samba.git/source3/web, branch talloc-2.0.7

s3:libsmb: pass CLI_FULL_CONNECTION_* flags via cli_connect_nb()

2011-09-08T08:21:50+00:00

metze

Autobuild-User: Stefan Metzmacher 
Autobuild-Date: Thu Sep  8 10:21:50 CEST 2011 on sn-devel-104

s3:web/swat: use strtoll() instead of atoi/atol/atoll

2011-08-06T09:55:45+00:00

This is more portable, as we have a strtoll replacement
in lib/replace.

metze

Autobuild-User: Stefan Metzmacher 
Autobuild-Date: Sat Aug  6 11:55:45 CEST 2011 on sn-devel-104

s3/swat: use strlcat instead of strncat to fix build on old Linux distros

2011-08-04T15:50:24+00:00

SLES 9's glibc for example had weird macros where the use of strncat resulted
in the use of strcat which we don't allow.

Signed-off-by: Stefan Metzmacher 

Autobuild-User: Björn Jacke 
Autobuild-Date: Thu Aug  4 17:50:24 CEST 2011 on sn-devel-104

s3 swat: Create random nonce in CGI mode

2011-07-26T21:33:24+00:00

In CGI mode, we don't get access to the user's password, which would
reduce the hash used so far to parameters an attacker can easily guess.
To work around this, read the nonce from secrets.tdb or generate one if
it's not there.
Also populate the C_user field so we can use that for token creation.

Signed-off-by: Kai Blin 

Autobuild-User: Jeremy Allison 
Autobuild-Date: Tue Jul 26 23:33:24 CEST 2011 on sn-devel-104

s3 swat: Add time component to XSRF token

2011-07-26T20:22:25+00:00

Signed-off-by: Kai Blin

s3 swat: Add XSRF protection to printer page

2011-07-26T20:22:25+00:00

Signed-off-by: Kai Blin

s3 swat: Add XSRF protection to password page

2011-07-26T20:22:25+00:00

Signed-off-by: Kai Blin

s3 swat: Add XSRF protection to shares page

2011-07-26T20:22:25+00:00

Signed-off-by: Kai Blin

s3 swat: Add XSRF protection to globals page

2011-07-26T20:22:25+00:00

Signed-off-by: Kai Blin

s3 swat: Add XSRF protection to wizard page

2011-07-26T20:22:25+00:00

Signed-off-by: Kai Blin