summaryrefslogtreecommitdiffstats
path: root/source/libsmb
Commit message (Collapse)AuthorAgeFilesLines
...
| * | | | | This is a farily large patch (3300 lines) and reworks most of the AuthRewriteAndrew Bartlett2001-10-312-31/+46
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | code. In particular this assists tpot in some of his work, becouse it provides the connection between the authenticaion and the vuid generation. Major Changes: - Fully malloc'ed structures. - Massive rework of the code so that all structures are made and destroyed using malloc and free, rather than hanging around on the stack. - SAM_ACCOUNT unix uids and gids are now pointers to the same, to allow them to be declared 'invalid' without the chance that people might get ROOT by default. - kill off some of the "DOMAIN\user" lookups. These can be readded at a more appropriate place (probably domain_client_validate.c) in the future. They don't belong in session setups. - Massive introduction of DATA_BLOB structures, particularly for passwords. - Use NTLMSSP flags to tell the backend what its getting, rather than magic lenghths. - Fix winbind back up again, but tpot is redoing this soon anyway. - Abstract much of the work in srv_netlog_nt back into auth helper functions. This is a LARGE change, and any assistance is testing it is appriciated. Domain logons are still broken (as far as I can tell) but other functionality seems intact. Needs testing with a wide variety of MS clients. Andrew Bartlett
| * | | | | More const.Andrew Bartlett2001-10-311-2/+2
| | | | | |
| * | | | | Added some extra fields to the auth_serversupplied_info structure.Tim Potter2001-10-311-2/+23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | To obtain the full group membership of a user (i.e nested groups on a win2k native mode server) it is necessary to merge this list of groups with the groups returned by winbindd when creating an nt access token. This breaks winbindd linking while AB and I sync up our changes to the authentication subsystem.
| * | | | | Some tweaking to make the samlogon function look more like NT on the wire.Tim Potter2001-10-311-7/+7
| | | | | |
| * | | | | Parionia to ensure people don't install libsmb based programs setuid root.Andrew Bartlett2001-10-311-0/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | libsmb has not been written to be setuid, with things like LIBSMB_PROG allowing all sort of fun and games. Andrew Bartlett
| * | | | | Fix debug in domain_client_validate() when password server = *.Tim Potter2001-10-301-1/+1
| | | | | |
| * | | | | Allow the logon level to be passed to cli_netlogon_sam_logon() rather thanTim Potter2001-10-301-13/+41
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the validation level. This allows us to test interactive or network logons. Interestingly enough a win2k native mode server generates a rpc fault when presented with a network logon!
| * | | | | Added samlogon command to test against win2k native mode server. I thinkTim Potter2001-10-301-0/+72
| | | | | | | | | | | | | | | | | | | | | | | | there's a bug in the marshalling of net_sam_logon.
| * | | | | This patch applied, except without the structure changes to nmblib.cAndrew Bartlett2001-10-295-8/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Andrew Bartlett. From kai@cmail.ru Mon Oct 29 18:50:42 2001 Date: Fri, 19 Oct 2001 17:26:06 +0300 From: Andrew V. Samoilov <kai@cmail.ru> To: samba-technical@lists.samba.org Subject: [patch]: makes some arrays const to be shared between processes Hi! This patch makes some arrays const. So these arrays go to text/rodata segment and are shared between all of the processes which use shared library with these arrays. Regards, Andrew V. Samoilov. P.S. Please cc your answer to kai@cmail.ru, I don't subscribed to this list. ChangeLog: * cliconnect.c (prots): Make const. * clierror.c (rap_errmap): Likewise. * nmblib.c (nmb_header_opcode_names): Likewise. (lookup_opcode_name): Make opcode_namep const. Eliminate i. * nterr.c (nt_err_code_struct): Typedef const. * smberr.c (err_code_struct): Make const. (err_classes): Likewise.
| * | | | | This commit is number 4 of 4.Andrew Bartlett2001-10-292-11/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In particular this commit focuses on: Actually adding the 'const' to the passdb interface, and the flow-on changes. Also kill off the 'disp_info' stuff, as its no longer used. While these changes have been mildly tested, and are pretty small, any assistance in this is appreciated. ---- These changes introduces a large dose of 'const' to the Samba tree. There are a number of good reasons to do this: - I want to allow the SAM_ACCOUNT structure to move from wasteful pstrings and fstrings to allocated strings. We can't do that if people are modifying these outputs, as they may well make assumptions about getting pstrings and fstrings - I want --with-pam_smbpass to compile with a slightly sane volume of warnings, currently its pretty bad, even in 2.2 where is compiles at all. - Tridge assures me that he no longer opposes 'const religion' based on the ability to #define const the problem away. - Changed Get_Pwnam(x,y) into two variants (so that the const parameter can work correctly): - Get_Pwnam(const x) and Get_Pwnam_Modify(x). - Reworked smbd/chgpasswd.c to work with these mods, passing around a 'struct passwd' rather than the modified username --- This finishes this line of commits off, your tree should now compile again :-) Andrew Bartlett
| * | | | | more compiler warningsHerb Lewis2001-10-231-2/+2
| | | | | |
| * | | | | a quick fix to get rpcclient working again. This just disablesAndrew Tridgell2001-10-222-1/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | NTLMSSP in cli_establish_connection() What we really need to do is kill off the pwd_cache code. It is horrible, and assumes the challenge comes in the negprot reply.
| * | | | | Fix for @ in pathname from Kian Win.Jeremy Allison2001-10-221-1/+5
| | | | | | | | | | | | | | | | | | | | | | | | Jeremy.
| * | | | | Ok, I know it's a language thing and it shouldn't matter.... but a kerberosJeremy Allison2001-10-213-21/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | name is a "principal", not a principle. English majors will complain :-). Jeremy.
| * | | | | Fix for compilation on non-krb5 systemsAndrew Bartlett2001-10-211-1/+1
| | | | | |
| * | | | | made smbclient cope better with arbitrary principle formsAndrew Tridgell2001-10-213-21/+10
| | | | | |
| * | | | | support both old and new kerberos OIDsAndrew Tridgell2001-10-211-1/+2
| | | | | |
| * | | | | Move from timestamp to gen count file id's for finding oplocked filesJeremy Allison2001-10-201-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | in a tdb. Jeremy.
| * | | | | better krb5 error handling (thanks andrewb!)Andrew Tridgell2001-10-201-7/+16
| | | | | |
| * | | | | Add additional client RAP callsJim McDonough2001-10-191-0/+1832
| | |_|_|/ | |/| | |
| * | | | the beginnings of kerberos support in smbd. It doesn't work yet, butAndrew Tridgell2001-10-184-3/+46
| | | | | | | | | | | | | | | | | | | | | | | | | it should give something for others to hack on and possibly find what I'm doing wrong.
| * | | | added basic NTLMSSP support in smbd. This is still quite rough, andAndrew Tridgell2001-10-174-26/+258
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | loses things like username mapping. I wanted to get this in then discuss it a bit to see how we want to split up the existing session setup code
| * | | | fix heimdal compilationAndrew Tridgell2001-10-161-1/+2
| | | | |
| * | | | minor Realloc() fix - pedanticAndrew Tridgell2001-10-141-2/+5
| | | | |
| * | | | fixed NTLMSSP with XP servers (who don't send the duplicate challengeAndrew Tridgell2001-10-142-3/+17
| | | | | | | | | | | | | | | | | | | | in the asn1 spnego structures)
| * | | | fixed two bugs in the NTLMSSP codeAndrew Tridgell2001-10-141-2/+8
| | | | | | | | | | | | | | | | | | | | | | | | | - handle servers that don't send a kerberos principle (non-member servers) - enable spnego without KRB5
| * | | | moved some OIDs to the ASN.1 headerAndrew Tridgell2001-10-122-8/+4
| | | | |
| * | | | added NTLMSSP authentication to libsmb. It seems to work well so I have ↵Andrew Tridgell2001-10-125-269/+585
| | | | | | | | | | | | | | | | | | | | enabled it by default if the server supports it. Let me know if this breaks anything. Choose kerberos with the -k flag to smbclient, otherwise it will use SPNEGO/NTLMSSP/NTLM
| * | | | improve the error handling in the ASN1 code a bitAndrew Tridgell2001-10-111-14/+22
| | | | |
| * | | | added a ASN.1 parser, so now I can properly parse the negTokenInitAndrew Tridgell2001-10-113-78/+320
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | packet which means I can extract the service and realm, so we should now work with realms other than the local realm. it also means we now check the list of OIDs given by the server just in case it says that it doesn't support kerberos. In that case we should fall back to NTLMSSP but that isn't written yet.
| * | | | fixed some memory leaks, started adding asn1 decoder for server sideAndrew Tridgell2001-10-112-12/+42
| | | | |
| * | | | initial kerberos/ADS/SPNEGO support in libsmb and smbclient. ToAndrew Tridgell2001-10-114-147/+802
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | activate you need to: - install krb5 libraries - run configure - build smbclient - run kinit to get a TGT - run smbclient with the -k option to choose kerberos auth
| * | | | Removed 'extern int DEBUGLEVEL' as it is now in the smb.h header.Tim Potter2001-10-0211-32/+0
| | | | |
| * | | | Kill unused variablesAndrew Bartlett2001-09-271-2/+0
| | | | |
| * | | | Make use of the pdb_set_plaintext_passwd() update to vastly simplifyAndrew Bartlett2001-09-261-49/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | decode_pw_buffer() and the samr password changing routines. And yes, I know that we can lost some information in the Unicode->UTF->Unicode bit of this, but its worth the code cleanup. This also takes into account the possability of multibyte passwords. Andrew Bartlett
| * | | | added cli_qpathinfo_alt_name() for fetching the 8.3 name of a fileAndrew Tridgell2001-09-251-0/+65
| | | | |
| * | | | Removed extra '()' s.Jeremy Allison2001-09-241-8/+6
| | | | | | | | | | | | | | | | | | | | Jeremy.
| * | | | Converted cli_net_auth2() and cli_nt_setup_creds() to return NTSTATUS.Tim Potter2001-09-181-2/+5
| | | | |
| * | | | fixed ctemp in server and client. It turns out that ctemp on NT is ↵Andrew Tridgell2001-09-171-3/+12
| | | | | | | | | | | | | | | | | | | | completely broken, and it's pointless to emulate their brokenness completely in this case, but at least this makes us use approximately the same packet format. The spec is complelet wrong in this case
| * | | | typoSimo Sorce2001-09-171-5/+2
| | | | |
| * | | | move to SAFE_FREE()Simo Sorce2001-09-1710-141/+91
| | | | |
| * | | | Merge of sam_pwd_hash() function from tng.Tim Potter2001-09-141-0/+17
| | | | |
| * | | | Use session key from cli_state struct rather than the uninitialised oneTim Potter2001-09-141-4/+2
| | | | | | | | | | | | | | | | | | | | when calling cli_netlogon_sam_sync(). (-:
| * | | | Fixed return value for cli_dfs_exist() - nt4 returns 1, w2k returns 2.Tim Potter2001-09-131-10/+12
| | | | | | | | | | | | | | | | | | | | | | | | | Use werror_to_ntstatus() to convert error returns from dfs client functions into nt errors.
| * | | | Some patches to authentication:Tim Potter2001-09-121-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - the usersupplied_info now contains a smb_username (as it comes across on the wire) and a unix_username (after being passed through mapping functions) - when doing security={server,domain} use the smb_username, otherwise use the unix_username
| * | | | Converted DFS error returns to WERROR instead of uint32.Tim Potter2001-09-121-6/+6
| | | | |
| * | | | Added a string for NT_STATUS_OK, m'kay?Tim Potter2001-09-111-0/+1
| | | | |
| * | | | convert more code to use XFILEAndrew Tridgell2001-09-101-13/+13
| | | | |
| * | | | Make sure that if there are no interfaces, name_register_wins does notRichard Sharpe2001-09-091-0/+7
| | | | | | | | | | | | | | | | | | | | segfault.
| * | | | got rid of USE_TDB_MMAP_FLAG as its not needed any moreAndrew Tridgell2001-09-061-1/+1
| | | | |
generated by cgit (git 2.34.1) at 2025-09-27 22:32:13 +0000