summaryrefslogtreecommitdiffstats
path: root/source/lib
Commit message (Collapse)AuthorAgeFilesLines
...
* Only set smb_read_error if not already set.Jeremy Allison2002-02-231-6/+20
| | | | Jeremy.
* Thanks to David Edward Shapiro <David.Edward.Shapiro@btitele.com> for spottingAndrew Bartlett2002-02-201-1/+1
| | | | | | | | this! (groupname and domain name paramaters swapped, giving 'interesting' results...) Andrew Bartlett
* Patch from Hasch@t-online.de (Juergen Hasch) to add UTF-8 as an explictAndrew Bartlett2002-02-191-1/+67
| | | | | | | character set for conversion. To be used in Winbind and the 'net ads' commands. Andrew Bartlett
* serialise all domain auth requestsAndrew Tridgell2002-02-181-0/+30
| | | | | | | | | this is needed because W2K will send a TCP reset to any open connections that have not done a negprot when a second connection is made. This meant that under heavy netlogon load a Samba domain member would fail authentications. Jeremy, you may wish to port this to 2.2.x
* reverted tims patch that broke configureAndrew Tridgell2002-02-181-13/+0
| | | | why does anything but smbd care about sec_init() anyway??
* Whoops, typo.Tim Potter2002-02-171-4/+4
|
* Do a smb_panic() if sec_initial_[ug]id() or non_root_mode() is calledTim Potter2002-02-171-0/+13
| | | | | without before sec_init(). This should avoid the formation of another magic function club. (-:
* int -> uint32Tim Potter2002-02-171-2/+1
|
* Back out 1.16.2.3:Martin Pool2002-02-151-1/+5
| | | | | | receive_smb: You might think that we ought to set smb_read_error here, but apparently that breaks the recursive main loop in oplock.c. Global variables suck. :-/
* Try to get this finally working. (Note to self: *always* check build farm...)Andrew Bartlett2002-02-061-2/+2
| | | | | | :-) Andrew Bartlett
* See if we can get slightly valid C for the non-PAM case here.Andrew Bartlett2002-02-051-2/+2
| | | | Andrew Bartlett
* Drastic impromvents to pam_winbind.Andrew Bartlett2002-02-051-0/+122
| | | | | | | | | | | | | | | | | This adds code to do generic PAM -> NTSTATUS and NTSTATUS -> PAM error conversions, and uses them to make the error handling in pam_winbind sane. In particular, pam_winbind now uses PAM error codes, not silly '-1, -2 ...' stuff, and logs the NTSTATUS error that winbind now sends over the pipe. Added code to wbinfo to display these - makes a big difference in debugging winbindd. The main change here is the code to allow pam_winbind password changing to correctly stack - This code ripped from pam_unix, and the copyright attached. (Same as for all pam modules, including pam_winbind) Andrew Bartlett
* Fix stupid typo !Jeremy Allison2002-02-051-1/+1
| | | | Jeremy.
* better debug messages!Simo Sorce2002-02-041-0/+1
|
* Fix from Michael Steffens <michael_steffens@hp.com> to make signalJeremy Allison2002-01-314-26/+58
| | | | | | processing work correctly in winbindd. This is a really good patch that gives full select semantics to the Samba modified select. Jeremy.
* this fixes the problem of not being able to add a SD to a file on aAndrew Tridgell2002-01-311-2/+0
| | | | | | | | | | | | | non-domain Samba server from a NT4 client. Note that this exactly reverses a change by Jeremy on the 18th of December 2001, reverting the code back to what JF originally wrote. I have looked carefully with a sniffer and JFs original NULL sid is correct (ie. it matches what NT4 does) and also fixes the problem. Sending a blank sid (which is what jeremy's patch did) causes NT4 to give a classic "parameter is incorrect error" and prevents the addition of new ACLs.
* Removed version number from file header.Tim Potter2002-01-3046-87/+47
| | | | Changed "SMB/Netbios" to "SMB/CIFS" in file header.
* minor fix and checksSimo Sorce2002-01-271-2/+4
|
* Some more 'winbind default domain' support patches from Alexander BokovoyAndrew Bartlett2002-01-272-1/+34
| | | | | | | | | | | <a.bokovoy@sam-solutions.net>. This patch is designed to remove the 'special cases' required for this support. In particular this now kills off winbind_initgroups, as it appears no longer to be required. Andrew Bartlett
* Bring this code into line with new winbind_lookup_name() interface. I thinkAndrew Bartlett2002-01-261-10/+23
| | | | | | | | | this might need a bit more work - or at least documentation. This is certainly a worthwile little hack, as it avoids the need to invert the group database. I don't think we should allow unqualified domains here - as that allows us to distinguish between (at least some) usernames and these 'special' groups.
* Remove the 'direct to winbind' hacks, as they should (if I understandAndrew Bartlett2002-01-261-12/+0
| | | | | | | | correctly) be no longer needed. This is in aid of the 'winbind default domain' code - which works much better when smbd always goes via the standard unix interfaces. Andrew Bartlett
* picky about reallocJean-François Micouleau2002-01-251-5/+6
| | | | J.F.
* minor fixesSimo Sorce2002-01-252-5/+7
|
* getpwnam -> getpwnam_alloc.Andrew Bartlett2002-01-232-3/+6
| | | | idra has promised not to revert these this time :-)
* We have to do some initialization before the string conversionMartin Pool2002-01-221-13/+15
| | | | | | routines can work. The code was copied into both convert_string and convert_string_allocate -- I split it into a little static function, and removed an apparently duplicate call to init_valid_table().
* Added comment about running lp_load() before calling pidfile_create().Tim Potter2002-01-221-1/+4
|
* Having a const parameter for set_socket_options() causes too much confusion.Tim Potter2002-01-221-1/+1
|
* Removed freebsd hack. Not correct.Jeremy Allison2002-01-211-4/+0
| | | | Jeremy.
* Spelling fix.Tim Potter2002-01-211-1/+1
|
* This is the current patch from Luke Leighton <lckl@samba-tng.org> to add aAndrew Bartlett2002-01-201-12/+27
| | | | | | | | | | | | | | | | | | degree of seperation betwen reading/writing the raw NamedPipe SMB packets and the matching operations inside smbd's RPC components. This patch is designed for no change in behaviour, and my tests hold that to be true. This patch does however allow for the future loadable modules interface to specify function pointers in replacement of the fixed state. The pipes_struct has been split into two peices, with smb_np_struct taking the information that should be generic to where the data ends up. Some other minor changes are made: we get another small helper function in util_sock.c and some of the original code has better failure debugs and variable use. (As per on-list comments). Andrew Bartlett
* This patch makes the 'winbind use default domain' code interact better withAndrew Bartlett2002-01-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | smbd, and also makes it much cleaner inside winbindd. It is mostly my code, with a few changes and testing performed by Alexander Bokovoy <a.bokovoy@sam-solutions.net>. ab has tested it in security=domain and security=ads, but more testing is always appricatiated. The idea is that we no longer cart around a 'domain\user' string, we keep them seperate until the last moment - when we push that string into a pwent on onto the socket. This removes the need to be constantly parsing that string - the domain prefix is almost always already provided, (only a couple of functions actually changed arguments in all this). Some consequential changes to the RPC client code, to stop it concatonating the two strings (it now passes them both back as params). I havn't changed the cache code, however the usernames will no longer have a double domain prefix in the key string. The actual structures are unchanged - but the meaning of 'username' in the 'rid' will have changed. (The cache is invalidated at startup, so on-disk formats are not an issue here). Andrew Bartlett
* Readline has problems on non tty fd's. Use readline replacement to in casesJeremy Allison2002-01-191-31/+32
| | | | | where stdin is !isatty to allow stripts to work. Jeremy.
* Added #ifdef for FreeBSD TCP bug.Jeremy Allison2002-01-191-0/+4
| | | | Jeremy.
* fixes (asprintf) from 2.2Simo Sorce2002-01-191-0/+1
|
* If 127.0.0.1 matches both allow & deny then allow. Patch from Steve Langasek ↵Jeremy Allison2002-01-181-1/+7
| | | | | | vorlon@netexpress.net Jeremy.
* This is the 'winbind default domain' patch from Alexander BokovoyAndrew Bartlett2002-01-181-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | <a.bokovoy@sam-solutions.net>. The idea is the domain\username is rather harsh for unix systems - people don't expect to have to FTP, SSH and (in particular) e-mail with a username like that. This 'corrects' that - but is not without its own problems. As you can see from the changes to files like username.c and wb_client.c (smbd's winbind client code) a lot of assumptions are made in a lot of places about lp_winbind_seperator determining a users's status as a domain or local user. The main change I will shortly be making is to investigate and kill off winbind_initgroups() - as far as I know it was a workaround for an old bug in winbind itself (and a bug in RH 5.2) and should no longer be relevent. I am also going to move to using the 'winbind uid' and 'winbind gid' paramaters to determine a user/groups's 'local' status, rather than the presence of the seperator. As such, this functionality is recommended for servers providing unix services, but is currently less than optimal for windows clients. (TODO: remove all references to lp_winbind_seperator() and lp_winbind_use_default_domain() from smbd) Andrew Bartlett
* A nice *big* change to the fundemental way we do things.Andrew Bartlett2002-01-173-29/+140
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Samba (ab)uses the returns from getpwnam() a lot - in particular it keeps them around for a long time - often past the next call... This adds a getpwnam_alloc and a getpwuid_alloc to the collection. These function as expected, returning a malloced structure that can be free()ed with passwd_free(&passwd). This patch also cuts down on the number of calls to getpwnam - mostly by taking advantage of the fact that the passdb interface is already case-insensiteve. With this patch most of the recursive cases have been removed (that I know of) and the problems are reduced further by not using the sys_ interface in the new code. This means that pointers to the cache won't be affected. (This is a tempoary HACK, I intend to kill the password cache entirly). The only change I'm a little worried about is the change to rpc_server/srv_samr_nt.c for private groups. In this case we are getting groups from the new group mapping DB. Do we still need to check for private groups? I've toned down the check to a case sensitve match with the new code, but we might be able to kill it entirly. I've also added a make_modifyable_passwd() function, that copies a passwd struct into the form that the old sys_getpw* code provided. As far as I can tell this is only actually used in the pass_check.c crazies, where I moved the final 'special case' for shadow passwords (out of _Get_Pwnam()). The matching case for getpwent() is dealt with already, in lib/util_getent.c Also included in here is a small change to register the [homes] share at vuid creation rather than just in one varient of the session setup. (This picks up the SPNEGO cases). The home directory is now stored on the vuid, and I am hoping this might provide a saner way to do %H substitions. TODO: Kill off remaining Get_Pwnam_Modify calls (they are not needed), change the remaining sys_getpwnam() callers to use getpwnam_alloc() and move Get_Pwnam to return an allocated struct. Andrew Bartlett
* Separate out get_user_home_dir() from get_user_home_service_dir().Jeremy Allison2002-01-162-5/+20
| | | | Jeremy.
* Merged in %S fixes and XX_NOT_CHANGED fixes from 2.2.Jeremy Allison2002-01-162-22/+62
| | | | Jeremy.
* Fixup error mapping so we have only one table containing errno -> dos error ↵Jeremy Allison2002-01-161-28/+26
| | | | | | | -> NT STATUS maps. Fixes problem with disk full returning incorrect error. Jeremy.
* Roll back PSTRING_SANCTIFY patch; just leave non-controversial typeMartin Pool2002-01-161-2/+2
| | | | and constness changes.
* #ifdef variable that's not used without dmallocMartin Pool2002-01-151-0/+2
|
* Add constness to filenames passed to functions.Martin Pool2002-01-153-3/+28
|
* FIXME We should turn the global list off when using Insure++,Martin Pool2002-01-141-0/+3
| | | | otherwise all the memory will be seen as still reachable.
* A couple of coding syle updates to follow the re-indent.Andrew Bartlett2002-01-131-5/+5
|
* Re-indent these two functions to make it actually possible to understand theirAndrew Bartlett2002-01-131-161/+161
| | | | | | contents... Andrew Bartlett
* I'm doing some things towards the NamedPipes game with lckl and he has asked meAndrew Bartlett2002-01-131-1/+103
| | | | | | | | | | to move this from being a static to matching its mate in lib/util_sock.c. In any case, this should discorage anybody from using the 'wrong' version of this function. (ie the one from TNG, which needs a bit more error checking depending on use). Andrew Bartlett
* Round and round we go....Jeremy Allison2002-01-111-1/+2
| | | | Jeremy.
* Latest attempt at changeid.Jeremy Allison2002-01-111-2/+26
| | | | Jeremy.
* Same fix as went into 2.2 (I'm waiting for jerry to finish some code).Jeremy Allison2002-01-111-6/+6
| | | | Jeremy.
generated by cgit (git 2.34.1) at 2025-09-25 11:51:16 +0000