summaryrefslogtreecommitdiffstats
path: root/source/smbd
Commit message (Collapse)AuthorAgeFilesLines
...
* tim suggested to add a copyright note :)Simo Sorce2001-10-081-1/+21
|
* more fixing and testing.Simo Sorce2001-10-071-54/+83
| | | | | | added ucs2_to_dos83 function. the code should be ok now. further test with japanese and other languages is needed at this point.
* Fix up indenting in out SAM password check code.Andrew Bartlett2001-10-061-46/+49
|
* init only in test code.Simo Sorce2001-10-041-48/+55
| | | | | remove unused structure for tdb data. fixes.
* switched over to a new method of handling uppercase/lowercase mappingsAndrew Tridgell2001-10-031-0/+2
| | | | | | | | | | | | | | | | | | | | | | for unicode strings. The new method relies on 3 files that are mmap'd at startup to provide the mapping tables. The upcase.dat and lowcase.dat tables should be the same on all systems. The valid.dat table says what characters are valid in 8.3 names, and differs between systems. I'm committing the japanese valid.dat here, in future we need some way of automatically installing and choosing a appropriate table. This commit also adds my mini tdb based gettext replacement in intl/lang_tdb.c. I have not enabled this yet and have not removed the old gettext code as the new code is still being looked at by Monyo. Right now the code assumes that the upcase.dat, lowcase.dat and valid.dat files are installed in the Samba lib directory. That is not a good choice, but I'll leave them there until we work out the new install directory structure for Samba 3.0. simo - please look at the isvalid_w() function and think about using it in your new mangling code. That should be the final step to correctly passing the chargen test code from monyo.
* Fixed up the change password bug when not using PAM.Jeremy Allison2001-10-021-16/+32
| | | | | | | | | | | | The problem is we were trying to use mask_match as a generic wildcard matcher for UNIX strings (like the password prompts). We can't do that - we need a unix_wild_match (re-added into lib/util.c) as the ms_fnmatch semantics for empty strings are completely wrong. This caused partial reads to be accepted as correct passwd change responses when they were not.... Also added paranioa test to stop passwd change being done as root with no %u in the passwd program string. Jeremy.
* Removed 'extern int DEBUGLEVEL' as it is now in the smb.h header.Tim Potter2001-10-0244-94/+2
|
* honor the ACB_PWNOEXP flag in smbpasswdAndrew Tridgell2001-10-011-2/+1
|
* - fix handling of 0 last_change_time and must_change_timeAndrew Tridgell2001-10-011-31/+32
| | | | - move the arbitrary 21 day timeout to local.h
* Small changes to register_vuid ahead of a larger restructure.Andrew Bartlett2001-09-301-3/+3
|
* undef the code for nowSimo Sorce2001-09-291-2/+2
|
* further devel and test kit.Simo Sorce2001-09-291-67/+264
| | | | | first tests show it still does not work. work in progress...
* Fix up a number of intertwined issues:Andrew Bartlett2001-09-295-61/+80
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The big one is a global change to allow us to NULLify the free'ed pointer to a former passdb object. This was done to allow idra's SAFE_FREE() macro to do its magic, and to satisfy the input test in pdb_init_sam() for a NULL pointer to start with. This NULL pointer test was what was breaking the adding of accounts up until now, and this code has been reworked to avoid duplicating work - I hope this will avoid a similar mess-up in future. Finally, I fixed a few nasty bugs where the pdb_ fuctions's return codes were being ignored. Some of these functions malloc() and are permitted to fail. Also, this caught a nasty bug where pdb_set_lanman_password(sam, NULL) acheived precisely didilly-squat, just returning False. Now that we check the returns this bug was spotted. This could allow different LM and NT passwords. - the pdbedit code needs to start checking these too, but I havn't had a chance to fix it. I have also fixed up where some of the password changing code was using the pdb_set functions to store *internal* data. I assume this is from a previous lot of mass conversion work... Most likally (and going on past experience) I have missed somthing, probably in the LanMan password change code which I havn't yet been able to test, but this lot is in much better shape than it was before. If all this is too much to swallow (particularly for 2.2.2) then just adding a sam_pass = NULL to the particular line of passdb.c should do the trick for the ovbious bug. Andrew Bartlett
* get out unicode_from_buffer and buffer_from_unicode, unneeded.Simo Sorce2001-09-271-112/+139
| | | | | | | store mangled filename in dos charset and unmangled in unicode. clean ups still lot to do. againg compiled but not yet tested.
* minor fixesSimo Sorce2001-09-271-10/+5
|
* OpenSSL merge from 2.2Gerald Carter2001-09-261-9/+19
|
* Kill of the reply.c end of the workstaion trust account mess.Andrew Bartlett2001-09-262-169/+61
| | | | | | | | | | | | | | Fix the NT errror codes, this time in line with WinXP/2k. - Return the normal error codes, expect for bad user/bad password. These map to logon failure, as a quick security hack. We follow suit. Simplfy some of the password extraction code, the auth subsytem has the intelegence to sort this stuff out, no need to do it here. Move to 'global_encrypted_passwords_negotiated' to determine the use of unencrypted hacks, replacing the current mess. Andrew Bartlett
* Process the workstation trust account code INSIDE the authenticaion subsystem,Andrew Bartlett2001-09-261-5/+20
| | | | | | just like any other logon. Matching code removal in reply.c to follow. Andrew Bartlett
* Rearrange the order of the checks in auth_smbpasswd.c, always check passwordsAndrew Bartlett2001-09-261-73/+111
| | | | | | | first. Add password expiry and 'must change before first logon' support. - This requires that the passdb be up to the job to supply the info.
* Fix this to use the plaintext password code directly, like SWAT does.Andrew Bartlett2001-09-261-7/+11
| | | | | | | | | | | This whole area needs to be cleaned up. Should this kind of passowrd change/check be permitted with encrypt passwords = yes? In any case I've also had trouble testing this, as I can't find the right software/configuration to exersise this behaviour. But its better than the previous situation. Any assistance greatly appriciated. Andrew Bartlett
* Update for new pdb_set_plaintext_passwd() interface.Andrew Bartlett2001-09-261-6/+1
|
* Update build_options.c in line with new configure options.Andrew Bartlett2001-09-261-6/+10
|
* - the inactive core of the new mangling code that use tdbSimo Sorce2001-09-251-0/+357
| | | | - some more utils for unicode string manipulation
* fixed a typoAndrew Tridgell2001-09-251-1/+1
|
* Log sys_acl_set_XX at level 2 not zero.Jeremy Allison2001-09-251-2/+2
| | | | Jeremy.
* Change log message to 2 from zero when failing to create directory.Jeremy Allison2001-09-241-1/+1
| | | | | Stops spurious profile creation messages. Jeremy.
* Lets call an NTSTATUS an nt_status, not an ecode.Andrew Bartlett2001-09-231-6/+6
|
* Zero out these pstrings before we start: makes for much easier debugging.Andrew Bartlett2001-09-231-2/+2
|
* Fix up NT_STATUS return for session setups, Win2k objects to anything otherAndrew Bartlett2001-09-232-9/+7
| | | | | | | | | | | than NT_STATUS_LOGON_FAILURE. This also brings us (almost) back in line with their implementation. Kill off SMBENCRYPT() macro Kill off 'nt smb support' paramater - tridge okayed this one. Andrew Bartlett
* Ignore unmappable (NT Authority, BUILTIN etc.) SIDs in an ACL set.Jeremy Allison2001-09-221-0/+11
| | | | Jeremy.
* Attempt to make quotas work with RH7.1, and with other Linuxen... This isJeremy Allison2001-09-211-68/+125
| | | | | *HARD*, dammit ! Jeremy.
* fixed the error code handling in can_delete() by converting it toAndrew Tridgell2001-09-211-19/+22
| | | | NTSTATUS. This gets the right error codes in SMBunlink
* Move pass_check.c over to NTSTATUS, allowing full NTSTATUS from PAM to wire!Andrew Bartlett2001-09-201-3/+3
| | | | | Add the ability for swat to run in non-root-mode (ie non-root from inetd). - we still need some of the am_root() calls fixed however.
* We are not meant to touch the username, so use the pass->pw_name output ratherAndrew Bartlett2001-09-201-6/+6
| | | | than Get_Pwnam(user, True).
* Rearrange the ordering of the checks in make_connection(). The new order hasAndrew Bartlett2001-09-201-37/+56
| | | | | | | | | some sainity, avoiding things like 'root preexec' when the connection would otherwise already be denied (max connections). This does change behaviour, but I think its for the best. Andrew Bartlett
* Fix for MiXed and UPPER case usernames with plaintext PAM passwords.Andrew Bartlett2001-09-201-1/+1
|
* Revert this one: The NTLMv2 checks need the original username as foundAndrew Bartlett2001-09-201-1/+1
| | | | on the wire.
* - Fix up to use sampass->username insted of user_info->smb_usernameAndrew Bartlett2001-09-191-7/+7
| | | | - Fix initial lookup to use the mapped username.
* Adding the appropirate files might help...Andrew Bartlett2001-09-191-0/+714
| | | | | | (These are part of the build_options patch). Andrew Bartlett
* Add the ability to display Samba's build options with smbd -b and as a level 4Andrew Bartlett2001-09-191-16/+23
| | | | | | | | | | | | | | | | | DEBUG(). Also included are details like build date/time, location and compiler. This should get most of the options we set, except those that don't affect smbd, like WITH_PAM_SMBPASSWD or WITH_WINBINDD. This work due to Vance Lankhaar <vlankhaar@hotmail.com> Some work needs to be done to make it only rebuild when needed (ie smbd being rebuilt) but its in pretty good shape already. Also fix up some printf() -> d_printf(). Andrew Bartlett
* printf() -> d_printf()Andrew Bartlett2001-09-191-1/+1
|
* Removed unneeded variable, added comment on deadlock prevention.Jeremy Allison2001-09-191-9/+9
| | | | Jeremy.
* removed anti-race code that could cause a classic ABBA deadlockAndrew Tridgell2001-09-191-21/+1
| | | | | I'd rather get the connection count wrong with a small probability than deadlock
* added a hook to reopen all tdb's after the server forkAndrew Tridgell2001-09-191-0/+3
| | | | this prevents the fd seek pointer problem
* Remove the ugly hacks to get around the Get_Pwnam() calls in pass_check.c byAndrew Bartlett2001-09-191-4/+10
| | | | | | | | | | | | | simply not doing Get_Pwnam() calls in pass_check.c We now make *one* sys_getpnam() call in cgi.c and we always call PAM no matter what it returns. We also no longer run the password cracker for these logins. The truly parinod will note the slight difference in call paths, in that we only call crypt for valid password structs (if not --with-pam). The truly parinoid don't run SWAT either, so I don't think this is an issue. Andrew Bartlett
* got rid of bogus write list substitution error messagesAndrew Tridgell2001-09-191-15/+18
|
* don't try to initgroups in non root modeAndrew Tridgell2001-09-191-0/+4
|
* move to SAFE_FREE()Simo Sorce2001-09-1727-162/+118
|
* fixed ctemp in server and client. It turns out that ctemp on NT is ↵Andrew Tridgell2001-09-171-9/+20
| | | | completely broken, and it's pointless to emulate their brokenness completely in this case, but at least this makes us use approximately the same packet format. The spec is complelet wrong in this case
* Fix up workstaion and kickoff time checks, moved to auth_smbpasswd.c whereAndrew Bartlett2001-09-163-17/+62
| | | | | | | | | they can have general effect. Fixed up workstaion support in the rest of samba, so that we can do these checks. Pass through the workstation for cli_net_logon(), if supplied.
generated by cgit (git 2.34.1) at 2025-09-28 03:53:29 +0000