summaryrefslogtreecommitdiffstats
path: root/source/passdb
Commit message (Collapse)AuthorAgeFilesLines
* fixing joining to domain plus something weird going down with nt logins...Luke Leighton1999-12-011-1/+34
|
* attempting to get nt5 wksta to join domain.Luke Leighton1999-11-161-15/+38
| | | | | | | | 1) had to fix samr "create user" and "set user info" (level 23). 2) had to fix netlogon enum trust domains 3) registry key needed \\ in it not \.
* Whoops ! Being over-paranoid is not good.Jean-François Micouleau1999-09-241-8/+0
| | | | J.F.
* use gecos field to fill the full_nameJean-François Micouleau1999-09-232-7/+36
| | | | | | don't overwrite backend values with defaults values. J.F.
* Fixed an annoying bug in the LDAP code. Attributes not present in theMatthew Chapman1999-09-221-22/+3
| | | | | | | | | LDAP database were being initialised using unix_to_nt_time on -1, rather than -1 as an NTTIME (which is very different). Problems solved (hopefully): * "Access Denied" when accessing an NT share in a Samba controlled domain. * "Your password has expired" sometimes when logging in.
* - initialising mach_passwd_file locks to zero (prev. uninit.)Luke Leighton1999-09-121-2/+2
| | | | | | | - cleanup - #defined report to sprintf as it's #defined to another function in other uses of cmd_lsarpc.c
* BDC support.Luke Leighton1999-07-211-0/+2
|
* code from bertl to allow remap of default built-in names to anything.Luke Leighton1999-07-142-0/+12
| | | | | parameter is "builtin rid file". Copyright 1999 Bertl <bp@vpnet.at>
* renamed getfilepwent() and endfilepwent() to getfileent() and endfileent()Luke Leighton1999-07-132-4/+4
| | | | | | as they are generic "file line-by-line" reading routines. lines with "#" at the front are ignored (as comments). this code started out as the password file reading code.
* NULL pwdb_xxx_map_names() parameter can be passed here (which is a bugLuke Leighton1999-07-112-10/+12
| | | | anyway!)
* issues with pwdb_sam_map_names() and pwdb_smb_map_names() returning NULL.Luke Leighton1999-07-082-3/+20
| | | | found by Bertl <bs@vpnet.at>
* added debug reporting to pwdb_sam_map_names() and pwdb_smb_map_names()Luke Leighton1999-07-072-2/+8
|
* improving authentication code (tidyup).Luke Leighton1999-06-291-1/+0
|
* Moved code that changes the pw_passwd entry (i.e shadow password andTim Potter1999-06-132-64/+2
| | | | | | | | weird unixware stuff) into _Get_Pwnam() to fix a memory allocation bug. Note that the Get_Pwnam() function now returns a const struct passwd * as a hint to other developers not to change entries in the struct passwd.
* Jani Jaakkola's "getpwuid() / getpwnam()" hash-cache-hackLuke Leighton1999-05-061-1/+1
|
* "User Manager" - create user + change password now work.Luke Leighton1999-03-251-0/+42
| | | | | next problem: user group adding not supported so an "access denied" message is reported instead of "ok" when a new user is created.
* fixed issues with "Welcome to SAMBA Domain" for when admin user/pass isLuke Leighton1999-03-252-1/+148
| | | | | used to add workstation to domain. unix account db not modified: only SAM password db is used.
* SAM database "set user info".Luke Leighton1999-03-254-5/+19
| | | | | | | | | | | | | | | | | | | | | | | ---------------------------- - removed DOM_RID4 - removed SAMR_UNKNOWN_32 - added SAMR_SET_USERINFO (opcode 0x32) - added level 0x1 to SAMR_QUERY_DOM_INFO (needed for create user) - fixed pwdb_gethexpwd() it was failing on XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX - added mod_sam21pwd_entry() - preparing to call mod_sam21pwd_entry() - added "user session key" to user_struct.dc. this is md4(nt#) and is needed to decode user's clear-text passwords in SAMR_SET_USERINFO. - split code out in chgpasswd.c to decode 516 byte password buffers.
* #if defined(HAVE_MYSQL_H) || defined(WITH_MYSQLSAM)Matthew Chapman1999-03-231-1/+1
| | | | should instead have &&.
* new "domtrust" test command. r&d into inter-domain trust accounts.Luke Leighton1999-03-121-6/+6
|
* static password space needed.Luke Leighton1999-03-101-3/+3
|
* mods to allow inter-domain trust accounts to be added to SAM databaseLuke Leighton1999-03-092-54/+77
| | | | using smbpasswd command.
* pass_check.c could receive encrypted password: printing it out as a %sLuke Leighton1999-03-081-1/+2
| | | | | results in garbage. with no password length argument doing dump_data( 100, password, strlen(password)) is the next best alternative.
* spelling mistake, #ifdef'd out for non-developers (oops!)Luke Leighton1999-03-051-0/+5
|
* Benjamin Kuit's mods.Luke Leighton1999-03-052-3/+5
|
* Benjamin Kuit's latest mysql mods. issue with "make proto" needs to beLuke Leighton1999-03-034-84/+87
| | | | resolved.
* Benjamin Kuit's MYSQL SAM Database implementation.Luke Leighton1999-03-014-0/+937
| | | | Copyright (C) Benjamin Kuit <bj@mcs.uts.edu.au> 1999.
* pwdb_smb_to_sam was not returning NULL for nt name so thatLuke Leighton1999-02-091-8/+20
| | | | | | | | pwdb_sam_map_names() was using a "blank" static string instead of a NULL pointer for nt names. NULL means over-ride, so the nt name got left as "blank". this causes nt clients to terminate with extreme prejudice.
* iteration of sam passwd entries was an order n-cubed algorithm dueLuke Leighton1999-02-082-21/+91
| | | | | to resolution of unix name to nt name being unnecessarily _inside_ another loop.
* Fixed a domain functionality problem where NT clients would startMatthew Chapman1999-02-011-30/+11
| | | | | | | | | | | endlessly repeating a network SAMLOGON (hoping it to change, hmmm...). ( Guess what I found in pwdb_init_sam... unix_to_nt_time(&user->logon_time, (time_t)-1); unix_to_nt_time(&user->logoff_time, (time_t)-1); unix_to_nt_time(&user->kickoff_time, (time_t)-1); ... )
* Finally committing my LDAP changes.Matthew Chapman1999-01-153-50/+135
| | | | | | | | | | | | | | | | | | * Added new APIs for modifying groups. * RIDs are allocated similarly to NT, starting from 1000 and incrementing by 1 for each new user/group. * RIDs are now consistently in hex * Fixed bugs reported by Allan Bjorklund <allan@umich.edu>: - ldap_close_connection is exported by OpenLDAP - changed to ldap_disconnect - Missing ldap_connect() in getusergroups functions - ldap_next_entry was being called too early while retrieving a sam_struct - LDAP globals should be extern in sampassldap.c * Fixed bugs reported by Martin Hofbauer <mh@bacher.at> - Newly added workstation trust accounts had attributes DU rather than W. - User dn's were forced to start with "uid=XX" rather than using the existing dn.
* Fixed the "You password will expire in 0 days. Would you like toGerald Carter1999-01-132-1/+30
| | | | | | | | | | | | | | | change it now?" message when you login to a Samba Controlled domain. The fix is a hard coded 42 days from right now until you need to change you pasword again time (see passdb/sampassdb.c:pwdb_smb_to_sam()) Also fixed getsmbfilepwent() so that it will read in the last password change time correctly. * Related to this lib/util_pwdb.c:StrnCaseCmp() returns 0 if the strings match. Chouldn't this be the pther way? Oh well. I didn't change the return code as it was used in several other cases (see lib/util_pwdb.c:pwdb_get_last_set_time())
* trying to track down issues in get_home_dir().Luke Leighton1998-12-141-0/+4
|
* %U substitution should be unix user not nt userLuke Leighton1998-12-112-4/+9
|
* ldap_getpw() also needs to be (void)Luke Leighton1998-12-081-3/+2
|
* compilation warnings due to missing (void) in ldap_close_connection.Luke Leighton1998-12-081-2/+6
|
* added ldap files by Matthew Chapman.Luke Leighton1998-12-072-0/+623
|
* Matthew Chapman spotted that smbpasschange was assuming the existenceLuke Leighton1998-12-071-29/+0
| | | | | | of a private/smbpasswd file, this will not be the case for other database APIs. removed startsmbdb and endsmbpwdb calls because add_smbpwd_entry() and mod_smbpwd_entry() don't need them.
* matthew chapman's ldap code, to date. plus docs!Luke Leighton1998-12-073-817/+289
|
* attempting to fix "domain user map" up, but it's a bit complicated.Luke Leighton1998-11-301-4/+13
| | | | | | | | | | | | | | | | | i may simply go for a response in the NetSamLogon returning the unix username, forcing the NT user to appear to be a unix user, however even that is fraught with implications. might just have to go the whole hog and do this tuple thing, "unix_name + nt_name" always associated together... issue with api_net_sam_logon, getsam21pwent() being called twice, the second time overwriting static buffer data (argh) so had to make a copy. noticed a nested "become_root()"/"unbecome_root()" which will have to be tracked down...
* passdb.c now calls getpwnam() which returns results in a static buffer.Luke Leighton1998-11-301-7/+21
| | | | | a call _outside_ of this was _also_ calling getpwnam. the calls to getsmbpwnam() were therefore overwriting the static buffer.
* - adding builtin[alias]db.Luke Leighton1998-11-302-20/+32
| | | | | | | | | | | | | | | | | | | | | | | | | | - lib/sids.c: generate_sam_sid() modified to take a domain name: it now generates "DOMAIN_NAME.SID". reasons: 1) if you run multiple samba servers on the same machine under different netbios names as members of a domain, they won't all use the same SID, which is a _big_ mistake but it would happen _by default_. 2) we have (had) a problem with sid_to_string() and string_to_sid() which cause SIDs to be incorrectly read. one of the major reasons for *NOT* making this change was so as not to disrupt existing users. but as they will be anyway by this bug, we might as well go ahead. - passdb/smbpass.c: wanted to change the meaning of the name in the smbpasswd file to an "nt" name not a "unix" name. this is probably not a good idea: reverted this. - output formatting / bug-fixing in rpcclient query_useraliases code.
* "retired" two modules to preserve their cvs history.Luke Leighton1998-11-292-0/+713
| | | | added their replacements, added sam password database API modules
* weekend work. user / group database API.Luke Leighton1998-11-298-880/+209
| | | | | | | | | | | | | | | | | | | | | | | | | | | | - split sam_passwd and smb_passwd into separate higher-order function tables - renamed struct smb_passwd's "smb_user" to "unix_user". added "nt_user" plus user_rid, and added a "wrap" function in both sam_passwd and smb_passwd password databases to fill in the blank entries that are not obtained from whatever password database API instance is being used. NOTE: whenever a struct smb_passwd or struct sam_passwd is used, it MUST be initialised with pwdb_sam_init() or pwd_smb_init(), see chgpasswd.c for the only example outside of the password database APIs i could find. - added query_useraliases code to rpcclient. - dealt with some nasty interdependencies involving non-smbd programs and the password database API. this is still not satisfactorily resolved completelely, but it's the best i can do for now. - #ifdef'd out some password database options so that people don't mistakenly set them unless they recompile to _use_ those options. lots of debugging done, it's still not finished. the unix/NT uid/gid and user-rid/group-rid issues are better, but not perfect. the "BUILTIN" domain is still missing: users cannot be added to "BUILTIN" groups yet, as we only have an "alias" db API and a "group" db API but not "builtin-alias" db API...
* we have a problem: resolution of "Primary Group RID" which we assumedLuke Leighton1998-11-261-1/+14
| | | | | | | | | would only be a domain group rid. it can also be a local group rid, which causes us problems in attempting to turn a unix gid into the correct rid (domain group or local group). sooo.... the fix is _in_ there, we just can't use it because it causes link / knock-on problems in nmbd.
* fixing group database issuesLuke Leighton1998-11-252-7/+8
|
* LsaLookupNames client call (first used as lookupnames command in rpcclient).Luke Leighton1998-11-251-23/+29
|
* fixing domain join and domain login problemsLuke Leighton1998-11-251-1/+0
|
* clearer debug commentsLuke Leighton1998-11-241-2/+2
|
* oops, forgot to rename smbfilegrp to smbunixgrp.Luke Leighton1998-11-241-11/+11
|
generated by cgit (git 2.34.1) at 2025-09-25 20:57:26 +0000