summaryrefslogtreecommitdiffstats
path: root/source/include
Commit message (Collapse)AuthorAgeFilesLines
...
* Progress on CR 601Gerald Carter2003-02-251-0/+45
| | | | | | | | | cache the printer_info_2 with the open printer handle. cache is invalidated on a mod_a_printer() call **on that smbd**. Yes, this means that the window for admins to step on each other from different clients just got larger, but since handles a generally short lived this is probably ok.
* Clean up non-krb5 breakages from my modifications to luke howard's patch.Andrew Bartlett2003-02-241-0/+1
| | | | Andrew Bartlett
* Patch from Luke Howard to add mutual kerberos authentication, and SMB sessionAndrew Bartlett2003-02-242-0/+12
| | | | | | keys for kerberos authentication. Andrew Bartlett
* forgot the altered include fileSimo Sorce2003-02-231-4/+4
|
* More signed/unsigned fixes (yes, I run with funny compiler options) andAndrew Bartlett2003-02-221-2/+2
| | | | | | make x_fwrite() match fwrite() in returning a size_t. Andrew Bartlett
* Make init_module() and thus smb_load_module() return an int.Jelmer Vernooij2003-02-201-1/+1
| | | | modules/developer.c: init_module() should return an int
* Correct way to keep fucntion from proto.hJim McDonough2003-02-191-1/+1
|
* Improve detection of iconv(3) for various platforms. M4 code is similar to ↵Alexander Bokovoy2003-02-191-0/+5
| | | | what I use in Midgard for past few years, modified for Samba needs.
* Move to a in-memory ccache for winbind, and replace setenv() properly.Andrew Bartlett2003-02-191-0/+4
| | | | | | | | (According to the manpages, you cannot put a stack variable into putenv()). Yes, this leaks memory. Andrew Bartlett
* Get non-krb systems to compile. How the heck do I keep something from being ↵Jim McDonough2003-02-191-1/+1
| | | | sucked into proto.h?
* Try to get heimdal working with HEAD.Jim McDonough2003-02-191-2/+3
| | | | | | | | | | | - Provide generic functions for - get valid encryption types - free encryption types - Add encryption type parm to generic function create_kerberos_key_from_string() - Try to merge the two versions (between HEAD and SAMBA_3_0) of kerberos_verify.c I think this should work for both MIT and heimdal, in HEAD. If all goes smooth, I'll move it over to 3.0 soon...
* Add the 'session key' output of the NTLMSSP exchange to the cli struct, soAndrew Bartlett2003-02-161-0/+4
| | | | | | | | | it can be used for 'net rpc join'. Also fix a bug in our server-side NTLMSSP code - a client without any domain trust links to us may calculate the NTLMv2 response with "" as the domain. Andrew Bartlett
* * set PRINTER_ATTRIBUTE_RAW_ONLY; CR 1736Gerald Carter2003-02-151-0/+4
| | | | | | | * never save a pointer to an automatic variable (they go away) implement a deep copy for SPOOLSS_NOTIFY_MSG to correct messages being sent that have junk for strings; fix in response to changes for CR 1504
* Move our NTLMSSP client code into ntlmssp.c. The intention is to provide aAndrew Bartlett2003-02-151-0/+19
| | | | | | | | | | relitivly useful external lib from this code, and to remove the dupicate NTLMSSP code elsewhere in samba (RPC pipes, LDAP client). The code I've replaced this with in cliconnect.c is relitivly ugly, and I hope to replace it with a more general SPENGO layer at some later date. Andrew Bartlett
* Remove obsolete file lib/netatalk.c - We have a VFS module nowJelmer Vernooij2003-02-151-3/+0
|
* Antti Andreimann <Antti.Andreimann@mail.ee> has done some changes to enableAndrew Bartlett2003-02-151-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | users w/o full administrative access on computer accounts to join a computer into AD domain. The patch and detailed changelog is available at: http://www.itcollege.ee/~aandreim/samba This is a list of changes in general: 1. When creating machine account do not fail if SD cannot be changed. setting SD is not mandatory and join will work perfectly without it. 2. Implement KPASSWD CHANGEPW protocol for changing trust password so machine account does not need to have reset password right for itself. 3. Command line utilities no longer interfere with user's existing kerberos ticket cache. 4. Command line utilities can do kerberos authentication even if username is specified (-U). Initial TGT will be requested in this case. I've modified the patch to share the kinit code, rather than copying it, and updated it to current CVS. The other change included in the original patch (local realms) has been left out for now. Andrew Bartlett
* Oops, forgot the header file changes.Andrew Bartlett2003-02-141-0/+1
|
* A few typo fixes Andrew eventually let off to me.Rafal Szczesniak2003-02-131-3/+3
| | | | Rafal
* added the 'lsaenumacctwithright' command to rpcclient. This allows youAndrew Tridgell2003-02-102-1/+33
| | | | | to lookup what SIDs have a particular privilege (that is how privileges are stored).
* Some cleanups:Andrew Bartlett2003-02-101-0/+2
| | | | | | | | | | | | | | | - Don't use pstrcpy into an allocated string - use safe_strcpy() directly instead. - Keep a copy of the 'server_info' attached to the vuid. In future use this for things like the session key, homedir and full name instead of current copies. - Try to avoid memory leak/segfault on Realloc failure - clear up #endif comments Andrew Bartlett
* (only for HEAD at the moment).Andrew Bartlett2003-02-091-1/+1
| | | | | | | | | | | | Add NTLMv2 support to our client, used when so configured ('client use NTLMv2 = yes') and only when 'client use spengo = no'. (A new option to allow the client and server ends to chose spnego seperatly). NTLMv2 signing doesn't yet work, and NTLMv2 is not done for NTLMSSP yet. Also some parinoia checks in our input parsing. Andrew Bartlett
* ignore config.h.in in cvs as generated by autoheaderAndrew Tridgell2003-02-061-0/+1
|
* Remove configure and config.h.in from CVS.Andrew Bartlett2003-02-061-1894/+0
| | | | | | | | | | configure and config.h.in is now regenerated by the 'autogen.sh' script. However, samba.org will run autoconf and autoheader to keep the anonyomous rsync 'unpacked' areas intact (helping the build farm), and released will ship with the genereated files. Andrew Bartlett
* added the LSA privileges server backend stubs. Right now they just logAndrew Tridgell2003-02-061-2/+0
| | | | what was requested.
* We now have client-side SMB signing support!Andrew Bartlett2003-02-011-0/+1
| | | | | | | | | | | | | | | | | | | | | | This checking allows us to connect to Microsoft servers the use SMB signing, within a few restrictions: - I've not get the NTLMSSP stuff going - it appears to work, but if you break the sig - say by writing a zero in it - it still passes... - We don't currently verfiy the server's reply - It works against one of my test servers, but not the other... However, it provides an excellent basis to work from. Enable it with 'client signing' in your smb.conf. Doc to come (tomorrow) and this is not for 3.0, till we get it complete. The CIFS Spec is misleading - the session key (for NTLMv1 at least) is the standard session key, ie MD4(NT#). Thanks to jra for the early work on this. Andrew Bartlett
* Bitmap offsets and counts are always positive.Andrew Bartlett2003-02-011-1/+1
|
* Sync up with 3.0 heimdal.Jeremy Allison2003-01-301-0/+8
| | | | Jeremy.
* Fix kerberos compile after the tpot massicre :-).Jeremy Allison2003-01-301-1006/+1115
| | | | Jeremy
* Fix for interesting resource constraint condition. When all opens areJeremy Allison2003-01-301-1/+3
| | | | | | | | | | level 2 and a request for open with no oplock is received then the smbd should send *synchronous* break messages, not asynchronous, otherwise it spins very rapidly, releasing the lock, sending the 'break to none' messages and then re-acquiring the lock before any other process has a chance to get the lock and remove it's own oplock (at least on linux). Jeremy.
* added LsaRemoveAccountRightsAndrew Tridgell2003-01-281-3/+20
| | | | | this now gives us complete remove privileges control in the client libs, so we are in good shape for starting on the server side.
* cleaned up the lsa_enum_acct_rights function and added aAndrew Tridgell2003-01-282-8/+23
| | | | | | lsa_add_acct_rights function. This allows us to add privileges remotely to accounts using rpcclient.
* Factor out common code in the NTLMSSP/SPNEGO code.Andrew Bartlett2003-01-281-0/+4
| | | | | | | | | | | | The idea here is to seperate, as much as possible, the SPNEGO layer from the NTLMSSP layer. This not only helps us with protocol correctness, but also should allow further mechinisms to be added with relitive ease. I indend to make the kerberos code use this shortly. I've never seen the 'zero length blob' form of the anonymous login, so I've removed that case. Andrew Bartlett
* Commit just a little more infrastructure for HAVE_GETDIRENTRIESRichard Sharpe2003-01-241-1/+1
|
* At the prompting, start to add infrastructure to detect the presence ofRichard Sharpe2003-01-241-0/+3
| | | | | getdirentries. We would also detect getdents if present. This has some rudimentary support already.
* Fixup proto generation to not include krb5 specific symbolsJeremy Allison2003-01-211-0/+3
| | | | | if no kerberos selected. Noticed by Metze. Jeremy.
* More fixes getting us closer to full Heimdal compile....Jeremy Allison2003-01-211-0/+6
| | | | Jeremy.
* Merge in more of the SuSE patches for Heimdal. These changes show howJeremy Allison2003-01-192-0/+21
| | | | | | to add a function without an explicit #ifdef HEIMDAL which I'm trying to avoid. Jeremy.
* Enable dynamic loading of RPC modules. See docs/textdocs/RPC_PLUGGIN.txt ↵Jim McDonough2003-01-172-1049/+999
| | | | for instructions.
* Fixed up mutex protection around winbindd logon code. Sync with APP-HEAD.Jeremy Allison2003-01-161-0/+8
| | | | Jeremy.
* Updates to the NTLMSSP code again - moving the base64 decode fuctionality outAndrew Bartlett2003-01-161-2/+4
| | | | | | | | | | | | | of the SWAT code, and adding a base64 encoder. The main purpose of this patch is to add NTLMSSP support to 'ntlm_auth', for use with Squid. Unfortunetly the squid side doesn't quite support what we need yet. Changes to winbind to get us the info we need, and a couple of consequential changes/cleanups in the rest of the code. Andrew Bartlett
* More Heimdal changes. Still not compiling with Heimdal yet...Jeremy Allison2003-01-162-0/+7
| | | | Jeremy.
* Fist part of fixes to make us compile with Heimdal. Don't explicitlyJeremy Allison2003-01-162-1/+11
| | | | | | detect for now, I still have vague hopes of hiding the differences between MIT and Heimdal with a compatibility layer.... Jeremy.
* small merges from SAMBA_3_0; mostly typos, renames, etc...Gerald Carter2003-01-151-1/+0
|
* Refactor the NTLMSSP code again - this time we use function pointers toAndrew Bartlett2003-01-152-4/+22
| | | | | | | eliminate the dependency on the auth subsystem. The next step is to add the required code to 'ntlm_auth', for export to Squid etc. Andrew Bartlett
* added cli_lsa_enum_account_rights() call. Note that this is inAndrew Tridgell2003-01-152-0/+33
| | | | | | | | | | | principal similar to the existing cli_lsa_enum_privsaccount() call, except that cli_lsa_enum_account_rights() doesn't require a call to open_account first. There is also the minor matter that cli_lsa_enum_account_rights() works whereas cli_lsa_enum_privsaccount() doesn't! this call can be used to find what privileges an account or group has. This is a first step towards proper privileges support in Samba.
* Run autoheaderMartin Pool2003-01-151-6/+0
|
* Commit my (disabled) fstring/pstring mixup detection code.Andrew Bartlett2003-01-141-0/+21
| | | | | | We need to fix some 'overmalloc' cases before it can be enabled by default. Andrew Bartlett
* Updates to our NTLMSSP code:Andrew Bartlett2003-01-133-32/+81
| | | | | | | | | | | | | | | | | | This tries to extract our server-side code out of sessetup.c, and into a more general lib. I hope this is only a temporay resting place - I indend to refactor it again into an auth-subsystem independent lib, using callbacks. Move some of our our NTLMSSP #defines into a new file, and add two that I found in the COMsource docs - we seem to have a double-up, but I've verified from traces that the NTLMSSP_TARGET_TYPE_{DOMAIN,SERVER} is real. This code also copes with ASCII clients - not that we will ever see any here, but I hope to use this for HTTP, were we can get them. Win2k authenticates fine under forced ASCII, btw. Tested with Win2k, NTLMv2 and Samba's smbclient. Andrew Bartlett
* Make the 'service' in make_connection() use an fstrcpy(), and an fstring,Andrew Bartlett2003-01-121-1/+0
| | | | | | | | | becouse that is what it's input (reply_tcon_and_x) uses, and becouse we really don't want supprises for service names. Also remove a legacy #define, in favor of the lp_ equiv. Andrew Bartlett
* Fix problem with "hide unreadable". stat file opens are baaack :-).Jeremy Allison2003-01-031-0/+1
| | | | Jeremy.
generated by cgit (git 2.34.1) at 2025-09-29 23:56:57 +0000