summaryrefslogtreecommitdiffstats
path: root/source/include
Commit message (Collapse)AuthorAgeFilesLines
...
* the first independent msrpc daemon - lsarpcd.Luke Leighton1999-12-062-16/+46
| | | | | | | | | | | | | | | one horrible cut / paste job from smbd, plus a code split of shared components between the two. the job is not _yet_ complete, as i need to be able to do a become_user() call for security reasons. i picked lsarpcd first because you don't _need_ security on it (microsoft botched so badly on this one, it's not real. at least they fixed this in nt5 with restrictanonymous=0x2). fixing this involves sending the current smb and unix credentials down the unix pipe so that the daemon it eventually goes to can pick them up at the other end. i can't believe this all worked!!!
* first version of msrpc agent redirector code. client-side only.Luke Leighton1999-12-052-2/+46
|
* created create_pipe_socket() function.Luke Leighton1999-12-052-8/+10
|
* cool! created higher-order function table for agent redirection.Luke Leighton1999-12-043-0/+60
|
* jeremy is going to hate me for this.Luke Leighton1999-12-043-1/+10
| | | | | | | | | | | created an "nmb-agent" utility that, yes: it connects to the 137 socket and accepts unix socket connections which it redirects onto port 137. it uses the name_trn_id field to filter requests to the correct location. name_query() and name_status() are the first victims to use this feature (by specifying a file descriptor of -1).
* argh! you wouldn't believe what i had to do: use the mid (multiplex id)Luke Leighton1999-12-041-0/+2
| | | | | | to redirect multiple socket-based connnections onto a single client state. argh!
* starting "connection reuse" system in smb-agent. added version numberLuke Leighton1999-12-032-0/+4
| | | | which isn't actually used right now :-)
* cool! a unix socket smb redirector. code based on smbfilter andLuke Leighton1999-12-032-2/+6
| | | | | | | | ideas from ssh-agent. the intent is to be able to share smb sessions using cli_net_use_add() across multiple processes, where one process knows the target server name, user name and domain, but not the smb password.
* domain_client_validate() no longer takes serverlist, it callsLuke Leighton1999-12-021-1/+1
| | | | get_any_dc_name().
* cleaning up: removing those horrible references to server listLuke Leighton1999-12-021-10/+5
| | | | | functions (cli_net_use_addlist()). needed originally because there was no get_dc_any_name() function.
* added get_any_dc_name() function.Luke Leighton1999-12-021-1/+10
|
* need a domain resolving function, but get_trusted_serverlist() will do.Luke Leighton1999-12-021-0/+1
| | | | this is horrible.
* default SID map now reads in "trusted domains" from smb.conf.Luke Leighton1999-12-021-0/+3
|
* improved enumdomains added -i option.Luke Leighton1999-12-022-1/+4
|
* more cli_session_setup() calls. what the heck are these doing???Luke Leighton1999-12-011-0/+1
| | | | | | | they should all be replaced with cli_establish_connection(). created cli_use_wait_keyboard() which waits on multiple cli_states and swallows session keepalives.
* damn, that took a while. nt login password was being stored incorrectlyLuke Leighton1999-12-012-8/+8
| | | | in private .mac file (oops). ntlogin test now works.
* fixing joining to domain plus something weird going down with nt logins...Luke Leighton1999-12-011-4/+6
|
* improving createuser account command to be able to add workstationsLuke Leighton1999-12-012-10/+15
| | | | and then set a default random password.
* 1) when no domain used in ntlogin test command, should use default oneLuke Leighton1999-12-011-0/+1
| | | | | | | | | | | | | | from previous lsaquery command. over-ridden from DOMAIN\username 2) initialisation of cli_state is a little more specific: sets use_ntlmv2 to Auto. this can always be over-ridden. 3) fixed reusage of ntlmssp_cli_flgs which was being a pain 4) added pwd_compare() function then fixed bug in cli_use where NULL domain name was making connections multiply unfruitfully 5) type-casting of mallocs and Reallocs that cause ansi-c compilers to bitch
* sys_select added one more argument (read, write selectors).Luke Leighton1999-12-013-83/+120
|
* bug-fixLuke Leighton1999-11-291-1/+1
|
* this is going to sound _really_ weird, ok, but i had to implementLuke Leighton1999-11-291-2/+15
| | | | equivalents of NetUseAdd and NetUseDel!
* attempting to resolve the issue that multiple servers often specified inLuke Leighton1999-11-291-5/+5
| | | | parameters to connect to \PIPE\NETLOGON.
* ok. got ntlogin command working. argh, it maintains a connection toLuke Leighton1999-11-291-1/+6
| | | | | | the remote machine, because i don't know what to _do_ with it!!!! argh!!!
* first attempt at getting \PIPE\NETLOGON working. it's pretty horrible.Luke Leighton1999-11-292-42/+71
|
* well, i stuffed up the spooler commands.Luke Leighton1999-11-272-55/+41
|
* moved browser command brsinfo over to new abstracted connectionLuke Leighton1999-11-271-9/+6
|
* this one's a handle-based one (missed in the first round).Luke Leighton1999-11-271-5/+5
|
* removed do_ prefix from srvsvc APILuke Leighton1999-11-271-7/+8
|
* updated \PIPE\wkssvc commands to use new abstracted connection system.Luke Leighton1999-11-271-2/+1
| | | | | modified resolve_srv_name() to return dest host of *SMBSERVER if server name is \\ip.add.ress.format
* using "abstracted" cli_connection, got \PIPE\srvsvc commands up and runningLuke Leighton1999-11-271-16/+10
| | | | again.
* further abstraction involving client states. main client-side codeLuke Leighton1999-11-273-20/+33
| | | | | is pretty much independent of SMB client states, which will make it easier to add other transports.
* enhanced samuser command to do same thing as enumusers command (-g -u -a)Luke Leighton1999-11-271-2/+21
| | | | except with only one user. done by sharing same code.
* bug-fixing registry commands and the rpcclient "rpcclient" command.Luke Leighton1999-11-271-0/+1
| | | | | | | | | | | | the rpcclient "rpcclient" command allows user options to be reset (e.g the username / password) _without_ terminating rpcclient. try this: rpcclient -S srv1 -U% -l log srv1$ rpcclient -S srv2 srv2$ :-)
* whoa. _major_ restructure of rpcclient. fixed some buuugs, created a few.Luke Leighton1999-11-263-28/+21
| | | | | | found out that getopt() _must_ have optind set to 0 before reuse. still haven't decided what to do with the net* api yet...
* previous commit added an abstraction function that didn't even haveLuke Leighton1999-11-251-2/+2
| | | | | struct cli_state, uint16 fnum into the code: rpc_hnd_api_req(). modified cli_lsarpc.c to use this. the rest is const issues.
* cool! completed a samr* API that _would_ look like an msdn samr* api...Luke Leighton1999-11-251-106/+67
| | | | | | if microsoft bothered to publish it. actually, there are good reasons for not publishing it: people might write programs for it, and then those programs wouldn't work on nt5, for example...
* registry API moved over to new format. reg_connect() is the top-levelLuke Leighton1999-11-241-22/+25
| | | | | | function, which takes \\server_name. tested a _few_ functions. found that regcreatekey receives a Fault PDU.
* service control manager API completed. svcenum -i works, but does notLuke Leighton1999-11-241-21/+13
| | | | do so twice. possible memory corruption, revolving around getopt().
* ok. *whew*. this is the first completed part of the restructure.Luke Leighton1999-11-242-6/+17
| | | | | | | | | | | | verified that lsaquery, lsalookupsids work, and found some bugs in the parameters of these commands :-) soo... we now have an lsa_* api that has the same arguments as the nt Lsa* api! cool! the only significant coding difference is the introduction of a user_credentials structure, containing user, domain, pass and ntlmssp flags.
* first stages of removing struct cli_state* and uint16 fnum from allLuke Leighton1999-11-241-23/+29
| | | | | | | | | msrpc client code. the intent is to hide / abstract / associate connection info behind policy handles. this makes the msrpc functions look more and more like their nt equivalents. who-hou!
* WARNING! MOVED rpc_server/srv_lsa_hnd.c TO lib/util_hnd.cLuke Leighton1999-11-241-17/+17
| | | | | | CVS UPDATE MAY ISSUE WARNING ABOUT lib/util_hnd.c MODIFICATION DATE BEING IN THE FUTURE. CVS CHECKOUT A NEW REPOSITORY MAY BE SAFER.
* rewrote policy handle code to be generic (it's needed for client-side too)Luke Leighton1999-11-243-13/+22
| | | | attempted to fix regsetsec command
* attempted a svcset command. password is encrypted / messed up, thereforeLuke Leighton1999-11-232-44/+68
| | | | command fails.
* oops!!!! wrong command!!!Luke Leighton1999-11-231-2/+8
|
* adding svcctl 0x1b functionLuke Leighton1999-11-232-6/+53
|
* okay :) all cmd_() functions now take int argc, char **argv :) thatLuke Leighton1999-11-221-61/+61
| | | | | | | | | | | | means that some commands need more work, as they still use next_token(), the use of which i wish to avoid. plus, i was getting fed up of the poor command-line processing in some of these commands. i'm starting to need getopt() in them, especially in samsetuser. WARNING: only cmd_samr has been modded to use getopt() so far! reg commands won't work, esp.
* implement server-side generation of NTLMv2 session key. YESSS :-)Luke Leighton1999-11-211-2/+9
|
* you know what? this sort of thing makes me laugh. hmm, what functionsLuke Leighton1999-11-212-1/+4
| | | | | | | | | | | | | | | | | | | | have we got. and what data do we have. hmm.. i wonder what the NTLMv2 user session key can be... hmmm... weell.... there's some hidden data here, generated from the user password that doesn't go over-the-wire, so that's _got_ to be involved. and... that bit of data took a lot of computation to produce, so it's probably _also_ involved... and md4 no, md5? no, how about hmac_md5 yes let's try that one (the other's didn't work) oh goodie, it worked! i love it when this sort of thing happens. took all of fifteen minutes to guess it. tried concatenating client and server challenges. tried concatenating _random_ bits of client and server challenges. tried md5 of the above. tried hmac_md5 of the above. eventually, it boils down to this: kr = MD4(NT#,username,domainname) hmacntchal=hmac_md5(kr, nt server challenge) sess_key = hmac_md5(kr, hmacntchal);
* hmmm... have to add client-side support in domain_client_validate() toLuke Leighton1999-11-211-2/+3
| | | | _use_ user session key.
generated by cgit (git 2.34.1) at 2025-09-27 16:09:28 +0000