need it when we start to handle allowedWorkstations on Krb5. Andrew

svn commit: samba r11543 - in branches/SAMBA_4_0/source: auth auth/gensec auth/kerberos heimdal/kdc heimdal/lib/hdb heimdal/lib/krb5 kdc torture/auth

Author: abartlet Date: 2005-11-07 02:29:37 + (Mon, 07 Nov 2005) New Revision: 11543 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11543 Log: A major upgrade to our KDC and PAC handling. We now put the PAC in the AS-REP, so that the client has it in

svn commit: samba r11544 - in branches/SAMBA_4_0/source/kdc: .

Author: abartlet Date: 2005-11-07 02:40:38 + (Mon, 07 Nov 2005) New Revision: 11544 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11544 Log: Allow delegation in a Samba4 realm. Andrew Bartlett Modified: branches/SAMBA_4_0/source/kdc/hdb-ldb.c C

svn commit: samba r11545 - in branches/SAMBA_4_0/source/include: .

Author: abartlet Date: 2005-11-07 03:05:34 + (Mon, 07 Nov 2005) New Revision: 11545 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11545 Log: Remove old #define. Andrew Bartlett Modified: branches/SAMBA_4_0/source/include/ads.h Changeset:

svn commit: samba r11568 - in branches/SAMBA_4_0/source/heimdal/kdc: .

Author: abartlet Date: 2005-11-08 01:17:41 + (Tue, 08 Nov 2005) New Revision: 11568 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11568 Log: Debuging aids: Let the administrator know when a key/entry expired, rather than just the fact of the expiry.

svn commit: samba r11572 - in branches/SAMBA_4_0/source/kdc: .

Author: abartlet Date: 2005-11-08 02:30:42 + (Tue, 08 Nov 2005) New Revision: 11572 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11572 Log: Add support for accountExpires and password expiry (should cause the ticket to be reduced in validity). Andrew

svn commit: samba r11928 - in branches/SAMBA_4_0/source/auth/kerberos: .

Author: abartlet Date: 2005-11-27 02:00:12 + (Sun, 27 Nov 2005) New Revision: 11928 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11928 Log: More Kerberos musings... Andrew Bartlett Modified: branches/SAMBA_4_0/source/auth/kerberos/kerberos-n

svn commit: samba r11929 - in branches/SAMBA_4_0/source/auth: .

Author: abartlet Date: 2005-11-27 02:00:37 + (Sun, 27 Nov 2005) New Revision: 11929 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11929 Log: Add static, comments. Andrew Bartlett Modified: branches/SAMBA_4_0/source/auth/auth_sam.c Changeset:

svn commit: samba r11930 - in branches/SAMBA_4_0/source: heimdal/kdc kdc

Author: abartlet Date: 2005-11-27 02:02:44 + (Sun, 27 Nov 2005) New Revision: 11930 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11930 Log: Add socket/packet handling code for kpasswdd Allow ticket requests with only a netbios name to be consider

svn commit: samba r11931 - in branches/SAMBA_4_0/source/heimdal: .

Author: abartlet Date: 2005-11-27 02:03:42 + (Sun, 27 Nov 2005) New Revision: 11931 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11931 Log: Add a short README explaining what this directory is all about. Andrew Bartlett Added: branches/SAMBA_4_

svn commit: samba r11940 - in branches/SAMBA_4_0/source: auth/kerberos heimdal/kdc

Author: abartlet Date: 2005-11-28 07:59:46 + (Mon, 28 Nov 2005) New Revision: 11940 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11940 Log: Love has clarified why this code does what it does. Andrew Bartlett Modified: branches/SAMBA_4_0/sou

svn commit: lorikeet r495 - in trunk/heimdal: kdc lib/gssapi lib/hdb lib/krb5

Author: abartlet Date: 2005-11-28 21:17:20 + (Mon, 28 Nov 2005) New Revision: 495 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=495 Log: Merge changes (particularly hdb_entry_ex) from Samba4 into lorikeet-heimdal. These don't work at the mom

svn commit: lorikeet r496 - in trunk/heimdal: . appl/telnet appl/telnet/telnet appl/telnet/telnetd doc/standardisation kdc lib/gssapi lib/krb5

Author: abartlet Date: 2005-11-28 23:08:22 + (Mon, 28 Nov 2005) New Revision: 496 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=496 Log: Update to Heimdal 2005-11-29, including removal of hacks now replaced by proper implementations in upstream

svn commit: lorikeet r497 - in trunk/heimdal/lib/hdb: .

Author: abartlet Date: 2005-11-28 23:17:18 + (Mon, 28 Nov 2005) New Revision: 497 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=497 Log: These memsets should ensure that we don't call hdb function pointers (such as the new fetch_entry_ex) tha

svn commit: lorikeet r498 - in trunk/heimdal/lib: gssapi hdb krb5

Author: abartlet Date: 2005-11-29 01:23:17 + (Tue, 29 Nov 2005) New Revision: 498 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=498 Log: A couple of updates to bring us in line with Heimdal CVS on 2005-11-29 (Love intergrated some of the fixes, inclu

svn commit: lorikeet r500 - in trunk/heimdal/lib/gssapi: .

Author: abartlet Date: 2005-11-29 11:07:21 + (Tue, 29 Nov 2005) New Revision: 500 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=500 Log: Fix the other half of the merge error. Andrew Bartlett Modified: trunk/heimdal/lib/gssapi/gssapi.h C

svn commit: samba r11987 - in branches/SAMBA_4_0/source/kdc: .

Author: abartlet Date: 2005-12-01 04:50:28 + (Thu, 01 Dec 2005) New Revision: 11987 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11987 Log: Clarify the accountExpires behaviour in the KDC. Andrew Bartlett Modified: branches/SAMBA_4_0/source/kdc/h

svn commit: samba r11988 - in branches/SAMBA_4_0/source/lib/ldb/tools: .

Author: abartlet Date: 2005-12-01 04:52:54 + (Thu, 01 Dec 2005) New Revision: 11988 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11988 Log: Setup the sessionInfo just before the connect, rather than earlier when we havn't finished popt. An

svn commit: samba r11989 - in branches/SAMBA_4_0/source/auth: .

Author: abartlet Date: 2005-12-01 04:54:28 + (Thu, 01 Dec 2005) New Revision: 11989 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11989 Log: Rather than grabbing the machine account details at this point, grab them 'later'. We will need to

svn commit: samba r11990 - in branches/SAMBA_4_0/source/setup: .

Author: abartlet Date: 2005-12-01 04:55:18 + (Thu, 01 Dec 2005) New Revision: 11990 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11990 Log: Set the password set time as 'now', so it isn't expired back in 2004. Andrew Bartlett Modified

svn commit: samba r11991 - in branches/SAMBA_4_0/source/auth/gensec: .

Author: abartlet Date: 2005-12-01 04:58:15 + (Thu, 01 Dec 2005) New Revision: 11991 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11991 Log: Null termainte the list of backends. (Makes it easier to walk the list). Andrew Bartlett Modified:

svn commit: samba r11992 - in branches/SAMBA_4_0/source/smb_server/smb: .

Author: abartlet Date: 2005-12-01 05:06:52 + (Thu, 01 Dec 2005) New Revision: 11992 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11992 Log: Potentially allow SPNEGO to be disabled (as occours on WinXP standalone), and use only NTLMSSP. (But doing

svn commit: samba r11993 - in branches/SAMBA_4_0/source/auth/kerberos: .

Author: abartlet Date: 2005-12-01 05:09:28 + (Thu, 01 Dec 2005) New Revision: 11993 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11993 Log: As well as making an in-MEMORY keytab, allow a file-based keytab to be updated. This allows a new passwo

svn commit: samba r11994 - in branches/SAMBA_4_0/source/auth/kerberos: .

Author: abartlet Date: 2005-12-01 05:10:37 + (Thu, 01 Dec 2005) New Revision: 11994 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11994 Log: This function no longer needs a special declaration. Andrew Bartlett Modified: branches/SAMBA_4_0/sou

svn commit: samba r11995 - in branches/SAMBA_4_0/source: auth/credentials auth/gensec heimdal/kdc heimdal/lib/gssapi heimdal/lib/hdb heimdal/lib/krb5 libnet scripting/ejs scripting/libjs setup

Author: abartlet Date: 2005-12-01 05:20:39 + (Thu, 01 Dec 2005) New Revision: 11995 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=11995 Log: A big kerberos-related update. This merges Samba4 up to current lorikeet-heimdal, which includes a replacement

svn commit: lorikeet r501 - in trunk/heimdal/lib/kadm5: .

Author: abartlet Date: 2005-12-01 21:07:37 + (Thu, 01 Dec 2005) New Revision: 501 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=501 Log: Make the implementation match the comment: change password only makes sense on client-style names. (Not that Sam

svn commit: lorikeet r502 - in trunk/heimdal: . appl/telnet appl/telnet/telnetd doc kadmin kcm lib/gssapi lib/hdb lib/kadm5 lib/krb5 tests/db

Author: abartlet Date: 2005-12-01 21:36:07 + (Thu, 01 Dec 2005) New Revision: 502 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=502 Log: Update lorikeet-heimdal to upstream Heimdal CVS as of 2005-12-02. Importantly, this includes reference countin

svn commit: samba r12000 - in branches/SAMBA_4_0/source/heimdal/lib: gssapi hdb krb5

Author: abartlet Date: 2005-12-01 22:18:34 + (Thu, 01 Dec 2005) New Revision: 12000 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12000 Log: Update to current lorikeet-heimdal, including in particular support for referencing an existing in-MEMOR

svn commit: samba r12035 - in branches/SAMBA_4_0/source/kdc: .

Author: abartlet Date: 2005-12-02 22:37:07 + (Fri, 02 Dec 2005) New Revision: 12035 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12035 Log: Fix memory leaks in the KDC. Andrew Bartlett Modified: branches/SAMBA_4_0/source/kdc/hdb-ldb.c C

svn commit: lorikeet r503 - in trunk/heimdal/lib/krb5: .

Author: abartlet Date: 2005-12-03 00:32:32 + (Sat, 03 Dec 2005) New Revision: 503 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=503 Log: Test krb5_kt_remove_entry in the test_keytab, and therefore find a MEMORY keytab bug on systems where realloc(pt

svn commit: lorikeet r504 - in trunk/heimdal/lib/krb5: .

Author: abartlet Date: 2005-12-03 00:37:48 + (Sat, 03 Dec 2005) New Revision: 504 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=504 Log: I think this is a better fix for the realloc/free bugs. Andrew Bartlett Modified: trunk/heimdal/

svn commit: samba r12036 - in branches/SAMBA_4_0/source/kdc: .

Author: abartlet Date: 2005-12-03 00:46:23 + (Sat, 03 Dec 2005) New Revision: 12036 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12036 Log: Fix more KDC memory leaks (and there are probably still more...). Andrew Bartlett Modified: branches/S

svn commit: samba r12037 - in branches/SAMBA_4_0/source/heimdal/lib/krb5: .

Author: abartlet Date: 2005-12-03 00:47:51 + (Sat, 03 Dec 2005) New Revision: 12037 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12037 Log: Fix malloc corruption caused by double-free(), where realloc(ptr, 0) is equivilant to free(). This is the issu

svn commit: samba r12056 - in branches/SAMBA_4_0/source/auth/kerberos: .

Author: abartlet Date: 2005-12-04 12:17:02 + (Sun, 04 Dec 2005) New Revision: 12056 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12056 Log: Some clarification fixes for the keytab code, and use the right function for enctype to string. Andrew

svn commit: samba r12058 - in branches/SAMBA_4_0/source/auth: .

Author: abartlet Date: 2005-12-05 01:36:53 + (Mon, 05 Dec 2005) New Revision: 12058 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12058 Log: Set an anonymous fallback, if the machine account isn't available. Andrew Bartlett Modified: branc

svn commit: samba r12059 - in branches/SAMBA_4_0/source/auth/kerberos: .

Author: abartlet Date: 2005-12-05 01:38:26 + (Mon, 05 Dec 2005) New Revision: 12059 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12059 Log: Use random keytab names (so we get different keytabs, rather than share the MEMORY: keytab). Andrew Bartlett

svn commit: samba r12060 - in branches/SAMBA_4_0/source/auth: credentials gensec

Author: abartlet Date: 2005-12-05 03:20:40 + (Mon, 05 Dec 2005) New Revision: 12060 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12060 Log: Work towards allowing the credentials system to allow/deny certain GENSEC mechansims. This will allow a machine

svn commit: samba r12061 - in branches/SAMBA_4_0/source/auth/credentials: .

Author: abartlet Date: 2005-12-05 03:42:28 + (Mon, 05 Dec 2005) New Revision: 12061 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12061 Log: Add missing file to previous commit. This provides a hook on which to attach a restriction on availabl

svn commit: samba r12062 - in branches/SAMBA_4_0/source/libcli/ldap: .

Author: abartlet Date: 2005-12-05 04:10:13 + (Mon, 05 Dec 2005) New Revision: 12062 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12062 Log: SASL negotiation now requires a gensec_security context, so that we only try permitted mechanims. Andrew

svn commit: samba r12178 - in branches/SAMBA_4_0/source/lib: .

Author: abartlet Date: 2005-12-11 08:27:14 + (Sun, 11 Dec 2005) New Revision: 12178 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12178 Log: Make ldb_ildap work against localhost again, by setting the event context into the ldb opaque. I'm sure

svn commit: samba r12179 - in branches/SAMBA_4_0/source: auth/credentials auth/gensec kdc

Author: abartlet Date: 2005-12-11 08:31:46 + (Sun, 11 Dec 2005) New Revision: 12179 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12179 Log: Allow our KDC to use LDAP to get to the backend database. To avoid a circular depenency, it is not allowed to

svn commit: lorikeet r506 - in trunk/heimdal: lib/krb5 tests/db

Author: abartlet Date: 2005-12-13 15:35:22 + (Tue, 13 Dec 2005) New Revision: 506 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=506 Log: In lorikeet-heimdal, if the local hostname is not fully qualified, we will not do DNS lookups to try and guess

svn commit: lorikeet r507 - in trunk/heimdal: . doc kadmin kdc kuser lib/asn1 lib/com_err lib/gssapi lib/hdb lib/kadm5 lib/krb5 lib/roken tests

Author: abartlet Date: 2005-12-13 15:42:33 + (Tue, 13 Dec 2005) New Revision: 507 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=507 Log: Merge to Heimdal CVS as of 2005-12-12. I needed to do a bit of work to have 'make check' pass: In part

svn commit: lorikeet r508 - in trunk/heimdal: . lib/hdb lib/kadm5

Author: abartlet Date: 2005-12-13 15:52:37 + (Tue, 13 Dec 2005) New Revision: 508 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=508 Log: Love fixed many of the same (and more) bugs regarding need to zero hdb_entry_ex structures that I did, so u

svn commit: samba r12227 - in branches/SAMBA_4_0/source: auth auth/credentials auth/gensec dsdb/samdb ldap_server lib lib/ldb/ldb_ildap lib/registry libnet nbt_server/wins ntptr/simple_ldb passdb scri

Author: abartlet Date: 2005-12-14 07:22:25 + (Wed, 14 Dec 2005) New Revision: 12227 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12227 Log: I realised that I wasn't yet seeing authenticated LDAP for the ldb backend. The idea is that every time w

svn commit: samba r12232 - in branches/SAMBA_4_0/swat/esptest: .

Author: abartlet Date: 2005-12-14 17:16:06 + (Wed, 14 Dec 2005) New Revision: 12232 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12232 Log: I hate SWAT code being outside 'source'. Add in code to push the user's session info into ld

svn commit: samba r12252 - in branches/SAMBA_4_0/source/scripting/libjs: .

Author: abartlet Date: 2005-12-15 02:39:29 + (Thu, 15 Dec 2005) New Revision: 12252 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12252 Log: With this change (hack) we can now do an provision onto Samba4's LDAP server. Now to try another o

svn commit: lorikeet r509 - in trunk/heimdal: . doc/standardisation kdc lib/asn1 lib/hdb lib/krb5

Author: abartlet Date: 2005-12-15 06:33:23 + (Thu, 15 Dec 2005) New Revision: 509 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=509 Log: Love has updated upstream Heidmal again, and this brings us up to 2005-12-14. The main change here is that l

svn commit: lorikeet r510 - in trunk/heimdal: kdc lib/hdb

Author: abartlet Date: 2005-12-15 16:17:02 + (Thu, 15 Dec 2005) New Revision: 510 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=510 Log: Less const, due to embedded private pointer. Andrew Bartlett Modified: trunk/heimdal/kdc/kerberos5.c

svn commit: lorikeet r511 - in trunk/heimdal/kdc: .

Author: abartlet Date: 2005-12-15 17:40:38 + (Thu, 15 Dec 2005) New Revision: 511 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=lorikeet&rev=511 Log: These prototypes moved to a -private.h in the last merge. Andew Bartlett Added: trunk/heimdal/kdc/kdc-p

svn commit: samba r12267 - in branches/SAMBA_4_0/source/smbd: .

Author: abartlet Date: 2005-12-15 20:25:37 + (Thu, 15 Dec 2005) New Revision: 12267 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12267 Log: Try to avoid segfault in kerberos libs, because we talloc_free()'ed the old event context in the standard

svn commit: samba r12268 - in branches/SAMBA_4_0/source/auth/gensec: .

Author: abartlet Date: 2005-12-15 20:29:02 + (Thu, 15 Dec 2005) New Revision: 12268 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12268 Log: Use transactions to ensure that the schannel db is consistant. Andrew Bartlett Modified: branches/SAMBA_4_

svn commit: samba r12269 - in branches/SAMBA_4_0/source: heimdal/kdc heimdal/lib/asn1 heimdal/lib/gssapi heimdal/lib/hdb heimdal/lib/krb5 heimdal_build kdc

Author: abartlet Date: 2005-12-15 20:38:24 + (Thu, 15 Dec 2005) New Revision: 12269 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12269 Log: Update to current lorikeet-heimdal. This changed the way the hdb interface worked, so hdb-ldb.c and the glue h

svn commit: samba r12310 - in branches/SAMBA_4_0/source: auth/credentials lib/ldb/ldb_ildap

Author: abartlet Date: 2005-12-18 05:01:15 + (Sun, 18 Dec 2005) New Revision: 12310 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12310 Log: Link simple bind support in our internal LDAP libs to LDB and the command line processing system. This is a lit

svn commit: samba r12320 - in branches/SAMBA_4_0/source/lib/cmdline: .

Author: abartlet Date: 2005-12-18 21:44:43 + (Sun, 18 Dec 2005) New Revision: 12320 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12320 Log: Add command-line processing hooks for simple bind DN, and password callback. We may change this in future.

svn commit: samba r12327 - in branches/SAMBA_4_0/source/kdc: .

Author: abartlet Date: 2005-12-18 22:50:01 + (Sun, 18 Dec 2005) New Revision: 12327 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12327 Log: ENT_TYPE_ANY isn't used anywhere in Samba4, so don't implement it in hdb-ldb. Andrew Bartlett Mod

svn commit: samba r12360 - in branches/SAMBA_4_0/source: auth dsdb/samdb ldap_server

Author: abartlet Date: 2005-12-19 06:56:45 + (Mon, 19 Dec 2005) New Revision: 12360 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12360 Log: Add simple bind support into our LDAP server. Needs changes to our client code for automated testing. Andrew

svn commit: samba r12361 - in branches/SAMBA_4_0/source: auth dsdb/samdb lib/ldb/common lib/ldb/include rpc_server/lsa rpc_server/samr

Author: abartlet Date: 2005-12-19 07:07:11 + (Mon, 19 Dec 2005) New Revision: 12361 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12361 Log: Add a new function: ldb_binary_encode_string() This is for use on user-supplied arguments to printf styl

svn commit: samba r12362 - in branches/SAMBA_4_0/source/kdc: .

Author: abartlet Date: 2005-12-19 07:11:58 + (Mon, 19 Dec 2005) New Revision: 12362 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12362 Log: Along with a cracknames change in the previous commit, this should allow Win2000 machines to again use kerbe

svn commit: samba r12373 - in branches/SAMBA_4_0/source/script/tests: .

Author: abartlet Date: 2005-12-19 22:37:46 + (Mon, 19 Dec 2005) New Revision: 12373 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12373 Log: Add RPC-JOIN as a test to always run. Andrew Bartlett Modified: branches/SAMBA_4_0/source/script/tests/tes

svn commit: samba r12381 - in branches/SAMBA_4_0/source/dsdb/samdb: .

Author: abartlet Date: 2005-12-19 23:29:47 + (Mon, 19 Dec 2005) New Revision: 12381 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12381 Log: Try not to segfault on an anonymous LDAP bind, and map to a guest login. Andrew Bartlett Modified:

svn commit: samba r12382 - in branches/SAMBA_4_0/source/dsdb/samdb: .

Author: abartlet Date: 2005-12-19 23:43:17 + (Mon, 19 Dec 2005) New Revision: 12382 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12382 Log: Ensure to return OK on anonymous mapping. Andrew Bartlett Modified: branches/SAMBA_4_0/source/ds

svn commit: samba r12383 - in branches/SAMBA_4_0/source: kdc setup

Author: abartlet Date: 2005-12-20 00:00:48 + (Tue, 20 Dec 2005) New Revision: 12383 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12383 Log: Fixes for Apple's AD client. Don't segfualt in the KDC, and they require the isSynchronized f

svn commit: samba r12384 - in branches/SAMBA_4_0/source/setup: .

Author: abartlet Date: 2005-12-20 00:02:08 + (Tue, 20 Dec 2005) New Revision: 12384 WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12384 Log: I can't spell... Modified: branches/SAMBA_4_0/source/setup/provision_init.ldif Changeset: Modif

<    1   2   3   4   5   6   7   8   9   10   >