summaryrefslogtreecommitdiffstats
path: root/source/utils
Commit message (Collapse)AuthorAgeFilesLines
* Fix obvious compiler warnings.Jeremy Allison2003-05-122-2/+1
| | | | Jeremy.
* And finally IDMAP in 3_0Simo Sorce2003-05-122-37/+27
| | | | | | | | | | | | | | | | | | | | We really need idmap_ldap to have a good solution with ldapsam, porting it from the prvious code is beeing made, the code is really simple to do so I am confident it is not a problem to commit this code in. Not committing it would have been worst. I really would have been able to finish also the group code, maybe we can put it into a followin release after 3.0.0 even if it may be an upgrade problem. The code has been tested and seem to work right, more testing is needed for corner cases. Currently winbind pdc (working only for users and not for groups) is disabled as I was not able to make a complete group code replacement that works somewhat in a week (I have a complete patch, but there are bugs) Simo.
* Re-enable secure channel for net rpc vampire.Tim Potter2003-05-121-8/+13
| | | | | Jump out of sam entry processing loop if the return value from cli_netlogon_sam_sync() isn't OK or STATUS_MORE_ENTRIES.
* Fix up a bit of my sloppy C.Andrew Bartlett2003-05-121-3/+2
|
* Give up on the idea of avoiding lp_load() in ntlm_auth....Andrew Bartlett2003-05-121-8/+18
| | | | | | | Also, we might be given a 0 length challenge, so don't smb_panic() for smb_xmalloc() of zero size. Andrew Bartlett
* Make it possible to actually use --user-SID and --group-SID on a standard ↵Andrew Bartlett2003-05-121-2/+2
| | | | | | command line. Andrew Bartlett
* Fix compile.Andrew Bartlett2003-05-111-1/+1
|
* Set the password for a newly created trustdom account. Tested againstVolker Lendecke2003-05-111-3/+34
| | | | | | PDCs running NT4SP1, NT4SP6 and Samba 3.0. Volker
* Reverse previous patch from Stefan and me after comments by Andrew BartlettJelmer Vernooij2003-05-1015-34/+0
|
* Patch from metze and me that adds dummy smb_register_*() functions soJelmer Vernooij2003-05-1015-0/+34
| | | | | that is now possible to, for example, load a module which contains an auth method into a binary without the auth/ subsystem built in.
* Finally get NTLMv2 working on the client!Andrew Bartlett2003-05-091-84/+29
| | | | | | | | | | | | | | | | | | With big thanks to tpot for the ethereal disector, and for the base code behind this, we now fully support NTLMv2 as a client. In particular, we support it with direct domain logons (tested with ntlm_auth --diagnostics), with 'old style' session setups, and with NTLMSSP. In fact, for NTLMSSP we recycle one of the parts of the server's reply directly... (we might need to parse for unicode issues later). In particular, a Win2k domain controller now supplies us with a session key for this password, which means that doman joins, and non-spnego SMB signing are now supported with NTLMv2! Andrew Bartlett
* Fix bug #4 for net rap. Allow more than 50 chars for long form listings of ↵Jim McDonough2003-05-091-2/+2
| | | | users and groups.
* Sync up to head ...Richard Sharpe2003-05-091-34/+100
|
* Sync to the changes in head ...Richard Sharpe2003-05-091-1/+1
|
* Added some more diagnostic tests to check out a theory that having either hashTim Potter2003-05-091-12/+174
| | | | | | | | | | | | - auth with ntlmv2 and lmv2 but deliberately break the ntlmv2 hash - auth with ntlmv2 and lmv2 but deliberately break the lmv2 hash - auth with ntlm and lm but deliberately break the ntlm hash - auth with ntlm and lm but deliberately break the lm hash My theory is that the NTLM or NTLMv2 field must be correct and if it is, it doesn't matter what the value of the LM or LMv2 field is. Fixed cosmetic test name display bug.
* Fix up a bunch of problems in editreg.cRichard Sharpe2003-05-091-16/+16
| | | | Now the build farm will no doubt find more.
* This puts real netlogon connection caching to winbind. This becomesVolker Lendecke2003-05-081-1/+7
| | | | | | | | | important once we start doing schannel, as there would be a lot more roundtrips for the second PIPE open and bind. With this patch logging in to a member server is a matter of two (three if you count the ack...) packets between us and the DC. Volker
* Fix the spinning bug for 'net rpc user' as well - there are more errors inAndrew Bartlett2003-05-071-4/+4
| | | | | | | | this world than 'status more entires'... Also move all the cases to 'NT_STATUS_EQUAL()' to test it. Andrew Bartlett
* Fix up some of the warnings that the build farm is finding ...Richard Sharpe2003-05-051-3/+2
|
* Syncronize head editreg.c with 3.0.0 ...Richard Sharpe2003-05-051-93/+1200
|
* We also get back the LM session key on pure 'NTLM' logins.Andrew Bartlett2003-05-051-1/+16
| | | | Andrew Bartlett
* Turn off using lsa_qos in OpenPolicy call. This way we avoid annoyingRafal Szczesniak2003-05-051-2/+2
| | | | | | | debug msg while establishing trust and listing relations of Samba PDC. Rafal
* Add some comments.Andrew Bartlett2003-05-051-0/+34
|
* Add some more tests to the ntlm_auth diagnositics package.Andrew Bartlett2003-05-051-9/+373
| | | | | | | | | | | | Our NTLMv2 client code needs work, becouse we don't get the session key for any of the NTLMv2 stuff... Also test some of the more 'odd' auth cases - like putting the NT password into the LM feild. Clean up some static globals into static locals. Andrew Bartlett
* Fix some compiler warnings.Tim Potter2003-05-051-4/+1
|
* Patch from Ken Cross to allow an ADS domain join with a username of the formAndrew Bartlett2003-05-041-2/+18
| | | | | | user@realm, where realm might not be the realm we are joining. Andrew Bartlett
* Turn down some DEBUG()s and remove some duplicate code spotted by dfenwick.Andrew Bartlett2003-05-011-39/+17
| | | | Andrew Bartlett
* Merge from HEAD - the usual popt-needs-static for Sun CC.Andrew Bartlett2003-04-301-1/+1
|
* Fix for AIX - you can't qualify a return type as const, when it's not aAndrew Bartlett2003-04-301-1/+1
| | | | | | | | pointer. (merge from HEAD). Andrew Bartlett
* Sun CC requires constant initialisers, so use a static here.Andrew Bartlett2003-04-301-1/+1
| | | | (a common bug with popt stuff, becouse it's fine with GCC).
* smbgroupedit has been replaced by 'net groupmap'Gerald Carter2003-04-291-405/+0
| | | | remove related file. Left in EHAD for reference (for now)
* Like net rpc user -l, let net ads user -l allow more than 50 characters inJim McDonough2003-04-291-1/+1
| | | | comments.
* Allow net rpc user -l to list longer than 50 characters in a user comment.Jim McDonough2003-04-291-1/+1
| | | | | Net.exe on windows won't allow more than 50 characters to be entered, but through AD you can have much more than this.
* adding ifdef'd code to add alias membership for vampireGerald Carter2003-04-291-0/+138
|
* Use a common function to create the SAM_ACCOUNT being used to add accountsAndrew Bartlett2003-04-291-12/+4
| | | | | | | | to the system. This means that we always run Get_Pwnam(), and can never add FOO when foo exists on the system (the idea is to instead add foo into the passdb, using it's full name, RID etc). Andrew Bartlett
* Fix compiler warning.Tim Potter2003-04-281-1/+1
|
* Merge of const fixes from HEAD.Tim Potter2003-04-283-3/+3
|
* back port from HEADSimo Sorce2003-04-261-5/+74
|
* Merge of missed another while condition when enumerating aliases.Tim Potter2003-04-251-1/+1
|
* fix and if () that should be an 'else if()'Gerald Carter2003-04-251-1/+1
|
* Merge:Tim Potter2003-04-251-2/+2
| | | | | | | >When calling cli_samr_enum_{dom,als}_groups in a while loop, the >terminating condition should be result != STATUS_MORE_ENTRIES, not >result == NT_STATUS_OK otherwise we get stuck in an infinite loop >when there's any sign of trouble.
* groupmap delet should take a name or a SIDGerald Carter2003-04-241-2/+13
|
* More fun with Sun CC needing constant initializersAndrew Bartlett2003-04-231-1/+1
|
* Fix up non-constant initialisers for Sun's CC.Andrew Bartlett2003-04-231-1/+1
| | | | Andrew Bartlett
* This const isn't quite vaild C.Andrew Bartlett2003-04-231-1/+1
| | | | Andrew Bartlett
* allow the unix group in a mapping to be changed; doesn't work with LDAP ↵Gerald Carter2003-04-231-1/+21
| | | | right now but should be ok with tdb's
* don't reset the group type unless specifiedGerald Carter2003-04-221-14/+8
|
* default new groups to domain groupsGerald Carter2003-04-221-3/+3
|
* Fix up bugs in the new 'store sec_channel type' code - we were always joiningAndrew Bartlett2003-04-222-6/+4
| | | | | | as a BDC. Andrew Bartlett
* support referencing group by sid in all operations; allow group name to be ↵Gerald Carter2003-04-221-13/+60
| | | | changed