summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
| * Removed duplicate debug.Tim Potter2001-11-051-2/+0
| |
| * Don't put a \n on the end of the arg to exit_server()Tim Potter2001-11-0510-26/+26
| |
| * Added missing strchr_wa.Jeremy Allison2001-11-041-0/+5
| | | | | | | | Jeremy.
| * Fix for broken-as-shipped RedHat 7.2 system headers. Now we haveJeremy Allison2001-11-041-0/+12
| | | | | | | | | | to detect this in configure. Jeremy.
| * a big one:Simo Sorce2001-11-047-1113/+579
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - old mangle code has gone, the new one based on tdb seem resonably ok probably the valid.dat table need to be updated to treat wild chars as invalid ones (work ok without it) - a LOT of new string manipulation function for unicode, they are somewhat tested but a review would not be bad - some new function I will need for the new unix_convert function I'm writing, this will be renamed filename_convert and use only unicode strings. - charconv, I attached a comment, if someone wnat to look if I'm right or just was hacking to late in the night to make a sane one :) of course any bug is my responsibility an will be pleased to see patches if you find any. :-) Simo.
| * get the string lengths right in domain logonsAndrew Tridgell2001-11-041-2/+2
| | | | | | | | | | | | Andrew, this fixes domain logons in head. Please look at the change, as I think you may have misunderstood the max_str_len field (which is badly named)
| * remove {} from default valid char listAndrew Tridgell2001-11-041-1/+1
| |
| * Fix segfault. sup_tok might not always be with us.Andrew Bartlett2001-11-041-3/+5
| |
| * Fix up authenticated pipes in line with vuser changes. This ensures that globalAndrew Bartlett2001-11-041-1/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | groups obtained via a domain logon are respected in the attached NT_USER_TOKEN. This functionality is only available in HEAD, becosue of the way authenticaion has been abstracted. Both vuid logins and authenticated pipes need to use the same code for this in future. Can sombody with the correct facilties check this please?\ Thanks, Andrew Bartlett
| * Fixup for accounts without a local /etc/passwd entry.Andrew Bartlett2001-11-041-9/+5
| | | | | | | | - Now perfectly valid.
| * Fix up pdbedit so that it at least compiles without warnings.Andrew Bartlett2001-11-041-92/+61
| | | | | | | | | | | | - Basic functionality intact - Now adds machine accounts without a uid. (using the machine uid range to avoid conflict with real uid based accounts)
| * Got serious about const again.Jeremy Allison2001-11-045-116/+118
| | | | | | | | | | | | | | REMOVED BZERO CALLS YET AGAIN !!! Why do these keep creeping back in.... They are *NOT* POSIX. I'm also thinking of removing strncpy as I'm sure it's not being used correctly.... Jeremy.
| * Added NT_USER_TOKEN into server_info to fix extra groups problem.Jeremy Allison2001-11-0322-148/+297
| | | | | | | | | | Got "medieval on our ass" about const warnings (as many as I could :-). Jeremy.
| * Added many more defines in service category, user category and othersSteve French2001-11-031-0/+26
| |
| * Added support for UserListGroups, ServiceEnumSteve French2001-11-031-0/+125
| |
| * Adding support for net password, net service, net user info, fixing net helpsSteve French2001-11-031-59/+258
| |
| * anonymous logins are guest logins, so mark them as such. (Otherwise they canAndrew Bartlett2001-11-031-1/+1
| | | | | | | | browse non-guest shares).
| * Minor cleanups/fixes in the NTLMv2 codeAndrew Bartlett2001-11-032-12/+4
| |
| * Move the test for non-SPNEGO session setups when using SPNEGO, becouse its aAndrew Bartlett2001-11-031-5/+5
| | | | | | | | perfectly vailid behaviour for guest logins.
| * Return 1 (rather than 0) on failure. This may well help get the build farmAndrew Bartlett2001-11-021-1/+1
| | | | | | | | | | | | | | | | back into order, becouse its the inverse tests that are 'failing' - they get error 0 back and think that we just let sombody in without a password and the like. Andrew Bartlett
| * Various post AuthRewrite cleanups, fixups and tidyups.Andrew Bartlett2001-11-0111-69/+83
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Zero out some of the plaintext passwords for paranoia Fix up some of the other passdb backends with the change to *uid_t rather than uid_t. Make some of the code in srv_netlog_nt.c clearer, is passing an array around, so pass its lenght in is definition, not as a seperate paramater. Use sizeof() rather than magic numbers, it makes things easier to read. Cope with a PAM authenticated user who is not in /etc/passwd - currently by saying NO_SUCH_USER, but this can change in future. Andrew Bartlett
| * zero the data, not a pointer to the data ...Andrew Tridgell2001-11-011-1/+1
| |
| * Removed unneeded extern.Tim Potter2001-10-311-2/+0
| |
| * This should fix up the compile with krb5.Andrew Bartlett2001-10-311-7/+9
| | | | | | | | This needs to use the auth interface at some stage, but for now this will do.
| * When you make a data_blob() then you probably need to free it too...Andrew Bartlett2001-10-311-0/+4
| |
| * Fix up domain logons. Tested with NT4.Andrew Bartlett2001-10-313-7/+6
| |
| * ... and clean up the unused variables.Andrew Bartlett2001-10-311-3/+0
| |
| * Small changes for guest authenticated pipes.Andrew Bartlett2001-10-311-8/+7
| |
| * This is a farily large patch (3300 lines) and reworks most of the AuthRewriteAndrew Bartlett2001-10-3132-1139/+2216
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | code. In particular this assists tpot in some of his work, becouse it provides the connection between the authenticaion and the vuid generation. Major Changes: - Fully malloc'ed structures. - Massive rework of the code so that all structures are made and destroyed using malloc and free, rather than hanging around on the stack. - SAM_ACCOUNT unix uids and gids are now pointers to the same, to allow them to be declared 'invalid' without the chance that people might get ROOT by default. - kill off some of the "DOMAIN\user" lookups. These can be readded at a more appropriate place (probably domain_client_validate.c) in the future. They don't belong in session setups. - Massive introduction of DATA_BLOB structures, particularly for passwords. - Use NTLMSSP flags to tell the backend what its getting, rather than magic lenghths. - Fix winbind back up again, but tpot is redoing this soon anyway. - Abstract much of the work in srv_netlog_nt back into auth helper functions. This is a LARGE change, and any assistance is testing it is appriciated. Domain logons are still broken (as far as I can tell) but other functionality seems intact. Needs testing with a wide variety of MS clients. Andrew Bartlett
| * More const.Andrew Bartlett2001-10-311-2/+2
| |
| * SPNEGO works perfectly well with security=domain, so don't exclude it.Andrew Bartlett2001-10-311-3/+7
| |
| * Small 'const' updates ahead of some AuthRewrite merging.Andrew Bartlett2001-10-314-18/+18
| |
| * Added some extra fields to the auth_serversupplied_info structure.Tim Potter2001-10-318-8/+70
| | | | | | | | | | | | | | | | | | To obtain the full group membership of a user (i.e nested groups on a win2k native mode server) it is necessary to merge this list of groups with the groups returned by winbindd when creating an nt access token. This breaks winbindd linking while AB and I sync up our changes to the authentication subsystem.
| * This one's a doozy. A cut&paste bug incorrectly sets the max string lengthTim Potter2001-10-311-1/+1
| | | | | | | | | | | | of the lm challenge/response header in the NET_ID_INFO_2 structure included in a network logon request. It seems Windows 2000 is the only OS that cares about this.
| * Don't accidentally return success when sending a broken NET_SAMLOGONTim Potter2001-10-311-0/+1
| | | | | | | | | | request. This exposes a domain authentication bug with win2k where a rpc fault is returned but not propagated up as an error.
| * Some tweaking to make the samlogon function look more like NT on the wire.Tim Potter2001-10-311-7/+7
| |
| * Parionia to ensure people don't install libsmb based programs setuid root.Andrew Bartlett2001-10-313-1/+15
| | | | | | | | | | | | | | libsmb has not been written to be setuid, with things like LIBSMB_PROG allowing all sort of fun and games. Andrew Bartlett
| * Spnego on the 'server' end of security=server just does not work, so set theAndrew Bartlett2001-10-304-2/+17
| | | | | | | | | | | | | | | | | | flags so we just do a 'normal' session setup. Also add some parinoia code to detect when sombody attempts to do a 'normal' session setup when spnego had been negoitiated. Andrew Bartlett
| * Fix debug in domain_client_validate() when password server = *.Tim Potter2001-10-301-1/+1
| |
| * Allow the logon level to be passed to cli_netlogon_sam_logon() rather thanTim Potter2001-10-301-4/+4
| | | | | | | | the validation level.
| * Allow the logon level to be passed to cli_netlogon_sam_logon() rather thanTim Potter2001-10-301-13/+41
| | | | | | | | | | | | | | the validation level. This allows us to test interactive or network logons. Interestingly enough a win2k native mode server generates a rpc fault when presented with a network logon!
| * Removed confusing comment.Tim Potter2001-10-301-1/+1
| |
| * Fix up smbpasswd -e/-d so that it doesn't change the password under you anyAndrew Bartlett2001-10-305-34/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | more. (Previously it set them to 'XXXX' or similar when only the flags were being changed - a bug I must have introduced when I reworked the passdb end of things a few weeks back.) Adds a new local flag: LOCAL_SET_PASSWORD to specify that the password is actually to be changed. Andrew Bartlett
| * Display some errors if the initial connection to the server could not beTim Potter2001-10-301-0/+2
| | | | | | | | made.
| * Added samlogon command to test against win2k native mode server. I thinkTim Potter2001-10-302-0/+130
| | | | | | | | there's a bug in the marshalling of net_sam_logon.
| * Fixed typo in debug message.Tim Potter2001-10-301-1/+1
| |
| * Fix up auth_smbpasswd.c to use the password interface, rather than theAndrew Bartlett2001-10-292-16/+16
| | | | | | | | | | | | structures directly. Andrew Bartlett
| * Add a bit of 'const' for the data_blob code.Andrew Bartlett2001-10-291-3/+13
| | | | | | | | | | Add a new data_blob_clear_free() function - that zero's out the buffer when its done.
| * Don't force winbind to use non-local DC's.Volker Lendecke2001-10-291-1/+1
| | | | | | | | Volker
| * clear errno before a call, tdbsam will not update it.Simo Sorce2001-10-291-1/+1
| | | | | | | | just a hack to make things work.
generated by cgit (git 2.34.1) at 2025-09-27 10:55:53 +0000