summaryrefslogtreecommitdiffstats
path: root/source/smbd
Commit message (Collapse)AuthorAgeFilesLines
...
* Ensure we fill in the %U for NTLMSSP connectionsAndrew Bartlett2001-12-051-1/+3
|
* added a REALLY gross hack into kerberos_kinit_password so thatAndrew Tridgell2001-12-052-2/+2
| | | | | | winbindd can do a kinit this will be removed once we have code that gets a tgt and puts it in a place where cyrus-sasl can see it
* Merge from 2.2Herb Lewis2001-12-041-0/+6
| | | | | If you do not have one more expect than issue when talking to the passwd program you will not send the last issue.
* added a boolean to the group mapping functions to specify if we need orJean-François Micouleau2001-12-041-1/+1
| | | | | | | | | | | | | | | | | | | | | not the privileges. Usually we don't need them, so the memory is free early. lib/util_sid.c: added some helper functions to check an SID. passdb/passdb.c: renamed local_lookup_rid() to local_lookup_sid() and pass an RID all the way. If the group doesn't exist on the domain SID, don't return a faked one as it can collide with a builtin one. Some rpc structures have been badly designed, they return only rids and force the client to do subsequent lsa_lookup_sid() on the domain sid and the builtin sid ! rpc_server/srv_util.c: wrote a new version of get_domain_user_groups(). Only the samr code uses it atm. It uses the group mapping code instead of a bloody hard coded crap. The netlogon code will use it too, but I have to do some test first. J.F.
* Stop using getgrgid() - a very expensive call with winbindd, to look upJeremy Allison2001-12-041-13/+10
| | | | | a group name. Jeremy.
* Moved name_is_local to the correct place. Ooops.Jeremy Allison2001-12-041-10/+0
| | | | Jeremy.
* Tidyup of lib/username. Add name_is_local fn to determine if name isJeremy Allison2001-12-041-0/+10
| | | | | winbindd. Getting ready for efficiency fix in group lookups. Jeremy.
* added a tdb to store the account policy informations.Jean-François Micouleau2001-12-031-4/+9
| | | | | | | | | | | | | | You can change them with either usermanager->policies->account or from a command prompt on NT/W2K: net accounts /domain we can add a rpc accounts to the net command. As the net_rpc.c is still empty, I did not start. How should I add command to it ? Should I take the rpcclient/cmd_xxx functions and call them from there ? alse changed the SAM_UNK_INFO_3 parser, it's an NTTIME. This one is more for jeremy ;-) J.F.
* XFS quota patch for Linux.Jeremy Allison2001-11-301-2/+33
| | | | Jeremy.
* Renamed sid field in SEC_ACE to trustee to be more in line with MS'sTim Potter2001-11-301-23/+23
| | | | definitions.
* Make better use of the ads_init() function to get the kerberos relam etc.Andrew Bartlett2001-11-292-16/+25
| | | | | | | | | This allows us to use automagically obtained values in future, and the value from krb5.conf now. Also fix mem leaks etc. Andrew Bartlett
* fixed some krb5 ifdefsAndrew Tridgell2001-11-281-2/+2
|
* space -> tab.Jeremy Allison2001-11-281-24/+20
| | | | Jeremy.
* Spelling pedents strike again :-).Jeremy Allison2001-11-281-1/+1
| | | | Jeremy.
* Ensure the CAN_WRITE is checked and prevents O_CREAT and O_TRUNC fromJeremy Allison2001-11-282-2/+11
| | | | | | being set. Also prevent an open on a file on a readonly share from setting delete on close. Jeremy.
* Re-added "Share modes" meaning don't allow deny mode conflict. Due toJeremy Allison2001-11-281-2/+10
| | | | | user demand (don't talk to me about removing parameters.... :-). Jeremy.
* always send an OID list until we handle raw (unwrapped) NTLMSSPAndrew Tridgell2001-11-271-6/+15
| | | | packets in session setup
* Fix for the logic bug wrt. existant oplocks. See long messageJeremy Allison2001-11-271-5/+2
| | | | | in samba-technical for explaination. Jeremy.
* nsswitch/winbindd_group.c nsswitch/winbindd_user.c: formatting fixups.Jeremy Allison2001-11-271-1/+1
| | | | | smbd/open.c: Fix "delete on close" for directories. Jeremy.
* fixed another memory leakAndrew Tridgell2001-11-271-1/+1
|
* more memory leak fixesAndrew Tridgell2001-11-271-1/+6
|
* don't try to auto-change the trust password unless we are in domainAndrew Tridgell2001-11-271-1/+4
| | | | security
* we can safely give NO_SUCH_USER if the ticket decodes but the localAndrew Tridgell2001-11-261-1/+1
| | | | account doesn't exist
* Another merge from appliance-head: in [ug]id_to_sid don't call theTim Potter2001-11-261-14/+30
| | | | | winbind function if the id is obviously going to be local. Cleanup of winbind [ug]id parameter handling.
* challange -> challengeTim Potter2001-11-263-9/+9
|
* Got medieval on another pointless extern. Removed extern struct ipzeroTim Potter2001-11-261-2/+0
| | | | | | | and replaced with two functions: void zero_ip(struct in_adder *ip); BOOL is_zero_ip(struct in_addr ip);
* This compleats the of the authenticaion subystem into the new 'auth'Andrew Bartlett2001-11-2610-2715/+0
| | | | | | | | | | | | subdirectory. (The insertion of these files was done with some CVS backend magic, hence the lack of a commit message). This also moves libsmb/domain_client_validate.c back into auth_domain.c, becouse we no longer share it with winbind. Andrew Bartlett
* fixed spnego, non-kerberos negprotAndrew Tridgell2001-11-261-2/+2
|
* added 'security=ADS'Andrew Tridgell2001-11-251-0/+7
|
* #ifdefed DMF fix so not compiled by default. We need to look at this...Jeremy Allison2001-11-251-22/+39
| | | | Jeremy.
* Add the PDC end of the smbtorture test for creating an NT_STATUS -> DOS errorAndrew Bartlett2001-11-252-0/+36
| | | | | | | | | | | | | | | | map. This little authentication module is #ifdef DEVELOPER, becouse it really is of no use execept as a development tool invoke by setting: auth methods = guest sam name_to_ntstatus in the smb.conf file (the SAM and guest elements are required for the member server to authenticate itself). Andrew Bartlett
* I think this is a fix for the "out of space" errors with oplocks=no.Jeremy Allison2001-11-251-49/+58
| | | | Jeremy.
* added "net join" commandAndrew Tridgell2001-11-241-38/+5
| | | | this completes the first stage of the smbd ADS support
* removed unused functionAndrew Tridgell2001-11-241-18/+0
|
* And add the winbind module I missed in the last run.Andrew Bartlett2001-11-241-0/+111
| | | | | | (large change to modularise the auth subsystem) Andrew Bartlett
* This is another rather major change to the samba authenticaionAndrew Bartlett2001-11-2413-408/+942
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | subystem. The particular aim is to modularized the interface - so that we can have arbitrary password back-ends. This code adds one such back-end, a 'winbind' module to authenticate against the winbind_auth_crap functionality. While fully-functional this code is mainly useful as a demonstration, because we don't get back the info3 as we would for direct ntdomain authentication. This commit introduced the new 'auth methods' parameter, in the spirit of the 'auth order' discussed on the lists. It is renamed because not all the methods may be consulted, even if previous methods fail - they may not have a suitable challenge for example. Also, we have a 'local' authentication method, for old-style 'unix if plaintext, sam if encrypted' authentication and a 'guest' module to handle guest logins in a single place. While this current design is not ideal, I feel that it does provide a better infrastructure than the current design, and can be built upon. The following parameters have changed: - use rhosts = This has been replaced by the 'rhosts' authentication method, and can be specified like 'auth methods = guest rhosts' - hosts equiv = This needs both this parameter and an 'auth methods' entry to be effective. (auth methods = guest hostsequiv ....) - plaintext to smbpasswd = This is replaced by specifying 'sam' rather than 'local' in the auth methods. The security = parameter is unchanged, and now provides defaults for the 'auth methods' parameter. The available auth methods are: guest rhosts hostsequiv sam (passdb direct hash access) unix (PAM, crypt() etc) local (the combination of the above, based on encryption) smbserver (old security=server) ntdomain (old security=domain) winbind (use winbind to cache DC connections) Assistance in testing, or the production of new and interesting authentication modules is always appreciated. Andrew Bartlett
* Fixed delete on close bug. Added core dump code to winbindd.Jeremy Allison2001-11-233-80/+125
| | | | Jeremy.
* Removed TimeInit() call from every client program (except for one placeTim Potter2001-11-231-2/+0
| | | | | in smbd/process.c where the timezone is reinitialised. Was replaced with check for a static is_initialised boolean.
* WITH_MSDFS is not define anywhere. It's built by default.Gerald Carter2001-11-221-3/+0
|
* More spelling fixes, comment reformatting.Tim Potter2001-11-211-8/+11
|
* Spelling fix, reformatted comment.Tim Potter2001-11-211-4/+6
|
* Fixed sizeof vs array length bug in make_user_info_winbind_crap()Tim Potter2001-11-201-2/+2
| | | | Spelling fix.
* add a hook to save the krb5 PACAndrew Tridgell2001-11-201-0/+8
|
* Move all other paths into dynconfigMartin Pool2001-11-191-9/+1
|
* Cosmetic fix for debug statement.Tim Potter2001-11-191-2/+1
|
* Don't resolve the hostname in smbd as we can pause for a long time whileTim Potter2001-11-191-3/+6
| | | | | waiting for DNS timeouts to occur. The correct place to do this is in the code that displays the session information.
* LIBDIR and LOCKDIR are dynamically configured too.Martin Pool2001-11-191-3/+1
|
* Store some path names in global variables initialized to configureMartin Pool2001-11-193-20/+13
| | | | default, rather than in preprocessor macros.
* Tidyups when I was doing the big merge...Jeremy Allison2001-11-172-12/+17
| | | | Jeremy.
* Fix detection of RedHat 7.2.Jeremy Allison2001-11-151-0/+5
| | | | | | Remove unused old file. Test 42 byte reply to SMBntcreate (W2K does this). Jeremy.
generated by cgit (git 2.34.1) at 2025-09-27 12:27:12 +0000