Age | Commit message (Collapse) | Author | Files | Lines |
|
samba-technical a few weeks ago.
The idea here is to standardize the checking of user names and passwords,
thereby ensuring that all authtentications pass the same standards. The
interface currently implemented in as
nt_status = check_password(user_info, server_info)
where user_info contains (mostly) the authentication data, and server_info
contains things like the user-id they got, and their resolved user name.
The current ugliness with the way the structures are created will be killed
the next revision, when they will be created and malloced by creator functions.
This patch also includes the first implementation of NTLMv2 in HEAD, but which
needs some more testing. We also add a hack to allow plaintext passwords to be
compared with smbpasswd, not the system password database.
Finally, this patch probably reintroduces the PAM accounts bug we had in
2.2.0, I'll fix that once this hits the tree. (I've just finished testing
it on a wide variety of platforms, so I want to get this patch in).
(This used to be commit b30b6202f31d339b48d51c0d38174cafd1cfcd42)
|
|
allocation
to be done. Without it just does the ftruncate.
Jeremy.
(This used to be commit 0b052f103e82369088bc30724b86d8892c395cdb)
|
|
Jeremy.
(This used to be commit d82efc61ef16533c5652a5d4a9863f8317cb4ea2)
|
|
Jeremy.
(This used to be commit 840802f10677cb0009cb4df4c37c7d01aa5edacd)
|
|
Jeremy.
(This used to be commit 3e3155812c38cee65a5344a3879b07d27d160a1e)
|
|
for this bug report.
Jeremy.
(This used to be commit 50d8e5b22f2c2c792e3a2d33e00a1c9caab48981)
|
|
Jeremy.
(This used to be commit 82f81c830db53ce507c2a8e65db962f931141afd)
|
|
(This used to be commit b377f06fd90f607fa9e0e2e61981e835527b568c)
|
|
Digital UNIX).
Jeremy.
(This used to be commit 324ba0512ec84bb173c72be3dfd2447e0dc30e26)
|
|
problem with wrong token being used in current_user.
Jeremy.
(This used to be commit 2c7d2a1d533052d3556715439fcd66c5233d3137)
|
|
(This used to be commit 9a87d6f58fc005ddf2daf6fceb12a54fdc48f3b7)
|
|
- removed some unused mangling code
(This used to be commit 36af1c0dc41f72ec6a5c671fd6b4f6eb2590b8b4)
|
|
P_LIST format.
changed functions to use list instead of strings
addedd lp_list_substitute function
(This used to be commit 7257d07563ba21bd88733d5d2b4ec4829fab2507)
|
|
break code path that was invalid (ie. we were assuming
we could infer a non-levelII oplock when such an oplock
was detected - this may no longer be valid once we've
processed the break process dealing with the break will
change the state of it anyway.
This prevents the state where we get the following packet
trace :
client server
NTcreate ->
<- NTcreate resp
NTcreate ->
<- break to level II
ok - broken ->
<- break to none
Thanks to Alan Romeril for providing the trace that allowed
me to track this down.
Jeremy.
(This used to be commit c343e4f49070011986fc2ed4acd4ce690d5f1d71)
|
|
Fixed crash bug with un-zeroed talloced memory.
Jeremy.
(This used to be commit eea1c30df246e081e672d7132345d0fd35ad9841)
|
|
on username we already know are perfectly valid, and in their final form. In
particular we don't want to do a lookup for DOMAIN\nobody, it just does not
make sense, nor should we do map_username and the like if the username is as
specified in the vuid - we have done it already.
Andrew Bartlett
(This used to be commit 7cb517329b0fa2dec427a890a985c75cd467a3b0)
|
|
Restore debug message to level zero.
Jeremy.
(This used to be commit 0b13f495b31887d526b46a48a812fa3fd418ce8e)
|
|
Jeremy.
(This used to be commit d7da59f54eed69d50490205d6233bf4801c16998)
|
|
consistently.
Jeremy.
(This used to be commit f591ca9f25c54d3cdd0b76df472411e44c95ea47)
|
|
(This used to be commit 8a2f6fbacd275acc7b356169f4022df4860a813e)
|
|
This test was lost somehow...
(This used to be commit 065d8f69d5f4a8ffc062bc5592386ee1ac652969)
|
|
Jeremy.
(This used to be commit 8db233c8b5866df2b3f9f4ed64e7de95807cf371)
|
|
code not to do lookups for a particular domain. This allows winbind to
operate on a Samba PDC
(This used to be commit d472ee3a690fb6db03fd4536e4093a18fc37ddbb)
|
|
not change behaviour.
This should make my later diffs smaller, where I actualy start cleaning up this
mess...
Andrew Bartlett
(This used to be commit 04f090c224bb7ac3b53c430a591fce1fc939a81c)
|
|
(This used to be commit d5097b2f20c55ddcf4ae8da4d1d0a2fe91938a6b)
|
|
Andrew Bartlett
(This used to be commit 4f7b2f51b071ee02b9a2ac7decd9fa7d9e078c1a)
|
|
Jeremy.
(This used to be commit ed5a1f70c6d155788b62e9e6e8c5d97a5ca0858d)
|
|
if the password is blank. That ain't valid with encrypted passwords!
Jeremy, this changes the semantics of session setup. We no longer
automatically set guest=True when the client happens to choose their
username == the guest username. Instead we rely on the map_to_guest
code. I'm pretty sure this is now the right thing, but please look at
it carefully before putting it in 2.2
This is the bug that was causing the build farm to sometimes
fail. Basically we failed every 256 attempts - ie. when the first byte
of the encrypted password happened to be 0
(This used to be commit 4b35a3494c53fe38532fc12cf1c57e1a3715ad0f)
|
|
Jeremy.
(This used to be commit af5b649b017f703a14a69f77a9067efb9c6a8269)
|
|
for help on this.
Jeremy.
(This used to be commit 7efaefdf60e1880cf4ab97e1901248abd00acd79)
|
|
The problem is that ftruncate can't expand on VFAT, but it can on
ext2. That means our autoconf test is useless. I have recoded it to
use the alternative to ftruncate when then sys_ftruncate fails.
Jeremy, do you want this for 2.2.1?
(This used to be commit 970236ee9926b64c0b39bd8a36b2a9317206873c)
|
|
(This used to be commit a1dee993cbf52e7232b65323430c8574843eb168)
|
|
(This used to be commit 3b9eb528f56b325399e5a4588242bb6d9f9226e2)
|
|
pretty cool
(This used to be commit 04575ff17b9b5fe802e66bb8dd1948317ab35485)
|
|
can't redefine them. damn.
(This used to be commit c41fc06376d1a2b83690612304e85010b5e5f3cf)
|
|
This commit gets rid of all our old codepage handling and replaces it with
iconv. All internal strings in Samba are now in "unix" charset, which may
be multi-byte. See internals.doc and my posting to samba-technical for
a more complete explanation.
(This used to be commit debb471267960e56005a741817ebd227ecfc512a)
|
|
(This used to be commit 657836599a847578096696af27cd7c9f0d52c931)
|
|
set for a share.
Jeremy.
(This used to be commit 8f57233c0f871763bc3657d754c894dbd29ae501)
|
|
Jeremy.
(This used to be commit 110061ff5a0de7a5d7c5ee003d85d4d600c2531c)
|
|
Jeremy.
(This used to be commit 310d2af6b0797cbd4f776b5c6c5b90a5d86b1aa9)
|
|
of code that were unclear.
Chris -)-----
(This used to be commit c2977be3408645499915d728538ba2c65b97614f)
|
|
lockingX calls - use that instead of smb_pid in the packet.
Jeremy.
(This used to be commit a3925cb9c6303ce24e5fecad6c8f3a0ba78b9ee0)
|
|
(This used to be commit 200110a3b4caeb0d8be87f02476af29165e35ada)
|
|
Clarion locktest.
Jeremy.
(This used to be commit 5c42845b5bb6fafd0ebf93fbdd23d9bf861da865)
|
|
Added vfs calls to symlink() and readlink() with appropriate configure
checks.
Jeremy.
(This used to be commit c24e6b41ea60ab4bac2fcd19da947851d6df3c7c)
|
|
server, Win9x only sends \PIPE instead of \PIPE\. Looks suspiciously like
an off-by one bug in the Win9x dce/rpc pipe code.
(This used to be commit b4a9079833c261705e18fdcaab752cb5292a078f)
|
|
Jeremy.
(This used to be commit 52143c08536a5f5d888b78b4769c06f7a0a2992b)
|
|
Andrew Bartlett
(This used to be commit b33000cdc0cafd4888c3f07c56050626743abd14)
|
|
Jeremy.
(This used to be commit fa721b4adfbcac4827251b02f6af7f0b5211c104)
|
|
instead of a define
(This used to be commit e2ecff419fdc0a0dc7551b33b377dc11061ef2a3)
|