summaryrefslogtreecommitdiffstats
path: root/source/include
Commit message (Collapse)AuthorAgeFilesLines
...
| * added "net join" commandAndrew Tridgell2001-11-242-0/+13
| | | | | | | | this completes the first stage of the smbd ADS support
| * This is another rather major change to the samba authenticaionAndrew Bartlett2001-11-241-6/+48
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | subystem. The particular aim is to modularized the interface - so that we can have arbitrary password back-ends. This code adds one such back-end, a 'winbind' module to authenticate against the winbind_auth_crap functionality. While fully-functional this code is mainly useful as a demonstration, because we don't get back the info3 as we would for direct ntdomain authentication. This commit introduced the new 'auth methods' parameter, in the spirit of the 'auth order' discussed on the lists. It is renamed because not all the methods may be consulted, even if previous methods fail - they may not have a suitable challenge for example. Also, we have a 'local' authentication method, for old-style 'unix if plaintext, sam if encrypted' authentication and a 'guest' module to handle guest logins in a single place. While this current design is not ideal, I feel that it does provide a better infrastructure than the current design, and can be built upon. The following parameters have changed: - use rhosts = This has been replaced by the 'rhosts' authentication method, and can be specified like 'auth methods = guest rhosts' - hosts equiv = This needs both this parameter and an 'auth methods' entry to be effective. (auth methods = guest hostsequiv ....) - plaintext to smbpasswd = This is replaced by specifying 'sam' rather than 'local' in the auth methods. The security = parameter is unchanged, and now provides defaults for the 'auth methods' parameter. The available auth methods are: guest rhosts hostsequiv sam (passdb direct hash access) unix (PAM, crypt() etc) local (the combination of the above, based on encryption) smbserver (old security=server) ntdomain (old security=domain) winbind (use winbind to cache DC connections) Assistance in testing, or the production of new and interesting authentication modules is always appreciated. Andrew Bartlett
| * added lsaenumprivsaccount and lsalookupprivvalue to rpcclientJean-François Micouleau2001-11-241-0/+13
| | | | | | | | | | | | and more to come ... J.F.
| * Changed how the privileges are stored in the group mapping code. It's nowJean-François Micouleau2001-11-231-12/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | an array of uint32. That's not perfect but that's better. Added more privileges too. Changed the local_lookup_rid/name functions in passdb.c to check if the group is mapped. Makes the LSA rpc calls return correct groups Corrected the return code in the LSA server code enum_sids. Only enumerate well known aliases if they are mapped to real unix groups. Won't confuse user seeing groups not available. Added a short/long view to smbgroupedit. now decoding rpc calls to add/remove privileges to sid. J.F.
| * Finally worked out why a enumerate trusted domains was returning aTim Potter2001-11-231-1/+20
| | | | | | | | | | | | | | | | | | | | NT_STATUS_UNABLE_TO_FREE_VM error. This error code was mis-defined as 0x8000001a instead of 0xc000001a. The former is actually a NT_STATUS_NO_MORE_ENTRIES warning which is what we see in the status code. Removed the & 0xffffff from the loop in get_nt_error_msg() as all the error constants now have the correct high bits set.
| * Added constants and error message for dos error code 1326 (logon failure).Tim Potter2001-11-231-0/+1
| |
| * Reference about SIDs from tpot.Martin Pool2001-11-231-7/+13
| |
| * added lsa_enum_sids to rpcclientJean-François Micouleau2001-11-221-1/+1
| | | | | | | | | | | | | | fixed lsa_enum_rpivs server code. This time it works as W2K. fixed smbgroupedit to compile and work. J.F.
| * sync up with 2.2Gerald Carter2001-11-221-0/+9
| |
| * merge from 2.2Gerald Carter2001-11-222-8/+65
| |
| * --with-msdfs wsa removedGerald Carter2001-11-221-1/+0
| |
| * Made a libsmbclient doxygen group and moved all the libsmbclient groupsTim Potter2001-11-221-13/+21
| | | | | | | | under it.
| * samr_querydom_info level 1: found the meaning of the unknow fields. AndJean-François Micouleau2001-11-211-4/+48
| | | | | | | | | | | | | | | | | | | | | | discovered that our reply is short by 4 bytes since day 1 of this code. Added a decode function to rpcclient too. splitted the STRING2 fields filling while trying to understand the win9x userlist bug. (didn't fix the bug, but the reply looks closer to NT). J.F.
| * Fix up libsmbclient in head.Richard Sharpe2001-11-211-93/+96
| | | | | | | | | | Apply the patches from Tom Jansen, get rid of fprintfs and change them to DEBUGs, etc ...
| * forgot this fileAndrew Tridgell2001-11-201-0/+29
| |
| * added the beginnings of ADS support in smbdAndrew Tridgell2001-11-202-0/+35
| |
| * added ANS1 integer defineAndrew Tridgell2001-11-201-0/+1
| |
| * Move all other paths into dynconfigMartin Pool2001-11-191-0/+3
| |
| * Fix obvious typo.Martin Pool2001-11-191-1/+1
| |
| * Detect libreadline>=4.0, and set HAVE_NEW_LIBREADLINE. At the momentMartin Pool2001-11-191-1/+4
| | | | | | | | | | this is only to get the cast right, but it might help with other parts of the API that changed later.
| * dyn_LOCKDIR should be const because it's never modified directly --Martin Pool2001-11-191-1/+2
| | | | | | | | | | it's just copied in to the parameter table and optionally overridden there.
| * LIBDIR and LOCKDIR are dynamically configured too.Martin Pool2001-11-192-5/+1
| |
| * LMHOSTSFILE is now dynamically configured too.Martin Pool2001-11-191-1/+1
| |
| * Store some path names in global variables initialized to configureMartin Pool2001-11-192-0/+32
| | | | | | | | default, rather than in preprocessor macros.
| * I *love* removing code :-). Removed 4 files that weren't being used.Jeremy Allison2001-11-161-0/+1
| | | | | | | | | | | | All this stuff was being pulled in due to *one* unneeded call to fetch a domain SID which smbpasswd already puts in the database... Jeremy.
| * Tidyups and things I discovered during the merge...Jeremy Allison2001-11-151-1/+1
| | | | | | | | Jeremy.
| * more Win2k RPC opnums (EnumPrinterKey() and DeletePrinterDriverEx())Gerald Carter2001-11-151-0/+2
| |
| * SETPRINTERDATAEX is 0x4d (not 0x50). My mistake.Gerald Carter2001-11-151-1/+1
| |
| * Fix compile on RedHat 7.2 systems with broken system headers.Jeremy Allison2001-11-141-3/+1
| | | | | | | | Jeremy.
| * verified two new win2k rpc's EnumPrinterDataEx() and DeletePrinterdataEx()Gerald Carter2001-11-131-6/+3
| |
| * Fix typo.Martin Pool2001-11-131-2/+0
| |
| * new Win2k spoolss rpc opnum (unknown right now).Gerald Carter2001-11-131-0/+6
| |
| * Fixed allocation bug in database prog. Some format fixes.Jeremy Allison2001-11-122-0/+4
| | | | | | | | Jeremy.
| * Fixed a few typos and added the opnum for ADDPRINTERDRIVEREX to theGerald Carter2001-11-091-1/+8
| | | | | | | | rpc_spoolss.h header file.
| * Fixup __LPID -> _LPID.Jeremy Allison2001-11-091-1/+1
| | | | | | | | Jeremy.
| * Added more define bits. Fixed error in vol attributes.Jeremy Allison2001-11-081-3/+6
| | | | | | | | Jeremy.
| * Wrote some stubs for new win2k only spoolss rpc commands:Tim Potter2001-11-051-1/+40
| | | | | | | | | | GetPrinterDataEx() and SetPrinterDataEx(). Not sure what the command number is for the latter is - I haven't seen it on the wire yet.
| * Fix for broken-as-shipped RedHat 7.2 system headers. Now we haveJeremy Allison2001-11-041-0/+12
| | | | | | | | | | to detect this in configure. Jeremy.
| * a big one:Simo Sorce2001-11-042-0/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - old mangle code has gone, the new one based on tdb seem resonably ok probably the valid.dat table need to be updated to treat wild chars as invalid ones (work ok without it) - a LOT of new string manipulation function for unicode, they are somewhat tested but a review would not be bad - some new function I will need for the new unix_convert function I'm writing, this will be renamed filename_convert and use only unicode strings. - charconv, I attached a comment, if someone wnat to look if I'm right or just was hacking to late in the night to make a sane one :) of course any bug is my responsibility an will be pleased to see patches if you find any. :-) Simo.
| * Added NT_USER_TOKEN into server_info to fix extra groups problem.Jeremy Allison2001-11-032-3/+5
| | | | | | | | | | Got "medieval on our ass" about const warnings (as many as I could :-). Jeremy.
| * Added many more defines in service category, user category and othersSteve French2001-11-031-0/+26
| |
| * This is a farily large patch (3300 lines) and reworks most of the AuthRewriteAndrew Bartlett2001-10-312-33/+24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | code. In particular this assists tpot in some of his work, becouse it provides the connection between the authenticaion and the vuid generation. Major Changes: - Fully malloc'ed structures. - Massive rework of the code so that all structures are made and destroyed using malloc and free, rather than hanging around on the stack. - SAM_ACCOUNT unix uids and gids are now pointers to the same, to allow them to be declared 'invalid' without the chance that people might get ROOT by default. - kill off some of the "DOMAIN\user" lookups. These can be readded at a more appropriate place (probably domain_client_validate.c) in the future. They don't belong in session setups. - Massive introduction of DATA_BLOB structures, particularly for passwords. - Use NTLMSSP flags to tell the backend what its getting, rather than magic lenghths. - Fix winbind back up again, but tpot is redoing this soon anyway. - Abstract much of the work in srv_netlog_nt back into auth helper functions. This is a LARGE change, and any assistance is testing it is appriciated. Domain logons are still broken (as far as I can tell) but other functionality seems intact. Needs testing with a wide variety of MS clients. Andrew Bartlett
| * Added some extra fields to the auth_serversupplied_info structure.Tim Potter2001-10-311-0/+5
| | | | | | | | | | | | | | | | | | To obtain the full group membership of a user (i.e nested groups on a win2k native mode server) it is necessary to merge this list of groups with the groups returned by winbindd when creating an nt access token. This breaks winbindd linking while AB and I sync up our changes to the authentication subsystem.
| * Fix up smbpasswd -e/-d so that it doesn't change the password under you anyAndrew Bartlett2001-10-301-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | more. (Previously it set them to 'XXXX' or similar when only the flags were being changed - a bug I must have introduced when I reworked the passdb end of things a few weeks back.) Adds a new local flag: LOCAL_SET_PASSWORD to specify that the password is actually to be changed. Andrew Bartlett
| * This commit is number 2 of 4.Andrew Bartlett2001-10-291-7/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In particular this commit focuses on: The guts of the moving about inside passdb. While these changes have been mildly tested, and are pretty small, any assistance in this is appreciated. ---- These changes allow for the introduction of a large dose of 'const' to the Samba tree. There are a number of good reasons to do this: - I want to allow the SAM_ACCOUNT structure to move from wasteful pstrings and fstrings to allocated strings. We can't do that if people are modifying these outputs, as they may well make assumptions about getting pstrings and fstrings - I want --with-pam_smbpass to compile with a slightly sane volume of warnings, currently its pretty bad, even in 2.2 where is compiles at all. - Tridge assures me that he no longer opposes 'const religion' based on the ability to #define const the problem away. - Changed Get_Pwnam(x,y) into two variants (so that the const parameter can work correctly): - Get_Pwnam(const x) and Get_Pwnam_Modify(x). - Reworked smbd/chgpasswd.c to work with these mods, passing around a 'struct passwd' rather than the modified username passdb/ - Kill off disp_info stuff, it isn't used any more - Kill off support for writing to the old smbpasswd format, it isn't relevent to Samba 3.0 - Move around and modify the pdb_...() helper functions, adding one that sets the last changed time to 'now' and that sets the must change time appropriately. - Remove the ugly forced update of the LCT- value in pdb_smbpasswd. - Remove the implicit modification of the ACB flags when both NT and LM passwords are set. - Removed substation in pdb_getsampwnam output, as a single password change will render them inoperable in any case (they will be substituted and stored) - Added a default RID to the init_sam_from_pw() function, based on our rid algorithm. - Added checks that an smbpasswd stored user has a uid-based RID. - Fail to store tdb based users without a RID lib/ - Change the substituion code to use global_myname if there is no connection (and therefore no called name) at the present time.
| * Add popt for parsing commandline optionsJim McDonough2001-10-232-1/+6
| |
| * a quick fix to get rpcclient working again. This just disablesAndrew Tridgell2001-10-221-0/+1
| | | | | | | | | | | | | | NTLMSSP in cli_establish_connection() What we really need to do is kill off the pwd_cache code. It is horrible, and assumes the challenge comes in the negprot reply.
| * - fixed link order of krb5 libsAndrew Tridgell2001-10-221-6/+0
| | | | | | | | - accept a wide range of principal names in session setup
| * Converted a bunch of 0x85 constants to SMBkeepalive.Tim Potter2001-10-201-0/+1
| |
| * Move from timestamp to gen count file id's for finding oplocked filesJeremy Allison2001-10-201-20/+23
| | | | | | | | | | in a tdb. Jeremy.
generated by cgit (git 2.34.1) at 2025-09-27 22:58:36 +0000