samba - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author	Files	Lines
2001-10-02	Removed 'extern int DEBUGLEVEL' as it is now in the smb.h header.	Tim Potter	1	-5/+0
	(This used to be commit 2d0922b0eabfdc0aaf1d0797482fef47ed7fde8e)
2001-10-01	honor the ACB_PWNOEXP flag in smbpasswd	Andrew Tridgell	1	-2/+1
	(This used to be commit 70b7c900c907c4620faa7d82845296298b3820ff)
2001-10-01	- fix handling of 0 last_change_time and must_change_time	Andrew Tridgell	1	-31/+32
	- move the arbitrary 21 day timeout to local.h (This used to be commit 11075f543470c3283accce0246d0b2983420695a)
2001-09-29	Fix up a number of intertwined issues:	Andrew Bartlett	1	-2/+2
	The big one is a global change to allow us to NULLify the free'ed pointer to a former passdb object. This was done to allow idra's SAFE_FREE() macro to do its magic, and to satisfy the input test in pdb_init_sam() for a NULL pointer to start with. This NULL pointer test was what was breaking the adding of accounts up until now, and this code has been reworked to avoid duplicating work - I hope this will avoid a similar mess-up in future. Finally, I fixed a few nasty bugs where the pdb_ fuctions's return codes were being ignored. Some of these functions malloc() and are permitted to fail. Also, this caught a nasty bug where pdb_set_lanman_password(sam, NULL) acheived precisely didilly-squat, just returning False. Now that we check the returns this bug was spotted. This could allow different LM and NT passwords. - the pdbedit code needs to start checking these too, but I havn't had a chance to fix it. I have also fixed up where some of the password changing code was using the pdb_set functions to store internal data. I assume this is from a previous lot of mass conversion work... Most likally (and going on past experience) I have missed somthing, probably in the LanMan password change code which I havn't yet been able to test, but this lot is in much better shape than it was before. If all this is too much to swallow (particularly for 2.2.2) then just adding a sam_pass = NULL to the particular line of passdb.c should do the trick for the ovbious bug. Andrew Bartlett (This used to be commit 762c8758a7869809d89b4da9c2a5249678942930)
2001-09-26	Process the workstation trust account code INSIDE the authenticaion subsystem,	Andrew Bartlett	1	-5/+20
	just like any other logon. Matching code removal in reply.c to follow. Andrew Bartlett (This used to be commit da4873d889928e9bd88e736e26e4e77e87bcd931)
2001-09-26	Rearrange the order of the checks in auth_smbpasswd.c, always check passwords	Andrew Bartlett	1	-73/+111
	first. Add password expiry and 'must change before first logon' support. - This requires that the passdb be up to the job to supply the info. (This used to be commit 53c1c5091ea4e3ccc294f8b6f132be78c11c431f)
2001-09-20	Revert this one: The NTLMv2 checks need the original username as found	Andrew Bartlett	1	-1/+1
	on the wire. (This used to be commit 7c9ae76b3ff4f1ba88ddad570648f32f99e38944)
2001-09-19	- Fix up to use sampass->username insted of user_info->smb_username	Andrew Bartlett	1	-7/+7
	- Fix initial lookup to use the mapped username. (This used to be commit 162b88e2313dbcf0b95300b8f18a3e9b6b6b29bd)
2001-09-17	move to SAFE_FREE()	Simo Sorce	1	-2/+2
	(This used to be commit a95943fde0ad89ae3f2deca2f7ba9cb5ab612b74)
2001-09-16	Fix up workstaion and kickoff time checks, moved to auth_smbpasswd.c where	Andrew Bartlett	1	-3/+42
	they can have general effect. Fixed up workstaion support in the rest of samba, so that we can do these checks. Pass through the workstation for cli_net_logon(), if supplied. (This used to be commit 7f04a139b2ee34b4c282590509cdf21395815a7a)
2001-09-12	Some patches to authentication:	Tim Potter	1	-1/+1
	- the usersupplied_info now contains a smb_username (as it comes across on the wire) and a unix_username (after being passed through mapping functions) - when doing security={server,domain} use the smb_username, otherwise use the unix_username (This used to be commit d34fd8ec0716127c7a68eeb8e77d1ae8cc07b547)
2001-09-04	the next stage in the NTSTATUS/WERROR change. smbd and nmbd now compile, but ↵	Andrew Tridgell	1	-4/+4
	the client code still needs some work (This used to be commit dcd6e735f709a9231860ceb9682db40ff26c9a66)
2001-08-27	converted another bunch of stuff to NTSTATUS	Andrew Tridgell	1	-4/+4
	(This used to be commit 1d36250e338ae0ff9fbbf86019809205dd97d05e)
2001-08-24	get rid of compiler warnings	Herb Lewis	1	-3/+3
	(This used to be commit 0768991d04ea03e774ca8662c9cae5e1951b88e0)
2001-08-17	Style cleanup for the last vuid change.	Andrew Bartlett	1	-5/+8
	Style, doco and DEBUG() fixes for auth_smbpasswd.c (In particular for the account control call). Andrew Bartlett (This used to be commit 3d91c119420973d7dd1af416a1e26efa113dc626)
2001-08-12	This patch does a number of things, mostly smaller than they look :-)	Andrew Bartlett	1	-5/+5
	In particuar, it moves the domain_client_validate stuff out of auth_domain.c to somwhere where they (I hope) they can be shared with winbind better. (This may need some work) The main purpose of this patch was however to improve some of the internal documentation and to correctly place become_root()/unbecome_root() calls within the code. Finally this patch moves some more of auth.c into other files, auth_unix.c in this case. Andrew Bartlett (This used to be commit ea1c547ac880def29f150de2172c95213509350e)
2001-08-03	This is my 'Authentication Rewrite' version 1.01, mostly as submitted to	Andrew Bartlett	1	-0/+229
	samba-technical a few weeks ago. The idea here is to standardize the checking of user names and passwords, thereby ensuring that all authtentications pass the same standards. The interface currently implemented in as nt_status = check_password(user_info, server_info) where user_info contains (mostly) the authentication data, and server_info contains things like the user-id they got, and their resolved user name. The current ugliness with the way the structures are created will be killed the next revision, when they will be created and malloced by creator functions. This patch also includes the first implementation of NTLMv2 in HEAD, but which needs some more testing. We also add a hack to allow plaintext passwords to be compared with smbpasswd, not the system password database. Finally, this patch probably reintroduces the PAM accounts bug we had in 2.2.0, I'll fix that once this hits the tree. (I've just finished testing it on a wide variety of platforms, so I want to get this patch in). (This used to be commit b30b6202f31d339b48d51c0d38174cafd1cfcd42)