summaryrefslogtreecommitdiffstats
path: root/source/smbd
Commit message (Collapse)AuthorAgeFilesLines
...
* Fix from Herb. mincount/maxcount need to be ssize_t for comparisons.Jeremy Allison2001-11-141-1/+1
| | | | Jeremy.
* Formatting fixes only.Jeremy Allison2001-11-132-58/+57
| | | | Jeremy.
* Spelling fixes.Tim Potter2001-11-121-6/+6
|
* Don't check space on every extend if strict allocate not set.Jeremy Allison2001-11-121-5/+3
| | | | Jeremy
* Fixed allocation bug in database prog. Some format fixes.Jeremy Allison2001-11-122-997/+981
| | | | Jeremy.
* some bugfix and new functions,Simo Sorce2001-11-121-31/+10
| | | | | modified mangle.c to use mosltly acnv_????() functions. this should make also build farm happy
* Code duplication is bad. So add an add_signiture() function and just refernceAndrew Bartlett2001-11-121-23/+17
| | | | that.
* Kill off 'restrict anonymous' becouse it is useless in its current form.Andrew Bartlett2001-11-111-47/+0
| | | | | | | To be replaced with a real restriction in consultation with jra. (Hence why I've not touched loadparm.c). Andrew Bartlett
* Fix up some DEBUG()sAndrew Bartlett2001-11-111-17/+37
| | | | | | Add and fix comments Add 'const' to some more input paramaters.
* Add back the not null checks in a better place.Andrew Bartlett2001-11-111-1/+7
| | | | Check the pdb_init_sam() for failure.
* make sam_account_ok static.Andrew Bartlett2001-11-111-32/+29
| | | | | | remove rudundent not null checks fix indenting
* This extra check isn't needed, we can only get here if secuirty=domainAndrew Bartlett2001-11-111-3/+0
|
* Minor updates. A small dose of const.Andrew Bartlett2001-11-112-2/+2
|
* fixed, moved and added some functionsSimo Sorce2001-11-101-1/+1
| | | | note the useful acnv_uxu2 and acnv_u2ux functions in charcnv.c
* Use defined constants not integers.Jeremy Allison2001-11-101-3/+3
| | | | Jeremy.
* Fixup __LPID -> _LPID.Jeremy Allison2001-11-091-1/+1
| | | | Jeremy.
* This change updates lp_guestaccount() to be a *global* paramater, rather thanAndrew Bartlett2001-11-094-9/+10
| | | | | | | | | | | | | | | | per-share. I beleive that almost all the things that this could have done on a per-share basis can be done with other tools, like 'force user'. Almost all the user's of this paramater used it as a global anyway... While this is one step at a time, I hope it will allow me to considerably simplfy the make_connection() code, particularly for the user-level security case. This already removes an absolute truckload of extra attempted password lookups on the guest account. Andrew Bartlett
* fix the tree so it compiles againAndrew Tridgell2001-11-091-1/+1
| | | | grumble, mumble, ...
* Change to guest logon code.Andrew Bartlett2001-11-086-100/+168
| | | | | | | | | | | | | | | | | | | | | | | | | This changes the way we process guest logons - we now treat them as normal logons, but set the 'guest' flag. In particular this is needed becouse Win2k will do an NTLMSSP login with username "", therefore missing our previous guest connection code - this is getting a pain to do as a special case all over the shop. Tridge: We don't seem to be setting a guest bit for NTLMSSP, in either the anonymous or authenticated case, can you take a look at this? Also some cleanups in the check_password() code that should make some of the debugs clearer. Various other minor cleanups: - change the session code to just take a vuser, rather than having to do a vuid lookup on vuser.vuid - Change some of the global_client_caps linking - Better debug in authorise_login(): show the vuid. Andrew Bartlett
* Fixed incorrect debug message. )-:Tim Potter2001-11-081-1/+1
|
* Only 1mb allocate slop.Jeremy Allison2001-11-081-56/+55
| | | | Jeremy.
* Merge overdue changes from 2.2. Fix <4gb write problem.Jeremy Allison2001-11-081-40/+29
| | | | Jeremy.
* Added more define bits. Fixed error in vol attributes.Jeremy Allison2001-11-081-1/+0
| | | | Jeremy.
* Added debug in truncate, fixed warning with gcc3.Jeremy Allison2001-11-071-0/+1
| | | | Jeremy.
* Fixed unsigned / long unsigned format missmatch.Jeremy Allison2001-11-061-4/+4
| | | | Jeremy
* Renamed make_user_info_for_winbindd() to be more consistent with theTim Potter2001-11-051-4/+4
| | | | names of the other functions in this file.
* Fixed compiler warnings.Tim Potter2001-11-051-3/+2
|
* Don't put a \n on the end of the arg to exit_server()Tim Potter2001-11-059-25/+25
|
* a big one:Simo Sorce2001-11-041-1084/+249
| | | | | | | | | | | | | | | | | - old mangle code has gone, the new one based on tdb seem resonably ok probably the valid.dat table need to be updated to treat wild chars as invalid ones (work ok without it) - a LOT of new string manipulation function for unicode, they are somewhat tested but a review would not be bad - some new function I will need for the new unix_convert function I'm writing, this will be renamed filename_convert and use only unicode strings. - charconv, I attached a comment, if someone wnat to look if I'm right or just was hacking to late in the night to make a sane one :) of course any bug is my responsibility an will be pleased to see patches if you find any. :-) Simo.
* Fix segfault. sup_tok might not always be with us.Andrew Bartlett2001-11-041-3/+5
|
* Added NT_USER_TOKEN into server_info to fix extra groups problem.Jeremy Allison2001-11-037-67/+154
| | | | | Got "medieval on our ass" about const warnings (as many as I could :-). Jeremy.
* anonymous logins are guest logins, so mark them as such. (Otherwise they canAndrew Bartlett2001-11-031-1/+1
| | | | browse non-guest shares).
* Minor cleanups/fixes in the NTLMv2 codeAndrew Bartlett2001-11-031-6/+2
|
* Move the test for non-SPNEGO session setups when using SPNEGO, becouse its aAndrew Bartlett2001-11-031-5/+5
| | | | perfectly vailid behaviour for guest logins.
* Various post AuthRewrite cleanups, fixups and tidyups.Andrew Bartlett2001-11-014-27/+36
| | | | | | | | | | | | | | | | | Zero out some of the plaintext passwords for paranoia Fix up some of the other passdb backends with the change to *uid_t rather than uid_t. Make some of the code in srv_netlog_nt.c clearer, is passing an array around, so pass its lenght in is definition, not as a seperate paramater. Use sizeof() rather than magic numbers, it makes things easier to read. Cope with a PAM authenticated user who is not in /etc/passwd - currently by saying NO_SUCH_USER, but this can change in future. Andrew Bartlett
* This should fix up the compile with krb5.Andrew Bartlett2001-10-311-7/+9
| | | | This needs to use the auth interface at some stage, but for now this will do.
* When you make a data_blob() then you probably need to free it too...Andrew Bartlett2001-10-311-0/+4
|
* Fix up domain logons. Tested with NT4.Andrew Bartlett2001-10-311-1/+1
|
* This is a farily large patch (3300 lines) and reworks most of the AuthRewriteAndrew Bartlett2001-10-3111-511/+1086
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | code. In particular this assists tpot in some of his work, becouse it provides the connection between the authenticaion and the vuid generation. Major Changes: - Fully malloc'ed structures. - Massive rework of the code so that all structures are made and destroyed using malloc and free, rather than hanging around on the stack. - SAM_ACCOUNT unix uids and gids are now pointers to the same, to allow them to be declared 'invalid' without the chance that people might get ROOT by default. - kill off some of the "DOMAIN\user" lookups. These can be readded at a more appropriate place (probably domain_client_validate.c) in the future. They don't belong in session setups. - Massive introduction of DATA_BLOB structures, particularly for passwords. - Use NTLMSSP flags to tell the backend what its getting, rather than magic lenghths. - Fix winbind back up again, but tpot is redoing this soon anyway. - Abstract much of the work in srv_netlog_nt back into auth helper functions. This is a LARGE change, and any assistance is testing it is appriciated. Domain logons are still broken (as far as I can tell) but other functionality seems intact. Needs testing with a wide variety of MS clients. Andrew Bartlett
* SPNEGO works perfectly well with security=domain, so don't exclude it.Andrew Bartlett2001-10-311-3/+7
|
* Added some extra fields to the auth_serversupplied_info structure.Tim Potter2001-10-311-1/+13
| | | | | | | | | To obtain the full group membership of a user (i.e nested groups on a win2k native mode server) it is necessary to merge this list of groups with the groups returned by winbindd when creating an nt access token. This breaks winbindd linking while AB and I sync up our changes to the authentication subsystem.
* Spnego on the 'server' end of security=server just does not work, so set theAndrew Bartlett2001-10-303-2/+14
| | | | | | | | | flags so we just do a 'normal' session setup. Also add some parinoia code to detect when sombody attempts to do a 'normal' session setup when spnego had been negoitiated. Andrew Bartlett
* Fix up auth_smbpasswd.c to use the password interface, rather than theAndrew Bartlett2001-10-291-8/+8
| | | | | | structures directly. Andrew Bartlett
* another few changes to the new mangle codeSimo Sorce2001-10-291-2/+27
|
* change some more functions to the new mangle interface.Simo Sorce2001-10-291-9/+11
|
* - fix string len for an ucs2_to_dos function as any ucs2 char may be up to 4 ↵Simo Sorce2001-10-291-4/+81
| | | | | | dos hars... - addedd ascii compatibility functions
* This commit is number 4 of 4.Andrew Bartlett2001-10-292-13/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In particular this commit focuses on: Actually adding the 'const' to the passdb interface, and the flow-on changes. Also kill off the 'disp_info' stuff, as its no longer used. While these changes have been mildly tested, and are pretty small, any assistance in this is appreciated. ---- These changes introduces a large dose of 'const' to the Samba tree. There are a number of good reasons to do this: - I want to allow the SAM_ACCOUNT structure to move from wasteful pstrings and fstrings to allocated strings. We can't do that if people are modifying these outputs, as they may well make assumptions about getting pstrings and fstrings - I want --with-pam_smbpass to compile with a slightly sane volume of warnings, currently its pretty bad, even in 2.2 where is compiles at all. - Tridge assures me that he no longer opposes 'const religion' based on the ability to #define const the problem away. - Changed Get_Pwnam(x,y) into two variants (so that the const parameter can work correctly): - Get_Pwnam(const x) and Get_Pwnam_Modify(x). - Reworked smbd/chgpasswd.c to work with these mods, passing around a 'struct passwd' rather than the modified username --- This finishes this line of commits off, your tree should now compile again :-) Andrew Bartlett
* This commit is number 3 of 4.Andrew Bartlett2001-10-297-27/+49
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In particular this commit focuses on: Changing the Get_Pwnam code so that it can work in a const-enforced environment. While these changes have been mildly tested, and are pretty small, any assistance in this is appreciated. ---- These changes allow for 'const' in the Samba tree. There are a number of good reasons to do this: - I want to allow the SAM_ACCOUNT structure to move from wasteful pstrings and fstrings to allocated strings. We can't do that if people are modifying these outputs, as they may well make assumptions about getting pstrings and fstrings - I want --with-pam_smbpass to compile with a slightly sane volume of warnings, currently its pretty bad, even in 2.2 where is compiles at all. - Tridge assures me that he no longer opposes 'const religion' based on the ability to #define const the problem away. - Changed Get_Pwnam(x,y) into two variants (so that the const parameter can work correctly): - Get_Pwnam(const x) and Get_Pwnam_Modify(x). - Reworked smbd/chgpasswd.c to work with these mods, passing around a 'struct passwd' rather than the modified username
* This commit is number 1 of 4.Andrew Bartlett2001-10-291-0/+6
| | | | | | | | | In particular this commit focusses on: Adding the new 'pass changed now' helper function. While these changes have been mildly tested, and are pretty small, any assistance in this is appreciated.
* Fixed confusing debug message - it was always printing uid 0 instead of theTim Potter2001-10-291-1/+1
| | | | correct uid.