summaryrefslogtreecommitdiff
path: root/source3/utils
AgeCommit message (Collapse)AuthorFilesLines
2003-11-26Implement "net rpc group members": Get members of a domain group inVolker Lendecke2-0/+89
human-readable format. Volker (This used to be commit 4e3a2eb8e04c3a669d94e38d81e994606fa6ef9d)
2003-11-26Get rid of a const warningVolker Lendecke1-2/+2
Volker (This used to be commit 94860687c535ace0c962ca3fe7da59df05325c62)
2003-11-22Add support for variable-length session keys in our client code.Andrew Bartlett2-5/+5
This means that we now support 'net rpc join' with KRB5 (des based) logins. Now, you need to hack 'net' to do that, but the principal is important... When we add kerberos to 'net rpc', it should be possible to still do user management and the like over RPC. (server-side support to follow shortly) Andrew Bartlett (This used to be commit 9ecf9408d98639186b283f1acf0fac46417547d0)
2003-11-22Changes all over the shop, but all towards:Andrew Bartlett1-72/+112
- NTLM2 support in the server - KEY_EXCH support in the server - variable length session keys. In detail: - NTLM2 is an extension of NTLMv1, that is compatible with existing domain controllers (unlike NTLMv2, which requires a DC upgrade). * This is known as 'NTLMv2 session security' * (This is not yet implemented on the RPC pipes however, so there may well still be issues for PDC setups, particuarly around password changes. We do not fully understand the sign/seal implications of NTLM2 on RPC pipes.) This requires modifications to our authentication subsystem, as we must handle the 'challege' input into the challenge-response algorithm being changed. This also needs to be turned off for 'security=server', which does not support this. - KEY_EXCH is another 'security' mechanism, whereby the session key actually used by the server is sent by the client, rather than being the shared-secret directly or indirectly. - As both these methods change the session key, the auth subsystem needed to be changed, to 'override' session keys provided by the backend. - There has also been a major overhaul of the NTLMSSP subsystem, to merge the 'client' and 'server' functions, so they both operate on a single structure. This should help the SPNEGO implementation. - The 'names blob' in NTLMSSP is always in unicode - never in ascii. Don't make an ascii version ever. - The other big change is to allow variable length session keys. We have always assumed that session keys are 16 bytes long - and padded to this length if shorter. However, Kerberos session keys are 8 bytes long, when the krb5 login uses DES. * This fix allows SMB signging on machines not yet running MIT KRB5 1.3.1. * - Add better DEBUG() messages to ntlm_auth, warning administrators of misconfigurations that prevent access to the privileged pipe. This should help reduce some of the 'it just doesn't work' issues. - Fix data_blob_talloc() to behave the same way data_blob() does when passed a NULL data pointer. (just allocate) REMEMBER to make clean after this commit - I have changed plenty of data structures... (This used to be commit f3bbc87b0dac63426cda6fac7a295d3aad810ecc)
2003-11-12show locked files for -u <user>; bug 590Gerald Carter1-10/+41
(This used to be commit d72d77c42741714f2e32d0e24e706929242f1c62)
2003-11-06Final round of printf warnings fixes for the moment.Tim Potter3-4/+5
(This used to be commit 0519a7022b4979c0e8ddd4907f4b858a59299c06)
2003-10-24Add shutdown abort try over initshutdown pipe first, then fall back toJim McDonough1-4/+49
winreg pipe if it doesn't work. Fixes bug #534. I will go back and add the same logic for the shutdown itself, even though that works so far against win2k (haven't tested all win clients). (This used to be commit e660b04e8f2446bb8a6590e9afcb5ab49f90a701)
2003-10-23Fix bug 451. Stop net -P from prompting for machine account password.Jim McDonough3-3/+4
Based on work by Ken Cross (kcross@nssolutions.com). (This used to be commit 8ef7ac22ef1a60dca0a2d01dc6ff4ba14bc1549a)
2003-10-22Put strcasecmp/strncasecmp on the banned list (except for needed callsJeremy Allison2-11/+11
in iconv.c and nsswitch/). Using them means you're not thinking about multibyte at all and I really want to discourage that. Jeremy. (This used to be commit d7e35dfb9283d560d0ed2ab231f36ed92767dace)
2003-10-20Changed output so all debug output goes to stderr, and all file processingJohn Terpstra1-40/+40
goes to stdout. Note: This change permits use of testparm processing of smb.conf to be redirected into a file that can be used as an smb.conf file. ie: All information that should not be in smb.conf will be on stderr, all pertinent smb.conf info will go to stdout. Example of use: A fully documented smb.conf.master file can be maintained. To create smb.conf do: testparm -s > smb.conf (This used to be commit 0450dc97731d95c7cd3b2c8a54721991fd6165df)
2003-10-14Break out of samsync loop on error.Tim Potter1-0/+3
(This used to be commit f8994483484cab47f0d6a6934979f69402dba894)
2003-10-14Set errno = ENOSYS if mmap not supported.Tim Potter1-0/+1
From Joachim Schmitz <schmitz@hp.com> (This used to be commit 22655a65ab73576557487e73c550b45296e534ec)
2003-10-02Portability fixes from schmitz@hp.com (Joachim Schmitz). Bug #549.Jeremy Allison1-1/+7
Jeremy. (This used to be commit 93669f329eccec34d4a1da6239ae9759f067fb8b)
2003-09-29Testparm fixes:Jelmer Vernooij1-3/+9
- Also check global 'hosts allow'/'hosts deny' when checking access to share - Warn when user specifies 2 arguments instead of 1 or 3. Patch from Jay Fenlason <fenlason@redhat.com> (This used to be commit 2690c185f01b8fb4307dc803fb90c00400f2da69)
2003-09-26Fix to parse the level-2 strings. From Anthony Liguori aliguor@us.ibm.com.Jeremy Allison1-16/+4
Jeremy. (This used to be commit e4c955c98e90901b047c475f204af93a57578248)
2003-09-23This only touches the fake kaserver support. It adds two parameters:Volker Lendecke1-3/+3
afs share -- this is an AFS share, do AFS magic things afs username map -- We need a way to specify the cell and possibly weird username codings for several windows domains in the afs cell Volker (This used to be commit 4a3f7a9356cd5068d9ed4fd6e2336d9bf7923fbd)
2003-09-22fix some warnings found by the Sun C compilerGerald Carter2-4/+3
(This used to be commit e1fac713e25692a5790c3261ba323732930f5249)
2003-09-21Fix typoJelmer Vernooij1-1/+1
(This used to be commit 37db75fc95aec2510a0ead0c97f44e80b00696d9)
2003-09-19Ensure that dup_sec_desc copies the 'type' field correctly. This causedJeremy Allison1-3/+3
me to expose a type arguement to make_sec_desc(). We weren't copying the SE_DESC_DACL_AUTO_INHERITED flag which could cause errors on auto inherited checks. Jeremy. (This used to be commit 28b315a7501f42928d73efaa75f74146ba95cf2d)
2003-09-15Fix from gregory@networksentry.co.za, don't clobber the comment if itJeremy Allison1-2/+2
exists. Jeremy. (This used to be commit c8bfde5be9f0a3603f7333ff4266ad19c20cb9f9)
2003-09-15Fixed test and wording for long share names.Christopher R. Hertel1-3/+4
The RAP NetShareEnum() call has a length limit of 12 characters (not 8, as previously tested). Took DaveCB's suggested and added a note listing some of the client systems that might be affected. (This used to be commit be06e52ce05e88f3872563a61ae29f62afd614fc)
2003-09-15fix online helpSimo Sorce1-1/+1
-w option need the password on the command line (This used to be commit fa7dea1710bac38f5f68be2e56a24ef5cca09ff5)
2003-09-11Fix error message when calling namedtogid() fails adding a group mapTim Potter1-1/+1
entry. Bug #431. (This used to be commit bc8a181477866d0d97324bf45431bcdff895ad18)
2003-09-10Fix error return path memory leaks in vampire code for creating users.Tim Potter1-3/+8
Display an error if we can't create a posix account for the user (e.g no add user/machine script was specified; bug #323). (This used to be commit 0c35ba2cd65ff64c5db2b20d5528a0d486cba51e)
2003-09-10Use opt_target_workgroup instead of lp_workgroup() in vampire code soTim Potter1-2/+2
we can override the value in smb.conf with the -w option. Migrating accounts from another domain can now be done like: # bin/net join bdc -w nt4dom -Uadministrator%password # bin/net rpc vampire -w nt4dom -U administrator%password (This used to be commit d7bd3c1efbd02a7ca01ad9a4b242ea4cc4a63c1f)
2003-09-10Formatting fixups for help output.Tim Potter1-2/+2
(This used to be commit c030d1401950b6efcbdf30ad899c25a61efb1814)
2003-09-08Fix for incorrect error message - found by Alex Davis <alex14641@yahoo.com>.Jeremy Allison1-2/+2
Jeremy. (This used to be commit 28631ef23f855ce91740fd144e3dc235a3ae7af6)
2003-09-07Nobody complained on the team-list, so commit it ...Volker Lendecke2-0/+50
This implements some kind of improved AFS support for Samba on Linux with OpenAFS 1.2.10. ./configure --with-fake-kaserver assumes that you have OpenAFS on your machine. To use this, you have to put the AFS server's KeyFile into secrets.tdb with 'net afskey'. If this is done, on each tree connect smbd creates a Kerberos V4 ticket suitable for use by the AFS client and gives it to the kernel via the AFS syscall. This is meant to be very light-weight, so I did not link in a whole lot of libraries to be more platform-independent using the ka_SetToken function call. Volker (This used to be commit 5775690ee8e17d3e98355b5147e4aed47e8dc213)
2003-09-05fixes for ads domain membership when only the realm is defined inGerald Carter1-2/+41
smb.conf Fixes to ensure we work with disable netbios = yes (This used to be commit 3913e43724870c62a0d77ec3e73cbe9480cb6247)
2003-09-05Fix for bug #73. Name types can be specified using name#type notation.Tim Potter1-7/+31
Also added shortcut so that 'net lookup foo#1b' works. (This used to be commit f38679201e301d66473e74506f07812590d19fa4)
2003-09-04Check in Andrew's fix for bug #305 (always use lp_realm() )Gerald Carter1-2/+7
Also make sure thet ads_startup uses lp_realm instead of just relying on the workgroup name. Fixes bug in net ads join when the workgroup defaults to "WORKGROUP" and we ignore the realm name. (This used to be commit b1763ace4e85f41574894e3807cabb5196fec661)
2003-09-01Fix bug 342. Short version of --add now -a instead of -A.Tim Potter1-2/+2
(This used to be commit 233568dd6b08d3dfb48a712b763dfc31c03b229d)
2003-08-31We don't need to #include memory.h here. It's a BSD'ism and just includesTim Potter1-1/+0
string.h anyways. (This used to be commit 71034cede83b5605b25a4d3b640086294244c239)
2003-08-29Fix some compiler warnings.Tim Potter1-10/+8
(This used to be commit f566de0541373fab97caa6b0f574f79e68ae74dc)
2003-08-28Fixed warnings in secret code.Jeremy Allison1-26/+0
Jeremy. (This used to be commit 86ebf990431903b12ec24a4d9af00d665e828145)
2003-08-28fixing typos pointed out by Vance in WHATSNEWGerald Carter2-2/+57
Include patch to manually set the machine trust account password (on request from jht) to mimic 2.2. behavior. last changes before RC2 (not counting syncing the docs). (This used to be commit ce090371449097d4e5010e1219d449db8b0ccac5)
2003-08-22Ensure nmblookup correctly converts from CH_DOS to CH_UNIX when displayingJeremy Allison1-1/+1
a printable name on node status. Jeremy. (This used to be commit 6585446afd29768fde8c3f882bfb57554cf4e4da)
2003-08-20metze's autogenerate patch for version.hGerald Carter1-1/+1
(This used to be commit ae452e51b02672a56adf18aa7a7e365eeaba9272)
2003-08-19 - Make 'net' use a single funciton for setting the 'use machine account' code.Andrew Bartlett2-31/+46
- Make winbindd try to use kerberos for connections to DCs, so that it can access RA=2 servers, particularly for netlogon. - Make rpcclient follow the new flags for the NETLOGON pipe - Make all the code that uses schannel use the centralised functions for doing so. Andrew Bartlett (This used to be commit 96b4187963cedcfe158ff02868929b8cf81c6ebf)
2003-08-15In case of 'net rpc trustdom add' without domain name we were silentlyRafal Szczesniak1-2/+7
asking for password without a piece of error message or explanation. rafal (This used to be commit d46793b33577f7e77b7632b016918e3ce175c238)
2003-08-15Give a temporary hint on how to delete trust account.Rafal Szczesniak1-0/+1
rafal (This used to be commit 836746beabda583f7d86bb7e6faa855f172a888d)
2003-08-15Print more than 1 packet in hex modeJelmer Vernooij1-1/+1
(This used to be commit 28f1d7b201932eb3864af3d71ec862670898822c)
2003-08-15Add ability to output native pcap files without the requirement for text2pcap.Jelmer Vernooij1-15/+131
IP and TCP checksums are not calculated, but that should not matter. (This used to be commit aa96f780015c031e0c5a0e8773f192502c10c919)
2003-08-15get rid of more compiler warningsHerb Lewis4-56/+56
(This used to be commit 398bd14fc6e2f8ab2f34211270e179b8928a6669)
2003-08-15Add the gss-spnego kerberos server side to ntml_auth. This uses theVolker Lendecke1-10/+68
same ads_verify_ticket routine that smbd uses, so in the current state we have to be have the host password in secrets.tdb instead of the keytab. This means we have to be an ADS member, but it's a start. Volker (This used to be commit dc2d2ad467927affbd1461df75f77f07ddfbc3b1)
2003-08-15Fix some memory issues. It is now possible to convert extract packet dataJelmer Vernooij1-9/+20
from a samba log file and view it in ethereal, including the DCE/RPC, RAP, etc calls that are contained in a packet, just like you would with a real network sniff! (This used to be commit 6a76750dc4d8b539b7571ac4939c003b6ffa86a9)
2003-08-15get rid of warning on IRIXHerb Lewis1-10/+8
(This used to be commit 6ec683e24e220a40b02b203b918a0008d90264f0)
2003-08-15Don't ask, it's too embarrassing :-)Volker Lendecke1-1/+1
Actually let the user explicitly specify a rid... Volker (This used to be commit 3aed9c8a4ac97ef55772ddae1e1cb0a5a1a15767)
2003-08-15Get packet contents correct as well.Jelmer Vernooij1-12/+18
(This used to be commit b4499c8aab44e25cb4406498018bde0bc4ed4ca9)
2003-08-15Add utility that takes a samba log file (at least level 5 for headers andJelmer Vernooij1-16/+16
10 for data contents as well) and creates a packet trace readable by ethereal. What does not work yet: - SMB data contents (log level 5) - SMB data contents beyond the 512 byte range (log level 99 or something?) (This used to be commit 95b1d4933b0de63613fe041c273d413d86909b4b)
generated by cgit (git 2.34.1) at 2024-11-01 19:57:57 +0000