summaryrefslogtreecommitdiffstats
path: root/source/include/rpc_netlogon.h
Commit message (Collapse)AuthorAgeFilesLines
* NTLM Authentication:Andrew Bartlett2003-03-231-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Add a 'privileged' mode to Winbindd. This is achieved by means of a directory under lockdir, that the admin can change the group access for. - This mode is now required to access with 'CRAP' authentication feature. - This *will* break the current SQUID helper, so I've fixed up our ntlm_auth replacement: - Update our NTLMSSP code to cope with 'datagram' mode, where we don't get a challenge. - Use this to make our ntlm_auth utility suitable for use in current Squid 2.5 servers. - Tested - works for Win2k clients, but not Win9X at present. NTLMSSP updates are needed. - Now uses fgets(), not x_fgets() to cope with Squid environment (I think somthing to do with non-blocking stdin). - Add much more robust connection code to wb_common.c - it will not connect to a server of a different protocol version, and it will automatically try and reconnect to the 'privileged' pipe if possible. - This could help with 'privileged' idmap operations etc in future. - Add a generic HEX encode routine to util_str.c, - fix a small line of dodgy C in StrnCpy_fn() - Correctly pull our 'session key' out of the info3 from th the DC. This is used in both the auth code, and in for export over the winbind pipe to ntlm_auth. - Given the user's challenge/response and access to the privileged pipe, allow external access to the 'session key'. To be used for MSCHAPv2 integration. Andrew Bartlett
* Change parsing of policy and privs delta to what Ethereal says.Volker Lendecke2002-09-221-56/+37
| | | | Volker
* Updated some comments in the NET_USER_INFO_3 structure for the other_sidsTim Potter2002-09-131-3/+3
| | | | field.
* Added some new delta types discovered by Ronnie from ethereal"Tim Potter2002-08-221-23/+28
| | | | | | | | | | - SAM_DELTA_RENAME{USER,GROUP,ALIAS} - SAM_DELTA_DELETE{USER,GROUP} Renamed some of the unknown delta types and their unmarshalling functions: - SAM_DELTA_TRUST_DOMS - SAM_DELTA_SECRET_INFO
* typos typos :)Simo Sorce2002-08-221-2/+0
|
* Spelling fixes.Tim Potter2002-08-221-5/+7
|
* NETLOGON NetServerAuthenticate3 include and parser fileJean-François Micouleau2002-08-211-11/+30
| | | | J.F.
* Removed version number from file header.Tim Potter2002-01-301-2/+1
| | | | Changed "SMB/Netbios" to "SMB/CIFS" in file header.
* decoded SAM_DELTA 0x0e and 0x12.Jean-François Micouleau2001-12-121-0/+59
| | | | | | | | | One is an entry for the trusted domains The other is an entry for the trusting domains They are pretty basic, I'll improve them. J.F.
* a ugly decoder for SAM_DELTA_DOM_INFO (0x0d)Jean-François Micouleau2001-12-121-3/+88
| | | | | | | | | a correct decoder for SAM_PRIVS_INFO (0x10) this code is totally useless right now, it's just fun to decode those and will save tpot some time. J.F.
* Make header comment clearer, these are RIDs, not UIDs.Andrew Bartlett2001-09-301-2/+3
|
* These are RIDs not Unix UIDs so make this clear in the feild names.Andrew Bartlett2001-09-221-2/+2
| | | | Andrew Bartlett
* the next stage in the NTSTATUS/WERROR change. smbd and nmbd now compile, but ↵Andrew Tridgell2001-09-041-8/+5
| | | | the client code still needs some work
* Merge of SAM delta type constants and BDC replication types from TNG.Tim Potter2001-08-281-0/+282
|
* converted another bunch of stuff to NTSTATUSAndrew Tridgell2001-08-271-12/+10
|
* Added structures for LOGON_CTRL rpc.Tim Potter2001-05-241-21/+55
| | | | Make proto.
* Fix "proc num out of range" error. Missing rpc call.Jeremy Allison2001-04-231-2/+17
| | | | Jeremy.
* This patch (donated by Marc Jacobsen of HP) should make Sun and HP very ↵Jeremy Allison2001-02-241-14/+45
| | | | | | | | | | | happy :-). Probably Veritas too... :-). It allows Samba as a domain member to authenticate against an AS/U server such as the older HP PDC product or PD Netlink. It does this by trying a netlogon with info level 3 and then falling back to info level 2 if the PDC returns invalid info level. Jeremy.
* a netlogon enum trust query doesn't have a function_code at end.Jean-François Micouleau2000-10-101-2/+0
| | | | | | | | a sam_user_info_24 doesn't have a uint16 at end samr_create_user also creates the unix account now samr_set_userinfo changes the password. J.F.
* Fix for the SID history problem when using a Win2k domain controllerJeremy Allison2000-09-061-1/+4
| | | | | with security=domain. Also fixed to dynamically allocate the SIDs and GIDs. Jeremy.
* dynamic allocation of NET_USER_INFO_3 gids.Luke Leighton2000-06-091-2/+2
| | | | | | | | | | jeremy, the intent is to call se_access_check() with usr-sid, grp-sid, array-of-group-rids (but array-of-group-sids would do). please do look at smbd/lanman.c's api_NetWkstaGetInfo, it will show you that we really do need to store the entire NET_USER_INFO_3 structure. then again, api_NetWkstaGetInfo is only used by win9x so who cares :)
* first pass at updating head branch to be to be the same as the SAMBA_2_0 branchAndrew Tridgell1999-12-131-290/+34
|
* damn, that took a while. nt login password was being stored incorrectlyLuke Leighton1999-12-011-2/+2
| | | | in private .mac file (oops). ntlogin test now works.
* attempting to get nt5 wksta to join domain.Luke Leighton1999-11-161-1/+1
| | | | | | | | 1) had to fix samr "create user" and "set user info" (level 23). 2) had to fix netlogon enum trust domains 3) registry key needed \\ in it not \.
* Changes to implement NET_AUTH based on NET_AUTH2, to get Win2000Richard Sharpe1999-11-161-2/+17
| | | | happier in joining a Samba domain.
* BDC support.Matthew Chapman1999-07-221-6/+4
| | | | Fixing and clarifying SAM_PWD structure.
* BDC support.Luke Leighton1999-07-211-2/+21
|
* Some more BDC-related fixes, mainly to the NET_SAM_SYNC RPC with respectMatthew Chapman1999-06-021-20/+30
| | | | | to alignment, missing fields, etc. - it should now work correctly. There is still the problem of decoding the private data field.
* Mainly BDC-related changes.Matthew Chapman1999-04-081-2/+244
| | | | | | | | | | | | | | | * Added SEC_CHAN_BDC * Fix for endianness problem reported by Edan Idzerda <edan@mtu.edu>. A BUFFER2 is really a "unibuf" in my terminology and we should treat it as such. * Added some more common NT structures (BIGINT, BUFHDR2, BUFFER4). * Added NET_SAM_SYNC (-> NetDatabaseSync2) RPC for account replication. Still experimental and incomplete, with a few too many NULL security descriptors lying around (must go look at Jeremy's SD code). Haven't worked out password encryption yet either. However, the XXX_INFO structures I've added to rpc_netlogon.h are quite nice as they give some insight into how these objects are stored in the SAM.
* This is the checkin that adds the security=domain functionality.Jeremy Allison1998-04-291-0/+3
| | | | | | | | | | | WARNING - so far this has only been tested against a Samba PDC (still waiting for IS to add me the machine accounts :-). Still missing is the code in smbpasswd that will add a machine account password and change it on the domain controller, but this is not hard, and I will check it in soon. Jeremy.
* clientgen.c ipc.c smbpasswd.c: Fixes for warnings (from Herb).Jeremy Allison1998-03-241-2/+2
| | | | | | | | | | | quotas.c: Linux quota fix. util.c: Ensure smb_read_error is zero in all calls that can set it. lib/rpc/include/rpc_misc.h lib/rpc/include/rpc_netlogon.h lib/rpc/parse/parse_misc.c lib/rpc/parse/parse_net.c lib/rpc/server/srv_netlog.c : Modify Luke's code to call SamOEMhash(). Jeremy.
* "For I have laboured mightily on Luke's code, and hath brokenJeremy Allison1998-03-111-0/+372
all I saw" - the book of Jeremy, chapter 1 :-). So here is the mega-merge of the NTDOM branch server code. It doesn't include the new client side pieces, we'll look at that later. This should give the same functionality, server wise, as the NTDOM branch does, only merged into the main branch. Any fixes to domain controler functionality should be added to the main branch, not the NTDOM branch. This code compiles without warnings on gcc2.8, but will need further testing before we are sure all the working functionality of the NTDOM server branch has been correctly carried over. I hereby declare the server side of the NTDOM branch dead (and all who sail in her :-). Jeremy.
generated by cgit (git 2.34.1) at 2025-09-25 21:12:56 +0000