Age | Commit message (Collapse) | Author | Files | Lines |
|
(This used to be commit b4e79ab34b7df4687966f4ca81b575dce8503775)
|
|
(This used to be commit 19cd6a1dc446830c1448f4a21a915ea8994dc268)
|
|
Authentication Protocol (CRAP) takes a tuple of (username, random
challenge, encrypted lm password, encrypted nt password) where the
passwords are encrypted with the random challenge ala ntlmssp.
(This used to be commit 11f72a78e3a16bbb17b576d80b47a9eb818ee428)
|
|
Jeremy.
(This used to be commit b4fa49fe13cb93d578b1714d5863a9f50395bf65)
|
|
Jeremy.
(This used to be commit 381c02e6389dbb41fa66a854d7293594fd4bd0a6)
|
|
(This used to be commit 73addddb2e038946e38a6a15f46f61148a49ac08)
|
|
many possible mem leaks, and segfaults fixed.
someone should port this fix to 2.2 also.
(This used to be commit fa8e55b8b465114ce209344965c1ca0333b84db9)
|
|
In particuar, it moves the domain_client_validate stuff out of
auth_domain.c to somwhere where they (I hope) they can be shared
with winbind better. (This may need some work)
The main purpose of this patch was however to improve some of the
internal documentation and to correctly place become_root()/unbecome_root()
calls within the code.
Finally this patch moves some more of auth.c into other files, auth_unix.c
in this case.
Andrew Bartlett
(This used to be commit ea1c547ac880def29f150de2172c95213509350e)
|
|
samba-technical a few weeks ago.
The idea here is to standardize the checking of user names and passwords,
thereby ensuring that all authtentications pass the same standards. The
interface currently implemented in as
nt_status = check_password(user_info, server_info)
where user_info contains (mostly) the authentication data, and server_info
contains things like the user-id they got, and their resolved user name.
The current ugliness with the way the structures are created will be killed
the next revision, when they will be created and malloced by creator functions.
This patch also includes the first implementation of NTLMv2 in HEAD, but which
needs some more testing. We also add a hack to allow plaintext passwords to be
compared with smbpasswd, not the system password database.
Finally, this patch probably reintroduces the PAM accounts bug we had in
2.2.0, I'll fix that once this hits the tree. (I've just finished testing
it on a wide variety of platforms, so I want to get this patch in).
(This used to be commit b30b6202f31d339b48d51c0d38174cafd1cfcd42)
|
|
(This used to be commit 6e698d65ecb13b0b46d15bce7e0314fa1a46a13a)
|
|
(This used to be commit 7b3d030e1f869a842822d9a356a027cca6f3a725)
|
|
cli_samr_query_dispinfo().
(This used to be commit d5f12bc53074d574a503e7183887fdcec9bb9dd4)
|
|
NT. Note this can be done completely anonymously.
(This used to be commit 96bd7bdd0b4f6572c678c7b1bc5ffe733e632fda)
|
|
works much better with trusted domains whose DCs cannot be reached.
I'm pretty impressed with how much faster winbindd is in HEAD rather than
TNG. A lot fewer unecessary name lookups are performed and it feels a lot
zippier now.
(This used to be commit 36413784aec5819c83e5e469ce4c7bb5d468e980)
|
|
strchr() for the moment
(This used to be commit c2c1f2027e6e623bba59610e3aa41618773e6361)
|
|
code not to do lookups for a particular domain. This allows winbind to
operate on a Samba PDC
(This used to be commit d472ee3a690fb6db03fd4536e4093a18fc37ddbb)
|
|
(This used to be commit 001129e2153633dbd079889b11331e9c27786e5b)
|
|
can't redefine them. damn.
(This used to be commit c41fc06376d1a2b83690612304e85010b5e5f3cf)
|
|
This commit gets rid of all our old codepage handling and replaces it with
iconv. All internal strings in Samba are now in "unix" charset, which may
be multi-byte. See internals.doc and my posting to samba-technical for
a more complete explanation.
(This used to be commit debb471267960e56005a741817ebd227ecfc512a)
|
|
instead of a define
(This used to be commit e2ecff419fdc0a0dc7551b33b377dc11061ef2a3)
|
|
but the code suffered from bitrot and is not now reentrant. That means
we can get bizarre behaviour
i've fixed this by making next_token() reentrant and creating a
next_token_nr() that is a small non-reentrant wrapper for those lumps
of code (mostly smbclient) that have come to rely on the non-reentrant
behaviour
(This used to be commit 674ee2f1d12b0afc164a9e9072758fd1c5e54df7)
|
|
Don't call find_domain_from_name() from winbindd_kill_connections() as
you get stuck in an infinite loop!
(This used to be commit 8e982941d82b813197f2a9720149e60f629b5b20)
|
|
(This used to be commit 6bd1ba9a0432ab5e6c2ebe6ea0fa486960fd4289)
|
|
(This used to be commit bb01d2151cde866f0e2d91ee7c58439eeb382c48)
|
|
(This used to be commit 9a77f8530f58852f07d523facc61ea1daf6184d7)
|
|
(This used to be commit 15efbbd2fea9cba819a88644a151cb872377621a)
|
|
causing mayhem throughout the tree.
(This used to be commit 369c911b446c311d4a5c8b4fddfe7fbffffefeba)
|
|
(This used to be commit dbb770ecc6dbbc4c38f31fc6b9747e0d8bc6e155)
|
|
(This used to be commit f3c70e4248814e545a9ff64402cbd11020b159de)
|
|
(This used to be commit 8ec9c87b5d1a7dae17d5b1a30f58effaf5e69e4b)
|
|
(This used to be commit 086f332bb11ff0b2474554f81ef257e6a444a5cc)
|
|
Fixed some compiler warnings.
(This used to be commit b44d3f912c346e00f41a4ff59877adad3b9c3bb0)
|
|
Jeremy.
(This used to be commit d52bc4d219bd07e656986e7754ea6e238c626d77)
|
|
(This used to be commit 083b74c743f0026693fa0fbe665ed08a3ac706b8)
|
|
Jeremy.
(This used to be commit 86557d633648f279e6ceda4da38801889ca4ed95)
|
|
Jeremy.
(This used to be commit c38a465bef91bc54cd3f3ce81e5a9c818f429801)
|
|
(This used to be commit 03b1cab9a80264f0c940c45d0557ef7efe685095)
|
|
(This used to be commit a92a0d061bd322b9d3a1fe13c6ce2d2e1f070ef7)
|
|
(This used to be commit 0e03209af6f70c3c0c52072fe904ba5750676b63)
|
|
(This used to be commit 014859b62b31ceff5b5ca3d1699792e362c77a85)
|
|
by lp_string() calling standard_sub_basic().
(This used to be commit 011d45943594a7a4091101b1eec930d13f0a9d12)
|
|
(SCO).
(This used to be commit d761a7deb3696fc0742fb349868317f42825290e)
|
|
and 'getent group' and have most things working.
(This used to be commit a7728bfa52291ec3149fbb704d7b30689af83e7c)
|
|
so all the glue functions are prefixed with wb_ to avoid conflicts with
the old rpc_client stuff which is still a dependency of smbd/nmbd.
(This used to be commit 873e672b90e85e092102e10966e9f93f4fa6814f)
|
|
(This used to be commit f8c83ce28b01ffd188dd10f0c731defaacb0fb45)
|
|
(This used to be commit 38ab3b31b5dc39fb59f224b399bb9c2269f1c933)
|
|
but I haven't actually run it yet so it probably doesn't work. (-:
(This used to be commit 59f95416b66db6df05289bde224de29c721978e5)
|
|
(This used to be commit 1e7b1c71b9c409859bcf0aeb3d5785acc4aee027)
|
|
(This used to be commit d854d01d1197300f637eb38c243f8b0b80cf24ba)
|
|
the libnss_winbind.so from head now works with
the winbindd from tng
(This used to be commit 67ccfd2826548a6ca22562f9fb3ae156a57bd7db)
|