summaryrefslogtreecommitdiffstats
path: root/source/lib
Commit message (Collapse)AuthorAgeFilesLines
* Fix memory leak of the key.Andrew Bartlett2003-04-061-0/+1
|
* strequal() returns True for equal, not an intAndrew Tridgell2003-04-061-2/+4
|
* don't rely on realloc() working on NULLAndrew Tridgell2003-04-061-3/+3
|
* The ldap idmap backend from Anthony Liguori (aliguori@us.ibm.com):Jim McDonough2003-04-031-0/+718
| | | | | | | This patch moves the ldap routines out of passdb into a generic library and implements an LDAP backend for IDMAP. THe backend can be enabled with "idmap backend = ldap" in smb.conf. THere are also schema changes to make sure to update teh ldap schema files.
* Add constJelmer Vernooij2003-04-021-1/+1
|
* THE Idmap patch :-)Simo Sorce2003-04-021-1/+1
| | | | | | | | | | | | | | | | | | | includes a --with-idmap=no switch to disable idmap usage if you find problems. cosmetic fixes and param aliases to separate winbind from idamp roles. A temporarily remote idmap winbind compatibility backend. As I have time I will further change code to not call directly winbind (partly done but not tested) and a specilized module will be built in place for the current glue hack. The patch has been tested locally in my limited time, the patch is simple and clear and should not reserve problems, if any just disable it. As usual, comments and fisex are welcome :-) Simo.
* OHKAWA Yuichi (kuri@makino.ecei.tohoku.ac.jp) points out that usingAndrew Bartlett2003-04-021-2/+2
| | | | | | | decoded.length after it's been zero'ed out by data_blob_free() doesn't give you the original length... Andrew Bartlett
* - Support absolute paths in vfs and charset modulesJelmer Vernooij2003-03-312-4/+7
| | | | | | | - Fix typo in Makefile.in - Fix compatibility with older vfs modules (from patch by metze) - Build some modules shared by default and some static (and fall back to static when dlopen() is not available)
* Fix formatting of back traces - pathc by metzeJelmer Vernooij2003-03-311-2/+3
|
* - Point users at the HOWTO Collection instead of 'README' in modules/mysql.cJelmer Vernooij2003-03-301-2/+26
| | | | - Make passdb work with absolute paths (passdb backend = /path/to/smbpasswd.so works now). vfs, rpc and charset will follow
* fix CIDR hosts allow/deny notationGerald Carter2003-03-281-1/+1
|
* Use SAFE_FREE() instead of plain free() - pointed out by metzeJelmer Vernooij2003-03-261-1/+2
|
* Output backtrace to logfile in smb_panic(), as suggested by mbpJelmer Vernooij2003-03-261-8/+27
| | | | (only on systems that support it, of course)
* We need to 'preprocess' in popt_common_samba as wellJelmer Vernooij2003-03-251-1/+1
|
* Revoke some of the popt patch from metze I applied earlier today. It addedJelmer Vernooij2003-03-241-7/+18
| | | | some double options and broke some parameters.
* Add modules support to charsetJelmer Vernooij2003-03-241-29/+55
|
* Patch from metze to generalise POPT_COMMON_SAMBA, with some minor changesJelmer Vernooij2003-03-241-60/+35
|
* NTLM Authentication:Andrew Bartlett2003-03-231-2/+22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Add a 'privileged' mode to Winbindd. This is achieved by means of a directory under lockdir, that the admin can change the group access for. - This mode is now required to access with 'CRAP' authentication feature. - This *will* break the current SQUID helper, so I've fixed up our ntlm_auth replacement: - Update our NTLMSSP code to cope with 'datagram' mode, where we don't get a challenge. - Use this to make our ntlm_auth utility suitable for use in current Squid 2.5 servers. - Tested - works for Win2k clients, but not Win9X at present. NTLMSSP updates are needed. - Now uses fgets(), not x_fgets() to cope with Squid environment (I think somthing to do with non-blocking stdin). - Add much more robust connection code to wb_common.c - it will not connect to a server of a different protocol version, and it will automatically try and reconnect to the 'privileged' pipe if possible. - This could help with 'privileged' idmap operations etc in future. - Add a generic HEX encode routine to util_str.c, - fix a small line of dodgy C in StrnCpy_fn() - Correctly pull our 'session key' out of the info3 from th the DC. This is used in both the auth code, and in for export over the winbind pipe to ntlm_auth. - Given the user's challenge/response and access to the privileged pipe, allow external access to the 'session key'. To be used for MSCHAPv2 integration. Andrew Bartlett
* Use True, not TRUEJelmer Vernooij2003-03-231-2/+2
|
* Don't crash when initialising tdb failsJelmer Vernooij2003-03-231-2/+2
|
* Add -U, -N, -i, -A, -W to popt.Jelmer Vernooij2003-03-221-9/+231
|
* - Use FUNCTION_MACRO, not __FUNCTION__.Jelmer Vernooij2003-03-222-2/+2
| | | | - Add some const
* Valgrind found a few memory leaks!Andrew Bartlett2003-03-221-0/+4
| | | | Andrew Bartlett
* Small clenaup patches:Andrew Bartlett2003-03-222-7/+9
| | | | | | | | | | | | | - safe_string.h - don't assume that __FUNCTION__ is available - process.c - use new workaround from safe_string.h for the same - util.c - Show how many bytes we smb_panic()ed trying to smb_xmalloc() - gencache.c - Keep valgrind quiet by always null terminating. - clistr.c - Add copyright - srvstr.h - move srvstr_push into a .c file again, as a real function. - srvstr.c - revive, with 'safe' checked srvstr_push - loadparm.c - set a default for the display charset. Andrew Bartlett
* Patch from Samuel Thibault to convert messages from unix to dos charset. WorksJelmer Vernooij2003-03-201-1/+1
| | | | | on 2000. sending messages to 9x needs to be fixed, but that didn't work anyway
* lib/messages.c: Check return from chainlock before modifying message queue.Jeremy Allison2003-03-201-1/+3
| | | | | Apply the job returned limit across all requests for job queues. Jeremy.
* Cleanup bogus initialisation in SID_NAME_USE enum.Tim Potter2003-03-201-1/+2
| | | | Added new sid type = 9 for "computer" from MSDN.
* use strnlen to prevent coredumpsJim McDonough2003-03-191-3/+3
|
* Put in the new modules system. It's now used by passdb and rpc. I willJelmer Vernooij2003-03-191-0/+2
| | | | put a doc about it in dev-doc later today.
* Step one of optimizations for StrCaseCmp:Martin Pool2003-03-181-7/+72
| | | | | | | | First of all, do a char-by-char walk through both buffers until we get to a non-ascii character, or a difference between the strings. This prefix can be directly compared without needing to call into iconv. This should be much faster for strings that are either all ascii, or differ near the start.
* Split "clobber" function and variables into its own file before itMartin Pool2003-03-182-39/+60
| | | | grows too much larger.
* Update comment: Valgrind 1.9.4 seems to always respect clientMartin Pool2003-03-181-1/+1
| | | | requests, without needing --client-perms=yes.
* global_globber_region_function/line ought to be recorded beforeMartin Pool2003-03-181-3/+15
| | | | | | | | | | clobbering the region, just in case clobbering causes us to crash immediately. (That might happen if we just shot ourselves in the stack and strcpy was not inlined.) Also, in DEVELOPER mode and when Valgrind is available, mark the clobbered region as uninitialized. This is an even stronger protection than clobbering with 0xf1.
* - Make ReadDirName return a const char*.Andrew Bartlett2003-03-161-1/+1
| | | | | | | | - Consequential changes from that - mark our fstring/pstring assumptions in function prototypes Andrew Bartlett
* Remove an unused function and fix the build.Andrew Bartlett2003-03-151-36/+0
| | | | Andrew Bartlett
* String handling parinoia fixes.Andrew Bartlett2003-03-153-112/+59
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch enables the compile-time checking of strings assable by means of sizeof(). (Original code had the configure check reversed). This is extended to all safe_strcpy() users, push_string and pull_string, as well as the cli and srv derivitives. There is an attempt to cap strings at the end of the cli buffer, and clobber_region() of the speified length (when not -1 :-). Becouse of the way they are declared, the 'overmalloc a string' users of safe_strcpy() have been changed to use overmalloc_safe_strcpy() (which skips some of the checks). This whole ball of mud worked fine, until I pulled out my 'fix' for our statcache. When jeremy fixes that, we should be able to get back to testing this stuff. This patch also includes a 'marker' of the last caller to clobber_region (ie, the function that called pstrcpy() that called clobber_region) to assist in debugging problems that may have smashed the stack. This is printed at smb_panic() time. (Original idea and patch by metze). It also removes some unsused functions, and #if 0's some others that are unused but probably should be used in the near future. For now, this patch gives us some confidence on one class of trivial parsing error in our code. Andrew Bartlett
* fix WinXP & Win2K3 remote_arch and check pointer in ntlmssp code before ↵Gerald Carter2003-03-141-0/+16
| | | | dereferencing
* adding some initiaial code to sert %a to Win2K3 (using Native LanMan string ↵Gerald Carter2003-03-121-0/+3
| | | | from .NET RC2)
* Add constAndrew Bartlett2003-03-121-2/+2
|
* This patch attemptes to clean up winbindd's mutex locking.Andrew Bartlett2003-03-111-4/+2
| | | | | | | | | | | | | | | | | | | | | | | | | The current locking scheme in winbind is a complete mess - indeed, the next step should be to push the locking into cli_full_connection(), but I'll leave it for now. This patch works on the noted behaviour that 2 parts of the connection process need protection - and independent protection. Tim Potter did some work on this a little while back, verifying the second case. The two cases are: - between connect() and first session setup - during the auth2 phase of the netlogon pipe setup. I've removed the counter on the lock, as I fail to see what it gains us. This patch also adds 'anonymous fallback' to our winbindd -> DC connection. If the authenticated connection fails (wbinfo -A specifed) - say that account isn't trusted by a trusted DC - then we try an anonymous. Both tpot and mbp like the patch. Andrew Bartlett
* Remove valgrind_strlen function, hopefully no longer needed withMartin Pool2003-03-111-9/+0
| | | | recent Valgrind relases and clashing with -DVALGRIND.
* Clobber strings with 0xf1f1f1f1 before writing to them to check bufferMartin Pool2003-03-101-8/+33
| | | | | | | | | | | | | lengths are correct. Attempts to pstrcpy into an fstring or allocated string should fail in developer builds. This builds on abartlet's earlier overflow probe for safe_strcpy, but by clobbering the whole string with a nonzero value is more likely to find overflows on the stack. This is only used in -DDEVELOPER mode. Reviewed by abartlet, tpot.
* This is C, not C++Andrew Bartlett2003-03-081-4/+4
|
* Make sure that the 'remote' machine name can only be set once. For some weirdAndrew Bartlett2003-03-081-2/+29
| | | | | | | | | | | | reason, during a Win2003 installation, when you select 'domain join' it sends one machine name in the name exchange, and litraly 'machinename' during the NTLMSSP login. Also fix up winbindd's logfile handling, so that it matches smbd and nmbd. (This helps me, by seperating the logs by pid). Andrew Bartlett
* Some progress towards gums and tdbsam2Simo Sorce2003-03-071-0/+18
| | | | genparser works fine, and it is a marvelous tool to store objects in tdb :)
* dlsym takes a const char *.Jeremy Allison2003-03-031-1/+1
| | | | Jeremy.
* Doxygen janitor: add note that strequal is in fact case-insensitive.Martin Pool2003-02-281-6/+8
|
* Doxygen janitorMartin Pool2003-02-282-8/+8
|
* Doxygen janitor: fix parameter names, grammar, tag names.Martin Pool2003-02-281-14/+14
|
* Add a comment about the meaning of samba's internal character set andMartin Pool2003-02-281-0/+24
| | | | how this interacts with it.