summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* | Updating Global definitions.John Terpstra2003-05-111-1/+1
| |
* | Extending Access Control DocsJohn Terpstra2003-05-114-449/+553
| |
* | As discussed on samba-technical - move to 'primaryGroupSid' insted ofAndrew Bartlett2003-05-112-18/+56
| | | | | | | | | | | | | | | | | | | | primaryGroupID (rid). This is consistant with the move from 'rid' to ntSid for the primary user identifier. Also cope with legacy installations where primaryGroupID might have been stored as 0. Andrew Bartlett
* | Using /dev/urandom for determining an ldap server backoff is a waste of systemAndrew Bartlett2003-05-111-2/+6
| | | | | | | | | | | | entropy - use sys_random() instead. Andrew Bartlett
* | Completion of Stand-Alone server docs.John Terpstra2003-05-101-6/+107
| |
* | Fix typos in StandAloneServerJohn Terpstra2003-05-102-18/+10
| | | | | | | | | | Remove admonition in ServerType - Until someone gives me a replacement for it I consider it a non-issue.
* | Reverse latest module_dummy patch from metze and me.Jelmer Vernooij2003-05-101-53/+0
| |
* | Reverse previous patch from Stefan and me after comments by Andrew BartlettJelmer Vernooij2003-05-1034-84/+2
| |
* | Patch from metze and me that adds dummy smb_register_*() functions soJelmer Vernooij2003-05-1035-2/+137
| | | | | | | | | | that is now possible to, for example, load a module which contains an auth method into a binary without the auth/ subsystem built in.
* | Typos and fixes resulting from VL feedback.John Terpstra2003-05-103-42/+120
| |
* | Fix from Tom.Lackemann@falconstor.com to correctly set the flags basedJeremy Allison2003-05-101-1/+9
| | | | | | | | | | on the security entries sent. Jeremy.
* | Optimisation. We don't need to do 2 strlen's when we're setting the statJeremy Allison2003-05-101-9/+0
| | | | | | | | | | struct in the correct place. Jeremy.
* | Fix for possible segfault in readline handler. Found by vitalyb@mail333.com.Jeremy Allison2003-05-101-1/+2
| | | | | | | | Jeremy.
* | Fix typo.John Terpstra2003-05-101-1/+1
| |
* | syncing README to go along with scriptsGerald Carter2003-05-091-24/+7
| |
* | syncing import/export smbpasswd file scripts from 2.2Gerald Carter2003-05-094-231/+114
| |
* | removing total print jobs since it is not used anymoreGerald Carter2003-05-091-2/+0
| |
* | Makefile changes to allow new NTLMv2 patch to work.Andrew Bartlett2003-05-091-10/+7
| |
* | Cleanups. My NTLMv2 changes also changed the preference from using an implicitAndrew Bartlett2003-05-091-42/+42
| | | | | | | | | | | | | | | | | | | | | | structure-memcpy for DATA_BLOB parameters to using a pointer to that DATA_BLOB. auth_sam calls some of these functions, so I've cleaned it all up to use this format now. Also clean up some debug statements to make them easier to read. Andrew Bartlett
* | Finally get NTLMv2 working on the client!Andrew Bartlett2003-05-094-119/+131
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With big thanks to tpot for the ethereal disector, and for the base code behind this, we now fully support NTLMv2 as a client. In particular, we support it with direct domain logons (tested with ntlm_auth --diagnostics), with 'old style' session setups, and with NTLMSSP. In fact, for NTLMSSP we recycle one of the parts of the server's reply directly... (we might need to parse for unicode issues later). In particular, a Win2k domain controller now supplies us with a session key for this password, which means that doman joins, and non-spnego SMB signing are now supported with NTLMv2! Andrew Bartlett
* | Fix bug #4 for net rap. Allow more than 50 chars for long form listings of ↵Jim McDonough2003-05-091-2/+2
| | | | | | | | users and groups.
* | Fix comment - we now have 5 types of error...Andrew Bartlett2003-05-091-1/+1
| |
* | Make sure we always have some client data, not just the hash. An NTLMv2 orAndrew Bartlett2003-05-091-2/+3
| | | | | | | | | | | | LMv2 response less than 24 bytes is just silly. Andrew Bartlett
* | Elsewhere, we use a #define for this environment variable name, so do theAndrew Bartlett2003-05-091-2/+2
| | | | | | | | | | | | same here. Andrew Bartlett
* | When checking if a SID is in a domain, make sure that indeed the user RID isAndrew Bartlett2003-05-091-0/+3
| | | | | | | | | | | | one element longer than the domain sid. Andrew Bartlett
* | Sync up to head ...Richard Sharpe2003-05-091-34/+100
| |
* | More edits, hackety hack.John Terpstra2003-05-092-32/+298
| |
* | Sync to the changes in head ...Richard Sharpe2003-05-091-1/+1
| |
* | Added some more diagnostic tests to check out a theory that having either hashTim Potter2003-05-091-12/+174
| | | | | | | | | | | | | | | | | | | | | | | | - auth with ntlmv2 and lmv2 but deliberately break the ntlmv2 hash - auth with ntlmv2 and lmv2 but deliberately break the lmv2 hash - auth with ntlm and lm but deliberately break the ntlm hash - auth with ntlm and lm but deliberately break the lm hash My theory is that the NTLM or NTLMv2 field must be correct and if it is, it doesn't matter what the value of the LM or LMv2 field is. Fixed cosmetic test name display bug.
* | Fix up a bunch of problems in editreg.cRichard Sharpe2003-05-091-16/+16
| | | | | | | | Now the build farm will no doubt find more.
* | Fix nasty bug pointed out by samba-technical poster. If name is mangledJeremy Allison2003-05-091-1/+12
| | | | | | | | | | | | | | then we weren't always correctly detecting that it had a valid stat struct and so might now return a 'file existed'. Finally realized this when installing the W2K resource kit as a test case. Jeremy.
* | fix bug #47; revert registration of workgroup<1b> to 2.2 behaviorGerald Carter2003-05-081-1/+1
| |
* | fixed bug #75; add check for non-zero destlenGerald Carter2003-05-081-1/+1
| |
* | Hopefully re-enable building heimdal. It needs -lresolv included in LIBSJim McDonough2003-05-081-0/+1
| | | | | | | | to link during configure checks.
* | Revert a patch that somehow slipped in...Volker Lendecke2003-05-081-2/+2
| | | | | | | | Volker
* | This puts real netlogon connection caching to winbind. This becomesVolker Lendecke2003-05-0810-123/+186
| | | | | | | | | | | | | | | | | | important once we start doing schannel, as there would be a lot more roundtrips for the second PIPE open and bind. With this patch logging in to a member server is a matter of two (three if you count the ack...) packets between us and the DC. Volker
* | Another set of updates to the docs.John Terpstra2003-05-086-303/+697
| |
* | This puts back wins.dat into nmbd for easy editing. It leaves most ofVolker Lendecke2003-05-081-194/+222
| | | | | | | | | | | | | | | | the other infrastructure with name owners etc in place. If anybody is really going to tackle winsrepld, it will probably not be hard to put the additional info back. Volker
* | Another attempt at undoing my bogus patch 1.55.2.19Tim Potter2003-05-081-0/+2
| |
* | Always initialise this - it helps callers who use this in a loop...Andrew Bartlett2003-05-071-0/+2
| | | | | | | | Andrew Bartlett
* | Fix the spinning bug for 'net rpc user' as well - there are more errors inAndrew Bartlett2003-05-071-4/+4
| | | | | | | | | | | | | | | | this world than 'status more entires'... Also move all the cases to 'NT_STATUS_EQUAL()' to test it. Andrew Bartlett
* | SMB_QUERY_FILE_ALT_NAME_INFO and SMB_FILE_ALTERNATE_NAME_INFORMATIONJeremy Allison2003-05-071-9/+1
| | | | | | | | | | are identical - noticed by "Dr. Tilo Levante" <tilo@levante.de>. Jeremy.
* | Fix irritating typo - non arg functions should be fn(void).Jeremy Allison2003-05-071-1/+1
| | | | | | | | Jeremy.
* | %f -> %p (reported by Kurt Pfeifle <kpfeifle@danka.de>Jelmer Vernooij2003-05-071-1/+1
| |
* | Make fchown, fchmod conditional for systems that don't have them.Jeremy Allison2003-05-072-5/+20
| | | | | | | | Jeremy.
* | SMB Signing with NTLMv2 works!Andrew Bartlett2003-05-071-11/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | (well, under certain conditions :-) There is no length limit on the size of the authentication response added into the MD5 hash. (We had previously limited this to lengths like 40, 44 or 64 in attempts to make sense of what the SNIA spec tells us). Instead, the entire authentication response is added in. Currently, this only works on a Win2k domain members with a Samba PDC, becouse our NTLMv2 code currently fails against an Win2k PDC. However, this splits the problem in half - particularly as the NTLMv2 format is known, and even has an ethereal disector! (thanks tpot). Andrew Bartlett
* | Ignore generated fileAlexander Bokovoy2003-05-071-1/+1
| |
* | Set our 'global sam name' in one place. For domain controllers, this isAndrew Bartlett2003-05-075-35/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | lp_workgroup(), for all other server this is global_myname(). This is the name of the domain for accounts on *this* system, and getting this wrong caused interesting bugs with 'take ownership' on member servers and standalone servers at Snap. (They lookup the username that they got, then convert that to a SID - but becouse the domain out of the smbpasswd entry was wrong, we would fail the lookup). Andrew Bartlett
* | Fix missing closing para marker.John Terpstra2003-05-071-0/+1
| |
* | More updates. Now working on BDC Documentation.John Terpstra2003-05-072-150/+283
| |