summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Fixed unsigned / long unsigned format missmatch.Jeremy Allison2001-11-061-4/+4
| | | | Jeremy
* Internationalization enbalement for net utility - replace printf with d_printfJim McDonough2001-11-061-233/+233
|
* Fixed looking up domain (winbind) users ahead of local users inTim Potter2001-11-051-6/+18
| | | | domain_client_validate()
* Removed totally annoying verbose debug in sid_to_string()Tim Potter2001-11-051-2/+0
|
* free the negTokenInit structureAndrew Tridgell2001-11-051-0/+2
|
* Changed MAX_OPEN_PIPES to 2048.Jeremy Allison2001-11-051-1/+1
| | | | Jeremy.
* Wrote some stubs for new win2k only spoolss rpc commands:Tim Potter2001-11-054-1/+283
| | | | | GetPrinterDataEx() and SetPrinterDataEx(). Not sure what the command number is for the latter is - I haven't seen it on the wire yet.
* merge from 2.2. Why is STR_CONVERT missing when comparingGerald Carter2001-11-051-1/+1
| | | | 2.2 to HEAD?
* old merge from 2.2Gerald Carter2001-11-051-8/+27
|
* Fixed some compiler warnings.Tim Potter2001-11-051-8/+8
|
* Renamed make_user_info_for_winbindd() to be more consistent with theTim Potter2001-11-052-8/+8
| | | | names of the other functions in this file.
* Fixed compiler warnings.Tim Potter2001-11-051-3/+2
|
* Use cli_nt_login_network() instead of domain_client_validate() to performTim Potter2001-11-054-43/+88
| | | | | | | pam authentication. This allows us to link in less other crap. Authenticating with a challenge/response doesn't seem to work though - we always get back NT_STATUS_WRONG_PASSWORD.
* Removed duplicate debug.Tim Potter2001-11-051-2/+0
|
* Don't put a \n on the end of the arg to exit_server()Tim Potter2001-11-0510-26/+26
|
* Added missing strchr_wa.Jeremy Allison2001-11-041-0/+5
| | | | Jeremy.
* Fix for broken-as-shipped RedHat 7.2 system headers. Now we haveJeremy Allison2001-11-041-0/+12
| | | | | to detect this in configure. Jeremy.
* a big one:Simo Sorce2001-11-047-1113/+579
| | | | | | | | | | | | | | | | | - old mangle code has gone, the new one based on tdb seem resonably ok probably the valid.dat table need to be updated to treat wild chars as invalid ones (work ok without it) - a LOT of new string manipulation function for unicode, they are somewhat tested but a review would not be bad - some new function I will need for the new unix_convert function I'm writing, this will be renamed filename_convert and use only unicode strings. - charconv, I attached a comment, if someone wnat to look if I'm right or just was hacking to late in the night to make a sane one :) of course any bug is my responsibility an will be pleased to see patches if you find any. :-) Simo.
* get the string lengths right in domain logonsAndrew Tridgell2001-11-041-2/+2
| | | | | | Andrew, this fixes domain logons in head. Please look at the change, as I think you may have misunderstood the max_str_len field (which is badly named)
* remove {} from default valid char listAndrew Tridgell2001-11-041-1/+1
|
* Fix segfault. sup_tok might not always be with us.Andrew Bartlett2001-11-041-3/+5
|
* Fix up authenticated pipes in line with vuser changes. This ensures that globalAndrew Bartlett2001-11-041-1/+4
| | | | | | | | | | | | | | | | groups obtained via a domain logon are respected in the attached NT_USER_TOKEN. This functionality is only available in HEAD, becosue of the way authenticaion has been abstracted. Both vuid logins and authenticated pipes need to use the same code for this in future. Can sombody with the correct facilties check this please?\ Thanks, Andrew Bartlett
* Fixup for accounts without a local /etc/passwd entry.Andrew Bartlett2001-11-041-9/+5
| | | | - Now perfectly valid.
* Fix up pdbedit so that it at least compiles without warnings.Andrew Bartlett2001-11-041-92/+61
| | | | | | - Basic functionality intact - Now adds machine accounts without a uid. (using the machine uid range to avoid conflict with real uid based accounts)
* Got serious about const again.Jeremy Allison2001-11-045-116/+118
| | | | | | | REMOVED BZERO CALLS YET AGAIN !!! Why do these keep creeping back in.... They are *NOT* POSIX. I'm also thinking of removing strncpy as I'm sure it's not being used correctly.... Jeremy.
* Added NT_USER_TOKEN into server_info to fix extra groups problem.Jeremy Allison2001-11-0322-148/+297
| | | | | Got "medieval on our ass" about const warnings (as many as I could :-). Jeremy.
* Added many more defines in service category, user category and othersSteve French2001-11-031-0/+26
|
* Added support for UserListGroups, ServiceEnumSteve French2001-11-031-0/+125
|
* Adding support for net password, net service, net user info, fixing net helpsSteve French2001-11-031-59/+258
|
* anonymous logins are guest logins, so mark them as such. (Otherwise they canAndrew Bartlett2001-11-031-1/+1
| | | | browse non-guest shares).
* Minor cleanups/fixes in the NTLMv2 codeAndrew Bartlett2001-11-032-12/+4
|
* Move the test for non-SPNEGO session setups when using SPNEGO, becouse its aAndrew Bartlett2001-11-031-5/+5
| | | | perfectly vailid behaviour for guest logins.
* Return 1 (rather than 0) on failure. This may well help get the build farmAndrew Bartlett2001-11-021-1/+1
| | | | | | | | back into order, becouse its the inverse tests that are 'failing' - they get error 0 back and think that we just let sombody in without a password and the like. Andrew Bartlett
* Various post AuthRewrite cleanups, fixups and tidyups.Andrew Bartlett2001-11-0111-69/+83
| | | | | | | | | | | | | | | | | Zero out some of the plaintext passwords for paranoia Fix up some of the other passdb backends with the change to *uid_t rather than uid_t. Make some of the code in srv_netlog_nt.c clearer, is passing an array around, so pass its lenght in is definition, not as a seperate paramater. Use sizeof() rather than magic numbers, it makes things easier to read. Cope with a PAM authenticated user who is not in /etc/passwd - currently by saying NO_SUCH_USER, but this can change in future. Andrew Bartlett
* zero the data, not a pointer to the data ...Andrew Tridgell2001-11-011-1/+1
|
* Removed unneeded extern.Tim Potter2001-10-311-2/+0
|
* This should fix up the compile with krb5.Andrew Bartlett2001-10-311-7/+9
| | | | This needs to use the auth interface at some stage, but for now this will do.
* When you make a data_blob() then you probably need to free it too...Andrew Bartlett2001-10-311-0/+4
|
* Fix up domain logons. Tested with NT4.Andrew Bartlett2001-10-313-7/+6
|
* ... and clean up the unused variables.Andrew Bartlett2001-10-311-3/+0
|
* Small changes for guest authenticated pipes.Andrew Bartlett2001-10-311-8/+7
|
* This is a farily large patch (3300 lines) and reworks most of the AuthRewriteAndrew Bartlett2001-10-3132-1139/+2216
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | code. In particular this assists tpot in some of his work, becouse it provides the connection between the authenticaion and the vuid generation. Major Changes: - Fully malloc'ed structures. - Massive rework of the code so that all structures are made and destroyed using malloc and free, rather than hanging around on the stack. - SAM_ACCOUNT unix uids and gids are now pointers to the same, to allow them to be declared 'invalid' without the chance that people might get ROOT by default. - kill off some of the "DOMAIN\user" lookups. These can be readded at a more appropriate place (probably domain_client_validate.c) in the future. They don't belong in session setups. - Massive introduction of DATA_BLOB structures, particularly for passwords. - Use NTLMSSP flags to tell the backend what its getting, rather than magic lenghths. - Fix winbind back up again, but tpot is redoing this soon anyway. - Abstract much of the work in srv_netlog_nt back into auth helper functions. This is a LARGE change, and any assistance is testing it is appriciated. Domain logons are still broken (as far as I can tell) but other functionality seems intact. Needs testing with a wide variety of MS clients. Andrew Bartlett
* More const.Andrew Bartlett2001-10-311-2/+2
|
* SPNEGO works perfectly well with security=domain, so don't exclude it.Andrew Bartlett2001-10-311-3/+7
|
* Small 'const' updates ahead of some AuthRewrite merging.Andrew Bartlett2001-10-314-18/+18
|
* Added some extra fields to the auth_serversupplied_info structure.Tim Potter2001-10-318-8/+70
| | | | | | | | | To obtain the full group membership of a user (i.e nested groups on a win2k native mode server) it is necessary to merge this list of groups with the groups returned by winbindd when creating an nt access token. This breaks winbindd linking while AB and I sync up our changes to the authentication subsystem.
* This one's a doozy. A cut&paste bug incorrectly sets the max string lengthTim Potter2001-10-311-1/+1
| | | | | | of the lm challenge/response header in the NET_ID_INFO_2 structure included in a network logon request. It seems Windows 2000 is the only OS that cares about this.
* Don't accidentally return success when sending a broken NET_SAMLOGONTim Potter2001-10-311-0/+1
| | | | | request. This exposes a domain authentication bug with win2k where a rpc fault is returned but not propagated up as an error.
* Some tweaking to make the samlogon function look more like NT on the wire.Tim Potter2001-10-311-7/+7
|
* Parionia to ensure people don't install libsmb based programs setuid root.Andrew Bartlett2001-10-313-1/+15
| | | | | | | libsmb has not been written to be setuid, with things like LIBSMB_PROG allowing all sort of fun and games. Andrew Bartlett
generated by cgit (git 2.34.1) at 2025-09-27 14:35:30 +0000