summaryrefslogtreecommitdiffstats
path: root/source/utils
Commit message (Collapse)AuthorAgeFilesLines
* Fix bug #5914 - Build failure: redefinition of struct name_listJeremy Allison2008-11-251-8/+8
| | | | Jeremy.
* net: Fix documentation of net rap printq info (bug #5892)Carsten Dumke2008-11-171-1/+1
| | | | | | | | | | | The man-page (see net(8)) and the usage-info (call "net help rap printq") of 'net rap printq' do contain an option "list" but in net_rap.c the option is named "info". Rename the option "list" in the documentation (man-pages + usage) to "info" to match the code. Signed-off-by: Kai Blin <kai@samba.org>
* ntlm_auth: Put huge NTLMv2 blobs into extra_data on CRAP authKai Blin2008-11-101-4/+16
| | | | This fixes bug #5865
* utils/net_ads.c: call saf_join_store() after a the join.Stefan Metzmacher2008-10-301-0/+3
| | | | | | | metze Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Günther Deschner <gd@samba.org>
* s3: correctly detect if the current dc is the closest oneStefan Metzmacher2008-10-301-1/+1
| | | | | | | | | ads->config.tried_closest_dc was never set. metze Signed-off-by: Stefan Metzmacher <metze@samba.org> Signed-off-by: Günther Deschner <gd@samba.org>
* net: net should just use machine account creds when changing passwords.Günther Deschner2008-08-291-0/+2
| | | | Guenther
* net: Fix IPC connections with interactive password prompt.Michael Adam2008-08-041-1/+1
| | | | | | This fixes a regression introduced with 52f916c6. Some net subcommands didn't work when the username, but not the corresponding password was given on the command line.
* Fix usage message for net rpc trustdom add.Jeremy Allison2008-06-271-1/+1
| | | | Jeremy.
* Fixing net help info.John H Terpstra2008-06-191-4/+5
|
* net: fix joining w2k domains in "security = ads".Günther Deschner2008-06-052-31/+36
| | | | | | | | This repairs the join verification code which needs to try an anonymous connection (as an authenticated connection will always fail with NT_STATUS_NOLOGON_WORKSTATION_TRUST_ACCOUNT). Guenther
* net: for robustness reasons, fallback to level 24 pwd set while joining.Günther Deschner2008-06-041-0/+22
| | | | | | | DCERPC_FAULT_INVALID_TAG is returned by older windows releases, in that case it is wise to do what we did prior to 3.0.28. Guenther
* Fix usage message for 'net idmap dump'.Karolin Seeger2008-06-031-1/+1
| | | | | Karolin (cherry picked from commit c967b62dd3c924419fa4a72aa2143d6bef959d18)
* Security: Patche for CVE-2008-1105.Gerald W. Carter2008-05-281-2/+2
| | | | | | | | | | | | | | | -- Summary -- Specifically crafted SMB responses can result in a heap overflow in the Samba client code. Because the server process, smbd, can itself act as a client during operations such as printer notification and domain authentication, this issue affects both Samba client and server installations. Ensure that we specify the buffer size used to store incoming SMB packets. This bug was originally introduced in Samba 2.2.4. Patch from Jeremy Allison.
* r24853: Rename function as Jerry asked.Rafal Szczesniak2008-04-292-5/+5
| | | | | | | s/net_use_upn_machine_account/net_use_krb_machine_account/ rafal (cherry picked from commit 86af9fedad71697f22cc739518340f7753b8f9da)
* net: fix post join verification.Rafal Szczesniak2008-04-293-7/+42
| | | | | | | | | | | | | | | | | | | This patch is based on commit 30d99d8ac3379caadc5bdb353977149d1ee16403 and just a little modified to apply on 3-0-test. Guenther Original commit message: r24789: Add implementation of machine-authenticated connection to netlogon pipe used when connecting to win2k and newer domain controllers. The server may be configured to deny anonymous netlogon connections which would stop domain join verification step. Still, winnt domains require such smb sessions not to be authenticated using machine credentials. Creds employed in smb session cannot have a username in upn form, so provide the separate function to use machine account. rafal
* objectclass -> objectClassKarolin Seeger2008-04-101-3/+3
| | | | Karolin
* Fix some more typos.Karolin Seeger2008-04-091-1/+1
| | | | Karolin
* Fix NETLOGON credential chain with Windows 2008 all over the place.Günther Deschner2008-04-042-3/+3
| | | | | | | | | | | In order to avoid receiving NT_STATUS_DOWNGRADE_DETECTED from a w2k8 netr_ServerAuthenticate2 reply, we need to start with the AD netlogon negotiate flags everywhere (not only when running in security=ads). Only for NT4 we need to do a downgrade to the returned negotiate flags. Tested with w2k8, w2ksp4, w2k3r2 and nt4sp6. Guenther
* ntlm_auth: Improve compliance to the Squid helper protocolKai Blin2008-03-201-32/+32
| | | | | | This fixes bug #4235. Patch from Pawel Worach <pawel.worach@gmail.com> with some updates for new BH messages by me.
* Fix typo.Karolin Seeger2008-02-191-1/+1
| | | | Karolin
* r24771: Use infolevel 25 to set the machine account's password (just like ↵Rafal Szczesniak2008-01-311-41/+41
| | | | | | | | winxp). This correctly updates pwdLastSet field on win2k3 server. rafal
* Missed one flags change.Jeremy Allison2008-01-231-1/+1
| | | | Jeremy.
* Added :Jeremy Allison2008-01-232-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Author: Jeremy Allison <jra@samba.org> Date: Wed Jan 23 15:23:16 2008 -0800 Don't leak memory in error path. Jeremy. Author: Jeremy Allison <jra@samba.org> Date: Wed Jan 23 15:00:40 2008 -0800 Use strchr_m in seaching for '.' in the hostname to make sure we're mb safe. Jeremy. Author: Andreas Schneider <anschneider@suse.de> Date: Thu Jan 17 11:35:40 2008 +0100 Fix Windows 2008 (Longhorn) join. During 'net ads join' the cli->desthost is a hostname (e.g. rupert.galaxy.site). Check if we have a hostname and use only the first part, the machine name, of the string. Author: Andreas Schneider <anschneider@suse.de> Date: Thu Jan 17 10:11:11 2008 +0100 Windows 2008 (Longhorn) auth2 flag fixes. Interop fixes for AD specific flags. Original patch from Todd Stetcher.
* Version of Matt Geddes <musicalcarrion@gmail.com>Jeremy Allison2008-01-233-9/+29
| | | | | | patch for adding acct_flags to rpccli_samr_create_dom_user(). Jerry please test. Jeremy.
* Add missing patch to allow smbcacls to do krb5 auth, bug #5175Jeremy Allison2008-01-041-1/+2
| | | | | from Tom Maher <tmaher@watson.org>. Jeremy.
* Fix flags in all callers of lookup_name() in net_sam.c.Michael Adam2007-12-171-10/+10
| | | | Michael
* Merge debian fix for smbstatus locking error message.Jeremy Allison2007-12-121-0/+10
| | | | | Already fixed differently for 3.2. Jeremy.
* Only add the non-root escape on !developer.Jeremy Allison2007-12-121-0/+2
| | | | Jeremy.
* Fix bug #3727 with patch from Steve Langasek <vorlon@debian.org>Jeremy Allison2007-12-121-0/+4
| | | | Jeremy.
* Prevent net getdomainsid from panicing when called as non-root.Michael Adam2007-11-301-0/+10
| | | | | | (Unable to open secrets.tdb.) Michael
* [GLUE] Rsync SAMBA_3_0 SVN r25598 in order to create the v3-0-test branch.samba-misc-tags/initial-v3-0-testGerald (Jerry) Carter2007-10-1029-2856/+1050
|
* r24770: Use infolevel 25 to set the machine account's password (just like ↵Rafal Szczesniak2007-10-101-41/+41
| | | | | | | | winxp). This correctly updates pwdLastSet field on win2k3 server. rafal
* r23772: Add ads_find_samaccount() helper function.Günther Deschner2007-10-101-61/+6
| | | | Guenther
* r23770: Some minor cleanups in libgpoGünther Deschner2007-10-101-3/+3
| | | | | | (including some valgrind errors, uninitialized vars, etc.) Guenther
* r23760: Untangle use of strrchr_m and strequal and add some checksMichael Adam2007-10-101-2/+11
| | | | | | for the validity of the given registry key name. Michael
* r23757: Fix Coverity id 386Volker Lendecke2007-10-101-1/+5
|
* r23750: Change the behaviour of net conf import when there is a global sectionMichael Adam2007-10-101-8/+24
| | | | | | | | | | | | | | | | | in the current registry and there is no global section in the input file (or only global options with default values): In that case the existing global section is now not touched. Before, it would have been deleted and recreated empty. The new behaviour is how other shares are treated too. Note that since the input file is parsed by lp_load, there is currently no way to distinguish between a section with only default parameters and a non-existing section in net conf import. Michael PS: A couple of trailing white-spaces have been eliminated and a line was broken to be not longer than 80 chars, too.
* r23749: Simplify prototype of reg_setvalue_internal:Michael Adam2007-10-101-22/+9
| | | | | | eliminate "type" parameter since we store only REG_SZ. Michael
* r23748: Clean use of talloc in import_process_service:Michael Adam2007-10-101-4/+13
| | | | | | create a temporary talloc ctx for the function. Michael
* r23747: Move formatting of a parameter's value into a value stringMichael Adam2007-10-101-80/+82
| | | | | | | | to a function of its own. (for storing it in registry), Eliminate the valtype variable : store everything as "sz". Eliminate some trailing white spaces on the way. Michael
* r23746: Fix missing assignments to target string of asprintf in import function.Michael Adam2007-10-101-2/+2
| | | | Michael
* r23745: Fix: Check whether top subkeyname instead of whole registry key nameMichael Adam2007-10-101-2/+3
| | | | | | is equal to GLOBAL_NAME. Michael
* r23744: Remove TODO-comment. lp_load returns False if openingMichael Adam2007-10-101-2/+0
| | | | | | | of the config file fails. That's enough of checking for existence and readbility to my taste. Michael
* r23666: Rename lp_parameter_valid -> lp_parameter_is_valid.Michael Adam2007-10-101-1/+1
| | | | Michael
* r23657: Prevent setting of a global option in a share definitionMichael Adam2007-10-101-1/+10
| | | | | | in "net conf setparm". Michael
* r23656: Add initial checking of the validity of a paramterMichael Adam2007-10-101-0/+14
| | | | | | | given to "net conf setparm". Add a utility function lp_parameter_valid() for this to loadparm.c. Michael
* r23655: Fix a comment and adjust some code formatting.Michael Adam2007-10-101-2/+3
| | | | Michael
* r23652: Use the recursive delete function instead of the original oneMichael Adam2007-10-101-1/+1
| | | | | | when deleting a share. Just to be sure... Michael
* r23648: Allow to list a custom krb5 keytab file with:Günther Deschner2007-10-101-3/+10
| | | | | | net ads keytab list /path/to/krb5.keytab Guenther
* r23627: Allow to pass down the lookup-level to rpccli_lsa_lookup_names().Günther Deschner2007-10-106-7/+7
| | | | Guenther