summaryrefslogtreecommitdiffstats
path: root/source/include/rpc_samr.h
Commit message (Collapse)AuthorAgeFilesLines
* beginning to sync up for 2.2.5 release....Gerald Carter2002-06-171-3/+10
|
* Move over to RELEASE branch.Jeremy Allison2002-02-011-60/+142
| | | | Jeremy.
* Sync-up with SAMBA_2_2 branch.Jeremy Allison2001-10-111-0/+1
| | | | Jeremy.
* Syncup getting ready for release.Jeremy Allison2001-07-061-15/+68
| | | | Jeremy.
* Changing user passwords from a Win2k client now works to a Samba PDC. Thanks ↵Jeremy Allison2001-03-101-0/+1
| | | | | | Jim ! Jeremy.
* Fixed extra 2 byte incorrect parse in SETUSERINFO_24 that was preventingJeremy Allison2001-03-081-2/+0
| | | | | | | W2K clients from joining a Samba domain the "old" way (editing /etc/passwd and adding the machine manually in smbpasswd). Vectored the ms_fnmatch function - preparing to make this DOS client specific. Jeremy.
* But Doctor, I had to kill the patient in order to save him....Jeremy Allison2001-02-211-3/+3
| | | | | | | | | | | | | | | | | | | This will probably break 2.2 for a while. Do *NOT* checkout unless you like core dumps. This is the first merge of the TNG SAMR code into 2.2. It will eventually give us a wonderful PDC, but maybe painful in the short term. It had to be done however, and this touches almost every file (mostly just removing the OLD_NT_DOMAIN) stuff. I removed some SAMR functionality from rpcclient that would no longer compile. Also changed fstring to 256 bytes to better match an NT pathname. Jeremy.
* Sync up with appliance-head.Jeremy Allison2001-01-151-1/+1
| | | | Jeremy.
* the beginnings of a new scheme I've working on to allow an easierAndrew Tridgell2000-05-091-285/+900
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | head/tng merge. It goes something like this: - headers from tng get copied over one at a time - the old headers get renamed to *_old.h - server side code that used the old headers gets a #define OLD_NTDOMAIN 1 #undef OLD_NTDOMAIN at the start and end of the code - mkproto.awk recognises these special defines and does magic stuff so that each .c file sees the right headers - we start moving the rpc client libraries from tng to head. if this goes OK then, in theory, we should be able to move the client side rpc code from tng to head without disturbing the existing head server side code. Then when that works we can consider merging the server side. it remains to be seen if this scheme will work. So far I've moved rpc_samr.h and don't seem to have broken anything. Note this this is still a very delicate operation, as at every step of the way I want to keep head fully functional. Please don't take part unless you discuss it with me first.
* SAMR_R_UNKNOWN_38 is 3 uint16 params (4-byte aligned) followed by status code.Luke Leighton2000-01-171-1/+0
|
* first pass at updating head branch to be to be the same as the SAMBA_2_0 branchAndrew Tridgell1999-12-131-790/+187
|
* added samuserset2 rpcclient command to test ACB_XXX bit-setting onLuke Leighton1999-11-181-2/+33
| | | | | samr opcode 0x25. _yet_ another failed attempt to get nt5rc2 to join a samba domain. what _is_ it with this stuff, dammit?
* added rpcclient "enumdomains" command. enumerates names of domainsLuke Leighton1999-11-151-1/+31
| | | | | | | | for which a PDC is responsible. typical answers are: <Name of Domain> plus <Builtin>. against a hierarchical, down-level-compatible NT5 PDC, there's likely to be more than these two entries!!!!!
* samuserset <username> -p password. YESSSSS :)Luke Leighton1999-11-041-0/+1
| | | | you have to use "ntlmv1" at the moment (i.e set client ntlmv2 = no).
* dynamic mem allocation in enum dom groups and enum dom aliasesLuke Leighton1999-11-021-4/+4
|
* more reshuffling of enum groups code. more higher order functions.Luke Leighton1999-10-291-1/+1
|
* one of those wonderful moments when running against a different MSRPCLuke Leighton1999-10-251-6/+6
| | | | | | implementation (NT5) when you discover that your code is trash. samr_enum_dom_users(), samr_enum_dom_aliases() and samr_enum_dom_groups() all take a HANDLE for multiple-call enumeration purposes.
* turning some of the rpcclient functions dynamic. this is likely toLuke Leighton1999-10-211-2/+2
| | | | break a few things...
* various. debug levels changed. nmbd doesn't need libsmb/clienttrust.c.Luke Leighton1999-10-211-4/+4
| | | | | | | samr_lookup_rids() moved to a dynamic memory structure not a static one limited to 32 RIDs. cli_pipe.c reading wasn't checking ERRmoredata when DOS error codes negotiated (this terminates MSRPC code with prejudice).
* testing for attempts to get more info levels into samr_query_userinfoLuke Leighton1999-09-211-0/+2
|
* matthew chapman identified 4 previously unknown samr functions.Luke Leighton1999-08-311-4/+4
|
* the times in sam_user_info_23 may not be in the right orderLuke Leighton1999-05-071-0/+1
|
* added SamrQueryDomainInfo call info level 0x3 for kix32.exe supportLuke Leighton1999-03-291-1/+8
|
* added SAMR_USER_INFO_24 info level to samr_set_userinfo. this is usedLuke Leighton1999-03-251-0/+8
| | | | by "Welcome to SAMBA Domain".
* SAM database "set user info".Luke Leighton1999-03-251-31/+99
| | | | | | | | | | | | | | | | | | | | | | | ---------------------------- - removed DOM_RID4 - removed SAMR_UNKNOWN_32 - added SAMR_SET_USERINFO (opcode 0x32) - added level 0x1 to SAMR_QUERY_DOM_INFO (needed for create user) - fixed pwdb_gethexpwd() it was failing on XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX - added mod_sam21pwd_entry() - preparing to call mod_sam21pwd_entry() - added "user session key" to user_struct.dc. this is md4(nt#) and is needed to decode user's clear-text passwords in SAMR_SET_USERINFO. - split code out in chgpasswd.c to decode 516 byte password buffers.
* dynamic memory allocation in samr enum dom users. works with 849 entries now.Luke Leighton1999-03-231-2/+2
|
* added a "createuser" command.Luke Leighton1999-03-191-2/+29
|
* Win9x user level security.Matthew Chapman1999-02-241-67/+158
| | | | | | | | | | | | | | | | | | | | | | | | * Added SAMR_LOOKUP_DOMAIN (-> SamrLookupDomainInSamServer) * Added real SAMR_ENUM_DOM_GROUPS (corresponding to SamrEnumerateGroupsInDomain). The existing one is just an alias for SamrQueryDisplayInformation (see below). * Added three extra info levels to SAMR_QUERY_DISPINFO. Info level 3 is what was previously SAMR_ENUM_DOM_GROUPS; info levels 4 and 5 are simple user/group list requests used by Win9x and I suspect (haven't checked) the "low speed connection" User Manager. * Added another two aliases for SAMR_QUERY_DISPINFO, opcodes 0x30 and 0x33. Usually the first is with info level 3 and the second 4 but there is some overlap so indeed these should be implemented as just aliases. * Return ERRDOS/ERRmoredata on extra data instead of STATUS_BUFFER_OVERFLOW for Win95's benefit. On a named pipe this results in an SMBreadX as usual. Still need to fix SAMR_QUERY_DOMAIN_INFO which has a hard-coded number of users and groups - which Win95 proceeds to truncate at.
* fix for enumerate domain users (bug spotted by sean matthews).Luke Leighton1999-01-291-4/+3
| | | | | | | | | also needed to use start index properly and generate next index. both client and server code need to recognise error code 0x105 when there's not enough room to store all the users in one call. sort this out another time.
* adding srvsvc pipe.Luke Leighton1998-12-081-1/+18
|
* bugs in rpcclient. add_aliasmem uses a DOM_SID2 not a DOM_SID.Luke Leighton1998-12-071-1/+1
|
* - lib/unix_sec_ctxt.cLuke Leighton1998-12-071-18/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | attempt at taking lib/uid.c and getting a unix security context change module that is independent of "cnums" and "snums". a security context is needed for pipes, not just IPC$ or other services. - group database API added add_group/alias_member, del_group/alias_member, del_group/alias_entry functions. del_builtin_entry() is deliberately set to NULL to cause an exception, you cannot delete builtin aliases. - parse_lsa.c srv_lsa.c fixed lookup_names code, it was a load of trash and didn't do anything. - cmd_samr.c rpcclient.c srv_samr.c added "deletegroup", "deletealias", "delaliasmem", "delgroupmem", "addgroupmem", "addaliasmem", "createalias", "creategroup", to both client and server code. server code calls into unix stubs right now, which don't actually do anything. the only instance where they are expected to do anything is in appliance mode NOT even in the ldap code or anything. client code modified to call samr_lookup_names() for group code (because we can) and lsa_lookup_names() for alias code (because we have to). - srv_lookup.c oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name instead of DOMAIN, name.
* added delete domain group and local group and delete domain group member.Luke Leighton1998-12-041-0/+37
|
* - oops, i got "add alias member" and "delete alias member" swapped.Luke Leighton1998-12-041-16/+15
| | | | | | | | | | | | | | | | - samr_enum_dom_users, the first 4 bytes is some sort of garbage, nt5-beta2 clears them out to zeros whereas nt4 does not. fixed bug where we were assuming that the first 4 bytes of a response _had_ to be non-zero. - cli_lsarpc.c: forgot to append the rid on the lsa_lookup_names() client call. - added in "addaliasmem" and "addgroupmem" commands. the addaliasmem command actually turned out to be a "delaliasmem" :-) :-) - parse_lsa.c: moved assert array check to after the size of useable array space is set...
* - renamed do_samr_xxx to samr_xxxLuke Leighton1998-12-041-17/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | - renamed do_lsa_xxx to lsa_xxx - added "enumgroups [-m]" command, enumerates groups, shows members. - added cmd_sam_add_groupmem(), need to call these in rpcclient.c - added cmd_sam_add_aliasmem(), need to call these in rpcclient.c - modified "enumaliases [-m]" command - improved "enumgroups" and "enumaliases" to display names not just RIDS/SIDs. - renamed "samr_unknown_12" to "samr_lookup_rids". - added the following client-side functions: get_samr_query_groupmem() get_samr_query_aliasmem() get_samr_query_groupinfo() samr_enum_dom_groups() samr_enum_dom_aliases() samr_add_aliasmem() samr_add_groupmem() - improved display output (display.c)
* added createalias command to rpcclientLuke Leighton1998-12-031-1/+2
|
* create domain group command (creategroup) added to rpcclient.Luke Leighton1998-12-031-1/+2
| | | | renamed do_samr_xxxx to samr_xxxx.
* adding group parsing: add/modify/delete/add members.Luke Leighton1998-12-031-5/+3
|
* spotted the mistake in group_info1 parsing.Luke Leighton1998-12-021-1/+2
|
* added rid and sid_name_use to DOMAIN_GRP_MEMBER, for use in group memberLuke Leighton1998-12-021-10/+10
| | | | | | | query. domain groups now work, hurrah! only thing is that the description is one character long, don't know why (which is wierd in itself).
* adding group member code, made a start. found that the group members'Luke Leighton1998-12-021-15/+40
| | | | rid is needed not the name (see DOMAIN_GRP_MEMBER) decided to go home.
* query_aliasmem code. it works (hurrah).Luke Leighton1998-12-011-1/+3
|
* rpc_samr.h parse_samr.c srv_samr.c :Luke Leighton1998-12-011-6/+17
| | | | | | | | | | samr_query_aliasmembers (cool!) util_pwdb.c sids.c nmbd.c server.c smbpasswd.c swat.c : pwdb_initialise(BOOL is_server) now creates / reads DOMAIN_NAME.SID if is_server is True, and does LsaQueryInfoPolicy(levels 3 and 5) to obtain member and pdc sids.
* adding some samr parsing calls (group / alias adding / deleting)Luke Leighton1998-12-011-32/+20
| | | | added code that moves MACHINE.SID to DOMAIN_NAME.SID if it exists.
* weekend work. user / group database API.Luke Leighton1998-11-291-35/+290
| | | | | | | | | | | | | | | | | | | | | | | | | | | | - split sam_passwd and smb_passwd into separate higher-order function tables - renamed struct smb_passwd's "smb_user" to "unix_user". added "nt_user" plus user_rid, and added a "wrap" function in both sam_passwd and smb_passwd password databases to fill in the blank entries that are not obtained from whatever password database API instance is being used. NOTE: whenever a struct smb_passwd or struct sam_passwd is used, it MUST be initialised with pwdb_sam_init() or pwd_smb_init(), see chgpasswd.c for the only example outside of the password database APIs i could find. - added query_useraliases code to rpcclient. - dealt with some nasty interdependencies involving non-smbd programs and the password database API. this is still not satisfactorily resolved completelely, but it's the best i can do for now. - #ifdef'd out some password database options so that people don't mistakenly set them unless they recompile to _use_ those options. lots of debugging done, it's still not finished. the unix/NT uid/gid and user-rid/group-rid issues are better, but not perfect. the "BUILTIN" domain is still missing: users cannot be added to "BUILTIN" groups yet, as we only have an "alias" db API and a "group" db API but not "builtin-alias" db API...
* yeehaah got users to be included in S-1-5-xxx-yyy-zzz's local groups.Luke Leighton1998-11-251-8/+8
| | | | | | now need search capability on S-1-5-20, which will need argh, a "group database API" on S-1-5-20, and the ability to add BUILTIN\Admins etc to "local group map" argh.
* unix instance of group database APILuke Leighton1998-11-231-3/+3
|
* - group database API. oops and oh dear, the threat has been carried out:Luke Leighton1998-11-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the pre-alpha "domain group" etc parameters have disappeared. - interactive debug detection - re-added mem_man (andrew's memory management, detects memory corruption) - american spellings of "initialise" replaced with english spelling of "initialise". - started on "lookup_name()" and "lookup_sid()" functions. proper ones. - moved lots of functions around. created some modules of commonly used code. e.g the password file locking code, which is used in groupfile.c and aliasfile.c and smbpass.c - moved RID_TYPE_MASK up another bit. this is really unfortunate, but there is no other "fast" way to identify users from groups from aliases. i do not believe that this code saves us anything (the multipliers) and puts us at a disadvantage (reduces the useable rid space). the designers of NT aren't silly: if they can get away with a user- interface-speed LsaLookupNames / LsaLookupSids, then so can we. i spoke with isaac at the cifs conference, the only time for example that they do a security context check is on file create. certainly not on individual file reads / writes, which would drastically hit their performance and ours, too. - renamed myworkgroup to global_sam_name, amongst other things, when used in the rpc code. there is also a global_member_name, as we are always responsible for a SAM database, the scope of which is limited by the role of the machine (e.g if a member of a workgroup, your SAM is for _local_ logins only, and its name is the name of your server. you even still have a SID. see LsaQueryInfoPolicy, levels 3 and 5). - updated functionality of groupname.c to be able to cope with names like DOMAIN\group and SERVER\alias. used this code to be able to do aliases as well as groups. this code may actually be better off being used in username mapping, too. - created a connect to serverlist function in clientgen.c and used it in password.c - initialisation in server.c depends on the role of the server. well, it does now. - rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
* domain aliases added a bit better: does local aliases if you queryLuke Leighton1998-10-211-16/+17
| | | | | for sid S-1-5-20 and does (nothing at the moment) if you query for your own sid.
* the next dialog: user-groups. it's not very sensible what appears, but hey:Luke Leighton1998-10-211-8/+34
| | | | it appears!
generated by cgit (git 2.34.1) at 2025-09-26 22:07:40 +0000