summaryrefslogtreecommitdiff
path: root/source3/rpcclient/cmd_netlogon.c
AgeCommit message (Collapse)AuthorFilesLines
2009-04-14Make Samba3 use the new common libcli/auth codeAndrew Bartlett1-4/+4
This is particuarly in the netlogon client (but not server at this stage)
2009-04-14Rework Samba3 to use new libcli/auth code (partial)Andrew Bartlett1-0/+1
This commit is mostly to cope with the removal of SamOemHash (replaced by arcfour_crypt()) and other collisions (such as changed function arguments compared to Samba3). We still provide creds_hash3 until Samba3 uses the credentials code in netlogon server Andrew Bartlett
2009-02-25s3-rpcclient: add test command to call netr_LogonGetCapabilities (for bug ↵Günther Deschner1-0/+44
#6100). Guenther
2008-11-06s3-rpcclient: add database_redo command.Günther Deschner1-0/+67
Guenther
2008-11-01Rename dos_errstr() to win_errstr() for consistency with Samba 4.Jelmer Vernooij1-1/+1
2008-10-27s3-rpcclient: add getdcsitecoverage call.Günther Deschner1-0/+38
Guenther
2008-10-15s3: fix samlogon client and server calls.Günther Deschner1-1/+1
Guenther
2008-07-21Refactoring: rpcclient uses ndr_syntax_id instead of pipe_idxVolker Lendecke1-19/+19
(This used to be commit 85db87c451dacf80e9575c04e9e08c625b3f1199)
2008-04-20Introduce rpccli_set_timeout()Volker Lendecke1-4/+6
Reduce dependency on "cli" member of rpc_pipe_client struct (This used to be commit 2e4c1ba38963cffe4c3f25ab24bc28975f2fc291)
2008-04-20Add "desthost" to rpc_pipe_clientVolker Lendecke1-15/+15
This reduces the dependency on cli_state (This used to be commit 783afab9c891dd7bcb78895b2a639b6f3a0edf5b)
2008-02-27Add my copyright.Günther Deschner1-0/+1
Guenther (This used to be commit d078a8757182d84dfd3307a2e1b751cf173aaa97)
2008-02-15Use rpccli_netr_DatabaseSync2() in rpcclient.Günther Deschner1-15/+44
Guenther (This used to be commit 042173b00e023b4d4e7739524e24baa8803850bd)
2008-02-15Use rpccli_netr_DatabaseDeltas() in rpcclient.Günther Deschner1-87/+159
Guenther (This used to be commit 72ad42fee30242eb57ae0db825127fdb8f9375fd)
2008-02-14Remove accidential commit.Günther Deschner1-1/+1
Guenther (This used to be commit 2ab1167e156e989f4b60fcb4dbc7d7eefc64bed0)
2008-02-13Fix logonctrl2 command in rpcclient.Günther Deschner1-15/+55
Guenther (This used to be commit c58be24cd43092e5ebf7aa84f167a5cc8344edfc)
2008-02-13Use rpccli_netr_LogonControl() in rpcclient.Günther Deschner1-17/+39
Guenther (This used to be commit d54456f3c42f123af5516c6f75c87b279fdc775f)
2008-02-08Use rpccli_netr_DsRGetDCName() in rpcclient and winbindd.Günther Deschner1-10/+16
Guenther (This used to be commit 4f3e97cbae3df8e12db37b8a8a0eaee947fa723a)
2008-02-07Use rpccli_netr_DsRGetSiteName() in rpcclient.Günther Deschner1-6/+13
Guenther (This used to be commit 609c40fdd9b4c94cdf5b25cd6ac39a2a57432e0d)
2008-02-07Use rpccli_netr_GetAnyDCName and rpccli_netr_GetDCName everywhere.Günther Deschner1-18/+34
Guenther (This used to be commit 8abeea9922ac09e7307730ee7695453718356873)
2008-01-30Add netrenumtrusteddomains() and netrenumtrusteddomainsex() cmds to rpcclient.Günther Deschner1-0/+71
Guenther (This used to be commit 6bbe0fde6ebb5c1ea00ea24d3bdbffbf6f246bd6)
2008-01-29Remove last caller of rpccli_ds_enum_domain_trusts().Günther Deschner1-0/+1
I added an alias in rpcclient's netlogon command table. Guenther (This used to be commit 1a900e08e92484407d69661517f08e675a3c352a)
2008-01-25Add cmd_netlogon_dsr_getforesttrustinfo and deregisterdnsrecords to rpcclient.Günther Deschner1-0/+49
Guenther (This used to be commit 227f5755c8844dbff8d66adec3d7fd94b583358f)
2008-01-25Use rpccli_netr_DsRGetDCNameEx and rpccli_netr_DsRGetDCNameEx2 in rpcclient.Günther Deschner1-34/+99
Guenther (This used to be commit 2caed3f816d29bd7dfa36df3ddd6aeba5bbfa252)
2008-01-25Add cmd_netlogon_dsr_enumtrustdom() to rpcclient.Günther Deschner1-0/+48
Guenther (This used to be commit cb44c901c1bc66da9f3636020401238ce0005105)
2008-01-24Add cmd_netlogon_gettrustrid() to rpcclient.Günther Deschner1-0/+42
Guenther (This used to be commit 231a4d051f24af7cf5bf13d7dd613f33dc06f21a)
2007-12-21Kill fstring in getdcname & getanydcname return.Günther Deschner1-4/+4
Guenther (This used to be commit b7383818168863a7ba43c2456f8c44e96e76707a)
2007-12-15s/sid_to_string/sid_to_fstring/Volker Lendecke1-1/+1
least surprise for callers (This used to be commit eb523ba77697346a365589101aac379febecd546)
2007-10-10r25294: Tidy up callers of unistr2_to_ascii() to pass sizeof(target_area) toMichael Adam1-4/+4
the maxeln parameter instead of sizeof(target_area) - 1 (or even sizeof(fstring) - 1 in some places. I hope these were really all there were. Michael (This used to be commit 9a28be220df622322857dfe102fa35e108f932dc)
2007-10-10r24742: Add experimental DsGetDcName() call (will be used by krb5 locator ↵Günther Deschner1-46/+15
for fine grained KDC DNS queries). Guenther (This used to be commit 3263cd680fe429430d789b284464fca72ef45719)
2007-10-10r23784: use the GPLv3 boilerplate as recommended by the FSF and the license textAndrew Tridgell1-2/+1
(This used to be commit b0132e94fc5fef936aa766fb99a306b3628e9f07)
2007-10-10r23779: Change from v2 or later to v3 or later.Jeremy Allison1-1/+1
Jeremy. (This used to be commit 407e6e695b8366369b7c76af1ff76869b45347b3)
2007-10-10r23380: netr_getdcname returns WERROR not NTSTATUS.Günther Deschner1-7/+7
Guenther (This used to be commit 5e75ea7f2b568d76c8ced5f43171741532cc97c2)
2007-10-10r23219: Two warningsVolker Lendecke1-1/+1
(This used to be commit eccd50abdaed3e4e06cc5da5473ca1beeb3fc49a)
2007-10-10r23210: Very funny, we thought to use netr_GetDcName (e.g. in winbind) but ↵Günther Deschner1-12/+12
were using netr_GetDcAnyName all the time (which is the correct thing to do). Fix the naming and opcode mixup in all branches. Guenther (This used to be commit def6464c872a5939f0028837254f2c019d2d71c8)
2007-10-10r23127: Fill in some more netlogon dsgetdcname flavours (netr_DsRGetDCNameEx,Günther Deschner1-11/+183
netr_DsRGetDCNameEx2) and add new ds request and reply flags, also add some more WERROR codes. Guenther (This used to be commit 37ae7f419702c563bcd0d9c27c02bde7efd34dd7)
2007-10-10r21259: Fix coverity bug id #340. No way to processJeremy Allison1-1/+1
logon parameter as the code was written. Jeremy. (This used to be commit 7f1aee96a09d77de76b2cdbe5c2e6f27e6968b09)
2007-10-10r20970: Allow to define workstation for samlogon in rpcclient (for testing).Günther Deschner1-7/+11
Guenther (This used to be commit 5d4747fdf2e5874cb5d2238ee62e4fcac1676134)
2007-10-10r19353: Add "timeout" command for rpcclient.Günther Deschner1-2/+2
Guenther (This used to be commit 4106a56d3f4edb2e07e876204743a1cb028c950a)
2007-10-10r19161: Add NET_GETANYDCNAME (getdcname only gives the PDC while getanydcnameGünther Deschner1-1/+39
gives just any DC), also make sure to set timeouts in rpcclient accordingly so that we actually get the DC's reply. Guenther (This used to be commit 6091c8152a3998d2503cb0911a217ee904509633)
2007-10-10r19143: getdcname on the NETLOGON pipe returns WERROR, not NTSTATUS.Günther Deschner1-7/+7
Guenther (This used to be commit 44e228ac796fca2db8509915067511ed705032bf)
2007-10-10r18188: merge 3.0-libndr branchJelmer Vernooij1-3/+2
(This used to be commit 1115745caed3093c25d6be01ffee21819fb0a675)
2007-10-10r14495: Allow to play with the logon_param flag when testing samlogons.Günther Deschner1-22/+21
Guenther (This used to be commit 52d721b6384cf6f94e1ebb59d21bf09737a539b5)
2007-10-10r11853: Add Dsr_GetSiteName (handy for experimenting with GPOs).Günther Deschner1-0/+26
Guenther (This used to be commit c54430a7b5e40d3bdf8afdc813eb722c0a3b861e)
2007-10-10r11706: Implement dsr_getdcname client code. It's handy: It not only gives ↵Volker Lendecke1-0/+30
you the IP address but also the fqdn of the remote dc and site info. Volker (This used to be commit 62d01ce7e6c14971084c208ab61f379cb172cb22)
2007-10-10r11573: Adding Andrew Bartlett's patch to make machine accountJeremy Allison1-1/+1
logons work if the client gives the MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT or MSV1_0_ALLOW_WORKSTATION_TRUST_ACCOUNT flags. This changes the auth module interface to 2 (from 1). The effect of this is that clients can access resources as a machine account if they set these flags. This is the same as Windows (think of a VPN where the vpn client authenticates itself to a VPN server using machine account credentials - the vpn server checks that the machine password was valid by performing a machine account check with the PDC in the same was as it would a user account check. I may add in a restriction (parameter) to allow this behaviour to be turned off (as it was previously). That may be on by default. Andrew Bartlett please review this change carefully. Jeremy. (This used to be commit d1caef866326346fb191f8129d13d98379f18cd8)
2007-10-10r10656: BIG merge from trunk. Features not copied overGerald Carter1-33/+19
* \PIPE\unixinfo * winbindd's {group,alias}membership new functions * winbindd's lookupsids() functionality * swat (trunk changes to be reverted as per discussion with Deryck) (This used to be commit 939c3cb5d78e3a2236209b296aa8aba8bdce32d3)
2007-10-10r1590: Small fixes from Günther DeschnerVolker Lendecke1-7/+3
(This used to be commit 2d68fdf06b3b027227ab77372b001b13fd2b494d)
2004-04-02Implement NETLOGON GetDCName client side. You can ask a DC for the name ofVolker Lendecke1-0/+26
a DC it trusts. Volker (This used to be commit ae6840320ff47827c2817549fe3133a57e3fe77f)
2003-08-19- Fix the kerberos downgrade problem:Andrew Bartlett1-49/+35
- When connecting to the NETOGON pipe, we make a call to auth2, in order to verify our identity. This call was being made with negotiation flags of 0x1ff. This caused our account to be downgraded. If we instead make the call with flags > 1ff (such as 0x701ff), then this does not occour. - This is *not* related to the use of kerberos for the CIFS-level connection My theory is that Win2k has a test to see if we are sending *exactly* what NT4 sent - setting any other flags seems to cause us to remain intact. Also ensure that we only have 'setup schannel' code in a few places, not scattered around cmd_netlogon too. Andrew Bartlett (This used to be commit e10f0529fe9d8d245b3cd001cce6a9a86896679c)
2003-08-14Change Samba to always use extended security for it's guest logins, (ie,Andrew Bartlett1-0/+2
NTLMSSP with "" username, NULL password), and add --machine-pass (-P) to all of Samba's clients. When connecting to an Active Directory DC, you must initiate the CIFS level session setup with Kerberos, not a guest login. If you don't, your machine account is demoted to NT4. Andrew Bartlett (This used to be commit 3547cb3def45a90f99f67829a533eac1ccba5e77)