summaryrefslogtreecommitdiffstats
path: root/source/libsmb
Commit message (Collapse)AuthorAgeFilesLines
* fixed a bug in qpathinfo client codeAndrew Tridgell2002-02-051-4/+6
|
* Fix from Michael Steffens <michael_steffens@hp.com> to make signalJeremy Allison2002-01-311-1/+1
| | | | | | processing work correctly in winbindd. This is a really good patch that gives full select semantics to the Samba modified select. Jeremy.
* Added addform, setform and deleteform cli functions.Tim Potter2002-01-311-0/+164
|
* Removed version number from file header.Tim Potter2002-01-3040-77/+39
| | | | Changed "SMB/Netbios" to "SMB/CIFS" in file header.
* Name another talloc.Andrew Bartlett2002-01-281-1/+1
|
* Back out some of the less well thought out ideas from last weeks work onAndrew Bartlett2002-01-261-2/+2
| | | | | | | | | | winbind default domains, particulary now I understand whats going on a lot better. This ensures that the RPC client code does as little 'magic' as possible - this is up to the application/user. (Where - for to name->sid code - it was all along). This leaves the change that allows the sid->name code to return domains and usernames in seperate paramaters. Andrew Bartlett
* Fix up a security issue with the way we handle domain groups retuned on theAndrew Bartlett2002-01-261-9/+15
| | | | | | | | | | | info3. These are RIDs, and it only makes sense to combine them with the domain SID returned with them. This is important for trusted domains, where that sid might be other than the one we currently reterive from the secrets.tdb. Also remove the become_root()/unbecome_root() wrapper from around both remaining TDB users: Both are now initialised at smbd startup. Andrew Bartlett
* Removed unused static variable.Tim Potter2002-01-251-1/+0
|
* Add more string explanations of RAP errors that are already documentedMartin Pool2002-01-221-8/+17
| | | | in clirap2.
* Spelling fixes.Tim Potter2002-01-201-0/+2
|
* Fix a couple of memory leaks in the cli_establish_connection() code's failureAndrew Bartlett2002-01-201-0/+2
| | | | | | | | case. Thanks to Nigel Williams <nigel@wednesday.demon.co.uk> for spotting these! Andrew Bartlett
* This patch makes the 'winbind use default domain' code interact better withAndrew Bartlett2002-01-201-10/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | smbd, and also makes it much cleaner inside winbindd. It is mostly my code, with a few changes and testing performed by Alexander Bokovoy <a.bokovoy@sam-solutions.net>. ab has tested it in security=domain and security=ads, but more testing is always appricatiated. The idea is that we no longer cart around a 'domain\user' string, we keep them seperate until the last moment - when we push that string into a pwent on onto the socket. This removes the need to be constantly parsing that string - the domain prefix is almost always already provided, (only a couple of functions actually changed arguments in all this). Some consequential changes to the RPC client code, to stop it concatonating the two strings (it now passes them both back as params). I havn't changed the cache code, however the usernames will no longer have a double domain prefix in the key string. The actual structures are unchanged - but the meaning of 'username' in the 'rid' will have changed. (The cache is invalidated at startup, so on-disk formats are not an issue here). Andrew Bartlett
* This is the 'winbind default domain' patch from Alexander BokovoyAndrew Bartlett2002-01-181-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | <a.bokovoy@sam-solutions.net>. The idea is the domain\username is rather harsh for unix systems - people don't expect to have to FTP, SSH and (in particular) e-mail with a username like that. This 'corrects' that - but is not without its own problems. As you can see from the changes to files like username.c and wb_client.c (smbd's winbind client code) a lot of assumptions are made in a lot of places about lp_winbind_seperator determining a users's status as a domain or local user. The main change I will shortly be making is to investigate and kill off winbind_initgroups() - as far as I know it was a workaround for an old bug in winbind itself (and a bug in RH 5.2) and should no longer be relevent. I am also going to move to using the 'winbind uid' and 'winbind gid' paramaters to determine a user/groups's 'local' status, rather than the presence of the seperator. As such, this functionality is recommended for servers providing unix services, but is currently less than optimal for windows clients. (TODO: remove all references to lp_winbind_seperator() and lp_winbind_use_default_domain() from smbd) Andrew Bartlett
* Made a debug look nicer.Tim Potter2002-01-171-1/+2
|
* fixed a typo in the error map for WRONG_PASSWORDAndrew Tridgell2002-01-171-1/+1
|
* Merged in %S fixes and XX_NOT_CHANGED fixes from 2.2.Jeremy Allison2002-01-161-2/+2
| | | | Jeremy.
* Fixup error mapping so we have only one table containing errno -> dos error ↵Jeremy Allison2002-01-161-0/+1
| | | | | | | -> NT STATUS maps. Fixes problem with disk full returning incorrect error. Jeremy.
* Added CIFS UNIX extension code to client.Jeremy Allison2002-01-161-0/+164
| | | | Jeremy.
* Merge of name_status_find() debugs.Tim Potter2002-01-161-5/+18
|
* Removed fprintf(stderr, ...); calls which should not be present in libraryTim Potter2002-01-141-4/+0
| | | | functions.
* Many thanks to Alexander Bokovoy <a.bokovoy@sam-solutions.net>.Andrew Bartlett2002-01-121-0/+152
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This work was sponsored by Optifacio Software Services, Inc. Andrew Bartlett (various e-mails announcements merged into some form of commit message below:) This patch which adds basics of universal groups support into Samba 3. Currently, only Winbind with RPC calls supports this, ADS support requires additional (possibly huge) work on KRB5 PAC. However, basic infrastructure is here. This patch adds: 1. Storing of universal groups for particular user logged into Samba software (smbd/ two winbind-pam methods) into netlogon_unigrp.tdb as array of uint32 supplemental group rids keyed as DOMAIN_SID/USER_RID in tdb. 2. Fetching of unversal groups for given user rid and domain sid from netlogon_unigrp.tdb. Since this is used in both smbd and winbindd, main code is in source/lib/netlogon_uingrp.c. Dependencies are added to AUTH_OBJ as UNIGRP_OBJ and WINBINDD_OBJ as UNIGRP_OBJ. This patch has had a few versions, the final version in particular: Many thanks to Andrew Bartlett for critics and comments, and partly rewritten code. New: - updated fetching code to changed byte order macros - moved functions to proper namespace - optimized memory usage by reusing caller's memory context - enhanced code to more follow Samba coding rules Todo: - proper universal group expiration after timeout
* Same fix as went into 2.2 (I'm waiting for jerry to finish some code).Jeremy Allison2002-01-119-62/+62
| | | | Jeremy.
* fixed a crash bug in domain auth caused by an uninitialised nt_statusAndrew Tridgell2002-01-111-0/+2
|
* cope with direct IP addresses in resolve_name()Andrew Tridgell2002-01-111-0/+5
|
* Fix up 'net ads join' to delete and rejoin if the account already exists.Andrew Bartlett2002-01-111-1/+1
| | | | | | | | This fixes up a problem where a machine would join (or downgrade by trust password change) to NT4 membership and not be able to regain full ADS membership until a 'net ads leave'. Andrew Bartlett
* make sure resolve_name() only returns valid IP addressesAndrew Tridgell2002-01-111-4/+13
| | | | | this is actually a workaround for old broken nmbd daemons, especially from Samba 2.0
* Merge from appliance-head:Tim Potter2002-01-091-4/+72
| | | | | | | - put in some level 10 debugs so we can see what internal_resolve_name() is doing - remove duplicates from returned ip list of internal_resolve_name()
* Converted getprinterdriver to WERROR - it always returns dos error 6Tim Potter2002-01-071-54/+64
| | | | (invalid handle) though. )-:
* Converted enumprinters and enumports cli functions to return WERRORs.Tim Potter2002-01-061-106/+129
| | | | Make the offered and needed buffer size into parameters.
* Check for winbind separator in user name for cli_session_setup()Tim Potter2002-01-061-1/+2
| | | | Patch from Alexander Bokovoy <a.bokovoy@sam-solutions.net>
* spoolss rpc client cleanup:Tim Potter2002-01-061-56/+60
| | | | | - converted OpenPrinterEx and ClosePrinter to WERROR instead of NT_STATUS - doc
* Define a rpc_client doc group.Tim Potter2002-01-061-0/+3
|
* Minor doc cleanups.Tim Potter2002-01-061-2/+2
|
* Added a get_dos_error_msg() function to mirror the get_nt_error_msg()Tim Potter2002-01-061-0/+11
| | | | | One day I'll get around to refactoring the DOS error handling so it mirrors the NT error handling code.
* DOS error 31 is ERRgeneral, General Failure. This is the WERROR equivalentTim Potter2002-01-061-1/+1
| | | | to NT_STATUS_UNSUCCESSFUL according to AB's funky new error map.
* fixed another DATA_BLOB constructorAndrew Tridgell2002-01-051-6/+1
|
* simple fix for creating blank data blobsAndrew Tridgell2002-01-051-3/+1
|
* Add a comment on how this error map was derrived.Andrew Bartlett2002-01-051-0/+22
| | | | | This applies only to the NT->Dos map, I'm still trying to come up with a way to do the reverse.
* Add a touch of constAndrew Bartlett2002-01-051-1/+1
|
* Update the NT_STATUS -> DOS error table.Andrew Bartlett2002-01-032-407/+430
| | | | | | | | | | | | | | | | | | | | This new table is rather different to the old one (see diff posted to the list for a sorted list of differences) and needs a *lot* of testing. It does however seem to line up much better with what NT is using, as exampled by the change to the OBJECT_NAME_COLLISION DOS error, it now matches win2k where it didn't before. I can't see any critical errors we now get wrong, and I know that the auth errors are correct as per my on-the-wire observations. This table was produced (and I hope to comment this better later) by using the ERRMAPEXTRACT smbtorture tool, a Win2k domain member and the 'name_to_ntstatus' auth module on the HEAD PDC. This module returned the username as the error, and the NT box was forced to give me a dos error becouse thats all I negotiated on that connection. Hence the map. Andrew Bartlett
* Initialise result on success in cli_spoolss_enum_printers() so we don't getTim Potter2002-01-031-0/+2
| | | | stuck in an infinite loop.
* The werror<->nt status code map has changed and has broken all the spoolssTim Potter2002-01-031-7/+7
| | | | | | | | commands in rpcclient. Replacing ERROR_INSUFFICIENT_BUFFER with NT_STATUS_BUFFER_TOO_SMALL fixes it. Yay! I always thought the caller (i.e cmd_spoolss.c) should take care of the whole requested/needed buffer size thingy though...
* This brings the NT->DOS error mapping into better line with what NT does.Andrew Bartlett2002-01-011-2/+2
| | | | | | | I'll post the changes to the actual map to the list for comment, but this fixes the 'unknown' case. Andrew Bartlett
* Add a function to convert 'NT_STATUS...' strings back into their actual errorAndrew Bartlett2002-01-011-0/+16
| | | | | | code. Andrew Bartlett
* Add a specialised version of tpot's libsmb samlogon code for use withAndrew Bartlett2002-01-011-0/+86
| | | | | | | | | presupplied challange-response pairs, and only using the 'network' version. This will be used to move the auth subsystem over to a libsmb (rather than rpc_client) base. Andrew Bartlett
* Ensure the output cli can't have spurious values if the connection fails...Andrew Bartlett2001-12-311-1/+7
|
* Fix up the comment in the copyright headerAndrew Bartlett2001-12-311-2/+1
|
* util_sid.c - respect a const variabile (addedd strdup)Simo Sorce2001-12-301-3/+2
| | | | | | cli_reg.c - indentation pdb_ldap.c - some checks on init fns parameters pdb_tdb.c - some checks on init fns parameters + make sure we close the db on failure
* Finish idra's cleanup of the RPC remote shutdown code.Andrew Bartlett2001-12-301-3/+2
|
* - handle kerberos session setup reply with broken null terminationAndrew Tridgell2001-12-211-4/+5
| | | | - don't display Domain=[] for auth protocols that don't give us a domain