| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
| |
Jeremy.
|
| |
|
|
|
|
| |
Jeremy.
|
| |
|
| |
|
| |
|
|
|
|
| |
to see if SGI and other platforms will build.
|
|
|
|
|
|
|
| |
reports an unitialized read which is obviously correct. And I hate valgrind
errors ;-)
Volker
|
|
|
|
|
|
| |
in iconv.c and nsswitch/). Using them means you're not thinking about multibyte at
all and I really want to discourage that.
Jeremy.
|
|
|
|
|
| |
map in errormap for ERROR_MORE_DATA -> ERRDOS, ERRmoredata.
Jeremy.
|
|
|
|
|
| |
when reverse connecting back to a client for printer notify.
Jeremy.
|
|
|
|
| |
Jeremy.
|
|
|
|
|
|
|
|
|
| |
back the same way we handle the DOS error. Although I don't see why
BUFFER_TOO_SMALL should not be handled as an error, simply copy the logic.
This is only called from smbcacls and smbcquotas.
Volker
|
|
|
|
|
| |
(should help track down out of sequence bugs).
Jeremy.
|
|
|
|
|
|
|
| |
#ifdef HAVE_STAT_ST_BLKSIZE and #ifdef HAVE_STAT_ST_BLOCKS,
respectively.
Fixes bug 550 reported by Joachim Schmitz <schmitz@hp.com>.
|
|
|
|
|
| |
validated the same way.
Jeremy.
|
| |
|
|
|
|
|
| |
mode domains.
Jeremy.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
portion of NTLMv2 key exchange. Also revert the default for
'client ntlmv2 auth' to no. This caused no ends of grief in
different cases.
And based on abartlet's mail....
> All I care about at this point is that we use NTLMv2
> in our client code when connecting to a server that
> supports it.
There is *no* way to tell this. The server can't tell us, because it
doesn't know what it's DC supports. The DC can't tell us, because it
doesn't know what the trusted DC supports. One DC might be Win2k, and
the PDC could be an older NT4.
|
|
|
|
|
| |
as that's what they do. Fix string_replace() to fast-path ascii.
Jeremy.
|
|
|
|
|
|
|
|
|
|
| |
Removed calls to clobber_region when not compiling with developer as
they were hiding speed problems.
Added fast path to convert_string() when dealing with ascii -> ascii,
ucs2-le to ascii and ascii to ucs2-le with values <= 0x7F. This
gives a speedup of 22% on my nbench tests.
Next I will do this on convert_string_allocate.
Jeremy.
|
|
|
|
|
|
|
| |
iconv wasn't re-initialised on reading of "charset" parameters. This
caused workgroup name to be set incorrectly if it contained an
extended character.
Jeremy.
|
|
|
|
|
| |
wins hook is called with unix charset.
Jeremy.
|
|
|
|
| |
when decidiing whether or not use ntlmv2 in client connections
|
|
|
|
| |
Jeremy.
|
|
|
|
|
|
| |
conversion simply copy as is. Also fixed the horrid malloc-twice-copy code
in the convert alloc path.
Jeremy.
|
| |
|
|
|
|
|
|
|
|
|
| |
- Make winbindd try to use kerberos for connections to DCs, so that it can
access RA=2 servers, particularly for netlogon.
- Make rpcclient follow the new flags for the NETLOGON pipe
- Make all the code that uses schannel use the centralised functions for doing so.
Andrew Bartlett
|
|
|
|
|
|
|
|
|
|
| |
elsewhere in the code. This will allow us to try kerberos, then another user
then guest in the winbindd code.
Also, re-introduce the seperate, NT1 'guest' session setup code, as I found
some problems with doing guest under NTLMSSP.
Andrew Bartlett
|
| |
|
|
|
|
|
|
|
|
| |
same ads_verify_ticket routine that smbd uses, so in the current state
we have to be have the host password in secrets.tdb instead of the
keytab. This means we have to be an ADS member, but it's a start.
Volker
|
|
|
|
|
|
|
|
|
|
|
| |
Currently I'm compiling against MIT Kerberos 1.2.8.
Anthony, you said you have a heimdal installation available. Could you
please compile this stuff with krb and check it with valgrind?
Thanks,
Volker
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
NTLMSSP with "" username, NULL password), and add --machine-pass (-P) to
all of Samba's clients.
When connecting to an Active Directory DC, you must initiate the CIFS level
session setup with Kerberos, not a guest login. If you don't, your machine
account is demoted to NT4.
Andrew Bartlett
|
|
|
|
|
|
| |
can not figure that we got no ticket.
Volker
|
|
|
|
| |
Volker
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
authentication.
NTLM2 is a version of NTLM, that involves both a client and server challenge,
and the creating of a new (presuable more secure) session key.
Unfortunetly this is not quite the same as NTLMv2, and we don't know how to
get the session key. I suggest looking very closely at what MSCHAPv2, and
other MS auth protocols do...
Andrew Bartlett
|
|
|
|
| |
Jeremy.
|
|
|
|
| |
Jeremy.
|
|
|
|
| |
Volker
|
|
|
|
| |
Volker
|
|
|
|
| |
Volker
|
|
|
|
|
|
|
| |
to be able to ask a LMB for the servers in its workgroup. Against
W2k this only works on port 139....
Volker
|
|
|
|
|
|
|
|
|
| |
1) don't ask trusted DC's for a list of trusted domains. This causes
us to treat non-transitive ones as if they were transitive. Not
needed anyways
2) Fix dc lookup bug where we would always try to use DNS to resolve
the DC's for a domain (even if it was a trusted NT4 domain).
|
|
|
|
| |
Jeremy.
|
|
|
|
|
|
| |
updated by 2 if there is no open reply outstanding, else by one....
Yes - this makes no sense....
Jeremy.
|
|
|
|
|
|
|
|
|
|
| |
I was storing the mid of the oplock break - I should have been
storing the mid from the open. There are thus 2 types of deferred
packet sequence returns - ones that increment the sequence number
(returns from oplock causing opens) and ones that don't (change notify
returns etc). Running with signing forced on does lead to some
interesting tests :-).
Jeremy.
|
|
|
|
|
|
| |
Now I know where the mechListMIC changes came from: Ethereal ;-)
Volker
|
| |
|