| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
| |
| |
| | |
Initialise global_myname in py_samba_init() function.
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| | |
passdb interface change, now the passdb modules will be asked for SID not for rid, the modules have been updated with a passthrough function that calls the old getsampwrid() functions.
srv_samr_nt.c functions that made use of the pdb_getsampwrid funcion has been updated to use the SID one.
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
The problem was the NTLMv2 uses extra data in order to make reply/lookup
more difficult. That extra data includes the hostname, and the domain.
This matches Win2k (sort of) by sending this information.
Win2k connects with LMCompatibilityLevel=5 without a problem.
We can change the negotiation bits if we want, this should allow us to make
NTLMv2 the default for other clients as well.
Some of the extra #defines were found in the squid source.
Andrew Bartlett
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
unix and DOS strings.
This pushes all the 'have to uppercase, must be 14 chars' stuff behind the
the interface.
Andrew Bartlett
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Importantly:
The removal of the silly 'delete user script' behaviour when secuity=domain.
I have left the name the same - as it still does the (previously documented,
but not in smb.conf(5)) sane behaviour of deleting users on request.
When we decide what to do with the 'add user' functionality, we might
rename it.
Andrew Bartlett
|
| |
| |
| |
| |
| |
| | |
the whole record which could include things like photos's etc.
Andrew Bartlett
|
| |
| |
| |
| |
| |
| | |
structs.
Andrew Bartlett
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Tim, please check the prs_align() removed from sec_io_desc()
and make sure it doesn't break anything else. I know it is
right for the printing needs and I have tested some other
general things like viewing acls on directories, but I would
feel more comfortable if you would have a look as well.
jerry
|
| |
| |
| |
| |
| |
| |
| |
| | |
and secuirty=server.
I *love* automated testing...
Andrew Bartlett
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
- convert net to popt
- convert status to popt
- adapt examples/pdb/ to multiple passdb system
- add dynamic debug class example to examples/pdb/
and some reformatting to better match the samba coding style.
Andrew Bartlett
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| | |
didn't make any sense, and its was always just strlen(password) anyway.
This fixes it to be strlen(password)+1
Andrew Bartlett
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
that the passdb code now uses. Similarly, move the 'pluggable' stuff
over from passdb as well, allowing runtime loading of new authenticaion
modules.
(NOTE: The interfaces here can *and do* change - module writers are
not assured source-level compatibilty, and certainly not binary
compatibility).
|
| | |
|
| |
| |
| |
| | |
pointer.
|
| |
| |
| |
| | |
Jeremy.
|
| |
| |
| |
| |
| | |
my removal of the goto. Oops !
Jeremy.
|
| | |
|
| |
| |
| |
| |
| |
| | |
BOOL const secrets_init(...)
Broke AIX build.
|
| |
| |
| |
| |
| | |
rpc and rap too. Anyone know what key I'm supposed to use to encrypt
it for the rap one?
|
| |
| |
| |
| |
| |
| |
| |
| | |
Wasn't this what got us some of the bugs with big-endien smbpasswd -j FOO -U ?
Anyway, it deserves to die.
Andrew Bartlett
|
| |
| |
| |
| | |
Make it static (till sombody needs its...)
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
this:
More code cleanup - this lot a bit more dodgy than the last:
The aim is to trim pwd_cache down to size. Its overly complex, and a
pain to deal with. With a header comment like this:
'obfusticaion is planned'
I think it deserved to die (at least partly).
This was being done to allow 'cli_establish_connection' to die - its
functionality has been replaced by cli_full_connection(), which does
not duplicate code everywhere for creating names etc.
This also removes the little 'init' fucntions for the various pipes,
becouse they were only used in one place, and even then it was dodgy.
(I've reworked smbcacls not to use anonymous connections any more, as
this will (should) fail with a 'restrict anonymous' PDC).
This allowed me to remove cli_pipe_util.c, which was calling
cli_establish_connection.
tpot: I'm not sure what direction you were going with the client stuff,
and you may well have been wanting the init functions. If thats the case,
give me a yell and I'll reimplement them against cli_full_connection.
Andrew Bartlett
|
| | |
|
| | |
|
| |
| |
| |
| | |
Jeremy.
|
| | |
|
| |
| |
| |
| | |
Jeremy.
|
| |
| |
| |
| | |
Jeremy.
|
| |
| |
| |
| |
| |
| | |
it, so we may as well reduce the complexity.
Andrew Bartlett
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
These might be reimplmented as simple pass-through functions, but all users
really should be doing 'getpwnam_alloc' or 'getpwuid_alloc' to ensure that
there are not shared static buffers.
I don't beleive we actually need a getpw*() cache inside samba - if we do
then I think we should look at our code design first.
(some of these changes are for platforms I don't have access to, but
they look sane)
Andrew Bartlett
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Make some code static, add some const to the PAM code, and make the plaintext
password code actually function - particulary without the requirement to
modify the 'struct passwd' (which it assumed was made up of fstrings)
This kills some particularly ugly code in lib/util_pw.c
Andrew Bartlett
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
the DATA_BLOB code into its own file.
It would be nice to go over some of the other util.c functions, and check
that we still use them all, and that we use them in more than one place.
Andrew Bartlett
|
| | |
|
| |
| |
| |
| |
| |
| |
| | |
from 2.2 format) and LDAP rebind support (untested, I don't have a setup
to match).
Andrew Bartlett
|
| |
| |
| |
| |
| | |
while deleting a record. This leaves us with a non-free record on the
free list.
|
| |
| |
| |
| | |
Jeremy.
|
| |
| |
| |
| | |
licensed under the GPL.
|
| |
| |
| |
| |
| |
| | |
condition, as we look for the entry before locking the chain - thus
someone else could have legitimately deleted it.
Jeremy.
|
| |
| |
| |
| |
| |
| |
| |
| | |
another smbd and an incoming SIGUSR1 message arrived we'd break out of
the wait early - as we have to use sys_select() to wait for an oplock
response message, not sys_select_intr() (which ignores EINTR errors)
because of the real time signal kernel interface.
Jeremy.
|
| | |
|
| | |
|
| | |
|
| | |
|