summaryrefslogtreecommitdiff
path: root/source3/libnet
Commit message (Collapse)AuthorAgeFilesLines
* s3-kerberos: only use krb5 headers where required.Günther Deschner2009-12-081-0/+1
| | | | | | | | | This seems to be the only way to deal with mixed heimdal/MIT setups during merged build. Guenther (cherry picked from commit 04f8c229de7ffad5f4ec1a0bb68c2c8b4ccf4e15) (cherry picked from commit da926c1249705b95344730539c64111876955151)
* s3-rpc: Avoid including every pipe's client and server stubs everywhere in ↵Günther Deschner2009-12-083-0/+4
| | | | | | | | samba. Guenther (cherry picked from commit 3d679a3b5fc208d8521217f6a4b4d9037b609b9b) (cherry picked from commit 5b051c7accf5f88e46d86e9afa4da0e4152f0fd3)
* s3-netlogon: pass down account name to remote password set functions.Günther Deschner2009-11-261-0/+1
| | | | | | Guenther (cherry picked from commit 4a1b50afd567313cc25d5bbc14e01e170aa62a00) (cherry picked from commit 488e228fc9b469c6b40a372c0f2ff0658e176c27)
* w32err: WERR_DC_NOT_FOUND replaced with WERR_DCNOTFOUNDKamen Mazdrashki2009-11-261-2/+2
| | | | | | | | | It turns out in win32 ERROR_DC_NOT_FOUND exists and it is an error for Device Context (DC), not Domain Controller Signed-off-by: Anatoliy Atanasov <anatoliy.atanasov@postpath.com> (cherry picked from commit d9994a604bd51949a9869927bdc2cb512fba9171) (cherry picked from commit e9cb12953f191489b34e84547fc84841ff29515a)
* w32err: use WERR_DC_NOT_FOUND name instead of WERR_DOMAIN_CONTROLLER_NOT_FOUNDKamen Mazdrashki2009-09-171-2/+2
| | | | Signed-off-by: Günther Deschner <gd@samba.org>
* s3-dcerpc: use dcerpc_AuthLevel and remove duplicate set of flags.Günther Deschner2009-09-151-1/+1
| | | | Guenther
* s3-rpc_client: add dcerpc_transport_t to cli_rpc_pipe_open_schannel().Günther Deschner2009-09-111-1/+2
| | | | Guenther
* s3-account_policy: add pdb_policy_type enum.Günther Deschner2009-07-141-9/+14
| | | | Guenther
* Don't use ads realm name for non-ads case. #6481Jim McDonough2009-06-261-7/+9
| | | | Also check that the connection to ads worked.
* s3-libnet: fix libnet_unjoin_remove_machine_acct() when called without ads ↵Günther Deschner2009-06-221-1/+7
| | | | | | struct. Guenther
* Don't require "Modify property" perms to unjoin bug #6481)Jim McDonough2009-06-191-14/+35
| | | | | | | | | | | | | | | | | | "net ads leave" stopped working when "modify properties" permissions were not granted (meaning you had to be allowed to disable the account that you were about to delete). Libnetapi should not delete machine accounts, as this does not happen on win32. The WKSSVC_JOIN_FLAGS_ACCOUNT_DELETE flag really means "disable" (both in practice and docs). However, to keep the functionality in "net ads leave", we will still try to do the delete. If this fails, we try to do the disable. Additionally, it is possible in windows to not disable or delete the account, but just tell the local machine that it is no longer in the account. libnet can now do this as well.
* Move smb_create_user() in samsyncSimo Sorce2009-05-161-0/+60
| | | | | It is not used anywhere else, so make it also static and remove it from proto.h
* s3-libnetjoin: make acct_flags dependent on secure channel type.Günther Deschner2009-04-241-3/+12
| | | | Guenther
* s3-libnetjoin: add support for WKSSVC_JOIN_FLAGS_JOIN_UNSECURE.Günther Deschner2009-04-241-3/+59
| | | | Guenther
* Fix an uninitialized variableVolker Lendecke2009-04-231-0/+2
|
* s3-secdesc: use SEC_FLAG_MAXIMUM_ALLOWED instead of SEC_RIGHTS_MAXIMUM_ALLOWED.Günther Deschner2009-04-211-5/+5
| | | | Guenther
* Remove smb_mkstemp() - libreplace will now provide a secure mkstemp() ifJelmer Vernooij2009-04-201-2/+2
| | | | the system one is broken.
* Merge commit 'origin/master' into libcli-auth-merge-without-netlogondAndrew Bartlett2009-04-201-1/+1
|\
| * Fix bug #6089 - Winbind samr_OpenDomain not possible with Samba 3.2.6+Jeremy Allison2009-04-151-1/+1
| | | | | | | | | | | | | | What a difference a name makes... :-). Just because something is missnamed SAMR_ACCESS_OPEN_DOMAIN, when it should actually be SAMR_ACCESS_LOOKUP_DOMAIN, don't automatically use it for a security check in _samr_OpenDomain(). Jeremy.
* | Remove use of talloc_reference in cli_rpc_pipe_open_schannel_with_key()Andrew Bartlett2009-04-201-1/+1
| |
* | Make Samba3 use the new common libcli/auth codeAndrew Bartlett2009-04-141-4/+4
| | | | | | | | | | This is particuarly in the netlogon client (but not server at this stage)
* | Use common samsync delta decryption functions in libnet_samsync.cAndrew Bartlett2009-04-141-157/+7
| | | | | | | | Andrew Bartlett
* | Adapt to common crypto functions: sam_pwd_hash() -> sam_rid_crypt()Andrew Bartlett2009-04-142-8/+10
| |
* | Rework Samba3 to use new libcli/auth code (partial)Andrew Bartlett2009-04-141-8/+9
| | | | | | | | | | | | | | | | | | | | | | This commit is mostly to cope with the removal of SamOemHash (replaced by arcfour_crypt()) and other collisions (such as changed function arguments compared to Samba3). We still provide creds_hash3 until Samba3 uses the credentials code in netlogon server Andrew Bartlett
* | Move DRSUAPI per-attribute decryption into a common fileAndrew Bartlett2009-04-141-71/+5
|/ | | | | | | This file (contining metze's decryption routines) is now also be used by Samba3's DRSUAPI implementation Andrew Bartlett
* s3:kerberos Rework smb_krb5_unparse_name() to take a talloc contextAndrew Bartlett2009-04-071-18/+14
| | | | Signed-off-by: Günther Deschner <gd@samba.org>
* s3:libads Make ads_get_dn() take a talloc contextAndrew Bartlett2009-04-061-2/+2
| | | | | | | | | | | | Also remove ads_memfree(), which was only ever a wrapper around SAFE_FREE, used only to free the DN from ads_get_ds(). This actually makes libgpo more consistant, as it mixed a talloc and a malloc based string on the same element. Andrew Bartlett Signed-off-by: Günther Deschner <gd@samba.org>
* s3-libnet-samsync: return appropriate error code in fetch_sam_entry().Günther Deschner2009-04-011-22/+25
| | | | Guenther
* s3-libnet-samsync: use smb_create_user().Günther Deschner2009-04-011-46/+6
| | | | Guenther
* s3-libnet-samsync: some pure cosmetics.Günther Deschner2009-04-011-0/+30
| | | | Guenther
* s3-libnet-samsync: use parent talloc context for libnet_samsync_passdb.Günther Deschner2009-04-011-26/+28
| | | | Guenther
* s3-libnet: only call libnet_dssync_process() startup and shutdown callbacks ↵Günther Deschner2009-04-011-12/+16
| | | | | | when filled in. Guenther
* s3-libnet: Fix Bug #6193: avoid messing with sync_context in ↵Günther Deschner2009-03-251-3/+0
| | | | | | | | | | libnet_samsync_delta(). We absolutely need to avoid messing with the sync_context as that breaks the stream of replication data coming from the DC (only replicates ~350 instead of ~4000 groups). Guenther
* s3: remove POLICY_HND.Günther Deschner2009-03-181-3/+3
| | | | Guenther
* s3: move definition of W_ERROR_NOT_OK_GOTO_DONE down to libcli/util/werror.hMichael Adam2009-02-261-6/+0
| | | | Michael
* s3-libnet: fix coverity #848 (UNINIT).Günther Deschner2009-02-191-1/+1
| | | | Guenther
* s3: Fix 'net rpc join' for users with the SeMachineAccountPrivilege.Volker Lendecke2009-02-031-2/+5
|
* Add two new parameters to control how we verify kerberos tickets. Removes ↵Dan Sledz2009-02-011-1/+1
| | | | | | | | | | | | | | | | | | | | | | | lp_use_kerberos_keytab parameter. The first is "kerberos method" and replaces the "use kerberos keytab" with an enum. Valid options are: secrets only - use only the secrets for ticket verification (default) system keytab - use only the system keytab for ticket verification dedicated keytab - use a dedicated keytab for ticket verification. secrets and keytab - use the secrets.tdb first, then the system keytab For existing installs: "use kerberos keytab = yes" corresponds to secrets and keytab "use kerberos keytab = no" corresponds to secrets only The major difference between "system keytab" and "dedicated keytab" is that the latter method relies on kerberos to find the correct keytab entry instead of filtering based on expected principals. The second parameter is "dedicated keytab file", which is the keytab to use when in "dedicated keytab" mode. This keytab is only used in ads_verify_ticket.
* Fix coverity CID#117 - resource leak in error path.Jeremy Allison2009-01-291-24/+53
| | | | Jeremy.
* Fix coverity CID#116. Resource leak on error path.Jeremy Allison2009-01-291-2/+4
| | | | Jeremy.
* Fix coverity CID#115. Resource leak in error path.Jeremy Allison2009-01-291-1/+4
| | | | Jeremy.
* s3: make better use of ccache by not including version.h in every C-file.Michael Adam2009-01-151-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | version.h changes rather frequently. Since it is included via includes.h, this means each C file will be a cache miss. This applies to the following situations: * When building a new package with a new Samba version * building in a git branch after calling mkversion.sh after a new commit (i.e. virtually always) This patch improves the situation in the following way: * remove inlude "version.h" from includes.h * Use samba_version_string() instead of SAMBA_VERSION_STRING in files that use no other macro from version.h instead of SAMBA_VERSION_STRING. * explicitly include "version.h" in those files that use more macros from "version.h" than just SAMBA_VERSION_STRING. Michael
* s3-samr: avoid all init_samr_user* functions.Günther Deschner2009-01-061-4/+4
| | | | Guenther
* Fix another "format not a string literal and no format arguments" warning.Jeremy Allison2008-12-231-2/+5
| | | | Jeremy
* In gcc version 4.3.2 we get warnings for functions declared withJeremy Allison2008-12-221-2/+1
| | | | | attribute warn_unused_result. Start to fix these. Jeremy.
* s3:libnet_join: use DS_FORCE_REDISCOVERYStefan Metzmacher2008-12-131-0/+1
| | | | metze
* s3:libnet_join: call saf_join_store() after a the join.Stefan Metzmacher2008-12-131-1/+4
| | | | | | | | metze Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Günther Deschner <gd@samba.org> (similar to commit feef594d275881466e2c3f59c0ff54609a9cc53b)
* s3-libnet: fix DEBUG statement in libnet_keytab.Günther Deschner2008-12-111-1/+1
| | | | Guenther
* s3-libnet: fix build warning (missing prototype).Günther Deschner2008-12-091-2/+2
| | | | Guenther
* s3-libnetjoin: Fix bug #5749. Re-set acctflags while joining. fix from metze.Günther Deschner2008-11-291-16/+29
| | | | Guenther
View Lorry Controller Status