summaryrefslogtreecommitdiffstats
path: root/source/include/smb.h
Commit message (Collapse)AuthorAgeFilesLines
* added support for smbd listening on port 445 and 139. It now listensAndrew Tridgell2002-07-311-1/+3
| | | | | | | on both by default, and you can specify a list of ports to listen on either with "smb ports = " in smb.conf or using the -p option to smbd. this is needed for proper netbiosless operation.
* OK!Simo Sorce2002-07-301-3/+10
| | | | | | | | Finally the cascaded VFS patch is in. Testing is very welcome, specially with layered multiple vfs modules. A big thank to Alexander Bokovoy for his work and patience :) Simo.
* Added extern for popt_common_debug.Tim Potter2002-07-291-0/+4
|
* Another item off my long-term todo list:Andrew Bartlett2002-07-281-2/+2
| | | | | | | | | Remove the n^2 search for valid 'tty' names from the sesion code when we don't actually need it. Its main value is in getting 'well behaved' numbers for use with utmp, so when we are not doing utmp we don't need this to get in the way. Andrew Bartlett
* print_jobid in the fsp struct should be uint32.Jeremy Allison2002-07-161-1/+1
| | | | Jeremy.
* (this should have been part of the previous commit)Andrew Bartlett2002-07-081-0/+14
| | | | | | | | | | Add a function to display 'sid types' as strings - makes rpcclient outptut and DEBUG() logs much eaiser to understand. Move the enum for SID types to smb.h, becouse is really isn't LSA specific any more. Andrew Bartlett
* Kill off codepage related stuff, now we don't use codepages any more.Andrew Bartlett2002-07-031-24/+0
| | | | Andrew Bartlett
* Rework much of the service.c code:Andrew Bartlett2002-06-151-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | The aim of this execise is to give the 'security>=user' code a straight paper path. Security=share will sill call authorise_login(), but otherwise we avoid that mess. This allow *much* more accurate error code reporting, beocuse we don't start pretending that we can use the (nonexistant) password etc. Also in this patch is code to create the 'homes' share at session setup time (as we have done in the past - been broken recently) and to record this on the user's vuser struct for later reference. The changes here should also allow for much better use of %H (some more changes to come here). The service.c changes move a lot of code around, but are not as drastric as they look... (Also included is a fix to srv_srvsvc_nt.c where 'total_entries' not '*total_entries' was compared). This code is needs testing, but passes my basic tests. I expect we have lost some functionality, but the stuff I had expected to loose was already broken before I started. In particular, we don't 'fall back' to guest if the user cannot access a share (for security=user). If you want this kind of stuff then you really want security=share anyway. Andrew Bartlett
* Fix spelling typo.Jeremy Allison2002-06-141-11/+11
| | | | Jeremy.
* More of SMB signing for client - not yet finished (should be harmless).Jeremy Allison2002-06-141-1/+2
| | | | Jeremy.
* Latest patch from metze <metze@metzemix.de> to move most of samba acrossAndrew Bartlett2002-06-131-2/+2
| | | | | | | | | | | to using SIDs instead of RIDs. The new funciton sid_peek_check_rid() takes an 'expected domain sid' argument. The idea here is to prevent mistakes where the SID is implict, but isn't the same one that we have in the struct. Andrew Bartlett
* Add flags2 for security signituresAndrew Bartlett2002-06-071-0/+1
|
* Removed some unused variables - tidy up some formating, add struct toJeremy Allison2002-05-311-1/+7
| | | | | client state to implement smb signing - this is a test at present. Jeremy.
* Include the extra #define for the last set of smbpasswd mods.Andrew Bartlett2002-05-181-0/+1
|
* A few things in this commit:Andrew Bartlett2002-05-181-2/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | cleanup some of the code in net_rpc_join re const warnings and fstrings. Passdb: Make the %u and %U substituions in passdb work. This is done by declaring these paramters to be 'const' and doing the substitution manually. I'm told this is us going full circle, but I can't really see a better way. Finally these things actually seem to work properly... Make the lanman code use the pdb's recorded values for homedir etc rather than the values from lp_*() Add code to set the plaintext password in the passdb, where it can decide how to store/set it. For use with a future 'ldap password change' option, or somthing like that... Add pdb_unix, so as to remove the 'not in passdb' special cases from the local_lookup_*() code. Quite small, as it uses the new 'struct passwd -> SAM_ACCOUNT' code that is now in just one place. (also used by pdb_smbpasswd) Other: Fix up the adding of [homes] at session setup time to actually pass the right string, that is the unix homedir, not the UNC path. Fix up [homes] so that for winbind users is picks the correct name. (bad interactions with the default domain code previously) Change the rpc_server/srv_lsa_nt.c code to match NT when for the SATUS_NONE_MAPPED reply: This was only being triggered on no queries, now it is on the 'no mappings' (ie all mappings failed). Checked against Win2k. Policy Question: Should SID -> unix_user.234/unix_group.364 be considered a mapping or not? Currently it isn't. Andrew Bartlett
* This removes --with-ssl from Samba.Andrew Bartlett2002-05-171-5/+0
| | | | | | | | | | | | | | | | | This option was badly maintained, useless and confused our users and distirbutors. (its SSL, therfore it must be good...) No windows client uses this protocol without help from an SSL tunnel. I can't see any reason why setting up a unix-side SSL wrapper would be any more difficult than the > 10 config options this mess added to samba in any case. On the Samba client end, I think the LIBSMB_PROG hack should be sufficient to start stunnel on the unix side. We might extend this to take %i and %p (IP and port) if there is demand. Andrew Bartlett
* Added hex values as comments for the standard access rights.Tim Potter2002-04-151-5/+5
|
* This is the 'multiple pdb backends' patch from ctrlsoft, aka Jelmer VernooijAndrew Bartlett2002-04-131-0/+2
| | | | | | | | | | | | | <jelmer@nl.linux.org>. This patch also includes major rework of pdbedit to use popt, and the addition of -i paramter (allowing the user to specify which PDBs is being operated on) and -e to export a pdb - useful for backup and testing etc. Use of -i and -e gets us pdb2pdb functionality for transition between backends, much like the sam2sam in TNG. Andrew Bartlett
* Fix the mp3 rename bug - also tidy up our open code and remove the specialJeremy Allison2002-03-231-6/+3
| | | | | cases for rename and unlink. Had to add desired_access into the share mode record. Jeremy.
* BUFFER_SIZE Should be 128k if large read write tests are to work.Jeremy Allison2002-03-201-0/+5
| | | | Jeremy.
* Remove the "stat open" code - make it inline. This should fix theJeremy Allison2002-03-201-1/+0
| | | | | | | | bugs with opening and renaming mp3 files, also the word rename problems that people have had for a while. Needs a make clean :-) make. Also added JohnR's printing fix. Jeremy.
* Merge in JohnR's page count fixes.Jeremy Allison2002-03-191-0/+1
| | | | Jeremy.
* Sync up vfs changes from 2.2.x.Jeremy Allison2002-03-191-0/+1
| | | | Jeremy.
* syncing up printing code with SAMBA_2_2 (already done some mergesGerald Carter2002-03-151-2/+2
| | | | | | | | | | | | | in the reverse). * add in new printer change notify code from SAMBA_2_2 * add in se_map_standard() from 2.2 in _spoolss_open_printer_ex() * sync up the _print_queue_struct in smb.h (why did someone change the user/file names in fs_user/fs_file (or vice-versa) ? ) * sync up some cli_spoolss_XXX functions
* Added POSIX ACL layer into the vfs.Jeremy Allison2002-03-121-1/+1
| | | | Jeremy.
* yipee! Finally put in the patch from Alexey KotovichAndrew Tridgell2002-03-101-6/+0
| | | | | | | | <a.kotovich@sam-solutions.net> that adds the security decsriptor code for ADS workstation accounts thanks for your patience Cat, and thanks to Andrew Bartlett for extensive reviews and suggestions about this code.
* Change xcopy test to use defined constants rather than magic hexJeremy Allison2002-03-071-6/+6
| | | | | values so we can see what's going on. Jeremy.
* This patch merges my private LDAP tree into HEAD.Andrew Bartlett2002-03-021-2/+8
| | | | | | | | | | | | | | | | | | | | | The main change here is to move ldap into the new pluggable passdb subsystem and to take the LDAP location as a 'location' paramter on the 'passdb backend' line in the smb.conf. This is an LDAP URL, parsed by OpenLDAP where supported, and by hand where it isn't. It also adds the ldap user suffix and ldap machine suffix smb.conf options, so that machines added to the LDAP dir don't get mixed in with people. Non-unix account support is also added. This means that machines don't need to be in /etc/passwd or in nss_ldap's scope. This code has stood up well under my production environment, so it relitivly well tested. I'm commiting this now becouse others have shown interest in using it, and there is no point 'hording' the code :-). Andrew Bartlett
* Remove util_list.h, as its matching .c file has already gone, and nobody isAndrew Bartlett2002-03-021-2/+0
| | | | | | | using it anymore. This also removes an early #include of smb.h, making it slightly easier to track whats being included where. Andrew Bartlett
* Added "nt status support" parameter. Fix offline synchronisation.Jeremy Allison2002-02-271-0/+1
| | | | Jeremy.
* Added some splint annotations from andreas.Tim Potter2002-02-161-0/+7
|
* Removed some random crap that isn't used anymore.Tim Potter2002-02-161-47/+0
|
* Removed version number from file header.Tim Potter2002-01-301-1/+1
| | | | Changed "SMB/Netbios" to "SMB/CIFS" in file header.
* minor fixesSimo Sorce2002-01-251-4/+3
|
* Kill off another ugly wart from the side of the passdb subsystem.Andrew Bartlett2002-01-201-0/+2
| | | | | | | | | | | | | This time its the pdb_getsampwuid() function - which was only being used by the SAMR rpc subsystem to gain a 'user session key'. This 'user session key' is actually generated at login time, and the other changes here simply move that data around. This also means that (when I check some details) we will be able to use the user session key, even when we are not actually the DC, becouse its one of the components of the info3 struct returned on logon. Andrew Bartlett
* A nice *big* change to the fundemental way we do things.Andrew Bartlett2002-01-171-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Samba (ab)uses the returns from getpwnam() a lot - in particular it keeps them around for a long time - often past the next call... This adds a getpwnam_alloc and a getpwuid_alloc to the collection. These function as expected, returning a malloced structure that can be free()ed with passwd_free(&passwd). This patch also cuts down on the number of calls to getpwnam - mostly by taking advantage of the fact that the passdb interface is already case-insensiteve. With this patch most of the recursive cases have been removed (that I know of) and the problems are reduced further by not using the sys_ interface in the new code. This means that pointers to the cache won't be affected. (This is a tempoary HACK, I intend to kill the password cache entirly). The only change I'm a little worried about is the change to rpc_server/srv_samr_nt.c for private groups. In this case we are getting groups from the new group mapping DB. Do we still need to check for private groups? I've toned down the check to a case sensitve match with the new code, but we might be able to kill it entirly. I've also added a make_modifyable_passwd() function, that copies a passwd struct into the form that the old sys_getpw* code provided. As far as I can tell this is only actually used in the pass_check.c crazies, where I moved the final 'special case' for shadow passwords (out of _Get_Pwnam()). The matching case for getpwent() is dealt with already, in lib/util_getent.c Also included in here is a small change to register the [homes] share at vuid creation rather than just in one varient of the session setup. (This picks up the SPNEGO cases). The home directory is now stored on the vuid, and I am hoping this might provide a saner way to do %H substitions. TODO: Kill off remaining Get_Pwnam_Modify calls (they are not needed), change the remaining sys_getpwnam() callers to use getpwnam_alloc() and move Get_Pwnam to return an allocated struct. Andrew Bartlett
* Fixup error mapping so we have only one table containing errno -> dos error ↵Jeremy Allison2002-01-161-0/+7
| | | | | | | -> NT STATUS maps. Fixes problem with disk full returning incorrect error. Jeremy.
* Split pstring definitions into their own header.Martin Pool2002-01-151-53/+1
|
* Change the passdb interface to use allocated strings.Andrew Bartlett2002-01-151-13/+17
| | | | | | | | | | | | | | | | | | | | | | These strings are allocated using talloc(), either using its own memory context stored on the SAM_ACCOUNT or one supplied by the caller. The pdb_init_sam() and pdb_free_sam() function have been modifed so that a call to pdb_free_sam() will either clean up (remove hashes from memory) and destroy the TALLOC_CTX or just clean up depending on who supplied it. The pdb_init_sam and pdb_free_sam functions now also return an NTSTATUS, and I have modified the 3 places that actually checked these returns. The only nasty thing about this patch is the small measure needed to maintin interface compatability - strings set to NULL are actually set to "". This is becouse there are too many places in Samba that do strlen() on these strings without checking if they are NULL pointers. A supp patch will follow to set all strings to "" in pdb_default_sam(). Andrew Bartlett
* PSTRING_SANCTIFY:Martin Pool2002-01-141-3/+50
| | | | | | | | | | | | | | | | | | If you define this, pstring and fstring become distinguished types, so that it's harder to accidentally overflow them by for example passing an fstring on the lhs of pstrcpy. The types are defined as one-element union arrays so that with "fstring f" the name "f" will be a pointer and with a big hammer you can cast it to (char *). So code that tries to just use it directly will get a loud warning, but hopefully nothing worse. To pass them to non-pstring-aware functions, use PSTR and check that the function takes a const. They should almost never be modified except by special calls. In those unusual cases, use PSTR_MUTABLE. This is off by default so as not to produce too many warnings. As the code is vetted it can become the default.
* First part of UNIX extensions (#ifdefed out) more to follow.Jeremy Allison2002-01-101-0/+1
| | | | Jeremy.
* Add a talloc varient of the data_blob functions.Andrew Bartlett2002-01-051-1/+2
| | | | | | | | | Also change the structure so it has its own (optional) 'free' pointer - so we don't free() a talloc'ed version. also split out the data_blob_clear() functionaility. Andrew Bartlett
* ooops./ forgot oneGerald Carter2002-01-021-1/+1
|
* Actually enforce the passdb API.Andrew Bartlett2002-01-021-48/+55
| | | | | | | | | | | | | | | | | | | | | | | | | | Thou shalt not reference SAM_ACCOUNT members directly - always use pdb_get/pdb_set. This is achived by making the whole of SAM_ACCOUNT have a .private member, where the real members live. This caught a pile of examples, and these have beeen fixed. The pdb_get..() functions are 'const' (have been for some time) and this required a few small changes to constify other functions. I've also added some debugs to the pdb get and set, they can be removed if requested. I've rewritten the copy_id2x_to_sam_pass() functions to use the new passdb interface, but I need the flags info to do it properly. The pdb_free_sam() funciton now blanks out the LM and NT hashes, and as such I have removed many extra 'samr_clear_sam_passwd(smbpass)' calls as a result. Finally, any and all testing is always appriciated - but the basics seem to work. Andrew Bartlett
* some merges from 2.2. Still need to merge in changes from pdb_tdb.cGerald Carter2001-12-311-0/+1
| | | | | but it will take more time as I don't want to loose any fixes that are only in HEAD.
* moving SAM_ACCOUNT to include a bit field for initializedGerald Carter2001-12-271-2/+21
| | | | | | | | | | | | | | | | | | | | members (such as uid and gid). This way we will be able to keep ourselves from writing out default smb.conf settings when the admin doesn't want to, That part is not done yet. Tested compiles with ldap/tdb/smbpasswd. Tested connection with smbpasswd backend. oh...and smbpasswd doesn'y automatically expire accounts after 21 days from the last password change either now. Just ifdef'd out that code in build_sam_account(). Will merge updates into 2.2 as they are necessary. jerry
* much better auto-init of valid_table[]. This should just about removeAndrew Tridgell2001-12-201-0/+1
| | | | the need for valid.dat
* Added some comments showing hex values of some constants.Tim Potter2001-12-201-11/+11
|
* Rafal (mimir) patch for trusts r.Jean-François Micouleau2001-12-141-0/+1
|
* update the ldap support code. it compiles.Jean-François Micouleau2001-12-131-0/+7
| | | | | | | | Ignacio you can update your howto ;-) samsync: a small patch to try chaning challenges. J.F.
generated by cgit (git 2.34.1) at 2025-09-26 18:37:20 +0000