summaryrefslogtreecommitdiffstats
path: root/source/include
Commit message (Collapse)AuthorAgeFilesLines
* cool! a unix socket smb redirector. code based on smbfilter andLuke Leighton1999-12-032-2/+6
| | | | | | | | ideas from ssh-agent. the intent is to be able to share smb sessions using cli_net_use_add() across multiple processes, where one process knows the target server name, user name and domain, but not the smb password.
* domain_client_validate() no longer takes serverlist, it callsLuke Leighton1999-12-021-1/+1
| | | | get_any_dc_name().
* cleaning up: removing those horrible references to server listLuke Leighton1999-12-021-10/+5
| | | | | functions (cli_net_use_addlist()). needed originally because there was no get_dc_any_name() function.
* added get_any_dc_name() function.Luke Leighton1999-12-021-1/+10
|
* need a domain resolving function, but get_trusted_serverlist() will do.Luke Leighton1999-12-021-0/+1
| | | | this is horrible.
* default SID map now reads in "trusted domains" from smb.conf.Luke Leighton1999-12-021-0/+3
|
* improved enumdomains added -i option.Luke Leighton1999-12-022-1/+4
|
* more cli_session_setup() calls. what the heck are these doing???Luke Leighton1999-12-011-0/+1
| | | | | | | they should all be replaced with cli_establish_connection(). created cli_use_wait_keyboard() which waits on multiple cli_states and swallows session keepalives.
* damn, that took a while. nt login password was being stored incorrectlyLuke Leighton1999-12-012-8/+8
| | | | in private .mac file (oops). ntlogin test now works.
* fixing joining to domain plus something weird going down with nt logins...Luke Leighton1999-12-011-4/+6
|
* improving createuser account command to be able to add workstationsLuke Leighton1999-12-012-10/+15
| | | | and then set a default random password.
* 1) when no domain used in ntlogin test command, should use default oneLuke Leighton1999-12-011-0/+1
| | | | | | | | | | | | | | from previous lsaquery command. over-ridden from DOMAIN\username 2) initialisation of cli_state is a little more specific: sets use_ntlmv2 to Auto. this can always be over-ridden. 3) fixed reusage of ntlmssp_cli_flgs which was being a pain 4) added pwd_compare() function then fixed bug in cli_use where NULL domain name was making connections multiply unfruitfully 5) type-casting of mallocs and Reallocs that cause ansi-c compilers to bitch
* sys_select added one more argument (read, write selectors).Luke Leighton1999-12-013-83/+120
|
* bug-fixLuke Leighton1999-11-291-1/+1
|
* this is going to sound _really_ weird, ok, but i had to implementLuke Leighton1999-11-291-2/+15
| | | | equivalents of NetUseAdd and NetUseDel!
* attempting to resolve the issue that multiple servers often specified inLuke Leighton1999-11-291-5/+5
| | | | parameters to connect to \PIPE\NETLOGON.
* ok. got ntlogin command working. argh, it maintains a connection toLuke Leighton1999-11-291-1/+6
| | | | | | the remote machine, because i don't know what to _do_ with it!!!! argh!!!
* first attempt at getting \PIPE\NETLOGON working. it's pretty horrible.Luke Leighton1999-11-292-42/+71
|
* well, i stuffed up the spooler commands.Luke Leighton1999-11-272-55/+41
|
* moved browser command brsinfo over to new abstracted connectionLuke Leighton1999-11-271-9/+6
|
* this one's a handle-based one (missed in the first round).Luke Leighton1999-11-271-5/+5
|
* removed do_ prefix from srvsvc APILuke Leighton1999-11-271-7/+8
|
* updated \PIPE\wkssvc commands to use new abstracted connection system.Luke Leighton1999-11-271-2/+1
| | | | | modified resolve_srv_name() to return dest host of *SMBSERVER if server name is \\ip.add.ress.format
* using "abstracted" cli_connection, got \PIPE\srvsvc commands up and runningLuke Leighton1999-11-271-16/+10
| | | | again.
* further abstraction involving client states. main client-side codeLuke Leighton1999-11-273-20/+33
| | | | | is pretty much independent of SMB client states, which will make it easier to add other transports.
* enhanced samuser command to do same thing as enumusers command (-g -u -a)Luke Leighton1999-11-271-2/+21
| | | | except with only one user. done by sharing same code.
* bug-fixing registry commands and the rpcclient "rpcclient" command.Luke Leighton1999-11-271-0/+1
| | | | | | | | | | | | the rpcclient "rpcclient" command allows user options to be reset (e.g the username / password) _without_ terminating rpcclient. try this: rpcclient -S srv1 -U% -l log srv1$ rpcclient -S srv2 srv2$ :-)
* whoa. _major_ restructure of rpcclient. fixed some buuugs, created a few.Luke Leighton1999-11-263-28/+21
| | | | | | found out that getopt() _must_ have optind set to 0 before reuse. still haven't decided what to do with the net* api yet...
* previous commit added an abstraction function that didn't even haveLuke Leighton1999-11-251-2/+2
| | | | | struct cli_state, uint16 fnum into the code: rpc_hnd_api_req(). modified cli_lsarpc.c to use this. the rest is const issues.
* cool! completed a samr* API that _would_ look like an msdn samr* api...Luke Leighton1999-11-251-106/+67
| | | | | | if microsoft bothered to publish it. actually, there are good reasons for not publishing it: people might write programs for it, and then those programs wouldn't work on nt5, for example...
* registry API moved over to new format. reg_connect() is the top-levelLuke Leighton1999-11-241-22/+25
| | | | | | function, which takes \\server_name. tested a _few_ functions. found that regcreatekey receives a Fault PDU.
* service control manager API completed. svcenum -i works, but does notLuke Leighton1999-11-241-21/+13
| | | | do so twice. possible memory corruption, revolving around getopt().
* ok. *whew*. this is the first completed part of the restructure.Luke Leighton1999-11-242-6/+17
| | | | | | | | | | | | verified that lsaquery, lsalookupsids work, and found some bugs in the parameters of these commands :-) soo... we now have an lsa_* api that has the same arguments as the nt Lsa* api! cool! the only significant coding difference is the introduction of a user_credentials structure, containing user, domain, pass and ntlmssp flags.
* first stages of removing struct cli_state* and uint16 fnum from allLuke Leighton1999-11-241-23/+29
| | | | | | | | | msrpc client code. the intent is to hide / abstract / associate connection info behind policy handles. this makes the msrpc functions look more and more like their nt equivalents. who-hou!
* WARNING! MOVED rpc_server/srv_lsa_hnd.c TO lib/util_hnd.cLuke Leighton1999-11-241-17/+17
| | | | | | CVS UPDATE MAY ISSUE WARNING ABOUT lib/util_hnd.c MODIFICATION DATE BEING IN THE FUTURE. CVS CHECKOUT A NEW REPOSITORY MAY BE SAFER.
* rewrote policy handle code to be generic (it's needed for client-side too)Luke Leighton1999-11-243-13/+22
| | | | attempted to fix regsetsec command
* attempted a svcset command. password is encrypted / messed up, thereforeLuke Leighton1999-11-232-44/+68
| | | | command fails.
* oops!!!! wrong command!!!Luke Leighton1999-11-231-2/+8
|
* adding svcctl 0x1b functionLuke Leighton1999-11-232-6/+53
|
* okay :) all cmd_() functions now take int argc, char **argv :) thatLuke Leighton1999-11-221-61/+61
| | | | | | | | | | | | means that some commands need more work, as they still use next_token(), the use of which i wish to avoid. plus, i was getting fed up of the poor command-line processing in some of these commands. i'm starting to need getopt() in them, especially in samsetuser. WARNING: only cmd_samr has been modded to use getopt() so far! reg commands won't work, esp.
* implement server-side generation of NTLMv2 session key. YESSS :-)Luke Leighton1999-11-211-2/+9
|
* you know what? this sort of thing makes me laugh. hmm, what functionsLuke Leighton1999-11-212-1/+4
| | | | | | | | | | | | | | | | | | | | have we got. and what data do we have. hmm.. i wonder what the NTLMv2 user session key can be... hmmm... weell.... there's some hidden data here, generated from the user password that doesn't go over-the-wire, so that's _got_ to be involved. and... that bit of data took a lot of computation to produce, so it's probably _also_ involved... and md4 no, md5? no, how about hmac_md5 yes let's try that one (the other's didn't work) oh goodie, it worked! i love it when this sort of thing happens. took all of fifteen minutes to guess it. tried concatenating client and server challenges. tried concatenating _random_ bits of client and server challenges. tried md5 of the above. tried hmac_md5 of the above. eventually, it boils down to this: kr = MD4(NT#,username,domainname) hmacntchal=hmac_md5(kr, nt server challenge) sess_key = hmac_md5(kr, hmacntchal);
* hmmm... have to add client-side support in domain_client_validate() toLuke Leighton1999-11-211-2/+3
| | | | _use_ user session key.
* adding user session key into network netlogon response.Luke Leighton1999-11-211-1/+4
|
* modified domain_client_validate to take trust account name / type. thisLuke Leighton1999-11-201-1/+3
| | | | | | | | | | is to pass DOMAIN_NAME$ and SEC_CHAN_DOMAIN instead of WKSTA_NAME$ and SEC_CHAN_WKSTA. modified check_domain_security to determine if domain name is own domain, and to use wksta trust account if so, otherwise check "trusting domains" parameter and use inter-domain trust account if so, otherwise return False.
* doing a code reshuffle. want to add code to establish trust relationships.Luke Leighton1999-11-201-111/+154
|
* The First Necessary UNICODE String Support.Luke Leighton1999-11-191-1/+4
| | | | | | | | | the random workstation trust account password is TOTAL garbage. i mean, complete garbage. it's nowhere CLOSE to being a UNICODE string. therefore we can't just take every second character. created nt_owf_genW() which creates NT#(password) instead of NT#(Unicode(pw)). followed through to the password setting in srv_samr.c
* - bug in nmbd registering DOMAIN_NAME<1c> to WINS server; recursionLuke Leighton1999-11-191-0/+4
| | | | | | | | desired flag MUST be set in any NBT UDP packets sent to a WINS server, else they will go to the WINS client side of the NT NetBIOS kernel instead, and will get trashed. - added \PIPE\browser server-side code.
* added \PIPE\browser plus experimental brsinfo command. you wouldn'tLuke Leighton1999-11-194-1/+105
| | | | | believe the XXXX that MIGHT be involved in getting nt5rc2 to join a samba domain...
* set "key does not exist" response to reg_query_val() (win32 status codeLuke Leighton1999-11-181-0/+1
| | | | of 0x2). [p.s. getting REALLY bored of this nt5rc2->samba domain stuff].