| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
| |
Also, PLEASE, PLEASE, PLEASE, do not include bashism and Cisms in shell
scripts.
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
Andrew Bartlett
|
| |
|
|
|
|
| |
elsewhere so other code can use it.
|
| |
|
|
|
|
| |
Andrew Bartlett
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Add a 'privileged' mode to Winbindd. This is achieved by means of a directory
under lockdir, that the admin can change the group access for.
- This mode is now required to access with 'CRAP' authentication feature.
- This *will* break the current SQUID helper, so I've fixed up our ntlm_auth
replacement:
- Update our NTLMSSP code to cope with 'datagram' mode, where we don't get a
challenge.
- Use this to make our ntlm_auth utility suitable for use in current Squid 2.5
servers.
- Tested - works for Win2k clients, but not Win9X at present. NTLMSSP updates
are needed.
- Now uses fgets(), not x_fgets() to cope with Squid environment (I think
somthing to do with non-blocking stdin).
- Add much more robust connection code to wb_common.c - it will not connect to
a server of a different protocol version, and it will automatically try and
reconnect to the 'privileged' pipe if possible.
- This could help with 'privileged' idmap operations etc in future.
- Add a generic HEX encode routine to util_str.c,
- fix a small line of dodgy C in StrnCpy_fn()
- Correctly pull our 'session key' out of the info3 from th the DC. This is
used in both the auth code, and in for export over the winbind pipe to
ntlm_auth.
- Given the user's challenge/response and access to the privileged pipe,
allow external access to the 'session key'. To be used for MSCHAPv2
integration.
Andrew Bartlett
|
|
|
|
| |
Andrew Bartlett
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- safe_string.h - don't assume that __FUNCTION__ is available
- process.c - use new workaround from safe_string.h for the same
- util.c - Show how many bytes we smb_panic()ed trying to smb_xmalloc()
- gencache.c - Keep valgrind quiet by always null terminating.
- clistr.c - Add copyright
- srvstr.h - move srvstr_push into a .c file again, as a real function.
- srvstr.c - revive, with 'safe' checked srvstr_push
- loadparm.c - set a default for the display charset.
Andrew Bartlett
|
|
|
|
| |
to the integer for SIVAL().
|
|
|
|
| |
Andrew Bartlett
|
|
|
|
|
|
|
|
| |
issues.
Also pick up these link failures at compile time (rather than runtime).
Andrew Bartlett
|
|
|
|
| |
complete now.
|
|
|
|
|
| |
on 2000.
sending messages to 9x needs to be fixed, but that didn't work anyway
|
|
|
|
| |
Jeremy.
|
|
|
|
| |
Andrew Bartlett
|
|
|
|
|
|
|
|
| |
- signed/unsigned
- quieten warning about assignment as truth value
- whitespace
Andrew Bartlett
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This patch enables the compile-time checking of strings assable by means of
sizeof(). (Original code had the configure check reversed).
This is extended to all safe_strcpy() users, push_string and pull_string,
as well as the cli and srv derivitives. There is an attempt to cap strings
at the end of the cli buffer, and clobber_region() of the speified length
(when not -1 :-).
Becouse of the way they are declared, the 'overmalloc a string' users of
safe_strcpy() have been changed to use overmalloc_safe_strcpy() (which skips
some of the checks).
This whole ball of mud worked fine, until I pulled out my 'fix' for our
statcache. When jeremy fixes that, we should be able to get back to testing
this stuff.
This patch also includes a 'marker' of the last caller to clobber_region (ie,
the function that called pstrcpy() that called clobber_region) to assist in
debugging problems that may have smashed the stack. This is printed at
smb_panic() time. (Original idea and patch by metze).
It also removes some unsused functions, and #if 0's some others that are
unused but probably should be used in the near future.
For now, this patch gives us some confidence on one class of trivial parsing
error in our code.
Andrew Bartlett
|
| |
|
| |
|
|
|
|
| |
Andrew Bartlett
|
|
|
|
| |
Andrew Bartlett
|
| |
|
|
|
|
|
|
|
| |
Who knows what .NET server brings, though ...? ;-)
Rafal
|
| |
|
|
|
|
| |
Andrew Bartlett
|
|
|
|
|
| |
lock - so to make the torture tests valid I give it a grace time of 10
seconds instead of 2
|
|
|
|
| |
Jeremy.
|
|
|
|
| |
Volker
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
get Win2k to send a valid signiture in it's session setup reply - which it will
give to win2k clients.
So, I need to look at becoming 'more like MS', but for now I'll get this code
into the tree. It's actually based on the TNG cli_pipe_ntlmssp.c, as it was
slightly easier to understand than our own (but only the utility functions
remain in any way intact...).
This includes the mysical 'NTLM2' code - I have no idea if it actually works.
(I couldn't get TNG to use it for its pipes either).
Andrew Bartlett
|
| |
|
|
|
|
|
|
|
|
| |
The intention is to allow for NTLMSSP and kerberos signing of packets, but
for now it's just what I call 'simple' signing. (aka SMB signing per the SNIA
spec)
Andrew Bartlett
|
| |
|
|
|
|
| |
Jeremy.
|
|
|
|
|
|
| |
\\server\share syntax, not just a "share" tconX syntax. This broke interop
with a vendor.
Jeremy.
|
|
|
|
| |
Fix lingering large offset problems in smbtar etc.
|
| |
|
|
|
|
|
|
| |
broken a lot of stuff. These two macros are meant to make life easier
when fixing these bugs. I'm guessing we will see more macros like
this (eg. fstrcpy_base)
|
|
|
|
|
|
|
| |
This changes the cache format, which will simply invalidate existing entries,
leaving them dead in the cache.
Andrew Bartlett
|
| |
|