<feed xmlns='http://www.w3.org/2005/Atom'>
<title>samba.git/source3/web/cgi.c, branch talloc-2.0.7</title>
<subtitle>Unnamed repository; edit this file 'description' to name the repository.</subtitle>
<link rel='alternate' type='text/html' href='https://git.exis.tech/samba.git/'/>
<entry>
<title>s3 swat: Create random nonce in CGI mode</title>
<updated>2011-07-26T21:33:24+00:00</updated>
<author>
<name>Kai Blin</name>
<email>kai@samba.org</email>
</author>
<published>2011-07-12T06:08:24+00:00</published>
<link rel='alternate' type='text/html' href='https://git.exis.tech/samba.git/commit/?id=c79e08fb1bb36a36bb09e01fdf62094a850ec3ed'/>
<id>c79e08fb1bb36a36bb09e01fdf62094a850ec3ed</id>
<content type='text'>
In CGI mode, we don't get access to the user's password, which would
reduce the hash used so far to parameters an attacker can easily guess.
To work around this, read the nonce from secrets.tdb or generate one if
it's not there.
Also populate the C_user field so we can use that for token creation.

Signed-off-by: Kai Blin &lt;kai@samba.org&gt;

Autobuild-User: Jeremy Allison &lt;jra@samba.org&gt;
Autobuild-Date: Tue Jul 26 23:33:24 CEST 2011 on sn-devel-104
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
In CGI mode, we don't get access to the user's password, which would
reduce the hash used so far to parameters an attacker can easily guess.
To work around this, read the nonce from secrets.tdb or generate one if
it's not there.
Also populate the C_user field so we can use that for token creation.

Signed-off-by: Kai Blin &lt;kai@samba.org&gt;

Autobuild-User: Jeremy Allison &lt;jra@samba.org&gt;
Autobuild-Date: Tue Jul 26 23:33:24 CEST 2011 on sn-devel-104
</pre>
</div>
</content>
</entry>
<entry>
<title>s3 swat: Allow getting the user's HTTP auth password</title>
<updated>2011-07-26T20:22:25+00:00</updated>
<author>
<name>Kai Blin</name>
<email>kai@samba.org</email>
</author>
<published>2011-07-08T10:56:21+00:00</published>
<link rel='alternate' type='text/html' href='https://git.exis.tech/samba.git/commit/?id=b7521dc7566fbd8bfb8a09f391ce0cd8c7f18e14'/>
<id>b7521dc7566fbd8bfb8a09f391ce0cd8c7f18e14</id>
<content type='text'>
Signed-off-by: Kai Blin &lt;kai@samba.org&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Signed-off-by: Kai Blin &lt;kai@samba.org&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>s3-swat Remove d_printf() calls</title>
<updated>2011-06-23T11:47:27+00:00</updated>
<author>
<name>Andrew Bartlett</name>
<email>abartlet@samba.org</email>
</author>
<published>2011-06-22T00:12:39+00:00</published>
<link rel='alternate' type='text/html' href='https://git.exis.tech/samba.git/commit/?id=fb3d5ade9d3f935a69834aaee0046a54dbf38ca1'/>
<id>fb3d5ade9d3f935a69834aaee0046a54dbf38ca1</id>
<content type='text'>
These calls only ever output ASCII strings (protocol strings and
debugging), and never user content, so make it clear that these don't
need to be converted into UTF8.

Andrew Bartlett
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
These calls only ever output ASCII strings (protocol strings and
debugging), and never user content, so make it clear that these don't
need to be converted into UTF8.

Andrew Bartlett
</pre>
</div>
</content>
</entry>
<entry>
<title>Fix convert_string() to take a *converted_size arg. and return a bool.</title>
<updated>2011-03-30T21:59:37+00:00</updated>
<author>
<name>Jeremy Allison</name>
<email>jra@samba.org</email>
</author>
<published>2011-03-30T20:08:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.exis.tech/samba.git/commit/?id=c109a70531de72eef30a695248b91704bd0c7c24'/>
<id>c109a70531de72eef30a695248b91704bd0c7c24</id>
<content type='text'>
Makes these interfaces much harder to misuse and easier to ensure error
checking.

Autobuild-User: Jeremy Allison &lt;jra@samba.org&gt;
Autobuild-Date: Wed Mar 30 23:59:37 CEST 2011 on sn-devel-104
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Makes these interfaces much harder to misuse and easier to ensure error
checking.

Autobuild-User: Jeremy Allison &lt;jra@samba.org&gt;
Autobuild-Date: Wed Mar 30 23:59:37 CEST 2011 on sn-devel-104
</pre>
</div>
</content>
</entry>
<entry>
<title>s3-auth: use auth.h where needed.</title>
<updated>2011-03-29T23:13:09+00:00</updated>
<author>
<name>Günther Deschner</name>
<email>gd@samba.org</email>
</author>
<published>2011-03-25T01:28:05+00:00</published>
<link rel='alternate' type='text/html' href='https://git.exis.tech/samba.git/commit/?id=7e73214ebf614a1f876bf80d374c1e1bc9379981'/>
<id>7e73214ebf614a1f876bf80d374c1e1bc9379981</id>
<content type='text'>
Guenther
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Guenther
</pre>
</div>
</content>
</entry>
<entry>
<title>s3-build: only include intl protos where needed.</title>
<updated>2011-03-29T23:13:08+00:00</updated>
<author>
<name>Günther Deschner</name>
<email>gd@samba.org</email>
</author>
<published>2011-03-22T22:58:21+00:00</published>
<link rel='alternate' type='text/html' href='https://git.exis.tech/samba.git/commit/?id=6b76909f5ef5f279cb73decf83f23d3dbf8adaf8'/>
<id>6b76909f5ef5f279cb73decf83f23d3dbf8adaf8</id>
<content type='text'>
Guenther
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Guenther
</pre>
</div>
</content>
</entry>
<entry>
<title>s3-includes: only include system/filesys.h when needed.</title>
<updated>2011-03-29T23:13:07+00:00</updated>
<author>
<name>Günther Deschner</name>
<email>gd@samba.org</email>
</author>
<published>2011-02-25T22:20:06+00:00</published>
<link rel='alternate' type='text/html' href='https://git.exis.tech/samba.git/commit/?id=0e771263eed0b9bc364ce523765ea17dd1192841'/>
<id>0e771263eed0b9bc364ce523765ea17dd1192841</id>
<content type='text'>
Guenther
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Guenther
</pre>
</div>
</content>
</entry>
<entry>
<title>s3-includes: only include system/passwd.h when needed.</title>
<updated>2011-03-29T23:13:07+00:00</updated>
<author>
<name>Günther Deschner</name>
<email>gd@samba.org</email>
</author>
<published>2011-02-25T16:14:22+00:00</published>
<link rel='alternate' type='text/html' href='https://git.exis.tech/samba.git/commit/?id=49fcf653b11ef7308b849027d342a3182f270dd3'/>
<id>49fcf653b11ef7308b849027d342a3182f270dd3</id>
<content type='text'>
Guenther
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Guenther
</pre>
</div>
</content>
</entry>
<entry>
<title>charcnv: removed the allow_badcharcnv and allow_bad_conv options to convert_string*()</title>
<updated>2011-03-24T00:47:26+00:00</updated>
<author>
<name>Andrew Tridgell</name>
<email>tridge@samba.org</email>
</author>
<published>2011-03-23T23:59:41+00:00</published>
<link rel='alternate' type='text/html' href='https://git.exis.tech/samba.git/commit/?id=15e84a9a09c5a86416e964a3258ee35718fbf45a'/>
<id>15e84a9a09c5a86416e964a3258ee35718fbf45a</id>
<content type='text'>
we shouldn't accept bad multi-byte strings, it just hides problems

Autobuild-User: Andrew Tridgell &lt;tridge@samba.org&gt;
Autobuild-Date: Thu Mar 24 01:47:26 CET 2011 on sn-devel-104
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
we shouldn't accept bad multi-byte strings, it just hides problems

Autobuild-User: Andrew Tridgell &lt;tridge@samba.org&gt;
Autobuild-Date: Thu Mar 24 01:47:26 CET 2011 on sn-devel-104
</pre>
</div>
</content>
</entry>
<entry>
<title>Make getpwnam_alloc() static to lib/username.c, and ensure all username lookups go</title>
<updated>2010-10-20T16:02:12+00:00</updated>
<author>
<name>Jeremy Allison</name>
<email>jra@samba.org</email>
</author>
<published>2010-10-20T15:16:23+00:00</published>
<link rel='alternate' type='text/html' href='https://git.exis.tech/samba.git/commit/?id=e1cfca1e2e0f005ac9d73c6b0eb64bc99413aec6'/>
<id>e1cfca1e2e0f005ac9d73c6b0eb64bc99413aec6</id>
<content type='text'>
through Get_Pwnam_alloc(), which is the correct wrapper function. We were using
it *some* of the time anyway, so this just makes us properly consistent.

Jeremy.

Autobuild-User: Jeremy Allison &lt;jra@samba.org&gt;
Autobuild-Date: Wed Oct 20 16:02:12 UTC 2010 on sn-devel-104
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
through Get_Pwnam_alloc(), which is the correct wrapper function. We were using
it *some* of the time anyway, so this just makes us properly consistent.

Jeremy.

Autobuild-User: Jeremy Allison &lt;jra@samba.org&gt;
Autobuild-Date: Wed Oct 20 16:02:12 UTC 2010 on sn-devel-104
</pre>
</div>
</content>
</entry>
</feed>
