summaryrefslogtreecommitdiff
path: root/source4/librpc
Commit message (Collapse)AuthorAgeFilesLines
* s4-librpc: set error code to LOGON_FAILURE on RPC fault with access deniedAndrew Tridgell2012-11-011-2/+7
| | | | | | | this allows the client code to trigger a retry with a new password callback for NTLM connections Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-librpc: try a 2nd logon for more error casesAndrew Tridgell2012-11-011-3/+10
| | | | | | | not all servers give LOGON_FAILURE on authentication failures, so we need to do the retry with a new ticket on a wider range of error types Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* s4-librpc: use cli_credentials_failed_kerberos_login to cope with stale ticketsAndrew Tridgell2012-11-011-1/+15
| | | | | | | This allows our RPC client code to cope with a kerberos server changing password while we have a valid service ticket Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
* pymessaging: Use the server_id IDL structure rather than a tupleAndrew Bartlett2012-10-311-0/+6
| | | | | | | This will make it easier to pass this structure in and out. The tuple is still accepted as input. Andrew Bartlett
* imessaging: Add irpc_all_servers() to list all available serversAndrew Bartlett2012-10-311-1/+12
| | | | | | | | This is implemented with a tdb_traverse_read(), and will allow a tool to disover the name and server_id of all Samba processes, as each process registers itself to recieve messages. Andrew Bartlett
* s4:librpc/rpc: don't do async requests if gensec doesn't support async ↵Stefan Metzmacher2012-08-251-0/+32
| | | | | | replies (bug #9097) metze
* s4:librpc/rpc: also call dcerpc_schedule_io_trigger() after bind and ↵Stefan Metzmacher2012-08-251-0/+7
| | | | | | alter_context responses metze
* s4:librpc/rpc: use dcerpc_req_dequeue() in dcerpc_request_recv_data()Stefan Metzmacher2012-08-251-1/+1
| | | | metze
* s4:librpc/rpc: use talloc_zero for 'struct rpc_request'Stefan Metzmacher2012-08-251-11/+1
| | | | metze
* s4-python: Complete python bindings for idmap.idlAndrew Bartlett2012-08-221-0/+6
| | | | | Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Wed Aug 22 03:08:51 CEST 2012 on sn-devel-104
* s4-python: complete python bindigns for smb_acls.idlAndrew Bartlett2012-08-221-0/+6
|
* s4: Fix returns in py_check_dcerpc_typeVolker Lendecke2012-08-171-2/+2
| | | | Signed-off-by: Andrew Bartlett <abartlet@samba.org>
* s4:librpc/dcerpc_smb2: sync smb2_session_key() with smb_session_key()Stefan Metzmacher2012-08-011-0/+2
| | | | metze
* s4:librpc/dcerpc_smb: make use of smbXcli_session_application_key()Stefan Metzmacher2012-08-011-4/+15
| | | | metze
* s4:librpc/dcerpc_smb2: make use of smbXcli_session_application_key()Stefan Metzmacher2012-08-011-1/+1
| | | | metze
* s4-librpc: Fix private context for dcerpc_connect_timeout_handlerAndrew Bartlett2012-07-291-4/+4
| | | | | | | | | This was incorrect in 02a356ea775a3ba589cb50af3c861ab86aaffa0b. Andrew Bartlett Autobuild-User(master): Andrew Bartlett <abartlet@samba.org> Autobuild-Date(master): Sun Jul 29 14:54:33 CEST 2012 on sn-devel-104
* s4-librpc: Ensure we do not call call the decrpc timeout handler during ↵Andrew Bartlett2012-07-183-5/+39
| | | | | | | | | | | | gensec_update() This avoids a situation where we could destroy pointers on the stack due to a nested event loop. This is certainly not a final, generic solution, but it is a minimal change while we work to make gensec and gensec_gssapi async. Andrew Bartlett
* s4-librpc: Add capabilities check for AES encrypted connections.Andreas Schneider2012-07-171-1/+110
| | | | Signed-off-by: Günther Deschner <gd@samba.org>
* s4:librpc/rpc: add DCERPC_SCHANNEL_AES supportStefan Metzmacher2012-07-171-2/+15
| | | | | | metze Signed-off-by: Günther Deschner <gd@samba.org>
* s4:librpc/rpc/dcerpc_schannel: just append NETLOGON_NEG_RODC_PASSTHROUGH as rodcStefan Metzmacher2012-07-171-4/+5
| | | | | | | | The RODC stuff doesn't depend on the schannel algorithm. metze Signed-off-by: Günther Deschner <gd@samba.org>
* s4:librpc/rpc/dcerpc_schannel: rework downgrade logicStefan Metzmacher2012-07-171-5/+38
| | | | | | metze Signed-off-by: Günther Deschner <gd@samba.org>
* build: Add missing deps and make MESSAGING a private libraryAndrew Bartlett2012-06-071-1/+1
| | | | | | | | | To remove finddcs_nbt these missing deps need to be added. These subsystems linked to to implicit dependencies provided by finddcs. Due to the new arrangmenet of subsystems, MESSAGING needs to be a private library to avoid being a source of duplicate symbols. Andrew Bartlett
* s4:librpc: create a binding on the pipe if necessary in ↵Stefan Metzmacher2012-04-271-0/+15
| | | | | | dcerpc_pipe_open_smb2_send() Pair-Programmed-With: Michael Adam <obnox@samba.org>
* s4:librpc/rpc: directly return after composite_error()Stefan Metzmacher2012-04-231-1/+1
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Mon Apr 23 12:17:08 CEST 2012 on sn-devel-104
* s4:librpc/rpc: also parse ncacn_packet pdus with LIBNDR_FLAG_OBJECT_PRESENTStefan Metzmacher2012-04-031-0/+4
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Apr 3 23:06:31 CEST 2012 on sn-devel-104
* s4:librpc/rpc: don't mix up paylod ndr flags with the dcerpc layerStefan Metzmacher2012-04-031-1/+1
| | | | | | | If the transfer syntax is NDR64, it's only for the payload not for the dcerpc pdus. metze
* libndr: Rename ndr64_transfer_syntax and null_ndr_syntax_id so they have a ↵Jelmer Vernooij2012-03-202-5/+4
| | | | | ndr_ prefix. This makes the NDR namespace a bit clearer, in preparation of ABI checking.
* Remove more unnecessary shebang lines in python files.Jelmer Vernooij2012-03-161-2/+0
| | | | | Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Fri Mar 16 02:48:52 CET 2012 on sn-devel-104
* s4:librpc/rpc: avoid an unused talloc_reference() from dcerpc_request_send()Stefan Metzmacher2012-03-151-4/+1
| | | | metze
* s4:librpc/rpc: pass a mem_ctx to dcerpc_request_send()Stefan Metzmacher2012-03-151-4/+7
| | | | metze
* s4:librpc/rpc: use tevent_req_defer_callback() in dcerpc_alter_context_*Stefan Metzmacher2012-03-151-0/+29
| | | | metze
* s4:librpc/rpc: use tevent_req_defer_callback() in dcerpc_bind_*Stefan Metzmacher2012-03-151-0/+29
| | | | metze
* s4:librpc/rpc: convert dcerpc_alter_context_send/recv to tevent_reqStefan Metzmacher2012-03-152-114/+161
| | | | | | | | | Many thanks to Andrew Bartlett <abartlet@samba.org> for the debugging, which lead to the following line: talloc_steal(state, raw_packet->data); metze
* s4:librpc/rpc: convert dcerpc_bind_send/recv to tevent_reqStefan Metzmacher2012-03-152-111/+169
| | | | | | | | | Many thanks to Andrew Bartlett <abartlet@samba.org> for the debugging, which lead to the following line: talloc_steal(state, raw_packet->data); metze
* s4:librpc/rpc: also notify requests which are not shipped about a dead ↵Stefan Metzmacher2012-03-151-0/+11
| | | | | | connection metze
* s4:librpc/rpc: ship requests via an immediate eventStefan Metzmacher2012-03-152-7/+56
| | | | | | | | Deep inside dcerpc_ship_next_request() some code path could trigger dcerpc_connection_dead(), which means it's not safe to do any processing after calling dcerpc_ship_next_request(). metze
* s4:librpc/rpc: if the connecion is dead we're doneStefan Metzmacher2012-03-151-0/+1
| | | | | | | There's no point in doing anymore processing, it can just lead to crashes. metze
* s4:librpc/rpc: if the connection is dead we don't want to be called recursivly.Stefan Metzmacher2012-03-151-0/+2
| | | | metze
* s4-librpc: Remove unused new_evAndrew Bartlett2012-03-091-3/+0
| | | | | Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Fri Mar 9 07:18:45 CET 2012 on sn-devel-104
* s4:librpc/rpc: make dcerpc_bh_raw_call_* more robust against disconnects and ↵Stefan Metzmacher2012-03-071-0/+15
| | | | | | | | | | | | timeouts Using tevent_req_defer_callback() should make the situation a bit better, until we have a common robust low level dcerpc library. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Mar 7 18:44:24 CET 2012 on sn-devel-104
* s4:librpc/rpc: make dcerpc_bh_is_connected() more robustStefan Metzmacher2012-03-071-0/+8
| | | | metze
* s4:libcli:smb2: add a previous session argument to smb2_connect_send()Michael Adam2012-02-281-0/+1
|
* s4:librpc/dcerpc_smb2: make use of smb2cli_session_application_key()Stefan Metzmacher2012-02-271-2/+13
| | | | metze
* s4:pyrpc: add 'user_session_key' getter to the connection objectStefan Metzmacher2012-01-042-1/+45
| | | | | | | | | This gets the session key from gensec for usage in DRSUAPI. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Jan 4 22:31:52 CET 2012 on sn-devel-104
* s4-librpc: Fix netlogon schannel client connect.Andreas Schneider2011-12-221-0/+2
| | | | | | | As a client we request as much flags as possible. The server checks which flags it supports and returns the same negotiation flags or less. So we need to store the negotiate flags from the server. We need them later if we have to call netr_LogonGetCapabilities.
* s4-librpc: Fix NETLOGON credential chain with Windows 2008.Andreas Schneider2011-12-141-9/+40
| | | | | | | | | | Windows Server 2008 returns NT_STATUS_DOWNGRADE_DETECTED if you call netrServerAuthenticate2 during a domain join without setting the strong keys flag (128bit crypto). Only for NT4 we need to do a downgrade to the returned negotiate flags. See also 0970369ca0cb9ae465cff40e5c75739824daf1d0.
* s4:libcli/raw: implement on top of smbXcli_conn/reqStefan Metzmacher2011-11-301-4/+6
| | | | | | | metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Wed Nov 30 15:13:36 CET 2011 on sn-devel-104
* s4:libcli/smb2: implement on top of smbXcli_conn/reqStefan Metzmacher2011-11-241-2/+3
| | | | metze
* s4-librpc: do not limit to the first IP when trying to do a rpc connectionMatthieu Patou2011-11-111-7/+25
| | | | | | | | The function continue_ip_resolve_name was calling resolve_name_recv which returns only the first IP for a given hostname. Instead we use resolve_name_multiple_recv which returns all the IP for a given hostname. This kind of problem can occur if a host has more than 1 IP but is listenning only on 1.
* dns: Build the python bindingsKai Blin2011-11-041-0/+6
|