freeipa/daemons/ipa-slapi-plugins/ipa-cldap
Alexander Bokovoy 5672eb14de ipa-cldap: support NETLOGON_NT_VERSION_5EX_WITH_IP properly
According to MS-ADTS 6.3.3.2, "Domain Controller Response to an LDAP Ping",
if NETLOGON_NT_VERSION_5EX_WITH_IP is requested in NtVer, we should fill the
socket address of the server and set the NtVer of the response accordingly.

The behavior is a bit unclear from 6.3.3.2 but Samba expects LDAP ping to behave
the same way as a mailslot ping, described in 6.3.5, where socket address of the
server is included only if _WITH_IP variant was requested in NtVer.  If NtVer
only contains NETLOGON_NT_VERSION_5EX (without _WITH_IP bit), socket
address should not be filled in.

Additionally, this means we should use special variant of
ndr_push_NETLOGON_SAM_LOGON_RESPONSE_EX helper named
ndr_push_NETLOGON_SAM_LOGON_RESPONSE_EX_with_flags to properly handle optional
existence of the socket address in the response.

https://fedorahosted.org/freeipa/ticket/4827

Reviewed-By: Sumit Bose <sbose@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>
2015-01-19 12:05:52 +01:00
..
ipa_cldap_netlogon.c ipa-cldap: support NETLOGON_NT_VERSION_5EX_WITH_IP properly 2015-01-19 12:05:52 +01:00
ipa_cldap_tests.c CLDAP: add unit tests for make_netbios_name 2014-01-23 18:14:23 +01:00
ipa_cldap_worker.c CLDAP: make sure an empty reply is returned on any error 2013-08-29 15:28:18 +02:00
ipa_cldap.c Fix compilation error in ipa-cldap. 2013-12-06 14:44:40 +01:00
ipa_cldap.h CLDAP: generate NetBIOS name like ipa-adtrust-install does 2014-01-23 18:14:23 +01:00
ipa-cldap-conf.ldif Create skeleton CLDAP server as a DS plugin 2011-11-21 18:52:48 -05:00
Makefile.am CLDAP: add unit tests for make_netbios_name 2014-01-23 18:14:23 +01:00