samba.git/source4/lib, branch ldb-1.2.3

s4:http/gensec: add missing tevent_req_done() to gensec_http_ntlm_update_done()

2017-08-28T09:04:15+00:00

This was missing in commit d718e92d5e145dccd492c46febc249e462ce50c6.

Sadly we can't have automated tests for this as we only implement
the client side for this protocol.

I've tested with using:

bin/smbtorture \
  -W BLA --realm=BLA.BASE \
  -s /dev/null -Uadministrator%A1b2C3d4 \
  ncacn_http:w2k8r2-219[593,RpcProxy=w2k8r2-219.bla.base,HttpUseTls=false,HttpAuthOption=basic] \
  rpc.epmapper.epmapper.Lookup_simple \

and:

bin/smbtorture \
  -W BLA --realm=BLA.BASE \
  -s /dev/null -Uadministrator%A1b2C3d4 \
  ncacn_http:w2k8r2-219[593,RpcProxy=w2k8r2-219.bla.base,HttpUseTls=false,HttpAuthOption=ntlm] \
  rpc.epmapper.epmapper.Lookup_simple \

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12919

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Jeremy Allison 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Fri Jul 21 23:29:39 CEST 2017 on sn-devel-144

(cherry picked from commit 13f91927e0f642e58c70d7b0b2f68df861ac661c)

s4/lib/tls: Use SHA256 to sign the TLS certificates

2017-08-28T09:04:14+00:00

The use of SHA-1 has been on the "do not" list for a while now, so make our
self-signed certificates use SHA256 using the new
gnutls_x509_crt_sign2 provided since GNUTLS 1.2.0

Signed-off-by: Andrew Bartlett 
Reviewed-by: Garming Sam 

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12953
(cherry picked from commit 5bb341fb9ceb943b4a72108edee9046b60f070b0)

s4: com: Replace erroneous inclusion of internal talloc.h header with external.

2017-08-17T12:58:08+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12932

Signed-off-by: Jeremy Allison 
Reviewed-by: Stefan Metzmacher 

Autobuild-User(master): Jeremy Allison 
Autobuild-Date(master): Tue Aug 15 08:06:40 CEST 2017 on sn-devel-144

(cherry picked from commit f816de5636bb17ab09dd4b9c3e5b0249dc9b186f)

Autobuild-User(v4-7-test): Karolin Seeger 
Autobuild-Date(v4-7-test): Thu Aug 17 14:58:08 CEST 2017 on sn-devel-144

s4: COM: Remove talloc_autofree_context() from (unused) COM code.

2017-08-17T08:38:21+00:00

BUG: https://bugzilla.samba.org/show_bug.cgi?id=12932

Signed-off-by: Jeremy Allison 
Reviewed-by: Andrew Bartlett 
(cherry picked from commit fe2ac3e304201d18ca15d388b622a4f15f72ad0a)

s4:lib/com: remove unused pycom binding

2017-05-30T10:16:57+00:00

This is completely untested and from reading the code it doesn't really
do anything beside always returning None from the get_class_object() method.

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett 

Autobuild-User(master): Andrew Bartlett 
Autobuild-Date(master): Tue May 30 12:16:57 CEST 2017 on sn-devel-144

s4:gensec/http_basic: add simple gensec_http_basic_update_send/recv() wrapper functions

2017-05-21T19:05:09+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

s4:gensec/http_ntlm: add implement gensec_http_ntlm_update_send/recv()

2017-05-21T19:05:09+00:00

Signed-off-by: Stefan Metzmacher 
Reviewed-by: Andrew Bartlett

gensec: Add a TALLOC_CTX * to gensec_register().

2017-05-13T14:50:13+00:00

Pass in the TALLOC_CTX * from the module init to remove
another talloc_autofree_context() use.

Signed-off-by: Jeremy Allison 
Reviewed-by: Ralph Boehme

s4: popt: Change from talloc_autofree_context() to NULL context.

2017-05-11T18:30:13+00:00

Call popt_free_cmdline_credentials() on successful exit from torture.

Signed-off-by: Jeremy Allison 
Reviewed-by: Andreas Schneider

s4: popt: Make cmdline_credentials static.

2017-05-11T18:30:13+00:00

Signed-off-by: Jeremy Allison 
Reviewed-by: Andreas Schneider