summaryrefslogtreecommitdiffstats
path: root/source/utils
Commit message (Collapse)AuthorAgeFilesLines
...
| * r17903: Fix null deref caught by Stanford checker. Don'tJeremy Allison2006-08-291-1/+0
| | | | | | | | | | call ntlmssp_end on a null pointer ! (Doh !). Jeremy.
| * r17881: Another microstep towards better error reporting: Make ↵Volker Lendecke2006-08-281-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | get_sorted_dc_list return NTSTATUS. If we want to differentiate different name resolution problems we might want to introduce yet another error class for Samba-internal errors. Things like no route to host to the WINS server, a DNS server explicitly said host not found etc might be worth passing up. Because we can not stash everything into the existing NT_STATUS codes, what about a Samba-specific error class like NT_STATUS_DOS and NT_STATUS_LDAP? Volker
| * r17847: Dummy commitVolker Lendecke2006-08-261-1/+1
| |
| * r17798: Beginnings of a standalone libaddns library released under Gerald Carter2006-08-242-3/+275
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the LGPL. Original code by Krishna Ganugapati <krishnag@centeris.com>. Additional work by me. It's still got some warts, but non-secure updates do currently work. There are at least four things left to really clean up. 1. Change the memory management to use talloc() rather than malloc() and cleanup the leaks. 2. Fix the error code reporting (see initial changes to dnserr.h) 3. Fix the secure updates 4. Define a public interface in addns.h 5. Move the code in libads/dns.c into the libaddns/ directory (and under the LGPL). A few notes: * Enable the new code by compiling with --with-dnsupdate * Also adds the command 'net ads dns register' * Requires -luuid (included in the e2fsprogs-devel package). * Has only been tested on Linux platforms so there may be portability issues.
| * r17669: Remove RID algorithm support from unmapped users and groupsGerald Carter2006-08-211-2/+9
| | | | | | | | when using smbpasswd
| * r17610: Added the ability for firefox to drive the winbinddJeremy Allison2006-08-191-10/+99
| | | | | | | | | | | | | | | | | | | | | | ntlm_auth module to allow it to use winbindd cached credentials.The credentials are currently only stored in a krb5 MIT environment - we need to add an option to winbindd to allow passwords to be stored even in an NTLM-only environment. Patch from Robert O'Callahan, modified with some fixes by me. Jeremy.
| * r17603: Make net_ads_join_ok return NTSTATUS.Volker Lendecke2006-08-181-7/+12
| | | | | | | | | | | | | | | | Thanks to Michael Adam <ma@sernet.de> hop, hop, hop... ;-) Volker
| * r17602: Make check_ads_config return NTSTATUS, set some error codes in ↵Volker Lendecke2006-08-181-10/+18
| | | | | | | | | | | | | | | | net_ads_join. Thanks to Michael Adam <ma@sernet.de> Volker
| * r17591: machine_account is unused, and ctx must be freed. Thanks MichaelVolker Lendecke2006-08-171-3/+2
| |
| * r17585: Don't let ads_status throw away the error information.Volker Lendecke2006-08-171-38/+45
| | | | | | | | | | | | Thanks to Michael Adam <ma@sernet.de>. Volker
| * r17584: Some C++ WarningsVolker Lendecke2006-08-171-2/+2
| |
| * r17557: Change net_join_domain to return NTSTATUS instead of int.Volker Lendecke2006-08-151-15/+16
| | | | | | | | | | | | Thanks to Michael Adam <ma@sernet.de>. Volker
| * r17554: CleanupVolker Lendecke2006-08-153-50/+53
| |
| * r17551: Move some DEBUG to d_printf in interactive functions and returnVolker Lendecke2006-08-151-7/+10
| | | | | | | | | | | | | | | | NO_LOGON_SERVERS if no domain controller was found. Thanks to Michael Adam <ma@sernet.de>. Volker
| * r17496: net groupmap add could add uninitialized sid_name_typeJeremy Allison2006-08-111-10/+27
| | | | | | | | | | entries to the group mapping db. Ensure this can't happen. Jeremy.
| * r17468: To minimize the diff later on, pre-commit some changes ↵Volker Lendecke2006-08-092-4/+4
| | | | | | | | | | | | | | | | independently: Change internal mapping.c functions to return NTSTATUS instead of BOOL. Volker
| * r17465: Get rid of add_initial_entry. In the two places it was called in it ↵Volker Lendecke2006-08-081-33/+33
| | | | | | | | | | | | | | | | seemed a bit pointless to me. Volker
| * r17463: A bit of cleanup work: Volker Lendecke2006-08-083-13/+13
| | | | | | | | | | | | | | | | | | | | | | | | Remove some unused code: pdb_find_alias is not used anymore, and nobody I think has ever used the pdb_nop operations for group mapping. smbpasswd and tdb use the default ones and ldap has its own. Make the functions pdb_getgr* return NTSTATUS instead of BOOL. Nobody right now really makes use of it, but it feels wrong to throw away information so early. Volker
| * r17451: Change pdb_getgrsid not to take a DOM_SID but a const DOM_SID * as anVolker Lendecke2006-08-083-12/+10
| | | | | | | | | | | | argument. Volker
| * r17446: Fix some C++ warnings and two memleaks found by Coverity, IDs 304 ↵Volker Lendecke2006-08-071-7/+13
| | | | | | | | | | | | and 305. Volker
| * r17383: Patch from Michael Adams <ma@sernet.de> to catch Gerald Carter2006-08-031-17/+17
| | | | | | | | some memory leaks on error paths in net_ads_join()
| * r17375: If a field containts only whitespace, we need to do base64 as well.Volker Lendecke2006-08-021-2/+20
| | | | | | | | Volker
| * r17374: Get rid of a silly "System User" default for "description", also ↵Volker Lendecke2006-08-021-5/+9
| | | | | | | | | | | | | | | | fetch the sambaProfilePath. Volker
| * r17356: Also transfer the sambaHomePath attribute.Volker Lendecke2006-08-011-0/+4
| | | | | | | | Volker
| * r17335: Some more fixes to net rpc vampire ldif. Still not good though :-(Volker Lendecke2006-07-311-8/+14
| | | | | | | | Volker
| * r17316: More C++ warnings -- 456 leftVolker Lendecke2006-07-301-2/+2
| |
| * r17313: Non-Ascii attribute values need to be encoded as base64, with an ↵Volker Lendecke2006-07-291-15/+60
| | | | | | | | | | | | | | | | | | | | | | | | attribute name attr:: instead of attr: German domains tend to have umlauts in group names. More to come tomorrow. Volker
| * r17312: Do some reformatting on net rpc samsync ldif. Not doing this checkin ↵Volker Lendecke2006-07-291-135/+152
| | | | | | | | | | | | | | | | | | easily, as this puts me into svn blame in places I'm not sure I want my name to show up.... Volker
| * r17260: remove extra ;SAMBA_3_0_23/source/utils/netlookup.cGerald Carter2006-07-261-1/+1
| |
| * r17258: Cleanup the 'net ads help join' output and document createupn Gerald Carter2006-07-261-35/+46
| | | | | | | | and createcomputer options
| * r17216: From Kai Blin <kai.blin@gmail.com>:Andrew Bartlett2006-07-241-0/+71
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | A patch to make ntlm_auth recognize three new commands in ntlmssp-client-1 and squid-2.5-ntlmssp: The commands are the following: Command: SF <hex number> Reply: OK Description: Takes feature request flags similar to samba4's gensec_want_feature() call. So far, only NTLMSSP_FEATURE_SESSION_KEY, NTLMSSP_FEATURE_SIGN and NTLMSSP_FEATURE_SEAL are implemented, using the same values as the corresponding GENSEC_FEATURE_* flags in samba4. Command: GF Reply: GF <hex number> Description: Returns the negotiated flags. Command: GK Reply: GK <base64 encoded session key> Description: Returns the negotiated session key. (These commands assist a wine project to use ntlm_auth for signing and sealing of bulk data). Andrew Bartlett
| * r17177: Get rid of a global variable by adding a private data pointer toVolker Lendecke2006-07-211-2/+5
| | | | | | | | | | | | share_mode_forall(). Volker
| * r17158: Add two new options to 'net ads join'Gerald Carter2006-07-201-12/+114
| | | | | | | | | | | | * createupn=[host_upn@realm] * createcomputer=<ou path top to bottom> (this was previously the only arg)
| * r17149: Fail the join if we cannot set any SPNs for the machine account.Gerald Carter2006-07-191-24/+18
| | | | | | | | Disable the one we created and whine.
| * r17086: Re-add ability to contact remote domain controllers with the "net ads"Günther Deschner2006-07-172-39/+64
| | | | | | | | | | | | | | | | | | | | | | toolset. In 3.0.23 all those commands have been limited to the DC of our primary domain. Also distinguish calls that may go to remote DCs (search, info, lookup, etc.) from those that should only go to our primary domain (join, leave, etc.). Guenther
| * r17078: Ouch....Volker Lendecke2006-07-161-36/+0
| |
| * r17077: Activate RPC-SAMBA3-GETUSERNAME in the build farmVolker Lendecke2006-07-161-0/+36
| |
| * r17032: I thought I had already merged this from trunk:Volker Lendecke2006-07-141-1/+2
| | | | | | | | | | | | | | | | | | > r16959 | vlendec | 2006-07-11 23:10:44 +0200 (Di, 11 Jul 2006) | 1 line > > get_share_security does not need snum, activate RPC-SAMBA3-SRVSVC Volker
| * r17005: Add a new helper mode to ntlm_auth: ntlm-change-password-1Andrew Bartlett2006-07-131-1/+295
| | | | | | | | | | | | | | | | | | | | | | This mode proxies pre-calculated blobs from a remote (probably VPN) client into the domain. This allows clients to change their password over a PPTP connection (where they would not be able to connect to SAMR directly). The precalculated blobs do not reveal the plaintext password. Original patch by Alexey Kobozev <cobedump@gmail.com>
| * r16952: New derive DES salt code and Krb5 keytab generationGerald Carter2006-07-111-15/+56
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Major points of interest: * Figure the DES salt based on the domain functional level and UPN (if present and applicable) * Only deal with the DES-CBC-MD5, DES-CBC-CRC, and RC4-HMAC keys * Remove all the case permutations in the keytab entry generation (to be partially re-added only if necessary). * Generate keytab entries based on the existing SPN values in AD The resulting keytab looks like: ktutil: list -e slot KVNO Principal ---- ---- --------------------------------------------------------------------- 1 6 host/suse10.plainjoe.org@COLOR.PLAINJOE.ORG (DES cbc mode with CRC-32) 2 6 host/suse10.plainjoe.org@COLOR.PLAINJOE.ORG (DES cbc mode with RSA-MD5) 3 6 host/suse10.plainjoe.org@COLOR.PLAINJOE.ORG (ArcFour with HMAC/md5) 4 6 host/suse10@COLOR.PLAINJOE.ORG (DES cbc mode with CRC-32) 5 6 host/suse10@COLOR.PLAINJOE.ORG (DES cbc mode with RSA-MD5) 6 6 host/suse10@COLOR.PLAINJOE.ORG (ArcFour with HMAC/md5) 7 6 suse10$@COLOR.PLAINJOE.ORG (DES cbc mode with CRC-32) 8 6 suse10$@COLOR.PLAINJOE.ORG (DES cbc mode with RSA-MD5) 9 6 suse10$@COLOR.PLAINJOE.ORG (ArcFour with HMAC/md5) The list entries are the two basic SPN values (host/NetBIOSName & host/dNSHostName) and the sAMAccountName value. The UPN will be added as well if the machine has one. This fixes 'kinit -k'. Tested keytab using mod_auth_krb and MIT's telnet. ads_verify_ticket() continues to work with RC4-HMAC and DES keys.
| * r16947: Fix warning with profile separator when profiles notJeremy Allison2006-07-111-0/+2
| | | | | | | | | | being used. Jeremy.
| * r16945: Sync trunk -> 3.0 for 3.0.24 code. Still needJeremy Allison2006-07-1115-470/+1094
| | | | | | | | | | | | | | to do the upper layer directories but this is what everyone is waiting for.... Jeremy.
| * r16845: Properly report the error during join when the set password failsGerald Carter2006-07-071-0/+7
| |
| * r16656: Fix #3894 and #3895 reported by jason@ncac.gwu.edu.Jeremy Allison2006-06-281-3/+3
| | | | | | | | Jeremy.
| * r16652: Fix bug #3891 reported by jason@ncac.gwu.edu.Jeremy Allison2006-06-281-4/+1
| | | | | | | | Jeremy.
| * r16644: Fix bug #3887 reported by jason@ncac.gwu.eduJeremy Allison2006-06-286-12/+12
| | | | | | | | | | | | by converting the lookup_XX functions to correctly return SID_NAME_TYPE enums. Jeremy.
| * r16640: Fix bug #3886 reported by jason@ncac.gwu.edu.Jeremy Allison2006-06-281-3/+0
| | | | | | | | Jeremy.
| * r16638: Fix bug #3885, reported by jason@ncac.gwu.edu. UseJeremy Allison2006-06-281-1/+1
| | | | | | | | | | the correct enumerated type in the macro. Jeremy.
| * r16614: Klocwork #2012. memleak on error path.Jeremy Allison2006-06-281-0/+1
| | | | | | | | Jeremy.
| * r16612: Klocwork fix #2011. memleak on error path.Jeremy Allison2006-06-281-6/+11
| | | | | | | | Jeremy.
generated by cgit (git 2.34.1) at 2025-09-26 03:55:30 +0000