freeipa

mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-02-25 18:55:28 -06:00

Files

Alexander Bokovoy 5672eb14de ipa-cldap: support NETLOGON_NT_VERSION_5EX_WITH_IP properly

According to MS-ADTS 6.3.3.2, "Domain Controller Response to an LDAP Ping",
if NETLOGON_NT_VERSION_5EX_WITH_IP is requested in NtVer, we should fill the
socket address of the server and set the NtVer of the response accordingly.

The behavior is a bit unclear from 6.3.3.2 but Samba expects LDAP ping to behave
the same way as a mailslot ping, described in 6.3.5, where socket address of the
server is included only if _WITH_IP variant was requested in NtVer.  If NtVer
only contains NETLOGON_NT_VERSION_5EX (without _WITH_IP bit), socket
address should not be filled in.

Additionally, this means we should use special variant of
ndr_push_NETLOGON_SAM_LOGON_RESPONSE_EX helper named
ndr_push_NETLOGON_SAM_LOGON_RESPONSE_EX_with_flags to properly handle optional
existence of the socket address in the response.

https://fedorahosted.org/freeipa/ticket/4827

Reviewed-By: Sumit Bose <sbose@redhat.com>
Reviewed-By: Simo Sorce <ssorce@redhat.com>

2015-01-19 12:05:52 +01:00

ipa_cldap_netlogon.c

ipa-cldap: support NETLOGON_NT_VERSION_5EX_WITH_IP properly

2015-01-19 12:05:52 +01:00

ipa_cldap_tests.c

CLDAP: add unit tests for make_netbios_name

2014-01-23 18:14:23 +01:00

ipa_cldap_worker.c

CLDAP: make sure an empty reply is returned on any error

2013-08-29 15:28:18 +02:00

ipa_cldap.c

Fix compilation error in ipa-cldap.