summaryrefslogtreecommitdiffstats
path: root/source/lib
Commit message (Collapse)AuthorAgeFilesLines
...
* OK. This code works on a RedHat 6.0 system. However smbpasswdGerald Carter1999-12-091-2/+9
| | | | | | | | | | | | | | | | | time out of sending the session setup on Solaris 2.6. No idea. I'll work on it some tomorrow. This is to fix the "Unable to setup password vectors" thingy. Also changed an inet_aton() to inet_addr() as the former is not very portable :-) Luke, I set the redir flag to false because the connection to the smb-agent was failing and smbpasswd bombed. Double check me on this one. -jc
* jerry spotted that get_domain_sids() was being called with the wrongLuke Leighton1999-12-082-13/+3
| | | | | arguments: get_any_dc_name() was being called with a server name not a domain name. oops.
* ABOUT TIME!!!!!!!!Luke Leighton1999-12-084-109/+123
| | | | | | | | | | | | | | | damn, this one is bad. started, at least two days ago, to add an authentication mechanism to the smbd<->msrpc redirector/relay, such that sufficient unix / nt information could be transferred across the unix socket to do a become_user() on the other side of the socket. it is necessary that the msrpc daemon inherit the same unix and nt credentials as the smbd process from which it was spawned, until such time as the msrpc daemon receives an authentication request of its own, whereupon the msrpc daemon is responsible for authenticating the new credentials and doing yet another become_user() etc sequence.
* the first independent msrpc daemon - lsarpcd.Luke Leighton1999-12-066-9/+547
| | | | | | | | | | | | | | | one horrible cut / paste job from smbd, plus a code split of shared components between the two. the job is not _yet_ complete, as i need to be able to do a become_user() call for security reasons. i picked lsarpcd first because you don't _need_ security on it (microsoft botched so badly on this one, it's not real. at least they fixed this in nt5 with restrictanonymous=0x2). fixing this involves sending the current smb and unix credentials down the unix pipe so that the daemon it eventually goes to can pick them up at the other end. i can't believe this all worked!!!
* first version of msrpc agent redirector code. client-side only.Luke Leighton1999-12-054-2/+902
|
* created create_pipe_socket() function.Luke Leighton1999-12-051-0/+62
|
* cool! created higher-order function table for agent redirection.Luke Leighton1999-12-041-0/+242
|
* jeremy is going to hate me for this.Luke Leighton1999-12-041-0/+32
| | | | | | | | | | | created an "nmb-agent" utility that, yes: it connects to the 137 socket and accepts unix socket connections which it redirects onto port 137. it uses the name_trn_id field to filter requests to the correct location. name_query() and name_status() are the first victims to use this feature (by specifying a file descriptor of -1).
* cleaning up: removing those horrible references to server listLuke Leighton1999-12-021-1/+1
| | | | | functions (cli_net_use_addlist()). needed originally because there was no get_dc_any_name() function.
* added get_any_dc_name() function.Luke Leighton1999-12-022-0/+15
|
* need a domain resolving function, but get_trusted_serverlist() will do.Luke Leighton1999-12-021-0/+34
| | | | this is horrible.
* default SID map now reads in "trusted domains" from smb.conf.Luke Leighton1999-12-023-21/+128
|
* sys_select added one more argument (read, write selectors).Luke Leighton1999-12-014-9/+73
|
* attempting to resolve the issue that multiple servers often specified inLuke Leighton1999-11-291-13/+0
| | | | parameters to connect to \PIPE\NETLOGON.
* ok. got ntlogin command working. argh, it maintains a connection toLuke Leighton1999-11-291-15/+42
| | | | | | the remote machine, because i don't know what to _do_ with it!!!! argh!!!
* further abstraction involving client states. main client-side codeLuke Leighton1999-11-271-30/+22
| | | | | is pretty much independent of SMB client states, which will make it easier to add other transports.
* whoa. _major_ restructure of rpcclient. fixed some buuugs, created a few.Luke Leighton1999-11-261-21/+0
| | | | | | found out that getopt() _must_ have optind set to 0 before reuse. still haven't decided what to do with the net* api yet...
* cool! completed a samr* API that _would_ look like an msdn samr* api...Luke Leighton1999-11-251-2/+8
| | | | | | if microsoft bothered to publish it. actually, there are good reasons for not publishing it: people might write programs for it, and then those programs wouldn't work on nt5, for example...
* service control manager API completed. svcenum -i works, but does notLuke Leighton1999-11-241-0/+1
| | | | do so twice. possible memory corruption, revolving around getopt().
* ok. *whew*. this is the first completed part of the restructure.Luke Leighton1999-11-242-2/+27
| | | | | | | | | | | | verified that lsaquery, lsalookupsids work, and found some bugs in the parameters of these commands :-) soo... we now have an lsa_* api that has the same arguments as the nt Lsa* api! cool! the only significant coding difference is the introduction of a user_credentials structure, containing user, domain, pass and ntlmssp flags.
* first stages of removing struct cli_state* and uint16 fnum from allLuke Leighton1999-11-242-18/+23
| | | | | | | | | msrpc client code. the intent is to hide / abstract / associate connection info behind policy handles. this makes the msrpc functions look more and more like their nt equivalents. who-hou!
* WARNING! MOVED rpc_server/srv_lsa_hnd.c TO lib/util_hnd.cLuke Leighton1999-11-241-4/+3
| | | | | | CVS UPDATE MAY ISSUE WARNING ABOUT lib/util_hnd.c MODIFICATION DATE BEING IN THE FUTURE. CVS CHECKOUT A NEW REPOSITORY MAY BE SAFER.
* rewrote policy handle code to be generic (it's needed for client-side too)Luke Leighton1999-11-241-34/+164
| | | | attempted to fix regsetsec command
* adding svcctl 0x1b functionLuke Leighton1999-11-231-0/+28
|
* implement server-side generation of NTLMv2 session key. YESSS :-)Luke Leighton1999-11-211-2/+2
|
* modified domain_client_validate to take trust account name / type. thisLuke Leighton1999-11-203-3/+37
| | | | | | | | | | is to pass DOMAIN_NAME$ and SEC_CHAN_DOMAIN instead of WKSTA_NAME$ and SEC_CHAN_WKSTA. modified check_domain_security to determine if domain name is own domain, and to use wksta trust account if so, otherwise check "trusting domains" parameter and use inter-domain trust account if so, otherwise return False.
* doing a code reshuffle. want to add code to establish trust relationships.Luke Leighton1999-11-203-252/+317
|
* set "key does not exist" response to reg_query_val() (win32 status codeLuke Leighton1999-11-181-3/+25
| | | | of 0x2). [p.s. getting REALLY bored of this nt5rc2->samba domain stuff].
* added two new params: "trusted domains" and "trusting domains".Luke Leighton1999-11-161-0/+23
| | | | | | | these _may_ not actually ever get used, as trust relationships really need to be established with shared secrets, and you need to get the SID of the trusted and trusting domains, so this may have to go in a private/xxx.mac file.
* added server-side samr enum domains. fixed some parsing issues, server-side.Luke Leighton1999-11-151-0/+11
|
* split array-handling functions into separate module.Luke Leighton1999-11-122-224/+248
|
* preparation for doing a spoolss enum jobs command. had to rewriteLuke Leighton1999-11-081-2/+83
| | | | spoolss_enumjobs parsing code to do read / writes not just writes.
* const feeding frenzyLuke Leighton1999-11-081-1/+1
|
* const feeding frenzyLuke Leighton1999-11-081-5/+5
|
* added rpcclient spoolenum command. enumerates printers.Luke Leighton1999-11-061-12/+82
| | | | | | spoolss_r_io_enumprinters doesn't decode strings correctly as printer_info_1/2 code has only been written to write structures, not read them.
* samuserset <username> -p password. YESSSSS :)Luke Leighton1999-11-041-6/+16
| | | | you have to use "ntlmv1" at the moment (i.e set client ntlmv2 = no).
* had to move unistr2_dup(), unistr2_free() and unistr2_copy() intoLuke Leighton1999-11-031-0/+34
| | | | util_unistr.c in order to get bin/testparm to compile.
* three types of array-creation / array-deletion functions:Luke Leighton1999-11-031-31/+36
| | | | | | | | | | | | | | | | | | | | | | | | | | | | char* UNISTR2* SID* decided to create a higher-order function set, add_item_to_array() free_item_array(). higher-order support routines needed to add a new type: type* item_dup(const type*) void item_free(type*) of course, strdup() and free() are perfect, pre-existing examples of such functions, used in the implementation of add_chars_to_array() and free_char_array(). sid_dup() and free() work for the add_sids_to_array() and free_sid_array() implementations. use unistr2_dup() and created unistr2_free() because the functionality behind these may change into something horrible, like [horror] dynamic memory allocation of the UNISTR2 character array. argh!!!! jean-francois, this function set implements what we talked about over... a year ago, now :-)
* rewrote rpcclient enumaliases command.Luke Leighton1999-11-012-1/+36
|
* NetServerTransportEnum parsing, client-side and rpcclient "srvtransports" added.Luke Leighton1999-10-301-0/+23
|
* general, drastic improvements to rpcclient.Luke Leighton1999-10-301-0/+18
| | | | | | | | | | | added samgroup <groupname> command added samgroupmem <groupname> command added proper registry key completion added sam command user-completion (e.g samuser [tab]) added sam command group-completion (e.g samgroup [tab])
* rpcclient regenum key client code rewritten to use higher order functions.Luke Leighton1999-10-291-2/+2
|
* added HKEY_CLASSES_ROOT MSRPC open call. reg_open_hkcr etc. supportedLuke Leighton1999-10-291-1/+9
| | | | in rpcclient, regenum HKEY_CLASSES_ROOT or regenum HKCR to test.
* - typecast malloc / Realloc issues.Luke Leighton1999-10-257-17/+37
| | | | - signed / unsigned issues.
* the dynamic memory alloc blood-fest goes on...Luke Leighton1999-10-211-1/+1
|
* turning some of the rpcclient functions dynamic. this is likely toLuke Leighton1999-10-211-0/+16
| | | | break a few things...
* - added rudimentary CAP_UNICODE support because i thought it was part ofLuke Leighton1999-10-072-3/+4
| | | | | | | | | | | | | | | | | a problem i was having. - added rudimentary CAP_STATUS32 support for same reason. - added hard-coded, copy-the-same-data-from-over-the-wire version of CAP_EXTENDED_SECURITY, which is a security-blob to encapsulate GSSAPI which encodes SPNEGO which is used to negotiate Kerberos or NTLMSSP. i have implemented NTLMSSP which negotiates NTLMv1 or NTLMv2 and 40-bit or 128-bit etc. i have implemented NTLMv1 / 40-bit. *whew*.
* bertl <bs@niggard.org> patch for making samba listen on port 445, just likeLuke Leighton1999-09-081-0/+3
| | | | nt 5 does. cool!
* patch from michael glauche to add session enum code into smbd.Luke Leighton1999-08-181-8/+75
|
* debug info display (netbios layer).Luke Leighton1999-08-181-1/+11
|