summaryrefslogtreecommitdiffstats
path: root/source
Commit message (Collapse)AuthorAgeFilesLines
...
* | Support utf8 on the wire for ads ldap. DN's are converted, as well as strings,Jim McDonough2002-06-244-349/+315
| | | | | | | | | | | | | | | | | | | | | | | | | | | | though it is up to the calling function to decide whether values are strings or not. Attributes are not converted at this point, though support for it would be simple. I have tested it with users and groups using non-ascii chars, and if the check for alphanumeric user/domain names is removed form sesssetup.c, even a user with accented chars can connect, or even login (via winbind). I have also simplified the interfaces to ads_mod_*, though we will probably want to expand this by a few functions in the near future. We just had too many ways to do the same thing...
* | Merged across trans2.c from SAMBA_2_2. UNIX extensions and passthroughJeremy Allison2002-06-243-1074/+1532
| | | | | | | | | | now supported in HEAD. Jeremy.
* | much better findstatic scriptAndrew Tridgell2002-06-242-59/+65
| |
* | Try to get security=domain at least slightly working.Andrew Bartlett2002-06-242-8/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | The previous code both had basic logic flaws in it, and some subtle issues regarding the Win2k info3 response. I've tested this against Samba (it looks like that was missed last time due to the 'called name' corruption - which broke my testsuite) and accomidated what I've seen from a info3 printout jmcd gave me. I'll get this tested fully as soon as I get my VMware going again. Andrew Bartlett
* | Add module versioning to the passdb module systemAndrew Bartlett2002-06-223-2/+32
| | | | | | | | | | | | | | | | | | | | | | | | | | All passdb modules need to include a 'magic' macro that creates simple 'return my version number' function. (from metze and jelmer) Also fix up the dir_drive autosubsitute code to correctly use lp_logon_drive(). (from metze) Andrew Bartlett
* | Raise some debug levels.Andrew Bartlett2002-06-222-2/+2
| | | | | | | | Andrew Bartlett
* | Don't use uint. It doesn't exist on some platforms and we don't define it.Jeremy Allison2002-06-218-14/+22
| | | | | | | | | | Replaced with "unsigned int". Jeremy.
* | Fixed incorrect debug.Tim Potter2002-06-211-1/+1
| |
* | Format tidyup before I start working on scalability fixes (one file perJeremy Allison2002-06-211-74/+134
| | | | | | | | | | print queue). Jeremy.
* | Changed level of "bind succeded on port %d" debug to 10.Tim Potter2002-06-211-1/+1
| |
* | Fix from Andrew Esh for not checking return code.Jeremy Allison2002-06-201-0/+3
| | | | | | | | Jeremy.
* | Remove "inline" - shouldn't be in portable code.Jeremy Allison2002-06-201-1/+1
| | | | | | | | Jeremy.
* | Got rid of unused flags field in lanman api_commands[].Tim Potter2002-06-201-36/+49
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Added an auth_user field which denotes whether the api call can be made anonymously. In combination with lp_restrict_anonymous() this can decrease the amount of information that can be retrieved anonymously. So far NetShareEnum, NetSessionEnum, NetGroupEnum, NetGroupGetUsers, NetUserEnum, PrintQEnum, NetFileEnum cannot be called anonymously. SamOEMChangePassword and NetServerEnum can be called anonymously. All other functions can be called anonymously until it can be proven that they can't to avoid breaking anything.
* | Renamed policy handle field in object containers to avoid cut&paste bugs.Tim Potter2002-06-201-6/+6
| |
* | Added samr_open_domain() call.Tim Potter2002-06-201-19/+77
| |
* | Compile fix for new arguments to cli_full_connection()Tim Potter2002-06-201-9/+2
| |
* | Fixed compiler warning.Tim Potter2002-06-201-1/+1
| |
* | Fixed typo in debug.Tim Potter2002-06-191-1/+1
| |
* | when nmbd starts up it is possible that dhcp hasn't started the localAndrew Tridgell2002-06-191-4/+9
| | | | | | | | | | interfaces yet. Instead of giving up, nmbd will now wait for some interfaces to appear
* | more debug classess activatedSimo Sorce2002-06-1856-2/+163
| |
* | compile warngin fixes merged from 2.2Gerald Carter2002-06-178-25/+29
| |
* | Fixed typo in debug.Tim Potter2002-06-171-1/+1
| |
* | Cope with the requirement for constant initialisers on some unix C compilers.Andrew Bartlett2002-06-161-1/+1
| | | | | | | | Andrew Bartlett
* | Further updates to the service.c code. authorise_login() is now a bit simpilerAndrew Bartlett2002-06-162-6/+6
| | | | | | | | | | | | | | | | | | and we seem to have eliminated the segfault. Unfortunetly I'm still at a bit of a loss as to why it did segfault, but the patch is correct in any case. Andrew Bartlett
* | Two things: Check how many paramaters that the LDAP libs take for theAndrew Bartlett2002-06-164-94/+199
| | | | | | | | | | | | | | | | rebind proc (some give an extra paramter to pass a void* paramater) and some small changes for the SMB signing code to reset things when the signing starts, and to 'turn off' signing if the session setup failed. Andrew Bartlett
* | Fix up some of the SMB signing code:Andrew Bartlett2002-06-165-19/+47
| | | | | | | | | | | | | | | | | | | | | | | | | | The problem was that *all* packets were being signed, even packets before signing was set up. (This broke the session request). This fixes it to be an 'opt in' measure - that is, we only attempt to sign things after we have got a valid, non-guest session setup as per the CIFS spec. I've not tested this against an MS server, becouse my VMware is down, but at least it doesn't break the build farm any more. Andrew Bartlett
* | When adding popt to an application, you need to ensure it builds on non-poptAndrew Bartlett2002-06-151-1/+1
| | | | | | | | platforms :-)
* | Simplify this code further. Just substitute %H, and let the normal codeAndrew Bartlett2002-06-152-40/+3
| | | | | | | | | | | | paths handle the rest later. Andrew Bartlett
* | Unsused function since last commitAndrew Bartlett2002-06-151-34/+0
| |
* | Rework much of the service.c code:Andrew Bartlett2002-06-157-209/+273
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The aim of this execise is to give the 'security>=user' code a straight paper path. Security=share will sill call authorise_login(), but otherwise we avoid that mess. This allow *much* more accurate error code reporting, beocuse we don't start pretending that we can use the (nonexistant) password etc. Also in this patch is code to create the 'homes' share at session setup time (as we have done in the past - been broken recently) and to record this on the user's vuser struct for later reference. The changes here should also allow for much better use of %H (some more changes to come here). The service.c changes move a lot of code around, but are not as drastric as they look... (Also included is a fix to srv_srvsvc_nt.c where 'total_entries' not '*total_entries' was compared). This code is needs testing, but passes my basic tests. I expect we have lost some functionality, but the stuff I had expected to loose was already broken before I started. In particular, we don't 'fall back' to guest if the user cannot access a share (for security=user). If you want this kind of stuff then you really want security=share anyway. Andrew Bartlett
* | Update the netlogon code to better cope with trusted domains, where thingsAndrew Bartlett2002-06-151-10/+29
| | | | | | | | | | | | | | | | like the domain name and SID come from the remote domain, not the local one. These are filled out by the code from the previous commit (auth_util.c, the make_server_info_info3() fn) and read back here. Andrew Bartlett
* | Add the missing makefile from previous commitAndrew Bartlett2002-06-151-1/+1
| |
* | This patch does 2 things:Andrew Bartlett2002-06-154-96/+282
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It extends the 'server mutex' to conver security=server, becouse the connection race condition exists here too, and while people *should* use security=domain, some sites don't.... (This probably should be done in 2.2 as well). Also, start to actually extract and use the information that the remote server returns in the info3 struct. The server mutex code is now in a new file. Andrew Bartlett
* | Add another 'trivial' built in authentication module - this one is aAndrew Bartlett2002-06-151-0/+50
| | | | | | | | | | | | | | | | | | | | deveopers hack to always send a fixed challange, for the benifit of tutorials and packet sniffing etc. Enabling this module removes all security, so its a --enable-developer option. Andrew Bartlett
* | It appears that to match NT we should not use the 'samstrict' behaviour,Andrew Bartlett2002-06-151-3/+5
| | | | | | | | and that local accounts are perfectly fine.
* | Add back sys_getpwnam() and freinds to the system.c interface, but don'tAndrew Bartlett2002-06-154-5/+29
| | | | | | | | | | | | use the silly cache any more. Also add group functions and fix a few callers. Andrew Bartlett
* | Fix spelling typo.Jeremy Allison2002-06-142-13/+13
| | | | | | | | Jeremy.
* | Ok, now I can try my first client test...Jeremy Allison2002-06-142-8/+33
| | | | | | | | Jeremy.
* | More of SMB signing for client - not yet finished (should be harmless).Jeremy Allison2002-06-144-11/+45
| | | | | | | | Jeremy.
* | Merge of csc termination fix.Jeremy Allison2002-06-141-1/+2
| | | | | | | | Jeremy.
* | moved lp_list_* functions away from param/loadparm.c, put int lib/util_str.cSimo Sorce2002-06-1410-223/+225
| | | | | | | | | | and renamed to str_list_* as it is a better name. Elrond should be satisfied now :)
* | Add a touch of const to this - helps with some yet-to-be-commited changesAndrew Bartlett2002-06-141-3/+3
| |
* | Allow non unix accounts to be added to an ldap directory without NUA accountsAndrew Bartlett2002-06-141-0/+4
| | | | | | | | | | | | already. Andrew Bartlett
* | Patch from ctrlsoft to use the pdb_sethexpwd function in smbpasswd - insteadAndrew Bartlett2002-06-141-48/+7
| | | | | | | | | | | | | | | | | | of implementing it twice inline. This code is complex - but occasionally I get the feeling that people made it more complext than it really needed to be... Andrew Bartlett
* | It looks like we never tested the 'cleanup' code, so when I triggered itAndrew Bartlett2002-06-142-12/+20
| | | | | | | | | | | | (invalid passdb backends smb.conf entry) we picked up a few things :-). Andrew Bartlett
* | Some updates from ctrlsoft <jelmer@nl.linux.org> to return failure if *any* ofAndrew Bartlett2002-06-141-19/+20
| | | | | | | | | | | | the passdb backends fail to load (is this the right way? - I think so). Also, I've added some more comments, cleaned up some style etc.
* | Debug fixes from ctrlsoftAndrew Bartlett2002-06-141-2/+2
| |
* | Kill useless castAndrew Bartlett2002-06-141-2/+2
| |
* | Convenience function to allow a SID to be specified as a string.Andrew Bartlett2002-06-141-3/+46
| | | | | | | | | | | | (for use in passdb modules like pdb_xml or a new pdb_ldap that stores sids etc.) Andrew Bartlett
* | Patch from ctrlsoft to make the pluggable passdb subsystem use an lp_listAndrew Bartlett2002-06-146-46/+61
| | | | | | | | | | | | | | | | | | | | | | | | | | rather than a string when configuring mulitple backends. Also adjust some of the users of get_global_sam_sid() to cope with the fact that it just might not exist (uninitialised, can't access secrets.tdb). More places need conversion. Add some const and remove silly casts. Andrew Bartlett
generated by cgit (git 2.34.1) at 2025-09-27 23:41:08 +0000