summaryrefslogtreecommitdiff
path: root/source3/utils
AgeCommit message (Collapse)AuthorFilesLines
2001-12-03added a tdb to store the account policy informations.Jean-François Micouleau1-12/+10
You can change them with either usermanager->policies->account or from a command prompt on NT/W2K: net accounts /domain we can add a rpc accounts to the net command. As the net_rpc.c is still empty, I did not start. How should I add command to it ? Should I take the rpcclient/cmd_xxx functions and call them from there ? alse changed the SAM_UNK_INFO_3 parser, it's an NTTIME. This one is more for jeremy ;-) J.F. (This used to be commit bc28a8eebd9245ce3004ae4b1a359db51f77bf21)
2001-12-03This change reworkes the connection code for both rpcclient and net newAndrew Bartlett2-73/+15
'net' untility. This should make it easier to port rpcclient code across to net. It also allows SPNEGO (the NTLMSSP subsystem in particular) to work, becouse it kills off the early destruction of the clear-text password. Andrew Bartlett (This used to be commit eee925861a3af3aa16efa3b1700a980c9510c14e)
2001-12-03Forgot this one with the last commit...Andrew Bartlett1-0/+36
Andrew Bartlett (This used to be commit 8dbd9702d829eaefcdab8e3f8a4750befa884234)
2001-12-03This is another major rework of the 'net' command.Andrew Bartlett3-1057/+1273
This time, all the existing functionality has been moved into 'net rap', ready for new commands in the 'net ads' and 'net rpc' categories. In particular, we hope to have the abilty to autoselect the appropriate backend to use based on smb.conf or other paramaters. This will allow 'net user' to work no matter what the remote server. The new 'net rpc' command will soon gain a 'net rpc join' and a 'net rpc user' based on the existing samba code. Also in this commit, the connection establishment code has been almost entirly reworked, and now has some minor sense of sainity to it. In particular, we can now connect to hosts *other* than localhost! We also have the ability to state on a per-command basis whether the 'localhost' is a sane default value. (A net join, for example, would not be sane against localhost). Unfortunetly we have had to make the basic paramaters global variables, but the 'cli' is not opened and closed on a per-command basis. Andrew Bartlett (This used to be commit 8739d426caabe3794a018dd28ab139b08f88b603)
2001-12-01not used any moreAndrew Tridgell1-144/+0
(This used to be commit 97627e424a1de3df0a6f7a9bfaaf3ece4dd2036d)
2001-11-30Renamed sid field in SEC_ACE to trustee to be more in line with MS'sTim Potter1-10/+22
definitions. (This used to be commit 9712d3f15a47155f558d0034ef71fd06afb11301)
2001-11-29Changed again how the privilege list is handled in the group mapping code.Jean-François Micouleau1-12/+9
This time it's a PRIVILEGE_SET struct instead of a simple uint32 array. It makes much more sense. Also added a uint32 systemaccount to the GROUP_MAP struct as some privilege showing in USRMGR.EXE are not real privs but a bitmask flag. I guess it's an heritage from NT 3.0 ! I could setup an NT 3.1 box to verify, but I'm too lazy (yes I still have my CDs). Added 3 more LSA calls: SetSystemAccount, AddPrivileges and RemovePrivileges, we can manage all this privilege from UserManager. Time to change the NT_USER_TOKEN struct and add checks in all the rpc functions. Fun, fun, fun. J.F. (This used to be commit 3f0a9ef2b8c626cfa2878394bb7b642342342bf3)
2001-11-29Make better use of the ads_init() function to get the kerberos relam etc.Andrew Bartlett2-6/+8
This allows us to use automagically obtained values in future, and the value from krb5.conf now. Also fix mem leaks etc. Andrew Bartlett (This used to be commit 8f9ce717819235d98a1463f20ac659cb4b4ebbd2)
2001-11-28fixed some krb5 ifdefsAndrew Tridgell1-1/+1
(This used to be commit 23ef22f11700bbaa5778a9678a990a2b041fcefe)
2001-11-28fix a bunch of places where we can double-free a cli structureAndrew Tridgell3-10/+0
(This used to be commit e2ba2383c9f679c076749a8f4fccefc3559e37ec)
2001-11-26prevent proto from picking up this as a defintion for 'main()' becoue it ↵Andrew Bartlett1-1/+1
conflicts with nmbd's definition. (This used to be commit 70e9c2efaada4be609ff053d216d554cb036df4e)
2001-11-26More compiler warnings fixed. Some minor reformatting.Tim Potter2-94/+143
(This used to be commit 8227f6909cca67fcc1a8455f4b386df7778ef2e7)
2001-11-26Got medieval on another pointless extern. Removed extern struct ipzeroTim Potter4-12/+10
and replaced with two functions: void zero_ip(struct in_adder *ip); BOOL is_zero_ip(struct in_addr ip); (This used to be commit 778f5f77a66cda76348a7c6f64cd63afe2bfe077)
2001-11-25Minor typosVolker Lendecke1-2/+2
(This used to be commit 1c9d951f86609b08e5660b0fc966c5e5058a3ce2)
2001-11-25portability fixesAndrew Tridgell1-3/+6
(This used to be commit 09127d85dc91037c9d0280b57d48d23e93a39f8b)
2001-11-25fixed typoAndrew Tridgell1-1/+1
(This used to be commit b14ae495028da4d2b995cefa786746d2c649460c)
2001-11-25better helpAndrew Tridgell1-1/+7
(This used to be commit b390d6eef95ee6094eb193006bc2f23c40291026)
2001-11-25use generate_random_str()Andrew Tridgell1-47/+4
(This used to be commit 720c50a7514febdd7cfd6ce40b7b5a0c5cc0abf8)
2001-11-25added "net ads user" and "net ads group" commandsAndrew Tridgell1-19/+66
(This used to be commit f482583139eedb75a23c7a720dca4e8fb7070fd5)
2001-11-25added "net ads status" commandAndrew Tridgell1-14/+39
(This used to be commit ae0eabd04c97320c2cf3c4575263c53cf61d03ea)
2001-11-25made a "net ads" command, currently with "net ads join" and "net ads leave"Andrew Tridgell2-4/+191
(This used to be commit 2f8fa175b189c2d11676245b01d3201c0a4f0826)
2001-11-24added "net join" commandAndrew Tridgell2-185/+191
this completes the first stage of the smbd ADS support (This used to be commit 058a5aee901e6609969ef7e1d482a720a84a4a12)
2001-11-24rewrote net.cAndrew Tridgell1-1260/+1071
The rewrite fixes a number of things: - much better command line parsing - fixed usage of static and const - better finding of hosts - clean internal separation of sub-functions - expandable design (This used to be commit 0f88d9c50e419504b9ceca5eadbe30ee04fa42dc)
2001-11-24This is another rather major change to the samba authenticaionAndrew Bartlett1-6/+0
subystem. The particular aim is to modularized the interface - so that we can have arbitrary password back-ends. This code adds one such back-end, a 'winbind' module to authenticate against the winbind_auth_crap functionality. While fully-functional this code is mainly useful as a demonstration, because we don't get back the info3 as we would for direct ntdomain authentication. This commit introduced the new 'auth methods' parameter, in the spirit of the 'auth order' discussed on the lists. It is renamed because not all the methods may be consulted, even if previous methods fail - they may not have a suitable challenge for example. Also, we have a 'local' authentication method, for old-style 'unix if plaintext, sam if encrypted' authentication and a 'guest' module to handle guest logins in a single place. While this current design is not ideal, I feel that it does provide a better infrastructure than the current design, and can be built upon. The following parameters have changed: - use rhosts = This has been replaced by the 'rhosts' authentication method, and can be specified like 'auth methods = guest rhosts' - hosts equiv = This needs both this parameter and an 'auth methods' entry to be effective. (auth methods = guest hostsequiv ....) - plaintext to smbpasswd = This is replaced by specifying 'sam' rather than 'local' in the auth methods. The security = parameter is unchanged, and now provides defaults for the 'auth methods' parameter. The available auth methods are: guest rhosts hostsequiv sam (passdb direct hash access) unix (PAM, crypt() etc) local (the combination of the above, based on encryption) smbserver (old security=server) ntdomain (old security=domain) winbind (use winbind to cache DC connections) Assistance in testing, or the production of new and interesting authentication modules is always appreciated. Andrew Bartlett (This used to be commit 8d31eae52a9757739711dbb82035a4dfe6b40c99)
2001-11-23Changed how the privileges are stored in the group mapping code. It's nowJean-François Micouleau1-18/+38
an array of uint32. That's not perfect but that's better. Added more privileges too. Changed the local_lookup_rid/name functions in passdb.c to check if the group is mapped. Makes the LSA rpc calls return correct groups Corrected the return code in the LSA server code enum_sids. Only enumerate well known aliases if they are mapped to real unix groups. Won't confuse user seeing groups not available. Added a short/long view to smbgroupedit. now decoding rpc calls to add/remove privileges to sid. J.F. (This used to be commit f29774e58973f421bfa163c45bfae201a140f28c)
2001-11-23Removed TimeInit() call from every client program (except for one placeTim Potter11-20/+0
in smbd/process.c where the timezone is reinitialised. Was replaced with check for a static is_initialised boolean. (This used to be commit 8fc772c9e5770cd3a8857670214dcff033ebae32)
2001-11-22added lsa_enum_sids to rpcclientJean-François Micouleau1-3/+2
fixed lsa_enum_rpivs server code. This time it works as W2K. fixed smbgroupedit to compile and work. J.F. (This used to be commit 646651018a2736833e49e76f6ca735a4647d9746)
2001-11-21W2K doesn't seem to respond to *#0 names in node status. Ensure nameJeremy Allison1-1/+1
lookup uses password server parameter when looking for PDCs. Jeremy. (This used to be commit 54c968913d6553c6d834b068234ab176917075eb)
2001-11-20Merged in JohnR's ping messaging extension.Jeremy Allison1-6/+9
Jeremy. (This used to be commit 694372b2c4d7713fe228114730027175f7b4e9b6)
2001-11-20Rename xmalloc, xmemdup, xstrdup to smb_$1 to avoid conflicts with theMartin Pool1-8/+8
versions defined by libreadline on SCO (!). (This used to be commit 32480d7aff21ce1c14991e242aaf8a4e14ec6f2a)
2001-11-19Make the smbpasswd options/usage message a little less bizarre: it nowMartin Pool1-22/+20
shows all the available options, but explains that you must be root to use them. Surely this is less confusing? (This used to be commit 19f5f813995d1cf3874df705ab5e71aa5eb14ae6)
2001-11-19Store some path names in global variables initialized to configureMartin Pool12-28/+20
default, rather than in preprocessor macros. (This used to be commit 79ec88f0da40faebe1e587f1b3e87b5f2b184f58)
2001-11-12Minor fixes to help display, and domain enumeration , and also preparation ↵Steve French1-19/+35
for new command option (This used to be commit 3623fbb4f0182b201d62491fa0680c29a4fd68e3)
2001-11-06Internationalization enbalement for net utility - replace printf with d_printfJim McDonough1-233/+233
(This used to be commit b83b21e9ca364a097455c119815074f23324111d)
2001-11-04Fix up pdbedit so that it at least compiles without warnings.Andrew Bartlett1-92/+61
- Basic functionality intact - Now adds machine accounts without a uid. (using the machine uid range to avoid conflict with real uid based accounts) (This used to be commit 09d2e05d26f71b10ccabe4c6fa168a4923697bae)
2001-11-04Got serious about const again.Jeremy Allison1-18/+18
REMOVED BZERO CALLS YET AGAIN !!! Why do these keep creeping back in.... They are *NOT* POSIX. I'm also thinking of removing strncpy as I'm sure it's not being used correctly.... Jeremy. (This used to be commit b1930abb35dee74f858a3f7190276c418af2322b)
2001-11-03Added NT_USER_TOKEN into server_info to fix extra groups problem.Jeremy Allison1-4/+4
Got "medieval on our ass" about const warnings (as many as I could :-). Jeremy. (This used to be commit ee5e7ca547eff016818ba5c43b8ea0c9fa69b808)
2001-11-03Adding support for net password, net service, net user info, fixing net helpsSteve French1-59/+258
(This used to be commit a1f3930637a6ccadd4dba90dcd713cf1e4b5a536)
2001-10-31Parionia to ensure people don't install libsmb based programs setuid root.Andrew Bartlett1-1/+1
libsmb has not been written to be setuid, with things like LIBSMB_PROG allowing all sort of fun and games. Andrew Bartlett (This used to be commit 0c8e9339d8238de92e9146d04091694b62874c33)
2001-10-30Fix up smbpasswd -e/-d so that it doesn't change the password under you anyAndrew Bartlett1-11/+13
more. (Previously it set them to 'XXXX' or similar when only the flags were being changed - a bug I must have introduced when I reworked the passdb end of things a few weeks back.) Adds a new local flag: LOCAL_SET_PASSWORD to specify that the password is actually to be changed. Andrew Bartlett (This used to be commit cea6b6cb228c7e1f0c2d45951590e0d8fb8b315c)
2001-10-29clear errno before a call, tdbsam will not update it.Simo Sorce1-1/+1
just a hack to make things work. (This used to be commit fd1bc3557a7ba57a983a29d36ce0461085fb6682)
2001-10-23more compiler warningsHerb Lewis1-1/+1
(This used to be commit 12c10e876ea528fdf33e8ecfe42ab0ebb346b143)
2001-10-23Remove setbuffer which caused build errorsJim McDonough1-2/+0
(This used to be commit 5a482350a74e255b8db1ea3c8e76654d6f089f51)
2001-10-23Replace getopt_long with popt for parsing commandline optionsJim McDonough1-136/+91
(This used to be commit 0be7bf421be5ccff295a0d36331e915fce31796f)
2001-10-22Added xstrdup, removed static version from smbpasswd.cJeremy Allison1-14/+0
Jeremy. (This used to be commit d01a9e5974d80ee8be2f7a20aeaae5826325d035)
2001-10-19Add command-line remote management utilityJim McDonough1-0/+1510
(This used to be commit 50c243518aa7996e697876096073598a3b5a8d3a)
2001-10-11first step in converting the head branch to use lang_tdb.c insteadAndrew Tridgell2-21/+36
of gettext for internationalisation support. There is more to do (This used to be commit ab7f67677a1ade4669e5c2750d0a38422ea616a9)
2001-10-11Fixed bug when status=no and max smbd processes > 0.Jeremy Allison1-0/+5
Jeremy. (This used to be commit d1adaee373f08020d350af2aa65b7651da94bdae)
2001-10-03fix some possible memleaks and not tested reallocs spotted by Andreas MoroderSimo Sorce1-0/+1
(This used to be commit d30939a091b48f4d77f7618c75668ae151a5592e)
2001-10-02Removed 'extern int DEBUGLEVEL' as it is now in the smb.h header.Tim Potter9-21/+0
(This used to be commit 2d0922b0eabfdc0aaf1d0797482fef47ed7fde8e)