| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
| |
parameter."
This reverts commit d2242f9776cfed2dfff44db180dbf34fbbba2e5e.
|
|
|
|
| |
This reverts commit 7cb9d82244a8e93261d12a3800334d8152a2431e.
|
|
|
|
|
|
| |
loses inheritance", based on"
This reverts commit 5d2d94b46bd2ab03e2f83036b4d7fa3e401c3458.
|
|
|
|
| |
This reverts commit 042e50f8709cfbe45d5b184cb3c4fe1b16bdc3b0.
|
|
|
|
|
|
| |
by "Cooper S. Blake" <the_analogkid@yahoo.com>."
This reverts commit 61046225de8a4cd77e94d8c5c4a8f510bc11b79e.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
"Cooper S. Blake" <the_analogkid@yahoo.com>.
"I believe I have found two bugs in the 3.2 code and one bug that
carried on to the 3.3 branch. In the 3.2 code, everything is
located in the utils/net_rpc_samsync.c file. What I believe is the
first problem is that fetch_database() is calling
samsync_fix_delta_array() with rid_crypt set to true, which means
the password hashes are unencrypted from the RID encryption.
However, I believe this call is redundant, and the corresponding
call for samdump has rid_crypt set to false. So I think the
rid_crypt param should be false in fetch_database().
If you follow the code, it makes its way to sam_account_from_delta()
where the password hashes are decrypted a second time by calling
sam_pwd_hash(). I believe this is what is scrambling my passwords.
These methods were refactored somewhere in the 3.3 branch. Now the
net_rpc_samsync.c class calls rpc_vampire_internals, which calls
libnet/libnet_samsync.c, which calls samsync_fix_delta_array() with
rid_crypt always set to false. I think that's correct. But the
second bug has carried through in the sam_account_from_delta()
function:
208 if (memcmp(r->ntpassword.hash, zero_buf, 16) != 0) {
209 sam_pwd_hash(r->rid, r->ntpassword.hash, lm_passwd, 0);
210 pdb_set_lanman_passwd(account, lm_passwd, PDB_CHANGED);
211 }
212
213 if (memcmp(r->lmpassword.hash, zero_buf, 16) != 0) {
214 sam_pwd_hash(r->rid, r->lmpassword.hash, nt_passwd, 0);
215 pdb_set_nt_passwd(account, nt_passwd, PDB_CHANGED);
If you look closely you'll see that the nt hash is going into the
lm_passwd variable and the decrypted value is being set in the lanman
hash, and the lanman hash is being decrypted and put into the nt hash
field. So the LanMan and NT hashes look like they're being put in
the opposite fields."
Fix this by removing the rid_crypt parameter.
Jeremy.
(cherry picked from commit e38436f731ff09333588cc0751c79029a569f390)
|
|
|
|
|
| |
Jeremy.
(cherry picked from commit 82ec832f7edffe2fcfd1bb067e092c159bed2973)
|
|
|
|
|
|
|
|
|
|
|
| |
inheritance", based on
a patch from Paul Fertser <fercerpav@gmail.com>. I also added the ability to get/set hex
and symbolic inheritance flag names on ACE flags. I'm still investigating the effects
of setting the "SEC_DESC_DACL_AUTO_INHERIT_REQ" flag as I don't yet see what effects
this is having on the ACE sent.
Jeremy.
(cherry picked from commit e59a21e945e6336f3d7622bf77cf5c2304936b70)
|
|
|
|
| |
(cherry picked from commit 41aed9f2f3c6d53e1b8b6d72467bc5d5a0689dce)
|
|
|
|
|
|
|
| |
This is helpful on multihomed hosts that only require a subset
of IP addresses be registered with DNS.
(cherry picked from commit 17c9f8810598d8117befc896d12a597a52b0ac3b)
(cherry picked from commit 2fb742e127f725b56f308538852d7b10b86f29c1)
|
|
|
|
|
|
|
| |
Compiling utils/sharesec.c
utils/sharesec.c: In function `change_share_sec':
utils/sharesec.c:404: warning: 'sd' might be used uninitialized in this function
(cherry picked from commit 931abf7898f574fcf70c239b2ad5c180ff6bb8e8)
|
|
|
|
| |
(cherry picked from commit afe139e3272b324df2dec2d4066b351b03792dc8)
|
|
|
|
|
|
|
|
| |
Just to enhance clearness of the code.
Michael
(cherry picked from commit cd5d13dec0153c64d541e85bd13138b738cf50af)
(cherry picked from commit 01b1aff4ac884b91d95d89ac7e53cb0e1a748787)
|
|
|
|
|
|
| |
Michael
(cherry picked from commit 6cafee7e6ae02a32a9f2ddf313d2a20224fa22fe)
(cherry picked from commit 3b8524957561911ae7943172fe775200fc98f75a)
|
|
|
|
|
|
|
|
|
|
|
| |
as suggested by Karolin.
That is what it really means. And per-share logic tests will be
disabled by the same switch, too...
Michael
(cherry picked from commit 5b8a4c33482917a1ef7071df224957ba831d853a)
(cherry picked from commit 04cdfbba747b928c3133e29446c0fe91c39a41f2)
|
|
|
|
|
|
|
|
|
|
| |
This allows for successfully calling testparm without the need
to "make install" before. Without this, testparm fails with
the message that the lock directory does not exist...
Michael
(cherry picked from commit eeb018fad65c19804a4e96ea949fc2c64883439e)
(cherry picked from commit 1f245e41fa41d2b67eaa7cc85c29da3384697275)
|
|
|
|
|
|
|
|
| |
I.e., use lp_load_with_registry_shares() instead of lp_load().
Michael
(cherry picked from commit 95339c0c1ecc49049f1fc176f72a1dcac639e06d)
(cherry picked from commit e1bbcc6c5401c59726ca40dadff5760c2800b5c1)
|
|
|
|
|
| |
Jeremy.
(cherry picked from commit c1baf310830e7ebff4fe0835812122ec146412da)
|
|
|
|
|
|
|
|
|
|
|
| |
net rpc trustdom add was broken. The default 10second timeout can be too short
to create an account on a Samba DC (calling out to a script), error message
reporting was poor, and more importantly the new marshalling code for
user_info23 was broken (maps onto a user_info21 but doesn't clear the
user_info23 struct before marshalling, leaving an uninitialized size field -
give "alloc failure").
Jeremy.
(cherry picked from commit 52552623277726c2f28a992f68d8bc22982bab28)
|
|
|
|
|
| |
Jeremy.
(cherry picked from commit 55a6664cfdab9c0230836aff57ec8d2cc5bfca14)
|
|
|
|
| |
(cherry picked from commit f62909d2b457f3494c9536c994a9209f8cc0c331)
|
|
|
|
|
|
|
| |
Turns out the password hashes are not rid encrypted in the samsync reply.
Guenther
(cherry picked from commit 55259f408b7bc356367d872a38a54174d364fd2b)
|
|
|
|
|
|
|
|
|
|
|
|
| |
-argc -> argv (where argv is meant)
-destoyed -> destroyed
-compleation -> completion
-aquired -> acquired
-Unify spelling of some words like rpc-server -> RPC server.
-Add missing punctuation marks.
Karolin
(cherry picked from commit 7c22fc6ebaa1a83213cbb7c08bea108264f89486)
|
|
|
|
|
| |
Guenther
(cherry picked from commit 1a22e975dd1255f3557c1cd873d877aa35822afc)
|
|
|
|
|
| |
Jeremy.
(cherry picked from commit de3b9e3ed2bfd32dc0d0e45ad8fd775ebd9004fa)
|
|
|
|
|
|
| |
can result in a buffer overrun.
Jeremy.
(cherry picked from commit 353d9cb0fdd941781698c6b334db5f2997eef991)
|
|
|
|
|
| |
Guenther
(cherry picked from commit 954d0998c2c00140addb6ba3845e80ed91e4effc)
|
|
|
|
|
| |
Guenther
(cherry picked from commit 7889516a384c155a9045aad4409c041fddd0d98d)
|
|
|
|
|
| |
Guenther
(cherry picked from commit 6f9d5e1cc94bc90685b54c04622b8f3357bd2f69)
|
|
|
|
| |
(cherry picked from commit d923d3acdf2c47e8d1dff0951edabe37ba5078c0)
|
|
|
|
|
| |
Guenther
(cherry picked from commit d077ef64cd1d9bbaeb936566c2c70da508de829f)
|
|
|
|
|
|
| |
Needed fix for the DNS Update option as part of "net ads join"
(cherry picked from commit aebae0b71b427838fdc6344d69d6dea87a5dd58b)
(cherry picked from commit 437a59598d886b316fd58ca88ed40f5fb325c47f)
|
|
|
|
|
|
| |
This patch is the first iteration of an inside-out conversion to cleanup
functions in charcnv.c returning size_t == -1 to indicate failure.
(cherry picked from commit 59124382d2894a1b194b48dd82bc5f956959eb48)
|
|
|
|
|
|
|
|
| |
AF_INET6 in this case.
Karolin, please pull for 3.2-stable.
Jeremy.
(cherry picked from commit 612e7cdff3139ff3b2cfaf4b213cb47ce75983d1)
|
|
|
|
| |
(cherry picked from commit c4f7bee9238db536a7d5215cebb0bf37f757dfad)
|
|
|
|
| |
(cherry picked from commit 50cab87d3ee6d701dd8847f4e0a058f5e2d80e0f)
|
|
|
|
| |
(cherry picked from commit 98b643366044f471ad69c9e5aac06022f30742d9)
|
|
|
|
| |
(cherry picked from commit c430b7831d5dc6f81cfd18ee2bf24bc3f276fe5d)
|
|
|
|
| |
(cherry picked from commit e2345ce90c3f1548f63d720c5943c8d61fdc899a)
|
|
|
|
| |
(cherry picked from commit 3cfa35fca64b059b307668ca0113503679e0b1fa)
|
|
|
|
|
| |
Jeremy.
(cherry picked from commit b95f2adeb5e2f7ce71e46e6a6165159483c9a702)
|
|
|
|
|
|
|
| |
instead of lists of strings and counters directly...
Michael
(cherry picked from commit 17415e2dc457ce41793a7e28e71f72c538c19c61)
|
|
|
|
|
| |
Guenther
(cherry picked from commit 57a5628abf628b6276f36da8ae1f3c15a4db4488)
|
|
|
|
|
| |
Michael
(cherry picked from commit d4e74036d3b8c5de4ce130eab7fc775e3cb746d5)
|
|
|
|
| |
Michael
|
|
|
|
| |
This reverts commit b1057bca7fbe8d8b3ae8d2cf7d4d78148a89c3d3.
|
|
|
|
|
| |
Guenther
(cherry picked from commit 8a5fadf6a183e4e4ccc77283b3ddba0748c6abfb)
|
|
|
|
|
| |
Guenther
(cherry picked from commit 538eefe22ad69540b9f73ffaa613d6be045de199)
|
|
|
|
|
| |
Guenther
(cherry picked from commit 4cee7b1bd5cd97c414b73d6f39238958480cdcf3)
|
|
|
|
|
| |
Guenther
(cherry picked from commit 751f3064a508341c0ebae45e8de9f5311d915d70)
|