summaryrefslogtreecommitdiffstats
path: root/source/web
Commit message (Collapse)AuthorAgeFilesLines
* Moved code that changes the pw_passwd entry (i.e shadow password andTim Potter1999-06-131-1/+1
| | | | | | | | weird unixware stuff) into _Get_Pwnam() to fix a memory allocation bug. Note that the Get_Pwnam() function now returns a const struct passwd * as a hint to other developers not to change entries in the struct passwd.
* mods to allow inter-domain trust accounts to be added to SAM databaseLuke Leighton1999-03-091-3/+18
| | | | using smbpasswd command.
* rpc_samr.h parse_samr.c srv_samr.c :Luke Leighton1998-12-011-1/+1
| | | | | | | | | | samr_query_aliasmembers (cool!) util_pwdb.c sids.c nmbd.c server.c smbpasswd.c swat.c : pwdb_initialise(BOOL is_server) now creates / reads DOMAIN_NAME.SID if is_server is True, and does LsaQueryInfoPolicy(levels 3 and 5) to obtain member and pdc sids.
* weekend work. user / group database API.Luke Leighton1998-11-291-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | - split sam_passwd and smb_passwd into separate higher-order function tables - renamed struct smb_passwd's "smb_user" to "unix_user". added "nt_user" plus user_rid, and added a "wrap" function in both sam_passwd and smb_passwd password databases to fill in the blank entries that are not obtained from whatever password database API instance is being used. NOTE: whenever a struct smb_passwd or struct sam_passwd is used, it MUST be initialised with pwdb_sam_init() or pwd_smb_init(), see chgpasswd.c for the only example outside of the password database APIs i could find. - added query_useraliases code to rpcclient. - dealt with some nasty interdependencies involving non-smbd programs and the password database API. this is still not satisfactorily resolved completelely, but it's the best i can do for now. - #ifdef'd out some password database options so that people don't mistakenly set them unless they recompile to _use_ those options. lots of debugging done, it's still not finished. the unix/NT uid/gid and user-rid/group-rid issues are better, but not perfect. the "BUILTIN" domain is still missing: users cannot be added to "BUILTIN" groups yet, as we only have an "alias" db API and a "group" db API but not "builtin-alias" db API...
* make the help links appear in a separate window, so you can read theAndrew Tridgell1998-11-271-1/+1
| | | | docs and do configuration at the same time.
* better layout of password options.Andrew Tridgell1998-11-271-19/+23
|
* changed string_sub() to replace " ; and ` in the inserted string with _Andrew Tridgell1998-11-231-1/+1
| | | | use all_string_sub() if you don't want this.
* make SWAT obey the global "hosts allow" and "hosts deny" settings.Andrew Tridgell1998-11-212-13/+29
| | | | | any attempt to run swat from a host that is disallowed will give an error.
* smbd/password.c: Added *SMBSERVER fix is name is too long.Jeremy Allison1998-11-211-1/+1
| | | | | web/swat.c: Changed '?' to help. Jeremy.
* wrong directory path for smbd and nmbdHerb Lewis1998-11-201-2/+2
|
* Added the same open()/fopen()/creat()/mmap() -> sys_XXX calls.Jeremy Allison1998-11-173-7/+7
| | | | | | | | | | Tidied up some of the mess (no other word for it). Still doesn't compile cleanly. There are calls with incorrect parameters that don't seem to be doing the right thing. This code still needs surgery :-(. Jeremy.
* - group database API. oops and oh dear, the threat has been carried out:Luke Leighton1998-11-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the pre-alpha "domain group" etc parameters have disappeared. - interactive debug detection - re-added mem_man (andrew's memory management, detects memory corruption) - american spellings of "initialise" replaced with english spelling of "initialise". - started on "lookup_name()" and "lookup_sid()" functions. proper ones. - moved lots of functions around. created some modules of commonly used code. e.g the password file locking code, which is used in groupfile.c and aliasfile.c and smbpass.c - moved RID_TYPE_MASK up another bit. this is really unfortunate, but there is no other "fast" way to identify users from groups from aliases. i do not believe that this code saves us anything (the multipliers) and puts us at a disadvantage (reduces the useable rid space). the designers of NT aren't silly: if they can get away with a user- interface-speed LsaLookupNames / LsaLookupSids, then so can we. i spoke with isaac at the cifs conference, the only time for example that they do a security context check is on file create. certainly not on individual file reads / writes, which would drastically hit their performance and ours, too. - renamed myworkgroup to global_sam_name, amongst other things, when used in the rpc code. there is also a global_member_name, as we are always responsible for a SAM database, the scope of which is limited by the role of the machine (e.g if a member of a workgroup, your SAM is for _local_ logins only, and its name is the name of your server. you even still have a SID. see LsaQueryInfoPolicy, levels 3 and 5). - updated functionality of groupname.c to be able to cope with names like DOMAIN\group and SERVER\alias. used this code to be able to do aliases as well as groups. this code may actually be better off being used in username mapping, too. - created a connect to serverlist function in clientgen.c and used it in password.c - initialisation in server.c depends on the role of the server. well, it does now. - rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
* - new prototypesAndrew Tridgell1998-11-141-3/+16
| | | | | - much as I hate doing it I've removed the "commit changes" button for users that don't have write access to smb.conf (Jeremy insisted)
* allow all user to view the configAndrew Tridgell1998-11-141-36/+22
|
* remove code that allows installation via cgiAndrew Tridgell1998-11-142-21/+36
| | | | swat will now give an error message if run via cgi
* Makefile.in configure configure.in include/config.h.in: Changes for DGUX and ↵Jeremy Allison1998-11-131-9/+9
| | | | | | | | | | | | | | UNIXWARE. groupdb/aliasdb.c groupdb/aliasfile.c groupdb/groupfile.c: Don't use snprinf, use slprintf. include/includes.h: Fix YP problem. include/smb.h: Fix ZERO_STRUCTP. lib/util_sock.c: Added strerror() in debugs. passdb/ldap.c: Don't use snprinf, use slprintf. rpc_client/cli_lsarpc.c rpc_client/cli_pipe.c rpc_parse/parse_sec.c rpc_server/srv_pipe.c: Don't use snprinf, use slprintf. script/installman.sh: DGUX changes. smbd/open.c smbd/oplock.c: Fixed gcc warnings. web/swat.c: Changes USER to SWAT_USER.
* %\ is an interesting printf argument, but I prefer %sAndrew Tridgell1998-11-121-1/+1
|
* Removed code that used printf/fprintf in password changin libraries.Herb Lewis1998-11-121-3/+19
| | | | Now passes strings instead.
* .cvsignore: Removed old entries.Herb Lewis1998-11-121-21/+24
| | | | | | | | | | | | client/client.c: include/client.h: Added some debug messages that the old client used to generate. These are needed to make scripts such as 'findsmb' work - there may be other changes to keep backwards output compatibility. Do we need a -old-client-compat argument ? libsmb/clientgen.c: Fixed crash bug where malloc'ed data wasn't being cleared - corrupted malloc chains. web/swat.c: John's changes to get rid of "ghost" table entries.
* changes from John Sygulla for changing remote passwordsHerb Lewis1998-11-121-17/+79
|
* handle null usernamesAndrew Tridgell1998-11-121-8/+5
|
* show all buttons in demo modeAndrew Tridgell1998-11-121-1/+1
|
* fixed demo modeAndrew Tridgell1998-11-121-5/+10
|
* extracted the password change code from smbpasswd and used it in swatAndrew Tridgell1998-11-121-299/+54
| | | | instead of opening pipes and other horrible stuff.
* Added the security changes suggested by Andrew - become theJeremy Allison1998-11-122-79/+107
| | | | | user that authenticated to swat permanently (if not root). Jeremy.
* Added enable user button. Fixed bug where log was always printed.Jeremy Allison1998-11-121-5/+15
| | | | Jeremy.
* changed is_root() to am_root() to prevent clash with variable names.Andrew Tridgell1998-11-112-13/+11
|
* J.F.'s latest printer fixes plus his gcc -picky fix for web/cgi.cJeremy Allison1998-11-111-1/+1
| | | | Jeremy.
* rpc_server/srv_netlog.c: Fixed crash bug with ACB_PWNOTREQ.Jeremy Allison1998-11-112-7/+5
| | | | | | script/makeyodldocs.sh: Added code to make text docs for non-man page YODL docs. web/cgi.c web/swat.c: SGI compiler warnings fixed. Jeremy.
* added password change functionality to swatHerb Lewis1998-11-112-60/+534
|
* swat.c updated to use new yodl generated smb.conf.5.html file for helpHerb Lewis1998-11-111-5/+17
| | | | added smb.conf.5.html to swat/help
* report ourselves as HTTP/1.0 not HTTP/1.1Andrew Tridgell1998-10-261-3/+3
|
* get away with dummy and .dummy filesAlexandre Oliva1998-09-291-1/+0
|
* Changes to test in configure if capabilities are enabled on a system.Jeremy Allison1998-09-282-5/+3
| | | | | | | | | | Changes to get Samba to compile cleanly with the IRIX compiler with the options : -fullwarn -woff 1209,1174 (the -woff options are to turn off warnings about unused function parameters and controlling loop expressions being constants). Split prototype generation as we hit a limit in IRIX nawk. Removed "." code in smbd/filename.c (yet again :-). Jeremy.
* automated generation of .dummy files for each subdirectory;Alexandre Oliva1998-09-281-1/+0
| | | | | dummy.in files are no longer needed, and new directories will be taken care of automatically, at configure (or config.status --recheck) time
* replace getpass() with getsmbpass() if getsmbpass.c compilesAlexandre Oliva1998-09-211-1/+1
|
* major autoconf clean-upAlexandre Oliva1998-09-211-0/+1
| | | | fix problems in builds with srcdir!=builddir
* tridge the destroyer returns!Andrew Tridgell1998-09-051-168/+0
| | | | | | | | | | | | | | | | | | | | | | prompted by the interpret_security() dead code that Jean-Francois pointed out I added a make target "finddead" that finds potentially dead (ie. unused) code. It spat out 304 function names ... I went through these are deleted many of them, making others static (finddead also reports functions that are used only in the local file). in doing this I have almost certainly deleted some useful code. I may have even prevented compilation with some compile options. I apologise. I decided it was better to get rid of this code now and add back the one or two functions that are needed than to keep all this baggage. So, if I have done a bit too much "destroying" then let me know. Keep the swearing to a minimum :) One bit I didn't do is the ubibt code. Chris, can you look at that? Heaps of unused functions there. Can they be made static?
* use /swat/ prefix in both inetd and cgi modes, to enable a static header.htmlAndrew Tridgell1998-09-022-19/+8
|
* More abstraction of file system data types, to move to a 64Jeremy Allison1998-09-011-1/+1
| | | | | | | | | | | | | | | | | | | | | bit file interface for the NT SMB's. Created a new define, SMB_STRUCT_STAT that currently is defined to be struct stat - this wil change to a user defined type containing 64 bit info when the correct wrappers are written for 64 bit stat(), fstat() and lstat() calls. Also changed all sys_xxxx() calls that were previously just wrappers to the same call prefixed by a dos_to_unix() call into dos_xxxx() calls. This makes it explicit when a pathname translation is being done, and when it is not. Now, all sys_xxx() calls are meant to be wrappers to mask OS differences, and not silently converting filenames on the fly. Jeremy.
* spruced up SWAT a bit - it now uses the new Samba logo at the top andAndrew Tridgell1998-09-011-21/+27
| | | | a table to give it a little border
* fixed a bug in the base64 hanlding that led to auth failures for someAndrew Tridgell1998-09-011-2/+6
| | | | passwords with SWAT
* this checkin gets rid of the global Files[] array and makes it localAndrew Tridgell1998-08-151-1/+0
| | | | | | | in files.c it should now be faily easy to expand the default MAX_OPEN_FILES to many thousands.
* configure: Changes for extra headers.Jeremy Allison1998-08-151-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | configure.in: Source for header changes. client/clitar.c: Fixed isXXX macros & debugs for gcc pedantic compile. include/config.h.in: Added MEMSET, BZERO, MEMORY, RPCSVC_YPCLNT, STRINGS headers. include/includes.h: Headers for the above. include/smb.h: Made SIGNAL_CAST POSIX by default void (*)(int). lib/access.c: Fixed isXXX macros & debugs for gcc pedantic compile. lib/charset.c: Fixed isXXX macros & debugs for gcc pedantic compile. lib/debug.c: Fixed signal functs. lib/kanji.c: Fixed isXXX macros & debugs for gcc pedantic compile. lib/smbrun.c: Fixed isXXX macros & debugs for gcc pedantic compile. lib/util.c: Fixed isXXX macros & debugs for gcc pedantic compile. libsmb/namequery.c: Fixed isXXX macros & debugs for gcc pedantic compile. locking/shmem.c: Fixed isXXX macros & debugs for gcc pedantic compile. locking/shmem_sysv.c: Fixed error messages in sysV stuff. nmbd/asyncdns.c: Fixed signal functs. nmbd/nmbd.c: Fixed isXXX macros & debugs for gcc pedantic compile. passdb/passdb.c: Fixed isXXX macros & debugs for gcc pedantic compile. passdb/smbpassfile.c: Fixed isXXX macros & debugs for gcc pedantic compile. smbd/chgpasswd.c: Fixed isXXX macros & debugs for gcc pedantic compile. smbd/ipc.c: Fixed isXXX macros & debugs for gcc pedantic compile. smbd/nttrans.c: Fixed fsp code path. smbd/password.c: fixed HAVE_YP_GET_DEFAULT_DOMAIN problem. smbd/printing.c: Fixed isXXX macros & debugs for gcc pedantic compile. smbd/reply.c: Fixed isXXX macros & debugs for gcc pedantic compile. smbd/server.c: Fixed isXXX macros & debugs for gcc pedantic compile. smbd/trans2.c: Fixed core dump bug. smbd/uid.c: Fixed isXXX macros & debugs for gcc pedantic compile. Jeremy.
* this is the bug change to using connection_struct* instead of cnum.Andrew Tridgell1998-08-141-2/+0
| | | | | | | | Connections[] is now a local array in server.c I might have broken something with this change. In particular the oplock code is suspect and some .dll files aren't being oplocked when I expected them to be. I'll look at it after I've got some sleep.
* split the system password checking routines out of smbd/password.c andAndrew Tridgell1998-08-101-1/+1
| | | | | into passdb/pass_check.c. This means SWAT no longer needs to link to smbd/password.c
* some merge cleanupsAndrew Tridgell1998-07-291-0/+0
|
* merge from the autoconf2 branch to the main branchAndrew Tridgell1998-07-291-0/+1
|
* This is a security audit change of the main source.Jeremy Allison1998-05-123-9/+9
| | | | | | | | | | | | | | | | | | It removed all ocurrences of the following functions : sprintf strcpy strcat The replacements are slprintf, safe_strcpy and safe_strcat. It should not be possible to use code in Samba that uses sprintf, strcpy or strcat, only the safe_equivalents. Once Andrew has fixed the slprintf implementation then this code will be moved back to the 1.9.18 code stream. Jeremy.
* changed to use slprintf() instead of sprintf() just aboutAndrew Tridgell1998-05-111-1/+1
| | | | | | | everywhere. I've implemented slprintf() as a bounds checked sprintf() using mprotect() and a non-writeable page. This should prevent any sprintf based security holes.
generated by cgit (git 2.34.1) at 2025-09-26 00:04:15 +0000