summaryrefslogtreecommitdiffstats
path: root/source/smbd/process.c
Commit message (Collapse)AuthorAgeFilesLines
* Mimir has been busy with patches again, and sent in the followingAndrew Bartlett2002-07-261-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | patches: Andrew Bartlett From his e-mail: Below I attach the following patches as a result of my work on trusted domains support: 1) srv_samr_nt.c.diff This fixes a bug which caused to return null string as the first entry of enumerated accounts list (no matter what entry, it was always null string and rid) and possibly spoiled further names, depeding on their length. I found that while testing my 'net rpc trustdom list' against nt servers and samba server. 2) libsmb.diff Now, fallback to anonymous connection works correctly. 3) smbpasswd.c.diff Just a little fix which actually allows one to create a trusting domain account using smbpasswd 4) typos.diff As the name suggests, it's just a few typos fix :)
* Move some startup time initialisation to server.c, so it is all in one place.Andrew Bartlett2002-07-201-11/+4
| | | | | | | | I'm not sure that we need that "dummy" talloc init, but anyway... Also, add some 'const' to the table of smb reply functions. Andrew Bartlett
* Allow trans2 and nttrans messages to be processed in oplock break state.Jeremy Allison2002-07-191-2/+2
| | | | | | | As noticed by Lev Iserovich <lev@ciprico.com> this seems to fix a problem with oplock breaks and Win2k, and we are protected from problems by existing code in trans2.c and nttrans.c Jeremy.
* compile warngin fixes merged from 2.2Gerald Carter2002-06-171-2/+2
|
* Overly complex but neccessary fix for kernel oplock problems. The issueJeremy Allison2002-06-061-0/+21
| | | | | | | | | | | | | | | is that there are some times when we should return an EINTR from a select, some times when we should not. As we can take a signal at any time, we have to eat EINTR's in some selects. This means we need to check for kernel oplock breaks more often in the main loop, as well as add the queuing mechanism needed for the changenotify code (due to the mistake in understanding POSIX semantics w.r.t. setting a signal mask in a signal handler). This code now passes all my tests. However, (and IMHO and I know tridge disagrees) - the correct way to fix this is to run with RT signals blocked and explicitly unblock them just before the main select, block them after and then process them all in one place. Just my 2cents :-). Jeremy.
* Merge of bugfixes from 2.2.Jeremy Allison2002-05-221-1/+3
| | | | Jeremy.
* Merge of receive_local_message fix from 2.2.5.Jeremy Allison2002-05-221-17/+5
| | | | Jeremy.
* This removes --with-ssl from Samba.Andrew Bartlett2002-05-171-16/+0
| | | | | | | | | | | | | | | | | This option was badly maintained, useless and confused our users and distirbutors. (its SSL, therfore it must be good...) No windows client uses this protocol without help from an SSL tunnel. I can't see any reason why setting up a unix-side SSL wrapper would be any more difficult than the > 10 config options this mess added to samba in any case. On the Samba client end, I think the LIBSMB_PROG hack should be sufficient to start stunnel on the unix side. We might extend this to take %i and %p (IP and port) if there is demand. Andrew Bartlett
* Now we have reliable signals take SIGTERM inband.Jeremy Allison2002-03-141-3/+9
| | | | Jeremy.
* Various comment fixes from Rafal Szczesniak <mimir@diament.ists.pwr.wroc.pl>Andrew Bartlett2002-03-011-1/+1
|
* Fix from Michael Steffens <michael_steffens@hp.com> to make signalJeremy Allison2002-01-311-1/+1
| | | | | | processing work correctly in winbindd. This is a really good patch that gives full select semantics to the Samba modified select. Jeremy.
* Removed version number from file header.Tim Potter2002-01-301-2/+1
| | | | Changed "SMB/Netbios" to "SMB/CIFS" in file header.
* Check request flag for unicode capability and respond accordingly, rather ↵Jim McDonough2002-01-231-1/+2
| | | | than only doing unicode. smbfs didn't work.
* Report write fail in smb_dump.Jeremy Allison2002-01-191-1/+3
| | | | Jeremy.
* Same fix as went into 2.2 (I'm waiting for jerry to finish some code).Jeremy Allison2002-01-111-7/+7
| | | | Jeremy.
* Fixed up atomic update code.Jeremy Allison2002-01-091-2/+2
| | | | Jeremy.
* I've decided to move the auth code around a bit more...Andrew Bartlett2002-01-051-6/+6
| | | | | | | | | | | | | | | | | | | | | | | | The auth_authsupplied_info typedef is now just a plain struct - auth_context, but it has been modified to contain the function pointers to the rest of the auth subsystem's components. (Who needs non-static functions anyway?) In working all this mess out, I fixed a number of memory leaks and moved the entire auth subsystem over to talloc(). Note that the TALLOC_CTX attached to the auth_context can be rather long-lived, it is provided for things that are intended to live as long. (The global_negprot_auth_context lasts the whole life of the smbd). I've also adjusted a few things in auth_domain.c, mainly passing the domain as a paramater to a few functions instead of looking up lp_workgroup(). I'm hopign to make this entire thing a bit more trusted domains (as PDC) freindly in the near future. Other than that, I moved a bit of the code around, hence the rather messy diff. Andrew Bartlett
* Fix talloc msg registrationMartin Pool2002-01-031-1/+1
|
* smbd children should also register for POOL_USAGEMartin Pool2002-01-031-0/+1
|
* cleanup a little namespace pollutionAndrew Tridgell2001-12-101-1/+1
|
* don't try to auto-change the trust password unless we are in domainAndrew Tridgell2001-11-271-1/+4
| | | | security
* challange -> challengeTim Potter2001-11-261-4/+4
|
* This is another rather major change to the samba authenticaionAndrew Bartlett2001-11-241-13/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | subystem. The particular aim is to modularized the interface - so that we can have arbitrary password back-ends. This code adds one such back-end, a 'winbind' module to authenticate against the winbind_auth_crap functionality. While fully-functional this code is mainly useful as a demonstration, because we don't get back the info3 as we would for direct ntdomain authentication. This commit introduced the new 'auth methods' parameter, in the spirit of the 'auth order' discussed on the lists. It is renamed because not all the methods may be consulted, even if previous methods fail - they may not have a suitable challenge for example. Also, we have a 'local' authentication method, for old-style 'unix if plaintext, sam if encrypted' authentication and a 'guest' module to handle guest logins in a single place. While this current design is not ideal, I feel that it does provide a better infrastructure than the current design, and can be built upon. The following parameters have changed: - use rhosts = This has been replaced by the 'rhosts' authentication method, and can be specified like 'auth methods = guest rhosts' - hosts equiv = This needs both this parameter and an 'auth methods' entry to be effective. (auth methods = guest hostsequiv ....) - plaintext to smbpasswd = This is replaced by specifying 'sam' rather than 'local' in the auth methods. The security = parameter is unchanged, and now provides defaults for the 'auth methods' parameter. The available auth methods are: guest rhosts hostsequiv sam (passdb direct hash access) unix (PAM, crypt() etc) local (the combination of the above, based on encryption) smbserver (old security=server) ntdomain (old security=domain) winbind (use winbind to cache DC connections) Assistance in testing, or the production of new and interesting authentication modules is always appreciated. Andrew Bartlett
* Don't put a \n on the end of the arg to exit_server()Tim Potter2001-11-051-1/+1
|
* Converted a bunch of 0x85 constants to SMBkeepalive.Tim Potter2001-10-201-2/+2
|
* Restored old Bmpx code - actually used by OS/2.Jeremy Allison2001-10-191-4/+4
| | | | Jeremy.
* Merge the become_XXX -> change_to_XXX fixes from 2.2.2 to HEAD.Jeremy Allison2001-10-181-6/+6
| | | | | Ensure make_conection() can only be called as root. Jeremy.
* added basic NTLMSSP support in smbd. This is still quite rough, andAndrew Tridgell2001-10-171-19/+18
| | | | | | loses things like username mapping. I wanted to get this in then discuss it a bit to see how we want to split up the existing session setup code
* Fixed inconsistent definitions of InBuf/OutBuf/last_char.Jeremy Allison2001-10-171-3/+0
| | | | | Noticed by albert chin (china@thewrittenword.com) . Jeremy.
* Fixed bug when status=no and max smbd processes > 0.Jeremy Allison2001-10-111-0/+6
| | | | Jeremy.
* Removed 'extern int DEBUGLEVEL' as it is now in the smb.h header.Tim Potter2001-10-021-2/+0
|
* move to SAFE_FREE()Simo Sorce2001-09-171-3/+3
|
* Fix for second logic bug when handing oplock breaks and client messagesJeremy Allison2001-09-101-1/+11
| | | | | simultaneously. Jeremy.
* Fix I think for the fcntl spinning problem. Re-prioritize soJeremy Allison2001-09-051-1/+7
| | | | | that oplock break messages get priority over incoming client messages. Jeremy.
* converted smbd to use NTSTATUS by defaultAndrew Tridgell2001-08-271-9/+9
| | | | | | | | | | | | | | | | major changes include: - added NSTATUS type - added automatic mapping between dos and nt error codes - changed all ERROR() calls to ERROR_DOS() and many to ERROR_NT() these calls auto-translate to the client error code system - got rid of the cached error code and the writebmpx code We eventually will need to also: - get rid of BOOL, so we don't lose error info - replace all ERROR_DOS() calls with ERROR_NT() calls but that is too much for one night
* force checking of log size after 200 smbd in a row or after 30 sec with noHerb Lewis2001-08-221-2/+3
| | | | | | | smbds. This should fix one case of logs not getting rotated properly. We may need to test this to make sure there is no big performance hit from the extra stat call.
* Fix inspired by Don @ HP. Close down password server connection if keepaliveJeremy Allison2001-08-091-1/+4
| | | | | fails. Jeremy.
* Fixed the nastiest locking bug to track down.... smb_pids are sent in theJeremy Allison2001-07-021-1/+1
| | | | | lockingX calls - use that instead of smb_pid in the packet. Jeremy.
* fixed usage of socklen_t and also tidied up SIG_ATOMIC_T, using a typedef ↵Andrew Tridgell2001-06-251-1/+1
| | | | instead of a define
* Fixed logic bug in timeout processing spotted by Ying Chen ↵Jeremy Allison2001-06-221-1/+1
| | | | | | <ying@almaden.ibm.com>. Jeremy.
* added a close-share smbcontrol message that forcibly closes a share in smbd ↵Andrew Tridgell2001-06-201-0/+9
| | | | (to allow unmount)
* *Wonderful* patch from Andrew Bartlett that will help ensure tdb's areJeremy Allison2001-06-091-2/+3
| | | | | cleaned on clients abending connections. Thanks Andrew ! Jeremy.
* Added tdb_change_int_atomic() to allow atomic updates of a tdb int value.Jeremy Allison2001-05-251-6/+6
| | | | Jeremy.
* Fixup the large_writex problem (a large_writex can send a full 64k of data,Jeremy Allison2001-05-241-3/+3
| | | | | we already have space for this we just need to understand the length correctly). Jeremy.
* Got "medieval on our ass" about adding the -1 to slprintf.Jeremy Allison2001-04-081-1/+1
| | | | Jeremy.
* this patch does a number of things:Andrew Tridgell2001-03-131-4/+2
| | | | | | | | | | | | | | | - removes SMB_ALIGNMENT. That macro caused all sorts of problems with getting unicode aligned right in sub-protocols (such as SMBtrans and SMBtrans2). I believe the performance reasons for having SMB_ALIGNMENT has gone away with the new variants of the SMB protocol anyway, as newer commands tend to have their own internal alignment. - fix the locations where we set smb_flg2 to absolute values. We must never do this if we want a hope of coping with unicode. - add initial support for unicode on the wire in smbd. Currently enabled using SMBD_USE_UNICODE environment variable.
* Merge of new 2.2 code into HEAD (Gerald I hate you :-) :-). Allows new SAMRJeremy Allison2001-03-111-3/+0
| | | | | | RPC code to merge with new passdb code. Currently rpcclient doesn't compile. I'm working on it... Jeremy.
* Added total memory allocated counter to talloc, so we can tell if a tallocJeremy Allison2001-02-271-1/+1
| | | | | | | pool is getting bloated. Also added a talloc_zero function to return zeroed memory. Added debug in rpc_server/srv_pipe_hnd.c so we know when a talloc pool is being freed. Syncup with srv_pipe_hnd.c from 2.2 so we are freeing memory at the same time. Jeremy.
* Merge of JohnR's changes to appliance-head, JF's changes to 2.2,Jeremy Allison2001-02-121-2/+27
| | | | | updated the POSIX_ACL code to be in sync. Jeremy.
* smbd/process.c: & type with 0xff for paranioa sake...Jeremy Allison2001-01-241-0/+2
| | | | | | smbd/reply.c smbd/service.c: cause all "add home service" calls to go through a winbindd aware function. Jeremy.