summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* | Unsused function since last commitAndrew Bartlett2002-06-151-34/+0
| |
* | Rework much of the service.c code:Andrew Bartlett2002-06-157-209/+273
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The aim of this execise is to give the 'security>=user' code a straight paper path. Security=share will sill call authorise_login(), but otherwise we avoid that mess. This allow *much* more accurate error code reporting, beocuse we don't start pretending that we can use the (nonexistant) password etc. Also in this patch is code to create the 'homes' share at session setup time (as we have done in the past - been broken recently) and to record this on the user's vuser struct for later reference. The changes here should also allow for much better use of %H (some more changes to come here). The service.c changes move a lot of code around, but are not as drastric as they look... (Also included is a fix to srv_srvsvc_nt.c where 'total_entries' not '*total_entries' was compared). This code is needs testing, but passes my basic tests. I expect we have lost some functionality, but the stuff I had expected to loose was already broken before I started. In particular, we don't 'fall back' to guest if the user cannot access a share (for security=user). If you want this kind of stuff then you really want security=share anyway. Andrew Bartlett
* | Update the netlogon code to better cope with trusted domains, where thingsAndrew Bartlett2002-06-151-10/+29
| | | | | | | | | | | | | | | | like the domain name and SID come from the remote domain, not the local one. These are filled out by the code from the previous commit (auth_util.c, the make_server_info_info3() fn) and read back here. Andrew Bartlett
* | Add the missing makefile from previous commitAndrew Bartlett2002-06-151-1/+1
| |
* | This patch does 2 things:Andrew Bartlett2002-06-154-96/+282
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It extends the 'server mutex' to conver security=server, becouse the connection race condition exists here too, and while people *should* use security=domain, some sites don't.... (This probably should be done in 2.2 as well). Also, start to actually extract and use the information that the remote server returns in the info3 struct. The server mutex code is now in a new file. Andrew Bartlett
* | Add another 'trivial' built in authentication module - this one is aAndrew Bartlett2002-06-151-0/+50
| | | | | | | | | | | | | | | | | | | | deveopers hack to always send a fixed challange, for the benifit of tutorials and packet sniffing etc. Enabling this module removes all security, so its a --enable-developer option. Andrew Bartlett
* | It appears that to match NT we should not use the 'samstrict' behaviour,Andrew Bartlett2002-06-151-3/+5
| | | | | | | | and that local accounts are perfectly fine.
* | x source path so this thing compiles.John Terpstra2002-06-151-1/+1
| |
* | Add back sys_getpwnam() and freinds to the system.c interface, but don'tAndrew Bartlett2002-06-154-5/+29
| | | | | | | | | | | | use the silly cache any more. Also add group functions and fix a few callers. Andrew Bartlett
* | Fix spelling typo.Jeremy Allison2002-06-142-13/+13
| | | | | | | | Jeremy.
* | Ok, now I can try my first client test...Jeremy Allison2002-06-142-8/+33
| | | | | | | | Jeremy.
* | More of SMB signing for client - not yet finished (should be harmless).Jeremy Allison2002-06-144-11/+45
| | | | | | | | Jeremy.
* | Merge of csc termination fix.Jeremy Allison2002-06-141-1/+2
| | | | | | | | Jeremy.
* | moved lp_list_* functions away from param/loadparm.c, put int lib/util_str.cSimo Sorce2002-06-1410-223/+225
| | | | | | | | | | and renamed to str_list_* as it is a better name. Elrond should be satisfied now :)
* | Add a touch of const to this - helps with some yet-to-be-commited changesAndrew Bartlett2002-06-141-3/+3
| |
* | Allow non unix accounts to be added to an ldap directory without NUA accountsAndrew Bartlett2002-06-141-0/+4
| | | | | | | | | | | | already. Andrew Bartlett
* | Patch from ctrlsoft to use the pdb_sethexpwd function in smbpasswd - insteadAndrew Bartlett2002-06-141-48/+7
| | | | | | | | | | | | | | | | | | of implementing it twice inline. This code is complex - but occasionally I get the feeling that people made it more complext than it really needed to be... Andrew Bartlett
* | It looks like we never tested the 'cleanup' code, so when I triggered itAndrew Bartlett2002-06-142-12/+20
| | | | | | | | | | | | (invalid passdb backends smb.conf entry) we picked up a few things :-). Andrew Bartlett
* | Some updates from ctrlsoft <jelmer@nl.linux.org> to return failure if *any* ofAndrew Bartlett2002-06-141-19/+20
| | | | | | | | | | | | the passdb backends fail to load (is this the right way? - I think so). Also, I've added some more comments, cleaned up some style etc.
* | Debug fixes from ctrlsoftAndrew Bartlett2002-06-141-2/+2
| |
* | Kill useless castAndrew Bartlett2002-06-141-2/+2
| |
* | Convenience function to allow a SID to be specified as a string.Andrew Bartlett2002-06-141-3/+46
| | | | | | | | | | | | (for use in passdb modules like pdb_xml or a new pdb_ldap that stores sids etc.) Andrew Bartlett
* | Add some comments on writing new pdb modules. (from ctrlsoft)Andrew Bartlett2002-06-141-0/+7
| | | | | | | | Andrew Bartlett
* | Patch from ctrlsoft to make the pluggable passdb subsystem use an lp_listAndrew Bartlett2002-06-146-46/+61
| | | | | | | | | | | | | | | | | | | | | | | | | | rather than a string when configuring mulitple backends. Also adjust some of the users of get_global_sam_sid() to cope with the fact that it just might not exist (uninitialised, can't access secrets.tdb). More places need conversion. Add some const and remove silly casts. Andrew Bartlett
* | Patch (from ctrlsoft <jelmer@nl.linux.org>) to poptify testparm, and theAndrew Bartlett2002-06-143-154/+139
| | | | | | | | | | | | modifications required to suppress the const warnings. Andrew Bartlett
* | Add const, kill of useless casts and therefore eliminate warnings.Andrew Bartlett2002-06-143-6/+6
| | | | | | | | Andrew Bartlett
* | Ensure we save any older SIGALRM signal handler.Jeremy Allison2002-06-133-7/+11
| | | | | | | | Jeremy.
* | Veto files fix.Jeremy Allison2002-06-131-275/+273
| | | | | | | | Jeremy.
* | Merge in mangle fixes from 2.2.Jeremy Allison2002-06-137-371/+376
| | | | | | | | Jeremy.
* | Latest patch from metze <metze@metzemix.de> to move most of samba acrossAndrew Bartlett2002-06-1314-113/+183
| | | | | | | | | | | | | | | | | | | | | | to using SIDs instead of RIDs. The new funciton sid_peek_check_rid() takes an 'expected domain sid' argument. The idea here is to prevent mistakes where the SID is implict, but isn't the same one that we have in the struct. Andrew Bartlett
* | a useful script for finding global variables or functions that couldAndrew Tridgell2002-06-131-0/+59
| | | | | | | | | | | | | | be static very very slow ... I leave it as an exercise for the reader to make this O(n) instead of O(n^2)
* | Spelling.Tim Potter2002-06-121-1/+1
| |
* | Ignore winbindd_proto.hTim Potter2002-06-121-0/+1
| |
* | Spelling fixes.Tim Potter2002-06-121-1/+1
| |
* | Removed eff_name field from cli_struct as it wasn't being used anywhere.Tim Potter2002-06-122-2/+2
| |
* | few fixes from Elrond(elrond@samba-tng.org) and Billy ↵Simo Sorce2002-06-113-13/+24
| | | | | | | | O'Connor(billy@oconnoronline.net)
* | merge from 2.2Gerald Carter2002-06-111-0/+1
| |
* | Merge of Jerry's fix from 2.2.Jeremy Allison2002-06-102-8/+18
| | | | | | | | Jeremy.
* | Remove "sids.h" as it really wasn't being used anywhere, and was exportingAndrew Bartlett2002-06-106-44/+1
| | | | | | | | | | | | | | | | | | the (now static) global_sam_sid. The only place it was being used was to return global_sid_NULL to some uid->sid functions - and I'm not convinced this is correct in any case. Andrew Bartlett
* | With this file being automaticly regenerated, and cleaned up with 'make clean'Andrew Bartlett2002-06-101-142/+0
| | | | | | | | | | | | I think it should be removed from CVS. This matches the other proto files. Andrew Bartlett
* | Fix up comment on netbios scopes, and remove paragraph about internationalAndrew Bartlett2002-06-091-12/+2
| | | | | | | | | | | | charsets, becouse it really don't apply well with Samba 3.0 and unicode. Andrew Bartlett
* | This paragraph is irrelevent and misleading (needs fix for 2.2 as well)Andrew Bartlett2002-06-091-6/+0
| |
* | This (hopefully) fixes a bug reported by Kai Krueger <kai@kruegernetz.de>Andrew Bartlett2002-06-092-17/+10
| | | | | | | | | | | | | | | | | | | | involving the use of lp_winbind_gid() without checking if they have been set. Also revert the 'clashing user' check back to a Get_Pwnam() - I probably should never have changed it. Andrew Bartlett
* | Ensure when allowing fchown with write access and dos filemodes thatJeremy Allison2002-06-071-7/+7
| | | | | | | | | | we leave the gid alone. Jeremy.
* | Merge pidfile fix.Jeremy Allison2002-06-071-3/+3
| | | | | | | | Jeremy.
* | Fix commentAndrew Bartlett2002-06-071-1/+1
| |
* | Globally replace 'global_sam_sid' with get_global_sam_sid(), a selfAndrew Bartlett2002-06-0714-87/+91
| | | | | | | | | | | | | | | | | | initialising function. This patch thanks to the work of "Stefan (metze) Metzmacher" <metze@metzemix.de> This is partly to enable the transition to SIDs in the the passdb. Andrew Bartlett
* | Move the code from lib/util_sid.c that deals with the global_sam_sid intoAndrew Bartlett2002-06-073-242/+282
| | | | | | | | | | | | | | a file that is linked with the passdb. This is to avoid linking insanity when this global becomes a self-initing function.
* | Add flags2 for security signituresAndrew Bartlett2002-06-071-0/+1
| |
* | A couple of updates for the SmbEncrypt code, and some of its users.Andrew Bartlett2002-06-072-14/+32
| | | | | | | | | | | | | | | | | | | | (const, takes unix string as arg) Also update cli_full_connection to take NULL pointers as 'undefined' correctly, and therefore do its own lookup etc. This what was intended, but previously you needed to supply a 0.0.0.0 IP address. Andrew Bartlett
generated by cgit (git 2.34.1) at 2025-09-26 16:20:59 +0000