summaryrefslogtreecommitdiffstats
path: root/source/include
Commit message (Collapse)AuthorAgeFilesLines
...
* adding some samr parsing calls (group / alias adding / deleting)Luke Leighton1998-12-012-62/+71
| | | | added code that moves MACHINE.SID to DOMAIN_NAME.SID if it exists.
* moving rpc/rpc.h to after netinet.hLuke Leighton1998-11-301-5/+5
|
* - adding builtin[alias]db.Luke Leighton1998-11-302-1/+31
| | | | | | | | | | | | | | | | | | | | | | | | | | - lib/sids.c: generate_sam_sid() modified to take a domain name: it now generates "DOMAIN_NAME.SID". reasons: 1) if you run multiple samba servers on the same machine under different netbios names as members of a domain, they won't all use the same SID, which is a _big_ mistake but it would happen _by default_. 2) we have (had) a problem with sid_to_string() and string_to_sid() which cause SIDs to be incorrectly read. one of the major reasons for *NOT* making this change was so as not to disrupt existing users. but as they will be anyway by this bug, we might as well go ahead. - passdb/smbpass.c: wanted to change the meaning of the name in the smbpasswd file to an "nt" name not a "unix" name. this is probably not a good idea: reverted this. - output formatting / bug-fixing in rpcclient query_useraliases code.
* weekend work. user / group database API.Luke Leighton1998-11-295-204/+529
| | | | | | | | | | | | | | | | | | | | | | | | | | | | - split sam_passwd and smb_passwd into separate higher-order function tables - renamed struct smb_passwd's "smb_user" to "unix_user". added "nt_user" plus user_rid, and added a "wrap" function in both sam_passwd and smb_passwd password databases to fill in the blank entries that are not obtained from whatever password database API instance is being used. NOTE: whenever a struct smb_passwd or struct sam_passwd is used, it MUST be initialised with pwdb_sam_init() or pwd_smb_init(), see chgpasswd.c for the only example outside of the password database APIs i could find. - added query_useraliases code to rpcclient. - dealt with some nasty interdependencies involving non-smbd programs and the password database API. this is still not satisfactorily resolved completelely, but it's the best i can do for now. - #ifdef'd out some password database options so that people don't mistakenly set them unless they recompile to _use_ those options. lots of debugging done, it's still not finished. the unix/NT uid/gid and user-rid/group-rid issues are better, but not perfect. the "BUILTIN" domain is still missing: users cannot be added to "BUILTIN" groups yet, as we only have an "alias" db API and a "group" db API but not "builtin-alias" db API...
* removed include of net/route.h because it prevents compilation underAndrew Tridgell1998-11-291-4/+6
| | | | | | | | | SCO 3.2 (including it also requires lots of streams stuff, making it a total mess). If this causes problems on some other platform then please add a comment stating what platform and why the include is needed so we can work out how to test for it properly.
* yeehaah got users to be included in S-1-5-xxx-yyy-zzz's local groups.Luke Leighton1998-11-252-11/+11
| | | | | | now need search capability on S-1-5-20, which will need argh, a "group database API" on S-1-5-20, and the ability to add BUILTIN\Admins etc to "local group map" argh.
* fixing group database issuesLuke Leighton1998-11-252-12/+12
|
* Makefile.in: Added maintainer mode fixes.Jeremy Allison1998-11-253-22/+37
| | | | | | | | | | | | | | | | | | | | | | | | aclocal.m4: Added AC_LIBTESTFUNC. configure.in: Fixed -lsecurity -lsec problems. client.c: dos_ fixes. groupdb/aliasunix.c: Dead code removal. include/includes.h: Added default PRINTCAP_NAME. lib/genrand.c: dos_ fixes. lib/replace.c: Added strtoul. lib/system.c: dos_ fixes. lib/util.c: dos_ fixes. lib/util_sid.c: Signed/unsigned fixes. lib/util_str.c: removed bad const. locking/locking_slow.c: dos_ fixes. printing/printing.c: dos_ fixes. rpc_server/srv_samr.c: Dead code removal. rpc_server/srv_sid.c: global_myworkgroup defined with wrong size AGAIN ! smbd/dir.c: dos_ fixes. smbd/open.c: dos_ fixes. smbd/oplock.c: dos_ fixes. smbd/reply.c smbd/server.c smbd/service.c smbd/uid.c: dos_ fixes. Jeremy.
* LsaLookupNames client call (first used as lookupnames command in rpcclient).Luke Leighton1998-11-253-38/+43
|
* re-added includes for yp_prot.h and yp_clnt.hLuke Leighton1998-11-231-0/+13
|
* get rid of __wait boring warning, caused by rpc/clnt.hLuke Leighton1998-11-231-13/+4
|
* unix instance of group database APILuke Leighton1998-11-234-35/+72
|
* changed string_sub() to replace " ; and ` in the inserted string with _Andrew Tridgell1998-11-231-1/+2
| | | | use all_string_sub() if you don't want this.
* deleted some old DEBUG() code that wasn't usedAndrew Tridgell1998-11-221-14/+0
|
* acconfig.h configure configure.in include/config.h.in: Added -lsec and ↵Jeremy Allison1998-11-201-0/+8
| | | | | | | | | -lsecurity checks in a more sane way. rpc_client/cli_netlogon.c: Removed correct bits check to see if this works with an NT3.51 PDC. rpc_parse/parse_samr.c: Fixed compile warnings. Jeremy.
* Fixed stupid blunder where I renamed getpwanam to getpwnam.Jeremy Allison1998-11-201-2/+2
| | | | Jeremy.
* Makefile.in: Added passing of CPPFLAGS into Makefile.Jeremy Allison1998-11-191-2/+2
| | | | | | | | | | | | configure configure.in include/config.h.in: Fixes for AIX4.x. AIX *will not* enable large file support of *any* description unless either -D_LARGE_FILES or -D_LARGE_FILES_API are defined. I chose "-D_LARGE_FILES" as this leads to cleaner code... Also fixed bug where getpwnam was listed as getpw(a)nam in configure.in. Jeremy.
* Sync up with 2.0 code.Jeremy Allison1998-11-192-0/+2
| | | | | | Added HPUX autoconf changes. Added "gross hack" printer code. Jeremy.
* Changes to make the default prefix /usr/local/samba - as it was in 1.9.18p10.Jeremy Allison1998-11-192-34/+48
| | | | | | acconfig.h configure configure.in include/config.h.in: Fixes to DEC OSF1. libsmb/nmblib.c: Fixes to nmbd jumps in scope names. Jeremy.
* Added OSF1 changes to HEAD (-lsecurity etc.)Jeremy Allison1998-11-182-0/+16
| | | | | | groupdb/groupdb.c: Fixed compile error caught by IRIX compiler. utils/smbpasswd.c: Fixed SunOS optind, optarg problem. Jeremy.
* Fixed problem with HAVE_NETGROUP being used on platformsJeremy Allison1998-11-182-1/+10
| | | | | that cannot support it. Jeremy.
* Fixed NT modify timestamp issue.Jeremy Allison1998-11-171-0/+1
| | | | | | | If a client does a modify timestamp on an open file (which will do no good at all on UNIX :-) then keep the modify request pending in the files_struct and apply it at close instead. Jeremy.
* Added the same open()/fopen()/creat()/mmap() -> sys_XXX calls.Jeremy Allison1998-11-172-21/+31
| | | | | | | | | | Tidied up some of the mess (no other word for it). Still doesn't compile cleanly. There are calls with incorrect parameters that don't seem to be doing the right thing. This code still needs surgery :-(. Jeremy.
* - group database API. oops and oh dear, the threat has been carried out:Luke Leighton1998-11-175-72/+309
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the pre-alpha "domain group" etc parameters have disappeared. - interactive debug detection - re-added mem_man (andrew's memory management, detects memory corruption) - american spellings of "initialise" replaced with english spelling of "initialise". - started on "lookup_name()" and "lookup_sid()" functions. proper ones. - moved lots of functions around. created some modules of commonly used code. e.g the password file locking code, which is used in groupfile.c and aliasfile.c and smbpass.c - moved RID_TYPE_MASK up another bit. this is really unfortunate, but there is no other "fast" way to identify users from groups from aliases. i do not believe that this code saves us anything (the multipliers) and puts us at a disadvantage (reduces the useable rid space). the designers of NT aren't silly: if they can get away with a user- interface-speed LsaLookupNames / LsaLookupSids, then so can we. i spoke with isaac at the cifs conference, the only time for example that they do a security context check is on file create. certainly not on individual file reads / writes, which would drastically hit their performance and ours, too. - renamed myworkgroup to global_sam_name, amongst other things, when used in the rpc code. there is also a global_member_name, as we are always responsible for a SAM database, the scope of which is limited by the role of the machine (e.g if a member of a workgroup, your SAM is for _local_ logins only, and its name is the name of your server. you even still have a SID. see LsaQueryInfoPolicy, levels 3 and 5). - updated functionality of groupname.c to be able to cope with names like DOMAIN\group and SERVER\alias. used this code to be able to do aliases as well as groups. this code may actually be better off being used in username mapping, too. - created a connect to serverlist function in clientgen.c and used it in password.c - initialisation in server.c depends on the role of the server. well, it does now. - rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
* Moved PRINTCAP_NAME from smb.h to includes to allow it toJeremy Allison1998-11-172-4/+3
| | | | | be tuned per system type. Jeremy.
* Updates to handle glob.h - was causing problems on SCO 5.0.4John Terpstra1998-11-162-1/+4
|
* change ROUNDUP to SMB_ROUNDUP to prevent conflicts with system macrosAndrew Tridgell1998-11-151-1/+1
|
* - new prototypesAndrew Tridgell1998-11-141-1/+1
| | | | | - much as I hate doing it I've removed the "commit changes" button for users that don't have write access to smb.conf (Jeremy insisted)
* Removed acconfig.h configure configure.in include/config.h.in: Made ↵Jeremy Allison1998-11-142-1/+2
| | | | | | | | | smbwrapper not made by default. nmbd*: Changed all calls to namestr() to nmbd_namestr() to fix broken FreeBSD include file problem...sigh. Jeremy.
* Change to beta1.Jeremy Allison1998-11-131-1/+1
|
* Makefile.in configure configure.in include/config.h.in: Changes for DGUX and ↵Jeremy Allison1998-11-134-4/+21
| | | | | | | | | | | | | | UNIXWARE. groupdb/aliasdb.c groupdb/aliasfile.c groupdb/groupfile.c: Don't use snprinf, use slprintf. include/includes.h: Fix YP problem. include/smb.h: Fix ZERO_STRUCTP. lib/util_sock.c: Added strerror() in debugs. passdb/ldap.c: Don't use snprinf, use slprintf. rpc_client/cli_lsarpc.c rpc_client/cli_pipe.c rpc_parse/parse_sec.c rpc_server/srv_pipe.c: Don't use snprinf, use slprintf. script/installman.sh: DGUX changes. smbd/open.c smbd/oplock.c: Fixed gcc warnings. web/swat.c: Changes USER to SWAT_USER.
* reverted includes change for FreeBSD as it breaks IRIXAndrew Tridgell1998-11-131-1/+0
|
* oops - ZERO_STRUCTP() issues again...Luke Leighton1998-11-131-4/+1
|
* ZERO_STRUCTP does not check argument for NULL.Luke Leighton1998-11-131-1/+4
| | | | ZERO_STRUCTPN _does_ check argument for NULL.
* fixes for OSF1 compilationAndrew Tridgell1998-11-131-0/+1
|
* include/smb.h: Re-added zero pointer protection to ZERO_STRUCTP.Jeremy Allison1998-11-131-3/+1
| | | | | | | lib/util_sock.c: Added strerror() calls to getpeername failures (which seem to be giving IRIX trouble at the moment). rpc_parse/parse_sec.c: Changed use of ZERO_STRUCTPN to ZERO_STRUCTP which again does zero pointer protection. smbd/quotas.c: Fixed typo. Jeremy.
* security descriptorsLuke Leighton1998-11-133-20/+10
|
* Removed code that used printf/fprintf in password changin libraries.Herb Lewis1998-11-121-2/+5
| | | | Now passes strings instead.
* security descriptors.Luke Leighton1998-11-124-22/+44
| | | | kanji const char* warnings.
* .cvsignore: Removed old entries.Herb Lewis1998-11-121-0/+9
| | | | | | | | | | | | client/client.c: include/client.h: Added some debug messages that the old client used to generate. These are needed to make scripts such as 'findsmb' work - there may be other changes to keep backwards output compatibility. Do we need a -old-client-compat argument ? libsmb/clientgen.c: Fixed crash bug where malloc'ed data wasn't being cleared - corrupted malloc chains. web/swat.c: John's changes to get rid of "ghost" table entries.
* include/kanji.h include/proto.h lib/kanji.c: Added const parameters in ↵Jeremy Allison1998-11-121-4/+4
| | | | | | | string wrappers. printing/printing.c: Added OSF1 fix. Jeremy.
* jean-f. sent me some S-1-3-0,1,2,3 SIDs and names. S-1-3 doesn't exist.Luke Leighton1998-11-121-2/+3
| | | | security descriptor testing. hey wow, you can get a SD then send it back!
* cleaning up conflicts between group code not yet committed andLuke Leighton1998-11-121-6/+18
| | | | | | | changes from yesterday by me, jeremy and andrew. jeremy, your ACB_PWNOTREQ mod would have caused a crash if the user didn't exist (first check should be for smb_pass != NULL)
* security descriptors and registry.Luke Leighton1998-11-121-1/+1
|
* extracted the password change code from smbpasswd and used it in swatAndrew Tridgell1998-11-121-0/+11
| | | | instead of opening pipes and other horrible stuff.
* largely rewrote smbpasswd so that the code is understandable. ThisAndrew Tridgell1998-11-122-14/+14
| | | | | | | | | | | | | should allow us to call a function in swat rather than piping to smbpasswd. while doing this I also fixed quite a few "const char *" versus "char *" issues that cropped up while using const to track down bugs in the code. This led to changes in several generic functions. The smbpasswd changes should be correct but they have not been extensively tested. At least if I have introduced bugs then we should be able to fix them more easily than before.
* Moved some code (NTLMSSPcalc) out of smbdes and inline for paranioaJeremy Allison1998-11-121-1/+0
| | | | | resons and my own piece of mind... Jeremy.
* Added the security changes suggested by Andrew - become theJeremy Allison1998-11-121-0/+1
| | | | | user that authenticated to swat permanently (if not root). Jeremy.
* changed is_root() to am_root() to prevent clash with variable names.Andrew Tridgell1998-11-111-1/+1
|
* rpc_server/srv_netlog.c: Fixed crash bug with ACB_PWNOTREQ.Jeremy Allison1998-11-111-0/+2
| | | | | | script/makeyodldocs.sh: Added code to make text docs for non-man page YODL docs. web/cgi.c web/swat.c: SGI compiler warnings fixed. Jeremy.