summaryrefslogtreecommitdiffstats
path: root/source/passdb
Commit message (Collapse)AuthorAgeFilesLines
...
* Runtime check for broken PAM systems with no appdata_ptr support. ThisJeremy Allison2001-05-011-2/+22
| | | | | should eventually be an autoconf test with a #ifdef workaround. I *HATE* pam :-). Jeremy.
* Stop coredump on pam password change with pam_pwdb.so module on error.Jeremy Allison2001-05-011-1/+5
| | | | Jeremy.
* Added Andrew Bartlett's fixes to my changes to his original patch (at theJeremy Allison2001-05-012-3/+3
| | | | | court of king caractacus, was just passing by... :-). Jeremy.
* Allow pam code to compile on Solaris (which doesn't have ↵Jeremy Allison2001-05-011-0/+5
| | | | | | PAM_AUTHTOK_RECOVER_ERR). Jeremy.
* Fixing consts in pam code.Jeremy Allison2001-04-301-2/+2
| | | | Jeremy.
* Based on an original PAM patch by Andrew Bartlett, re-written by me toJeremy Allison2001-04-301-124/+417
| | | | | | | remove global static PAM variables, and to tidy up the PAM internals code. Now looks like the rest of Samba. Still needs testing. Jeremy.
* - fixed some compiler warningsAndrew Tridgell2001-04-281-2/+3
| | | | - fixed slprintf and vsprintf macros
* few cleanups to bring in line with 2.2Gerald Carter2001-04-281-2/+0
|
* converted the passdb smbpasswd implementation to using tallocGerald Carter2001-04-252-330/+324
| | | | | | | | | | | for memory allocation. This fixes a long standing seg fault (i knew i would get around to it one day :) ) Tested with NT4 and Win2k. Needs a little more testing with the "create the machine account on the fly" code for NT4. Simo, this is probably going to break the tdb passdb code. Can you look at that when you get a chance and see what you think?
* Added "obey pam restrictions" parameter - default to "off".Jeremy Allison2001-04-231-0/+17
| | | | | | | Only set this to "on" if you know you have your PAM set up correctly..... NB. Doesn't apply to plaintext password authentication, which must use pam when compiled in. Jeremy.
* Fix more free twice bugs.Jeremy Allison2001-04-231-2/+5
| | | | Jeremy.
* Fix for bug in code for pam_session failure - pam_end called twice.Jeremy Allison2001-04-231-12/+5
| | | | Jeremy.
* Added smb_ prefix to all Samba wrapper pam functions.Jeremy Allison2001-04-232-50/+48
| | | | | Fixed off by one bug using StrnCpy instead of strdup(). Jeremy.
* Commit of a modified version of Andrew Bartlett's patch that removes theJeremy Allison2001-04-222-99/+101
| | | | | | | | | | horrid utmp hostname parameter - now uses the client name instead. Also tidies up some of the unencrypted password checking when PAM is compiled in. FIXME ! An pam_accountcheck() is being called even when smb encrypted passwords are negotiated. Is this the correct thing to do when winbindd is running ! This needs *SEVERE* testing.... Jeremy.
* Oops. Typos.John Terpstra2001-04-201-2/+2
|
* Added error reporting to pam_session code.John Terpstra2001-04-191-0/+19
|
* merge from 2.2Andrew Tridgell2001-04-182-8/+4
|
* patch from Steve Langasek <vorlon@netexpress.net> to make sure weJeremy Allison2001-04-181-5/+11
| | | | | | don't use pam_setcred() if we haven't called pam_authenticate() Merge from 2.2 Jeremy.
* Updated with Andrew Bartlett patch.John Terpstra2001-04-131-3/+30
|
* Merged John's changes.Jeremy Allison2001-04-121-0/+2
| | | | Jeremy.
* Updating pampass from Samba-2.2 code tree. ===> JHTJohn Terpstra2001-04-111-139/+87
|
* passdb/pass_check.c: Ensure second check is done only if given username is ↵Jeremy Allison2001-04-101-62/+26
| | | | | | | all in caps. rpc_server/srv_srvsvc_nt.c: Added "CONFIGFILE" arg to scripts so path to smb.conf is given. Jeremy.
* Added JohnT and Andrew Bartlett's PAM changes.Jeremy Allison2001-04-102-134/+444
| | | | Jeremy.
* HEAD specific slprintf paranoia fixes.Jeremy Allison2001-04-082-11/+11
| | | | Jeremy.
* Got "medieval on our ass" about adding the -1 to slprintf.Jeremy Allison2001-04-081-3/+3
| | | | Jeremy.
* New POSIX ACL mapping code. Works with UNIX permissions, now for testingJeremy Allison2001-03-221-0/+6
| | | | | with real ACLs... Jeremy.
* Fix for crash when doing name lookup with a quoted string. Part ofJeremy Allison2001-03-201-1/+11
| | | | | | lookup_name was expecting to be able to write to the string. Changed lookup_name to use const. Jeremy.
* Added sys_dlopen/sys_dlsym/sys_dlclose.Jeremy Allison2001-03-191-3/+3
| | | | Jeremy.
* fixed unused variableAndrew Tridgell2001-03-181-1/+1
|
* patches from Simo. Couple of snity thingsGerald Carter2001-03-141-1/+3
|
* Remove "BYTE" - we already have uint8 - don't need more conflicts withJeremy Allison2001-03-113-18/+18
| | | | | system header files... Jeremy.
* Merge of new 2.2 code into HEAD (Gerald I hate you :-) :-). Allows new SAMRJeremy Allison2001-03-111-5/+0
| | | | | | RPC code to merge with new passdb code. Currently rpcclient doesn't compile. I'm working on it... Jeremy.
* Merged JF's fixes into HEAD. These are for string parsing and SAMR fixes.Jeremy Allison2001-03-023-6/+5
| | | | Jeremy.
* Merge of i18n fixes from appliance branch. Samba can now talk to a networkTim Potter2001-02-141-3/+10
| | | | | with a PDC that has international netbios name and domain name. There's still quite a bit of i18n stuff to fix though...
* add pam_setcred() call to pam_auth(). Patch was submited last Oct.Gerald Carter2001-02-081-0/+8
| | | | jerry
* Fixes for POSIX ACLS. ACL merge code.Jeremy Allison2001-01-151-2/+12
| | | | Jeremy.
* Changes from APPLIANCE_HEAD:David O'Neill2001-01-111-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | testsuite/printing/psec.c - Use lock directory from smb.conf parameter when peeking at the ntdrivers.tdb file. source/rpc_parse/parse_sec.c - fix typo in debug message source/script/installbin.sh - create private directory as part of 'make install'. source/nsswitch/winbindd_cache.c source/nsswitch/winbindd_idmap.c source/passdb/secrets.c source/smbd/connection.c - always convert tdb key to unix code-page when generating. source/printing/nt_printing.c - always convert tdb key to unix code-page when generating. - don't prepend path to a filename that is NULL in add_a_printer_driver_3(). source/rpc_server/srv_spoolss_nt.c - always convert tdb key to unix code-page when generating. - don't prepend server name to a path/filename that is NULL in the fill_printer_driver_info functions. source/printing/printing.c - always convert tdb key to unix code-page when generating. - move access check for print_queue_purge() outside of job delete loop. source/smbd/unix_acls.c - fix for setting ACLs (this got missed earlier) source/lib/messages.c - trivial sync with appliance_head
* Changes from APPLIANCE_HEAD:David O'Neill2001-01-101-9/+31
| | | | | | | | source/include/proto.h source/param/loadparm.c source/passdb/passdb.c source/rpc_server/srv_samr.c - add support for "hide local users" option to HEAD.
* more fixes from Simo. Also fixed the password expiration fieldGerald Carter2000-12-121-134/+59
| | | | | | | | | in the tdbsam to never expire (we don't support this yet). jerry
* group rid assignment cut and paste errorGerald Carter2000-12-091-2/+2
| | | | --jerry
* Cause smbd to use the new posix_acls code, not the old unix_acls code.Jeremy Allison2000-12-061-0/+5
| | | | | | | | | | | Currently does exactly the same thing (returns ACLs the same way). This code is written to try and get a POSIX ACL via the abstract sys_XX interface, then fall back to providing a UNIX based ACL if the calls fail. Seems to work. Next step is to add a --with-posix-acls to configure.in and then check on a POSIX ACL system that a complex ACL is returned correctly as an NT ACL. Note that the ACL set (a more complex problem) is not addressed yet. Jeremy.
* updates to the tdbsam implementation.Gerald Carter2000-12-063-37/+269
| | | | --jerry
* passdb/secrets.c passdb/smbpassfile.c smbd/server.c : Actually *use* the codeJeremy Allison2000-11-272-30/+19
| | | | | | | written to transition from an old DOMAIN.MACHINE.MAC file to secrets.tdb. printing/nt_printing.c: Fix case insensitive name lookups for driver files. John - this should fix the Win9x/WinME problem correctly. Jeremy.
* o fixed logon script problems (wrong len in reply to net_sam_logon forGerald Carter2000-11-222-3/+4
| | | | | | | | | | | | | | | | | | a few strings). I was the one who broke it obviously. o changed a few more defaults in the smbpasswd backend with respect to times. Now the logon time becomes '0' and the pass_can_change_time is set ot the same as pass_last_set_time o change Get_Pwnam() call in local_lookup_name to sys_getpwnam() as it did not seem necessary to try case permutations in the username. Tim, I think this was your code, so you might want to double check me. -- jerry
* Another large patch for the passdb rewrite.Gerald Carter2000-11-215-746/+867
| | | | | | | | | | | | | | | | | | | | | | | | | | | | o added BOOL own_memory flag in SAM_ACCOUNT so we could use static memory for string pointer assignment or allocate a new string o added a reference TDB passdb backend. This is only a reference and should not be used in production because - RID's are generated using the same algorithm as with smbpasswd - a TDB can only have one key (w/o getting into problems) and we need three. Therefore the pdb_sam-getpwuid() and pdb_getsampwrid() functions are interative searches :-( we need transaction support, multiple indexes, and a nice open source DBM. The Berkeley DB (from sleepycat.com seems to fit this criteria now) o added a new parameter "private dir" as many places in the code were using lp_smb_passwd_file() and chopping off the filename part. This makes more sense to me and I will docuement it in the man pages o Ran through Insure-lite and corrected memory leaks. Need for a public flogging this time Jeremy (-: -- jerry
* - fix "declaration of 'time' shadows global declaration" warning.David O'Neill2000-11-141-12/+12
|
* Fixed the cut-n-paste bugs in the new passdb backend code that leaked memory.Jeremy Allison2000-11-141-2/+2
| | | | Jeremy.
* Large commit which restructures the local password storage API.Gerald Carter2000-11-136-1422/+1835
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently the only backend which works is smbpasswd (tdb, LDAP, and NIS+) are broken, but they were somewhat broken before. :) The following functions implement the storage manipulation interface /*The following definitions come from passdb/pdb_smbpasswd.c */ BOOL pdb_setsampwent (BOOL update); void pdb_endsampwent (void); SAM_ACCOUNT* pdb_getsampwent (void); SAM_ACCOUNT* pdb_getsampwnam (char *username); SAM_ACCOUNT* pdb_getsampwuid (uid_t uid); SAM_ACCOUNT* pdb_getsampwrid (uint32 rid); BOOL pdb_add_sam_account (SAM_ACCOUNT *sampass); BOOL pdb_update_sam_account (SAM_ACCOUNT *sampass, BOOL override); BOOL pdb_delete_sam_account (char* username); There is also a host of pdb_set..() and pdb_get..() functions for manipulating SAM_ACCOUNT struct members. Note that the struct passdb_ops {} has gone away. Also notice that struct smb_passwd (formally in smb.h) has been moved to passdb/pdb_smbpasswd.c and is not accessed outisde of static internal functions in this file. All local password searches should make use of the the SAM_ACCOUNT struct and the previously mentioned functions. I'll write some documentation for this later. The next step is to fix the TDB passdb backend, then work on spliting the backends out into share libraries, and finally get the LDAP backend going. What works and may not: o domain logons from Win9x works o domain logons from WinNT 4 works o user and group enumeration as implemented by Tim works o file and print access works o changing password from Win9x & NT ummm...i'll fix this tonight :) If I broke anything else, just yell and I'll fix it. I think it should be fairly quite. -- jerry
* TDB password backend support written by Simo Sorce <simo.sorce@polimi.it>Gerald Carter2000-10-262-0/+598
| | | | | | | | | | Marked as an experimental compile time option (defaults to off) for now. jerry
* last part of W2K support.Jean-François Micouleau2000-10-131-1/+0
| | | | | | | | | | | | the trust domain list reply on netlogon pipe was wrong, interim hack until we have full trust relationships. changed some unistr2 to parse the ending NULL char. added a prs_align_needed() function. much like a prs_align but with a condition. needed for the unistr2 parsing. J.F.
generated by cgit (git 2.34.1) at 2025-09-27 13:44:00 +0000