summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Fixes for the %U and %G problems people have reported.Jeremy Allison1998-05-069-25/+38
| | | | | | | | | | | | | | | | | | Essentially, multiple session_setup_and_X's may be done to an smbd. As there is only one global variable containing the requested connection name (sessionsetup_user), then any subsequent sessionsetups overwrite this name (causing %U and %G to get the wrong name). This is particularly common when an NT client does a null session setup to get a browse list after the user has connected, but before a share has been mounted. These changes store the requested_name in the vuid structure (so this only really works for user level and above security) and copies this name back into the global variable before the standard_sub call. Jeremy.
* genrand.c: SGI compile warning fix.Jeremy Allison1998-05-0511-26/+28
| | | | | | | | | | | | | | ipc.c: Fix for duplicate printer names being long. loadparm.c: Set bNetWkstaUserLogon to false by default - new code in password.c protects us. nmbd_logonnames.c: nmbd_namequery.c: nmbd_namerelease.c: Debug messages fix. password.c: SGI compile warning fix, fix for tcon() with bNetWkstaUserLogon call. reply.c: SGI compile warning fix. server.c Debug messages fix. smbpass.c: Fix for incorrect pointer. Jeremy.
* added definitions for "password chat debug" and "unix password sync"Herb Lewis1998-05-051-1/+40
| | | | from the 1.9.18 tree
* Rolling clitar.c back to the previous rev 1.22 as the current oneJeremy Allison1998-05-051-382/+25
| | | | | needs fixing (sorry). Jeremy.
* Added bug fixes to clitar to ensure proper longfile name restoresRichard Sharpe1998-05-051-25/+382
| | | | | | occur. Also getting ready for setting directory dates correctly
* patches from jean francois: couple of minor bugsLuke Leighton1998-05-052-3/+2
|
* here is a first cut at a "fixed up" help fileHerb Lewis1998-05-011-3336/+2189
|
* mkman - add argument for making html versions of man pagesHerb Lewis1998-04-302-17/+27
| | | | idb.pl - minor fixups for sorting of output file.
* Added patch from Bruce Tenison <btenison@dibbs.net> to allow encryptedJeremy Allison1998-04-309-12/+56
| | | | | | | | passwords to be stored over time, allowing a smbpasswd file migration. Adds new parameter "update encrypted". Will also add to 1.9.18 branch. Docs update to follow. Jeremy.
* Makefile: Added files to smbpasswd.c.Jeremy Allison1998-04-297-47/+343
| | | | | | | | | | loadparm.c: Patch from tim@quiknet.com for static string problems. server.c: Setup global_myname. smbpass.c: Fix up locking. Add machine_password_delete() call. smbpasswd.c: Added provisional code to add to a domain. lib/rpc/client/cli_login.c: Fixed incorrect cred_hash3 call when setting machine password. lib/rpc/server/srv_netlog.c: Fixed incorrect cred_hash3 call when setting machine password. Jeremy.
* clientgen.c: Fixed null session setup bug.Jeremy Allison1998-04-298-33/+66
| | | | | | | | | | | password.c: Stopped cli_nt_logout call (we don't have it correct yet). Added Luke object-orientation fix :-). smb.h: Added clnt_name_slash to cli_state. lib/rpc/client/cli_login.c: Changed global_myname to clnt_name_slash where needed. lib/rpc/client/cli_netlogon.c: Fixed debug messages, don't check creds on error. lib/rpc/client/cli_pipe.c: Fixed debug messages, Added Luke object-orientation fix. lib/rpc/parse/parse_misc.c: Fixed STRING2 linearization bug that was adding 1. Jeremy.
* add clean optionHerb Lewis1998-04-291-0/+8
|
* password.c:Luke Leighton1998-04-292-10/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | added become_root / unbecome_root around the get machine account password. smbpass.c: cleaning up code. - turning if (BOOL_expr == False) into if (BOOL_expr) what if you test if (BOOL_expr == True) and someone defines True to be -1 on one system and 1 on another? or if you get inconsistent return results between developers - removed if ((FILE*) == 0) and made this if ((FILE*) == NULL) - cannot assume that NULL is zero integer. plus there are typecast issues to deal with - removed return (ret == 0) ? True : False and made this return ret == 0 rely on the compiler to return correct BOOL value: not all developers will return True or False #defines: stick with BOOL test (non-zero). - removed if (ret == False) replaced with if (!ret) - bug where instead of if (sizeof(pstring)-len-len-6 < 0) it had a boolean test if (pstring-len-len-6). - removed "." after debugging of filenames: the "." - a fullstop - looked like it was part of the filename, making things difficult to sort out. still to be resolved: the global_myname isn't set up, such that the machine account password file is named "TEST3..mac".
* This is the checkin that adds the security=domain functionality.Jeremy Allison1998-04-2914-172/+234
| | | | | | | | | | | WARNING - so far this has only been tested against a Samba PDC (still waiting for IS to add me the machine accounts :-). Still missing is the code in smbpasswd that will add a machine account password and change it on the domain controller, but this is not hard, and I will check it in soon. Jeremy.
* fix problem with output file not being properly sortedHerb Lewis1998-04-281-6/+3
|
* Fixed checked in code that didn't compile.Jeremy Allison1998-04-281-9/+5
| | | | Jeremy.
* added NetShareEnum from Bartlomej Czardybon <czar@silesia.pik-net.pl>Luke Leighton1998-04-281-0/+59
|
* First version that compiles. Much more to do.....Jeremy Allison1998-04-283-228/+178
| | | | Jeremy.
* Added SuSE packaging files.Volker Lendecke1998-04-272-0/+354
| | | | Volker
* This looks like a big change but really isn't.Jeremy Allison1998-04-2536-439/+341
| | | | | | | | | | | It is changing the global variables "myname" and "myworkgroup" to "global_myname" and "global_myworkgroup" respectively. This is to make it very explicit when we are messing with a global (don't ask - it makes the domain client code much clearer :-). Jeremy.
* ABOUT time. dce/rpc long packet format now works, server-side.Luke Leighton1998-04-243-5/+92
| | | | | | turns out that [it can be deduced that] microsoft ignores the SMBreadX offset, and goes by the SMBreadX length only. this makes for a lot simpler code, in both client and server.
* cli_pipe.c: Corrected cli_api_pipe() calls.Jeremy Allison1998-04-241-30/+41
| | | | Jeremy.
* Makefile: Added nterr.c into the mix.Jeremy Allison1998-04-236-19/+78
| | | | | | | | | clientgen.c: Added nt_error as an entry in the struct client_state. password.c: Open the netlogon pipe. smb.h: Added nt_error as an entry in the struct client_state. lib/rpc/parse/parse_net.c: Added comments on net logon. lib/rpc/server/srv_netlog.c: Added comments on net logon. Jeremy.
* These don't compile yet - but they are the core code in whatJeremy Allison1998-04-233-1086/+1004
| | | | | will be DOMAIN_CLIENT called code. Jeremy.
* We will need this new nterr.c for the DOMAIN_CLIENT code.Jeremy Allison1998-04-231-3/+30
| | | | Jeremy.
* clientgen.c: Added rap error codes to cli_error, moved from smbpasswd.cJeremy Allison1998-04-234-124/+233
| | | | | | | password.c: Changed global cli -> pw_cli, removed strtok (bad strtok, bad :-) use in security=server, started to extend security=domain code. smbpasswd.c: Removed rap error code functions. Jeremy.
* genrand.c: Changed SMB_PASSWD_FILE to lp_smb_passwd_file().Jeremy Allison1998-04-235-90/+359
| | | | | | | | | | password.c: Started the initial code for domain_client_validate(). All bracketed with #ifdef DOMAIN_CLIENT for now. reply.c: Call to domain_client_validate(). All bracketed with #ifdef DOMAIN_CLIENT for now. smbpass.c: New code to get/set machine passwords. Tidied up nesting of lock calls. Jeremy.
* Fixed bug found by Gerald Carter <cartegw@Eng.Auburn.EDU> whereJeremy Allison1998-04-223-4/+0
| | | | | global myname was being overwritten incorrectly. Jeremy.
* genrand.c: Improved generation of random values, more secure.Jeremy Allison1998-04-226-13/+93
| | | | | | | | | loadparm.c: Started add of 'security=domain' code. password.c: Fix for security=server NT bugs. reply.c: Started add of 'security=domain' code. server.c: Started add of 'security=domain' code. smb.h: Started add of 'security=domain' code. Jeremy.
* many systems don't have /etc/shadow but do have another system forAndrew Tridgell1998-04-211-0/+12
| | | | | | | | | | making encrypted passwords secret. For example, with secure NIS+ only root can get the encrypted password. hash in the encrypted password of "root" to provide a nice source of secret on such systems. On systems that don't have this (ie. any user can get roots encrypted password) then the security is so slack that it probably doesn't matter what we do to generate the secret.
* improved the secret buffer generation a bit. It now uses /etc/shadowAndrew Tridgell1998-04-211-22/+39
| | | | | and smbpasswd if possible, and doesn't put it all through a 32 bit bottleneck.
* put server-side long dce/rpc code in main branch.Luke Leighton1998-04-214-119/+167
|
* Added cli_ulogoff() calls to all the exit code paths in security=server.Jeremy Allison1998-04-211-0/+5
| | | | Jeremy.
* clientgen.c: Added cli_ulogoff() call.Jeremy Allison1998-04-213-0/+21
| | | | | password.c: Added call to cli_ulogoff on successfull sessionsetup. Jeremy.
* genrand.c: Improved filename based random seed generation.Jeremy Allison1998-04-202-22/+58
| | | | | lib/rpc/server/srv_netlog.c: Changed to use generate_random_buffer(). Jeremy.
* Added 'passwd chat debug' parameter to allow admins to debug theirJeremy Allison1998-04-203-6/+9
| | | | | Samba passwd chat scripts. Jeremy.
* Makefile: Added genrand.oJeremy Allison1998-04-206-2/+160
| | | | | | | | | | | | | | | clientgen.c: Changed to fill change password buffer with random stuff. password.c: Changed to get challenge from genrand.c server.c: Added #ifdef around O_SYNC. version.h: Changed to 1.9.19prealpha. genrand.c: New code to generate (hopefully) good random numbers for use in crypto challenges/session keys etc. PLEASE REVIEW THIS CODE AND SUGGEST IMPROVEMENTS !!!!!! Jeremy.
* Fixed bug that John found in WINS server code. When nmbd as a WINSJeremy Allison1998-04-204-9/+111
| | | | | | | | | | | | | server is sending out a name_query after a WACK, it needs to send a packet with recursion_desired = 0 (yes Luke, you were right all along :-). If it doesn't then if it's talking to itself then the query packet ends up back in the WINS server instead of in the client side code. Makefile: Changed proto generation to stop including NMBDOBJ twice. nmbd_namequery.c nmbd_packets.c nmbd_winsserver.c: Added extra query_name_from_wins_server() code. Jeremy.
* includes.h: Added John's redhat fix for QSORT_CAST.Jeremy Allison1998-04-184-558/+120
| | | | | | | | | | | | | smbpass.c: Added lock depth code so calls to pw_file_lock() can be nested. Fixed codedump problems in add_smbpwd_entry(). smbpasswd.c: Removed all the code that manipulated the password file directly. Now *all* smbpasswd file changes are done through the interfaces defined in smbpass.c This should make the life of people adding alternate backend databases *much* easier. lib/rpc/server/srv_netlog.c: Removed debug messages used to debug machine password changing. Jeremy.
* clientgen.c: Changes 'cli_xxx_' calls to use the followingJeremy Allison1998-04-173-58/+114
| | | | | | | | | | | | | | | | | | | | | | | | | | | regularized parameter syntax: setup, setup_count, max_setup_count, params, params_count, max_params_count, data, data_count, max_data_count, (and if a reply is needed) *reply_params, *reply_data_len *reply_data, *reply_data_len This allows the pointers and the lengths that relate to these pointers to be next to each other in the parameter list. This makes seeing what you are passing to these functions much easier to see. Getting ready for adding the lib/rpc/client functions needed to do security=domain. torture.c: Fixed it so it uses / rather than \\ internally for the //machine/share syntax. Jeremy.
* Changing of machine passwords now works !!!!!!Jeremy Allison1998-04-174-43/+58
| | | | | | | | smbdes.c: Added cred_hash3. smbpasswd.c: Fixes for adding a machine account (needs more work). lib/rpc/server/srv_netlog.c: Turn on the machine password changing code by default (calls cred_hash3). Jeremy.
* Just changed the date.Christopher R. Hertel1998-04-171-1/+1
|
* reply.c: Fix bugs where debug statements were accessing the fd_ptr structJeremy Allison1998-04-162-20/+20
| | | | | | | internals after Andrews' code had memset it to zero (this was causing core dumps). charcnv.c: Fixes for ISO8859-2 from Petr Hubeny <psh@capitol.cz>. Jeremy.
* Minor change to the wording. It used to say "files with the prefix 'ubi_'"Christopher R. Hertel1998-04-161-6/+6
| | | | or some such. Some future files won't have the ubi_ prefix. -)----- Chris
* ipc.c: Fix for printer queue spinning with Win95.Jeremy Allison1998-04-157-51/+187
| | | | | | | | | nmbd.c: Fix for always overwriting log despite append setting. smb.h: Addition of last time password changed entry to account info. smbpass.c: Changes to support last time changed field in smbpasswd file. smbpasswd.c: Changes to support last time changed field in smbpasswd file. util.c: Fix for always overwriting log despite append setting. Jeremy.
* Fixed some typecast and function pointer problems pointed out by aChristopher R. Hertel1998-04-142-10/+21
| | | | | | programmer in Finland. Chris -)-----
* Modified interfaces to getting smb password entries fromJeremy Allison1998-04-1410-38/+83
| | | | | | | | | | | | | | | | | | | | get_smbpwd_entry (now an internal function to smbpass.c) to a more UNIX-like : getsmbpwnam() - get entry by name. getsmbpwuid() - get entry by uid. Changed the type returned by the smbpasswd enumeration functions to be a void * so that people don't come to depend on it being a FILE *. These abstractions should make it much easier to replace the smbpasswd file with a better backend in future. Other files changed are to match the above changes. Jeremy.
* make it look for only the proper lines to uncomment.Herb Lewis1998-04-131-8/+8
|
* Fixed aggregate initializer problem for gcc.Jeremy Allison1998-04-131-1/+1
| | | | Jeremy.
* Changes include:Christopher R. Hertel1998-04-134-421/+706
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | proto.h: The unusual. ;) reply.c: I changes some function names, and updated reply.c to match. See mangle.c below for more. server.c: Changed function names and parameters in file mangle.c, so changed server.c calls to match. See mangle.c below for more. mangle.c: I replaced the caching mechanism used for caching reverse mangled name maps. The old method was a large array of 256-byte strings. Movement in the stack (including push and pop) was done by memcpy()ing whole chunks of memory around. The new system uses the ubi_Cache module which, in turn, uses a splay tree. Entries are dynamically allocated using a minimum amount of memory. Searches are non-linear, which should speed things up a bit, too. Overall, this should save memory and be faster. Other changes: I streamlined the is_mangled() test and made other speed enhancements including replacing some static functions with macros. Added comments, etc. Note: Per an E'mail conversation with Andrew, the 'mangled stack' parameter in smb.conf doesn't do anything anymore. The cache is now set for 16K bytes maximum memory usage. The mangle stack parameter is silently ignored. This can easily be changed, but I'd rather introduce a 'mangled cache memory' parameter and remove 'mangled stack'. Remaining problems: While testing the module, I noticed that something is calling name_map_mangle() twice. The result is that names which contain illegal characters are getting mangled twice. Also, the entire module works by overwriting the input string. This has a variety of nasty side effects. Summary: There's a lot still to be done, but the changes I have in place *should* work in exactly the same way (except for the mangle stack parameter). The rest of the bugs and other issues are separate. Chris -)-----
generated by cgit (git 2.34.1) at 2025-10-02 23:18:49 +0000