| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
| |
stuck in an infinite loop.
|
|
|
|
|
|
|
|
| |
commands in rpcclient. Replacing ERROR_INSUFFICIENT_BUFFER with
NT_STATUS_BUFFER_TOO_SMALL fixes it. Yay!
I always thought the caller (i.e cmd_spoolss.c) should take care of the
whole requested/needed buffer size thingy though...
|
|
|
|
|
|
|
| |
I'll post the changes to the actual map to the list for comment, but this fixes
the 'unknown' case.
Andrew Bartlett
|
|
|
|
|
|
| |
code.
Andrew Bartlett
|
|
|
|
|
|
|
|
|
| |
presupplied challange-response pairs, and only using the 'network' version.
This will be used to move the auth subsystem over to a libsmb (rather than
rpc_client) base.
Andrew Bartlett
|
| |
|
| |
|
|
|
|
|
|
| |
cli_reg.c - indentation
pdb_ldap.c - some checks on init fns parameters
pdb_tdb.c - some checks on init fns parameters + make sure we close the db on failure
|
| |
|
|
|
|
| |
- don't display Domain=[] for auth protocols that don't give us a domain
|
| |
|
|
|
|
|
|
| |
the method used for checking if a domain is a trusted domain is very
crude, we should really call a backend fn of some sort. For now I'm
using winbindd to do the dirty work.
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
some cleanup of the lsa_open_policy and lsa_open_policy2 parser. the
length fields are not correct but that's what NT send. We don't anymore
underflow or overflow the decoding.
added the domain admins group to the default SD.
we are now checking the desired access flag in the lsa_open_policy_X()
calls and in most functions also.
J.F.
|
| |
|
|
|
|
|
|
|
|
| |
Ignacio you can update your howto ;-)
samsync: a small patch to try chaning challenges.
J.F.
|
|
|
|
| |
Jeremy.
|
| |
|
|
|
|
|
|
| |
netbios lookup for name NAME with node type xx.
This affects all our client progs. Very useful :)
|
|
|
|
|
|
|
| |
- added lsaquerysecobj to rpcclient
- renamed querysecobj to samquerysecobj
- removed duplicated display_sec_acl() code from cmd_spoolss.c and
cmd_samr.c and moved it into display_sec.c
|
|
|
|
| |
J.F.
|
| |
|
|
|
|
| |
Jeremy.
|
|
|
|
|
| |
(ie. the call can succeed, but still be an encoded error).
Jeremy.
|
|
|
|
|
|
| |
rpc. This was supposed to fix a printer driver download bug but it didn't
but it seemed a shame to trash all this code so I'm commiting it #ifdef'ed
out in case someone needs it one day.
|
|
|
|
| |
cyrus-sasl which makes the code much less fragile. Also added code to auto-determine the server name or realm
|
|
|
|
|
|
|
|
|
|
| |
Now, is there any reason that the prs_init() doesn't use the talloc context
that it is supplied as an argument for the actual data buffer?
It would seem logical to replace the malloc with a talloc, but I'm sure
there is some method to the madness (extrnal use/Reallocing of it I presume)
Andrew Bartlett
|
|
|
|
|
| |
of how to use this interface.
Jeremy.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This moves the rest of the functionality into the 'net rpc join' code.
Futhermore, this moves that entire area over to the libsmb codebase, rather
than the crufty old rpc_client stuff.
I have also fixed up the smbpasswd -a -m bug in the process.
We also have a new 'net rpc changetrustpw' that can be called from a
cron-job to regularly change the trust account password, for sites
that run winbind but not smbd.
With a little more work, we can kill rpc_client from smbd entirly!
(It is mostly the domain auth stuff - which I can rework - and the
spoolss stuff that sombody else will need to look over).
Andrew Bartlett
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This kills off the offending code in smbpasswd -j -Uab%c
In the process we have changed from unsing compelatly random passwords
to random, 15 char ascii strings. While this does produce a decrese in
entropy, it is still vastly greater than we need, considering the application.
In the meantime this allows us to actually *type* the machine account
password duruign debugging.
This code also adds a 'check' step to the join, confirming that the
stored password does indeed do somthing of value :-)
Andrew Bartlett
|
|
|
|
| |
(as per tridge's instructions)
|
| |
|
|
|
|
| |
session setup
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
'net' untility.
This should make it easier to port rpcclient code across to net.
It also allows SPNEGO (the NTLMSSP subsystem in particular) to work, becouse
it kills off the early destruction of the clear-text password.
Andrew Bartlett
|
|
|
|
|
|
|
| |
and some comments to the samr server code, to explain what we should
return here.
J.F.
|
|
|
|
| |
J.F.
|
|
|
|
|
|
|
|
| |
name_status_find() call here should look up a #1c name instead of #1d.
This fixes some bugs currently with BDC authentication in winbindd and in
smbd as you can't query the #1d name with the ip address of a BDC.
Who is Uncle Tom Cobbley anyway?
|
| |
|
| |
|
| |
|
|
|
|
| |
Jeremy.
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
| |
and replaced with two functions:
void zero_ip(struct in_adder *ip);
BOOL is_zero_ip(struct in_addr ip);
|
|
|
|
| |
Andrew Bartlett
|
| |
|