summaryrefslogtreecommitdiff
path: root/source3/libsmb
AgeCommit message (Collapse)AuthorFilesLines
2001-12-05OK. Smbpasswd -j is DEAD.Andrew Bartlett2-1/+198
This moves the rest of the functionality into the 'net rpc join' code. Futhermore, this moves that entire area over to the libsmb codebase, rather than the crufty old rpc_client stuff. I have also fixed up the smbpasswd -a -m bug in the process. We also have a new 'net rpc changetrustpw' that can be called from a cron-job to regularly change the trust account password, for sites that run winbind but not smbd. With a little more work, we can kill rpc_client from smbd entirly! (It is mostly the domain auth stuff - which I can rework - and the spoolss stuff that sombody else will need to look over). Andrew Bartlett (This used to be commit 575897e879fc175ba702adf245384033342c903d)
2001-12-05Ditto on the const religion.Andrew Bartlett1-2/+2
(This used to be commit e1b940c91b748230664544fd9191123247dd1f24)
2001-12-04Add 'net rpc join' to match the ADS equiv.Andrew Bartlett2-12/+7
This kills off the offending code in smbpasswd -j -Uab%c In the process we have changed from unsing compelatly random passwords to random, 15 char ascii strings. While this does produce a decrese in entropy, it is still vastly greater than we need, considering the application. In the meantime this allows us to actually *type* the machine account password duruign debugging. This code also adds a 'check' step to the join, confirming that the stored password does indeed do somthing of value :-) Andrew Bartlett (This used to be commit c0b7ee6ee547dc7ff798eaf8cb63fbe344073029)
2001-12-04Fix up funtion name, as this finds local, not domain master browsers.Andrew Bartlett1-2/+2
(as per tridge's instructions) (This used to be commit 0692d792f24f1c82c69532e50a6c4373c9a8b476)
2001-12-04Added error message for ERRdiskfull.Tim Potter1-0/+1
(This used to be commit 9f5d7e8a04c36395570247bc5e1b7b3fc5d1a322)
2001-12-04when using non-encrypted password ignore the ntpass variable toAndrew Tridgell1-2/+2
session setup (This used to be commit c7665706cd5633ede710afe41413624124038238)
2001-12-03const religionAndrew Tridgell1-1/+1
(This used to be commit 359ca8f246c46b1700418fe0226458023f808d67)
2001-12-03This change reworkes the connection code for both rpcclient and net newAndrew Bartlett1-1/+113
'net' untility. This should make it easier to port rpcclient code across to net. It also allows SPNEGO (the NTLMSSP subsystem in particular) to work, becouse it kills off the early destruction of the clear-text password. Andrew Bartlett (This used to be commit eee925861a3af3aa16efa3b1700a980c9510c14e)
2001-12-02added queryuseraliases to rpcclientJean-François Micouleau1-0/+49
and some comments to the samr server code, to explain what we should return here. J.F. (This used to be commit 06cb20a46d9d9f8abf0d92ba4cfa4d23187ad715)
2001-12-01added samr_query_sec_obj for rpcclientJean-François Micouleau1-0/+46
J.F. (This used to be commit d8809c58614cd97ef78d398645788e41022a8c39)
2001-11-29I think the lookup_pdc_name() should be called lookup_dc_name() and theTim Potter1-21/+22
name_status_find() call here should look up a #1c name instead of #1d. This fixes some bugs currently with BDC authentication in winbindd and in smbd as you can't query the #1d name with the ip address of a BDC. Who is Uncle Tom Cobbley anyway? (This used to be commit 4215048f7b20a8f9e5877bdbb2f54841b2f7fa64)
2001-11-28fixed some krb5 ifdefsAndrew Tridgell2-3/+3
(This used to be commit 23ef22f11700bbaa5778a9678a990a2b041fcefe)
2001-11-28fixed a core dump in server level securityAndrew Tridgell1-2/+4
(This used to be commit e790bb21d3895bef97522b68c6f00812e6c286f2)
2001-11-28fix a bunch of places where we can double-free a cli structureAndrew Tridgell1-4/+4
(This used to be commit e2ba2383c9f679c076749a8f4fccefc3559e37ec)
2001-11-28Cross merge to make 2.2 and HEAD closer.Jeremy Allison1-9/+6
Jeremy. (This used to be commit 39f076b56cf457cc780dd30a4d3150d8bfc60d13)
2001-11-27Fix another memory leak spotted by Tom Jansen.Richard Sharpe1-0/+1
(This used to be commit 6e2c06a6e6173e68a75fd1adfaa73fe9a9210fef)
2001-11-27prevent a bogus insure wild ptr messageAndrew Tridgell1-1/+2
(This used to be commit 1976a8f87544140363449a361f7c7347ef2c44f5)
2001-11-27prevent a memory leak of cli structuresAndrew Tridgell1-1/+7
(This used to be commit 911c57403bd116405876e73913ad73efd15f659b)
2001-11-26increment the value not the pointerAndrew Tridgell1-1/+1
(This used to be commit e3698259afa79fcd318592b1d628803695406337)
2001-11-26Fix --enable-developer shadow warningAndrew Bartlett1-3/+3
(This used to be commit 6a919bcf3d5848e09ddba1e8946f985661af8f67)
2001-11-26Got medieval on another pointless extern. Removed extern struct ipzeroTim Potter2-5/+3
and replaced with two functions: void zero_ip(struct in_adder *ip); BOOL is_zero_ip(struct in_addr ip); (This used to be commit 778f5f77a66cda76348a7c6f64cd63afe2bfe077)
2001-11-26And delete domain_client_validate.c...Andrew Bartlett1-432/+0
Andrew Bartlett (This used to be commit 6caca4301ba88d026ce1989cefd3e9eeb65df376)
2001-11-26use DEBUG() not d_printf() in librariesAndrew Tridgell1-2/+2
(This used to be commit 5100ae4ae032545edaf525de1dfbe5dc9dafecfc)
2001-11-25Use "password server" for searching for BDC's also as Tim suggested.Jeremy Allison1-6/+8
Jeremy. (This used to be commit 4aca67761fbe601e27f8f768c28a11241f088bba)
2001-11-25Add a new torture test to extract a NT->DOS error map from an NT member of aAndrew Bartlett4-5/+74
samba domain. The PDC must be running a special authenticaion module that spits out NT errors based on username. Andrew Bartlett (This used to be commit adc7a6048c13342b79b6228beafb5142c50f318d)
2001-11-24added "net join" commandAndrew Tridgell1-0/+7
this completes the first stage of the smbd ADS support (This used to be commit 058a5aee901e6609969ef7e1d482a720a84a4a12)
2001-11-24This is another rather major change to the samba authenticaionAndrew Bartlett2-5/+6
subystem. The particular aim is to modularized the interface - so that we can have arbitrary password back-ends. This code adds one such back-end, a 'winbind' module to authenticate against the winbind_auth_crap functionality. While fully-functional this code is mainly useful as a demonstration, because we don't get back the info3 as we would for direct ntdomain authentication. This commit introduced the new 'auth methods' parameter, in the spirit of the 'auth order' discussed on the lists. It is renamed because not all the methods may be consulted, even if previous methods fail - they may not have a suitable challenge for example. Also, we have a 'local' authentication method, for old-style 'unix if plaintext, sam if encrypted' authentication and a 'guest' module to handle guest logins in a single place. While this current design is not ideal, I feel that it does provide a better infrastructure than the current design, and can be built upon. The following parameters have changed: - use rhosts = This has been replaced by the 'rhosts' authentication method, and can be specified like 'auth methods = guest rhosts' - hosts equiv = This needs both this parameter and an 'auth methods' entry to be effective. (auth methods = guest hostsequiv ....) - plaintext to smbpasswd = This is replaced by specifying 'sam' rather than 'local' in the auth methods. The security = parameter is unchanged, and now provides defaults for the 'auth methods' parameter. The available auth methods are: guest rhosts hostsequiv sam (passdb direct hash access) unix (PAM, crypt() etc) local (the combination of the above, based on encryption) smbserver (old security=server) ntdomain (old security=domain) winbind (use winbind to cache DC connections) Assistance in testing, or the production of new and interesting authentication modules is always appreciated. Andrew Bartlett (This used to be commit 8d31eae52a9757739711dbb82035a4dfe6b40c99)
2001-11-24added lsaenumprivsaccount and lsalookupprivvalue to rpcclientJean-François Micouleau1-0/+174
and more to come ... J.F. (This used to be commit 1748d5a2af1f2dcf718d6f162ed483b001542494)
2001-11-23Changed how the privileges are stored in the group mapping code. It's nowJean-François Micouleau1-0/+2
an array of uint32. That's not perfect but that's better. Added more privileges too. Changed the local_lookup_rid/name functions in passdb.c to check if the group is mapped. Makes the LSA rpc calls return correct groups Corrected the return code in the LSA server code enum_sids. Only enumerate well known aliases if they are mapped to real unix groups. Won't confuse user seeing groups not available. Added a short/long view to smbgroupedit. now decoding rpc calls to add/remove privileges to sid. J.F. (This used to be commit f29774e58973f421bfa163c45bfae201a140f28c)
2001-11-23Update some of the error mapping, based on on-the-wire observations of an ↵Andrew Bartlett1-7/+7
NT4 server. This lets our Win9X clients give sane error messages when you get passwords wrong and the like. Andrew Bartlett (This used to be commit f199e9518226ed57a011113bdf06c85265e49674)
2001-11-23Finally worked out why a enumerate trusted domains was returning aTim Potter2-11/+15
NT_STATUS_UNABLE_TO_FREE_VM error. This error code was mis-defined as 0x8000001a instead of 0xc000001a. The former is actually a NT_STATUS_NO_MORE_ENTRIES warning which is what we see in the status code. Removed the & 0xffffff from the loop in get_nt_error_msg() as all the error constants now have the correct high bits set. (This used to be commit 80dca2c9e46753d87e673d712c96c76ffde0b276)
2001-11-23Added constants and error message for dos error code 1326 (logon failure).Tim Potter2-1/+13
(This used to be commit 6ce1eec09de64f19d969a67fc236abd4ae277926)
2001-11-22added lsa_enum_sids to rpcclientJean-François Micouleau1-0/+69
fixed lsa_enum_rpivs server code. This time it works as W2K. fixed smbgroupedit to compile and work. J.F. (This used to be commit 646651018a2736833e49e76f6ca735a4647d9746)
2001-11-22Removed unused variable.Tim Potter1-1/+0
(This used to be commit d1dee2d0323fe6fc498e50201535b1718a88abaf)
2001-11-22Oops - opening wrong pipe name in cli_lsa_initialise() helper function.Tim Potter1-1/+1
(This used to be commit d2034bc5f7dc9b5b9d5e4f17ee8e468307dcb2d5)
2001-11-22add another command to rpcclient: getdispname. Show the full descriptionJean-François Micouleau1-0/+53
of a privilege. J.F. (This used to be commit 84035ae72f422edadd9fa7e493c3d8176bb6a53d)
2001-11-22add a command to rpcclient: enumprivsJean-François Micouleau1-0/+82
J.F. (This used to be commit fa63cb78e326040f68d858d593ba98e06c26c92e)
2001-11-22Got positive and negative name caching working correctly with ↵Jeremy Allison1-22/+24
lookupname/lookupsid. There was a bug in cli_lsa_lookup_name/lookup_sid where NT_STATUS_NONE_MAPPED was being mapped to NT_STATUS_OK, and also the *wrong* number of entries mapped was being returned. The correct field is mapped_count, *NOT* num_entries. Jeremy. (This used to be commit 9f8c644abc455510c06dbd5dbac49c6270746560)
2001-11-21W2K doesn't seem to respond to *#0 names in node status. Ensure nameJeremy Allison3-11/+58
lookup uses password server parameter when looking for PDCs. Jeremy. (This used to be commit 54c968913d6553c6d834b068234ab176917075eb)
2001-11-21One more patch from Tom Jansen. Hope I didn't break the tree :-)Richard Sharpe1-0/+7
(This used to be commit 6d7c0f0bb4cbfdcd9a83416345432e07556f6cfc)
2001-11-21Fix up the build again...Andrew Bartlett1-1/+1
Andrew Bartlett (This used to be commit a34c07377b1de61e145f699047474a82962ccd5b)
2001-11-21Fix up libsmbclient in head.Richard Sharpe1-1366/+1413
Apply the patches from Tom Jansen, get rid of fprintfs and change them to DEBUGs, etc ... (This used to be commit 7ac404c85303c9c3fbd48054fc4876bd4bc1567b)
2001-11-20add asn1 integer handling ready for the ldap netjoin codeAndrew Tridgell1-0/+26
(This used to be commit 74303b75e43856bfb127c143d27e5c5fdcf32c91)
2001-11-20- make sure we use a non-zero session id so we can have multiple connsAndrew Tridgell1-8/+4
open to w2k - fix the string handling in the device name to match NT and smbd - don't pull the domain from negprot if CAP_EXTENDED_SECURITY is set (This used to be commit 618989b386b5564ba140afdc17ce7a07040c3c4e)
2001-11-19LMHOSTSFILE is now dynamically configured too.Martin Pool1-1/+1
(This used to be commit a779710fff5fddcbf65a8ddc8e9169b586b85481)
2001-11-17Fix problems with lp_workgroup() being passed to routines that will modifyRichard Sharpe1-24/+44
it and fix smb://<IP-addr>. (This used to be commit ac2562a0fb7eafd94d53a2c36d33e8f5236d60ff)
2001-11-15Tidyup formatting a bit (spaces->tabs) whilst reading new code to understandJeremy Allison1-46/+34
connection caching. Getting ready for back-merge to 2.2.3. Jeremy. (This used to be commit 5e8df83ba9924adf9df6827c06ed1a2adbe36edf)
2001-11-15Doxygen demo for Tim.Martin Pool1-9/+24
(This used to be commit 5c892badbcad43b8a2e002d1a42483c402f2d3e9)
2001-11-14Close the socket and set the file descriptor to -1 if there was a socketTim Potter1-0/+9
error in cli_receive_smb() and cli_send_smb(). (This used to be commit bedd9c821521dad46df50e8b31e4a58bb0a9a604)
2001-11-14Removed the "reestablish" code. Tridge - scream if this was needed....Jeremy Allison2-60/+2
Jeremy. (This used to be commit e6afe40f85d7dbe79322c82dac735d901e7e71df)
generated by cgit (git 2.34.1) at 2024-11-02 22:03:17 +0000