summaryrefslogtreecommitdiffstats
path: root/source3/utils
Commit message (Collapse)AuthorAgeFilesLines
* s3-dbwrap: Add "listwatchers" to dbwrap_toolVolker Lendecke2012-04-191-9/+62
|
* s3: Fix Coverity ID 2727 to 2740 -- UNINITVolker Lendecke2012-04-191-7/+12
|
* s3: Fix a "ISO C90 forbids mixed declarations and code"Volker Lendecke2012-04-191-3/+7
| | | | | Autobuild-User: Volker Lendecke <vl@samba.org> Autobuild-Date: Thu Apr 19 10:32:27 CEST 2012 on sn-devel-104
* s3: Add smbstatus -N to output the notify dbVolker Lendecke2012-04-171-0/+40
| | | | | Autobuild-User: Volker Lendecke <vl@samba.org> Autobuild-Date: Tue Apr 17 11:54:35 CEST 2012 on sn-devel-104
* s3: Add "notify-cleanup" to smbcontrolVolker Lendecke2012-04-171-0/+13
| | | | This triggers a notify cleanup run which would normally only run periodically
* s3-utils: add do_reload_printers command to smbcontolBjörn Baumbach2012-04-061-0/+14
| | | | Add command to force smbd to reload printers by sending MSG_PRINTER_PCAP.
* build: Remove SMB_STRUCT_DIR defineAndrew Bartlett2012-04-051-3/+3
|
* build: Remove SMB_STRUCT_DIRENT defineAndrew Bartlett2012-04-051-2/+2
|
* build: Remove sys_closedir wrapperAndrew Bartlett2012-04-051-7/+7
|
* build: Remove sys_readdir wrapperAndrew Bartlett2012-04-051-2/+2
|
* build: Remove sys_opendir wrapperAndrew Bartlett2012-04-051-3/+3
|
* build: Remove sys_open wrapperAndrew Bartlett2012-04-051-2/+2
|
* s3-ntlm_auth: use manage_gensec_request for squid-2.5-ntlmsspAndrew Bartlett2012-04-031-178/+9
| | | | Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-auth: Order GENSEC mechs by priority, krb5 before NTLMSSPAndrew Bartlett2012-04-031-2/+3
| | | | | | | | | Otherwise, really simple clients (such as the current ntlm_auth gss-spnego client) will not select krb5. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlm_auth: add ntlm_auth_generate_session_info_pac()Andrew Bartlett2012-04-031-0/+144
| | | | | | Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-ntlm_auth Use GENSEC for gss-spnego serverAndrew Bartlett2012-04-031-404/+390
| | | | | | | | | | This imports the gensec handling code from the source4 ntlm_auth, which will eventually be used for all the NTLMSSP and SPNEGO clients and servers but which is only used for gss-spnego for now. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* More strlcat/strlcpy truncate checks.Jeremy Allison2012-03-301-3/+9
|
* use usleep rather than sys_usleep in various places, in anticipation of ↵Jelmer Vernooij2012-03-242-2/+2
| | | | usleep moving to libreplace.
* s3-krb5: Remove GSS_WRAP_IOV conditionalAndrew Bartlett2012-03-151-1/+1
| | | | | | | We already confirm that we have this functionality before we set HAVE_KRB5 at configure time. Andrew Bartlett
* s3: fix build on AIXBjörn Jacke2012-03-101-1/+2
| | | | | Autobuild-User: Björn Jacke <bj@sernet.de> Autobuild-Date: Sat Mar 10 19:07:20 CET 2012 on sn-devel-104
* s3-auth: Remove security=share (depricated since 3.6).Andrew Bartlett2012-03-041-4/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch removes security=share, which Samba implemented by matching the per-share password provided by the client in the Tree Connect with a selection of usernames supplied by the client, the smb.conf or guessed from the environment. The rationale for the removal is that for the bulk of security=share users, we just we need a very simple way to run a 'trust the network' Samba server, where users mark shares as guest ok. This is still supported, and the smb.conf options are documented at https://wiki.samba.org/index.php/Public_Samba_Server At the same time, this closes the door on one of the most arcane areas of Samba authentication. Naturally, full user-name/password authentication remain available in security=user and above. This includes documentation updates for username and only user, which now only do a small amount of what they used to do. Andrew Bartlett -------------- / \ / REST \ / IN \ / PEACE \ / \ | SEC_SHARE | | security=share | | | | | | 5 March | | | | 2012 | *| * * * | * _________)/\\_//(\/(/\)/\//\/\///|_)_______
* s3: print a nice warning when HAVE_ADS is not enabled but you still try to ↵Matthieu Patou2012-03-041-0/+5
| | | | do net rpc keytab vampire
* s3-ntlm_auth fix up gss-spnego-client so as to work with gss-spnegoAndrew Bartlett2012-03-011-16/+5
| | | | | | The SPNEGO code changed since this was last tested. Andrew Bartlett
* s3-ntlm_auth: Wrap kerberos token in GSSAPIAndrew Bartlett2012-03-011-2/+6
| | | | | | | | | | | | While windows will accept this ticket without the wrapping, it is nicer to follow the standard and wrap it up in GSSAPI. This should allow the ntlm_auth gss-spnego-client to talk to the ntlm_auth gss-spengo server. Reported by Christof Schmitt <christof.schmitt@us.ibm.com> Andrew Bartlett
* s3-ntlm_auth: Add --target-service and --target-hostname optionsAndrew Bartlett2012-03-011-9/+40
| | | | | | | This will allow the gss-spnego-client protocol to work with modern SPNEGO servers that do not send the principal in the mechListMIC. Andrew Bartlett
* Remove unused function.Jeremy Allison2012-02-241-21/+0
|
* s3-ntlm_auth: Convert ntlm_auth to use gensec_ntlmssp server-sideAndrew Bartlett2012-02-241-99/+327
| | | | | | | This uses the common gensec_ntlmssp server code for ntlm_auth, removing the last non-gensec use of the NTLMSSP server. Andrew Bartlett
* s3-utils: Remove unused connect_to_ipc_krb5()Andrew Bartlett2012-02-232-57/+0
| | | | | | Found by callcatcher. Andrew Bartlett
* s3-ntlm_auth: allow ntlm_auth --diagnostics to pass againAndrew Bartlett2012-02-203-8/+12
| | | | | | | This still requires that the server permit LM passwords, but our s3dc test environment has this enabled. Andrew Bartlett
* Rename obscure defined constants.Christopher R. Hertel (crh)2012-02-161-2/+2
| | | | | | | | | | | | | | | Replaced the undescriptive SMB_PORT1 and SMB_PORT2 defined constants with the slightly more descriptive names NBT_SMB_PORT and TCP_SMB_PORT. Also replaced several hard-coded references to the well-known port numbers (139 and 445, respectively) as appropriate. Small changes to clarify some comments regarding the two transport types. Signed-off-by: Simo Sorce <idra@samba.org> Autobuild-User: Simo Sorce <idra@samba.org> Autobuild-Date: Thu Feb 16 08:29:41 CET 2012 on sn-devel-104
* s3-net: Don't use an internal krb5 for kdc lookup.Andreas Schneider2012-02-091-19/+23
| | | | | | | This replaces the use of the internal krb5_locate_kdc() function with our own get_kdc_list() function. Signed-off-by: Günther Deschner <gd@samba.org>
* Only ask for specific permissions required when setting an ACL.Jeremy Allison2012-02-031-3/+12
| | | | | Autobuild-User: Jeremy Allison <jra@samba.org> Autobuild-Date: Fri Feb 3 03:07:33 CET 2012 on sn-devel-104
* s3:net ads join: remove a useless empty comment blockMichael Adam2012-01-311-2/+1
| | | | | Autobuild-User: Michael Adam <obnox@samba.org> Autobuild-Date: Tue Jan 31 18:37:45 CET 2012 on sn-devel-104
* s3:net ads join: add a comment for the call to _net_ads_join_dns_update()Michael Adam2012-01-311-0/+5
|
* s3:net ads join: reduce indentation in _net_ads_join_dns_updates()Michael Adam2012-01-311-46/+47
|
* s3:net ads join: move dns update code out to new function ↵Michael Adam2012-01-311-77/+84
| | | | _net_ads_join_dns_updates()
* s3:net ads join: improve comment for dns update blockMichael Adam2012-01-311-4/+4
|
* s3:net ads join: improve status evaluation for call to net_update_dns()Michael Adam2012-01-311-2/+5
| | | | untangle assignment from check and log error code in message if failed.
* s3:net ads join: interpret return code of ads_kinit_password() in dns update ↵Michael Adam2012-01-311-1/+8
| | | | | | block If failed, print according error message and skip the attempt to do dns update.
* s3:net ads join: check for malloc success and react accordingly in dns ↵Michael Adam2012-01-311-0/+5
| | | | update block
* s3:net ads join: check for success of fetching machine password in dns ↵Michael Adam2012-01-311-0/+5
| | | | | | update block log and cleanup accordingly if failed
* s3:net ads join: untangle assignment from check, fix return code and improve ↵Michael Adam2012-01-311-2/+8
| | | | | | | error logging only the dns update failed, not the join. Also do proper memory cleanup
* s3:net ads join: reduce indentation and improve logging in the dns update ↵Michael Adam2012-01-311-13/+17
| | | | | | code block by doing an early goto done upon error condition
* s3:net ads join: untangle assignment from check.Michael Adam2012-01-311-1/+2
|
* s3:net registry: fix a copy and paste error in a help textMichael Adam2012-01-311-2/+2
|
* s3: Remove a typedefVolker Lendecke2012-01-241-3/+3
| | | | | | | | We have it in README.Coding to avoid typedef for structs, but I think it also applies to enums. Autobuild-User: Volker Lendecke <vlendec@samba.org> Autobuild-Date: Tue Jan 24 22:45:50 CET 2012 on sn-devel-104
* s3: Remove a typedefVolker Lendecke2012-01-241-3/+3
|
* s3-librpc: pass struct ndr_interface_table down to ↵Andrew Bartlett2012-01-181-1/+1
| | | | | | | | | | | cli_pipe_open_generic/spnego() This allows the target service (as determined from the IDL) to be passed to GSSAPI (rather than the current, incorrect, "cifs"). Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-utils/net: pass struct ndr_interface_table downAndrew Bartlett2012-01-1813-138/+137
| | | | | | | | | This will allow the target service (as determined from the IDL) to be passed to GSSAPI (rather than the current, incorrect, "cifs"). Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>
* s3-build: Rework object lists to allow gse gensec moduleAndrew Bartlett2012-01-181-39/+0
| | | | | | | | This also allows the spnego_parse_krb5_wrap() function to be shared. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>