summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* updated server_role for ADSAndrew Tridgell2001-11-261-0/+1
|
* prevent proto from picking up this as a defintion for 'main()' becoue it ↵Andrew Bartlett2001-11-261-1/+1
| | | | conflicts with nmbd's definition.
* More compiler warnings fixed. Some minor reformatting.Tim Potter2001-11-262-94/+143
|
* we can safely give NO_SUCH_USER if the ticket decodes but the localAndrew Tridgell2001-11-261-1/+1
| | | | account doesn't exist
* Another merge from appliance-head: in [ug]id_to_sid don't call theTim Potter2001-11-263-71/+97
| | | | | winbind function if the id is obviously going to be local. Cleanup of winbind [ug]id parameter handling.
* challange -> challengeTim Potter2001-11-2612-71/+72
|
* Merge from appliance-head: when creating a default security descriptorTim Potter2001-11-261-1/+11
| | | | | | | | for a printer, save it in ntprinters.tdb instead of recreating it every time it is required. This can save at least one winbind lookup per secdesc creation. Opening a port monitor and viewing the security tab in the properties dialog required the security descriptor to be returned 25 times!
* Got medieval on another pointless extern. Removed extern struct ipzeroTim Potter2001-11-2630-86/+70
| | | | | | | and replaced with two functions: void zero_ip(struct in_adder *ip); BOOL is_zero_ip(struct in_addr ip);
* Fix up the build farm again.Andrew Bartlett2001-11-265-3/+54
| | | | | | This should get us 'green' for once... Andrew Bartlett
* dyn_CONFIGFILE fixups.Tim Potter2001-11-261-4/+3
|
* Fixed compiler warnings and dyn_CONFIGFILE related breakage.Tim Potter2001-11-261-10/+9
|
* And delete domain_client_validate.c...Andrew Bartlett2001-11-261-432/+0
| | | | Andrew Bartlett
* This compleats the of the authenticaion subystem into the new 'auth'Andrew Bartlett2001-11-2612-2722/+415
| | | | | | | | | | | | subdirectory. (The insertion of these files was done with some CVS backend magic, hence the lack of a commit message). This also moves libsmb/domain_client_validate.c back into auth_domain.c, becouse we no longer share it with winbind. Andrew Bartlett
* Removed bogus SAFE_FREE() call of talloced return data fromTim Potter2001-11-263-19/+19
| | | | winbindd_lookup_usergroups()
* Ignore *.po files.Tim Potter2001-11-261-0/+1
|
* Fixed some indentation.Tim Potter2001-11-261-2/+2
|
* use DEBUG() not d_printf() in librariesAndrew Tridgell2001-11-261-2/+2
|
* fixed spnego, non-kerberos negprotAndrew Tridgell2001-11-261-2/+2
|
* Allow lookup of users with spaces in their name.Tim Potter2001-11-261-5/+3
|
* Fixed compiler warning.Tim Potter2001-11-251-1/+1
| | | | | | | | Why do people keep adding stuff to includes.h (OK I am guilty of this too)? It's getting really huge and full of random junk. )-: I've noticed TNG have started to split stuff up in to individual header files included as needed.
* added 'security=ADS'Andrew Tridgell2001-11-253-1/+9
|
* Minor typosVolker Lendecke2001-11-251-2/+2
|
* Don't close tdb twice.Volker Lendecke2001-11-251-1/+0
|
* portability fixesAndrew Tridgell2001-11-251-3/+6
|
* fixed typoAndrew Tridgell2001-11-251-1/+1
|
* add popt build dependencyAndrew Tridgell2001-11-251-1/+1
|
* move popt out of proto objsAndrew Tridgell2001-11-251-2/+2
|
* added HAVE_LDAP_H checkAndrew Tridgell2001-11-251-2/+2
|
* check for liblber separatelyAndrew Tridgell2001-11-253-74/+116
|
* #ifdefed DMF fix so not compiled by default. We need to look at this...Jeremy Allison2001-11-251-22/+39
| | | | Jeremy.
* Use "password server" for searching for BDC's also as Tim suggested.Jeremy Allison2001-11-251-6/+8
| | | | Jeremy.
* Add the PDC end of the smbtorture test for creating an NT_STATUS -> DOS errorAndrew Bartlett2001-11-254-0/+72
| | | | | | | | | | | | | | | | map. This little authentication module is #ifdef DEVELOPER, becouse it really is of no use execept as a development tool invoke by setting: auth methods = guest sam name_to_ntstatus in the smb.conf file (the SAM and guest elements are required for the member server to authenticate itself). Andrew Bartlett
* oops, I forgot to include the header fileAndrew Bartlett2001-11-251-0/+2
|
* Add a new torture test to extract a NT->DOS error map from an NT member of aAndrew Bartlett2001-11-255-5/+148
| | | | | | | | | samba domain. The PDC must be running a special authenticaion module that spits out NT errors based on username. Andrew Bartlett
* Unless the error is exactly NT_STATUS_OK, we might not have a server info, soAndrew Bartlett2001-11-251-1/+1
| | | | we need to bail here.
* I think this is a fix for the "out of space" errors with oplocks=no.Jeremy Allison2001-11-251-49/+58
| | | | Jeremy.
* Fix ./configure --enable-developer warnings (shadow of global)Andrew Bartlett2001-11-251-2/+2
|
* better helpAndrew Tridgell2001-11-251-1/+7
|
* use generate_random_str()Andrew Tridgell2001-11-251-47/+4
|
* added "net ads user" and "net ads group" commandsAndrew Tridgell2001-11-252-29/+80
|
* added "net ads status" commandAndrew Tridgell2001-11-252-29/+115
|
* made a "net ads" command, currently with "net ads join" and "net ads leave"Andrew Tridgell2001-11-253-5/+192
|
* stop popt from doing its own intl stuffAndrew Tridgell2001-11-251-16/+0
|
* better auto-selection of realm and ldap serverAndrew Tridgell2001-11-251-3/+4
|
* added "net join" commandAndrew Tridgell2001-11-2419-251/+902
| | | | this completes the first stage of the smbd ADS support
* removed unused functionAndrew Tridgell2001-11-241-18/+0
|
* rewrote net.cAndrew Tridgell2001-11-241-1260/+1071
| | | | | | | | | | The rewrite fixes a number of things: - much better command line parsing - fixed usage of static and const - better finding of hosts - clean internal separation of sub-functions - expandable design
* And add the winbind module I missed in the last run.Andrew Bartlett2001-11-242-0/+222
| | | | | | (large change to modularise the auth subsystem) Andrew Bartlett
* This is another rather major change to the samba authenticaionAndrew Bartlett2001-11-2433-743/+1842
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | subystem. The particular aim is to modularized the interface - so that we can have arbitrary password back-ends. This code adds one such back-end, a 'winbind' module to authenticate against the winbind_auth_crap functionality. While fully-functional this code is mainly useful as a demonstration, because we don't get back the info3 as we would for direct ntdomain authentication. This commit introduced the new 'auth methods' parameter, in the spirit of the 'auth order' discussed on the lists. It is renamed because not all the methods may be consulted, even if previous methods fail - they may not have a suitable challenge for example. Also, we have a 'local' authentication method, for old-style 'unix if plaintext, sam if encrypted' authentication and a 'guest' module to handle guest logins in a single place. While this current design is not ideal, I feel that it does provide a better infrastructure than the current design, and can be built upon. The following parameters have changed: - use rhosts = This has been replaced by the 'rhosts' authentication method, and can be specified like 'auth methods = guest rhosts' - hosts equiv = This needs both this parameter and an 'auth methods' entry to be effective. (auth methods = guest hostsequiv ....) - plaintext to smbpasswd = This is replaced by specifying 'sam' rather than 'local' in the auth methods. The security = parameter is unchanged, and now provides defaults for the 'auth methods' parameter. The available auth methods are: guest rhosts hostsequiv sam (passdb direct hash access) unix (PAM, crypt() etc) local (the combination of the above, based on encryption) smbserver (old security=server) ntdomain (old security=domain) winbind (use winbind to cache DC connections) Assistance in testing, or the production of new and interesting authentication modules is always appreciated. Andrew Bartlett
* Kill off that crazy copy_sam_passwd(). You simply can't do that if theAndrew Bartlett2001-11-242-36/+11
| | | | | | | | | | structre contains pointers (well not if you intend of free those pointers at some stage) There is no reason (given the new passdb interface) that you can't modify a SAM_ACCOUNT in any case. Andrew Bartlett
generated by cgit (git 2.34.1) at 2025-09-27 19:46:25 +0000