summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2003-05-09Cleanups. My NTLMv2 changes also changed the preference from using an implicitAndrew Bartlett1-42/+42
structure-memcpy for DATA_BLOB parameters to using a pointer to that DATA_BLOB. auth_sam calls some of these functions, so I've cleaned it all up to use this format now. Also clean up some debug statements to make them easier to read. Andrew Bartlett (This used to be commit 0c355c274a6ac084e4bf15a15613dfc007d6c5fc)
2003-05-09Finally get NTLMv2 working on the client!Andrew Bartlett4-119/+131
With big thanks to tpot for the ethereal disector, and for the base code behind this, we now fully support NTLMv2 as a client. In particular, we support it with direct domain logons (tested with ntlm_auth --diagnostics), with 'old style' session setups, and with NTLMSSP. In fact, for NTLMSSP we recycle one of the parts of the server's reply directly... (we might need to parse for unicode issues later). In particular, a Win2k domain controller now supplies us with a session key for this password, which means that doman joins, and non-spnego SMB signing are now supported with NTLMv2! Andrew Bartlett (This used to be commit 9f6a26769d345d319ec167cd0e82a45e1207ed81)
2003-05-09Fix bug #4 for net rap. Allow more than 50 chars for long form listings of ↵Jim McDonough1-2/+2
users and groups. (This used to be commit 27ca9bde6ba1a21326d89ab1dab52f7053fff9a4)
2003-05-09Fix bug #4 for net rap. Allow more than 50 chars for long form listings of ↵Jim McDonough1-2/+2
users and groups. (This used to be commit dcc6d9e76c737400aaffdd4f261fd0f191aaeea8)
2003-05-09Fix comment - we now have 5 types of error...Andrew Bartlett1-1/+1
(This used to be commit 372a574a73b86855cf6efc18349e5ba24067d690)
2003-05-09Make sure we always have some client data, not just the hash. An NTLMv2 orAndrew Bartlett1-2/+3
LMv2 response less than 24 bytes is just silly. Andrew Bartlett (This used to be commit b4ecdb2e582376d2713f81e8e32a668014905d70)
2003-05-09Elsewhere, we use a #define for this environment variable name, so do theAndrew Bartlett1-2/+2
same here. Andrew Bartlett (This used to be commit a4556786d28724309321a02afbf5005158440258)
2003-05-09When checking if a SID is in a domain, make sure that indeed the user RID isAndrew Bartlett1-0/+3
one element longer than the domain sid. Andrew Bartlett (This used to be commit c61e5e38776d2de53d120b592a6685158e79ebb8)
2003-05-09Sync up to head ...Richard Sharpe1-34/+100
(This used to be commit 045210e129e6e0aef8f847e7ed8714d0d9974e7f)
2003-05-09Some more static definitions ...Richard Sharpe1-0/+16
(This used to be commit 05d7850302d4369c4f8001c923217f8912261e7d)
2003-05-09Add some static ...Richard Sharpe1-34/+84
(This used to be commit 5368f10eabbca09eee1e2777e8cb2fcb7f92fc1d)
2003-05-09More edits. Hackety Hack.John Terpstra2-32/+298
(This used to be commit 6829762e3d71bd934b834dc2f09cc136758d04e0)
2003-05-09More edits, hackety hack.John Terpstra2-32/+298
(This used to be commit 044489f218fa90df3a4838980b060738d6dcbffc)
2003-05-09Sync to the changes in head ...Richard Sharpe1-1/+1
(This used to be commit 7f76eac5a0f93107d990b0fde651838c38970092)
2003-05-09Some more fixes for syntax problems on AIX etc ...Richard Sharpe1-2/+2
(This used to be commit 20756925486b407fbb2cf06d776ad2ce19b00c74)
2003-05-09Added some more diagnostic tests to check out a theory that having either hashTim Potter1-12/+174
- auth with ntlmv2 and lmv2 but deliberately break the ntlmv2 hash - auth with ntlmv2 and lmv2 but deliberately break the lmv2 hash - auth with ntlm and lm but deliberately break the ntlm hash - auth with ntlm and lm but deliberately break the lm hash My theory is that the NTLM or NTLMv2 field must be correct and if it is, it doesn't matter what the value of the LM or LMv2 field is. Fixed cosmetic test name display bug. (This used to be commit 5dcde9451bd0d6a7462b77cf5ed137bfd691adaa)
2003-05-09Fix up a bunch of problems in editreg.cRichard Sharpe1-16/+16
Now the build farm will no doubt find more. (This used to be commit e91e648c9b0841fbffbc8f39e71abade0996a1e7)
2003-05-09Fix up a bunch of compiler warnings ...Richard Sharpe1-13/+13
(This used to be commit cd1182ba75fbfa6b17964a3fefba2c2c0292cfb7)
2003-05-09Fix some compiler warnings about const etc ...Richard Sharpe2-6/+5
(This used to be commit edc51dbc9ce319c612e2ff9434ca5a7521ba016f)
2003-05-09Fix nasty bug pointed out by samba-technical poster. If name is mangledJeremy Allison1-1/+12
then we weren't always correctly detecting that it had a valid stat struct and so might now return a 'file existed'. Finally realized this when installing the W2K resource kit as a test case. Jeremy. (This used to be commit a0688316ce0a9bad0b24cbb495f6e0a112227b50)
2003-05-09Fix nasty bug pointed out by samba-technical poster. If name is mangledJeremy Allison1-1/+12
then we weren't always correctly detecting that it had a valid stat struct and so might now return a 'file existed'. Finally realized this when installing the W2K resource kit as a test case. Jeremy. (This used to be commit d48069ccd8351e4bff097a7f7500c738870a413d)
2003-05-08add new %a stringsGerald Carter1-3/+3
(This used to be commit b13046d95958995d9d05be977b8874df17fedb9b)
2003-05-08adding warning about case sensitive parameterGerald Carter1-3/+5
(This used to be commit 11bc14736df6826fb1619c04da4792c27c05d06b)
2003-05-08fix bug #47; revert registration of workgroup<1b> to 2.2 behaviorGerald Carter1-1/+1
(This used to be commit 26824f572d29bebd3791bad6f6690b35984705cd)
2003-05-08fix bug #47; revert registration of workgroup<1b> to 2.2 behaviorGerald Carter1-1/+1
(This used to be commit 016f6b4e19c2b8e4f5e1d010cc428ca194650140)
2003-05-08fixed bug #75; add check for non-zero destlenGerald Carter1-1/+1
(This used to be commit bfcec106d00355d32eb40dde99ddd5d5bed4cedb)
2003-05-08fixed bug #75; add check for non-zero destlenGerald Carter1-1/+1
(This used to be commit 83bb84f13121267992e78f2d005257932c711f23)
2003-05-08Hopefully re-enable building heimdal. It needs -lresolv included in LIBSJim McDonough1-0/+1
to link during configure checks. (This used to be commit 7af282e7ff9c2cccfab97130dc66515a4852c25f)
2003-05-08Revert a patch that somehow slipped in...Volker Lendecke1-2/+2
Volker (This used to be commit 6cde3d4d655bbe1d81e68ec2ec7a23669ac82120)
2003-05-08This puts real netlogon connection caching to winbind. This becomesVolker Lendecke10-123/+186
important once we start doing schannel, as there would be a lot more roundtrips for the second PIPE open and bind. With this patch logging in to a member server is a matter of two (three if you count the ack...) packets between us and the DC. Volker (This used to be commit 5b3cb7725a974629d0bd8b707bc2940c36b8745e)
2003-05-08Another set of updates.John Terpstra6-303/+697
(This used to be commit 5fc92d4596956ad7a2f099276fb529d0ba28d10b)
2003-05-08Another set of updates to the docs.John Terpstra6-303/+697
(This used to be commit 9abe3b23836ae75bd31fd2af4c7d82f34c27f52a)
2003-05-08This puts back wins.dat into nmbd for easy editing. It leaves most ofVolker Lendecke1-194/+222
the other infrastructure with name owners etc in place. If anybody is really going to tackle winsrepld, it will probably not be hard to put the additional info back. Volker (This used to be commit eb82daa84a5339f28ebf431ee1044b7e1e4a4300)
2003-05-08Another attempt at undoing my bogus patch 1.55.2.19Tim Potter1-0/+2
(This used to be commit 05a684b3be1525aad3589ded9e59c3f012b5ef20)
2003-05-07Always initialise this - it helps callers who use this in a loop...Andrew Bartlett1-0/+2
Andrew Bartlett (This used to be commit 97bc047434284527f25e130a72981da704ed1212)
2003-05-07Fix the spinning bug for 'net rpc user' as well - there are more errors inAndrew Bartlett1-4/+4
this world than 'status more entires'... Also move all the cases to 'NT_STATUS_EQUAL()' to test it. Andrew Bartlett (This used to be commit b4645bf0661dadcd077b21bb6f6452ed8b2eb726)
2003-05-07SMB_QUERY_FILE_ALT_NAME_INFO and SMB_FILE_ALTERNATE_NAME_INFORMATIONJeremy Allison1-9/+1
are identical - noticed by "Dr. Tilo Levante" <tilo@levante.de>. Jeremy. (This used to be commit a635b6406ab091b4207b148d7a25099205008567)
2003-05-07SMB_QUERY_FILE_ALT_NAME_INFO and SMB_FILE_ALTERNATE_NAME_INFORMATIONJeremy Allison1-9/+1
are identical - noticed by "Dr. Tilo Levante" <tilo@levante.de>. Jeremy. (This used to be commit f6d7c279bc8354202f2a9b39fec4a4c8ace368a3)
2003-05-07Fix irritating typo - non arg functions should be fn(void).Jeremy Allison1-1/+1
Jeremy. (This used to be commit 395dfd196cf4bcd432a4895d3dd09fefd46cd6d8)
2003-05-07%f -> %p (reported by Kurt Pfeifle <kpfeifle@danka.de>Jelmer Vernooij1-1/+1
(This used to be commit 28a6e8a6947b54169ff484a7255e601dcc7899d7)
2003-05-07Make fchown, fchmod conditional for systems that don't have them.Jeremy Allison2-5/+20
Jeremy. (This used to be commit 4fe84f61735ee2328e01d2ae864b0e6c7729f51b)
2003-05-07Make fchown, fchmod conditional for systems that don't have them.Jeremy Allison2-5/+20
Jeremy. (This used to be commit cf78b1e7fe72aec72d03c86c46a8ca49df539c11)
2003-05-07SMB Signing with NTLMv2 works!Andrew Bartlett1-11/+2
(well, under certain conditions :-) There is no length limit on the size of the authentication response added into the MD5 hash. (We had previously limited this to lengths like 40, 44 or 64 in attempts to make sense of what the SNIA spec tells us). Instead, the entire authentication response is added in. Currently, this only works on a Win2k domain members with a Samba PDC, becouse our NTLMv2 code currently fails against an Win2k PDC. However, this splits the problem in half - particularly as the NTLMv2 format is known, and even has an ethereal disector! (thanks tpot). Andrew Bartlett (This used to be commit 7645d3d28afbb8eea502c0e063df3afb3aa812f4)
2003-05-07Ignore generated fileAlexander Bokovoy1-1/+1
(This used to be commit 1702f3d709147b3aea5aaa7e9ed29c654322de9b)
2003-05-07Set our 'global sam name' in one place. For domain controllers, this isAndrew Bartlett5-35/+15
lp_workgroup(), for all other server this is global_myname(). This is the name of the domain for accounts on *this* system, and getting this wrong caused interesting bugs with 'take ownership' on member servers and standalone servers at Snap. (They lookup the username that they got, then convert that to a SID - but becouse the domain out of the smbpasswd entry was wrong, we would fail the lookup). Andrew Bartlett (This used to be commit 5fc78eba20411f3f5a8ccadfcba5c4ab73180dba)
2003-05-07Fix missing para marker.John Terpstra1-0/+1
(This used to be commit 453552d2cb2cdcb75c27a374fd8b93a72482cbdd)
2003-05-07Fix missing closing para marker.John Terpstra1-0/+1
(This used to be commit 3e7860a104a6fe9da81d981e6301d9c3f78648fd)
2003-05-07More edits. Now working on BDC Documentation.John Terpstra2-150/+283
(This used to be commit c799638763fe0eb17b3bc5df853f0137aff54b94)
2003-05-07More updates. Now working on BDC Documentation.John Terpstra2-150/+283
(This used to be commit e38695fa369ba20f23046754084b08ebdc211b5a)
2003-05-07Whoops - that wasn't a whitespace syncup after all.Tim Potter1-0/+2
(This used to be commit 42d0414ed244b92b665cb231f6756f60391861dd)