summaryrefslogtreecommitdiff
path: root/source3/Makefile.in
AgeCommit message (Collapse)AuthorFilesLines
2001-12-04Add 'net rpc join' to match the ADS equiv.Andrew Bartlett1-1/+4
This kills off the offending code in smbpasswd -j -Uab%c In the process we have changed from unsing compelatly random passwords to random, 15 char ascii strings. While this does produce a decrese in entropy, it is still vastly greater than we need, considering the application. In the meantime this allows us to actually *type* the machine account password duruign debugging. This code also adds a 'check' step to the join, confirming that the stored password does indeed do somthing of value :-) Andrew Bartlett (This used to be commit c0b7ee6ee547dc7ff798eaf8cb63fbe344073029)
2001-12-03added a tdb to store the account policy informations.Jean-François Micouleau1-1/+1
You can change them with either usermanager->policies->account or from a command prompt on NT/W2K: net accounts /domain we can add a rpc accounts to the net command. As the net_rpc.c is still empty, I did not start. How should I add command to it ? Should I take the rpcclient/cmd_xxx functions and call them from there ? alse changed the SAM_UNK_INFO_3 parser, it's an NTTIME. This one is more for jeremy ;-) J.F. (This used to be commit bc28a8eebd9245ce3004ae4b1a359db51f77bf21)
2001-12-03make proto should build winbindd_proto.h as wellAndrew Tridgell1-1/+1
(This used to be commit c8339ce5c88a371728a329d0e80266fe41c00fee)
2001-12-03added a basic ADS backend to winbind. More work needed, but atAndrew Tridgell1-1/+2
least basic operations work (This used to be commit 88241cab983b2c7db7d477c6c4654694a7a56cd3)
2001-12-03This is another major rework of the 'net' command.Andrew Bartlett1-1/+1
This time, all the existing functionality has been moved into 'net rap', ready for new commands in the 'net ads' and 'net rpc' categories. In particular, we hope to have the abilty to autoselect the appropriate backend to use based on smb.conf or other paramaters. This will allow 'net user' to work no matter what the remote server. The new 'net rpc' command will soon gain a 'net rpc join' and a 'net rpc user' based on the existing samba code. Also in this commit, the connection establishment code has been almost entirly reworked, and now has some minor sense of sainity to it. In particular, we can now connect to hosts *other* than localhost! We also have the ability to state on a per-command basis whether the 'localhost' is a sane default value. (A net join, for example, would not be sane against localhost). Unfortunetly we have had to make the basic paramaters global variables, but the 'cli' is not opened and closed on a per-command basis. Andrew Bartlett (This used to be commit 8739d426caabe3794a018dd28ab139b08f88b603)
2001-12-03added nsstest targetAndrew Tridgell1-1/+7
fixed winbindd_rpc.o typo (This used to be commit 2ce7f38fe96c6f5faf45d3c71a3c8d3386ea5107)
2001-12-03split winbindd_enum_dom_groups into the new backend structureAndrew Tridgell1-1/+2
also created winbindd_rpc.c which contains the functions that have been converted to the new structure. There will soon be a winbindd_ads.c for the ldap backend (This used to be commit e4ccc602ba65838646f2632120069f3274619dd9)
2001-12-01added smbgroupedit to compile by defaultJean-François Micouleau1-1/+1
J.F. (This used to be commit 540a6122dc58a216a94a11a36baa209521dd1981)
2001-12-01added $(LDFLAGS) to link smbmount/smbmnt/smbumount to make Red Hat LinuxMotonobu Takahashi1-3/+3
happy (This used to be commit 7dfde592aa47f735c08718844db083500b020a60)
2001-11-29Make better use of the ads_init() function to get the kerberos relam etc.Andrew Bartlett1-1/+2
This allows us to use automagically obtained values in future, and the value from krb5.conf now. Also fix mem leaks etc. Andrew Bartlett (This used to be commit 8f9ce717819235d98a1463f20ac659cb4b4ebbd2)
2001-11-26This compleats the of the authenticaion subystem into the new 'auth'Andrew Bartlett1-6/+5
subdirectory. (The insertion of these files was done with some CVS backend magic, hence the lack of a commit message). This also moves libsmb/domain_client_validate.c back into auth_domain.c, becouse we no longer share it with winbind. Andrew Bartlett (This used to be commit 782835470cb68da2188a57007d6f55c17b094d08)
2001-11-25add popt build dependencyAndrew Tridgell1-1/+1
(This used to be commit 0c1f90402bf6aa403719cef59afd127ae42b0865)
2001-11-25move popt out of proto objsAndrew Tridgell1-2/+2
(This used to be commit db0bee1c68d8d9af3febb841c86cd3d4ade87c7b)
2001-11-25made a "net ads" command, currently with "net ads join" and "net ads leave"Andrew Tridgell1-1/+1
(This used to be commit 2f8fa175b189c2d11676245b01d3201c0a4f0826)
2001-11-24added "net join" commandAndrew Tridgell1-5/+5
this completes the first stage of the smbd ADS support (This used to be commit 058a5aee901e6609969ef7e1d482a720a84a4a12)
2001-11-24This is another rather major change to the samba authenticaionAndrew Bartlett1-1/+2
subystem. The particular aim is to modularized the interface - so that we can have arbitrary password back-ends. This code adds one such back-end, a 'winbind' module to authenticate against the winbind_auth_crap functionality. While fully-functional this code is mainly useful as a demonstration, because we don't get back the info3 as we would for direct ntdomain authentication. This commit introduced the new 'auth methods' parameter, in the spirit of the 'auth order' discussed on the lists. It is renamed because not all the methods may be consulted, even if previous methods fail - they may not have a suitable challenge for example. Also, we have a 'local' authentication method, for old-style 'unix if plaintext, sam if encrypted' authentication and a 'guest' module to handle guest logins in a single place. While this current design is not ideal, I feel that it does provide a better infrastructure than the current design, and can be built upon. The following parameters have changed: - use rhosts = This has been replaced by the 'rhosts' authentication method, and can be specified like 'auth methods = guest rhosts' - hosts equiv = This needs both this parameter and an 'auth methods' entry to be effective. (auth methods = guest hostsequiv ....) - plaintext to smbpasswd = This is replaced by specifying 'sam' rather than 'local' in the auth methods. The security = parameter is unchanged, and now provides defaults for the 'auth methods' parameter. The available auth methods are: guest rhosts hostsequiv sam (passdb direct hash access) unix (PAM, crypt() etc) local (the combination of the above, based on encryption) smbserver (old security=server) ntdomain (old security=domain) winbind (use winbind to cache DC connections) Assistance in testing, or the production of new and interesting authentication modules is always appreciated. Andrew Bartlett (This used to be commit 8d31eae52a9757739711dbb82035a4dfe6b40c99)
2001-11-20added the beginnings of ADS support in smbdAndrew Tridgell1-1/+4
(This used to be commit c7f611691941ca92f57665e19d6e46b161599427)
2001-11-20We don't actually use the horror that was lib/util_array.c :-).Jeremy Allison1-1/+1
More deleted code - hurrah ! Jeremy. (This used to be commit 48a848f748fb0961c67f17401e294ebf18fdcf1b)
2001-11-19Do satyr work against a copy of the build farm scripts so as not toMartin Pool1-2/+2
break them. installcheck has to find smbd in SBINDIR, not BINDIR. (This used to be commit 1be6139e148d752ec3619468ee1cca7f61ee16e1)
2001-11-19Move all other paths into dynconfigMartin Pool1-6/+6
(This used to be commit d51ef6bfa3d194b58c3ee7706a7d475ef042676d)
2001-11-19LIBDIR and LOCKDIR are dynamically configured too.Martin Pool1-5/+7
(This used to be commit 868999ad3c82ad72f11d5b3208b0e42b1ed95096)
2001-11-19LMHOSTSFILE is now dynamically configured too.Martin Pool1-2/+4
(This used to be commit a779710fff5fddcbf65a8ddc8e9169b586b85481)
2001-11-19Disable "installcheck" -- it's still too likely to clobber somebody'sMartin Pool1-1/+1
installation. (This used to be commit 10022753d1d7114eadbe5a83183a6176eff1d7ff)
2001-11-19Store some path names in global variables initialized to configureMartin Pool1-5/+28
default, rather than in preprocessor macros. (This used to be commit 79ec88f0da40faebe1e587f1b3e87b5f2b184f58)
2001-11-16Fixed detection of RedHat headers. Removed another file !Jeremy Allison1-2/+1
Jeremy. (This used to be commit d70674312d8b98367ccdbbc12fe880f9f539d258)
2001-11-16Removed SMBD_RPC_CLIENT_OBJ temporary I was using.Jeremy Allison1-8/+3
Jeremy. (This used to be commit c17bfe7c365de19193dcf9ace8728866e344d7aa)
2001-11-16I *love* removing code :-). Removed 4 files that weren't being used.Jeremy Allison1-7/+11
All this stuff was being pulled in due to *one* unneeded call to fetch a domain SID which smbpasswd already puts in the database... Jeremy. (This used to be commit 6bf2505cce7db770fd4db5b19999a78588e96b58)
2001-11-15Tidyups in the merge process.Jeremy Allison1-2/+1
Jeremy. (This used to be commit a7b45bfb713adaaad0dca3dc13139ee5a909a383)
2001-11-14Clean up message.Martin Pool1-4/+4
(This used to be commit f07915072fef1d79549da7b92775c5aaf3c552da)
2001-11-14Too much of samba depends on finding files in their installedMartin Pool1-5/+11
locations, so we can't do "make check" yet, only "make installcheck". (This used to be commit 7d8610c4fed555bf478dad793c84fbaf5b3c86ff)
2001-11-14Add basic "make check" and "make installcheck" targets, using theMartin Pool1-15/+57
Satyr framework from the buildfarm. This will eventually be copied into the Samba source tree, but it is not yet. See cvs://samba.org:/data/cvs/satyr Add "make showlayout" target to show where installation will put things. (This used to be commit 7b5b5693f4e374522a333e609b319b9c75bb4501)
2001-11-07Added delheaders as a dependency for clean.Tim Potter1-1/+10
(This used to be commit cd9334bd57cd7f544aba0b642c8190d608add7b9)
2001-11-05Use cli_nt_login_network() instead of domain_client_validate() to performTim Potter1-2/+2
pam authentication. This allows us to link in less other crap. Authenticating with a challenge/response doesn't seem to work though - we always get back NT_STATUS_WRONG_PASSWORD. (This used to be commit d85aa1ce83327dda6aa3dcd9bbab9cf6979dda1e)
2001-11-03Added NT_USER_TOKEN into server_info to fix extra groups problem.Jeremy Allison1-1/+1
Got "medieval on our ass" about const warnings (as many as I could :-). Jeremy. (This used to be commit ee5e7ca547eff016818ba5c43b8ea0c9fa69b808)
2001-10-31This is a farily large patch (3300 lines) and reworks most of the AuthRewriteAndrew Bartlett1-1/+1
code. In particular this assists tpot in some of his work, becouse it provides the connection between the authenticaion and the vuid generation. Major Changes: - Fully malloc'ed structures. - Massive rework of the code so that all structures are made and destroyed using malloc and free, rather than hanging around on the stack. - SAM_ACCOUNT unix uids and gids are now pointers to the same, to allow them to be declared 'invalid' without the chance that people might get ROOT by default. - kill off some of the "DOMAIN\user" lookups. These can be readded at a more appropriate place (probably domain_client_validate.c) in the future. They don't belong in session setups. - Massive introduction of DATA_BLOB structures, particularly for passwords. - Use NTLMSSP flags to tell the backend what its getting, rather than magic lenghths. - Fix winbind back up again, but tpot is redoing this soon anyway. - Abstract much of the work in srv_netlog_nt back into auth helper functions. This is a LARGE change, and any assistance is testing it is appriciated. Domain logons are still broken (as far as I can tell) but other functionality seems intact. Needs testing with a wide variety of MS clients. Andrew Bartlett (This used to be commit f70fb819b2f57bd57232b51808345e2319d52f6c)
2001-10-27Fix up the Makefile for now (thanks herb).Andrew Bartlett1-2/+2
I understand that Vance is reworking the build_options stuff, so maybe we can have better way of regenerating this in future. Andrew Bartlett (This used to be commit a228e9b39f0a5642d5acaba90a92ba0b29adf689)
2001-10-26Restore the intended behaviour for .headers.stampAndrew Bartlett1-1/+1
We don't want a 'make headers' (aka make proto) to force a rebuild of the entire tree. Andrew Bartlett (This used to be commit 8c0cb50387cbbcca89d12cefae40a6a02d147ea4)
2001-10-23.headers.stamp not getting touched if file already existed.Herb Lewis1-1/+1
Not sure what the original intent was with the [ -f $@ ] test but this prevented the touch from happening. Could whoever originally added this target check this out? (This used to be commit 813490855339cffa31c8734ecd362eba7585bda2)
2001-10-23Add popt for parsing commandline optionsJim McDonough1-1/+5
(This used to be commit df34e11d84a6fe89dc6654eb10de0a49383e1dea)
2001-10-20fixed LDSHFLAGS when using non-standard lib locationsAndrew Tridgell1-7/+8
(This used to be commit d23772c306c641a74b5c08c68550c684c206b1a5)
2001-10-19Add build of net utilityJim McDonough1-2/+8
(This used to be commit 53247f5880150ed7ee831d68a5c0fdbcb1422194)
2001-10-15split session setup code out of reply.c in preparation for addingAndrew Tridgell1-1/+1
NTLMSSP and kerberos support in smbd (This used to be commit 38a43d75e25bbebe0f6cdfcf389129a842ede842)
2001-10-15include more libs needed for kerberos5 on some systems (eg. solaris)Andrew Tridgell1-1/+1
removed some no longer needed i18n stuff from configure.in (This used to be commit dd3ad91724125df355d1ff9050a1262d9d4f2cbf)
2001-10-12added NTLMSSP authentication to libsmb. It seems to work well so I have ↵Andrew Tridgell1-1/+2
enabled it by default if the server supports it. Let me know if this breaks anything. Choose kerberos with the -k flag to smbclient, otherwise it will use SPNEGO/NTLMSSP/NTLM (This used to be commit 076aa97bee54d182288d9e93ae160ae22a5f7757)
2001-10-11first step in converting the head branch to use lang_tdb.c insteadAndrew Tridgell1-32/+5
of gettext for internationalisation support. There is more to do (This used to be commit ab7f67677a1ade4669e5c2750d0a38422ea616a9)
2001-10-11initial kerberos/ADS/SPNEGO support in libsmb and smbclient. ToAndrew Tridgell1-1/+1
activate you need to: - install krb5 libraries - run configure - build smbclient - run kinit to get a TGT - run smbclient with the -k option to choose kerberos auth (This used to be commit d33057585644e1337bac743e25ed7653bfb39eef)
2001-10-06move libsmb/domain_client_validate.o around in the makefile again, it really isAndrew Bartlett1-3/+4
an authenticaion object that happens to also be used by winbind. We need to fix this up at some stage. In the end it will probably be best if winbind does the login over its own internally managed connections, not a new one per authenticiaon. Then this would no longer be an issue, as it could call cli_nt_login_network() directly. Andrew Bartlett (This used to be commit 154d0ea4df684944c6bc58cb3f5dc64ee972cf97)
2001-10-05Remove winbindd_glue.c dodgy hack and add winbindd_cm.c for managingTim Potter1-3/+3
connections within winbindd. (This used to be commit 4ea67aeede7f17846d2976241fffca1af44b1784)
2001-10-03switched over to a new method of handling uppercase/lowercase mappingsAndrew Tridgell1-2/+3
for unicode strings. The new method relies on 3 files that are mmap'd at startup to provide the mapping tables. The upcase.dat and lowcase.dat tables should be the same on all systems. The valid.dat table says what characters are valid in 8.3 names, and differs between systems. I'm committing the japanese valid.dat here, in future we need some way of automatically installing and choosing a appropriate table. This commit also adds my mini tdb based gettext replacement in intl/lang_tdb.c. I have not enabled this yet and have not removed the old gettext code as the new code is still being looked at by Monyo. Right now the code assumes that the upcase.dat, lowcase.dat and valid.dat files are installed in the Samba lib directory. That is not a good choice, but I'll leave them there until we work out the new install directory structure for Samba 3.0. simo - please look at the isvalid_w() function and think about using it in your new mangling code. That should be the final step to correctly passing the chargen test code from monyo. (This used to be commit 1c221994f118dd542a158b2db51e07d04d0e9314)
2001-09-29Don't build make_printerdef in HEAD. This tool is not needed exceptGerald Carter1-1/+1
to support 2.0.x style WIn9x driver download. (This used to be commit d0628d0d2d5f5366179d2508456ae06ce3879be3)