svn commit: samba r10767 - in branches/tmp/samba4-winsrepl: . source/auth/gensec source/include source/libcli/wrepl source/pidl/lib/Parse/Pidl/Ethereal source/rpc_server/lsa source/torture/nbt source/torture/rpc

metze at samba.org metze at samba.org
Thu Oct 6 14:38:48 GMT 2005


Author: metze
Date: 2005-10-06 14:38:42 +0000 (Thu, 06 Oct 2005)
New Revision: 10767

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=10767

Log:
 r13372 at SERNOX (orig r10763):  abartlet | 2005-10-06 12:29:28 +0200
 PROOF of the single, easily understood cause of all of our schannel PAIN!
 
 This test currently passes against Win2k3 SP0, but not SP1.  The
 problem was not a convoluted series of changes in policy handles, but
 a simple rule that schannel logins would be regarded as ANONYMOUS not
 SYSTEM.
 
 Andrew Bartlett
 
 r13373 at SERNOX (orig r10764):  abartlet | 2005-10-06 13:15:20 +0200
 To match Win2k3 SP1, we need to set an anonymous user token for
 schannel connections.
 
 Test for Win2k3 SP1 behaviour in RPC-SCHANNEL.
 
 Andrew Bartlett
 
 r13374 at SERNOX (orig r10765):  jelmer | 2005-10-06 13:57:25 +0200
 Actually use VALS() setting for enums
 
 r13391 at SERNOX (orig r10766):  metze | 2005-10-06 16:38:07 +0200
 - make it possible to mark a wrepl_request as send only,
   used for WREPL_REPL_INFORM* messsages
 - make it possible to close the connection after a request was send
   used for WREPL_ASSOCIATION_STOP
 - fix the torture test that tests the assoc context handling
   between connections, you can issue a request and get the reply
   on another connection, I think we should not implement that in our server
   code, as I think it's a security hole, you can cause a windows server
   to send the replies to someone another client, that doesn't wait for data,
   and as there're no massage_id in the protocol the client would be confused
   by a replies that doesn't belong to a query
 
 metze

Modified:
   branches/tmp/samba4-winsrepl/
   branches/tmp/samba4-winsrepl/source/auth/gensec/schannel.c
   branches/tmp/samba4-winsrepl/source/include/structs.h
   branches/tmp/samba4-winsrepl/source/libcli/wrepl/winsrepl.c
   branches/tmp/samba4-winsrepl/source/libcli/wrepl/winsrepl.h
   branches/tmp/samba4-winsrepl/source/pidl/lib/Parse/Pidl/Ethereal/NDR.pm
   branches/tmp/samba4-winsrepl/source/rpc_server/lsa/dcesrv_lsa.c
   branches/tmp/samba4-winsrepl/source/torture/nbt/winsreplication.c
   branches/tmp/samba4-winsrepl/source/torture/rpc/schannel.c


Changeset:
Sorry, the patch is too large (590 lines) to include; please use WebSVN to see it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=10767


More information about the samba-cvs mailing list