summaryrefslogtreecommitdiffstats
path: root/source/smbd
Commit message (Collapse)AuthorAgeFilesLines
* rpc_samr.h parse_samr.c srv_samr.c :Luke Leighton1998-12-011-1/+1
| | | | | | | | | | samr_query_aliasmembers (cool!) util_pwdb.c sids.c nmbd.c server.c smbpasswd.c swat.c : pwdb_initialise(BOOL is_server) now creates / reads DOMAIN_NAME.SID if is_server is True, and does LsaQueryInfoPolicy(levels 3 and 5) to obtain member and pdc sids.
* andrej spotted that entries _not_ in domain map user were being refused.Luke Leighton1998-12-011-10/+6
| | | | | modified map_nt_and_unix_names() to never refuse a mapping (returns void now not BOOL).
* hm. removed the "if failed to map nt name to unix name, fail tcon call"Luke Leighton1998-12-011-8/+2
| | | | | | restriction and "domain user map" seems to work. amazing.
* attempting to fix "domain user map" up, but it's a bit complicated.Luke Leighton1998-11-301-34/+56
| | | | | | | | | | | | | | | | | i may simply go for a response in the NetSamLogon returning the unix username, forcing the NT user to appear to be a unix user, however even that is fraught with implications. might just have to go the whole hog and do this tuple thing, "unix_name + nt_name" always associated together... issue with api_net_sam_logon, getsam21pwent() being called twice, the second time overwriting static buffer data (argh) so had to make a copy. noticed a nested "become_root()"/"unbecome_root()" which will have to be tracked down...
* - adding builtin[alias]db.Luke Leighton1998-11-301-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | - lib/sids.c: generate_sam_sid() modified to take a domain name: it now generates "DOMAIN_NAME.SID". reasons: 1) if you run multiple samba servers on the same machine under different netbios names as members of a domain, they won't all use the same SID, which is a _big_ mistake but it would happen _by default_. 2) we have (had) a problem with sid_to_string() and string_to_sid() which cause SIDs to be incorrectly read. one of the major reasons for *NOT* making this change was so as not to disrupt existing users. but as they will be anyway by this bug, we might as well go ahead. - passdb/smbpass.c: wanted to change the meaning of the name in the smbpasswd file to an "nt" name not a "unix" name. this is probably not a good idea: reverted this. - output formatting / bug-fixing in rpcclient query_useraliases code.
* "retired" two modules to preserve their cvs history.Luke Leighton1998-11-291-638/+1
| | | | added their replacements, added sam password database API modules
* weekend work. user / group database API.Luke Leighton1998-11-293-25/+26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | - split sam_passwd and smb_passwd into separate higher-order function tables - renamed struct smb_passwd's "smb_user" to "unix_user". added "nt_user" plus user_rid, and added a "wrap" function in both sam_passwd and smb_passwd password databases to fill in the blank entries that are not obtained from whatever password database API instance is being used. NOTE: whenever a struct smb_passwd or struct sam_passwd is used, it MUST be initialised with pwdb_sam_init() or pwd_smb_init(), see chgpasswd.c for the only example outside of the password database APIs i could find. - added query_useraliases code to rpcclient. - dealt with some nasty interdependencies involving non-smbd programs and the password database API. this is still not satisfactorily resolved completelely, but it's the best i can do for now. - #ifdef'd out some password database options so that people don't mistakenly set them unless they recompile to _use_ those options. lots of debugging done, it's still not finished. the unix/NT uid/gid and user-rid/group-rid issues are better, but not perfect. the "BUILTIN" domain is still missing: users cannot be added to "BUILTIN" groups yet, as we only have an "alias" db API and a "group" db API but not "builtin-alias" db API...
* don't allow ".." in service name when doing "default service"Andrew Tridgell1998-11-291-1/+3
| | | | processing.
* fixing group database issuesLuke Leighton1998-11-251-35/+52
|
* Makefile.in: Added maintainer mode fixes.Jeremy Allison1998-11-257-31/+31
| | | | | | | | | | | | | | | | | | | | | | | | aclocal.m4: Added AC_LIBTESTFUNC. configure.in: Fixed -lsecurity -lsec problems. client.c: dos_ fixes. groupdb/aliasunix.c: Dead code removal. include/includes.h: Added default PRINTCAP_NAME. lib/genrand.c: dos_ fixes. lib/replace.c: Added strtoul. lib/system.c: dos_ fixes. lib/util.c: dos_ fixes. lib/util_sid.c: Signed/unsigned fixes. lib/util_str.c: removed bad const. locking/locking_slow.c: dos_ fixes. printing/printing.c: dos_ fixes. rpc_server/srv_samr.c: Dead code removal. rpc_server/srv_sid.c: global_myworkgroup defined with wrong size AGAIN ! smbd/dir.c: dos_ fixes. smbd/open.c: dos_ fixes. smbd/oplock.c: dos_ fixes. smbd/reply.c smbd/server.c smbd/service.c smbd/uid.c: dos_ fixes. Jeremy.
* LsaLookupNames client call (first used as lookupnames command in rpcclient).Luke Leighton1998-11-251-11/+2
|
* fixing domain join and domain login problemsLuke Leighton1998-11-251-1/+1
|
* Fixed oplock test path spec bug.Jeremy Allison1998-11-241-1/+1
| | | | Jeremy.
* Fixed -Wall -Wshadow warning.Jeremy Allison1998-11-231-2/+1
| | | | Jeremy.
* remove / add / attempt to stop remove didn't work.Luke Leighton1998-11-231-0/+651
|
* unix instance of group database APILuke Leighton1998-11-233-627/+3
|
* changed string_sub() to replace " ; and ` in the inserted string with _Andrew Tridgell1998-11-231-4/+4
| | | | use all_string_sub() if you don't want this.
* try to use *SMBSERVER to connect to password server if the firstAndrew Tridgell1998-11-211-13/+11
| | | | session_request fails.
* formatting changeAndrew Tridgell1998-11-211-1/+1
|
* smbd/password.c: Added *SMBSERVER fix is name is too long.Jeremy Allison1998-11-211-1/+9
| | | | | web/swat.c: Changed '?' to help. Jeremy.
* Instrumented hack fix with debug level 10 statements just in case :-).Jeremy Allison1998-11-201-0/+3
| | | | Jeremy.
* Sync up with 2.0 code.Jeremy Allison1998-11-193-9/+94
| | | | | | Added HPUX autoconf changes. Added "gross hack" printer code. Jeremy.
* Fixed crash bug which was assuming that fd_ptr was always non-nullJeremy Allison1998-11-183-6/+12
| | | | | (which is not the case with open directories). Jeremy.
* Fixed NT modify timestamp issue.Jeremy Allison1998-11-172-2/+26
| | | | | | | If a client does a modify timestamp on an open file (which will do no good at all on UNIX :-) then keep the modify request pending in the files_struct and apply it at close instead. Jeremy.
* Added the same open()/fopen()/creat()/mmap() -> sys_XXX calls.Jeremy Allison1998-11-179-18/+18
| | | | | | | | | | Tidied up some of the mess (no other word for it). Still doesn't compile cleanly. There are calls with incorrect parameters that don't seem to be doing the right thing. This code still needs surgery :-(. Jeremy.
* - group database API. oops and oh dear, the threat has been carried out:Luke Leighton1998-11-176-295/+609
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the pre-alpha "domain group" etc parameters have disappeared. - interactive debug detection - re-added mem_man (andrew's memory management, detects memory corruption) - american spellings of "initialise" replaced with english spelling of "initialise". - started on "lookup_name()" and "lookup_sid()" functions. proper ones. - moved lots of functions around. created some modules of commonly used code. e.g the password file locking code, which is used in groupfile.c and aliasfile.c and smbpass.c - moved RID_TYPE_MASK up another bit. this is really unfortunate, but there is no other "fast" way to identify users from groups from aliases. i do not believe that this code saves us anything (the multipliers) and puts us at a disadvantage (reduces the useable rid space). the designers of NT aren't silly: if they can get away with a user- interface-speed LsaLookupNames / LsaLookupSids, then so can we. i spoke with isaac at the cifs conference, the only time for example that they do a security context check is on file create. certainly not on individual file reads / writes, which would drastically hit their performance and ours, too. - renamed myworkgroup to global_sam_name, amongst other things, when used in the rpc code. there is also a global_member_name, as we are always responsible for a SAM database, the scope of which is limited by the role of the machine (e.g if a member of a workgroup, your SAM is for _local_ logins only, and its name is the name of your server. you even still have a SID. see LsaQueryInfoPolicy, levels 3 and 5). - updated functionality of groupname.c to be able to cope with names like DOMAIN\group and SERVER\alias. used this code to be able to do aliases as well as groups. this code may actually be better off being used in username mapping, too. - created a connect to serverlist function in clientgen.c and used it in password.c - initialisation in server.c depends on the role of the server. well, it does now. - rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
* Makefile.in: Re-added quotes round ROFF call for DGUX.Jeremy Allison1998-11-161-2/+1
| | | | | | script/installman.sh: Make installman ignore ROFF argument if it is "". smbd/oplock.c: Move location of oplock test file to lockdir. Jeremy.
* O_EXCL fixes for printing files & oplocks.Jeremy Allison1998-11-163-3/+6
| | | | Jeremy.
* change ROUNDUP to SMB_ROUNDUP to prevent conflicts with system macrosAndrew Tridgell1998-11-152-7/+7
|
* Makefile.in configure configure.in include/config.h.in: Changes for DGUX and ↵Jeremy Allison1998-11-132-2/+2
| | | | | | | | | | | | | | UNIXWARE. groupdb/aliasdb.c groupdb/aliasfile.c groupdb/groupfile.c: Don't use snprinf, use slprintf. include/includes.h: Fix YP problem. include/smb.h: Fix ZERO_STRUCTP. lib/util_sock.c: Added strerror() in debugs. passdb/ldap.c: Don't use snprinf, use slprintf. rpc_client/cli_lsarpc.c rpc_client/cli_pipe.c rpc_parse/parse_sec.c rpc_server/srv_pipe.c: Don't use snprinf, use slprintf. script/installman.sh: DGUX changes. smbd/open.c smbd/oplock.c: Fixed gcc warnings. web/swat.c: Changes USER to SWAT_USER.
* include/smb.h: Re-added zero pointer protection to ZERO_STRUCTP.Jeremy Allison1998-11-131-1/+1
| | | | | | | lib/util_sock.c: Added strerror() calls to getpeername failures (which seem to be giving IRIX trouble at the moment). rpc_parse/parse_sec.c: Changed use of ZERO_STRUCTPN to ZERO_STRUCTP which again does zero pointer protection. smbd/quotas.c: Fixed typo. Jeremy.
* extracted the password change code from smbpasswd and used it in swatAndrew Tridgell1998-11-121-0/+2
| | | | instead of opening pipes and other horrible stuff.
* Fix fd leak in error condition in grantpt code case.Jeremy Allison1998-11-121-5/+8
| | | | Jeremy.
* Fixed two debug prints.Jeremy Allison1998-11-111-2/+2
| | | | Jeremy.
* include/local.h:Jeremy Allison1998-11-101-6/+13
| | | | | | | | | | | | | include/smb.h: param/loadparm.c: Made GUEST_SESSSETUP run time selectable. Horror of horrors :-). printing/printing.c: Added J.F.'s latest fix. rpc_parse/parse_misc.c: parse_reg.c: rpcclient/cmd_reg.c: rpcclient/display.c: SGI compiler signed/unsigned issues. smbd/reply.c: Made GUEST_SESSSETUP run time selectable. Horror of horrors :-). utils/testparm.c: Added extra test. Jeremy.
* Makefile.in: Removed rpc_server/srv_ldap_helpers.c per J.F.'s instructions.Jeremy Allison1998-11-091-1/+1
| | | | | | | | | | | | | client/client.c: client/clitar.c: include/client.h: smbwrapper/smbw_dir.c: smbwrapper/smbw_stat.c: smbwrapper/smbw.c: lib/util.c: Converted all use of 'mode' to uint16. smbd/quotas.c: Fixed stupid comment bug I put in there :-(. printing/printing.c: Fix from J.F. to new code. Jeremy.
* converted smbclient to use clientgen.c rather than clientutil.cAndrew Tridgell1998-11-092-2/+1
| | | | | | | | | | | | | | | | | | | | | | | I did this when I saw yet another bug report complaining about smbclient intermittently missing files. Rather than applying more patches to smbclient it was better to move to the more robust clientgen.c code. The conversion wasn't perfect, I probably lost some features of smbclient while doing it, but at least smbclient should be consistent now. It if fails it should _always_ fail rather than giving people the false impression of a reliable utility. the tar stuff seems to work, but hasn't had much testing as I never use it myself. I'm sure someone will find bugs in my conversion of smbtar.c. It was quite tricky as it did a lot of its own SMB calls. It now uses clientgen.c exclusively. smbclient is still quite messy, but at least it doesn't build its own SMB packets. I haven't touched smbmount as I never use it. Mike, do you want to convert smbmount to use clientgen.c?
* codepages/codepage_def.936: Updated comment.Jeremy Allison1998-11-071-89/+73
| | | | | | | | | param/loadparm.c: Removed "networkstation user login", "domain controller", and "domain sid" parameters. passdb/passdb.c: Removed "networkstation user login" code and changed bug test code to only check once for a bad password server. This will stop the complaints of many "bad login" audit records in NT PDC logs. utils/smbpasswd.c: Removed check for "domain controller". Jeremy.
* lib/charcnv.c: Improved debug comment.Jeremy Allison1998-11-063-21/+43
| | | | | | | | | | | libsmb/namequery.c: Fix to remove 2 second wait is we are doing a unicast and got a reply. smbd/dfree.c: smbd/noquotas.c: smbd/quotas.c: Fixes from Dejan Ilic <svedja@lysator.liu.se> for the quota code. utils/smbpasswd.c: Fixes to allow smbpasswd to be called from swat. Jeremy.
* Makefile.in configure configure.in include/proto.h smbd/noquotas.c ↵Jeremy Allison1998-11-033-52/+117
| | | | | | | | | | | | smbd/quotas.c: Added quotas patch for autoconf from Dejan Ilic <svedja@lysator.liu.se>. printing/printing.c: Filenames with spaces patch from Allan Bjorklund <allan@umich.edu> utils/nmblookup.c: Fix usage() function. smbd/reply.c: Split out the security=server and security=domain checks into check_server_security() and check_domain_security() to aid the writing of the 'hack' appliance mode invented by John Schimmel. Jeremy.
* removed comment line at end of fileLuke Leighton1998-11-021-1/+0
|
* Fixed bug (that I introduced when doing the "delete on close" workJeremy Allison1998-10-291-7/+9
| | | | | | | | that caused NetBench to fail as the wrong error code was being returned from a getatr call. Change was not to set the unix_ERR_class global when you are not returning an error. This is a big of Samba internal folklore that is *important*. Jeremy.
* Quick fixes to fix the broken tree. Needed for my morning compiles.Jeremy Allison1998-10-281-0/+1
| | | | | | Chris - feel free to fix these things differently if these fixes don't work for you. Jeremy.
* Fix from thwartedefforts@wonky.org (slightly modified) toJeremy Allison1998-10-281-1/+1
| | | | | fix username overwriting problem in security=share. Jeremy.
* debug string with no %s parameter. oopsLuke Leighton1998-10-271-1/+2
|
* Fixed a couple of issues with the SMB_QUERY_FILE_ALL_INFO query.Jeremy Allison1998-10-261-2/+5
| | | | | | Ensured offset was being reported correctly for 64 bit file access, ensured delete on close bit was being reported correctly. Jeremy.
* volker was concerned about unique inode numbers and smbsh. This set ofAndrew Tridgell1998-10-241-0/+1
| | | | | | changes uses the unique index number from a SMB_QUERY_FILE_ALL_INFO to try to provide inode numbers. If it is 0 then use the hash of the filename as before.
* Handle the case where multiple smbd have the file open, some of whomJeremy Allison1998-10-232-17/+76
| | | | | | don't have the ALLOW_DELETE_ON_CLOSE share flag enabled. Told you this was fiddly code :-). Jeremy.
* possible bug in change oem password code: replaced E_P16 and E_md4hashLuke Leighton1998-10-231-9/+1
| | | | | with a call to nt_lm_owf_gen. if this still doesn't get the NT hash generated correctly then there may instead be a bug in mod_smbpwd_entry().
* Make the new code conditional on lp_share_modes() just like the code in ↵Jeremy Allison1998-10-231-36/+39
| | | | | | open_file_shared(). Jeremy.