summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* CVE-2015-3223: lib: ldb: Cope with canonicalise_fn returning string "", ↵Jeremy Allison2015-12-091-1/+15
| | | | | | | | | length 0. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11325 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org>
* VERSION: Bump version up to 4.1.22...Karolin Seeger2015-10-131-2/+2
| | | | | | and re-enable git snapshots. Signed-off-by: Karolin Seeger <kseeger@samba.org>
* VERSION: Disable git snapshots for the 4.1.21 release.samba-4.1.21Karolin Seeger2015-10-131-1/+1
| | | | Signed-off-by: Karolin Seeger <kseeger@samba.org>
* WHATSNEW: Add release notes for Samba 4.1.21.Karolin Seeger2015-10-131-3/+43
| | | | Signed-off-by: Karolin Seeger <kseeger@samba.org>
* samr4: Use <SID=%s> in GetGroupsForUserVolker Lendecke2015-09-081-2/+8
| | | | | | | | | | | | | | | | This way we avoid quoting problems in user's DNs Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Sep 1 23:49:14 CEST 2015 on sn-devel-104 BUG: https://bugzilla.samba.org/show_bug.cgi?id=11488 (cherry picked from commit 841845dea35089a187fd1626c9752d708989ac7b) Autobuild-User(v4-1-test): Stefan Metzmacher <metze@samba.org> Autobuild-Date(v4-1-test): Tue Sep 8 21:05:56 CEST 2015 on sn-devel-104
* VERSION: Bump version up to 4.1.21...Karolin Seeger2015-09-011-2/+2
| | | | | | and re-enable git snapshots. Signed-off-by: Karolin Seeger <kseeger@samba.org>
* VERSION: Disable git snapshots for the 4.1.20 release.samba-4.1.20Karolin Seeger2015-09-011-1/+1
| | | | Signed-off-by: Karolin Seeger <kseeger@samba.org>
* WHATSNEW: Add release notes for Samba 4.1.20.Karolin Seeger2015-09-011-3/+89
| | | | Signed-off-by: Karolin Seeger <kseeger@samba.org>
* s3: winbindd: Fix TALLOC_FREE of uninitialized groups variable.Jeremy Allison2015-08-311-1/+1
| | | | | | | | | | | | | Fix created by by: wei zhong <wweyeww@gmail.com> Only for 4.2.x and below, master code already fixed. BUG: https://bugzilla.samba.org/show_bug.cgi?id=10823 Signed-off-by: Jeremy Allison <jra@samba.org> Autobuild-User(v4-1-test): Karolin Seeger <kseeger@samba.org> Autobuild-Date(v4-1-test): Mon Aug 31 23:35:54 CEST 2015 on sn-devel-104
* s3-util: Compare the maximum allowed length of a NetBIOS nameRoel van Meer2015-08-311-1/+1
| | | | | | | | | | | | | | This fixes a problem where is_myname() returns true if one of our names is a substring of the specified name. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11427 Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> (cherry picked from commit 4e178ed498c594ffcd5592d0b792d47b064b9586) Autobuild-User(v4-1-test): Stefan Metzmacher <metze@samba.org> Autobuild-Date(v4-1-test): Mon Aug 31 14:39:49 CEST 2015 on sn-devel-104
* s3-net: use talloc array in share allowedusersRalph Boehme2015-08-171-4/+20
| | | | | | | | | | | | | | | Bug: https://bugzilla.samba.org/show_bug.cgi?id=11426 Signed-off-by: Ralph Boehme <slow@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> Autobuild-User(master): Ralph Böhme <slow@samba.org> Autobuild-Date(master): Tue Aug 4 16:48:36 CEST 2015 on sn-devel-104 (cherry picked from commit 95eb6db580678a29b1f5f30a9567ea449a43d75a) Autobuild-User(v4-1-test): Stefan Metzmacher <metze@samba.org> Autobuild-Date(v4-1-test): Mon Aug 17 20:01:19 CEST 2015 on sn-devel-104
* s3-passdb: Respect LOOKUP_NAME_GROUP flag in sid lookup.Justin Maggard2015-08-032-3/+3
| | | | | | | | | | | | | | | | | | | | | | | Somewhere along the line, a config line like "valid users = @foo" broke when "foo" also exists as a user. user_ok_token() already does the right thing by adding the LOOKUP_NAME_GROUP flag; but lookup_name() was not respecting that flag, and went ahead and looked for users anyway. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11320 Signed-off-by: Justin Maggard <jmaggard@netgear.com> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Marc Muehlfeld <mmuehlfeld@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Tue Jul 28 21:35:58 CEST 2015 on sn-devel-104 (cherry picked from commit dc99d451bf23668d73878847219682fced547622) Autobuild-User(v4-1-test): Stefan Metzmacher <metze@samba.org> Autobuild-Date(v4-1-test): Mon Aug 3 20:03:05 CEST 2015 on sn-devel-104
* lib: replace: Add strsep function (missing on Solaris).Jeremy Allison2015-08-033-2/+27
| | | | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=11359 Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Ira Cooper <ira@wakeful.net> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Wed Jul 29 02:24:55 CEST 2015 on sn-devel-104 (cherry picked from commit f07b746ad3f3ee2fcbb65a0d452ed80f07c9e8f9)
* s3-auth: Fix a possible null pointer dereferenceAndreas Schneider2015-07-211-1/+3
| | | | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=11404 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Alexander Bokovoy <ab@samba.org> (cherry picked from commit 109ff388fd5e1306189d680a8f964a69374f1b01) Autobuild-User(v4-1-test): Karolin Seeger <kseeger@samba.org> Autobuild-Date(v4-1-test): Tue Jul 21 19:02:14 CEST 2015 on sn-devel-104
* s3-smbd: Leave sys_disk_free() if dfree command is usedAndreas Schneider2015-07-211-16/+13
| | | | | | | | | | | | | | | | | If we have a broken system which reports incorrect sizes we provide the 'dfree command'. This command makes sure Samba gets the correct values. However after that we call the quota command which then reports the broken values. The dfree command should take care to provide the correct values and in case of quota's it should also calculate the quote correctly. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11403 Pair-Programmed-With: Michael Adam <obnox@samba.org> Signed-off-by: Andreas Schneider <asn@samba.org> Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> (cherry picked from commit 48a4d5a4078ff2a66dd753323d6e5d76d34b9828)
* s3-smbd: reset protocol in smbXsrv_connection_init_tables failure paths.Günther Deschner2015-07-191-1/+6
| | | | | | | | | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=11373 Guenther Pair-Programmed-With: Stefan Metzmacher <metze@samba.org> Pair-Programmed-With: Michael Adam <obnox@samba.org> Signed-off-by: Guenther Deschner <gd@samba.org> Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Autobuild-User(v4-1-test): Karolin Seeger <kseeger@samba.org> Autobuild-Date(v4-1-test): Sun Jul 19 22:23:18 CEST 2015 on sn-devel-104
* s3:libsmb: Fix a bug in conversion of ea list to ea array.Anubhav Rakshit2015-07-191-1/+1
| | | | | | | | | | | | | | Bug 11361 - Reading of EA's (Extended Attributes) fails using SMB2 and above protocols Tested against Win2k12r2 server. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11361 Signed-off-by: Anubhav Rakshit <anubhav.rakshit@gmail.com> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Michael Adam <obnox@samba.org> (cherry picked from commit 5af2e3eed2ac309e2491fc54e03e7b04c8b118fb)
* smbd:trans2: treat new SMB_SIGNING_DESIRED in caseMichael Adam2015-07-191-0/+1
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=11372 Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Guenther Deschner <gd@samba.org> (cherry picked from commit 76f8d0fbada15c9466f66a2d9961bebd1425d141)
* docs:smb.conf: explain effect of new setting 'desired' of smb encryptMichael Adam2015-07-191-19/+47
| | | | | | | | | | Thereby clarify some details. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11372 Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Guenther Deschner <gd@samba.org> (cherry picked from commit 365d9d8bdfe9759ef9662d0080cf9c9a0767dbf2)
* smbd:smb2: use encryption_desired in send_breakMichael Adam2015-07-191-2/+2
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=11372 Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Guenther Deschner <gd@samba.org> (cherry picked from commit 14357700fd69291995ce6adebb13e7340a63c209)
* smbd:smb2: only enable encryption in tcon if desiredMichael Adam2015-07-191-3/+6
| | | | | | | | | | | Don't enforce it but only announce DATA_ENCRYPT, making use of encryption_desired in tcon. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11372 Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Guenther Deschner <gd@samba.org> (cherry picked from commit 41cb881e775ea7eb0c59d9e0cafb6ab5531918d9)
* smbd:smb2: only enable encryption in session if desiredMichael Adam2015-07-191-3/+4
| | | | | | | | | | | Don't enforce it but only announce ENCRYPT_DATA, using the encryption_desired flag in session setup. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11372 Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Guenther Deschner <gd@samba.org> (cherry picked from commit fc228025d78f165815d3fa1670d51f0c27ed2091)
* smbd:smb2: separate between encryption required and enc desiredMichael Adam2015-07-192-4/+17
| | | | | | | | | | | | | | | | | this means we: - accept unencrypted requests if encryption only desired and not required, - but we always send encrypted responses in the desired case, not only when the request was encrypted. For this purpose, the do_encryption in the request structure is separated into was_encrypted and do_encryption. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11372 Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Guenther Deschner <gd@samba.org> (cherry picked from commit 3bb299944391633c45d87d5e8ad48c2c14428592)
* smbXsrv: add bools encryption_desired to session and tconMichael Adam2015-07-191-0/+2
| | | | | | | | | | | This is to indicate that we should sen the ENCRYPT_DATA flag on session or tcon replies. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11372 Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Guenther Deschner <gd@samba.org> (cherry picked from commit a3ea6dbef53e049701326497e684e1563344e6d8)
* Introduce setting "desired" for 'smb encrypt' and 'client/server signing'Michael Adam2015-07-194-0/+9
| | | | | | | | | | | | This should trigger the behaviour where the server requires signing when the client supports it, but does not reject clients that don't support it. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11372 Signed-off-by: Michael Adam <obnox@samba.org> Reviewed-by: Guenther Deschner <gd@samba.org> (cherry picked from commit 204cbe3645c59b43175beeadad792b4a00e80da3)
* smbd: Make SMB3 clients use encryption with "smb encrypt = auto"Volker Lendecke2015-07-192-0/+10
| | | | | | | | | | | | | | | Slight modification for 4.1 by Michael Adam <obnox@samba.org> (s/xconn/conn/ in smb2_sesssetup.c) BUG: https://bugzilla.samba.org/show_bug.cgi?id=11372 Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Stefan Metzmacher <metze@samba.org> Autobuild-User(master): Volker Lendecke <vl@samba.org> Autobuild-Date(master): Tue Mar 3 10:40:42 CET 2015 on sn-devel-104 (cherry picked from commit b3385f74db54bd8a07a0be5515151b633c067da4)
* s4:selftest: also run rpc.winreg with kerberos and all possible auth optionsStefan Metzmacher2015-07-121-0/+7
| | | | | | | | | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=11061 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Autobuild-User(master): Stefan Metzmacher <metze@samba.org> Autobuild-Date(master): Tue Jun 23 17:31:08 CEST 2015 on sn-devel-104 (cherry picked from commit 6dd117b21ef06da68af67051f2822f71193d193a) Autobuild-User(v4-1-test): Karolin Seeger <kseeger@samba.org> Autobuild-Date(v4-1-test): Sun Jul 12 00:09:40 CEST 2015 on sn-devel-104
* s4:selftest: run rpc.echo tests also with krb5 krb5,sign krb5,sealStefan Metzmacher2015-07-111-1/+1
| | | | | | | | BUG: https://bugzilla.samba.org/show_bug.cgi?id=11061 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> (cherry picked from commit 5b917fd6226952a1f792d1ad921d2ae54ab6ab42)
* s4:rpc_server: fix padding caclucation in dcesrv_auth_response()Stefan Metzmacher2015-07-111-1/+1
| | | | | | | | | | | | | | This is simplified by using DCERPC_AUTH_PAD_LENGTH() and changes the behaviour so that we will use no padding if the stub_length is already aligned to DCERPC_AUTH_PAD_ALIGNMENT (16 bytes). BUG: https://bugzilla.samba.org/show_bug.cgi?id=11061 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (cherry picked from commit 69c1b4b7c10dd5fd9cacaa3a76c47bc854ee3fed)
* s4:rpc_server: let dcesrv_auth_response() handle sig_size == 0 with ↵Stefan Metzmacher2015-07-111-1/+5
| | | | | | | | | | | | | | auth_info as error Don't send plaintext on the wire because of an internal error... BUG: https://bugzilla.samba.org/show_bug.cgi?id=11061 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (cherry picked from commit 1bf7ab49b4459e81ab2b82d9668b3d7cb76372f4)
* s4:rpc_server: let dcesrv_reply() use a sig_size for a padded payloadStefan Metzmacher2015-07-111-1/+6
| | | | | | | | | | | The sig_size could differ depending on the aligment/padding. So should use the same alignment as we use for the payload. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (cherry picked from commit 16f3837e026e4cae135bbdddf09b44a02af25b05)
* s4:rpc_server: let dcesrv_reply() use DCERPC_AUTH_PAD_ALIGNMENT defineStefan Metzmacher2015-07-111-1/+1
| | | | | | | | Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (cherry picked from commit 3fbdb255e3ac7ad5261c5fa3836e4a38a0d59221)
* s4:librpc/rpc: fix padding caclucation in ncacn_push_request_sign()Stefan Metzmacher2015-07-111-1/+1
| | | | | | | | | | | | | | This is simplified by using DCERPC_AUTH_PAD_LENGTH() and changes the behaviour so that we will use no padding if the stub_length is already aligned to DCERPC_AUTH_PAD_ALIGNMENT (16 bytes). BUG: https://bugzilla.samba.org/show_bug.cgi?id=11061 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (cherry picked from commit 114c52e73ed9e0adeac8ad1bc1dc014f3c10f4d6)
* s4:librpc/rpc: let ncacn_push_request_sign() handle sig_size == 0 with ↵Stefan Metzmacher2015-07-111-1/+4
| | | | | | | | | | | | | | auth_info as internal error Don't send plaintext on the wire because of an internal error... BUG: https://bugzilla.samba.org/show_bug.cgi?id=11061 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (cherry picked from commit 48f2c383e1d7f52114223cd2a54857426bf64025)
* s4:librpc/rpc: let dcerpc_ship_next_request() use a sig_size for a padded ↵Stefan Metzmacher2015-07-111-1/+6
| | | | | | | | | | | | | | | payload The sig_size could differ depending on the aligment/padding. So should use the same alignment as we use for the payload. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11061 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (cherry picked from commit fc249d542fcb8d043ae72eb7963d3a85eb79253a)
* s4:librpc/rpc: let dcerpc_ship_next_request() use DCERPC_AUTH_PAD_ALIGNMENT ↵Stefan Metzmacher2015-07-111-1/+1
| | | | | | | | | | | | define BUG: https://bugzilla.samba.org/show_bug.cgi?id=11061 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (cherry picked from commit ef801bae95403e96042f5d8c87085bce21436013)
* s3:rpc_server: remove pad handling from api_pipe_alter_context()Stefan Metzmacher2015-07-111-25/+2
| | | | | | | | | | | | | This is not needed and windows doesn't use it. The padding is for the payload in request and response. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11061 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (cherry picked from commit a6a6795826954eef6763a39b129a4db578edca01)
* s3:librpc/rpc: fix padding calculation in dcerpc_guess_sizes()Stefan Metzmacher2015-07-114-16/+10
| | | | | | | | | | | | | The padding needs to be relative to the payload start not to the pdu start. We also need align the padding to DCERPC_AUTH_PAD_ALIGNMENT (16 bytes). BUG: https://bugzilla.samba.org/show_bug.cgi?id=11061 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (similar to commit b2e042ad9652e2dfb39640de43e09030efc41d3d)
* s3:librpc/rpc: allow up to DCERPC_AUTH_PAD_ALIGNMENT padding bytes in ↵Stefan Metzmacher2015-07-111-1/+3
| | | | | | | | | | | | dcerpc_add_auth_footer() BUG: https://bugzilla.samba.org/show_bug.cgi?id=11061 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (cherry picked from commit 3e6e9e3acd17531148457be59a32727fb87ae43d)
* librpc/rpc: add DCERPC_AUTH_PAD_LENGTH(stub_length) helper macroStefan Metzmacher2015-07-111-0/+6
| | | | | | | | | | | | | This calculates the required padding DCERPC_AUTH_PAD_ALIGNMENT and the stub_length. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11061 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (similar to commit f1e3ad269ca8f76876afd8e3837c9c9b48688941)
* dcerpc.idl: add DCERPC_AUTH_PAD_ALIGNMENT (=16)Stefan Metzmacher2015-07-111-0/+1
| | | | | | | | | | | | Windows pads the payload aligned to 16 bytes. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11061 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (cherry picked from commit 2cb3ec5856ab5b7edad8ffd67a5d0f927c161138)
* auth/gensec: make sure gensec_start_mech_by_authtype() resets SIGN/SEAL ↵Stefan Metzmacher2015-07-111-0/+6
| | | | | | | | | | | | | | | | before starting We want to set GENSEC_FEATURE_SIGN and GENSEC_FEATURE_SEAL based on the given auth_level and should not have GENSEC_FEATURE_SEAL if DCERPC_AUTH_LEVEL_INTEGRITY is desired. BUG: https://bugzilla.samba.org/show_bug.cgi?id=11061 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (cherry picked from commit 756508c8c37b0370301a096e35abc171fe08d31c)
* auth/gensec: gensec_[un]seal_packet() should only work with ↵Stefan Metzmacher2015-07-111-0/+14
| | | | | | | | | | | | | GENSEC_FEATURE_DCE_STYLE gensec_sig_size() also requires GENSEC_FEATURE_DCE_STYLE if GENSEC_FEATURE_SEAL is negotiated. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (cherry picked from commit 3542d33314e32279340f07f995c1dcbd16106352)
* winbindd: winbindd_raw_kerberos_login - ensure logon_info exists in PAC.Jeremy Allison2015-07-111-0/+6
| | | | | | | | | | | | | | | | | Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Thu Jun 11 07:30:38 CEST 2015 on sn-devel-104 (cherry picked from commit 4c5fefe0723ae4cd3cacaabc5ae4c500d2306968) Conflicts: source3/winbindd/winbindd_pam.c The last 7 patches address BUG: https://bugzilla.samba.org/show_bug.cgi?id=11328 we should use resource group sids obtained from pac logon_info
* kerberos auth info3 should contain resource group ids available from pac_logonNoel Power2015-07-111-3/+7
| | | | | | | | | | | | | | successful pam auth (e.g. from ssh) will cache group sids (but not any resource group sids)) The subsequent cached entry used for groups lookups can be missing those resource groups Signed-off-by: Noel Power <noel.power@suse.com> Reviewed-by: Jeremy Allison <jra@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (cherry picked from commit efadcb31215f9ccaf7942341c698a8eb2ac166ce) Conflicts: source3/winbindd/winbindd_pam.c
* s3: auth: Fix winbindd_pam_auth_pac_send() to create a new info3 and merge ↵Jeremy Allison2015-07-111-2/+22
| | | | | | | | | | | | | | | in resource groups from a trusted PAC. Based on a patch from Richard Sharpe <realrichardsharpe@gmail.com>. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Richard Sharpe <realrichardsharpe@gmail.com> Reviewed-by: Simo Sorce <idra@samba.org> Autobuild-User(master): Jeremy Allison <jra@samba.org> Autobuild-Date(master): Wed Jun 18 03:30:36 CEST 2014 on sn-devel-104 (cherry picked from commit e907f8415639d2a7cbc1cc2e40e2e35bfa0024de)
* s3: auth: Change auth3_generate_session_info_pac() to use a copy of the ↵Jeremy Allison2015-07-111-2/+9
| | | | | | | | | | | | info3 struct from the struct PAC_LOGON_INFO. Call create_info3_from_pac_logon_info() to add in any resource SIDs from the struct PAC_LOGON_INFO to the info3. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Richard Sharpe <realrichardsharpe@gmail.com> Reviewed-by: Simo Sorce <idra@samba.org> (cherry picked from commit 0e5a9f44e4b08b93bc4b501d1e14b59ed7b3647c)
* s3: auth: Add create_info3_from_pac_logon_info() to create a new info3 and ↵Jeremy Allison2015-07-112-0/+80
| | | | | | | | | | | merge resource group SIDs into it. Originally written by Richard Sharpe Richard Sharpe <realrichardsharpe@gmail.com>. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Richard Sharpe <realrichardsharpe@gmail.com> Reviewed-by: Simo Sorce <idra@samba.org> (cherry picked from commit db775c68ccbed0252abf092b5cb811e8f5fa9bb6)
* s3: auth: Change make_server_info_info3() to take a const struct ↵Jeremy Allison2015-07-113-6/+6
| | | | | | | | | | | netr_SamInfo3 pointer instead of a struct PAC_LOGON_INFO. make_server_info_info3() only reads from the info3 pointer. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Richard Sharpe <realrichardsharpe@gmail.com> Reviewed-by: Simo Sorce <idra@samba.org> (cherry picked from commit 527f7b54388713acaaf7b66c718cc0f7114fc368)
* s3: auth: Add some const to the struct netr_SamInfo3 * arguments of ↵Jeremy Allison2015-07-113-4/+4
| | | | | | | | | | | | | | | copy_netr_SamInfo3() and make_server_info_info3() Both functions only read from the struct netr_SamInfo3 * argument. Signed-off-by: Jeremy Allison <jra@samba.org> Reviewed-by: Richard Sharpe <realrichardsharpe@gmail.com> Reviewed-by: Simo Sorce <idra@samba.org> (cherry picked from commit c2411767adb5ce48a4619349075f6f8faae41aab) Conflicts: source3/auth/proto.h source3/auth/server_info.c
View Lorry Controller Status