svn commit: samba r10567 - in branches/tmp/samba4-winsrepl: . source/auth/gensec source/auth/kerberos source/heimdal/lib/krb5 source/kdc source/libnet source/torture/rpc

[metze at samba.org]

Author: metze
Date: 2005-09-28 06:11:52 +0000 (Wed, 28 Sep 2005)
New Revision: 10567

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=10567

Log:
 r12974 at SERNOX (orig r10561):  abartlet | 2005-09-28 03:09:10 +0200
 This patch takes over KDC socket routines in Heimdal, and directs them
 at the Samba4 socket layer. 
 
 The intention here is to ensure that other events may be processed while
 heimdal is waiting on the KDC.  The interface is designed to be
 sufficiently flexible, so that the plugin may choose how to time
 communication with the KDC (ie multiple outstanding requests, looking
 for a functional KDC).
 
 I've hacked the socket layer out of cldap.c to handle this very
 specific case of one udp packet and reply.  Likewise I also handle
 TCP, stolen from the winbind code.
 
 This same plugin system might also be useful for a self-contained
 testing mode in Heimdal, in conjunction with libkdc.  I would suggest
 using socket-wrapper instead however.
 
 Andrew Bartlett
 
 r12975 at SERNOX (orig r10562):  abartlet | 2005-09-28 04:22:31 +0200
 Ensure we initalise the error table with hdb errors.  This ensures we
 get good text error strings.
 
 Andrew Bartlett
 
 r12976 at SERNOX (orig r10563):  abartlet | 2005-09-28 04:37:03 +0200
 a null 'join' is a no-op.
 
 Andrew Bartlett
 
 r12977 at SERNOX (orig r10564):  abartlet | 2005-09-28 04:58:53 +0200
 Make the RPC-SCHANNEL test use the libnet_join code via torture_join_domain
 
 Handle error cases in torture_create_testuser, where we can't connect
 to the target server (we were segfaulting due to an untested error
 path).
 
 Andrew Bartlett
 
 r12978 at SERNOX (orig r10565):  abartlet | 2005-09-28 06:50:02 +0200
 Try to make Kerberos authentication a bit more friendly.
 
 This disables it for 'localhost' as well as for any host our KDC does
 not recognise.  
 
 Andrew Bartlett
 
 r12979 at SERNOX (orig r10566):  abartlet | 2005-09-28 07:38:20 +0200
 Clean up error messages to provide more accurate info.
 
 Andrew Bartlett
 

Modified:
   branches/tmp/samba4-winsrepl/
   branches/tmp/samba4-winsrepl/source/auth/gensec/gensec_gssapi.c
   branches/tmp/samba4-winsrepl/source/auth/gensec/gensec_krb5.c
   branches/tmp/samba4-winsrepl/source/auth/kerberos/krb5_init_context.c
   branches/tmp/samba4-winsrepl/source/heimdal/lib/krb5/context.c
   branches/tmp/samba4-winsrepl/source/heimdal/lib/krb5/krb5-protos.h
   branches/tmp/samba4-winsrepl/source/heimdal/lib/krb5/krb5.h
   branches/tmp/samba4-winsrepl/source/heimdal/lib/krb5/send_to_kdc.c
   branches/tmp/samba4-winsrepl/source/kdc/kdc.c
   branches/tmp/samba4-winsrepl/source/kdc/kdc.h
   branches/tmp/samba4-winsrepl/source/libnet/libnet_join.c
   branches/tmp/samba4-winsrepl/source/torture/rpc/schannel.c
   branches/tmp/samba4-winsrepl/source/torture/rpc/testjoin.c


Changeset:
Sorry, the patch is too large (808 lines) to include; please use WebSVN to see it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=10567