summaryrefslogtreecommitdiffstats
path: root/source
Commit message (Collapse)AuthorAgeFilesLines
...
* Further work on NTLMSSP-based SMB signing. Current status is that I cannnotAndrew Bartlett2003-03-105-48/+447
| | | | | | | | | | | | | | | | get Win2k to send a valid signiture in it's session setup reply - which it will give to win2k clients. So, I need to look at becoming 'more like MS', but for now I'll get this code into the tree. It's actually based on the TNG cli_pipe_ntlmssp.c, as it was slightly easier to understand than our own (but only the utility functions remain in any way intact...). This includes the mysical 'NTLM2' code - I have no idea if it actually works. (I couldn't get TNG to use it for its pipes either). Andrew Bartlett
* Clobber strings with 0xf1f1f1f1 before writing to them to check bufferMartin Pool2003-03-101-8/+33
| | | | | | | | | | | | | lengths are correct. Attempts to pstrcpy into an fstring or allocated string should fail in developer builds. This builds on abartlet's earlier overflow probe for safe_strcpy, but by clobbering the whole string with a nonzero value is more likely to find overflows on the stack. This is only used in -DDEVELOPER mode. Reviewed by abartlet, tpot.
* Include valgrind.h if present on the system.Martin Pool2003-03-101-0/+5
|
* Check for valgrind.hMartin Pool2003-03-101-0/+1
|
* Try not to clobber the session request.Andrew Bartlett2003-03-091-3/+15
|
* Change the way we sign SMB packets, to a function pointer interface.Andrew Bartlett2003-03-096-153/+346
| | | | | | | | The intention is to allow for NTLMSSP and kerberos signing of packets, but for now it's just what I call 'simple' signing. (aka SMB signing per the SNIA spec) Andrew Bartlett
* Don't fault on error returns (ptr == 0) for this LSA query.Andrew Bartlett2003-03-091-10/+13
| | | | | | (for example, query to non-dc) Andrew Bartlett
* This is C, not C++Andrew Bartlett2003-03-081-4/+4
|
* more on idmapSimo Sorce2003-03-083-78/+207
| | | | | | | | two layers structure with - local tdb cache - remote idmap repository compiles
* Testparm needs the extra arg to set_local_machine_name() too.Andrew Bartlett2003-03-081-1/+1
|
* Make sure that the 'remote' machine name can only be set once. For some weirdAndrew Bartlett2003-03-088-19/+39
| | | | | | | | | | | | reason, during a Win2003 installation, when you select 'domain join' it sends one machine name in the name exchange, and litraly 'machinename' during the NTLMSSP login. Also fix up winbindd's logfile handling, so that it matches smbd and nmbd. (This helps me, by seperating the logs by pid). Andrew Bartlett
* Make it clear that this is a fstrcpy().Andrew Bartlett2003-03-081-2/+2
|
* Fix typo in earlier fix, caught by Ranjit @ HP.Jeremy Allison2003-03-081-1/+1
| | | | Jeremy.
* some more codeSimo Sorce2003-03-084-0/+474
| | | | (not tested yet)
* initial work for the new idmpa interfaceSimo Sorce2003-03-072-0/+194
|
* Use ERROR_NT, not ERROR_DOS as Andrew Bartlett pointed out.Jeremy Allison2003-03-073-3/+3
| | | | Jeremy.
* Add early prototype of cifs mount helper for LinuxSteve French2003-03-071-0/+389
|
* Missed parentheses around complex logic.Jeremy Allison2003-03-071-1/+2
| | | | Jeremy.
* Patch from Michael Steffens. In his own words :Jeremy Allison2003-03-071-78/+199
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ------------------------------------------------------------------------- I think there are basically two problem: 1. Windows clients do not always send ACEs for SMB_ACL_USER_OBJ, SMB_ACL_GROUP_OBJ, and SMB_ACL_OTHER. The function ensure_canon_entry_valid() is prepared for that, but tries to "guess" values from group or other permissions, respectively, otherwise falling back to minimum r-- for the owner. Even if the owner had full permissions before setting ACL. This is the problem with W2k clients. 2. Function set_nt_acl() always chowns *before* attempting to set POSIX ACLs. This is ok in a take-ownership situation, but must fail if the file is to be given away. This is the problem with XP clients, trying to transfer ownership of the original file to the temp file. The problem with NT4 clients (no ACEs are transferred to the temp file, thus are lost after moving the temp file to the original name) is a client problem. It simply doesn't attempt to. I have played around with that using posic_acls.c from 3.0 merged into 2.2. As a result I can now present two patches, one for each branch. They basically modify: 1. Interpret missing SMB_ACL_USER_OBJ, SMB_ACL_GROUP_OBJ, or SMB_ACL_OTHER as "preserve current value" instead of attempting to build one ourself. The original code is still in, but only as fallback in case current values can't be retrieved. 2. Rearrange set_nt_acl() such that chown is only done before setting ACLs if there is either no change of owning user, or change of owning user is towards the current user. Otherwise chown is done after setting ACLs. It now seems to produce reasonable results. (Well, as far as it can. If NT4 doesn't even try to transfer ACEs, only deliberate use of named default ACEs and/or "force group" or the crystal ball can help :) ------------------------------------------------------------------------- Jeremy.
* Some progress towards gums and tdbsam2Simo Sorce2003-03-0710-286/+1166
| | | | genparser works fine, and it is a marvelous tool to store objects in tdb :)
* Limit the number of SIDs that may be looked up, in line with existing codeAndrew Bartlett2003-03-071-0/+5
| | | | for name->sid.
* safe_strcpy() -> fstrcpy() fix, and a cleanup to how rpcclient calls theAndrew Bartlett2003-03-072-9/+4
| | | | IP address resolving code.
* Fix noticed by Corny.Bondad@hp.com. Ensure we free up memory on error exit.Jeremy Allison2003-03-071-0/+3
| | | | Jeremy.
* Found at Connectathon, .NET RC1 arranges trans/trans2/nttrans parametersJeremy Allison2003-03-073-69/+227
| | | | | differently to W2K, cope with this. Jeremy.
* add #define for the max device name length in a DEVICEMODEGerald Carter2003-03-063-2/+4
|
* Make smbtorture use the same cli_full_connection() framework as the rest ofAndrew Bartlett2003-03-064-865/+842
| | | | | | Samba. This fixes things like not doing *SMBSERVER etc. Andrew Bartlett
* more off-by-one safe_strcpy()Andrew Bartlett2003-03-061-3/+3
|
* More safe_strcpy() off-by-one bug fixes. (mostly moves to pstrcpy()/fstrcpy())Andrew Bartlett2003-03-064-30/+30
| | | | Andrew Bartlett
* FIXME about crash on failure case.Martin Pool2003-03-061-2/+5
|
* Add *SMBSERVER fallback code to smbtorture ...Richard Sharpe2003-03-051-3/+17
|
* Add code to allow us to specify the port to connect on when performingRichard Sharpe2003-03-051-6/+14
| | | | a test ...
* Use new configure test to turn on this automated test for correct stringAndrew Bartlett2003-03-051-1/+1
| | | | | | function usage. Andrew Bartlett
* A couple more fixes for fstrcpy() into a malloced region. In this case it'sAndrew Bartlett2003-03-052-5/+5
| | | | | | | all perfectly legit - the region is an fstring in length, but might not always be, and it is the last peice of code to fail my automated test. Andrew Bartlett
* Add a test for a useful property of the compiler - we can get link-timeAndrew Bartlett2003-03-051-0/+18
| | | | | | failures for some compile-time properties this way. Andrew Bartlett
* also ignore the autom4te-2.53.cacheAndrew Bartlett2003-03-051-1/+1
|
* This file has not been maintained for a while - if we really want thisAndrew Bartlett2003-03-051-3/+0
| | | | | | | behaviour we should seperate -g from --enable-developer, and allow developers to also select --enable-debug if they want. Andrew Bartlett
* lp_string: Add note about dodgy StrnCpy use.Martin Pool2003-03-051-0/+3
|
* Use PRINTER_ALL_ACCESS instead of MAXIMUM_ALLOWED_ACCESS in setprinterTim Potter2003-03-051-1/+1
| | | | command. From Ronan Waide <waider@waider.ie>.
* More const fixes.Jeremy Allison2003-03-052-3/+3
| | | | Jeremy.
* Writable string const fixes.Jeremy Allison2003-03-053-8/+14
| | | | Jeremy.
* Connectathon fix. W2K -> W2K over port 445 doing a tconX does the fullJeremy Allison2003-03-051-7/+2
| | | | | | \\server\share syntax, not just a "share" tconX syntax. This broke interop with a vendor. Jeremy.
* Fix another 'off by one' bug with safe_strcpy(). It is unclear if the intentAndrew Bartlett2003-03-041-2/+2
| | | | | | | | | was to limit the string to 31 or 32 characters (excluding the null term), so I've assumed for now that 32 is fine, as this matches current behaviour (well, current behaviour would crash, but anyway...) Jerry: Can you look at this for me? Andrew Bartlett
* Another pstrcpy() into malloc()ed buffer fix.Andrew Bartlett2003-03-031-2/+2
| | | | Andrew Bartlett
* Const warning fixes.Jeremy Allison2003-03-031-2/+2
| | | | Jeremy.
* dlsym takes a const char *.Jeremy Allison2003-03-031-1/+1
| | | | Jeremy.
* Fix "might be used uninitialised" warnings.Jeremy Allison2003-03-031-2/+2
| | | | Jeremy.
* Do my janitorial duties to encourage others to do so.Richard Sharpe2003-03-032-7/+8
| | | | Fix lingering large offset problems in smbtar etc.
* * always report ourselves as a Windows 2000 print server (evenGerald Carter2003-03-031-8/+29
| | | | | without ADS support) * add "MinorVersion" print server data key and comment on "OSVersion"
* * CR1868: only send a change notify message if we have somethingGerald Carter2003-03-032-2/+14
| | | | | | | | | that changed that the client is monitoring. * couple of comments abnout how we need to validate driver names on SetPrinter() and AddPrinter() * up the debug level on some overly verbose dev mode parsing messages
* Try the PASSWD environment variable if we don't have one from the command line.Andrew Bartlett2003-03-031-0/+4
|
generated by cgit (git 2.34.1) at 2025-09-26 21:29:50 +0000