summaryrefslogtreecommitdiffstats
path: root/source3/smbd/sesssetup.c
Commit message (Collapse)AuthorAgeFilesLines
...
* Various post AuthRewrite cleanups, fixups and tidyups.Andrew Bartlett2001-11-011-3/+3
| | | | | | | | | | | | | | | | | | Zero out some of the plaintext passwords for paranoia Fix up some of the other passdb backends with the change to *uid_t rather than uid_t. Make some of the code in srv_netlog_nt.c clearer, is passing an array around, so pass its lenght in is definition, not as a seperate paramater. Use sizeof() rather than magic numbers, it makes things easier to read. Cope with a PAM authenticated user who is not in /etc/passwd - currently by saying NO_SUCH_USER, but this can change in future. Andrew Bartlett (This used to be commit 514c91b16baca639bb04638042bf9894d881172a)
* This should fix up the compile with krb5.Andrew Bartlett2001-10-311-7/+9
| | | | | This needs to use the auth interface at some stage, but for now this will do. (This used to be commit 8dc4f2e44b150cdcdecd2f6028bf06907ff90cad)
* This is a farily large patch (3300 lines) and reworks most of the AuthRewriteAndrew Bartlett2001-10-311-197/+159
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | code. In particular this assists tpot in some of his work, becouse it provides the connection between the authenticaion and the vuid generation. Major Changes: - Fully malloc'ed structures. - Massive rework of the code so that all structures are made and destroyed using malloc and free, rather than hanging around on the stack. - SAM_ACCOUNT unix uids and gids are now pointers to the same, to allow them to be declared 'invalid' without the chance that people might get ROOT by default. - kill off some of the "DOMAIN\user" lookups. These can be readded at a more appropriate place (probably domain_client_validate.c) in the future. They don't belong in session setups. - Massive introduction of DATA_BLOB structures, particularly for passwords. - Use NTLMSSP flags to tell the backend what its getting, rather than magic lenghths. - Fix winbind back up again, but tpot is redoing this soon anyway. - Abstract much of the work in srv_netlog_nt back into auth helper functions. This is a LARGE change, and any assistance is testing it is appriciated. Domain logons are still broken (as far as I can tell) but other functionality seems intact. Needs testing with a wide variety of MS clients. Andrew Bartlett (This used to be commit f70fb819b2f57bd57232b51808345e2319d52f6c)
* Spnego on the 'server' end of security=server just does not work, so set theAndrew Bartlett2001-10-301-1/+7
| | | | | | | | | | flags so we just do a 'normal' session setup. Also add some parinoia code to detect when sombody attempts to do a 'normal' session setup when spnego had been negoitiated. Andrew Bartlett (This used to be commit 190898586fa218c952fbd5bea56155d04e6f248b)
* get rid of compiler warnings (casts and delete unused variables)Herb Lewis2001-10-231-1/+1
| | | | (This used to be commit 51cb4411df61d1caec9d84809b1a53a6a632f808)
* - fixed link order of krb5 libsAndrew Tridgell2001-10-221-19/+5
| | | | | - accept a wide range of principal names in session setup (This used to be commit 672df66296f540b606aa43effab5f021b8978e4b)
* Ok, I know it's a language thing and it shouldn't matter.... but a kerberosJeremy Allison2001-10-211-6/+6
| | | | | | name is a "principal", not a principle. English majors will complain :-). Jeremy. (This used to be commit b668d7d656cdd066820fb8044f24bcd4fda29524)
* change smbd to use HOST/hostname principle form until I work out howAndrew Tridgell2001-10-211-22/+18
| | | | | | | to use the other form in netjoin smb_wct is a char, not a word (This used to be commit 3dbb48b188980cf6c869dc762e3039dd375bf392)
* fixed the spnego detection code in session setupAndrew Tridgell2001-10-211-2/+8
| | | | | this gets share mode working again (This used to be commit 8286e5307ca47f14d27ee0d9bc9700d52151d56a)
* crude fix for anonymous session setup with extended securityAndrew Tridgell2001-10-201-1/+62
| | | | | negotiated (This used to be commit b3caf2109090cb2b97a829913bee7e50e7eacba8)
* better krb5 error handling (thanks andrewb!)Andrew Tridgell2001-10-201-1/+6
| | | | (This used to be commit fd3a3daef3b8f7140e7006d30d23d739ac3aad2f)
* finished auth when we get a valid kerberos ticketAndrew Tridgell2001-10-201-8/+58
| | | | | | smbd now works with kerberos authentication if you use a MIT KDC and smbclient. Next step is to make it work with a windows client (This used to be commit e0c99e1f3708b155b8db99950f9ac6e27763368f)
* the beginnings of kerberos support in smbd. It doesn't work yet, butAndrew Tridgell2001-10-181-9/+91
| | | | | | it should give something for others to hack on and possibly find what I'm doing wrong. (This used to be commit 353c290f059347265b9be2aa1010c2956da06485)
* removed some debug codeAndrew Tridgell2001-10-171-2/+2
| | | | (This used to be commit b9e1f05393aaadf1fbe09338417977e2a3cb4559)
* added basic NTLMSSP support in smbd. This is still quite rough, andAndrew Tridgell2001-10-171-0/+258
| | | | | | | loses things like username mapping. I wanted to get this in then discuss it a bit to see how we want to split up the existing session setup code (This used to be commit b74fda69bf23207c26d8b2af23910d8f2eb89875)
* split session setup code out of reply.c in preparation for addingAndrew Tridgell2001-10-151-0/+355
NTLMSSP and kerberos support in smbd (This used to be commit 38a43d75e25bbebe0f6cdfcf389129a842ede842)