summaryrefslogtreecommitdiffstats
path: root/source/smbd/service.c
Commit message (Collapse)AuthorAgeFilesLines
* Removed version number from file header.Tim Potter2002-01-301-2/+1
| | | | Changed "SMB/Netbios" to "SMB/CIFS" in file header.
* Some more 'winbind default domain' support patches from Alexander BokovoyAndrew Bartlett2002-01-271-6/+2
| | | | | | | | | | | <a.bokovoy@sam-solutions.net>. This patch is designed to remove the 'special cases' required for this support. In particular this now kills off winbind_initgroups, as it appears no longer to be required. Andrew Bartlett
* Yes, dev is an 'input/output' paramater...Andrew Bartlett2002-01-271-2/+2
| | | | Andrew Bartlett
* Separate out get_user_home_dir() from get_user_home_service_dir().Jeremy Allison2002-01-161-2/+2
| | | | Jeremy.
* Roll back PSTRING_SANCTIFY patch; just leave non-controversial typeMartin Pool2002-01-161-16/+23
| | | | and constness changes.
* Removed MAXSTATUS which was set incorrectly - thus causing tdb traversalJeremy Allison2002-01-141-10/+4
| | | | | | of the connections db on smbd startup. This should fix the Solaris large load bug.... (fingers crossed). Jeremy.
* Make this error match Win2k.Andrew Bartlett2002-01-111-1/+1
|
* Added NT_USER_TOKEN into server_info to fix extra groups problem.Jeremy Allison2001-11-031-1/+1
| | | | | Got "medieval on our ass" about const warnings (as many as I could :-). Jeremy.
* This is a farily large patch (3300 lines) and reworks most of the AuthRewriteAndrew Bartlett2001-10-311-6/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | code. In particular this assists tpot in some of his work, becouse it provides the connection between the authenticaion and the vuid generation. Major Changes: - Fully malloc'ed structures. - Massive rework of the code so that all structures are made and destroyed using malloc and free, rather than hanging around on the stack. - SAM_ACCOUNT unix uids and gids are now pointers to the same, to allow them to be declared 'invalid' without the chance that people might get ROOT by default. - kill off some of the "DOMAIN\user" lookups. These can be readded at a more appropriate place (probably domain_client_validate.c) in the future. They don't belong in session setups. - Massive introduction of DATA_BLOB structures, particularly for passwords. - Use NTLMSSP flags to tell the backend what its getting, rather than magic lenghths. - Fix winbind back up again, but tpot is redoing this soon anyway. - Abstract much of the work in srv_netlog_nt back into auth helper functions. This is a LARGE change, and any assistance is testing it is appriciated. Domain logons are still broken (as far as I can tell) but other functionality seems intact. Needs testing with a wide variety of MS clients. Andrew Bartlett
* This commit is number 3 of 4.Andrew Bartlett2001-10-291-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In particular this commit focuses on: Changing the Get_Pwnam code so that it can work in a const-enforced environment. While these changes have been mildly tested, and are pretty small, any assistance in this is appreciated. ---- These changes allow for 'const' in the Samba tree. There are a number of good reasons to do this: - I want to allow the SAM_ACCOUNT structure to move from wasteful pstrings and fstrings to allocated strings. We can't do that if people are modifying these outputs, as they may well make assumptions about getting pstrings and fstrings - I want --with-pam_smbpass to compile with a slightly sane volume of warnings, currently its pretty bad, even in 2.2 where is compiles at all. - Tridge assures me that he no longer opposes 'const religion' based on the ability to #define const the problem away. - Changed Get_Pwnam(x,y) into two variants (so that the const parameter can work correctly): - Get_Pwnam(const x) and Get_Pwnam_Modify(x). - Reworked smbd/chgpasswd.c to work with these mods, passing around a 'struct passwd' rather than the modified username
* add non_root_mode() checkAndrew Tridgell2001-10-201-1/+1
|
* Merge the become_XXX -> change_to_XXX fixes from 2.2.2 to HEAD.Jeremy Allison2001-10-181-28/+30
| | | | | Ensure make_conection() can only be called as root. Jeremy.
* Renamed vfs_init() to smbd_vfs_init() to allow vfs modules to compile.Tim Potter2001-10-181-1/+1
|
* Removed 'extern int DEBUGLEVEL' as it is now in the smb.h header.Tim Potter2001-10-021-4/+0
|
* Rearrange the ordering of the checks in make_connection(). The new order hasAndrew Bartlett2001-09-201-37/+56
| | | | | | | | | some sainity, avoiding things like 'root preexec' when the connection would otherwise already be denied (max connections). This does change behaviour, but I think its for the best. Andrew Bartlett
* got rid of bogus write list substitution error messagesAndrew Tridgell2001-09-191-15/+18
|
* Kill off the //server/share%user hack in share level security.Andrew Bartlett2001-09-151-20/+13
| | | | | | This should help make much of this code simpiler. Andrew Bartlett
* Actually fill in the status for sainity checksAndrew Bartlett2001-09-151-1/+1
| | | | Andrew Bartlett
* converted another bunch of stuff to NTSTATUSAndrew Tridgell2001-08-271-22/+22
|
* OK, so not freeing these was a mistake. I'll try to be less exuberent nextAndrew Bartlett2001-08-171-0/+2
| | | | time :-)
* Move the claim_connection stuff till a little later in the process.Andrew Bartlett2001-08-171-16/+14
| | | | (You don't have to clean up somthing you haven't done yet...)
* Move admin user check into a helper function.Andrew Bartlett2001-08-171-18/+35
| | | | Formatting fixes.
* Move read only check into a helper funcion. Ensure conn->service is setAndrew Bartlett2001-08-171-40/+50
| | | | before we use it to find a share's details.
* smbd/auth_server: Doco, we want to use cli_nt_error here soonAndrew Bartlett2001-08-171-30/+43
| | | | | | | | | smbd/password.c: We don't use globals here anymore smbd/reply.c: Tidyness, global_myworkgroup must die! smbd/service.c: Move some of the make_connection code into a helper function.
* better debug messages + fix typo in debug messageSimo Sorce2001-07-261-2/+2
|
* - don't try to print pointersAndrew Tridgell2001-07-251-2/+2
| | | | - removed some unused mangling code
* Convert other parameters (read list, write list, valid users...) to the ↵Simo Sorce2001-07-241-12/+17
| | | | | | | P_LIST format. changed functions to use list instead of strings addedd lp_list_substitute function
* Tidied up calling yield_connection on connection allocation fail.Jeremy Allison2001-07-171-0/+4
| | | | | Restore debug message to level zero. Jeremy.
* strchr and strrchr are macros when compiling with optimisation in gcc, so we ↵Andrew Tridgell2001-07-041-1/+1
| | | | can't redefine them. damn.
* The big character set handling changeover!Andrew Tridgell2001-07-041-3/+0
| | | | | | | This commit gets rid of all our old codepage handling and replaces it with iconv. All internal strings in Samba are now in "unix" charset, which may be multi-byte. See internals.doc and my posting to samba-technical for a more complete explanation.
* Ensured all the system calls in msdfs.c go through the vfs layer.Jeremy Allison2001-06-291-22/+4
| | | | | | Added vfs calls to symlink() and readlink() with appropriate configure checks. Jeremy.
* added a close-share smbcontrol message that forcibly closes a share in smbd ↵Andrew Tridgell2001-06-201-0/+2
| | | | (to allow unmount)
* Now we're doing the substituion in the lp_string code remove the erroneousJeremy Allison2001-05-121-5/+0
| | | | | debug 0 warning. Jeremy.
* Merge of Andrew's changes in 2.2.Jeremy Allison2001-04-131-4/+4
| | | | Jeremy.
* As Andrew suggested, make smbrun return a fd for a deleted file which can thenJeremy Allison2001-04-131-4/+4
| | | | | be read. Jeremy.
* Fix for core dump in security = share code with new share security db.Jeremy Allison2001-04-111-22/+22
| | | | Jeremy.
* Added set/get SD's on shares. Check before tcon.Jeremy Allison2001-04-091-0/+23
| | | | Jeremy.
* Fix from Ed Boraas for not core dumping when out of connection structs.Jeremy Allison2001-04-061-1/+0
| | | | Jeremy.
* Patch from Massimo Sivilotti <mass@tanner.com> to log remote machine/ip onJeremy Allison2001-03-261-1/+2
| | | | | connection fail. Jeremy.
* Added ADMIN$ share as alias for IPC$ except no guest connect. AS/U wantsJeremy Allison2001-03-131-3/+3
| | | | | to do RPC calls down this treeid. Jeremy.
* Merge of new 2.2 code into HEAD (Gerald I hate you :-) :-). Allows new SAMRJeremy Allison2001-03-111-4/+0
| | | | | | RPC code to merge with new passdb code. Currently rpcclient doesn't compile. I'm working on it... Jeremy.
* smbd/process.c: & type with 0xff for paranioa sake...Jeremy Allison2001-01-241-30/+42
| | | | | | smbd/reply.c smbd/service.c: cause all "add home service" calls to go through a winbindd aware function. Jeremy.
* only add the service name and client machine name to list of users namesGerald Carter2001-01-231-2/+5
| | | | | | | for a session when in share mode security --jerry
* include/vfs.h:Jeremy Allison2001-01-231-6/+26
| | | | | | | | | | | | | smbd/vfs-wrap.c: smbd/vfs.c: Added fchmod_acl and chmod_acl. lib/substitute.c: smbd/lanman.c: smbd/open.c: smbd/process.c: smbd/reply.c: smbd/service.c: Removed sessetup_user variable. Added current_user_info struct which conatins domain info etc. Added '%D' for client domain parameter. Jeremy.
* Changes from APPLIANCE_HEAD:David O'Neill2001-01-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | source/rpc_server/srv_spoolss_nt.c - Unrolled construct_notify_jobs_info() loop to only fetch printer info_2 structure once rather than num_print_jobs times. - convert command to unix codepage. - remove lp_remove_service() call as it prevents lp_killservice() from working. - Modified some DEBUG and DEBUGADD statements. source/param/loadparm.c source/param/params.c - change printer, preload, auto services to FLAG_DOS_STRING, reverted earlier changes to szPrintername et al, add comments. source/printing/load.c - fix bug with lp_auto_services() and strtok() source/printing/nt_printing.c source/printing/printing.c - remove redundant test that used SERVICE(snum) source/printing/pcap.c - add unix_to_dos() calls, add notes wrt FIXMEs for xxx_printer_fn() functions. source/web/swat.c - added FIXME comment. source/smbd/service.c - added comment re: dos codepage
* Changes from APPLIANCE_HEAD:David O'Neill2001-01-041-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | source/Makefile.in - changes to ctags and etags rules that somehow got lost along the way. source/include/proto.h - make proto source/smbd/sec_ctx.c source/smbd/password.c - merge debugs for debugging user groups and NT token stuff. source/lib/util_str.c - capitalise domain name returned from parse_domain_user() source/nsswitch/wb_client.c - fix broken conditional in debug statement. source/include/rpc_secdes.h source/include/rpc_spoolss.h source/printing/nt_printing.c source/lib/util_seaccess.c - fix printer permission bugs related to ACE masks for printers. This adds mapping of generic access rights to object specific rights for NT printers. Still need to work out whether or not to ignore ACEs with certain flags set, though. See comments in util_seaccess.c:check_ace() for details. source/printing/nt_printing.c source/printing/printing.c - use PRINTER_ACCESS_ADMINISTER instead of JOB_ACCESS_ADMINISTER until we sort out printer/printjob permission stuff.
* Compile fix for new arg to create_nt_token()Tim Potter2000-12-121-1/+3
|
* we don't need the separate lp_status() connection records any moreAndrew Tridgell2000-11-171-12/+0
|
* fixed the problem with messages not getting throughAndrew Tridgell2000-11-171-33/+27
| | | | | | | | | | the problem had nothing to do with being your own pid, it was instead a problem with IPC$ connections not being registered in the connections database and an incorrect test for -1 in the messaging code. These changes also mean that IPC$ shares now show up in smbstatus. That is probably a good thing.
* Added a VFS version return to init call. Allows smbd to fail an init ifJeremy Allison2000-11-061-0/+2
| | | | | versions don't match. Jeremy.