summaryrefslogtreecommitdiffstats
path: root/source/utils
Commit message (Collapse)AuthorAgeFilesLines
* r201: Fix bugs in the --helper-protocol=ntlm-server-1 implementation.Andrew Bartlett2007-10-101-8/+9
| | | | | | (allow the use of base64 encoded strings, LM or NT passwords) Andrew Bartlett
* r195: adding files to ignore listGerald Carter2007-10-101-5/+5
|
* r191: Only send the ntlm_auth 'ntlm-server-1' helper client a '.' after theAndrew Bartlett2007-10-101-2/+1
| | | | | | server had said something (such as an error). Andrew Bartlett
* r188: Add a new 'helper protocol' to ntlm_auth.Andrew Bartlett2007-10-101-2/+202
| | | | | | | | | | | | | | | | | | | | | | | | | | | This protocol looks rather like SMTP headers/LDAP: NT-Domain: TESTWG Username: abartlet ... Password: foo Challenge-response passwords are in hexideciaml, while any 'plain' string can be base64 encoded when like this: Password:: Zm9vCg== (the :: indicates it, just like LDAP - I hope) The protocol is not final, so it is #ifdef DEVELOPER for now (so nobody starts to rely on it until I'm happy), but we may as well get this into subversion. My intention is to use this to power the next version of my PPP/ntlm_auth plugin, and hopefully entice a FreeRadius plugin out of the woods. Andrew Bartlett
* r177: Split ntlm_auth --diagnostics into a seperate file, so as not to clutterAndrew Bartlett2007-10-103-599/+657
| | | | | | | | | the main ntlm_auth program. It quite possibly should belong in smbtorture, but relies on the winbind client for now. Andrew Bartlett
* r171: Continue the 'rename nt_session_key' work. This attempts to renameAndrew Bartlett2007-10-101-88/+76
| | | | | | | this variable to 'user_session_key', where possible. The command line parameter is currently unchanged). Andrew Bartlett
* r116: volker's patch for local group and group nestingGerald Carter2007-10-101-0/+108
|
* r104: Fix ntlm_auth by adding the new strhex_to_data_blob() call.Andrew Bartlett2007-10-101-6/+0
| | | | Andrew Bartlett
* r87: Fix the build that Andrew Bartlett broke. Andrew - don't check ↵Jeremy Allison2007-10-101-0/+6
| | | | | | | *ANYTHING* in unless you have done a make clean; make. Jeremy.
* r84: Implement --required-membership-of=, an ntlm_auth option that restrictsAndrew Bartlett2007-10-101-38/+113
| | | | | | | | | all authentication to members of this particular group. Also implement an option to allow ntlm_auth to get 'squashed' error codes, which are safer to communicate to remote network clients. Andrew Bartlett
* r69: Global rename of 'nt_session_key' -> 'user_session_key'. The session ↵Andrew Bartlett2007-10-101-22/+22
| | | | | | | key could be anything, and may not be based on anything 'NT'. This is also what microsoft calls it.
* r39: * importing .cvsignore filesGerald Carter2007-10-101-1/+0
| | | | * updateing WHATSNEW with vl's change
* r21: Ensure 'net' follows the behaviour of all other samba client tools,Andrew Bartlett2007-10-101-5/+3
| | | | and honours the 'netbios name' in the smb.conf.
* Fix most of bug #169.Andrew Bartlett2004-04-031-0/+1
| | | | | | | | | | | | | | | For a (very) long time, we have had a bug in Samba were an NTLMv2-only PDC would fail, because it converted the password into NTLM format for checking. This patch performs the direct comparison required for interactive logons to function in this situation. It also removes the 'auth flags', which simply where not ever used. Natrually, this plays with the size of structures, so rebuild, rebuild rebuild... Andrew Bartlett
* Fix bugzilla # 1208Jim McDonough2004-03-241-1/+2
| | | | | | | | | | Winbind tickets expired. We now check the expiration time, and acquire new tickets. We couln't rely on renewing them, because if we didn't get a request before they expired, we wouldn't have renewed them. Also, there is a one-week limit in MS on renewal life, so new tickets would have been needed after a week anyway. Default is 10 hours, so we should only be acquiring them that often, unless the configuration on the DC is changed (and the minimum is 1 hour).
* Two little annoyances:Volker Lendecke2004-03-182-3/+2
| | | | | | | | net rpc did not inform you if no smbd is running. I never liked the error message (!) Success! when we established a trust. Volker
* Use possessive in message asking for user's password.Tim Potter2004-03-141-1/+1
|
* Restore the contract on all convert_stringXX() interfaces. Add a ↵Jeremy Allison2004-03-111-1/+1
| | | | | | | | | "allow_bad_conv" boolean parameter that allows broken iconv conversions to work. Gets rid of the nasty errno checks in mangle_hash2 and check_path_syntax and allows correct return code checking. Jeremy.
* Added strstr_m() function. Use in all places where we might run into mbJeremy Allison2004-03-091-1/+1
| | | | | (should fix the mb service name problem, can't remember the bugid). Jeremy.
* Add -O (for writing downloaded files to standard out) based on patch byJelmer Vernooij2004-03-051-65/+80
| | | | Bas van Sisseren <bas@dnd.utwente.nl>
* Another typo, sorry for samba-cvs spam :-)Volker Lendecke2004-03-041-1/+1
|
* Fix typo.Volker Lendecke2004-03-041-1/+1
| | | | Volker
* net_rpc.c: Don't complain if [add|del]mem was successful.Volker Lendecke2004-02-291-4/+4
| | | | | | srv_samr_nt.c: Correctly report that a user is not member of an alias. Volker
* Print an informative error message if trying to add/remove members fromVolker Lendecke2004-02-291-0/+6
| | | | | | something not a group. Volker
* Add 'net rpc group [add|del]mem' for domain groups and aliases.Volker Lendecke2004-02-281-0/+452
| | | | Volker
* Fix my fix to net rpc group list. We can certainly have more than a singleVolker Lendecke2004-02-281-3/+6
| | | | | | set of groups. Volker
* Implement 'net groupmap set' and 'net groupmap cleanup'.Volker Lendecke2004-02-263-0/+157
| | | | | | | | | | | | | | | | | | | | | | I was rather annoyed by the net groupmap syntax, I could never get it right. net groupmap set "domain admins" domadm creates a mapping, net groupmap set "domain admins" -C "Comment" -N "newntname" should also do what you expect. I'd like to have some feedback on the usability of this. net groupmap cleanup solves a problem I've had two times now: Our SID changed, and a user's primary group was mapped to a SID that is not ours. net groupmap cleanup removes all mappings that are not from our domain sid. Volker
* Fix bug in previous global_sam_sid() commit. I broke the 'read fromAndrew Bartlett2004-02-251-0/+6
| | | | | | | | | | MACHINE.SID' file functionality. Also, before we print out the results of 'net getlocalsid' and 'net getdomainsid', ensure we have tried to read that file, or have generated one. Andrew Bartlett
* I *hate* global variables...Andrew Bartlett2004-02-252-0/+16
| | | | | | | | | | | | | | | | | | OK, what was happening here was that we would invalidate global_sam_sid when we set the sid into secrets.tdb, to force a re-read. The problem was, we would do *two* writes into the TDB, and the second one (in the PDC/BDC case) would be of a NULL pointer. This caused smbd startups to fail, on a blank TDB. By using a local variable in the pdb_generate_sam_sid() code, we avoid this particular trap. I've also added better debugging for the case where this all matters, which is particularly for LDAP, where it finds out a domain SID from the sambaDomain object. Andrew Bartlett
* Add 'net rpc group add'. For this parse_samr.c had to be changed: TheVolker Lendecke2004-02-241-1/+62
| | | | | | | | group_info4 in set_dom_group_info also has the level in the record itself. This seems not to be an align. Tested with NT4 usrmgr.exe. It can still create a domain group on a samba machine. Volker
* Remove unused variable.Volker Lendecke2004-02-241-1/+0
| | | | Volker
* 'net idmap restore' is too useful to be left broken :-)Volker Lendecke2004-02-241-1/+105
| | | | | | Set the HWM values correctly after having manipulated the tdb. Volker
* Fix "unable to initialize" bug when smbd hasn't been run withJeremy Allison2004-02-232-2/+8
| | | | | | new system and a user is being added via pdbedit/smbpasswd. Found at Connectathon setup. Jeremy.
* Enable checking/resetting of account lockout and bad password based on policyJim McDonough2004-02-191-3/+17
|
* Add bad password reset and display of bad password count/timeJim McDonough2004-02-191-3/+25
|
* Don't try to show groups that could not be listed.Volker Lendecke2004-02-171-0/+9
| | | | Volker
* If there are no alias members, don't ask for their sids :-)Volker Lendecke2004-02-171-0/+4
| | | | Volker
* Fix success message for net groupmap modifyVolker Lendecke2004-02-161-1/+1
| | | | Volker
* Fix ETA Calculation when resumingJelmer Vernooij2004-02-131-1/+1
|
* fix set/getsampwent iterator in tdbsam to use an allocated listGerald Carter2004-02-111-2/+4
|
* BUG 1055; patch from SATOH Fumiyasu <fumiya@miraclelinux.com>; formatting ↵Gerald Carter2004-02-112-5/+6
| | | | fixes for 'net share'
* Expand 'net rpc group members' to local groups.Volker Lendecke2004-02-091-49/+175
| | | | Volker
* Make it possible to 'net rpc samdump' of any domain you are currently joinedAndrew Bartlett2004-02-083-89/+116
| | | | | | | | | to, despite any smb.conf settings. Work to allow the same for 'net rpc vampire', but instead give a clear error message on what is incorrect. Andrew Bartlett
* Add some help for 'net rpc password'.Andrew Bartlett2004-02-081-0/+1
| | | | Andrew Bartlett
* Make more functions static, and remove duplication in the use of functionsAndrew Bartlett2004-02-082-7/+7
| | | | | | | | | in lib/smbpasswd.c that were exact duplicates of functions in passdb/passdb.c (These should perhaps be pulled back out to smbpasswd.c, but that can occour later). Andrew Bartlett
* Make this table static const.Andrew Bartlett2004-02-081-1/+1
| | | | Andrew Bartlett
* I should have done this years ago...Andrew Bartlett2004-02-071-0/+131
| | | | | | | This adds the very simple 'admin set password' capability to 'net rpc', much as we have it for 'net ads'. Andrew Bartlett
* This should be the correct fix for the lack of a prototype forAndrew Bartlett2004-02-041-6/+0
| | | | | | | | remote_password_change(). Sorry for the original bug. Andrew Bartlett
* fix problems with proto.hGerald Carter2004-02-021-1/+1
|
* remerge andrew's cracklib patch from HEAD and fix a compile warningsGerald Carter2004-02-021-0/+7
|
generated by cgit (git 2.34.1) at 2024-10-04 16:24:02 +0000