summaryrefslogtreecommitdiffstats
path: root/source/include
Commit message (Collapse)AuthorAgeFilesLines
...
* check for gssapi_generic.hAndrew Tridgell2001-12-082-0/+8
|
* added internal sasl/gssapi code. This means we are no longer dependent on ↵Andrew Tridgell2001-12-083-7/+9
| | | | cyrus-sasl which makes the code much less fragile. Also added code to auto-determine the server name or realm
* allow a MAX_DEBUG_LEVEL setting in local.h (or the Makefile)Andrew Tridgell2001-12-062-6/+21
| | | | | | This allows embedded systems to compile out the higher debug levels. It should gain speed as well as reducing the code size. Setting it to 1 saves about 300k of code on my system.
* OK. Smbpasswd -j is DEAD.Andrew Bartlett2001-12-051-0/+6
| | | | | | | | | | | | | | | | | | | This moves the rest of the functionality into the 'net rpc join' code. Futhermore, this moves that entire area over to the libsmb codebase, rather than the crufty old rpc_client stuff. I have also fixed up the smbpasswd -a -m bug in the process. We also have a new 'net rpc changetrustpw' that can be called from a cron-job to regularly change the trust account password, for sites that run winbind but not smbd. With a little more work, we can kill rpc_client from smbd entirly! (It is mostly the domain auth stuff - which I can rework - and the spoolss stuff that sombody else will need to look over). Andrew Bartlett
* added a REALLY gross hack into kerberos_kinit_password so thatAndrew Tridgell2001-12-051-0/+1
| | | | | | winbindd can do a kinit this will be removed once we have code that gets a tgt and puts it in a place where cyrus-sasl can see it
* added timeouts and retries to ldap operationsAndrew Tridgell2001-12-051-0/+7
|
* added a boolean to the group mapping functions to specify if we need orJean-François Micouleau2001-12-041-0/+3
| | | | | | | | | | | | | | | | | | | | | not the privileges. Usually we don't need them, so the memory is free early. lib/util_sid.c: added some helper functions to check an SID. passdb/passdb.c: renamed local_lookup_rid() to local_lookup_sid() and pass an RID all the way. If the group doesn't exist on the domain SID, don't return a faked one as it can collide with a builtin one. Some rpc structures have been badly designed, they return only rids and force the client to do subsequent lsa_lookup_sid() on the domain sid and the builtin sid ! rpc_server/srv_util.c: wrote a new version of get_domain_user_groups(). Only the samr code uses it atm. It uses the group mapping code instead of a bloody hard coded crap. The netlogon code will use it too, but I have to do some test first. J.F.
* added a tdb to store the account policy informations.Jean-François Micouleau2001-12-032-4/+15
| | | | | | | | | | | | | | You can change them with either usermanager->policies->account or from a command prompt on NT/W2K: net accounts /domain we can add a rpc accounts to the net command. As the net_rpc.c is still empty, I did not start. How should I add command to it ? Should I take the rpcclient/cmd_xxx functions and call them from there ? alse changed the SAM_UNK_INFO_3 parser, it's an NTTIME. This one is more for jeremy ;-) J.F.
* added another ATYPE_Andrew Tridgell2001-12-031-1/+2
|
* added a basic ADS backend to winbind. More work needed, but atAndrew Tridgell2001-12-031-0/+3
| | | | least basic operations work
* Writing decimal constants as "02" has been shown to cause cancer inMartin Pool2001-12-031-3/+3
| | | | rats.
* The beginnings of alternative backends for winbinddAndrew Tridgell2001-12-011-1/+1
| | | | | | This just splits off the dispinfo call behind a methods structure. I'll split off a few more functions soon, then we will be ready for LDAP replacement methods
* XFS quota patch for Linux.Jeremy Allison2001-11-301-1/+4
| | | | Jeremy.
* Renamed sid field in SEC_ACE to trustee to be more in line with MS'sTim Potter2001-11-301-1/+1
| | | | definitions.
* Comment deconfusification.Tim Potter2001-11-301-1/+1
|
* Changed again how the privilege list is handled in the group mapping code.Jean-François Micouleau2001-11-292-1/+51
| | | | | | | | | | | | | | | | This time it's a PRIVILEGE_SET struct instead of a simple uint32 array. It makes much more sense. Also added a uint32 systemaccount to the GROUP_MAP struct as some privilege showing in USRMGR.EXE are not real privs but a bitmask flag. I guess it's an heritage from NT 3.0 ! I could setup an NT 3.1 box to verify, but I'm too lazy (yes I still have my CDs). Added 3 more LSA calls: SetSystemAccount, AddPrivileges and RemovePrivileges, we can manage all this privilege from UserManager. Time to change the NT_USER_TOKEN struct and add checks in all the rpc functions. Fun, fun, fun. J.F.
* merge from APPLIANCE_HEADGerald Carter2001-11-281-0/+2
|
* added samr_set_domain_info and samr_unknown_2E.Jean-François Micouleau2001-11-281-30/+27
| | | | | | | | | | | | | | We now get the full account policy window in usermanager, and the framework to store all those values. I plan to add a TDB file to store them. oh, and found that the last value in a sam_unknown_info_12_inf struct is an uint16 and not a uint32. andrewb: you hardcoded the MAX_PASSWORD_AGE to 21 days. We can now turn it to a value setable in usermanager. J.F.
* added test for krb5.hAndrew Tridgell2001-11-272-1/+11
| | | | | this was causing the kerberos stuff to fail compilation on several platforms
* Added PRINTER_ALREADY_EXISTS error check from Gerry.Jeremy Allison2001-11-271-0/+2
| | | | Jeremy
* sigh.Andrew Tridgell2001-11-271-2/+2
| | | | some systems have libkrb5 but not krb5.h
* prevent a memory leak of cli structuresAndrew Tridgell2001-11-271-0/+4
|
* challange -> challengeTim Potter2001-11-261-3/+3
|
* Fixed compiler warning.Tim Potter2001-11-251-1/+1
| | | | | | | | Why do people keep adding stuff to includes.h (OK I am guilty of this too)? It's getting really huge and full of random junk. )-: I've noticed TNG have started to split stuff up in to individual header files included as needed.
* added 'security=ADS'Andrew Tridgell2001-11-251-1/+1
|
* added HAVE_LDAP_H checkAndrew Tridgell2001-11-251-2/+2
|
* check for liblber separatelyAndrew Tridgell2001-11-251-0/+1
|
* oops, I forgot to include the header fileAndrew Bartlett2001-11-251-0/+2
|
* added "net join" commandAndrew Tridgell2001-11-242-0/+13
| | | | this completes the first stage of the smbd ADS support
* This is another rather major change to the samba authenticaionAndrew Bartlett2001-11-241-6/+48
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | subystem. The particular aim is to modularized the interface - so that we can have arbitrary password back-ends. This code adds one such back-end, a 'winbind' module to authenticate against the winbind_auth_crap functionality. While fully-functional this code is mainly useful as a demonstration, because we don't get back the info3 as we would for direct ntdomain authentication. This commit introduced the new 'auth methods' parameter, in the spirit of the 'auth order' discussed on the lists. It is renamed because not all the methods may be consulted, even if previous methods fail - they may not have a suitable challenge for example. Also, we have a 'local' authentication method, for old-style 'unix if plaintext, sam if encrypted' authentication and a 'guest' module to handle guest logins in a single place. While this current design is not ideal, I feel that it does provide a better infrastructure than the current design, and can be built upon. The following parameters have changed: - use rhosts = This has been replaced by the 'rhosts' authentication method, and can be specified like 'auth methods = guest rhosts' - hosts equiv = This needs both this parameter and an 'auth methods' entry to be effective. (auth methods = guest hostsequiv ....) - plaintext to smbpasswd = This is replaced by specifying 'sam' rather than 'local' in the auth methods. The security = parameter is unchanged, and now provides defaults for the 'auth methods' parameter. The available auth methods are: guest rhosts hostsequiv sam (passdb direct hash access) unix (PAM, crypt() etc) local (the combination of the above, based on encryption) smbserver (old security=server) ntdomain (old security=domain) winbind (use winbind to cache DC connections) Assistance in testing, or the production of new and interesting authentication modules is always appreciated. Andrew Bartlett
* added lsaenumprivsaccount and lsalookupprivvalue to rpcclientJean-François Micouleau2001-11-241-0/+13
| | | | | | and more to come ... J.F.
* Changed how the privileges are stored in the group mapping code. It's nowJean-François Micouleau2001-11-231-12/+14
| | | | | | | | | | | | | | | | | | | | an array of uint32. That's not perfect but that's better. Added more privileges too. Changed the local_lookup_rid/name functions in passdb.c to check if the group is mapped. Makes the LSA rpc calls return correct groups Corrected the return code in the LSA server code enum_sids. Only enumerate well known aliases if they are mapped to real unix groups. Won't confuse user seeing groups not available. Added a short/long view to smbgroupedit. now decoding rpc calls to add/remove privileges to sid. J.F.
* Finally worked out why a enumerate trusted domains was returning aTim Potter2001-11-231-1/+20
| | | | | | | | | | NT_STATUS_UNABLE_TO_FREE_VM error. This error code was mis-defined as 0x8000001a instead of 0xc000001a. The former is actually a NT_STATUS_NO_MORE_ENTRIES warning which is what we see in the status code. Removed the & 0xffffff from the loop in get_nt_error_msg() as all the error constants now have the correct high bits set.
* Added constants and error message for dos error code 1326 (logon failure).Tim Potter2001-11-231-0/+1
|
* Reference about SIDs from tpot.Martin Pool2001-11-231-7/+13
|
* added lsa_enum_sids to rpcclientJean-François Micouleau2001-11-221-1/+1
| | | | | | | fixed lsa_enum_rpivs server code. This time it works as W2K. fixed smbgroupedit to compile and work. J.F.
* sync up with 2.2Gerald Carter2001-11-221-0/+9
|
* merge from 2.2Gerald Carter2001-11-222-8/+65
|
* --with-msdfs wsa removedGerald Carter2001-11-221-1/+0
|
* Made a libsmbclient doxygen group and moved all the libsmbclient groupsTim Potter2001-11-221-13/+21
| | | | under it.
* samr_querydom_info level 1: found the meaning of the unknow fields. AndJean-François Micouleau2001-11-211-4/+48
| | | | | | | | | | | discovered that our reply is short by 4 bytes since day 1 of this code. Added a decode function to rpcclient too. splitted the STRING2 fields filling while trying to understand the win9x userlist bug. (didn't fix the bug, but the reply looks closer to NT). J.F.
* Fix up libsmbclient in head.Richard Sharpe2001-11-211-93/+96
| | | | | Apply the patches from Tom Jansen, get rid of fprintfs and change them to DEBUGs, etc ...
* forgot this fileAndrew Tridgell2001-11-201-0/+29
|
* added the beginnings of ADS support in smbdAndrew Tridgell2001-11-202-0/+35
|
* added ANS1 integer defineAndrew Tridgell2001-11-201-0/+1
|
* Move all other paths into dynconfigMartin Pool2001-11-191-0/+3
|
* Fix obvious typo.Martin Pool2001-11-191-1/+1
|
* Detect libreadline>=4.0, and set HAVE_NEW_LIBREADLINE. At the momentMartin Pool2001-11-191-1/+4
| | | | | this is only to get the cast right, but it might help with other parts of the API that changed later.
* dyn_LOCKDIR should be const because it's never modified directly --Martin Pool2001-11-191-1/+2
| | | | | it's just copied in to the parameter table and optionally overridden there.
* LIBDIR and LOCKDIR are dynamically configured too.Martin Pool2001-11-192-5/+1
|
generated by cgit (git 2.34.1) at 2025-09-29 19:22:21 +0000