samba.git/auth, branch talloc-2.0.8

auth/kerberos: add HAVE_KRB5 guard to fix non-krb5 build after winbindd pac changes

2012-09-22T00:44:07+00:00

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Sat Sep 22 02:44:07 CEST 2012 on sn-devel-104

auth/kerberos: Adjust log level for failed PAC signature verification

2012-09-21T02:49:32+00:00

With winbindd trying to verify the signature of an application provided
PAC, this message can be easily triggered. Adjust the debug level to
avoid filling up the logs.

Signed-off-by: Andrew Bartlett

auth: Fix some nonempty blank lines

2012-09-21T02:49:32+00:00

Signed-off-by: Andrew Bartlett

auth/credentials: Do not print passwords in a talloc memory dump

2012-08-31T04:30:38+00:00

The fact that a password was created here is enough information, so
overwrite with the function name and line.

Andrew Bartlett

auth/credentials: Support match-by-key in cli_credentials_get_server_gss_creds()

2012-08-29T23:26:12+00:00

This allows a password alone to be used to accept kerberos tickets.

Of course, we need to have got the salt right, but we do not need also
the correct kvno.  This allows gensec_gssapi to accept tickets based on
a secrets.tdb entry.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Thu Aug 30 01:26:12 CEST 2012 on sn-devel-104

auth/credentials: Remove unused, and un-declared cli_credentials_set_krbtgt()

2012-08-29T01:34:52+00:00

auth/credentials: Better integrate fetch of secrets.tdb and secrets.ldb records

2012-08-29T01:34:52+00:00

By checking first if there is a secrets.tdb record and passing in the password and last change time
we avoid setting one series of values and then replacing them.  We also avoid the need to work
around the setting of anonymous.

Andrew Bartlett

auth/credentials: Improve memory handling in cli_credentials_set_machine_account

2012-08-29T01:11:09+00:00

By using a tempoary talloc context this is much tidier and more reliable code.

Andrew Bartlett

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Wed Aug 29 03:11:10 CEST 2012 on sn-devel-104

auth/credentials: Avoid double-free in the failure case

2012-08-28T23:09:10+00:00

This pointer is only valid if dbwrap_fetch returned success.

Andrew Bartlett

auth/credentials: Rework credentials handling to try and find the most recent machine pw

2012-08-27T21:57:29+00:00

As winbindd will update secrets.tdb but not secrets.ldb, we need to detect this and use secrets.tdb

Andrew Bartlett