| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Add a 'privileged' mode to Winbindd. This is achieved by means of a directory
under lockdir, that the admin can change the group access for.
- This mode is now required to access with 'CRAP' authentication feature.
- This *will* break the current SQUID helper, so I've fixed up our ntlm_auth
replacement:
- Update our NTLMSSP code to cope with 'datagram' mode, where we don't get a
challenge.
- Use this to make our ntlm_auth utility suitable for use in current Squid 2.5
servers.
- Tested - works for Win2k clients, but not Win9X at present. NTLMSSP updates
are needed.
- Now uses fgets(), not x_fgets() to cope with Squid environment (I think
somthing to do with non-blocking stdin).
- Add much more robust connection code to wb_common.c - it will not connect to
a server of a different protocol version, and it will automatically try and
reconnect to the 'privileged' pipe if possible.
- This could help with 'privileged' idmap operations etc in future.
- Add a generic HEX encode routine to util_str.c,
- fix a small line of dodgy C in StrnCpy_fn()
- Correctly pull our 'session key' out of the info3 from th the DC. This is
used in both the auth code, and in for export over the winbind pipe to
ntlm_auth.
- Given the user's challenge/response and access to the privileged pipe,
allow external access to the 'session key'. To be used for MSCHAPv2
integration.
Andrew Bartlett
|
| |
|
| |
|
|
|
|
| |
> Exit path cleanup for cli_samr_enum_dom_users()
|
| |
|
|
|
|
| |
rpc calls.
|
|
|
|
|
| |
Needed to move to disk based i/o later.
Jeremy.
|
|
|
|
| |
hooked into pdb, and we need some access control on changing privileges. That's next
|
|
|
|
|
| |
to lookup what SIDs have a particular privilege (that is how
privileges are stored).
|
| |
|
|
|
|
|
|
|
|
|
|
| |
using a hardcoded value later on.
Added a helper function that returns the observed values for
max_entries and max_size for each cli_samr_query_dispinfo() call.
These values were obtained from watching the NT4 user manager
application with ethereal and are the only ones that can enumerate a
60k user domain reliably under Windows 2000.
|
|
|
|
|
| |
this now gives us complete remove privileges control in the client
libs, so we are in good shape for starting on the server side.
|
|
|
|
|
|
| |
lsa_add_acct_rights function.
This allows us to add privileges remotely to accounts using rpcclient.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
calls to init_unistr2() in the code and every one of them got the 3rd
argument incorrect, so I thought it best just to remove the argument.
The incorrect usage was caused by callers using strlen() to determine
the length of the string. The 3rd argument to init_unistr2() was
supposed to be the character length, not the byte length of the
string, so for non-english this could come out wrong.
I also removed the bogus 'always allocate at least 256 bytes'
hack. There may be some code that relies on this, but if there is then
the code is broken and needs fixing.
|
|
|
|
| |
Removed a dead function.
|
|
|
|
|
|
|
|
|
|
|
| |
principal similar to the existing cli_lsa_enum_privsaccount() call,
except that cli_lsa_enum_account_rights() doesn't require a call to
open_account first. There is also the minor matter that
cli_lsa_enum_account_rights() works whereas
cli_lsa_enum_privsaccount() doesn't!
this call can be used to find what privileges an account or group
has. This is a first step towards proper privileges support in Samba.
|
| |
|
| |
|
|
|
|
| |
to send notify events; CR 1491
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This patch makes Samba compile cleanly with -Wwrite-strings.
- That is, all string literals are marked as 'const'. These strings are
always read only, this just marks them as such for passing to other functions.
What is most supprising is that I didn't need to change more than a few lines of code (all
in 'net', which got a small cleanup of net.h and extern variables). The rest
is just adding a lot of 'const'.
As far as I can tell, I have not added any new warnings - apart from making all
of tdbutil.c's function const (so they warn for adding that const string to
struct).
Andrew Bartlett
|
|
|
|
|
|
|
|
| |
this commit change the structure and code to reflect this
some test revelead I'm right.
some other revelead currently the abort shutdown does not work against my test machine even if it returns successfully ... need investigation
|
| |
|
| |
|
|
|
|
| |
>Fix memory leak in cli_ds_getprimarydominfo()
|
|
|
|
|
|
|
|
|
| |
which we can use to link against Samba unit test programs. Now we can
compile and link unit tests without having to create 4MB executables
for each program
It's called libbigballofmud.so both to discourage casual usage and
also to reflect what the dependencies within Samba have become.
|
|
|
|
|
|
| |
dashes of const. This is a rather large check-in, some things may break.
It does compile though :-).
Jeremy.
|
| |
|
| |
|
|
|
|
|
|
|
| |
Also tidied up some of Richard's code (I don't think he uses the compiler
flags -g -Wall -Wshadow -Wstrict-prototypes -Wpointer-arith -Wcast-qual like
I do :-) :-).
Jeremy.
|
| |
|
| |
|
|
|
|
|
| |
generates some errors we haven't seen before which are inappropriately
logged at level 0.
|
|
|
|
| |
Change a int* to a uint32* in the cli_spoolss_enum_ports() function.
|
|
|
|
| |
decode_port_info and decode_printerdriver functions.
|
|
|
|
| |
of range instead of silently failing.
|
|
|
|
|
|
|
|
|
| |
* s/driverlocation/comment
* detect native mode domain and enumerate local groups
Also
* Added sendfile stats from SAMBA_2_2
|
| |
|
| |
|
|
|
|
| |
from APP_HEAD
|
| |
|
| |
|
|
|
|
| |
know how to decode a printer driver into a DRIVER_INFO_6 structure.
|
|
|
|
| |
Return WERR_UNKNOWN_LEVEL if we can't decode the returned buffer.
|
|
|
|
|
|
| |
one jerry!
(Hey I thought I checked this in already?)
|
|
|
|
|
|
| |
pointers.
Implemented client function for deleteprinterdataex.
|
| |
|
|
|
|
|
|
| |
- getprinterdataex(), setprinterdataex(), enumprinterdataex()
Pass data type down to setprinterdata() fn instead of hardcoding REG_SZ
|
|
|
|
|
|
|
|
|
|
| |
changed cli_nt_setup_creds() to call cli_net_auth_2 or cli_net_auth_3 based on a switch.
pass also the negociation flags all the way.
all the places calling cli_nt_setup_creds() are still using cli_net_aut2(), it's just for future use and for rpcclient.
in the future we will be able to call auth_2 or auth_3 as we want.
J.F.
|