5c8e3c6108
Fix shell syntax in COVERITY_SCAN_BRANCH test
...
Signed-off-by: Andrew Bartlett <abartlet@samba.org >
2015-06-17 17:41:25 -05:00
95256a6129
kdc: Preserve error code from Pre Authentication .validate hook
...
This is required to ensure the client still gets errors like KRB5KDC_ERR_PREAUTH_FAILED, rather than
KRB5KDC_ERR_PREAUTH_REQUIRED, which become a confusing KRB5_GET_IN_TKT_LOOP.
Andrew Bartlett
Signed-off-by: Andrew Bartlett <abartlet@samba.org >
Pair-programmed-with: Garming Sam <garming@catalyst.net.nz >
Signed-off-by: Garming Sam <garming@catalyst.net.nz >
2015-06-17 17:41:25 -05:00
960fa481be
Add test for incorrect password
...
Signed-off-by: Andrew Bartlett <abartlet@samba.org >
2015-06-17 17:41:25 -05:00
50e2a5ce95
(patch) man page syntax errors
...
A few fixes for syntax errors in man pages, as reported by lintian:
Signed-off-by: Love Hörnquist Åstrand <lha@h5l.org >
2015-05-26 16:03:00 +02:00
05a919b94b
iprop slave: try incremental after complete xfer
...
The following sequence of events results in slave B having a stale HDB:
- slave A connects to master, master dumps HDB for the slave
- kadm5 operations
- slave B connects to master, master sends previously dumped HDB
slave B won't discover any updates until the next transaction.
The fix is simple: the slave should immediately call ihave() after
receiving a complete HDB.
2015-05-20 10:07:52 -05:00
4158ddbc25
Fix HDB rename/close order in iprop slave
2015-05-20 10:07:52 -05:00
409501e5e4
Tolerate some time-travel by slaves
2015-05-20 10:07:51 -05:00
854aaab182
iprop master: Don't ignore flock() result
2015-05-20 10:07:51 -05:00
56b67ac2eb
start-realm: don't write NUL
2015-05-20 10:07:51 -05:00
26c7affa70
roken: fix 0acef7729f
...
Should have used -- instead of == in the prior commit.
Change-Id: I90f8886b754dda19970c6579ffa477634e8dc4a5
2015-05-20 11:05:38 -04:00
0acef7729f
roken: fix append_string "%.s" non-nul termination
...
It should be possible to pass a format string of "%.s" to permit
a non-nul terminated string to be used as input. The test of remaining
precision and the test for NUL needs to be reversed to permit this
behavior to function correctly.
Change-Id: I200f9c2886419dc4c3870f5f44bc10e81245f56c
2015-05-20 10:27:12 -04:00
e51c2126e6
Merge pull request #128 from kiransj/patch-1
...
Fix compilation error in dlfcn.h
2015-04-30 00:25:30 -07:00
a350c5265a
Fix compilation error when in dlfcn.h
...
When dlfcn.h is included from a C++ file causes a compilation error due to missing '{'.
2015-04-30 12:30:28 +05:30
4c98e27eda
call hdb_auth_status when password is wrong in the ENC-CHAL case too, thanks Andrew Bartlett for pointing this out
2015-04-28 08:54:24 -07:00
3d469d7386
Merge pull request #124 from Sp1l/master
...
Fix build when OpenSSL has no EGD support
2015-04-28 08:36:43 -07:00
532d1166fd
remove always true condition
2015-04-28 08:20:39 -07:00
beb187b9ac
Merge pull request #127 from jelmer/typo-fixes
...
Typo: enviroment -> environment.
2015-04-25 13:58:46 -04:00
9eb31585c0
Typo: enviroment -> environment.
2015-04-25 17:37:17 +00:00
832ee39994
YFS Coverity 11034
...
Change-Id: I5037b7e6d804e6a61e02258927f06d24cc0b2051
2015-04-21 22:18:09 -04:00
1e85577f93
YFS Coverity 11631
...
Change-Id: I0848303e123ec07ac8c552c736510e7be2dd5598
2015-04-21 21:59:42 -04:00
2de3d14937
YFS Coverity 11745
...
Change-Id: I4172f81a187cf398c4538de36067ae19eb2534e3
2015-04-21 21:57:23 -04:00
7b17e3015b
YFS Coverity 11475
...
Change-Id: I3b6cde99859979e5db866c3f707f194144251ee1
2015-04-21 21:50:43 -04:00
afd946149f
YFS Coverity 11738
...
Change-Id: I553c310afbefb50521d90e0aa7121cae359ee311
2015-04-21 21:47:48 -04:00
bcb92ceaa7
YFS Coverity 11694
...
Change-Id: If43c93b8dc1088710a0cd48987cb9e69acb6ec23
2015-04-21 21:22:15 -04:00
2b168c8be2
YFS Coverity 11525
...
Change-Id: I1e0a33ee1ae1a61dbdecc731451852590aa3883c
2015-04-21 21:14:54 -04:00
858480145b
Refactor EGD conditional support
...
As per Jeremy's request in #124
Windows does not define HAVE_RAND_EGD resulting in the same conditional
support for EGD.
2015-04-21 10:04:08 +02:00
8cdd54c997
coverity 1164162
2015-04-19 15:04:16 -05:00
e8563aeae5
coverity 1164093
2015-04-19 14:39:10 -05:00
41524590be
fixup coverity 1164099
2015-04-19 14:03:59 -05:00
e7b5efb103
coverity 1164091
2015-04-18 23:19:26 -05:00
528b6d093c
coverity 1164092
2015-04-18 23:19:25 -05:00
0e524f3acb
coverity 1164099
2015-04-18 23:19:25 -05:00
e010254cc2
coverity 745495
2015-04-18 23:19:25 -05:00
73c4db7269
coverity 745505
2015-04-18 23:19:25 -05:00
b6e4d25d0d
coverity 1164086
2015-04-18 23:19:24 -05:00
f1fca8be14
less make
2015-04-18 17:21:56 -07:00
a26007cebc
(keychain_init): free ctx on error
2015-04-18 17:08:09 -07:00
9c4d304fb2
spelling
2015-04-18 15:51:15 -07:00
bab271854b
go back to apt-get install
2015-04-18 15:36:34 -07:00
4b7600ebf0
spelling
2015-04-18 15:29:39 -07:00
4d40d1f578
use apt addon
2015-04-18 15:09:21 -07:00
7f03fe5d58
skip installing
2015-04-18 14:45:25 -07:00
76c29daad7
restructure
2015-04-18 14:19:48 -07:00
a7f90a9458
coverity_scan
2015-04-17 19:46:42 -07:00
feb245f741
Undo workaround for NTLM and mechglue bugs
2015-04-17 10:55:47 -05:00
290e2430c4
Don't use mech default cred when input cred isn't
...
gss_init_sec_context() with input_cred_handle != GSS_C_NO_CREDENTIAL
should NOT proceed if there is no element in the given credential for
the requested mechanism.
2015-04-17 10:55:47 -05:00
420c080a8f
Can't use deleg creds with SPNEGO (test_context)
...
It isn't possible to use non-default credentials to init a context with
a mechanism for which the credential doesn't have an element. That's
exactly what was happening here. The code was left commented out to
describe how one might use SPNEGO with delegated credentials:
store them with gss_store_cred(), then acquire them back.
2015-04-17 10:55:47 -05:00
08724496ff
Use default NTLM domain cc config
...
The NTLM GSS mechanism now supports default credential handles (and
acquiring handles for default credentials with desired_name ==
GSS_C_NO_NAME).
2015-04-17 10:55:17 -05:00
a449b7ef5e
Store default NTLM domain cc config
...
This is needed so that the NTLM GSS mechanism can have a meaningful
concept of default credential (the NTLM key for the default domain found
in the ccache).
2015-04-17 10:51:51 -05:00
5d50d06845
Better test workaround for NTLM bug
2015-04-16 19:53:22 -05:00
Andrew Bartlett