samba.git/source4/auth, branch talloc-2.0.0

s4: include ntlmssp header in auth/ntlmssp/ntlmssp.h.

2009-08-28T11:43:35+00:00

Guenther

s4-ntlmssp: use interface constants in TargetInfo blob.

2009-08-28T08:09:13+00:00

Guenther

s4-ntlmssp: use NTLMSSP headers from IDL and remove duplicate constants.

2009-08-28T08:09:06+00:00

Guenther

s4-schannel: add ldb suffix to schannel functions.

2009-08-27T13:55:18+00:00

Guenther

s4:kerberos Use MIT compatible names for these enc types

2009-08-21T07:50:49+00:00

This is a small start on (ie, the only trivial part of) the work shown in:
http://k5wiki.kerberos.org/wiki/Projects/Samba4_Port#Samba.27s_use_of_Heimdal_symbols.2C_with_MIT_differences
(a table of all Kerberos symbols used in Samba4, and notes on where
they differ from those provided with MIT Kerberos)

Andrew Bartlett

added a uid_wrapper library

2009-08-05T00:51:00+00:00

This library intercepts seteuid and related calls, and simulates them
in a manner similar to the nss_wrapper and socket_wrapper
libraries. This allows us to enable the vfs_unixuid NTVFS module in
the build farm, which means we are more likely to catch errors in the
token manipulation.

The simulation is not complete, but it is enough for Samba4 for
now. The major areas of incompleteness are:

 - no emulation of setreuid, setresuid or saved uids. These would be
   needed for use in Samba3

 - no emulation of ruid changing. That would also be needed for Samba3

 - no attempt to emulate file ownership changing, so code that (for
   example) tests whether st.st_uid matches geteuid() needs special
   handling

s4: Change my nested groups patch to don't include user's SID itself in the "groupSID"s structure

2009-08-04T15:21:39+00:00

Return infinite time for last last logoff when last logoff = 0

2009-08-03T04:08:15+00:00

s4:auth: make sure we have elements returned at all in authsam_expand_nested_groups()

2009-07-31T12:40:29+00:00

metze

s4: Patch to implement nested group and privileges

2009-07-31T12:40:29+00:00

This patch adds a function "authsam_expand_nested_groups" (calculation of rights
through expanding groups of a certain SID) which basically collects all
memberships through "memberOf" attributes. It works with either user or group SIDs.
For avoiding loops it tests on each call if the SID hasn't been added yet (through
the helper function "sids_contains_sid").
The function itself is called by "authsam_make_server_info".