summaryrefslogtreecommitdiffstats
path: root/source/libsmb
Commit message (Collapse)AuthorAgeFilesLines
...
| * | | | | | const religionAndrew Tridgell2001-12-031-1/+1
| | | | | | |
| * | | | | | This change reworkes the connection code for both rpcclient and net newAndrew Bartlett2001-12-031-1/+113
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 'net' untility. This should make it easier to port rpcclient code across to net. It also allows SPNEGO (the NTLMSSP subsystem in particular) to work, becouse it kills off the early destruction of the clear-text password. Andrew Bartlett
| * | | | | | added queryuseraliases to rpcclientJean-François Micouleau2001-12-021-0/+49
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | and some comments to the samr server code, to explain what we should return here. J.F.
| * | | | | | added samr_query_sec_obj for rpcclientJean-François Micouleau2001-12-011-0/+46
| | | | | | | | | | | | | | | | | | | | | | | | | | | | J.F.
| * | | | | | I think the lookup_pdc_name() should be called lookup_dc_name() and theTim Potter2001-11-291-21/+22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | name_status_find() call here should look up a #1c name instead of #1d. This fixes some bugs currently with BDC authentication in winbindd and in smbd as you can't query the #1d name with the ip address of a BDC. Who is Uncle Tom Cobbley anyway?
| * | | | | | fixed some krb5 ifdefsAndrew Tridgell2001-11-282-3/+3
| | | | | | |
| * | | | | | fixed a core dump in server level securityAndrew Tridgell2001-11-281-2/+4
| | | | | | |
| * | | | | | fix a bunch of places where we can double-free a cli structureAndrew Tridgell2001-11-281-4/+4
| | | | | | |
| * | | | | | Cross merge to make 2.2 and HEAD closer.Jeremy Allison2001-11-281-9/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Jeremy.
| * | | | | | Fix another memory leak spotted by Tom Jansen.Richard Sharpe2001-11-271-0/+1
| | | | | | |
| * | | | | | prevent a bogus insure wild ptr messageAndrew Tridgell2001-11-271-1/+2
| | | | | | |
| * | | | | | prevent a memory leak of cli structuresAndrew Tridgell2001-11-271-1/+7
| | | | | | |
| * | | | | | increment the value not the pointerAndrew Tridgell2001-11-261-1/+1
| | | | | | |
| * | | | | | Fix --enable-developer shadow warningAndrew Bartlett2001-11-261-3/+3
| | | | | | |
| * | | | | | Got medieval on another pointless extern. Removed extern struct ipzeroTim Potter2001-11-262-5/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | and replaced with two functions: void zero_ip(struct in_adder *ip); BOOL is_zero_ip(struct in_addr ip);
| * | | | | | And delete domain_client_validate.c...Andrew Bartlett2001-11-261-432/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Andrew Bartlett
| * | | | | | use DEBUG() not d_printf() in librariesAndrew Tridgell2001-11-261-2/+2
| | | | | | |
| * | | | | | Use "password server" for searching for BDC's also as Tim suggested.Jeremy Allison2001-11-251-6/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Jeremy.
| * | | | | | Add a new torture test to extract a NT->DOS error map from an NT member of aAndrew Bartlett2001-11-254-5/+74
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | samba domain. The PDC must be running a special authenticaion module that spits out NT errors based on username. Andrew Bartlett
| * | | | | | added "net join" commandAndrew Tridgell2001-11-241-0/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | this completes the first stage of the smbd ADS support
| * | | | | | This is another rather major change to the samba authenticaionAndrew Bartlett2001-11-242-5/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | subystem. The particular aim is to modularized the interface - so that we can have arbitrary password back-ends. This code adds one such back-end, a 'winbind' module to authenticate against the winbind_auth_crap functionality. While fully-functional this code is mainly useful as a demonstration, because we don't get back the info3 as we would for direct ntdomain authentication. This commit introduced the new 'auth methods' parameter, in the spirit of the 'auth order' discussed on the lists. It is renamed because not all the methods may be consulted, even if previous methods fail - they may not have a suitable challenge for example. Also, we have a 'local' authentication method, for old-style 'unix if plaintext, sam if encrypted' authentication and a 'guest' module to handle guest logins in a single place. While this current design is not ideal, I feel that it does provide a better infrastructure than the current design, and can be built upon. The following parameters have changed: - use rhosts = This has been replaced by the 'rhosts' authentication method, and can be specified like 'auth methods = guest rhosts' - hosts equiv = This needs both this parameter and an 'auth methods' entry to be effective. (auth methods = guest hostsequiv ....) - plaintext to smbpasswd = This is replaced by specifying 'sam' rather than 'local' in the auth methods. The security = parameter is unchanged, and now provides defaults for the 'auth methods' parameter. The available auth methods are: guest rhosts hostsequiv sam (passdb direct hash access) unix (PAM, crypt() etc) local (the combination of the above, based on encryption) smbserver (old security=server) ntdomain (old security=domain) winbind (use winbind to cache DC connections) Assistance in testing, or the production of new and interesting authentication modules is always appreciated. Andrew Bartlett
| * | | | | | added lsaenumprivsaccount and lsalookupprivvalue to rpcclientJean-François Micouleau2001-11-241-0/+174
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | and more to come ... J.F.
| * | | | | | Changed how the privileges are stored in the group mapping code. It's nowJean-François Micouleau2001-11-231-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | an array of uint32. That's not perfect but that's better. Added more privileges too. Changed the local_lookup_rid/name functions in passdb.c to check if the group is mapped. Makes the LSA rpc calls return correct groups Corrected the return code in the LSA server code enum_sids. Only enumerate well known aliases if they are mapped to real unix groups. Won't confuse user seeing groups not available. Added a short/long view to smbgroupedit. now decoding rpc calls to add/remove privileges to sid. J.F.
| * | | | | | Update some of the error mapping, based on on-the-wire observations of an ↵Andrew Bartlett2001-11-231-7/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | NT4 server. This lets our Win9X clients give sane error messages when you get passwords wrong and the like. Andrew Bartlett
| * | | | | | Finally worked out why a enumerate trusted domains was returning aTim Potter2001-11-232-11/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | NT_STATUS_UNABLE_TO_FREE_VM error. This error code was mis-defined as 0x8000001a instead of 0xc000001a. The former is actually a NT_STATUS_NO_MORE_ENTRIES warning which is what we see in the status code. Removed the & 0xffffff from the loop in get_nt_error_msg() as all the error constants now have the correct high bits set.
| * | | | | | Added constants and error message for dos error code 1326 (logon failure).Tim Potter2001-11-232-1/+13
| | | | | | |
| * | | | | | added lsa_enum_sids to rpcclientJean-François Micouleau2001-11-221-0/+69
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | fixed lsa_enum_rpivs server code. This time it works as W2K. fixed smbgroupedit to compile and work. J.F.
| * | | | | | Removed unused variable.Tim Potter2001-11-221-1/+0
| | | | | | |
| * | | | | | Oops - opening wrong pipe name in cli_lsa_initialise() helper function.Tim Potter2001-11-221-1/+1
| | | | | | |
| * | | | | | add another command to rpcclient: getdispname. Show the full descriptionJean-François Micouleau2001-11-221-0/+53
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | of a privilege. J.F.
| * | | | | | add a command to rpcclient: enumprivsJean-François Micouleau2001-11-221-0/+82
| | | | | | | | | | | | | | | | | | | | | | | | | | | | J.F.
| * | | | | | Got positive and negative name caching working correctly with ↵Jeremy Allison2001-11-221-22/+24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | lookupname/lookupsid. There was a bug in cli_lsa_lookup_name/lookup_sid where NT_STATUS_NONE_MAPPED was being mapped to NT_STATUS_OK, and also the *wrong* number of entries mapped was being returned. The correct field is mapped_count, *NOT* num_entries. Jeremy.
| * | | | | | W2K doesn't seem to respond to *#0 names in node status. Ensure nameJeremy Allison2001-11-213-11/+58
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | lookup uses password server parameter when looking for PDCs. Jeremy.
| * | | | | | One more patch from Tom Jansen. Hope I didn't break the tree :-)Richard Sharpe2001-11-211-0/+7
| | | | | | |
| * | | | | | Fix up the build again...Andrew Bartlett2001-11-211-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Andrew Bartlett
| * | | | | | Fix up libsmbclient in head.Richard Sharpe2001-11-211-1366/+1413
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Apply the patches from Tom Jansen, get rid of fprintfs and change them to DEBUGs, etc ...
| * | | | | | add asn1 integer handling ready for the ldap netjoin codeAndrew Tridgell2001-11-201-0/+26
| | | | | | |
| * | | | | | - make sure we use a non-zero session id so we can have multiple connsAndrew Tridgell2001-11-201-8/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | open to w2k - fix the string handling in the device name to match NT and smbd - don't pull the domain from negprot if CAP_EXTENDED_SECURITY is set
| * | | | | | LMHOSTSFILE is now dynamically configured too.Martin Pool2001-11-191-1/+1
| | | | | | |
| * | | | | | Fix problems with lp_workgroup() being passed to routines that will modifyRichard Sharpe2001-11-171-24/+44
| | | | | | | | | | | | | | | | | | | | | | | | | | | | it and fix smb://<IP-addr>.
| * | | | | | Tidyup formatting a bit (spaces->tabs) whilst reading new code to understandJeremy Allison2001-11-151-46/+34
| | |_|_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | connection caching. Getting ready for back-merge to 2.2.3. Jeremy.
| * | | | | Doxygen demo for Tim.Martin Pool2001-11-151-9/+24
| | | | | |
| * | | | | Close the socket and set the file descriptor to -1 if there was a socketTim Potter2001-11-141-0/+9
| | | | | | | | | | | | | | | | | | | | | | | | error in cli_receive_smb() and cli_send_smb().
| * | | | | Removed the "reestablish" code. Tridge - scream if this was needed....Jeremy Allison2001-11-142-60/+2
| | | | | | | | | | | | | | | | | | | | | | | | Jeremy.
| * | | | | Minor updates. A small dose of const.Andrew Bartlett2001-11-111-1/+1
| | | | | |
| * | | | | Add function to add those hosts who have added msbrowse (domain master browsers)Steve French2001-11-071-0/+8
| | | | | |
| * | | | | Fixed looking up domain (winbind) users ahead of local users inTim Potter2001-11-051-6/+18
| | | | | | | | | | | | | | | | | | | | | | | | domain_client_validate()
| * | | | | free the negTokenInit structureAndrew Tridgell2001-11-051-0/+2
| | | | | |
| * | | | | merge from 2.2. Why is STR_CONVERT missing when comparingGerald Carter2001-11-051-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | 2.2 to HEAD?
| * | | | | Got serious about const again.Jeremy Allison2001-11-044-98/+100
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | REMOVED BZERO CALLS YET AGAIN !!! Why do these keep creeping back in.... They are *NOT* POSIX. I'm also thinking of removing strncpy as I'm sure it's not being used correctly.... Jeremy.