summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2007-10-10r1661: Changed the password history format so that each history entryJeremy Allison5-22/+74
consists of a 16 byte salt, followed by the 16 byte MD5 hash of the concatination of the salt plus the NThash of the historical password. Allows these to be exposed in LDAP without security issues. Jeremy. (This used to be commit 82e4036aaa2d283534a5bd8149857320fcf0d0dc)
2007-10-10r1658: Expand aliases for getusersids as well.Volker Lendecke1-0/+56
Volker (This used to be commit d5060c30e38b46b322615f0e0b465fbf73ed5245)
2007-10-10r1656: Patch from James Peach:Vance Lankhaar1-0/+2
> This patch is (probably) needed for all systems that don't have a > C99/UNIX98 compliant vsnprintf by default. The builtin sm_*printf > were no being called, causing things like talloc_init to fail, with > predictable results. The should fix 6 (solaris/hpux/irix) builds on the build farm. Vance (This used to be commit 1a33999cf073ee18f846678357832ec7866bb467)
2007-10-10r1638: Dont always uppercase "afs username map"Volker Lendecke1-1/+1
(This used to be commit e9263a5204c42e8f3f1079cd535ce6fc091f3d6a)
2007-10-10r1616: Fix user unmount of shares mount with suid mount.cifsSteve French1-9/+33
(This used to be commit 2bd28007159a3ce4a1b8737218e7b75bc2286682)
2007-10-10r1613: Patch from Tom Shaw <tomisfaraway@gmail.com> to useJeremy Allison1-4/+4
winbindd_fill_pwent consistently. Jeremy. (This used to be commit 8d355b9b9ddd6edf15c70977f5a719b549a56378)
2007-10-10r1612: Fix bug #1571 found by Guenter Kukkukk <guenter.kukkukk@kukkukk.com>Andrew Bartlett1-2/+5
(Botched LANMAN2 session setup code) Andrew Bartlett (This used to be commit 3baa4ef6c58eb13bec1a8ddb1561a504f4a16107)
2007-10-10r1610: Patch from Richard Renard <rrenard@idealx.com>. Ensure weJeremy Allison1-10/+4
save the password as it is being changed into the password history list. Jeremy. (This used to be commit 4fd619d7e16b5f759e6dc8360ad192457b3c90b9)
2007-10-10r1608: Fix from Nick THOMPSON <nickthompson@agere.com> to protect smbdJeremy Allison1-3/+8
against broken filesystems which return zero blocksize. Jeremy. (This used to be commit 23d157a0bea16366f0361ab68193b479ed844291)
2007-10-10r1599: Use -Bsymbolic when creating shared libraries to avoid conflicts withTim Potter1-1/+1
identical symbols in the global namespace when loading libnss_wins.so. Bugzilla #1360. (This used to be commit 2063b8d9bcf0b2ad9f09d71b5c74ad3db070c6a3)
2007-10-10r1590: Small fixes from Günther DeschnerVolker Lendecke1-7/+3
(This used to be commit 2d68fdf06b3b027227ab77372b001b13fd2b494d)
2007-10-10r1588: This is one of the more pathetic patches I ever checked in. Many hours ofVolker Lendecke2-96/+73
coding have passed, but I could not find a way to get the OpenLDAP libraries to reliably time out on any of the queries we make, *and* get correct error returns. No, async calls and ldap_result does NOT work, or I was simply too stupid to correctly interpret the OpenLDAP manpage and source. We can not allow to hang indefinitely in an ldap query, especially not for winbindd. "ldap timeout" now specifies the overall timeout for the complete operation, that's why I increased that to 15 seconds. Volker (This used to be commit 269f0750872e5f8757e0a9667e007a0410319fcd)
2007-10-10r1583: Patch by Fabien Chevalier <fabien.chevalier@supelec.fr>Andrew Bartlett1-1/+1
We may not have any interfaces up at all, so initialise the return variable. Fixes Debian bug #252591 Andrew Bartlett (This used to be commit 35aabae9d9bf66ef2c8eb4e07a850c606d8236d2)
2007-10-10r1582: On failure, print the length of the right variable.Andrew Bartlett1-1/+1
Andrew Bartlett (This used to be commit 5bd6abb54e12aee2031d48bc5b240bb4f127bf5a)
2007-10-10r1581: 'NULL' NTLMSSP is both a pain to get right, and compleatly and utterlyAndrew Bartlett1-0/+2
pointless. With a well-known session key, we may as well put the password change directly on the wire, with it's own 'crypted with old password' as the protection. This should fix some 'long password change' issues, against Samba in particular. Andrew Bartlett (This used to be commit 554a9132872187077a9c00abb18b9d809c59b7f1)
2007-10-10r1572: setting version to 3.0.7pre1; I will pull back changes into 3.0.6rc2 ↵Gerald Carter1-2/+2
manually (This used to be commit 11c6ca1c3c9d3b400f4cebcbf232899bcf4b613f)
2007-10-10r1570: merging changes from 3.0.5Gerald Carter7-22/+28
(This used to be commit 430cf63b9148441bce42bfb15a8045de5da108f4)
2007-10-10r1562: Make winbind for -S (sid->uid) and -Y (sid->gid) check whether the sidVolker Lendecke1-0/+41
requested actually is of type asked for. I've come across more than one installation where a group sid had ended up as a uid in idmap and vice versa. This just closes one possible for this misconfiguration, people are actually using wbinfo. Volker (This used to be commit acfbd34025c2fde3d6a3e582c120c2b9de8ed39b)
2007-10-10r1561: iconv detection fix from James Peach <jpeach@sgi.com>Gerald Carter1-13/+19
(This used to be commit 62bd60e4458f6e9bdaab7b5c81b040a0b3310f30)
2007-10-10r1560: Not that anybody uses this stuff (yet...), but at least get it ↵Volker Lendecke1-1/+1
correct :-) When sending a mailslot datagram, get the packet length correction correct. Volker (This used to be commit 530e7f09aea22f5782af0c6b333e15e01660b34a)
2007-10-10r1557: Add sigchld handling to winbindd. Next step is to have the child ↵Richard Sharpe1-0/+13
restarted if need be. We should also make sure the main line know we no longer have a child. (This used to be commit e3dc7934b50c8578d70fc01688a07bd369a7cf30)
2007-10-10r1553: Good patch from Guenther Deschner <gd@sernet.de> to display share ACLJeremy Allison2-0/+59
entries from rpcclient. Jeremy. (This used to be commit bd64f0c08143545a8613688402f769a713227557)
2007-10-10r1539: If a account was locked out by an admin (and has a bad password count ↵Jeremy Allison1-6/+19
of zero) leave it locked out until an admin unlocks it (but log a message). Jeremy. (This used to be commit 14bd2a9ffc30d55d9737b4819797db8c38b46c66)
2007-10-10r1537: Fix to stop printing accounts from resetting the bas passwordJeremy Allison1-15/+10
and account lockout flags. This is set when an account is updated only from smbd or pdbedit. Bug found by "Dunn, Drew A." <Drew.Dunn@jhuapl.edu>. Jeremy. (This used to be commit bb3a0fa61f5fb74b8fe421260473c07847baeb2b)
2007-10-10r1532: Remove unused structure elementVolker Lendecke1-1/+0
(This used to be commit 128951cfe43e364970ec5760230a6450f54ae86d)
2007-10-10r1531: smbd/tdbutil.c isn't used anymore. Bug 1443 is suspected to be a tdbVolker Lendecke2-86/+1
corruption problem, and smbd_log_tdb happily destoyed the evidence .... Volker (This used to be commit 359b9dcffeb66146c5405f8022d5d4e4a833aa51)
2007-10-10r1506: Fix inspired by patches from Michael Collin Nielsen ↵Jeremy Allison1-11/+15
<michael@hum.aau.dk> - ensure home directory service number is correctly reused. Jeremy. (This used to be commit 9d6347be8580d092cda0357b5d1a81fc6876ac1f)
2007-10-10r1504: Remove insane use of "user password" on the COMMAND LINE !Jeremy Allison1-25/+6
in smbpasswd. Use -s if you want to script this. Jeremy. (This used to be commit a3589a18b6898e2b51570112c5acb2826ef6ba4a)
2007-10-10r1501: One more check for option != 0.Jeremy Allison1-1/+5
Jeremy. (This used to be commit a6d0452a2d71201309a5abbe3ebc161ae75b17b8)
2007-10-10r1500: BUG 1516: manually declare ldap_open_with_timeout() to workaround ↵Gerald Carter1-0/+9
compiler errors on IRIX (This used to be commit b47971174da9ef882e7941e53033e23c679db9a2)
2007-10-10r1492: Rework our random number generation system.Andrew Bartlett19-71/+82
On systems with /dev/urandom, this avoids a change to secrets.tdb for every fork(). For other systems, we now only re-seed after a fork, and on startup. No need to do it per-operation. This removes the 'need_reseed' parameter from generate_random_buffer(). Andrew Bartlett (This used to be commit 36741d3cf53a7bd17d361251f2bb50851cdb035f)
2007-10-10r1487: Remove unused parameter for the client-side signing functions.Andrew Bartlett3-4/+4
Andrew Bartlett (This used to be commit 6d594d5bb119b6bc3f4c7699752666ac24d04745)
2007-10-10r1484: BUG 1520: work around bug in xp sp2 rc2 where the client sends a ↵Gerald Carter1-0/+12
fnpcn() request without previously sending a ffpcn(). Return what win2k sp4 does (This used to be commit 3f73d19807cbcbae8e5cfd96fd5c9b4de8c388a3)
2007-10-10r1478: Useful patch from Tom Alsberg <alsbergt@cs.huji.ac.il>, to export a ↵Simo Sorce1-8/+24
single user from a backend. (This used to be commit 083740e74e0790f863c065a20e28f553fdc7d5bd)
2007-10-10r1472: Make mknod work again for the CIFS client. Still needs someJeremy Allison2-11/+42
client changes. With this, storing home directories on a Samba share that require unix domain socket entries should work. Jeremy. (This used to be commit da943b5b72090e23c1cf67c3449b8e33344643f8)
2007-10-10r1468: Dump the parametrical options only once at the end of the service.Simo Sorce1-7/+7
Fixes Testparm producing huge output and swat creating monster smb.conf files. (This used to be commit 9c41adb98b8eef344203d80ef38cf96a27853c7f)
2007-10-10r1444: Another attempt to fulfil the 100% promise. There might be two dots ↵Volker Lendecke1-1/+1
at the end... Volker (This used to be commit 65518960e54f98e750c7e044004ce72a7503760b)
2007-10-10r1430: Although prepared for only one remote backend, make the 'idmap backend'Volker Lendecke2-6/+7
parameter a list instead of a string. This makes idmap backend = ldap:"ldap://localhost/ ldap://fallback/" possible. Volker (This used to be commit ea718347937ec0e5640b29e0e9edf6eda2b45e34)
2007-10-10r1428: Remove *completly bogus* memset. (No doubt my bug, too...).Andrew Bartlett1-2/+0
This memset could well have clobbered bits of the stack, because session_key changed from char session_key[16]; to DATA_BLOB session_key Andrew Bartlett (This used to be commit 54248a405c9459f93f4200ebb0dc71748ae2fc83)
2007-10-10r1425: Fix memleak in interactive mode. Reformat..Jeremy Allison1-312/+292
Jeremy. (This used to be commit 5d720e52d749489726c2c671c6cac2d706f750c8)
2007-10-10r1415: One more memory leak, found by valgrind..Jeremy Allison1-0/+3
Jeremy. (This used to be commit 8cfaf575e5161e8307b0a53bd44e84c633e85aed)
2007-10-10r1414: Memory leak fixes found by valgrind whilst checking the password ↵Jeremy Allison4-19/+45
history code. Error code paths were not freeing up some memory. Jeremy. (This used to be commit 7c4666e56c2c281e023c6483459cb9e8d4787d36)
2007-10-10r1412: Fix password history list in tdbsam. Fix some memory leaks. AddJeremy Allison6-69/+102
my (C) to a header file that was at least 50% mine :-). Jeremy. (This used to be commit 8ee6060977ec8e65082f3ad09e1e1ccf5b4672ed)
2007-10-10r1410: fix another bug caused by the docs target directories changeGerald Carter1-1/+1
(This used to be commit e13d15994d93b0b17ea4f547cc6e279c3509a7d0)
2007-10-10r1407: revert change that broke the build on systems w/o krb5 filesGerald Carter2-2/+2
(This used to be commit 89a11b5d7c0939c9344115ef509cbb0567d7524a)
2007-10-10r1399: applying heimdal krb5 fixes from Guenther and fixing compile warnings ↵Gerald Carter3-7/+9
in libadskerberos_keyatb.c (This used to be commit 837f56ec8bc171497fb84d332002776313c26305)
2007-10-10r1396: Give the build farm a chance to be clean before 3.0.5. We don't acceptVolker Lendecke1-0/+4
filenames ending in a dot. Volker (This used to be commit f17cb54a6f97b2ce0084d27ec219b4c3fe05c1fa)
2007-10-10r1394: Const fix.Jeremy Allison1-2/+2
Jeremy. (This used to be commit 9ac4945012e0bd54519b8c81d4c36e88cea28fce)
2007-10-10r1392: Added password history code to tdbsam backend. Not yet tested (ie. mayJeremy Allison3-387/+388
core dump) but compiles and links correctly. I will run the full set of tests on the ldap sam and the tdb sam for password history tomorrow. Jeremy. (This used to be commit ac846420d0ef2c60d2dc71319b24401c73699249)
2007-10-10r1390: Improve description of attribute.Jeremy Allison1-1/+1
Jeremy. (This used to be commit ff7236a5f20d16069b31383105604a694236ec65)