summaryrefslogtreecommitdiffstats
path: root/source/smbd
Commit message (Collapse)AuthorAgeFilesLines
...
* first cut at using the tdb code for the connections structure, theAndrew Tridgell1999-12-213-160/+75
| | | | | SWAT status page and smbstatus. It made the code _much_ simpler, I wish we'd done a database module a long time ago!
* Fix from tulipant-gergely@dbrt.hu for returning incorrect error codeJeremy Allison1999-12-211-1/+1
| | | | | on user auth fail. Jeremy.
* *Finally*. Correct patch to fix timestamp problems from Paul Eggert ↵Jeremy Allison1999-12-201-3/+14
| | | | | | | <eggert@twinsun.com>. I wish I had written this one :-). Jeremy.
* 2nd phase of head branch sync with SAMBA_2_0 - this delets all the files ↵Andrew Tridgell1999-12-134-999/+0
| | | | that were in the head branch but weren't in SAMBA_2_0
* first pass at updating head branch to be to be the same as the SAMBA_2_0 branchAndrew Tridgell1999-12-1329-3643/+6978
|
* changed function name of get_home_dir() to get_unixhome_dir(), to stopLuke Leighton1999-12-123-4/+4
| | | | | | | clash with gnu readline library. fixed issue with [homes] service not being there - call lp_add_home() just before starting the msrpc processing.
* final part of "first" phase converting over to msrpc daemon architecture.Luke Leighton1999-12-123-175/+3
| | | | | | | | | | | | done a minimal amout of clean-up in the Makefile, removing unnecessary modules from the link stage. this is not complete, yet, and will involve some changes, for example to smbd, to remove dependencies on the password database API that shouldn't be there. for example, smbd should not ever call getsmbpwXXX() it should call the Samr or Lsa API. this first implementation has minor problems with not reinstantiating the same services as the caller. the "homes" service is a good example.
* delineation between smb and msrpc more marked. smbd now constructsLuke Leighton1999-12-124-36/+127
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | pdus, and then feeds them over either a "local" function call or a "remote" function call to an msrpc service. the "remote" msrpc daemon, on the other side of a unix socket, then calls the same "local" function that smbd would, if the msrpc service were being run from inside smbd. this allows a transition from local msrpc services (inside the same smbd process) to remote (over a unix socket). removed reference to pipes_struct in msrpc services. all msrpc processing functions take rpcsrv_struct which is a structure containing state info for the msrpc functions to decode and create pdus. created become_vuser() which does everything not related to connection_struct that become_user() does. removed, as best i could, connection_struct dependencies from the nt spoolss printing code. todo: remove dcinfo from rpcsrv_struct because this stores NETLOGON-specific info on a per-connection basis, and if the connection dies then so does the info, and that's a fairly serious problem. had to put pretty much everything that is in user_struct into parse_creds.c to feed unix user info over to the msrpc daemons. why? because it's expensive to do unix password/group database lookups, and it's definitely expensive to do nt user profile lookups, not to mention pretty difficult and if you did either of these it would introduce a complication / unnecessary interdependency. so, send uid/gid/num_groups/gid_t* + SID+num_rids+domain_group_rids* + unix username + nt username + nt domain + user session key etc. this is the MINIMUM info identified so far that's actually implemented. missing bits include the called and calling netbios names etc. (basically, anything that can be loaded into standard_sub() and standard_sub_basic()...)
* ABOUT TIME!!!!!!!!Luke Leighton1999-12-081-2/+0
| | | | | | | | | | | | | | | damn, this one is bad. started, at least two days ago, to add an authentication mechanism to the smbd<->msrpc redirector/relay, such that sufficient unix / nt information could be transferred across the unix socket to do a become_user() on the other side of the socket. it is necessary that the msrpc daemon inherit the same unix and nt credentials as the smbd process from which it was spawned, until such time as the msrpc daemon receives an authentication request of its own, whereupon the msrpc daemon is responsible for authenticating the new credentials and doing yet another become_user() etc sequence.
* the first independent msrpc daemon - lsarpcd.Luke Leighton1999-12-064-503/+76
| | | | | | | | | | | | | | | one horrible cut / paste job from smbd, plus a code split of shared components between the two. the job is not _yet_ complete, as i need to be able to do a become_user() call for security reasons. i picked lsarpcd first because you don't _need_ security on it (microsoft botched so badly on this one, it's not real. at least they fixed this in nt5 with restrictanonymous=0x2). fixing this involves sending the current smb and unix credentials down the unix pipe so that the daemon it eventually goes to can pick them up at the other end. i can't believe this all worked!!!
* domain_client_validate() no longer takes serverlist, it callsLuke Leighton1999-12-022-13/+11
| | | | get_any_dc_name().
* need a domain resolving function, but get_trusted_serverlist() will do.Luke Leighton1999-12-021-30/+6
| | | | this is horrible.
* cli_session_setup() now takes an extra argument (host name). hey, whatLuke Leighton1999-12-011-2/+4
| | | | | the heck is a cli_session_setup() call doing in here??? this should use cli_establish_connection()server!
* sys_select added one more argument (read, write selectors).Luke Leighton1999-12-013-3/+3
|
* attempting to resolve the issue that multiple servers often specified inLuke Leighton1999-11-291-53/+11
| | | | parameters to connect to \PIPE\NETLOGON.
* WARNING! MOVED rpc_server/srv_lsa_hnd.c TO lib/util_hnd.cLuke Leighton1999-11-241-1/+4
| | | | | | CVS UPDATE MAY ISSUE WARNING ABOUT lib/util_hnd.c MODIFICATION DATE BEING IN THE FUTURE. CVS CHECKOUT A NEW REPOSITORY MAY BE SAFER.
* rewrote policy handle code to be generic (it's needed for client-side too)Luke Leighton1999-11-241-1/+1
| | | | attempted to fix regsetsec command
* implement server-side generation of NTLMv2 session key. YESSS :-)Luke Leighton1999-11-212-12/+27
|
* hmmm... have to add client-side support in domain_client_validate() toLuke Leighton1999-11-212-6/+9
| | | | _use_ user session key.
* adding user session key into network netlogon response.Luke Leighton1999-11-211-12/+12
|
* oops, #ifdef'd cli_shutdown out, as the fun has _already_ started:Luke Leighton1999-11-201-2/+1
| | | | NT refuses to play nice, and establish a trust relationship.
* attempting to establish inter-domain trust relationships. modifiedLuke Leighton1999-11-201-0/+2
| | | | smbpasswd so it can be used to set up inter-domain trust account.
* modified domain_client_validate to take trust account name / type. thisLuke Leighton1999-11-203-11/+68
| | | | | | | | | | is to pass DOMAIN_NAME$ and SEC_CHAN_DOMAIN instead of WKSTA_NAME$ and SEC_CHAN_WKSTA. modified check_domain_security to determine if domain name is own domain, and to use wksta trust account if so, otherwise check "trusting domains" parameter and use inter-domain trust account if so, otherwise return False.
* - bug in nmbd registering DOMAIN_NAME<1c> to WINS server; recursionLuke Leighton1999-11-191-0/+1
| | | | | | | | desired flag MUST be set in any NBT UDP packets sent to a WINS server, else they will go to the WINS client side of the NT NetBIOS kernel instead, and will get trashed. - added \PIPE\browser server-side code.
* set "key does not exist" response to reg_query_val() (win32 status codeLuke Leighton1999-11-181-0/+6
| | | | of 0x2). [p.s. getting REALLY bored of this nt5rc2->samba domain stuff].
* - added DCE/RPC "fault" PDU support.Luke Leighton1999-11-154-5/+51
| | | | | | | | | - disabled (AGAIN) the GETDC "if (MAILSLOT\NTLOGON)" code that will get NT5rc2 to work but WILL break win95 (AGAIN). this needs _not_ to be re-enabled but to be replaced with a better mechanism. - added SMBwrite support (note: SMBwriteX already existed) as NT5rc2 is sending DCE/RPC over SMBwrite not SMBwriteX.
* samuserset <username> -p password. YESSSSS :)Luke Leighton1999-11-041-67/+0
| | | | you have to use "ntlmv1" at the moment (i.e set client ntlmv2 = no).
* adding experimental set user password command to rpcclient, it returnsLuke Leighton1999-11-041-0/+31
| | | | error wrong password against nt. ????
* cli_nt_setup_creds() returns uint32 NT status code not a BOOL.Luke Leighton1999-10-291-3/+4
| | | | removed all comparisons to if (fn() == False), replaced with if (!fn()).
* various. debug levels changed. nmbd doesn't need libsmb/clienttrust.c.Luke Leighton1999-10-211-1/+1
| | | | | | | samr_lookup_rids() moved to a dynamic memory structure not a static one limited to 32 RIDs. cli_pipe.c reading wasn't checking ERRmoredata when DOS error codes negotiated (this terminates MSRPC code with prejudice).
* David van Geyn spotted that ulong is not defined on FREEBSD, not supposedLuke Leighton1999-10-051-1/+1
| | | | to use ulong use uint32 instead.
* don't leak printer handles,Jean-François Micouleau1999-09-271-2/+5
| | | | | | | don't coredump when adding forms, and a small non obvious memory leak in the rpc buffers J.F.
* reading in smb server domain name from SMBnegprot responseLuke Leighton1999-09-161-3/+4
|
* #defines for port 445 to SMB_PORT2Luke Leighton1999-09-151-4/+4
|
* - initialising mach_passwd_file locks to zero (prev. uninit.)Luke Leighton1999-09-121-1/+0
| | | | | | | - cleanup - #defined report to sprintf as it's #defined to another function in other uses of cmd_lsarpc.c
* oops, port 455 instead of 445Luke Leighton1999-09-101-1/+1
|
* bertl <bs@niggard.org> patch for making samba listen on port 445, just likeLuke Leighton1999-09-082-28/+76
| | | | nt 5 does. cool!
* spelling mistake.Luke Leighton1999-08-131-1/+1
|
* pnum should be a uint16.Luke Leighton1999-08-131-2/+2
|
* Copy service name into vfs_connection_struct.Tim Potter1999-07-221-0/+2
|
* Pass VFS options defined in smb.conf to vfs_init() function.Tim Potter1999-07-221-4/+7
|
* comments requested by jeremy as to why NT/95 NULL-password distinction hackLuke Leighton1999-07-211-1/+6
| | | | was modified.
* NTLMv2 check being actioned when NT password response was only 24 chars.Luke Leighton1999-07-161-1/+1
| | | | | added check to ensure response is more than 24 chars before bothering to do an NTLMv2 check.
* copy of password struct needed to be made prior to calling copy_passwd_structLuke Leighton1999-07-161-6/+8
| | | | found by Bertl <bs@vpnet.at>.
* work-around for win95 NULL session bug: NULL password actually beingLuke Leighton1999-07-151-3/+13
| | | | | placed in data stream before username / domain, whereas NT doesn't do this...
* more dfs stuff. this looks like it's going to be more appropriate to useLuke Leighton1999-07-155-84/+231
| | | | | | | the vfs tables. at the moment, i replaced all calls to unix_convert() with unix_dfs_convert(). this does the job, but it's not very nice.
* dfs issuesLuke Leighton1999-07-152-8/+15
|
* added %d %d to error message, try to track down the uid / smb_uid mismatchLuke Leighton1999-07-151-2/+2
|
* removed strncpy()Luke Leighton1999-07-141-23/+25
|
* dfs parsed string length was being set explicitly to value "6", overwritingLuke Leighton1999-07-131-22/+21
| | | | the correct length.
generated by cgit (git 2.34.1) at 2025-09-27 11:35:07 +0000