samba.git/source3/libnet, branch talloc-2.3.0 Unnamed repository; edit this file 'description' to name the repository. s3-libnet_join: allow fallback to NTLMSSP auth in libnet_join 2019-04-03T18:57:31+00:00 Günther Deschner gd@samba.org 2019-04-02T11:16:55+00:00 377d27359ccdb8f2680fda36ca388f44456590e5 When a non-DNS and non-default admin domain is provided during the join sometimes we might not be able to kinit with 'user@SHORTDOMAINNAME' (e.g. when the winbind krb5 locator is not installed). In that case lets fallback to NTLMSSP, like we do in winbind. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13861 Guenther Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org> Autobuild-Date(master): Wed Apr 3 18:57:31 UTC 2019 on sn-devel-144 
When a non-DNS and non-default admin domain is provided during the join
sometimes we might not be able to kinit with 'user@SHORTDOMAINNAME'
(e.g. when the winbind krb5 locator is not installed). In that case lets
fallback to NTLMSSP, like we do in winbind.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13861

Guenther

Signed-off-by: Guenther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>

Autobuild-User(master): Andreas Schneider <asn@cryptomilk.org>
Autobuild-Date(master): Wed Apr  3 18:57:31 UTC 2019 on sn-devel-144
s3-libnet_join: setup libnet join error string when AD connect fails 2019-04-03T17:54:25+00:00 Günther Deschner gd@samba.org 2019-04-02T11:16:11+00:00 68121f46c74df9cef7a377040d01ba75cdcf5a26 BUG: https://bugzilla.samba.org/show_bug.cgi?id=13861 Guenther Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> 
BUG: https://bugzilla.samba.org/show_bug.cgi?id=13861

Guenther

Signed-off-by: Guenther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
s3-libnet_join: always pass down admin domain to ads layer 2019-04-03T17:54:25+00:00 Günther Deschner gd@samba.org 2019-04-02T11:14:06+00:00 ea29aa27cbac4253ee1701fed99a3e0811f7475d Otherwise we could loose the information that a non-default domain name has been used for admin creds. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13861 Guenther Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org> 
Otherwise we could loose the information that a non-default domain name
has been used for admin creds.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13861

Guenther

Signed-off-by: Guenther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
s3:libnet: Use more secure name for the JOIN krb5.conf 2019-04-02T01:12:10+00:00 Andreas Schneider asn@samba.org 2019-04-01T14:39:45+00:00 b7f0c64514a28cfb5d2cdee683c18943b97ea753 Currently we create krb5.conf..JOIN, use krb5.conf._JOIN_ instead. BUG: https://bugzilla.samba.org/show_bug.cgi?id=13861 Signed-off-by: Andreas Schneider <asn@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
Currently we create krb5.conf..JOIN, use krb5.conf._JOIN_ instead.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13861

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
s3:libnet: Fix debug message in libnet_DomainJoin() 2019-04-02T01:12:10+00:00 Guenther Deschner gd@samba.org 2019-04-01T15:46:39+00:00 3a33c360071bb7cada58f1f71ccd8949fda70662 A newline is missing but also use DBG_INFO macro and cleanup spelling. Signed-off-by: Guenther Deschner <gd@samba.org> Reviewed-by: Ralph Boehme <slow@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> 
A newline is missing but also use DBG_INFO macro and cleanup spelling.

Signed-off-by: Guenther Deschner <gd@samba.org>
Reviewed-by: Ralph Boehme <slow@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
libnet: Use dom_sid_str_buf 2018-12-20T22:40:25+00:00 Volker Lendecke vl@samba.org 2018-12-13T20:41:43+00:00 1ab6c336a3f242eebb64b88407be86fa2e00da46 Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Gary Lockyer <gary@catalyst.net.nz> 
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Gary Lockyer <gary@catalyst.net.nz>
libnet: Add kerberos tracing 2018-12-19T20:49:29+00:00 Swen Schillig swen@linux.ibm.com 2018-12-05T10:35:42+00:00 8887a68031070e0d6b93f7283b7ab409977206de Replace kerberos context initialization from raw krb5_init_context() to smb_krb5_init_context_basic() which is adding common tracing as well. Signed-off-by: Swen Schillig <swen@linux.ibm.com> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Christof Schmitt <cs@samba.org> 
Replace kerberos context initialization from
raw krb5_init_context() to smb_krb5_init_context_basic()
which is adding common tracing as well.

Signed-off-by: Swen Schillig <swen@linux.ibm.com>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Christof Schmitt <cs@samba.org>
libnet: Use dom_sid_str_buf 2018-12-10T23:40:31+00:00 Volker Lendecke vl@samba.org 2018-12-08T14:25:14+00:00 38a3970132587827da71ab367d6ed9463dad8b7a Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> 
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
libnet: Use dom_sid_str_buf 2018-12-07T22:29:01+00:00 Volker Lendecke vl@samba.org 2018-12-07T09:25:09+00:00 e5a3364834d425b25c6e77ac28e33dfe996234be Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> 
Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
libads: Give krb5_errs.c its own header 2018-11-27T06:13:14+00:00 Volker Lendecke vl@samba.org 2018-11-23T11:34:50+00:00 f2e939b65b4cd79f8f06a49297853d6896176664 The protos were declared in lib/krb5_wrap but the functions are not available there. Signed-off-by: Volker Lendecke <vl@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> 
The protos were declared in lib/krb5_wrap but the functions are not
available there.

Signed-off-by: Volker Lendecke <vl@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>