summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* JHT ===> Added Sun Solaris binary package building spec files contributedJohn Terpstra1997-10-045-0/+115
| | | | by Tim Towers <tim@lorien.demon.co.uk>. Note: Not yet checked.
* nmblookup.c:Christopher R. Hertel1997-10-042-309/+558
| | | | | | | | | | | | | | | | | I've added a -r option. When specified, nmblookup will attempt to bind to port 137. In order for this to work, the user must be root and the port must be available (i.e., nmbd not running). If either condition is not met, nmblookup will default to normal behavior; it will try to bind to a free port above 7999. I also removed an artifact. The -p <port> option was being accepted but falling through to the default, which was the usage message. I removed "p:" from the getopt() list. params.c: Rewritten. The scanning is much more linear, and I found and fixed a few bugs. I don't like the way that the scratch buffer is handled, but I believe that it is an improvement over the previous version. Chris -)-----
* Race condition with multiple oplock break requests happensJeremy Allison1997-10-041-3/+2
| | | | | | | more often than you might think (reproduced here with 4 clients and netbench :-). Raising debug log level for report from 1 to 3. Jeremy (jallison@whistle.com)
* Making it harder for share_mode_entries to be left withJeremy Allison1997-10-031-5/+2
| | | | | non-zero op_type fields. Paranoia code really. Jeremy (jallison@whistle.com)
* locking.c: Fixed incorrect parameter count in debug statements. May explainJeremy Allison1997-10-035-70/+74
| | | | | | | | | | | | | | | | | | solaris crashes. reply.c: Added NT specific error code. Put oplock break code in correct place in reply_lockingX. server.c: Removed unneeded error mapping stuff. Fixed race condition in oplock code. trans2.c: Added NT specific error code. util.c: Added paranoia check in interpret_addr. Some core dumps reported here. Upped fcntl debug levels. Andrew. Please check the NT specific error code handling (search for the string "/* Ugly - NT specific hack - but needed (JRA) */", this makes NT and 95 clients behave correctly here - please check your Visual Basic apps with this code. Jeremy (jallison@whistle.com).
* add "static" to a couple of functions that are only used locally.Andrew Tridgell1997-10-032-10/+6
| | | | | set granted_oplock=False at the start of open_file(). This is paranoia.
* proto.h: Updated.Jeremy Allison1997-10-035-37/+57
| | | | | | | | | | server.c: Updated after netbench observation. Oplocks must be broken *before* share modes are checked, not after. Netbench seems to be working now. smb.h: Added offsets for oplock break time fields. trans2.c: Upped debug messages. util.c: Upped debug messages. Jeremy (jallison@whistle.com)
* change a debug level in reply.cAndrew Tridgell1997-10-022-2/+2
| | | | | | | | | | | | change from ERRbaddirectory to ERRbadpath for ENOTDIR errors. This reverts to the old Samba code. I've done quite a bit of testing against NT4 and have yet to get it to produce the ERRbaddirectory error code. Producing ERRbaddirectory made a visual basic application that was sent to me not run. This might explain some of the "it doesn't work any more" complaints we've got about 1.9.17. Jeremy, can you remember how you got NT to produce ERRbaddirectory? There might be some specific circumstances we need to cover.
* Added debug message for oplock_break().Jeremy Allison1997-10-021-1/+7
| | | | Jeremy (jallison@whistle.com)
* change the semantics of hosts allow/hosts deny so that a globalAndrew Tridgell1997-10-024-8/+31
| | | | | | | | | | | | | | | | | | | | | | | setting applies to all shares regardless of any settings on other shares. This allows us to immediately drop a connection if it does not come from a allowed host, without even parsing the first SMB packet. The next time we get a nasty security hole we can offer people the option of just setting their hosts allow line. If we drop a connection in this way we generate a "Not listening for calling name" response and then exit. add a per share "oplocks" option in smb.conf. I think its important to be able to disable oplocks on a per-share basis as there are occasions then they are definately not wanted, for example when sharing data between a windows box and a unix application. This also allows us to tell people "try disabling oplocks" when diagnosing problems. fix a bug in process_smb(). It was taking the length of the packet from outbuf, not inbuf (this bug was introduced with the oplocks code). Jeremy, I assume this wasn't deliberate?
* Modified some debug messages, moved from 5 -> 8.Jeremy Allison1997-10-022-15/+15
| | | | Jeremy (jallison@whistle.com)
* Fixed problem with oplock_type being set with no port.Jeremy Allison1997-10-021-2/+10
| | | | Jeremy (jallison@whistle.com)
* OPLOCK CHECK-IN - oplocks are now *OPERATIONAL* !!!!Jeremy Allison1997-10-017-53/+516
| | | | | | | | | | | | | | | Yipeee. At least as far as I can check in a short time :-). local.h: Changed OPLOCK_BREAK_TIMEOUT to 30 seconds. locking.c: Big changes to delete oplocks on a share mode entry. proto.h: updated. reply.c: Added oplock break code in lockingX reply & readbraw reply. server.c: Add batch oplock code. Force server shutdown if client fails to respond to oplock break. smb.h: Fix silly slow share mode oplock define bug. status.c: Add oplock status info. Jeremy (jallison@whistle.com)
* Changed consultant list.Jeremy Allison1997-09-301-22/+34
| | | | Jeremy (jallison@whistle.com)
* dir.c: more pstrcpys.Jeremy Allison1997-09-308-145/+637
| | | | | | | | | | | local.h: Add OPLOCK_BREAK_TIMEOUT. password.c: Fix for paranoia password server security bug. proto.h: Updated. reply.c: Oplock changes. server.c: Massive oplock changes - nearly there.... smb.h: oplock definitions. util.c: Add local message processing queues for oplocks. Jeremy (jallison@whistle.com)
* Fixed you're -> your text that some pedant complained about :-).Jeremy Allison1997-09-261-1/+1
| | | | Jeremy (jallison@whistle.com).
* Syncing up current oplock work in progress. #ifdef'ed outJeremy Allison1997-09-268-167/+291
| | | | | so should have no effect on other work. Jeremy (jallison@whistle.com)
* Correctly rolled back interface.c (I was working on an olderJeremy Allison1997-09-261-210/+186
| | | | | revision). This will now be the current revision. Jeremy (jallison@whistle.com)
* Adding Andrews buffer overflow fixes into the main branch.Jeremy Allison1997-09-2629-239/+340
| | | | Jeremy (jallison@whistle.com)
* add error string reporting to clitarAndrew Tridgell1997-09-261-3/+4
|
* Added missing slow share mode offset defines. SomehowJeremy Allison1997-09-251-0/+34
| | | | | they got lost. Jeremy (jallison@whistle.com).
* Makefile: Removed earlier errors.Jeremy Allison1997-09-255-188/+230
| | | | | | | | | | | includes.h: Added INADDR_LOOPBACK define. locking.c: More code to support oplocks. proto.h: Updated. server.c: More code to support oplocks. Moved processing of an SMB out of process() into a separate function so it is easier to call from an oplock break. smb.h: Added oplock fields. Jeremy (jallison@whistle.com)
* Checkin to sync up oplock development code so that NTJeremy Allison1997-09-236-1189/+313
| | | | | | | | | | | | | domain development code won't diverge. Makefile: Fixed make proto (again). Added GLIBC2 fixes for Linux. includes.h: Added GLIBC2 fixes for Linux. proto.h: Much tidier. quotas.c: OSF/1 quota fix. reply.c: Fix from Ray Frush <frush@engr.colostate.edu> for zero NT timestamps. server.c util.c: First oplock checkin - nowhere near finished so bracketed with #ifdef USE_OPLOCKS. Done to make sync with NT domain code easier. Jeremy (jallison@whistle.com)
* added code from Philip A Prindeville <philipp@enteka.com> which expandsLuke Leighton1997-09-232-186/+213
| | | | | | | | the interfaces option to this: "interfaces = le0 le1" or "interfaces = all". it uses SIOCGIFxxxx ioctl calls.
* smbclient.1: Added documentation of the username%password environment code.Jeremy Allison1997-09-192-0/+29
| | | | | smb.conf.5: Added 'username level' docs. Jeremy (jallison@whistle.com)
* Makefile: Changed proto: target to not include c files not used currently.Jeremy Allison1997-09-196-56/+1198
| | | | | | | | | | | Caused proto.h to be from a sorted list of C files. arcfour.h: Added prototypes. client.c: Added username%password in environment patch from John Blair <jdblair@frodo.tucc.uab.edu> loadparm.c: Added username manipulation code from Peter McCool [SMTP:peter@qimr.edu.au] username.c: Added username manipulation code from Peter McCool [SMTP:peter@qimr.edu.au] mkproto.awk: Added arc4_key type. proto.h: Updated & sorted. Jeremy (jallison@whistle.com)
* Another South American consultant.Jeremy Allison1997-09-191-1/+20
|
* Added arcfour code needed for SMB password changing.Jeremy Allison1997-09-182-0/+126
| | | | Jeremy (jallison@whistle.com)
* added timestamp to "Denied connection" message.Luke Leighton1997-09-181-2/+2
|
* added some debug stuffAndrew Tridgell1997-09-181-51/+64
|
* John asked the other day about using the tar feature in smbclient toAndrew Tridgell1997-09-181-6/+22
| | | | | | | | | | | | handle file paths longer than 100 characters (the limit of the normal tar format). This patch adds support for producing GNU tar files (which have no real limit on the path length) in smbclient. Note that I have only added support for producing GNU tar files, I haven't added support for accepting them when restoring. I thought I'd leave that up to John :-)
* JHT ===> More hacks!John Terpstra1997-09-171-5/+6
|
* JHT ===> Changed behaviour of logon script processing so that all macrosJohn Terpstra1997-09-171-1/+9
| | | | | | | | can be used in the logon script parameter definition in the smb.conf Globals section. This fixes a problem reported by Jacco de Leeuw where OS/2 does not see the %u variable. Jacco suggested using %U but we really do want the user for the netlogon share session. If this does not do the trick - well we eat our hat! Yeh!
* Added documentation for the 'delete veto files' parameter.Jeremy Allison1997-09-171-2/+32
| | | | Jeremy (jallison@whistle.com)
* Added 'delete veto files' paremeter. Ugly - but the onlyJeremy Allison1997-09-173-4/+71
| | | | | | | | | way to allow Samba client users to delete directories containing Mac metafile information (.AppleDouble directories). Needed for clean integration with netatalk. Jeremy (jallison@whistle.com)
* Fixing assumtions that malloced memory is zero filled - makingJeremy Allison1997-09-163-1/+7
| | | | | sure it is. Jeremy (jallison@whistle.com)
* change the encryption instructions to reflect the fact that the codeAndrew Tridgell1997-09-161-32/+6
| | | | is now built in
* add a castAndrew Tridgell1997-09-161-1/+1
|
* - change generate_challenge() to use md4 instead of desAndrew Tridgell1997-09-164-45/+65
| | | | | | | | | | | | | | | | | | | | | | | - move routines about a bit between smbencrypt.c and smbdes.c. Ensure that there is no entry point for normal DES operation - add the following comment: This code is NOT a complete DES implementation. It implements only the minimum necessary for SMB authentication, as used by all SMB products (including every copy of Microsoft Windows95 ever sold) In particular, it can only do a unchained forward DES pass. This means it is not possible to use this code for encryption/decryption of data, instead it is only useful as a "hash" algorithm. There is no entry point into this code that allows normal DES operation. I believe this means that this code does not come under ITAR regulations but this is NOT a legal opinion. If you are concerned about the applicability of ITAR regulations to this code then you should confirm it for yourself (and maybe let me know if you come up with a different answer to the one above)
* bug fix in the new des code.Andrew Tridgell1997-09-161-21/+13
| | | | | I had one of the sbox[] constants wrong, which interestingly gave a 20% chance of the whole algorithm failing.
* 2 more consultants.Jeremy Allison1997-09-151-2/+40
|
* unbecome_domain_master and unbecome_logon_master were announcingLuke Leighton1997-09-151-3/+0
| | | | as "dead". removed this.
* - if the user already exists then ignore the -add commandAndrew Tridgell1997-09-151-10/+19
| | | | | | | | - change the way the smbpasswd file is auto-created if it doesn't exist. It didn't work under IRIX for some unknown reason The smbpasswd.c code is really a bit of a mess. We should probably rewrite it sometime.
* - change a lot of occurances of errno to use strerror(errno). We can'tAndrew Tridgell1997-09-153-25/+29
| | | | | | | assume all our users are programmers :-) - automatically create the smbpasswd file if it doesn't exist when running smbpasswd.
* rewrote md4.c from scratch. This implementation should be portable andAndrew Tridgell1997-09-153-298/+166
| | | | doesn't have any worries about RSA copyright.
* no longer neededAndrew Tridgell1997-09-151-58/+0
|
* This commit does 3 main things:Andrew Tridgell1997-09-1420-235/+96
| | | | | | | | | | | | | | | | | | | | | | | 1) put the encryption code in by default, with no #ifdef. It is still disabled by default so you need to add "encrypt passwords = yes" in smb.conf but at least all binaries will have it. 2) cleanup the kanji code so it compiles with no warnings 3) get rid of lots of uses of ugly non-portable C code. The main offender being things like "register" but also remove uses of the "const" keyword as there are compilers out there that don't support it and even those that do often complain about its usage. Users don't like warnings :-( There is still some work to do. We need to replace the md4 code with our own implementation. The current code (from rfc1186) is PD but is not very portable. The new RFC (rfc1320) is more portable but adds copyright restrictions. I'll do a from-scratch MD4 soon. We also need to test that what I've implemented is portable. It should be, but I'm too tired right now to test it on anything other than intel linux.
* This is a written from scratch DES implementation. I couldn't find aAndrew Tridgell1997-09-141-0/+290
| | | | | | | | | | | | | | | GPLd implementation so I decided to write one. This version only does DES ecb encryption and isn't very general, so it may in fact be exempt from ITAR regulations. ITAR regulations do not prohibit the distribution of code that can be used for authentication purposes only. This code has no decrypt function so it would be useless for a normal encryption application and thus may be ITAR exempt. It is also very slow, but we don't need it to be fast. It is a literal implementation from the standard and treats each bit as one byte to make the code easy to write.
* Added fix that means if connecting user sends guest accountJeremy Allison1997-09-121-1/+8
| | | | | | | with no password they are seen as guest. Previous patch broke this. Jeremy (jallison@whistle.com)
* charcnv.c client.c clitar.c kanji.c kanji.h loadparm.cJeremy Allison1997-09-1113-389/+486
| | | | | | | | | | | | | | mangle.c smb.h util.c: Big merge to allow KANJI support to be in the main binary without explicitly compiling with it. locking.c: Fix for smbstatus not being able to read files. namepacket.c: Removed unneccesary debug statement. trans2.c: Added Luke's proposed fix (ifdefed out until further testing). nmblookup.c: Fixed bug where query fails and status is done on bogus IP. Jeremy (jallison@whistle.com)