summaryrefslogtreecommitdiffstats
path: root/source/passdb
Commit message (Collapse)AuthorAgeFilesLines
...
* static password space needed.Luke Leighton1999-03-101-3/+3
|
* mods to allow inter-domain trust accounts to be added to SAM databaseLuke Leighton1999-03-092-54/+77
| | | | using smbpasswd command.
* pass_check.c could receive encrypted password: printing it out as a %sLuke Leighton1999-03-081-1/+2
| | | | | results in garbage. with no password length argument doing dump_data( 100, password, strlen(password)) is the next best alternative.
* spelling mistake, #ifdef'd out for non-developers (oops!)Luke Leighton1999-03-051-0/+5
|
* Benjamin Kuit's mods.Luke Leighton1999-03-052-3/+5
|
* Benjamin Kuit's latest mysql mods. issue with "make proto" needs to beLuke Leighton1999-03-034-84/+87
| | | | resolved.
* Benjamin Kuit's MYSQL SAM Database implementation.Luke Leighton1999-03-014-0/+937
| | | | Copyright (C) Benjamin Kuit <bj@mcs.uts.edu.au> 1999.
* pwdb_smb_to_sam was not returning NULL for nt name so thatLuke Leighton1999-02-091-8/+20
| | | | | | | | pwdb_sam_map_names() was using a "blank" static string instead of a NULL pointer for nt names. NULL means over-ride, so the nt name got left as "blank". this causes nt clients to terminate with extreme prejudice.
* iteration of sam passwd entries was an order n-cubed algorithm dueLuke Leighton1999-02-082-21/+91
| | | | | to resolution of unix name to nt name being unnecessarily _inside_ another loop.
* Fixed a domain functionality problem where NT clients would startMatthew Chapman1999-02-011-30/+11
| | | | | | | | | | | endlessly repeating a network SAMLOGON (hoping it to change, hmmm...). ( Guess what I found in pwdb_init_sam... unix_to_nt_time(&user->logon_time, (time_t)-1); unix_to_nt_time(&user->logoff_time, (time_t)-1); unix_to_nt_time(&user->kickoff_time, (time_t)-1); ... )
* Finally committing my LDAP changes.Matthew Chapman1999-01-153-50/+135
| | | | | | | | | | | | | | | | | | * Added new APIs for modifying groups. * RIDs are allocated similarly to NT, starting from 1000 and incrementing by 1 for each new user/group. * RIDs are now consistently in hex * Fixed bugs reported by Allan Bjorklund <allan@umich.edu>: - ldap_close_connection is exported by OpenLDAP - changed to ldap_disconnect - Missing ldap_connect() in getusergroups functions - ldap_next_entry was being called too early while retrieving a sam_struct - LDAP globals should be extern in sampassldap.c * Fixed bugs reported by Martin Hofbauer <mh@bacher.at> - Newly added workstation trust accounts had attributes DU rather than W. - User dn's were forced to start with "uid=XX" rather than using the existing dn.
* Fixed the "You password will expire in 0 days. Would you like toGerald Carter1999-01-132-1/+30
| | | | | | | | | | | | | | | change it now?" message when you login to a Samba Controlled domain. The fix is a hard coded 42 days from right now until you need to change you pasword again time (see passdb/sampassdb.c:pwdb_smb_to_sam()) Also fixed getsmbfilepwent() so that it will read in the last password change time correctly. * Related to this lib/util_pwdb.c:StrnCaseCmp() returns 0 if the strings match. Chouldn't this be the pther way? Oh well. I didn't change the return code as it was used in several other cases (see lib/util_pwdb.c:pwdb_get_last_set_time())
* trying to track down issues in get_home_dir().Luke Leighton1998-12-141-0/+4
|
* %U substitution should be unix user not nt userLuke Leighton1998-12-112-4/+9
|
* ldap_getpw() also needs to be (void)Luke Leighton1998-12-081-3/+2
|
* compilation warnings due to missing (void) in ldap_close_connection.Luke Leighton1998-12-081-2/+6
|
* added ldap files by Matthew Chapman.Luke Leighton1998-12-072-0/+623
|
* Matthew Chapman spotted that smbpasschange was assuming the existenceLuke Leighton1998-12-071-29/+0
| | | | | | of a private/smbpasswd file, this will not be the case for other database APIs. removed startsmbdb and endsmbpwdb calls because add_smbpwd_entry() and mod_smbpwd_entry() don't need them.
* matthew chapman's ldap code, to date. plus docs!Luke Leighton1998-12-073-817/+289
|
* attempting to fix "domain user map" up, but it's a bit complicated.Luke Leighton1998-11-301-4/+13
| | | | | | | | | | | | | | | | | i may simply go for a response in the NetSamLogon returning the unix username, forcing the NT user to appear to be a unix user, however even that is fraught with implications. might just have to go the whole hog and do this tuple thing, "unix_name + nt_name" always associated together... issue with api_net_sam_logon, getsam21pwent() being called twice, the second time overwriting static buffer data (argh) so had to make a copy. noticed a nested "become_root()"/"unbecome_root()" which will have to be tracked down...
* passdb.c now calls getpwnam() which returns results in a static buffer.Luke Leighton1998-11-301-7/+21
| | | | | a call _outside_ of this was _also_ calling getpwnam. the calls to getsmbpwnam() were therefore overwriting the static buffer.
* - adding builtin[alias]db.Luke Leighton1998-11-302-20/+32
| | | | | | | | | | | | | | | | | | | | | | | | | | - lib/sids.c: generate_sam_sid() modified to take a domain name: it now generates "DOMAIN_NAME.SID". reasons: 1) if you run multiple samba servers on the same machine under different netbios names as members of a domain, they won't all use the same SID, which is a _big_ mistake but it would happen _by default_. 2) we have (had) a problem with sid_to_string() and string_to_sid() which cause SIDs to be incorrectly read. one of the major reasons for *NOT* making this change was so as not to disrupt existing users. but as they will be anyway by this bug, we might as well go ahead. - passdb/smbpass.c: wanted to change the meaning of the name in the smbpasswd file to an "nt" name not a "unix" name. this is probably not a good idea: reverted this. - output formatting / bug-fixing in rpcclient query_useraliases code.
* "retired" two modules to preserve their cvs history.Luke Leighton1998-11-292-0/+713
| | | | added their replacements, added sam password database API modules
* weekend work. user / group database API.Luke Leighton1998-11-298-880/+209
| | | | | | | | | | | | | | | | | | | | | | | | | | | | - split sam_passwd and smb_passwd into separate higher-order function tables - renamed struct smb_passwd's "smb_user" to "unix_user". added "nt_user" plus user_rid, and added a "wrap" function in both sam_passwd and smb_passwd password databases to fill in the blank entries that are not obtained from whatever password database API instance is being used. NOTE: whenever a struct smb_passwd or struct sam_passwd is used, it MUST be initialised with pwdb_sam_init() or pwd_smb_init(), see chgpasswd.c for the only example outside of the password database APIs i could find. - added query_useraliases code to rpcclient. - dealt with some nasty interdependencies involving non-smbd programs and the password database API. this is still not satisfactorily resolved completelely, but it's the best i can do for now. - #ifdef'd out some password database options so that people don't mistakenly set them unless they recompile to _use_ those options. lots of debugging done, it's still not finished. the unix/NT uid/gid and user-rid/group-rid issues are better, but not perfect. the "BUILTIN" domain is still missing: users cannot be added to "BUILTIN" groups yet, as we only have an "alias" db API and a "group" db API but not "builtin-alias" db API...
* we have a problem: resolution of "Primary Group RID" which we assumedLuke Leighton1998-11-261-1/+14
| | | | | | | | | would only be a domain group rid. it can also be a local group rid, which causes us problems in attempting to turn a unix gid into the correct rid (domain group or local group). sooo.... the fix is _in_ there, we just can't use it because it causes link / knock-on problems in nmbd.
* fixing group database issuesLuke Leighton1998-11-252-7/+8
|
* LsaLookupNames client call (first used as lookupnames command in rpcclient).Luke Leighton1998-11-251-23/+29
|
* fixing domain join and domain login problemsLuke Leighton1998-11-251-1/+0
|
* clearer debug commentsLuke Leighton1998-11-241-2/+2
|
* oops, forgot to rename smbfilegrp to smbunixgrp.Luke Leighton1998-11-241-11/+11
|
* initialise not initialize...Luke Leighton1998-11-242-2/+2
|
* remove unused variableLuke Leighton1998-11-231-1/+0
|
* someone had added code to convert rids to rids, assuming that the ridsLuke Leighton1998-11-231-9/+1
| | | | in the file were gids: they are not.
* unix instance of group database APILuke Leighton1998-11-235-20/+263
|
* Added the same open()/fopen()/creat()/mmap() -> sys_XXX calls.Jeremy Allison1998-11-175-15/+14
| | | | | | | | | | Tidied up some of the mess (no other word for it). Still doesn't compile cleanly. There are calls with incorrect parameters that don't seem to be doing the right thing. This code still needs surgery :-(. Jeremy.
* swapped username:uid:[groupridlist]:[aliasridlist] toLuke Leighton1998-11-171-9/+9
| | | | u:u:a:g
* - group database API. oops and oh dear, the threat has been carried out:Luke Leighton1998-11-175-719/+388
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the pre-alpha "domain group" etc parameters have disappeared. - interactive debug detection - re-added mem_man (andrew's memory management, detects memory corruption) - american spellings of "initialise" replaced with english spelling of "initialise". - started on "lookup_name()" and "lookup_sid()" functions. proper ones. - moved lots of functions around. created some modules of commonly used code. e.g the password file locking code, which is used in groupfile.c and aliasfile.c and smbpass.c - moved RID_TYPE_MASK up another bit. this is really unfortunate, but there is no other "fast" way to identify users from groups from aliases. i do not believe that this code saves us anything (the multipliers) and puts us at a disadvantage (reduces the useable rid space). the designers of NT aren't silly: if they can get away with a user- interface-speed LsaLookupNames / LsaLookupSids, then so can we. i spoke with isaac at the cifs conference, the only time for example that they do a security context check is on file create. certainly not on individual file reads / writes, which would drastically hit their performance and ours, too. - renamed myworkgroup to global_sam_name, amongst other things, when used in the rpc code. there is also a global_member_name, as we are always responsible for a SAM database, the scope of which is limited by the role of the machine (e.g if a member of a workgroup, your SAM is for _local_ logins only, and its name is the name of your server. you even still have a SID. see LsaQueryInfoPolicy, levels 3 and 5). - updated functionality of groupname.c to be able to cope with names like DOMAIN\group and SERVER\alias. used this code to be able to do aliases as well as groups. this code may actually be better off being used in username mapping, too. - created a connect to serverlist function in clientgen.c and used it in password.c - initialisation in server.c depends on the role of the server. well, it does now. - rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
* Makefile.in configure configure.in include/config.h.in: Changes for DGUX and ↵Jeremy Allison1998-11-131-1/+1
| | | | | | | | | | | | | | UNIXWARE. groupdb/aliasdb.c groupdb/aliasfile.c groupdb/groupfile.c: Don't use snprinf, use slprintf. include/includes.h: Fix YP problem. include/smb.h: Fix ZERO_STRUCTP. lib/util_sock.c: Added strerror() in debugs. passdb/ldap.c: Don't use snprinf, use slprintf. rpc_client/cli_lsarpc.c rpc_client/cli_pipe.c rpc_parse/parse_sec.c rpc_server/srv_pipe.c: Don't use snprinf, use slprintf. script/installman.sh: DGUX changes. smbd/open.c smbd/oplock.c: Fixed gcc warnings. web/swat.c: Changes USER to SWAT_USER.
* Removed code that used printf/fprintf in password changin libraries.Herb Lewis1998-11-121-11/+18
| | | | Now passes strings instead.
* extracted the password change code from smbpasswd and used it in swatAndrew Tridgell1998-11-121-0/+162
| | | | instead of opening pipes and other horrible stuff.
* util functions split into relevant modules, first pass.Luke Leighton1998-11-101-43/+0
|
* codepages/codepage_def.936: Updated comment.Jeremy Allison1998-11-071-5/+3
| | | | | | | | | param/loadparm.c: Removed "networkstation user login", "domain controller", and "domain sid" parameters. passdb/passdb.c: Removed "networkstation user login" code and changed bug test code to only check once for a bad password server. This will stop the complaints of many "bad login" audit records in NT PDC logs. utils/smbpasswd.c: Removed check for "domain controller". Jeremy.
* the start of the start of the SAM database APILuke Leighton1998-11-052-0/+417
|
* domain aliases added a bit better: does local aliases if you queryLuke Leighton1998-10-211-5/+6
| | | | | for sid S-1-5-20 and does (nothing at the moment) if you query for your own sid.
* the next dialog: user-groups. it's not very sensible what appears, but hey:Luke Leighton1998-10-214-0/+40
| | | | it appears!
* Small tidyups for gcc in 'preen' mode....Jeremy Allison1998-10-172-0/+2
| | | | Jeremy.
* trust passwordLuke Leighton1998-10-161-2/+2
|
* rpcclient interactive login (with trust account changing if you are root)Luke Leighton1998-10-152-2/+38
| | | | cli_session_setup handles null sessions correctly
* getpwnam() failing is a serious error (corrupt smbpasswd database)Luke Leighton1998-10-151-1/+6
|
* bug-fixing against:Luke Leighton1998-10-151-0/+2
| | | | | | | | | | | | | | | | | | AS/U: it returns dce/rpc "first" and "last" bits _clear_ in a bind/ack response, when they should be set in a (small) packet. they also, in the bind/ack do not set a secondary address string at all, so we can't check against that... Win95: client-side dce/rpc code is a bit odd. it does a "WaitNamedPipeState" and has slightly different pipe-naming (\PIPE\LANMAN is joined by \PIPE\SRVSVC, \PIPE\WINREG etc whereas nt just has \PIPE\LANMAN and \PIPE\). Win95-USRMGR.EXE: added LsaOpenPolicy (renamed existing to LsaOpenPolicy2). added SamrConnect (renamed existing to SamrConnect2).
generated by cgit (git 2.34.1) at 2025-09-27 17:47:44 +0000