summaryrefslogtreecommitdiff
path: root/libcli
Commit message (Collapse)AuthorAgeFilesLines
* libcli/auth: add a const to des_crypt112_16()Stefan Metzmacher2010-03-052-2/+2
| | | | metze
* Fix typo in comments.Karolin Seeger2010-03-031-1/+1
|
* libcli/security: fix sddl.c to be able to build it from source3Michael Adam2010-03-031-1/+1
|
* s4:move the sddl code down to the top levelMichael Adam2010-03-033-1/+659
| | | | Michael
* libcli/auth: print the error in the debug messageStefan Metzmacher2010-02-261-1/+2
| | | | metze
* s4:cleanup remove unused schannel ldb codeSimo Sorce2010-02-232-339/+0
|
* s4:schannel merge code with s3Simo Sorce2010-02-231-2/+2
| | | | | | | | | | | | | | | | | After looking at the s4 side of the (s)channel :) I found out that it makes more sense to simply make it use the tdb based code than redo the same changes done to s3 to simplify the interface. Ldb is slow, to the point it needs haks to pre-open the db to speed it up, yet that does not solve the lookup speed, with ldb it is always going to be slower. Looking through the history it is evident that the schannel database doesn't really need greate expanadability. And lookups are always done with a single Key. This seem a perfet fit for tdb while ldb looks unnecessarily complicated. The schannel database is not really a persistent one. It can be discared during an upgrade without causing any real issue. all it contains is temproary session data.
* schannel_tdb: make code compilable in both treesSimo Sorce2010-02-232-51/+98
|
* s3:schannel streamline interfaceSimo Sorce2010-02-232-42/+181
| | | | | Make calling schannel much easier by removing the need to explicitly open the database. Let the abstraction do it instead.
* s3:schannel fix memory hierarchySimo Sorce2010-02-231-1/+1
| | | | | | | passing mem_ctx was causing creds->sid to be allocated on mem_ctx and not be child of creds as expected. When later in schannel_check_creds_state() we stole the creds on a different memory context the sid was left behind and the memory it points to freed when the temporary context was freed.
* schannel: merge header filesSimo Sorce2010-02-232-48/+34
| | | | | One almost empty header file was simply including another not included by anything else. Just merge them together.
* s4:schannel more readable check logicSimo Sorce2010-02-232-12/+0
| | | | | | | | Make the initial schannel check logic more understandable. Make it easy to define different policies depending on the caller's security requirements (Integrity/Privacy/Both/None) This is the same change applied to s3
* s3:schannel more readable check logicSimo Sorce2010-02-232-17/+0
| | | | | | Make the initial schannel check logic more understandable. Make it easy to define different policies depending on ther caller's security requirements (Integrity/Privacy/Both/None)
* tstream: Added a typedef for the function prototype.Andreas Schneider2010-02-232-9/+19
|
* lib: use TYPESAFE_QSORT() in lib/ and libcli/Andrew Tridgell2010-02-141-5/+4
|
* nbt: don't reference the event_ctx in nbtsockAndrew Tridgell2010-02-081-1/+1
| | | | This causes talloc_free with references errors
* Change uint_t to unsigned int in libcliMatt Kraai2010-02-025-5/+5
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* libcli/nbt: fix ndr_push_nbt_string() string labels with a length of 63 ↵Stefan Metzmacher2010-02-011-2/+2
| | | | | | (0x3F) are allowed metze
* s4:libcli/util/tstream.c - Need to include "system/network.h"Matthias Dieter Wallnöfer2010-01-291-0/+1
| | | | Otherwise I don't get "struct iovec" through "<sys/uio.h>" on CentOS 4.
* libcli/nbt: fix off-by-one bug in ndr_pull_wrepl_nbt_name()Stefan Metzmacher2010-01-291-2/+2
| | | | | | The scope starts at byte 17 with index 16. metze
* libcli/nbt: fix ndr_pull/push_wrepl_nbt_name()Stefan Metzmacher2010-01-291-0/+25
| | | | | | | | | | | [MS-WINSRA] — v20091104 was wrong regarding section "2.2.10.1 Name Record" If the name buffer is already 4 byte aligned Windows (at least 2003 SP1 and 2008) add 4 extra bytes. This can happen when the name has a scope. metze
* Revert "libcli/security: Remove a call to strncasecmp"Volker Lendecke2010-01-251-1/+5
| | | | This reverts commit 7c687665eaf16b0c6f83c130f6d9e5459e0b2a32.
* Revert "libcli/security: Convert some strtol calls to strtoul"Volker Lendecke2010-01-251-2/+2
| | | | This reverts commit 7fe66e06c4df575c410d4d70ff38f120c2f4363b.
* Revert "libcli/security: Fix a valgrind error in dom_sid_parse"Volker Lendecke2010-01-251-4/+0
| | | | This reverts commit f1c889a4e61d6d751cbabd8014b4345b8051b97c.
* Revert "libcli/security: Prohibit SID formats like S-1-5-32-+545"Volker Lendecke2010-01-251-13/+0
| | | | | | This reverts commit 1fbeae41655b8305834f2149b1268077eba8633d. Apparently this breaks the build of Samba4
* libcli/security: Prohibit SID formats like S-1-5-32-+545Volker Lendecke2010-01-231-0/+13
|
* libcli/security: Fix a valgrind error in dom_sid_parseVolker Lendecke2010-01-231-0/+4
|
* libcli/security: Convert some strtol calls to strtoulVolker Lendecke2010-01-231-2/+2
| | | | | This tightens the dom_sid_parse syntax check a bit: "--" would have been allowed in sid string
* libcli/security: Remove a call to strncasecmpVolker Lendecke2010-01-231-5/+1
|
* libcli/util: add tstream_read_pdu_blob_send/recvStefan Metzmacher2010-01-082-0/+246
| | | | | | | This will take the some full_request callback function as the Samba4 packet code. metze
* Simplify E_md5hash a bitVolker Lendecke2010-01-071-6/+2
|
* libcli/auth Make gd's NDR NTLMSSP parsers helpers commonAndrew Bartlett2009-12-222-0/+189
| | | | (but not built in Samba4 for now)
* ldap: give a debug error when we don't know a controlAndrew Tridgell2009-12-161-0/+2
| | | | | | | This interface should really have a proper error interface, but at least a DEBUG() gives the user a chance of finding the error Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* libcli: use GUID_to_ndr_blob()Andrew Tridgell2009-12-101-4/+3
|
* libcli: allow ntstatus.h to be used by openchangeAndrew Tridgell2009-11-251-0/+8
| | | | | apparently ntstatus.h is used by openchange, but they don't include replace.h. This makes that possible again.
* libcli/nbt Move more of lmhosts lookup into common codeAndrew Bartlett2009-11-042-0/+85
| | | | | | This aims to eventually share this with Samba4. Andrew Bartlett
* libcli/auth: initialize creds in netlogon_creds_client_init_session_key()Stefan Metzmacher2009-10-241-2/+3
| | | | metze
* libcli/auth: fix memory leak in schannel_creds_server_step_check_ldb()Stefan Metzmacher2009-10-241-24/+37
| | | | metze
* libcli/auth: don't leak the ldb_msg in schannel_store_session_key_ldb()Stefan Metzmacher2009-10-241-1/+1
| | | | metze
* s4-python: we need to include Python.h firstAndrew Tridgell2009-10-231-1/+1
| | | | | If we don't include Python.h first then we get a pile of warnings due to broken redefines of XOPEN_SOURCE in the Python includes.
* added NT_STATUS_NOT_OK_RETURN_AND_FREE()Andrew Tridgell2009-10-171-0/+7
| | | | Try to make it a bit easier to avoid leaks in common code
* s3/s4 common: fix up header fileMatthias Dieter Wallnöfer2009-10-041-2/+1
|
* w32err: Importing auto-generated Win32 errors and descriptionsKamen Mazdrashki2009-09-302-1/+7222
| | | | | | | | | Error codes and their descriptions are generated using w32err_code.py script. Error are downloaded from MS site: http://msdn.microsoft.com/en-us/library/cc231199%28PROT.10%29.aspx Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
* w32err: WERR_GROUP_NOT_FOUND renamed to WERR_GROUPNOTFOUNDKamen Mazdrashki2009-09-302-2/+2
| | | | | | | | | In Win 32 we have NERR_GroupNotFound which maps to WERR_GROUP_NOT_FOUND currently and we have ERROR_GROUP_NOT_FOUND which maps to nothing, so it is to be added Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
* w32err: WERR_USER_EXISTS replace with WERR_USEREXISTS nameKamen Mazdrashki2009-09-302-3/+3
| | | | | | | | | In Win32 we have NERR_UserExists which maps to WERR_USER_EXISTS currently and there is ERROR_USER_EXISTS which maps to WERR_USER_ALREADY_EXISTS Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
* w32err: WERR_DC_NOT_FOUND replaced with WERR_DCNOTFOUNDKamen Mazdrashki2009-09-302-3/+3
| | | | | | | It turns out in win32 ERROR_DC_NOT_FOUND exists and it is an error for Device Context (DC), not Domain Controller Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
* w32err: FRS_ group of errors replaced with numeric valuesKamen Mazdrashki2009-09-301-3/+3
| | | | Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
* w32err: WERR_DOMAIN_CONTROLLER_NOT_FOUND error value fixedKamen Mazdrashki2009-09-301-1/+1
| | | | Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com>
* Initial implementation of security descriptor creation in DSNadezhda Ivanova2009-09-202-0/+54
| | | | | TODO's: ACE sorting and clarifying the inheritance of object specific ace's.
* libcli:nbt move prototypes of lmhosts functions to libnbt.hAndrew Bartlett2009-09-191-1/+6
|