summaryrefslogtreecommitdiff
path: root/source3/libsmb
AgeCommit message (Collapse)AuthorFilesLines
2003-06-21merge of the netsamlogon caching code from APPLIANCE_HEADGerald Carter1-0/+238
This replaces the universal group caching code (was originally based on that code). Only applies to the the RPC code. One comment: domain local groups don't show up in 'getent group' that's easy to fix. Code has been tested against 2k domain but doesn't change anything with respect to NT4 domains. netsamlogon caching works pretty much like the universal group caching code did but has had much more testing and puts winbind mostly back in sync between branches. (This used to be commit aac01dc7bc95c20ee21c93f3581e2375d9a894e1)
2003-06-13Forward port the app-head changes for dc name cache into 3.0.Jeremy Allison3-31/+186
Jeremy. (This used to be commit 8bcc3116a22ce11b55a35f3363230f54bc5735fc)
2003-06-10fixed libsmb code to set correct timeout in cli_state when waiting forAndrew Tridgell1-2/+2
a blocking lock (This used to be commit 3515476fe436132d4569ac9067ea6195ab087e77)
2003-06-10use ZERO_STRUCT() instead of memsetAndrew Tridgell1-1/+1
(This used to be commit 082084042307f5f7d532b28debdeac11753a05f9)
2003-06-08Fix some memory leaks and extra cache startups/shutdowns from the trustedAndrew Bartlett2-4/+5
domains lookup code. Andrew Bartlett (This used to be commit 0ec1b1207041a3b6050046ba6d7b466dd4fcf341)
2003-06-08Enforce 'client plaintext auth', 'client lanman auth' and 'client ntlmv2 auth'.Andrew Bartlett1-9/+49
(this now causes things like the LANMAN protocol and contacting servers with 'encrypt passwords = no' set to fail, if configured) 'client ntlmv2 auth' (a BOOL) forces both plaintext and lanman off, and is the most secure setting for compatible hosts. Perhaps we should change this to 'client minimum auth'? Andrew Bartlett (This used to be commit e1fb681e4c921456fde154b87687722a18ed4aac)
2003-06-08Rework our smb signing code again, this factors out some of the commonAndrew Bartlett1-54/+109
MAC calcuation code, and now supports multiple outstanding packets. Fixes bug #40 Andrew Bartlett (This used to be commit dd33212f1ec08f46223d6de8e5ff3140ce367a9a)
2003-06-06applying David Lee's climessage patch to make sending messages more extendableGerald Carter1-6/+32
(This used to be commit a5240adc4944342529702542e080c378d3883a09)
2003-06-06merge from APP_HEAD. Push negative connection cacheGerald Carter1-7/+148
into rpc_find_dc(). Should probably be extended some more in 3.0 but this is what we have for the moment. (This used to be commit 0e23abf95cf7ba2d0a314a34bddb4d46de2a3cd1)
2003-06-06fixed a pstrcpy() that is not on a pstringAndrew Tridgell1-1/+1
(This used to be commit f644b3d6d238e3c44d0358b44296a9360d16bb41)
2003-05-30More on bug 137: rename more of krb5_xxx functions to not start with krb5_Jim McDonough2-15/+15
(This used to be commit 10f1da3f4a9680a039a2aa26301b97e31c06c38d)
2003-05-26Fix list of servers in 'smbclient -L' (debian bug #194553, patch by Heine ↵Jelmer Vernooij1-1/+1
Larsen) (This used to be commit e9df7d2820441c63c35e7b4fc5b3cc594053781c)
2003-05-21fix for UNICODE plaintext passwords (bug #59) and fix smbclient to send the ↵Gerald Carter1-3/+16
unicode plain text password if negoitated (This used to be commit e7d635af80c844f17ff9f34c26c1e9c978951ce1)
2003-05-14spellingTim Potter3-3/+3
(This used to be commit 865c11275685c85124b506c9bbd2a8bde2e760b9)
2003-05-12Add NT quota support. Patch from Stefan (metze) MetzemacherAlexander Bokovoy1-0/+1
1. Allows to change quota settings for shared mount points from Win2K and WinXP from Explorer properties tab 2. Disabled by default and when requested, will be probed and enabled only on Linux where it works 3. Was tested for approx. two weeks now on Linux by two independent QA teams, have not found any bugs so far Documentation to follow (This used to be commit 4bf022ce9e45be85609426762ba2644ac2031326)
2003-05-10Fix from Tom.Lackemann@falconstor.com to correctly set the flags basedJeremy Allison1-1/+9
on the security entries sent. Jeremy. (This used to be commit 45953d59f707b58e66b980512afc7f929d360ad5)
2003-05-09Finally get NTLMv2 working on the client!Andrew Bartlett3-35/+102
With big thanks to tpot for the ethereal disector, and for the base code behind this, we now fully support NTLMv2 as a client. In particular, we support it with direct domain logons (tested with ntlm_auth --diagnostics), with 'old style' session setups, and with NTLMSSP. In fact, for NTLMSSP we recycle one of the parts of the server's reply directly... (we might need to parse for unicode issues later). In particular, a Win2k domain controller now supplies us with a session key for this password, which means that doman joins, and non-spnego SMB signing are now supported with NTLMv2! Andrew Bartlett (This used to be commit 9f6a26769d345d319ec167cd0e82a45e1207ed81)
2003-05-08Revert a patch that somehow slipped in...Volker Lendecke1-2/+2
Volker (This used to be commit 6cde3d4d655bbe1d81e68ec2ec7a23669ac82120)
2003-05-08This puts real netlogon connection caching to winbind. This becomesVolker Lendecke1-2/+2
important once we start doing schannel, as there would be a lot more roundtrips for the second PIPE open and bind. With this patch logging in to a member server is a matter of two (three if you count the ack...) packets between us and the DC. Volker (This used to be commit 5b3cb7725a974629d0bd8b707bc2940c36b8745e)
2003-05-07SMB Signing with NTLMv2 works!Andrew Bartlett1-11/+2
(well, under certain conditions :-) There is no length limit on the size of the authentication response added into the MD5 hash. (We had previously limited this to lengths like 40, 44 or 64 in attempts to make sense of what the SNIA spec tells us). Instead, the entire authentication response is added in. Currently, this only works on a Win2k domain members with a Samba PDC, becouse our NTLMv2 code currently fails against an Win2k PDC. However, this splits the problem in half - particularly as the NTLMv2 format is known, and even has an ethereal disector! (thanks tpot). Andrew Bartlett (This used to be commit 7645d3d28afbb8eea502c0e063df3afb3aa812f4)
2003-05-07Force ASCII for client messages. Patch from David Lee <t.d.lee@durham.ac.uk>Jeremy Allison1-3/+2
Jeremy. (This used to be commit f219e8309c7d17b332873e9283ab3c3796e7e799)
2003-05-05Allow the NTLMv2 functions to spit out both possible varients on the sessionAndrew Bartlett3-13/+25
key, so we can test it in ntlm_auth. I suspect the 'lm' version doesn't exist, but it's easy to change back. Andrew Bartlett (This used to be commit 5efd95622c411f123660b6613b86c7a68bba68e8)
2003-05-04Add doco to our SMB signing code.Andrew Bartlett1-5/+32
This should make it clearer what magic numbers refer to the magic numbers in the CIFS spec, and what bits and peices are being appended into the MD5 calculation where. Andrew Bartlett (This used to be commit 7f1c271cfb04f621e36f1acf60979652e82dc6f4)
2003-05-01Turn down some DEBUG()s and remove some duplicate code spotted by dfenwick.Andrew Bartlett1-1/+1
Andrew Bartlett (This used to be commit 542a8b1817d3930e03e08e16e9711cacceb6df61)
2003-04-23Merge HEAD's winbind into 3.0.Andrew Bartlett2-136/+25
This includes the 'SIDs Rule' patch, mimir's trusted domains cacheing code, the winbind_idmap abstraction (not idmap proper, but the stuff that held up the winbind LDAP backend in HEAD). Andrew Bartlett (This used to be commit d4d5e6c2ee6383c6cceb5d449aa2ba6c83eb0666)
2003-04-23Add a check to ensure that the server returns the correct device type, notAndrew Bartlett1-3/+0
just the correct error. This should help us avoid breaking NT4 IPC$ connections, for example. This has required that we don't overwrite the device type for IPC$ in our tcon&X code, but only smbwrapper even uses it, and a server that doesn't send a correct dev type breaks other things pretty badly. In any case, I'll 'fix' smbwrapper :-). Andrew Bartlett (This used to be commit a93057efcb6e639be05b7bdcb9729ed8f39f5f62)
2003-04-23Merge torture tests from HEAD - it looks like we had rather an incompleteAndrew Bartlett1-1/+31
merge last time. I hope this might fix a few failures on the build farm too. Andrew Bartlett (This used to be commit 0c837126923cc30fa60223a5a68d4f527971cc7b)
2003-04-21Merge from HEAD - save the type of channel used to contact the DC.Andrew Bartlett1-12/+20
This allows us to join as a BDC, without appearing on the network as one until we have the database replicated, and the admin changes the configuration. This also change the SID retreval order from secrets.tdb, so we no longer require a 'net rpc getsid' - the sid fetch during the domain join is sufficient. Also minor fixes to 'net'. Andrew Bartlett (This used to be commit 876e00fd112e4aaf7519eec27f382eb99ec7562a)
2003-04-21Merge SMB signing, cli buffer clobber and NTLMSSP signing tweaks from HEAD.Andrew Bartlett5-20/+50
(This used to be commit c6c4f69b8ddc500890a65829e1b9fb7a3e9839e9)
2003-04-20Merge a trivial fix across from HEAD. Not that thisVolker Lendecke1-1/+1
would work now... Volker (This used to be commit 8c70f657cfb2f2b32fbaa31112d7953a3a6dc775)
2003-04-17This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This ↵cvs2svn Import User1-0/+169
used to be commit a50dc3f836a898d1aef08afbd12e7221db24440a)
2003-04-16More merges from HEAD:Jelmer Vernooij4-104/+209
- Stephan Kulow's changes (fixing warnings in libsmbclient) - VFS modules - Seperating libs (This used to be commit 6e9b7802335428c88ecf4e44a0e2395ac58e96b5)
2003-04-16Store the type of 'sec channel' that we establish to the DC. If we are aAndrew Bartlett1-36/+29
workstation, we have to use the workstation type, if we have a BDC account, we must use the BDC type - even if we are pretending to be a workstation at the moment. Also actually store and retreive the last change time, so we can do periodic password changes again (for RPC at least). And finally, a couple of minor fixes to 'net'. Andrew Bartlett (This used to be commit 6e6b7b79edae3efd0197651e9a8ce6775c001cf2)
2003-04-15merge in metze' smbcquotas patch from HEADGerald Carter2-12/+15
(This used to be commit b6a77048886151435a4a5eeb9a04be44d397c504)
2003-04-15Add some more NT to unix error code mappings (from HEAD)Jelmer Vernooij1-3/+92
(This used to be commit 62dac3d6ebc72bec24f3c0df4c8d8e37029473e2)
2003-04-15This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This ↵cvs2svn Import User1-0/+633
used to be commit 35510176fd4feab6c1e3da2ee0ae791f9a064a2e)
2003-04-15Merge of server unavailable error string.Tim Potter1-0/+1
(This used to be commit 21d7dba977037b83fc1d6d86b5d3d4cae6eb683d)
2003-04-15Add string message for WERR_SERVER_UNAVAILABLE.Tim Potter1-0/+1
(This used to be commit 38efab087c86cab805c6b94c7455befaa9e94c5e)
2003-04-14Rebalance parentheses in cliquota.c when LARGE_SMB_OFF_T is false.Paul Green1-5/+5
(This used to be commit bd69cbce93054548b6d1e3bac89032ff4f693423)
2003-04-14Merge cliconnect.c so smbtree builds.Tim Potter1-1/+113
(This used to be commit 5df53e9d8a8b1861d9997a775cfd6d8fe472bdc4)
2003-04-14Whitespace syncup.Tim Potter1-1/+1
(This used to be commit 93101a93dabe2dd7a6420e90acf82e0e08dce572)
2003-04-13This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This ↵cvs2svn Import User1-0/+76
used to be commit 381649916ecbaddefbb6ee0e6137b7cc73eb54b1)
2003-04-11smbcquota patch from metzeGerald Carter3-7/+719
(This used to be commit 74fab8f0d24004b1dfd5ce0fd7402895652f941f)
2003-04-09This is the netlogon schannel client code. Try aVolker Lendecke1-0/+1
rpcclient -S pdc -U% -c "samlogon user password" and it should work with the schannel. Needs testing against platforms different from NT4SP6. Volker (This used to be commit eaef0d8aeff1aa5a067679be3f17e08d7434e1e8)
2003-04-09This is the netlogon schannel client code. Try aVolker Lendecke1-0/+1
rpcclient -S pdc -U% -c "samlogon user password" and it should work with the schannel. Needs testing platforms different from NT4SP6. Volker (This used to be commit ecd0ee4d248e750168597ccf79c389513bb0f740)
2003-04-07Only warn about short packets if we are already 'doing signing'.Andrew Bartlett1-1/+1
Andrew Bartlett (This used to be commit 9656b8709128f24dd63094d504a6646f99933c57)
2003-04-07Make this match head.Andrew Bartlett1-1/+1
(This used to be commit a718630961e713ca2bacc98ad0b7c2e996e20bf5)
2003-04-06Fix the handling of smb.conf in libsmbclient.Richard Sharpe1-6/+9
The right thing to do is to try for the user's local one in ~/.smbc/smb.conf, and if that fails, try the one in dyn_CONFIGFILE, and if that fails, keep going with the defaults but log a message. (This used to be commit 15fa48d19d178cf8bf214ea02f6c7a4c38890f71)
2003-04-06Clean up error messages on cli pipe disconnection, including adding the messageAndrew Bartlett1-4/+8
for broken-due-to-bad-sig. Andrew Bartlett (This used to be commit b010b6c2dc400a97eb2ad038cd1fdb34bbde2ef0)
2003-04-06SMB signing updates - this gets NTLMSSP signing workin to the point where IAndrew Bartlett3-13/+35
just need to get the verifiction code working - we get back a signiture from the server, and just can't verify it yet. This also brings the short-packet checks into common code, and breaks the connection if the server sends a signed reply, on an established connection, that fails the test. This breaks our read/write code at the moment, as we need to keep a list of outstanding packets. (signing is not enabled by default, unless the server demands it) Not for 3.0 till I fix the outstanding packet list. Andrew Barlett (This used to be commit 808d1fcf20153970d587cb631a08607beb09703a)
generated by cgit (git 2.34.1) at 2024-07-12 16:26:58 +0000