summaryrefslogtreecommitdiffstats
path: root/source/utils/ntlm_auth.c
Commit message (Collapse)AuthorAgeFilesLines
* r22909: Change prototype of dump_data(), so that it takes unsigned char *Michael Adam2007-05-151-3/+3
| | | | | | | | | | instead of char *, which matches what samba4 has. Fix all the callers to prevent compiler warnings. This essentially ports r22001 from SAMBA_3_0 to SAMBA_3_0_26. There are a few additional type cast corrections.
* r22844: Introduce const DATA_BLOB data_blob_null = { NULL, 0, NULL }; andVolker Lendecke2007-05-141-26/+26
| | | | replace all data_blob(NULL, 0) calls.
* r21663: Fix from the Wine guys: Robert Shearman <rob@codeweavers.com>Jeremy Allison2007-03-021-1/+2
| | | | | | | | The background behind this patch is that we're using ntlm_auth with Wine. Windows allows us to pass in a NULL domain and a username of the form of "user@domain" and this is converted into an NTLMSSP_AUTH packet with a NULL domain name and a username of the same form. Jeremy.
* r21241: Merge from 3_0:Günther Deschner2007-02-081-2/+2
| | | | | | | | | | | | | | | | | | | Fix longstanding Bug #4009. For the winbind cached ADS LDAP connection handling (ads_cached_connection()) we were (incorrectly) assuming that the service ticket lifetime equaled the tgt lifetime. For setups where the service ticket just lives 10 minutes, we were leaving hundreds of LDAP connections in CLOSE_WAIT state, until we fail to service entirely with "Too many open files". Also sequence_number() in winbindd_ads.c needs to delete the cached LDAP connection after the ads_do_search_retry() has failed to submit the search request (although the bind succeeded (returning an expired service ticket that we cannot delete from the memory cred cache - this will get fixed later)). Guenther
* r21186: * Merge nss_info and idmap interface changes to current Gerald Carter2007-02-061-1/+1
| | | | | | stable branch * Also include pam_winbind changes for multiple groups in the require-membership-of parameter
* r19798: reducing some diffs...bringing over ntlm_auth changesGerald Carter2006-11-191-16/+484
|
* r17981: Hmmm. Don't break helper functions that don't needJeremy Allison2006-09-011-5/+7
| | | | | | | the username by forcing it to be specified. Still split out domain \ user for the ones that do use it. Jeremy.
* r17979: Make ntlm_auth more intelligent about figuring out it's Jeremy Allison2006-09-011-14/+31
| | | | | | | | | | domain and user args. if only given a parameter of the form --username DOMAIN\user. When called by firefox or other user apps they may not know what the domain is (and they don't care). They just want to pass the contents of $USERNAME without having to parse it or guess a domain. Jeremy.
* r17903: Fix null deref caught by Stanford checker. Don'tJeremy Allison2006-08-291-1/+0
| | | | | call ntlmssp_end on a null pointer ! (Doh !). Jeremy.
* r15837: starting sync up for 3.0.23rc1 (in sync with SAMBA_3_0 r15822)Gerald Carter2006-05-231-1/+1
|
* r15053: fix portabilities issues between 32-bit winbind clients and a 64-bit ↵Gerald Carter2006-04-121-1/+1
| | | | winbindd server
* r14585: Tighten argument list of kerberos_kinit_password again,Günther Deschner2006-03-201-2/+1
| | | | | | kerberos_kinit_password_ext provides access to more options. Guenther
* r14033: Fix Coverity bug # 126Volker Lendecke2006-03-081-0/+1
|
* r13571: Replace all calls to talloc_free() with thye TALLOC_FREE()Gerald Carter2006-02-201-4/+4
| | | | macro which sets the freed pointer to NULL.
* r13316: Let the carnage begin....Gerald Carter2006-02-031-3/+3
| | | | Sync with trunk as off r13315
* r13212: r12414@cabra: derrell | 2006-01-28 17:52:17 -0500Derrell Lipman2006-01-281-1/+1
| | | | | | | | | | | | lp_load() could not be called multiple times to modify parameter settings based on reading from multiple configuration settings. Each time, it initialized all of the settings back to their defaults before reading the specified configuration file. This patch adds a parameter to lp_load() specifying whether the settings should be initialized. It does, however, still force the settings to be initialized the first time, even if the request was to not initialize them. (Not doing so could wreak havoc due to uninitialized values.)
* r12555: Fix more load_case_table swegfaults. Arggg.Jeremy Allison2005-12-281-0/+1
| | | | | What I'd give for a global constructor... Jeremy.
* r11573: Adding Andrew Bartlett's patch to make machine accountJeremy Allison2005-11-081-0/+2
| | | | | | | | | | | | | | | | | logons work if the client gives the MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT or MSV1_0_ALLOW_WORKSTATION_TRUST_ACCOUNT flags. This changes the auth module interface to 2 (from 1). The effect of this is that clients can access resources as a machine account if they set these flags. This is the same as Windows (think of a VPN where the vpn client authenticates itself to a VPN server using machine account credentials - the vpn server checks that the machine password was valid by performing a machine account check with the PDC in the same was as it would a user account check. I may add in a restriction (parameter) to allow this behaviour to be turned off (as it was previously). That may be on by default. Andrew Bartlett please review this change carefully. Jeremy.
* r11232: Added ab's POSIX statvfs vfs call. Sorry for the delay ab.Jeremy Allison2005-10-201-1/+1
| | | | Jeremy.
* r11137: Compile with only 2 warnings (I'm still working on that code) on a gcc4Jeremy Allison2005-10-181-2/+2
| | | | | x86_64 box. Jeremy.
* r10656: BIG merge from trunk. Features not copied overGerald Carter2005-09-301-13/+18
| | | | | | | * \PIPE\unixinfo * winbindd's {group,alias}membership new functions * winbindd's lookupsids() functionality * swat (trunk changes to be reverted as per discussion with Deryck)
* r9198: Convert hex_encode and strhex_to_data_blob to take a talloc context.Volker Lendecke2005-08-071-22/+20
| | | | Volker
* r7882: Looks like a large patch - but what it actually does is make SambaJeremy Allison2005-06-241-6/+6
| | | | | | safe for using our headers and linking with C++ modules. Stops us from using C++ reserved keywords in our code. Jeremy
* r6450: * fix typo in htlm_auth help messageGerald Carter2005-04-251-2/+2
| | | | | | | * add synonym for idmap_rid in better lining with other idmap backend names * remove old debug messages when idmap {uid|gid} options are not defined
* r4259: Fix cast in SMB_XMALLOC_ARRAY. Bugzilla #2168.Tim Potter2004-12-171-1/+1
|
* r4088: Get medieval on our ass about malloc.... :-). Take control of all our ↵Jeremy Allison2004-12-071-14/+14
| | | | | | | | | allocation functions so we can funnel through some well known functions. Should help greatly with malloc checking. HEAD patch to follow. Jeremy.
* r3377: Merge in first part of modified patch from Nalin Dahyabhai ↵Jeremy Allison2004-10-291-1/+1
| | | | | | | | | <nalin@redhat.com> for bug #1717.The rest of the code needed to call this patch has not yet been checked in (that's my next task). This has not yet been tested - I'll do this once the rest of the patch is integrated. Jeremy.
* r3273: Ensure we're consistent in the use of strchr_m for '@'.Jeremy Allison2004-10-271-1/+1
| | | | Jeremy.
* r2835: Since we always have -I. and -I$(srcdir) in CFLAGS, we can get rid of Tim Potter2004-10-071-1/+1
| | | | | '..' from all #include preprocessor commands. This fixes bugzilla #1880 where OpenVMS gets confused about the '.' characters.
* r2762: Remove silly conversion to and from UTF8 on the winbind pipe. Fix theAndrew Bartlett2004-10-011-28/+16
| | | | | | | naming of the require_membership_of parameter in pam_winbind and fix the error code for 'you didn't specify a domain' in ntlm_auth. Andrew Bartlett
* r2147: Fix utility name in error message (pre-emptivly merged to trunk ;-)Andrew Bartlett2004-08-311-1/+1
| | | | Andrew Bartlett
* r1582: On failure, print the length of the right variable.Andrew Bartlett2004-07-251-1/+1
| | | | Andrew Bartlett
* r1492: Rework our random number generation system.Andrew Bartlett2004-07-141-1/+1
| | | | | | | | | | On systems with /dev/urandom, this avoids a change to secrets.tdb for every fork(). For other systems, we now only re-seed after a fork, and on startup. No need to do it per-operation. This removes the 'need_reseed' parameter from generate_random_buffer(). Andrew Bartlett
* r1128: The end-of-file is not the end of the world, so don't make a load ↵Andrew Bartlett2004-06-141-3/+7
| | | | | | DEBUG() about it. Andrew Bartlett
* r1126: Allow more flexible GSS-SPENGO client and server operation. TheAndrew Bartlett2004-06-141-16/+18
| | | | | | | client now falls back to NTLMSSP, and the server allows the client to start, without first asking for a mech list. Andrew Bartlett
* r1124: ntlm_auth memory leak fixes by James Wilkinson - ↵Andrew Bartlett2004-06-141-0/+4
| | | | | | jwilk@alumni.cse.ucsc.edu Andrew Bartlett
* r517: Remove wrong commit I did by mistakeAlexander Bokovoy2004-05-061-6/+0
|
* r516: On GNU/Linux distributions which allow to use both 2.4 and 2.6 kernelsAlexander Bokovoy2004-05-061-0/+6
| | | | | | | | | there is SYS_utimes syscall defined at compile time in glibc-kernheaders but it is available on 2.6 kernels only. Therefore, we can't rely on syscall at compile time but have to check that behaviour during program execution. An easy workaround is to have replacement for utimes() implemented within our wrapper and do not rely on syscall at all. Thus, if REPLACE_UTIME is defined already (by packager), skip these syscall shortcuts.
* r240: I'm pretty happy with the 'ntlm-server-1' helper protocol now, and asAndrew Bartlett2004-04-151-2/+0
| | | | | | | | there is now a public patch that uses it, make it always available. (It was #ifdef DEVELOPER) Andrew Bartlett
* r201: Fix bugs in the --helper-protocol=ntlm-server-1 implementation.Andrew Bartlett2004-04-131-8/+9
| | | | | | (allow the use of base64 encoded strings, LM or NT passwords) Andrew Bartlett
* r191: Only send the ntlm_auth 'ntlm-server-1' helper client a '.' after theAndrew Bartlett2004-04-131-2/+1
| | | | | | server had said something (such as an error). Andrew Bartlett
* r188: Add a new 'helper protocol' to ntlm_auth. Andrew Bartlett2004-04-121-2/+202
| | | | | | | | | | | | | | | | | | | | | | | | | | | This protocol looks rather like SMTP headers/LDAP: NT-Domain: TESTWG Username: abartlet ... Password: foo Challenge-response passwords are in hexideciaml, while any 'plain' string can be base64 encoded when like this: Password:: Zm9vCg== (the :: indicates it, just like LDAP - I hope) The protocol is not final, so it is #ifdef DEVELOPER for now (so nobody starts to rely on it until I'm happy), but we may as well get this into subversion. My intention is to use this to power the next version of my PPP/ntlm_auth plugin, and hopefully entice a FreeRadius plugin out of the woods. Andrew Bartlett
* r177: Split ntlm_auth --diagnostics into a seperate file, so as not to clutter Andrew Bartlett2004-04-121-599/+30
| | | | | | | | | the main ntlm_auth program. It quite possibly should belong in smbtorture, but relies on the winbind client for now. Andrew Bartlett
* r171: Continue the 'rename nt_session_key' work. This attempts to renameAndrew Bartlett2004-04-121-88/+76
| | | | | | | this variable to 'user_session_key', where possible. The command line parameter is currently unchanged). Andrew Bartlett
* r104: Fix ntlm_auth by adding the new strhex_to_data_blob() call.Andrew Bartlett2004-04-071-6/+0
| | | | Andrew Bartlett
* r87: Fix the build that Andrew Bartlett broke. Andrew - don't check ↵Jeremy Allison2004-04-061-0/+6
| | | | | | | *ANYTHING* in unless you have done a make clean; make. Jeremy.
* r84: Implement --required-membership-of=, an ntlm_auth option that restrictsAndrew Bartlett2004-04-061-38/+113
| | | | | | | | | all authentication to members of this particular group. Also implement an option to allow ntlm_auth to get 'squashed' error codes, which are safer to communicate to remote network clients. Andrew Bartlett
* r69: Global rename of 'nt_session_key' -> 'user_session_key'. The session ↵Andrew Bartlett2004-04-061-22/+22
| | | | | | | key could be anything, and may not be based on anything 'NT'. This is also what microsoft calls it.
* r4: merge in the SAMBA_3_0 branch from cvsCVS Import User2004-04-041-0/+1
| | | | | | | | to checkout try this: svn co svn+ssh://svn.samba.org/home/svn/samba/branches/SAMBA_3_0 samba-3_0-work metze
* r2: import HEAD into svn+ssh://svn.samba.org/home/svn/samba/trunkCVS Import User2004-04-041-0/+2182
metze
generated by cgit (git 2.34.1) at 2025-09-25 17:43:31 +0000