summaryrefslogtreecommitdiff
path: root/source3/lib
AgeCommit message (Collapse)AuthorFilesLines
2002-06-26This commit finally gives us multiple wins server groups. We nowAndrew Tridgell1-16/+245
accept an extended syntax for 'wins server' like this: wins server = group1:192.168.2.10 group2:192.168.3.99 group1:192.168.0.1 The tags before the IPs don't mean anything, they are just a way of grouping IPs together. If you use the old syntax (ie. no ':') then an implicit group name of '*' is used. In general I'd recommend people use interface names for the group names, but it doesn't matter much. When we register in nmbd we try to register all our IPs with each group of WINS servers. We keep trying until all of them are registered with every group, falling back to the failover WINS servers for each group as we go. When we do a WINS lookup we try each of the WINS servers for each group. If a WINS server for a group gives a negative answer then we give up on that group and move to the next group. If it times out then we move to the next failover wins server in the group. In either case, if a WINS server doesn't respond then we mark it dead for 10 minutes, to prevent lengthy waits for dead servers. (This used to be commit e125f06058b6b51382cf046b1dbb30728b8aeda5)
2002-06-26made the wins list handling a littler clearerAndrew Tridgell1-9/+5
(This used to be commit d03efabc4dca842cafcd0edfa1eaa5b4d3e821b6)
2002-06-26mumble ... fix typo ... mumbleAndrew Tridgell1-1/+1
(This used to be commit 68be27cfea938d7f91a8ce1da39eb86c577f7719)
2002-06-26fixed we_are_multihomed() to cope with dynamic interfaces (ie. don'tAndrew Tridgell1-6/+1
cache the result!) (This used to be commit fc8aa198b16da24b68e45982eb45dd7d5fd089e1)
2002-06-26- completely rewrote the wins_srv.c code. It is now much simpler, andAndrew Tridgell1-303/+90
gives us a good grounding to properly support multiple wins servers for different interfaces (which will be coming soon ...) - fixed our wins registration failover code to actually do failover! We were not trying to register with a secondary wins server at all when the primary was down. We now fallback correctly. - fixed the multi-homed name registration packets so that they work even in a non-connected network (ie. when one of our interfaces is not routable from the wins server. Yes, this really happens in the real world). (This used to be commit a049360d5b0d95a935b06aad43efc17d34de46dc)
2002-06-25fixed a bug in handling select in the main daemon - this stops the daemon ↵Andrew Tridgell1-12/+6
spinning if a signal is received at an inconvenient moment (This used to be commit d8d7dd523d897ea25a572c8f21903e94e8485404)
2002-06-21Changed level of "bind succeded on port %d" debug to 10.Tim Potter1-1/+1
(This used to be commit de00428ef12b597e5c29896bf961cfd7a1e122dd)
2002-06-20Fixed compiler warning.Tim Potter1-1/+1
(This used to be commit c29cef7f3408714d4e6e18906760d74016c6748f)
2002-06-18more debug classess activatedSimo Sorce1-1/+1
(This used to be commit 897e64d2e0c1d04ab93441ccaffe369bf43be46e)
2002-06-17compile warngin fixes merged from 2.2Gerald Carter1-1/+1
(This used to be commit 29874f4b8fecdc7cbd84d656dafce54cca49e0b1)
2002-06-17Fixed typo in debug.Tim Potter1-1/+1
(This used to be commit 41f036ab37274ce7cdd782ead764dd1a36ecba1d)
2002-06-15Simplify this code further. Just substitute %H, and let the normal codeAndrew Bartlett1-36/+0
paths handle the rest later. Andrew Bartlett (This used to be commit 09754ec797c4232d2016c7eff2e74044f28ebb7c)
2002-06-15Unsused function since last commitAndrew Bartlett1-34/+0
(This used to be commit 957c865cee7f799145f9f1d30dfd0d0a25d826cf)
2002-06-15Rework much of the service.c code:Andrew Bartlett1-3/+10
The aim of this execise is to give the 'security>=user' code a straight paper path. Security=share will sill call authorise_login(), but otherwise we avoid that mess. This allow *much* more accurate error code reporting, beocuse we don't start pretending that we can use the (nonexistant) password etc. Also in this patch is code to create the 'homes' share at session setup time (as we have done in the past - been broken recently) and to record this on the user's vuser struct for later reference. The changes here should also allow for much better use of %H (some more changes to come here). The service.c changes move a lot of code around, but are not as drastric as they look... (Also included is a fix to srv_srvsvc_nt.c where 'total_entries' not '*total_entries' was compared). This code is needs testing, but passes my basic tests. I expect we have lost some functionality, but the stuff I had expected to loose was already broken before I started. In particular, we don't 'fall back' to guest if the user cannot access a share (for security=user). If you want this kind of stuff then you really want security=share anyway. Andrew Bartlett (This used to be commit 4c0cbcaed95231f8cf11edb43f6adbec9a0d0b5c)
2002-06-15This patch does 2 things:Andrew Bartlett1-0/+57
It extends the 'server mutex' to conver security=server, becouse the connection race condition exists here too, and while people *should* use security=domain, some sites don't.... (This probably should be done in 2.2 as well). Also, start to actually extract and use the information that the remote server returns in the info3 struct. The server mutex code is now in a new file. Andrew Bartlett (This used to be commit 9b0dabdf4ec3bb45879caae76e03b57ccdad8b4b)
2002-06-15Add back sys_getpwnam() and freinds to the system.c interface, but don'tAndrew Bartlett4-5/+29
use the silly cache any more. Also add group functions and fix a few callers. Andrew Bartlett (This used to be commit 41d4b94077c118ecde2bf8792b9bb7ab71c6403e)
2002-06-14moved lp_list_* functions away from param/loadparm.c, put int lib/util_str.cSimo Sorce3-6/+188
and renamed to str_list_* as it is a better name. Elrond should be satisfied now :) (This used to be commit 4ae260adb9505384fcccfb4c9929cb60a45f2e84)
2002-06-14Patch from ctrlsoft to make the pluggable passdb subsystem use an lp_listAndrew Bartlett1-2/+2
rather than a string when configuring mulitple backends. Also adjust some of the users of get_global_sam_sid() to cope with the fact that it just might not exist (uninitialised, can't access secrets.tdb). More places need conversion. Add some const and remove silly casts. Andrew Bartlett (This used to be commit c264bf2ec93037d2a9927c00295fa60c88b7219d)
2002-06-14Patch (from ctrlsoft <jelmer@nl.linux.org>) to poptify testparm, and theAndrew Bartlett2-3/+19
modifications required to suppress the const warnings. Andrew Bartlett (This used to be commit ec4f1e9e2f6c162a475b424d63b9802387ad905e)
2002-06-14Add const, kill of useless casts and therefore eliminate warnings.Andrew Bartlett1-3/+3
Andrew Bartlett (This used to be commit 29490f214750acd44cee6c4ab1354722d82d853a)
2002-06-13Ensure we save any older SIGALRM signal handler.Jeremy Allison3-7/+11
Jeremy. (This used to be commit aa0a6f5532a2689409426eef9a4b66a28fb97635)
2002-06-13Latest patch from metze <metze@metzemix.de> to move most of samba acrossAndrew Bartlett1-4/+27
to using SIDs instead of RIDs. The new funciton sid_peek_check_rid() takes an 'expected domain sid' argument. The idea here is to prevent mistakes where the SID is implict, but isn't the same one that we have in the struct. Andrew Bartlett (This used to be commit 04f9a8ff4c7982f6597c0f6748f85d66d4784901)
2002-06-11few fixes from Elrond(elrond@samba-tng.org) and Billy ↵Simo Sorce1-4/+8
O'Connor(billy@oconnoronline.net) (This used to be commit 88718883e031a3249152861300432dfc895ac587)
2002-06-10Remove "sids.h" as it really wasn't being used anywhere, and was exportingAndrew Bartlett1-2/+0
the (now static) global_sam_sid. The only place it was being used was to return global_sid_NULL to some uid->sid functions - and I'm not convinced this is correct in any case. Andrew Bartlett (This used to be commit e2a76a7fc94dd59c09bba3cda91446fad9f8c0e0)
2002-06-07Globally replace 'global_sam_sid' with get_global_sam_sid(), a selfAndrew Bartlett1-4/+0
initialising function. This patch thanks to the work of "Stefan (metze) Metzmacher" <metze@metzemix.de> This is partly to enable the transition to SIDs in the the passdb. Andrew Bartlett (This used to be commit 96afea638e15d4cbadc57023a511094a770c6adc)
2002-06-07Move the code from lib/util_sid.c that deals with the global_sam_sid intoAndrew Bartlett1-241/+1
a file that is linked with the passdb. This is to avoid linking insanity when this global becomes a self-initing function. (This used to be commit 743afd96cb54b4966e3afad11ea987f968b98651)
2002-06-05merge from 2.2Gerald Carter1-4/+10
(This used to be commit ce2ddb70411b30a0d6b2d6dded13c3b94895c1dd)
2002-06-05Spelling fix.Tim Potter1-1/+1
(This used to be commit 39ec94bffe536de5950611d6e4b28621b6aff844)
2002-06-03Since includes.h isn't included here, VA_COPY has to be defined here. I don'tJim McDonough1-0/+8
see any include file that is guaranteed to be here, so I'm defining it locally. Fixes AIX and Solaris builds. (This used to be commit ca6bb47c22385a2c32be6ac3f8d9ffbfda45359b)
2002-06-03put the ifdef for HAVE_VA_COPY in one place rather than in lots ofAndrew Tridgell5-44/+20
functions (This used to be commit 1cf3228fdc20f0314d1f8e71ad710a5e548b3f72)
2002-05-28Updates to better report some NTSTATUS errors into PAM, and update to PAMAndrew Bartlett1-0/+1
to correctly allow password changes on expired passwords. (No security implications, as its just a 'will I let you talk to the server' check). pam_winbind checks the password prior to changing it, so that users don't have to make up and type their new password when they havn't even got the old one right. This also helps with stacking etc. Andrew Bartlett (This used to be commit 2b78d493002a3ba13533429c6a14f5c0a92f43d1)
2002-05-26move debug stuff from messages.c to debug.c (Elrond)Simo Sorce2-20/+20
(This used to be commit 44df5a13bc83dc331caa6788cf0805333ed79f8d)
2002-05-25Clean up a few unused functions, add a bit of static etc.Andrew Bartlett2-19/+2
Importantly: The removal of the silly 'delete user script' behaviour when secuity=domain. I have left the name the same - as it still does the (previously documented, but not in smb.conf(5)) sane behaviour of deleting users on request. When we decide what to do with the 'add user' functionality, we might rename it. Andrew Bartlett (This used to be commit cdcfe3671eb7570e15649b77f708e6579055e7bc)
2002-05-23Nobody uses this, and its really just a layer of internal implementation.Andrew Bartlett1-1/+1
Make it static (till sombody needs its...) (This used to be commit 89dc15732062b46276d1d7a155954ee565070491)
2002-05-22Merge of bugfixes from 2.2.Jeremy Allison1-2/+8
Jeremy. (This used to be commit 5c8351228c55f2403214351f6fd16fe231aee917)
2002-05-22Add a bit more const, and kill of (finally!) sys_getpwnam and sys_getpwuid.Andrew Bartlett3-129/+12
These might be reimplmented as simple pass-through functions, but all users really should be doing 'getpwnam_alloc' or 'getpwuid_alloc' to ensure that there are not shared static buffers. I don't beleive we actually need a getpw*() cache inside samba - if we do then I think we should look at our code design first. (some of these changes are for platforms I don't have access to, but they look sane) Andrew Bartlett (This used to be commit 9d8431b04f41dceffe4c45cc969472ee59f7282f)
2002-05-22Cleanups!Andrew Bartlett2-45/+1
Make some code static, add some const to the PAM code, and make the plaintext password code actually function - particulary without the requirement to modify the 'struct passwd' (which it assumed was made up of fstrings) This kills some particularly ugly code in lib/util_pw.c Andrew Bartlett (This used to be commit 302dad4990ba5194f072e435465d9adaa089ae06)
2002-05-22Fix a silly memory (getpnam_alloc()) leak spotted by Elrond, and moveAndrew Bartlett2-94/+118
the DATA_BLOB code into its own file. It would be nice to go over some of the other util.c functions, and check that we still use them all, and that we use them in more than one place. Andrew Bartlett (This used to be commit d0ea70fce55df9a5b5878f50fce7bc115ffb37c2)
2002-05-20merge from SAMBA_2_2Gerald Carter1-1/+1
(This used to be commit 2424578c298ea11f67415bcfe2928353cd95819b)
2002-05-19Fixed compiler warning.Tim Potter1-1/+1
(This used to be commit 793d9306e29ddd23e3f52736b5cd558b5d058611)
2002-05-19Keep the compiler happyAndrew Bartlett1-1/+1
(This used to be commit 84ea2a434b510ed49838a04a4b30bd2fc9ec5673)
2002-05-18so here it is the code to introduce seriously debugggging classes.Simo Sorce2-70/+272
this is a first step only passdb stuff has beein "classized". - so what can you do? set debug level to: 1 poasdb:10 that will make all the code run at debug level 1 except the code in passdb/* files that will run at level 10 TODO: fix the man page - also smbcontrol has this nice feature so smbcontrol smbd debug 3 passdb:5 will set every smbd to have a default log level of 3 while passdb stuff will be at level 5 and so no.. minor cosmetic fix to pdbedit is there too (This used to be commit be5c3b3f5781ddc002ffcc98df04ab024dcef4ca)
2002-05-18Move client_receive_smb to clientgen.c as a static, as proposed by Elrond.Andrew Bartlett1-34/+0
(only function that used it was unused, and this helps bring TNG and HEAD closer) Its also cleaner. Andrew Bartlett (This used to be commit 78f47c83332a6408a718a3dee45645935638b364)
2002-05-18A few things in this commit:Andrew Bartlett2-13/+69
cleanup some of the code in net_rpc_join re const warnings and fstrings. Passdb: Make the %u and %U substituions in passdb work. This is done by declaring these paramters to be 'const' and doing the substitution manually. I'm told this is us going full circle, but I can't really see a better way. Finally these things actually seem to work properly... Make the lanman code use the pdb's recorded values for homedir etc rather than the values from lp_*() Add code to set the plaintext password in the passdb, where it can decide how to store/set it. For use with a future 'ldap password change' option, or somthing like that... Add pdb_unix, so as to remove the 'not in passdb' special cases from the local_lookup_*() code. Quite small, as it uses the new 'struct passwd -> SAM_ACCOUNT' code that is now in just one place. (also used by pdb_smbpasswd) Other: Fix up the adding of [homes] at session setup time to actually pass the right string, that is the unix homedir, not the UNC path. Fix up [homes] so that for winbind users is picks the correct name. (bad interactions with the default domain code previously) Change the rpc_server/srv_lsa_nt.c code to match NT when for the SATUS_NONE_MAPPED reply: This was only being triggered on no queries, now it is on the 'no mappings' (ie all mappings failed). Checked against Win2k. Policy Question: Should SID -> unix_user.234/unix_group.364 be considered a mapping or not? Currently it isn't. Andrew Bartlett (This used to be commit c28668068b5a3b3cf3c4317e5fb32ec9957f3e34)
2002-05-17Don't forget the semicolon, you fool!Jim McDonough1-1/+1
(This used to be commit 1c9387330f776b9b96714f9c9c62087bbd32f7b6)
2002-05-17Fix usage of va_list passed as an arg. Use __va_copy before using itJim McDonough4-7/+42
when it exists. (This used to be commit 85ab07bdc1b2ce7b2c1b8197fad45124b1460dca)
2002-05-17Make Get_Pwnam use getpwnam_alloc() in an attempt to make it segfault ratherAndrew Bartlett1-9/+31
than allow silent reuse of stale static buffer. Next step is to make this fn return that allocated buffer. (This used to be commit e1daf816f3d809d288313fe2db98b5a731c93a79)
2002-05-17This removes --with-ssl from Samba.Andrew Bartlett2-78/+0
This option was badly maintained, useless and confused our users and distirbutors. (its SSL, therfore it must be good...) No windows client uses this protocol without help from an SSL tunnel. I can't see any reason why setting up a unix-side SSL wrapper would be any more difficult than the > 10 config options this mess added to samba in any case. On the Samba client end, I think the LIBSMB_PROG hack should be sufficient to start stunnel on the unix side. We might extend this to take %i and %p (IP and port) if there is demand. Andrew Bartlett (This used to be commit b04561d3fd3ee732877790fb4193b20ad72a75f8)
2002-05-16Add __va_copy to talloc functions. talloc_asprintf was causing all kindsJim McDonough1-5/+24
of problems on Linux/390 systems... (This used to be commit 2605e483b309e62b4c5d39a2ac6d8b2257bb5a87)
2002-05-11move vsyslog() from snprintf.c to replace.cSimo Sorce2-14/+14
tx Elrond for prosecuting cleanness :) (This used to be commit 2f30c2edfd6373864f5bd0c4f8d70625495da7eb)