summaryrefslogtreecommitdiff
path: root/source3/smbd
AgeCommit message (Collapse)AuthorFilesLines
2001-11-03Added NT_USER_TOKEN into server_info to fix extra groups problem.Jeremy Allison7-67/+154
Got "medieval on our ass" about const warnings (as many as I could :-). Jeremy. (This used to be commit ee5e7ca547eff016818ba5c43b8ea0c9fa69b808)
2001-11-03anonymous logins are guest logins, so mark them as such. (Otherwise they canAndrew Bartlett1-1/+1
browse non-guest shares). (This used to be commit 7131fe3be4eb2c652f3afe2f3cd99d3f82e09654)
2001-11-03Minor cleanups/fixes in the NTLMv2 codeAndrew Bartlett1-6/+2
(This used to be commit 253790f6d71653b572c0174113b8559820de6bdd)
2001-11-03Move the test for non-SPNEGO session setups when using SPNEGO, becouse its aAndrew Bartlett1-5/+5
perfectly vailid behaviour for guest logins. (This used to be commit 4db8d70ad74cdbd74c0578e66377fd0233195aaa)
2001-11-01Various post AuthRewrite cleanups, fixups and tidyups.Andrew Bartlett4-27/+36
Zero out some of the plaintext passwords for paranoia Fix up some of the other passdb backends with the change to *uid_t rather than uid_t. Make some of the code in srv_netlog_nt.c clearer, is passing an array around, so pass its lenght in is definition, not as a seperate paramater. Use sizeof() rather than magic numbers, it makes things easier to read. Cope with a PAM authenticated user who is not in /etc/passwd - currently by saying NO_SUCH_USER, but this can change in future. Andrew Bartlett (This used to be commit 514c91b16baca639bb04638042bf9894d881172a)
2001-10-31This should fix up the compile with krb5.Andrew Bartlett1-7/+9
This needs to use the auth interface at some stage, but for now this will do. (This used to be commit 8dc4f2e44b150cdcdecd2f6028bf06907ff90cad)
2001-10-31When you make a data_blob() then you probably need to free it too...Andrew Bartlett1-0/+4
(This used to be commit 531e24973227ca4f1ae65ffb2454aedd5871de96)
2001-10-31Fix up domain logons. Tested with NT4.Andrew Bartlett1-1/+1
(This used to be commit c8b2718adfe114b74a155116c5e74f014d6df887)
2001-10-31This is a farily large patch (3300 lines) and reworks most of the AuthRewriteAndrew Bartlett11-511/+1086
code. In particular this assists tpot in some of his work, becouse it provides the connection between the authenticaion and the vuid generation. Major Changes: - Fully malloc'ed structures. - Massive rework of the code so that all structures are made and destroyed using malloc and free, rather than hanging around on the stack. - SAM_ACCOUNT unix uids and gids are now pointers to the same, to allow them to be declared 'invalid' without the chance that people might get ROOT by default. - kill off some of the "DOMAIN\user" lookups. These can be readded at a more appropriate place (probably domain_client_validate.c) in the future. They don't belong in session setups. - Massive introduction of DATA_BLOB structures, particularly for passwords. - Use NTLMSSP flags to tell the backend what its getting, rather than magic lenghths. - Fix winbind back up again, but tpot is redoing this soon anyway. - Abstract much of the work in srv_netlog_nt back into auth helper functions. This is a LARGE change, and any assistance is testing it is appriciated. Domain logons are still broken (as far as I can tell) but other functionality seems intact. Needs testing with a wide variety of MS clients. Andrew Bartlett (This used to be commit f70fb819b2f57bd57232b51808345e2319d52f6c)
2001-10-31SPNEGO works perfectly well with security=domain, so don't exclude it.Andrew Bartlett1-3/+7
(This used to be commit 26a9479ad450a5135e54b45d659bf3558892d9e6)
2001-10-31Added some extra fields to the auth_serversupplied_info structure.Tim Potter1-1/+13
To obtain the full group membership of a user (i.e nested groups on a win2k native mode server) it is necessary to merge this list of groups with the groups returned by winbindd when creating an nt access token. This breaks winbindd linking while AB and I sync up our changes to the authentication subsystem. (This used to be commit 4eeb7bcd783d7cfb3ac232f1faa035773007401d)
2001-10-30Spnego on the 'server' end of security=server just does not work, so set theAndrew Bartlett3-2/+14
flags so we just do a 'normal' session setup. Also add some parinoia code to detect when sombody attempts to do a 'normal' session setup when spnego had been negoitiated. Andrew Bartlett (This used to be commit 190898586fa218c952fbd5bea56155d04e6f248b)
2001-10-29Fix up auth_smbpasswd.c to use the password interface, rather than theAndrew Bartlett1-8/+8
structures directly. Andrew Bartlett (This used to be commit c2dc24ab6370236437b72b929e2a56e174163d78)
2001-10-29another few changes to the new mangle codeSimo Sorce1-2/+27
(This used to be commit 92f953c156a39b54230c52c6102a319a4a5ca798)
2001-10-29change some more functions to the new mangle interface.Simo Sorce1-9/+11
(This used to be commit 06a7c28ea1be81c4a53f9a5b885c37fdde31f75c)
2001-10-29- fix string len for an ucs2_to_dos function as any ucs2 char may be up to 4 ↵Simo Sorce1-4/+81
dos hars... - addedd ascii compatibility functions (This used to be commit 8b9302b7078f1dd5459051500ed19a696dc09ae0)
2001-10-29This commit is number 4 of 4.Andrew Bartlett2-13/+13
In particular this commit focuses on: Actually adding the 'const' to the passdb interface, and the flow-on changes. Also kill off the 'disp_info' stuff, as its no longer used. While these changes have been mildly tested, and are pretty small, any assistance in this is appreciated. ---- These changes introduces a large dose of 'const' to the Samba tree. There are a number of good reasons to do this: - I want to allow the SAM_ACCOUNT structure to move from wasteful pstrings and fstrings to allocated strings. We can't do that if people are modifying these outputs, as they may well make assumptions about getting pstrings and fstrings - I want --with-pam_smbpass to compile with a slightly sane volume of warnings, currently its pretty bad, even in 2.2 where is compiles at all. - Tridge assures me that he no longer opposes 'const religion' based on the ability to #define const the problem away. - Changed Get_Pwnam(x,y) into two variants (so that the const parameter can work correctly): - Get_Pwnam(const x) and Get_Pwnam_Modify(x). - Reworked smbd/chgpasswd.c to work with these mods, passing around a 'struct passwd' rather than the modified username --- This finishes this line of commits off, your tree should now compile again :-) Andrew Bartlett (This used to be commit c95f5aeb9327347674589ae313b75bee3bf8e317)
2001-10-29This commit is number 3 of 4.Andrew Bartlett7-27/+49
In particular this commit focuses on: Changing the Get_Pwnam code so that it can work in a const-enforced environment. While these changes have been mildly tested, and are pretty small, any assistance in this is appreciated. ---- These changes allow for 'const' in the Samba tree. There are a number of good reasons to do this: - I want to allow the SAM_ACCOUNT structure to move from wasteful pstrings and fstrings to allocated strings. We can't do that if people are modifying these outputs, as they may well make assumptions about getting pstrings and fstrings - I want --with-pam_smbpass to compile with a slightly sane volume of warnings, currently its pretty bad, even in 2.2 where is compiles at all. - Tridge assures me that he no longer opposes 'const religion' based on the ability to #define const the problem away. - Changed Get_Pwnam(x,y) into two variants (so that the const parameter can work correctly): - Get_Pwnam(const x) and Get_Pwnam_Modify(x). - Reworked smbd/chgpasswd.c to work with these mods, passing around a 'struct passwd' rather than the modified username (This used to be commit e7634f81c5116ff4addfb7e495f54b6bb78e8f77)
2001-10-29This commit is number 1 of 4.Andrew Bartlett1-0/+6
In particular this commit focusses on: Adding the new 'pass changed now' helper function. While these changes have been mildly tested, and are pretty small, any assistance in this is appreciated. (This used to be commit a8971a5448cf6d203b379c3ed01e331d5263c9ee)
2001-10-29Fixed confusing debug message - it was always printing uid 0 instead of theTim Potter1-1/+1
correct uid. (This used to be commit ad30a35ebc04f6a56c3ffb28bfb793557cf1fdf7)
2001-10-28fix a logic bug on max size of a returned string,Simo Sorce1-3/+9
this fixes also the bug with file renaming. (This used to be commit 5246d7609c3aff658fcd08a1f1c1bb6e11509e35)
2001-10-27smbd/notify_hash.c: Merged Herb's fix.Jeremy Allison1-2/+2
lib/debug.c: Fix for potential null pointer access. Jeremy. (This used to be commit 5a4d22dd66ab782f6161aa5a4162c0e7f1d811fb)
2001-10-26Fixed compile warning.Tim Potter1-1/+1
(This used to be commit 320c21b7a9e0a914b8a9523775df8895cb41256f)
2001-10-24Made default vfs ops static so we can use this symbol in actual modules.Tim Potter1-1/+1
(This used to be commit 398ced6eef7e52441ddc59fef70e4a50a96a73b7)
2001-10-23more compiler warningsHerb Lewis3-3/+3
(This used to be commit 12c10e876ea528fdf33e8ecfe42ab0ebb346b143)
2001-10-23get rid of compiler warnings (casts and delete unused variables)Herb Lewis4-7/+6
(This used to be commit 51cb4411df61d1caec9d84809b1a53a6a632f808)
2001-10-23IRIX compiler dies not like casts in macro argsHerb Lewis1-1/+1
(This used to be commit 1b3123df48ca586b3d9c86a152354690836f6beb)
2001-10-22ops, some testing code in compat function let only mangled name come back.Simo Sorce1-12/+12
(This used to be commit e48eb7b572de10481e928fb55243f47e8a3aa446)
2001-10-22server support for RAP session list functionJim McDonough2-0/+118
(This used to be commit d42c28fbadf577a23fb8c1da9e1c64a2f34fe133)
2001-10-22lets try the new mangling codeSimo Sorce2-7/+44
all the calls go through a compatibility interface will change that soon a new mangle.tdb file will be set in the lock directory it contains a static mapping longname<->manglename (This used to be commit 1ffacd2068a896d36a9e56b6e28c63e2f7e98762)
2001-10-22- fixed link order of krb5 libsAndrew Tridgell2-19/+6
- accept a wide range of principal names in session setup (This used to be commit 672df66296f540b606aa43effab5f021b8978e4b)
2001-10-21Ok, I know it's a language thing and it shouldn't matter.... but a kerberosJeremy Allison2-10/+10
name is a "principal", not a principle. English majors will complain :-). Jeremy. (This used to be commit b668d7d656cdd066820fb8044f24bcd4fda29524)
2001-10-21patch for neater output() function from vanceAndrew Tridgell1-351/+193
(This used to be commit 2472ecf7fc510115489baf0a888b511446b9c1fd)
2001-10-21change smbd to use HOST/hostname principle form until I work out howAndrew Tridgell1-22/+18
to use the other form in netjoin smb_wct is a char, not a word (This used to be commit 3dbb48b188980cf6c869dc762e3039dd375bf392)
2001-10-21change smbd to use HOST/hostname principle form until I work out howAndrew Tridgell1-1/+3
to use the other form in netjoin (This used to be commit 58cfa13d6576bd34ceed7ba6ad52bced96e50544)
2001-10-21support both old and new kerberos OIDsAndrew Tridgell1-1/+1
(This used to be commit eac164c7e650a8f855e7b662b126a5dfc5516927)
2001-10-21fixed the spnego detection code in session setupAndrew Tridgell1-2/+8
this gets share mode working again (This used to be commit 8286e5307ca47f14d27ee0d9bc9700d52151d56a)
2001-10-20Converted a bunch of 0x85 constants to SMBkeepalive.Tim Potter2-4/+4
(This used to be commit b16a15a13ed7d267c6366abaeeb3ccafa5776f5e)
2001-10-20Move from timestamp to gen count file id's for finding oplocked filesJeremy Allison5-993/+983
in a tdb. Jeremy. (This used to be commit 058ae6b58f61ef46013dd076af3a84de5fbaaab1)
2001-10-20Use asprintf, do bounds check, better rc logicJim McDonough1-33/+43
(This used to be commit 6a734158d92663873b7a9df517bec45a27ee9790)
2001-10-20crude fix for anonymous session setup with extended securityAndrew Tridgell1-1/+62
negotiated (This used to be commit b3caf2109090cb2b97a829913bee7e50e7eacba8)
2001-10-20better krb5 error handling (thanks andrewb!)Andrew Tridgell2-2/+7
(This used to be commit fd3a3daef3b8f7140e7006d30d23d739ac3aad2f)
2001-10-20finished auth when we get a valid kerberos ticketAndrew Tridgell1-8/+58
smbd now works with kerberos authentication if you use a MIT KDC and smbclient. Next step is to make it work with a windows client (This used to be commit e0c99e1f3708b155b8db99950f9ac6e27763368f)
2001-10-20add non_root_mode() checkAndrew Tridgell1-1/+1
(This used to be commit 96f910bae510fb45e2f1181c1e3ad607a50a64d7)
2001-10-20quick fix for krb5 compilation. I've told vance how to fix this moduleAndrew Tridgell1-5/+2
properly and will wait for him to send a patch (This used to be commit 7adad774d872a3f2424f49f364416e7c42409b90)
2001-10-19Add RAP net share add supportJim McDonough1-31/+113
(This used to be commit a70bc077a1ecc4b42254f83327c8d80c618e95f6)
2001-10-19print in a human readable format when the password expired.Jean-François Micouleau1-1/+1
J.F. (This used to be commit 255b197a5c92bfc18a567613bbffb013fd0a834d)
2001-10-19Fixed issues with changenotify only being called once in VC++.Jeremy Allison1-4/+29
Jeremy. (This used to be commit ce59e4a7729c45f3a84d877e1dbdfffa984060b9)
2001-10-19Tidy up debug in notify code.Jeremy Allison2-24/+35
Jeremy. (This used to be commit 7707c5e07385ce5ac3732715d586ad6c6b41de65)
2001-10-19Restored old Bmpx code - actually used by OS/2.Jeremy Allison3-61/+267
Jeremy. (This used to be commit 7c1688fd67c1bda1477aaf870371c825280db870)