summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
| * Kill off the old varient of 'check_plaintext_password' (new version justAndrew Bartlett2002-01-202-103/+28
| | | | | | | | | | | | | | committed in auth/auth_compat.c and use the new version to make the plaintext password change slightly sane... (Needs testing). Andrew Bartlett
| * Add a touch of 'const' to some auth components, and move the simple plaintextAndrew Bartlett2002-01-202-32/+41
| | | | | | | | | | | | | | password check into its own helper funciton. (This will allow it to be called from other places). Andrew Bartlett
| * Fix a couple of memory leaks in the cli_establish_connection() code's failureAndrew Bartlett2002-01-201-0/+2
| | | | | | | | | | | | | | | | case. Thanks to Nigel Williams <nigel@wednesday.demon.co.uk> for spotting these! Andrew Bartlett
| * This is the current patch from Luke Leighton <lckl@samba-tng.org> to add aAndrew Bartlett2002-01-209-95/+341
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | degree of seperation betwen reading/writing the raw NamedPipe SMB packets and the matching operations inside smbd's RPC components. This patch is designed for no change in behaviour, and my tests hold that to be true. This patch does however allow for the future loadable modules interface to specify function pointers in replacement of the fixed state. The pipes_struct has been split into two peices, with smb_np_struct taking the information that should be generic to where the data ends up. Some other minor changes are made: we get another small helper function in util_sock.c and some of the original code has better failure debugs and variable use. (As per on-list comments). Andrew Bartlett
| * This patch makes the 'winbind use default domain' code interact better withAndrew Bartlett2002-01-2016-148/+134
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | smbd, and also makes it much cleaner inside winbindd. It is mostly my code, with a few changes and testing performed by Alexander Bokovoy <a.bokovoy@sam-solutions.net>. ab has tested it in security=domain and security=ads, but more testing is always appricatiated. The idea is that we no longer cart around a 'domain\user' string, we keep them seperate until the last moment - when we push that string into a pwent on onto the socket. This removes the need to be constantly parsing that string - the domain prefix is almost always already provided, (only a couple of functions actually changed arguments in all this). Some consequential changes to the RPC client code, to stop it concatonating the two strings (it now passes them both back as params). I havn't changed the cache code, however the usernames will no longer have a double domain prefix in the key string. The actual structures are unchanged - but the meaning of 'username' in the 'rid' will have changed. (The cache is invalidated at startup, so on-disk formats are not an issue here). Andrew Bartlett
| * Ensure identical between 2.2.3 and 3.0 - no need for difference here..Jeremy Allison2002-01-201-1/+0
| | | | | | | | Jeremy.
| * Fix file size calculations for write cache code.Jeremy Allison2002-01-201-5/+41
| | | | | | | | Jeremy.
| * Attempt to fix bugs in write cache code (yes I know it's going away :-).Jeremy Allison2002-01-202-3/+21
| | | | | | | | Jeremy.
| * Readline has problems on non tty fd's. Use readline replacement to in casesJeremy Allison2002-01-191-31/+32
| | | | | | | | | | where stdin is !isatty to allow stripts to work. Jeremy.
| * Added #ifdef for FreeBSD TCP bug.Jeremy Allison2002-01-191-0/+4
| | | | | | | | Jeremy.
| * Report write fail in smb_dump.Jeremy Allison2002-01-191-1/+3
| | | | | | | | Jeremy.
| * Fix to close winbindd_idmap on exit. Pointed out by Alexander Bokovoy.Jeremy Allison2002-01-193-0/+10
| | | | | | | | Jeremy.
| * fixes (asprintf) from 2.2Simo Sorce2002-01-195-17/+24
| |
| * Fix up runlist botchup.Andrew Bartlett2002-01-191-3/+3
| |
| * Update the build farm's test runlist and make it a bit easier to read.Andrew Bartlett2002-01-181-1/+12
| |
| * Don't do tridge's crazy 'am I a trusted domain' lookup for guests.Andrew Bartlett2002-01-181-9/+12
| | | | | | | | Andrew Bartlett
| * Ensure (C) message is output on startup.Jeremy Allison2002-01-182-4/+4
| | | | | | | | Jeremy.
| * If 127.0.0.1 matches both allow & deny then allow. Patch from Steve Langasek ↵Jeremy Allison2002-01-181-1/+7
| | | | | | | | | | | | vorlon@netexpress.net Jeremy.
| * This is the 'winbind default domain' patch from Alexander BokovoyAndrew Bartlett2002-01-1812-51/+178
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | <a.bokovoy@sam-solutions.net>. The idea is the domain\username is rather harsh for unix systems - people don't expect to have to FTP, SSH and (in particular) e-mail with a username like that. This 'corrects' that - but is not without its own problems. As you can see from the changes to files like username.c and wb_client.c (smbd's winbind client code) a lot of assumptions are made in a lot of places about lp_winbind_seperator determining a users's status as a domain or local user. The main change I will shortly be making is to investigate and kill off winbind_initgroups() - as far as I know it was a workaround for an old bug in winbind itself (and a bug in RH 5.2) and should no longer be relevent. I am also going to move to using the 'winbind uid' and 'winbind gid' paramaters to determine a user/groups's 'local' status, rather than the presence of the seperator. As such, this functionality is recommended for servers providing unix services, but is currently less than optimal for windows clients. (TODO: remove all references to lp_winbind_seperator() and lp_winbind_use_default_domain() from smbd) Andrew Bartlett
| * Tidyup & code refactoring from Martin.Sheppard@csiro.au.Jeremy Allison2002-01-181-26/+23
| | | | | | | | Jeremy.
| * Ensure we log tdb open fails. Patch from Alexander Bokovoy ↵Jeremy Allison2002-01-181-4/+2
| | | | | | | | | | | | <a.bokovoy@sam-solutions.net> Jeremy.
| * Added prs_mem_clear(). Clear memory on buffer reallocation. That wayJeremy Allison2002-01-182-11/+19
| | | | | | | | | | we're not returning what the client gave us. Jeremy.
| * Always clear malloced memory for parse structs.Jeremy Allison2002-01-181-0/+1
| | | | | | | | Jeremy.
| * A nice *big* change to the fundemental way we do things.Andrew Bartlett2002-01-1719-72/+243
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Samba (ab)uses the returns from getpwnam() a lot - in particular it keeps them around for a long time - often past the next call... This adds a getpwnam_alloc and a getpwuid_alloc to the collection. These function as expected, returning a malloced structure that can be free()ed with passwd_free(&passwd). This patch also cuts down on the number of calls to getpwnam - mostly by taking advantage of the fact that the passdb interface is already case-insensiteve. With this patch most of the recursive cases have been removed (that I know of) and the problems are reduced further by not using the sys_ interface in the new code. This means that pointers to the cache won't be affected. (This is a tempoary HACK, I intend to kill the password cache entirly). The only change I'm a little worried about is the change to rpc_server/srv_samr_nt.c for private groups. In this case we are getting groups from the new group mapping DB. Do we still need to check for private groups? I've toned down the check to a case sensitve match with the new code, but we might be able to kill it entirly. I've also added a make_modifyable_passwd() function, that copies a passwd struct into the form that the old sys_getpw* code provided. As far as I can tell this is only actually used in the pass_check.c crazies, where I moved the final 'special case' for shadow passwords (out of _Get_Pwnam()). The matching case for getpwent() is dealt with already, in lib/util_getent.c Also included in here is a small change to register the [homes] share at vuid creation rather than just in one varient of the session setup. (This picks up the SPNEGO cases). The home directory is now stored on the vuid, and I am hoping this might provide a saner way to do %H substitions. TODO: Kill off remaining Get_Pwnam_Modify calls (they are not needed), change the remaining sys_getpwnam() callers to use getpwnam_alloc() and move Get_Pwnam to return an allocated struct. Andrew Bartlett
| * Move the bang (!) command back to the bottom of the list, allowing smbclientAndrew Bartlett2002-01-171-1/+3
| | | | | | | | | | | | | | | | | | to function again. Add comment to warn anybody that wants to 'Alphabetize' the list to read crh's existing comment on the issue. Andrew Bartlett
| * Made a debug look nicer.Tim Potter2002-01-171-1/+2
| |
| * Added some guards.Tim Potter2002-01-171-0/+4
| |
| * Fixed typo.Tim Potter2002-01-171-1/+1
| |
* | include/smb.h: Made constants like aARCH easier to read.Jeremy Allison2002-03-073-23/+22
| | | | | | | | | | | | smbd/nttrans.c: smbd/open.c: Fixes for delete on close semantics. Jeremy.
* | Compile fix.Tim Potter2002-03-071-1/+1
| |
* | Fix winbindd to respect command line debuglevel as nmbd/smbd.Jeremy Allison2002-03-071-5/+4
| | | | | | | | Jeremy.
* | Merge in the change to do per-handle access checks on setdata/setform etc.Jeremy Allison2002-03-071-70/+138
| | | | | | | | | | Should allow the buggy spoolss code on NT to work against us. Jeremy.
* | The name/sid cache code was using the name passed as input to lookupnamesTim Potter2002-03-072-45/+82
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | as a key in winbindd_cache.tdb. This meant that a lookupsid of that user's sid would return the name specified by the user in the previous lookupname which can result in weird capitalisation issues. The fix is to do a lookupsid immediately after the lookupname and store the name returned in the cache file. We also store the username in the name/sid cache lowercased so as to avoid multiple entries for different capitalisations of names. Test case: rpcclient jonquille -U% -c 'lookupnames npsd-test2\administraTOR' npsd-test2\administraTOR S-1-5-21-1067277791-1719175008-3000797951-500 (1) rpcclient jonquille -U% -c 'lookupsids S-1-5-21-1067277791-1719175008-3000797951-500' S-1-5-21-1067277791-1719175008-3000797951-500 [NPSD-TEST2]\[Administrator] (1)
* | Formatting tidyups.Tim Potter2002-03-071-3/+3
| |
* | fix compile errorsHerb Lewis2002-03-061-4/+9
| |
* | merge torture target from headHerb Lewis2002-03-061-0/+3
| |
* | Reformatting preparing for the changes to come.... :-).Jeremy Allison2002-03-061-153/+154
| | | | | | | | Jeremy.
* | new spoolss notify message formatGerald Carter2002-03-051-2/+3
| |
* | move data format from individual entries to a statically sizedGerald Carter2002-03-052-73/+156
| | | | | | | | | | | | | | structure for srv_spoolss_sendnotify(). This will make it easier to add information to specify changed values. I'll merge this into HEAD a little later. Not quite done.
* | Fix -d option being overridden with log level parameter.Jeremy Allison2002-03-051-0/+2
| | | | | | | | Jeremy.
* | Ignore 0/0 lock (don't error out).Jeremy Allison2002-03-051-3/+1
| | | | | | | | Jeremy.
* | Add missing error codes. Tify up libsmb error return.Jeremy Allison2002-03-052-1/+2
| | | | | | | | Jeremy.
* | More connectathon fixes. srvsvc returns WERRORs not NTSTATUS codes.Jeremy Allison2002-03-059-185/+192
| | | | | | | | | | Added aDIR mask for setfileinfo. Jeremy.
* | Canonicalise pathnames returned to Windows directory separators.Jeremy Allison2002-03-041-1/+3
| | | | | | | | | | Found by Andrew at connectathon with some new tests Jeremy.
* | fixed typoGerald Carter2002-03-041-1/+1
| |
* | Fix for missing arg to message_send_all.Jeremy Allison2002-03-031-1/+1
| | | | | | | | Jeremy.
* | Fix for extra arg.Jeremy Allison2002-03-031-1/+1
| | | | | | | | Jeremy.
* | Fixed extra arg needed for message send all.Jeremy Allison2002-03-032-4/+4
| | | | | | | | Jeremy.
* | Merge in the mutex code to stop multiple domain logon failures. ThisJeremy Allison2002-03-023-18/+110
| | | | | | | | | | code already in HEAD and app-head. Jeremy.
* | This code is so obviously correct it really needs to be in 2.2.x.Jeremy Allison2002-03-021-36/+47
| | | | | | | | Jeremy.