summaryrefslogtreecommitdiffstats
path: root/source/libnet
Commit message (Collapse)AuthorAgeFilesLines
* Revert "If name_to_fqdn fails, retry with the dns domain the DC gave us"Karolin Seeger2008-11-171-8/+3
| | | | This reverts commit 82a086fb6f70dd6b725e4976293bc377a6a90f3a.
* Revert "Fix net rpc vampire, based on an *amazing* piece of debugging work ↵Karolin Seeger2008-11-171-30/+18
| | | | | | by "Cooper S. Blake" <the_analogkid@yahoo.com>." This reverts commit 61046225de8a4cd77e94d8c5c4a8f510bc11b79e.
* Fix net rpc vampire, based on an *amazing* piece of debugging work by ↵Jeremy Allison2008-10-231-18/+30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | "Cooper S. Blake" <the_analogkid@yahoo.com>. "I believe I have found two bugs in the 3.2 code and one bug that carried on to the 3.3 branch. In the 3.2 code, everything is located in the utils/net_rpc_samsync.c file. What I believe is the first problem is that fetch_database() is calling samsync_fix_delta_array() with rid_crypt set to true, which means the password hashes are unencrypted from the RID encryption. However, I believe this call is redundant, and the corresponding call for samdump has rid_crypt set to false. So I think the rid_crypt param should be false in fetch_database(). If you follow the code, it makes its way to sam_account_from_delta() where the password hashes are decrypted a second time by calling sam_pwd_hash(). I believe this is what is scrambling my passwords. These methods were refactored somewhere in the 3.3 branch. Now the net_rpc_samsync.c class calls rpc_vampire_internals, which calls libnet/libnet_samsync.c, which calls samsync_fix_delta_array() with rid_crypt always set to false. I think that's correct. But the second bug has carried through in the sam_account_from_delta() function: 208 if (memcmp(r->ntpassword.hash, zero_buf, 16) != 0) { 209 sam_pwd_hash(r->rid, r->ntpassword.hash, lm_passwd, 0); 210 pdb_set_lanman_passwd(account, lm_passwd, PDB_CHANGED); 211 } 212 213 if (memcmp(r->lmpassword.hash, zero_buf, 16) != 0) { 214 sam_pwd_hash(r->rid, r->lmpassword.hash, nt_passwd, 0); 215 pdb_set_nt_passwd(account, nt_passwd, PDB_CHANGED); If you look closely you'll see that the nt hash is going into the lm_passwd variable and the decrypted value is being set in the lanman hash, and the lanman hash is being decrypted and put into the nt hash field. So the LanMan and NT hashes look like they're being put in the opposite fields." Fix this by removing the rid_crypt parameter. Jeremy. (cherry picked from commit e38436f731ff09333588cc0751c79029a569f390)
* If name_to_fqdn fails, retry with the dns domain the DC gave usVolker Lendecke2008-10-151-3/+8
| | | | | | | This is a workaround for the cases where you want to join under a netbios name that is different from your hostname, i.e. a name that can not be found in /etc/hosts or dns. In these cases, name_to_fqdn fails or gives invalid results. (cherry picked from commit 84951b54bc1473aa9275c02cc37a9f0d7d4150e2)
* libnetjoin: fix Bug #5570.Günther Deschner2008-07-061-1/+1
| | | | | | | | Thanks to Atte Peltomäki. Guenther (cherry picked from commit 144d374ad9dd981430a82369ceaa2783e6dae90a) (cherry picked from commit 3e5bff08dac4faf575a11fe3edb17af08170ed74)
* net_vampire: fix build warning.Günther Deschner2008-06-171-1/+0
| | | | | | Guenther (cherry picked from commit eb4232fec05cd87ea85a781b84a3fbe85f469703) (cherry picked from commit 28b85a92160c7880253725cd247e064020f8be41)
* samsync: add samsync_fix_delta_array()Günther Deschner2008-06-131-0/+188
| | | | | | | This code is vastly based on samba4 code. Guenther (cherry picked from commit 5b68be96996a710988b1fd1c176cd5dff0f2c6af)
* libnetjoin: add libnet_join_rollback().Günther Deschner2008-06-091-1/+30
| | | | | | | | This is required now if the join verify failed and we already modified the local configuration. Guenther (cherry picked from commit 2870fe50af5163e30330f5a3ef21d0b7eea85ee5)
* libnetjoin: First store configuration and then verify the join.Günther Deschner2008-06-091-4/+11
| | | | | | | Jerry, this fixes the issues while joining with "config backend = registry". Guenther (cherry picked from commit b3d47f099286778252c6df6bf2c1fee0c4e26560)
* libnetjoin: correctly copy returned lsa policy sid.Günther Deschner2008-06-051-2/+4
| | | | | Guenther (cherry picked from commit 12d333fd90450fdd3fa8029502509d872cf5cae0)
* libnetjoin: only close existing policy handles while unjoining.Günther Deschner2008-06-051-2/+10
| | | | | Guenther (cherry picked from commit 1c901c82235a4d6bb4750151caebda0554245f05)
* libnetjoin: delete possible "realm" leftover parameter.Günther Deschner2008-06-051-0/+2
| | | | | | Guenther (cherry picked from commit d7ba98cc3f2d037ec01e079220a66da508b104b0) (cherry picked from commit 62a2c988f37354e323e1dd8065b4a93edb169ac1)
* dsgetdcname: use existing messaging_context if possible.Günther Deschner2008-05-221-0/+2
| | | | | Guenther (cherry picked from commit 7889516a384c155a9045aad4409c041fddd0d98d)
* Use strip_hostname after dsgetdcname/getdcname calls.Günther Deschner2008-05-221-4/+6
| | | | | Guenther (cherry picked from commit 82cbb3269b2e764c9c2a2fbcbe9c29feae07fb62)
* Fix Bug #5465 (joining with createcomputer=ou1/ou2/ou3).Günther Deschner2008-05-151-2/+1
| | | | | | Guenther (cherry picked from commit f3251ba03a69c2fd0335861177159a32b2bc9477) (cherry picked from commit 6d445c134d4d78f8261c998a5a83feaafb01bbca)
* libnetjoin: identify type of domain early.Günther Deschner2008-04-221-16/+16
| | | | | | | This finally enables joining AD using workgroup or realm name. Guenther (cherry picked from commit 0cf16e6b47f5978bdcb84ac8a29ef13ff2b5cca8)
* libnetjoin/net: Fix lp_config_backend_is_registry() handling.Günther Deschner2008-04-221-14/+56
| | | | | | | | Thanks obnox, now we can net ads join and net ads leave with zero configuration changes if "config backend = registry". Guenther (cherry picked from commit 9003881773de787a51ceadcdc2cb1e95f6979763)
* libnetjoin: delete the workgroup name when requested while unjoining.Günther Deschner2008-04-221-0/+4
| | | | | Guenther (cherry picked from commit 1782e89f3341eca5ee1fa39881ee8efb3fac9a5b)
* libnetjoin: separate out libnet_join_lookup_dc_rpc.Günther Deschner2008-04-221-37/+86
| | | | | Guenther (cherry picked from commit 8d3d1c094a28f75b01315ee05b7939ffba374f20)
* libnetjoin: Fix unjoining when no KRB5CCNAME is around.Günther Deschner2008-04-221-0/+16
| | | | | Guenther (cherry picked from commit 7fd237c545e0a7e0029195dbbb6691571abdfe84)
* libnetjoin: Remove machine account if we failed to set password.Günther Deschner2008-04-221-0/+4
| | | | | Guenther (cherry picked from commit db5e0ed186429667a7f6fc67e4b19a7ca75f357e)
* libnetjoin: Fix joining when no KRB5CCNAME is around.Günther Deschner2008-04-221-0/+15
| | | | | Guenther (cherry picked from commit 512e6ca0a9be9fe35994ec1010110573a5b551d1)
* Add secure_channel_type to libnetjoin.Günther Deschner2008-04-221-1/+3
| | | | | Guenther (cherry picked from commit f88910c1e5186737da4eda5a7a396c3238fc6775)
* Fix NETLOGON credential chain with Windows 2008 all over the place.Günther Deschner2008-04-041-2/+1
| | | | | | | | | | | | In order to avoid receiving NT_STATUS_DOWNGRADE_DETECTED from a w2k8 netr_ServerAuthenticate2 reply, we need to start with the AD netlogon negotiate flags everywhere (not only when running in security=ads). Only for NT4 we need to do a downgrade to the returned negotiate flags. Tested with w2k8, w2ksp4, w2k3r2 and nt4sp6. Guenther (cherry picked from commit 0970369ca0cb9ae465cff40e5c75739824daf1d0)
* Support "net ads join" format while joining to a specific ou.Günther Deschner2008-03-311-0/+5
| | | | | | | | libnetjoin now supports Computers/Servers/Unix as well as ou=Computers,ou=Servers,ou=Unix,dc=ber,dc=realm,dc=com. Guenther (cherry picked from commit c0be84c96d8133c6b77d1f0efe41f5f2373febb3)
* Add Support for DOMAIN\DCNAME syntax in libnetjoin.Günther Deschner2008-03-311-0/+58
| | | | | | | This format is used by Windows to enforce joining to a specific DC. Guenther (cherry picked from commit cc654892c0d76dea001cd8f7bd6f50cf9e89e9c9)
* Use TALLOC_FREE in libnetjoin debugging dump code.Günther Deschner2008-03-311-2/+2
| | | | | Guenther (cherry picked from commit b753087ff79c1d35a409eddc1f61e115e887c1e1)
* libsmbconf: add a "path" variable to the conf context.Michael Adam2008-03-271-2/+2
| | | | | | | | | | | | | | This is passed to the module init routines. In case of the registry, this is the path of the basekey in registry, that is to be used, defaulting to KEY_SMBCONF (HKLM\software\samba\smbconf), when NULL is given. This is the only case currently used. In order to support other keys, registry initialization for smbconf has to be changed to support different keys. Michael (cherry picked from commit 96434d9dc7a66773e313cc128af57493dee245a1)
* libsmbconf: add backend specific init function.Michael Adam2008-03-271-2/+2
| | | | | | | | Hide generic init function taking smbconf_ops argument from public api. Michael (cherry picked from commit b3f6920ccb9a27fde26e889a7f1f3afaf56b784f)
* libsmbconf: rename smbconf_close() to smbconf_shutdown().Michael Adam2008-03-271-2/+2
| | | | | Michael (cherry picked from commit 797b26ad3fad27e085827efb61f6b4d8b37e93f0)
* libsmbconf: rename smbconf_open() to smbconf_init().Michael Adam2008-03-271-2/+2
| | | | | | | That's more appropriate. Michael (cherry picked from commit d7bd9bb8aa2003ec0a9860df26857f67255febe2)
* libsmbconf: rename all occurrences of libnet_conf_ to smbconf_ .Michael Adam2008-03-271-17/+17
| | | | | Michael (cherry picked from commit 097af0309d7c3e9342058ba5266667293b23c80d)
* Move libnet_conf to a library lib/smbconf/ of its own, fixing the api.Michael Adam2008-03-273-1001/+0
| | | | | | | | | | | The libnet_conf code to access the registry based configuration has become more of a library used in several places in samba (e.g. loadparm) than an abstraction of "net conf". So I move it to a location lib/smbconf/. In the same breath, the api is fixed (not generated by make proto anymore). Michael (cherry picked from commit 5315ef41f403b96715dd68b512e9e74662e2910a)
* Fix Coverity ID 547Volker Lendecke2008-03-221-4/+1
| | | | | | | | | | Günther, please check. If r->in.ads==NULL, we can't call ads_leave_realm at all. Thanks, Volker (cherry picked from commit 120d8c889fa9ad61c74f1f936e83537513454648)
* Make sure we are still able to join Windows 2008.Günther Deschner2008-03-031-2/+1
| | | | | Guenther (cherry picked from commit aa9c0f587718f4d647e87b9662acbedba042b9cb)
* libnetjoin: add fallback to level 24 samr setinfo so that libnet can join NT4.Günther Deschner2008-02-291-0/+19
| | | | Guenther
* libnetjoin: Trying to avoid confusion between acct_flags, acb_info andGünther Deschner2008-02-291-12/+14
| | | | | | access_desired. Guenther
* libnetjoin: Merge in comments, debugs and missing code from original join code.Günther Deschner2008-02-281-3/+117
| | | | Guenther
* Add some more error handling in libnetjoin.Günther Deschner2008-02-281-0/+10
| | | | Guenther
* Let dsgetdcname() return a struct netr_DsRGetDCNameInfo.Günther Deschner2008-02-281-4/+4
| | | | Guenther
* Store domain_is_ad info as early as possible in libnetjoin.Günther Deschner2008-02-281-1/+16
| | | | Guenther
* Check for mandatory domain name in libnetjoin/unjoin.Günther Deschner2008-02-281-1/+8
| | | | Guenther
* Delete affinity cache entries while unjoining with libnetunjoin.Günther Deschner2008-02-281-2/+14
| | | | Guenther
* Fill in machine account manipulation flags while unjoining in libnetunjoin.Günther Deschner2008-02-281-0/+8
| | | | Guenther
* Add preliminary libnet_join_post_verify call to libnetjoin.Günther Deschner2008-02-281-0/+131
| | | | Guenther
* Merge all connect ads calls into libnet_join_post_processing_ads().Günther Deschner2008-02-281-21/+7
| | | | Guenther
* Use W_ERROR_NOT_OK_GOTO_DONE macro in libnetjoin.Günther Deschner2008-02-281-19/+15
| | | | Guenther
* Add a function libnet_conf_get_seqnum() to the libnet_conf API.Michael Adam2008-02-191-0/+13
| | | | | | | This is to provide a change sequence number to users, so that they can use it to detect change in the config and trigger a reload. Michael
* Rename registry_init_regdb() to registry_init_smbconf().Michael Adam2008-02-151-1/+1
| | | | | | That's what it actually is. Michael
* Collect all init_lsa_string varients in one place.Günther Deschner2008-02-121-5/+0
| | | | Guenther
generated by cgit (git 2.34.1) at 2025-09-27 16:49:08 +0000