summaryrefslogtreecommitdiff
path: root/source3/libads
Commit message (Collapse)AuthorAgeFilesLines
* Correctly check for errors in strlower_m() returns.Jeremy Allison2012-08-094-7/+30
|
* Check error returns from strupper_m() (in all reasonable places).Jeremy Allison2012-08-094-7/+33
|
* lib/param: Move all enum declarations to lib/paramAndrew Bartlett2012-07-245-0/+5
| | | | | | | | This is in preperation for the parameter table being made common. Andrew Bartlett Pair-Programmed-With: Andrew Tridgell <tridge@samba.org>
* auth: Common function for retrieving PAC_LOGIN_INFO from PACChristof Schmitt2012-07-061-26/+3
| | | | | | | | Several functions use the same logic as kerberos_pac_logon_info. Move kerberos_pac_logon_info to common code and reuse it to remove the code duplication. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s3-param: Rename loadparm_s3_context -> loadparm_s3_helpersAndrew Bartlett2012-06-271-1/+1
| | | | | | | | | | | | | | | | | This helps clarify the role of this structure and wrapper function. The purpose here is to provide helper functions to the lib/param loadparm_context that point back at the s3 lp_ functions. This allows a struct loadparm_context to be passed to any point in the code, and always refer to the correct loadparm system. If this has not been set, the variables loaded in the lib/param code will be returned. As requested by Michael Adam. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Jun 27 17:11:16 CEST 2012 on sn-devel-104
* s3-libads: Use a reducing page size to try and cope with a slow LDAP serverAndrew Bartlett2012-05-263-2/+13
| | | | | | | | | If we cannot get 1000 users downloaded in 15seconds, try with 500, 250 and then 125 users at a time. Andrew Bartlett Signed-off-by: Jeremy Allison <jra@samba.org>
* s3-libads: Map LDAP_TIMELIMIT_EXCEEDED as NT_STATUS_IO_TIMEOUTAndrew Bartlett2012-05-261-0/+3
| | | | | | | | This allows Samba to then handle this error in the same way it would for RPC connections Andrew Bartlett Signed-off-by: Jeremy Allison <jra@samba.org>
* Move source3/libads/dns.c to lib/addnsSimo Sorce2012-05-233-970/+1
|
* s3-ads-dns: Avoid unnecessary dependenciesSimo Sorce2012-05-232-11/+3
|
* s3-ads-dns: Break dependency on lp_parmSimo Sorce2012-05-233-18/+34
| | | | In preparation of making this code common to s3 and s4
* s3-ad-dns: Use more standard uint and booleans defsSimo Sorce2012-05-231-35/+35
| | | | In preparation of making this code common to s3 and s4
* s3:registry: remove usage of reg_objects from libads/ldap_printer.cGregor Beck2012-04-251-89/+56
| | | | Signed-off-by: Andreas Schneider <asn@samba.org>
* lib/replace: split out GSSAPI from lib/replace/system/kerberos.h into ↵Alexander Bokovoy2012-04-252-0/+2
| | | | | | | | | | | | | | lib/replace/system/gssapi.h With waf build include directories are defined by dependencies specified to subsystems. Without proper dependency <gssapi/gssapi.h> cannot be found for embedded Heimdal builds when there are no system-wide gssapi/gssapi.h available. Split out GSSAPI header includes in a separate replacement header and use that explicitly where needed. Autobuild-User: Alexander Bokovoy <ab@samba.org> Autobuild-Date: Wed Apr 25 00:18:33 CEST 2012 on sn-devel-104
* s3: Attempt to fix the build without kerberosVolker Lendecke2012-04-241-1/+2
| | | | | Autobuild-User: Volker Lendecke <vl@samba.org> Autobuild-Date: Tue Apr 24 15:04:14 CEST 2012 on sn-devel-104
* Make krb5 wrapper library common so they can be used all overSimo Sorce2012-04-233-4/+48
|
* clikrb5: Move pure krb wrapper functions from libads to clikrb5.Simo Sorce2012-04-122-143/+0
| | | | Signed-off-by: Andreas Schneider <asn@samba.org>
* s3-libads: Remove ads_verify_ticket() as it is now unusedAndrew Bartlett2012-04-032-788/+0
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-libads: Rework kerberos_return_pac() to use GENSEC for the server-sideAndrew Bartlett2012-04-031-22/+167
| | | | | | | | | This removes the last user of ads_verify_ticket(), and means that we only have one code path to verify an incoming krb5 (GSSAPI) ticket. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* More strlcat/strlcpy truncate checks.Jeremy Allison2012-03-301-2/+9
|
* s3-libads: Remove unused ads_set_machine_password()Andrew Bartlett2012-02-232-33/+0
| | | | | | Found by callcatcher. Andrew Bartlett
* s3-libads: Remove unused ads_pull_sids_from_extendeddn()Andrew Bartlett2012-02-232-62/+0
| | | | | | Found by callcatcher. Andrew Bartlett
* s3-libads: Move to using only the HAVE_KRB5 defineAndrew Bartlett2012-02-132-13/+11
| | | | | | HAVE_KRB5 already implies that GSSAPI is present as well. Andrew Bartlett
* s3:kerberos_verify: ads_dedicated_keytab_verify_ticket() only needs read accessStefan Metzmacher2012-01-201-1/+1
| | | | metze
* krb5: Require krb5_get_host_realm and krb5_free_host_realm be available to ↵Andrew Bartlett2012-01-101-4/+0
| | | | build with krb5
* s3-libads: pretty print a keytab list.Günther Deschner2012-01-091-2/+2
| | | | Guenther
* s3-libads: fix malloc/talloc mismatch in ads_keytab_verify_ticket().Günther Deschner2012-01-091-1/+1
| | | | Guenther
* s3-libads Use NTLMSSP via auth_generic/gensecAndrew Bartlett2012-01-061-90/+79
| | | | | | | | | This allows us to use the shared gensec_wrap() implementation already used by the smb sealing code, as well as making this code more generic. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-libads Factor out a new routine ↵Andrew Bartlett2012-01-052-9/+48
| | | | | | | | | | | | kerberos_get_principal_from_service_hostname() This is now used in the GSE GSSAPI client, so that when we connect to a target server at the CIFS level, we use the same name to connect at the DCE/RPC level. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-dns: prevent from potentially doing wrong SRV DNS lookups.Günther Deschner2011-12-211-1/+1
| | | | | | | | | | With an empty sitename we asked for e.g. _ldap._tcp.._sites.dc._msdcs.AD.EXAMPLE.COM Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Wed Dec 21 17:23:25 CET 2011 on sn-devel-104
* s3: Fix some False/NULL hickupsVolker Lendecke2011-12-201-1/+1
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Dec 20 13:13:17 CET 2011 on sn-devel-104
* s3-smbldap: move ldap_open_with_timeout out of smb_ldap.h to ads where it lives.Günther Deschner2011-11-171-0/+7
| | | | | | | Guenther Autobuild-User: Günther Deschner <gd@samba.org> Autobuild-Date: Thu Nov 17 03:47:53 CET 2011 on sn-devel-104
* ntlmssp: Move ntlmssp code to auth/ntlmsspAndrew Bartlett2011-10-181-1/+1
| | | | | | | | | This brings in the code from both libcli/auth and source4/auth/ntlmssp. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3: Before adding KDC's to the krb5.conf, cldap ping themVolker Lendecke2011-10-171-47/+101
| | | | | | | | | | Some Kerberos libraries don't do proper failover. This fixes the situation where a KDC exists in DNS but is not reachable for some reason. Ported to master by Stefan Metzmacher <metze@samba.org> Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Oct 17 11:25:37 CEST 2011 on sn-devel-104
* Add cldap_multi_netlogon_send/recvVolker Lendecke2011-10-172-42/+314
| | | | | | | | Make ads_cldap_netlogon use it. It does not need the fancy multi stuff, but excercising that code more often is better. And because we have to ask over the network, the additional load should be neglectable. Ported to master by Stefan Metzmacher <metze@samba.org>
* libcli/cldap: don't pass tevent_context to cldap_socket_init()Stefan Metzmacher2011-10-101-1/+1
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Oct 10 23:23:07 CEST 2011 on sn-devel-104
* s3: Slightly simplify print_kdc_line()Volker Lendecke2011-09-261-10/+8
| | | | | | | | No code change except for an early "return talloc_asprintf(..)" making an else branch obsolete. Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Mon Sep 26 18:24:25 CEST 2011 on sn-devel-104
* s3: Slightly simplify print_kdc_line()Volker Lendecke2011-09-261-20/+19
| | | | | No code change except for an early "return talloc_asprintf(..)" making an else branch obsolete.
* s3: Slightly simplify print_kdc_line()Volker Lendecke2011-09-261-49/+52
| | | | | No code change except for an early "return talloc_asprintf(..)" making an else branch obsolete.
* s3: Add some const to create_local_private_krb5_conf_for_domainVolker Lendecke2011-09-182-2/+2
| | | | | Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Sun Sep 18 23:31:28 CEST 2011 on sn-devel-104
* s3: Add some const to print_kdc_lineVolker Lendecke2011-09-181-1/+1
|
* If "ldap timeout" is non-zero, set the local search timeout toJeremy Allison2011-08-191-19/+36
| | | | | | | | | be one second longer than the remote search timeout (which is set to the "ldap timeout" value). This allows the remote search timeout to fire in preference. Allow lp_ldap_timeout() to be zero. Don't set the any local alarm if so.
* s3: Increase a debug level in ads_find_dcVolker Lendecke2011-08-171-1/+2
| | | | | This message can happen with AD trusts that winbind can not cope with. The message is not really clear and not worth spamming syslog always.
* s3-ntlmssp Remove auth_ntlmssp_and_flags()Andrew Bartlett2011-08-031-1/+0
| | | | | | | | | | | There is no need to mask out these flags as they simply are not set yet. The correct abstraction is to ask for NTLMSSP features. Andrew Bartlett Signed-off-by: Andrew Tridgell <tridge@samba.org>
* source3/libads/ldap_schema.h: fix licence/copyrightGünther Deschner2011-06-101-0/+25
| | | | Guenther
* source3/libads/cldap.h: fix licence/copyrightGünther Deschner2011-06-101-0/+27
| | | | Guenther
* source3/libads/ads_status.h: fix licence/copyrightGünther Deschner2011-06-101-0/+22
| | | | Guenther
* source3/libads/ads_ldap_protos.h: fix licence/copyrightGünther Deschner2011-06-101-0/+28
| | | | Guenther
* s3-param Remove special case for global_myname(), rename to lp_netbios_name()Andrew Bartlett2011-06-097-22/+22
| | | | | | | | There is no reason this can't be a normal constant string in the loadparm system, now that we have lp_set_cmdline() to handle overrides correctly. Andrew Bartlett
* s3-talloc Change TALLOC_MEMDUP() to talloc_memdup()Andrew Bartlett2011-06-091-1/+1
| | | | | Using the standard macro makes it easier to move code into common, as TALLOC_MEMDUP isn't standard talloc.
* s3-talloc Change TALLOC_ZERO_ARRAY() to talloc_zero_array()Andrew Bartlett2011-06-092-6/+6
| | | | | Using the standard macro makes it easier to move code into common, as TALLOC_ZERO_ARRAY isn't standard talloc.
View Lorry Controller Status