Age | Commit message (Collapse) | Author | Files | Lines |
|
Apparently (and I will doublecheck) its legal to do an annoymous session setup
when we negoitiated SPNEGO, but we can't do an authenticated one becouse we
didn't give a challange.
Andrew Bartlett
(This used to be commit 08a5c5bf940fac7a779be01db01ae7d97df80f79)
|
|
(This used to be commit 0e564cb32acc70c1fc43f1be5ceb3637f0dc7361)
|
|
(This used to be commit c6affae4bf749a67c90468702eb6d4eeb97a4363)
|
|
(This used to be commit 08bb2dfec2ca0282e9268d09da2b966d3bdf493a)
|
|
(This used to be commit 17b1c83dd02035048bd38b305460c96c6c09343a)
|
|
The auth_authsupplied_info typedef is now just a plain struct - auth_context,
but it has been modified to contain the function pointers to the rest
of the auth subsystem's components.
(Who needs non-static functions anyway?)
In working all this mess out, I fixed a number of memory leaks and moved the
entire auth subsystem over to talloc().
Note that the TALLOC_CTX attached to the auth_context can be rather long-lived,
it is provided for things that are intended to live as long. (The
global_negprot_auth_context lasts the whole life of the smbd).
I've also adjusted a few things in auth_domain.c, mainly passing the domain as
a paramater to a few functions instead of looking up lp_workgroup(). I'm
hopign to make this entire thing a bit more trusted domains (as PDC) freindly
in the near future.
Other than that, I moved a bit of the code around, hence the rather messy diff.
Andrew Bartlett
(This used to be commit 12f5515f556cf39fea98134fe3e2ac4540501048)
|
|
Also change the structure so it has its own (optional) 'free' pointer - so we
don't free() a talloc'ed version.
also split out the data_blob_clear() functionaility.
Andrew Bartlett
(This used to be commit 207ee8aac42cf4b35f07e496b15fdeabe50950bc)
|
|
This applies only to the NT->Dos map, I'm still trying to come up with a way to
do the reverse.
(This used to be commit 323dd422bd4bdeeee72c9200821e28f86d3072c8)
|
|
This just turns of SPNGO becouse Win2k breaks if you attempt this and DOS
errors at the same time.
Andrew Bartlett
(This used to be commit 2c09907b537147189e77810f586558be6004733b)
|
|
Jeremy.
(This used to be commit 32f4f3a45d473b3be1ae07f6c60897c12323d60c)
|
|
(This used to be commit b2af4372b1dac2e8f283184191fbb0231409a625)
|
|
(This used to be commit faa1b222f170abe34f6930bb3493cbe8b4df4082)
|
|
Jeremy.
(This used to be commit 2db99fa49b538e230f2c606d1004871111ea2bf6)
|
|
bug (renaming name -> name was failing, on W2K it succeeds). Simplified
the common case, did a lot of work to ensure NT error codes are correctly
reported back to client.
Jeremy.
(This used to be commit e6b27f3d8069ae304baaebe09341c58d46b05fe4)
|
|
Jeremy.
(This used to be commit 6c51d90f13a40359baef08424f7ea1940f93d511)
|
|
Jeremy.
(This used to be commit a0cdec3acc82d1ce0292fadd4b8dac23638450f3)
|
|
Jeremy.
(This used to be commit 8aee8211cddb6705c9aa545fc57ece2c721ef448)
|
|
Jeremy.
(This used to be commit 73cf9d04f6a35aa3b6bdb4e921de34e0021b5a2c)
|
|
Jeremy.
(This used to be commit fb1ab02553e01df0464f0df3eea7ae6a66b4104b)
|
|
Jeremy.
(This used to be commit b52c3219d6f46df6e98742447d65ecda2ecbac65)
|
|
(This used to be commit f383e19e095eab975bf3d4e622a5c1d1f823171b)
|
|
This new table is rather different to the old one (see diff posted to the
list for a sorted list of differences) and needs a *lot* of testing.
It does however seem to line up much better with what NT is using, as
exampled by the change to the OBJECT_NAME_COLLISION DOS error, it now matches
win2k where it didn't before.
I can't see any critical errors we now get wrong, and I know that the auth
errors are correct as per my on-the-wire observations.
This table was produced (and I hope to comment this better later) by
using the ERRMAPEXTRACT smbtorture tool, a Win2k domain member and the
'name_to_ntstatus' auth module on the HEAD PDC. This module returned
the username as the error, and the NT box was forced to give me a dos
error becouse thats all I negotiated on that connection. Hence the map.
Andrew Bartlett
(This used to be commit a855dfb2e0b899d03087860e5462c2aed3ca4cad)
|
|
(This used to be commit 269a7d3c9ba8ca1444653c1aa56b843b8b1df08b)
|
|
(This used to be commit 8f343beae7455141ce6a5e27e46ed2970aed8e7f)
|
|
'squashed' or the session setup succeeded. (How the latter occurs I don't know).
(This used to be commit d879d2ffffc47ce161afb3d96bc5c4b92de662c3)
|
|
Win2k kills off connections that have issued a negprot but havn't yet issued
a session setup when a second connection appears from the same host.
(This used to be commit d47e61eb468218cae631e78edbd5d02982c78ab0)
|
|
(This used to be commit da9444d98f212af8f1b1e1df191adf3c31d50f6d)
|
|
(This used to be commit 9a473ecf96fca35d146756c0c313b156aba8d9d9)
|
|
(This used to be commit 472121749460a73f684bdbd02b828e89fad101af)
|
|
(This used to be commit 4877501da92762d233e5e4f24d1cb2bdd1eab8ae)
|
|
(This used to be commit 86abefc17260387b6b68c71ad5587ef0212162c0)
|
|
(This used to be commit 27143900e76033026ecd5a7b4525c0150f3a535d)
|
|
(This used to be commit b46d874f4736493bdc4244ec6cdf95e77347e7d5)
|
|
(This used to be commit a9b9ae47e1a11492f036b308c408c6a239a690f6)
|
|
(This used to be commit cd25d01e42e7874bc93f6ca336c5b2cde453bb52)
|
|
(This used to be commit 7cb8e95f9332d4c278d2aac5416f963639609d5a)
|
|
contain new print-formatted information. (Also
talloc_vasprintf_append.) Idea borrowed from glib.
(This used to be commit 53723e874885936dd67483ebf46601fc73489d17)
|
|
boring so far.
(This used to be commit 9b217dce7fe89d1e36a91d7d011c2a9fe185e0d3)
|
|
be information about memory usage, but this is not done yet.
(This used to be commit 830a126a442bdde28fc42e23e7260c344b6534b9)
|
|
(This used to be commit b70f870cd98e30d0ce74d322391cc79d65c5f838)
|
|
(This used to be commit cfa89169e0bbc9cbd7448c96139ecaf459d0af81)
|
|
to the log.
(This used to be commit 53dd8b45397f5de7660594b9287341f8f4c91c43)
|
|
(This used to be commit 6bd5b7ce8ec54faefcf129fcc98cc4440bb355d6)
|
|
(This used to be commit 73743c2ec9da239f5d1340b68e92bdeb00cee97d)
|
|
stop smb_macros.h and tdb.h from fighting with each other.
I tried to rearrange the #include file order but that breaks other stuff.
Aargh!
(This used to be commit aae8cc6e450a6a0b33045ed1e6d49f8eebeb48b2)
|
|
(This used to be commit ee6d33a8db2afc43c8784f2e43572ae8959126e5)
|
|
(This used to be commit d1564fbf1f4950c12516470d4566efeca3ad79e5)
|
|
stuck in an infinite loop.
(This used to be commit fe1fb6589a0a4b4cff7a0ee0267f6e09e10e2a85)
|
|
commands in rpcclient. Replacing ERROR_INSUFFICIENT_BUFFER with
NT_STATUS_BUFFER_TOO_SMALL fixes it. Yay!
I always thought the caller (i.e cmd_spoolss.c) should take care of the
whole requested/needed buffer size thingy though...
(This used to be commit 6c950db05a2772f11b20cc13c65a123ea8b878c2)
|
|
(This used to be commit ab1bd916cf59e12366d9005f6ce1cf6521ff02be)
|