summaryrefslogtreecommitdiff
path: root/source4/librpc/idl
AgeCommit message (Collapse)AuthorFilesLines
2007-10-10r1150: - fixed interactive sam logon in the rpc serverAndrew Tridgell1-11/+9
- added a torture test for interactive login in smbtorture These changes allow winxp to perform an interactive login (a login on the winxp console) against a Samba4 DC. Our netlogon server code is still filling in many of the fields incorrectly, but it fills in enough that winxp can login. (This used to be commit db9ea488b047b5f0f7538fd75fb7dde8277eb06b)
2007-10-10r1144: added logon level 5 for sam logonAndrew Tridgell1-0/+1
(This used to be commit eb13fc6c3b482d49a2cfaf13d290f1e54a2f1865)
2007-10-10r1141: - consolidated the netr_SamInfo structures using a netr_SamBaseInfoAndrew Tridgell1-56/+9
structure (andrew, this is the type of structure consolidation I think you were asking about. It's possible here in NDR as it isn't in the top level fn code) - added validation level 6 in sam logon With these changes I can successfully authentication smbclient to a winxp server, with the winxp server using a Samba4 ADS DC for account auth (This used to be commit 705205083a6e2430c420f44436a1d1ff8826bc73)
2007-10-10r1140: added IDL and test code for validation level 6 in sam logonAndrew Tridgell1-16/+40
(This used to be commit c8541098436d2cd83538375889560405ecb50034)
2007-10-10r1139: added IDL and server code for netr_LogonSamLogonWithFlags()Andrew Tridgell1-1/+14
(This used to be commit 4eac7340d8d7a109bed8fe7bb7cf663d6e7f0a56)
2007-10-10r1136: - added IDL for netr_LogonGetDomainInfo()Andrew Tridgell1-1/+66
- added workstation to auth_session_info in rpc servers - added session key fetch hook in crypto backends in dcesrv - store and fetch seed as well as a session key in schannel ldb - when a client uses schannel to setup a netlogon pipe connection we also need to setup the credentials from the schannel negotiation so credentials chaining works - added server side netr_LogonGetDomainInfo() call (This used to be commit a35459387de3b6a422c5af6f658338fc7e4314b0)
2007-10-10r1061: The start of the SamLogon call for the NETLOGON pipe.Andrew Bartlett1-7/+19
Changes: - Check for a valid 'pipe_state' in netr_ServerAuthenticate3 before we dereference it - removes the expansionroom[7] in the netr_SamInfo* structs to 7 individual elements. - renames netr_SamInfo -> netr_SamInfo2 netr_SamInfo2 -> netr_SamInfo3 - Having the thing we always called an 'info3' being 'netr_SamInfo2' was just too confusing. - Expand and fill in extra details about users from the SAM, into the server_info, for processing into the SamLogon reply. - Add a dum_sid_dup() function to duplicate a struct dom_sid The SamLogon code currently does not return supplementary groups, and is only tested with Samba4 smbtorture. Andrew Bartlett (This used to be commit 6c92563b7961f15fc74b02601e105d5e1d04f04d)
2007-10-10r1058: The start of work on the SamLogon call for NETLOGON.Andrew Bartlett1-17/+17
This starts to store information about the user in the server_info struct - like the account name, the full name etc. Also, continue to make the names of the structure elements in the logon reply more consistant with those in the SAMR pipe. Andrew Bartlett (This used to be commit 3ccd96bd945e0fd95e42c69ad8ff07055af2e62b)
2007-10-10r1048: - moved the schannel definitions into a separate schannel.idlAndrew Tridgell2-11/+43
- added server side support for schannel type 23. This allows WinXP to establish a schannel connection to Samba4 as an ADS DC - added client side support for schannel type 23, but disabled it as currently the client code has now way of getting the fully qualified domain name (which is needed) - report dcerpc faults in the server code in the log (This used to be commit 55e0b014fe14ca8811b55887208a1c3147ddb0d2)
2007-10-10r1030: added server side schannel supportAndrew Tridgell2-0/+16
(This used to be commit 2ac79dfba0e64056a680f21d7dd0c007f79d4a70)
2007-10-10r1025: Rename (across the samr and netlogon pipes, so far)Andrew Bartlett2-53/+53
pwd -> password passwd -> password username -> account_name Also work on consistant structure feild names between these two pipes, and fix up some callers to use samr_Password for the netlogon credential code. Andrew Bartlett (This used to be commit 4e35418c2776f7b79be5b358ffd077754685d1ac)
2007-10-10r1009: Make all users of NT and LM passwords use the samr_Password structure.Andrew Bartlett3-25/+21
This includes the netlogon pipe, for the machine account password change system. Andrew Bartlett (This used to be commit 49d545a82057ee8b60d50aa55e908efe59875150)
2007-10-10r963: Tridge, according to ethereal this is an 'Acct Ctrl' field. My tests alsoVolker Lendecke1-1/+1
indicate this although I could not find any consistent pattern. I found this as 'net rpc group list local' in Samba3 sets this to 250 and only gets a fixed, but incomplete list of groups out of W2k3. I tried to correlate the results I got from w2k3 with the LDAP contents of the corresponding entries, but I could not find anything. Ethereal only decodes the lower byte, but to get all it seems necessary to have 0xffff here. If you have time, could you might want to spend some of it decoding the bits for SAMR completeness.... Volker (This used to be commit 74e59c45603a9f897a24e37fc7626cf8ffc81403)
2007-10-10r950: - added netr_ServerAuthenticate3(). This is used by WinXP clients who ↵Andrew Tridgell1-10/+18
try to login to Samba4, as WinXP sees us as an ADS server. Unfortunately WinXP also uses a set of negotiate_flags that we don't support yet. Some crypto work needed. (This used to be commit 2d740b65706fb5b4ebc138587472a885d680517f)
2007-10-10r937: - added a simple QuerySecurity implementation in samr serverAndrew Tridgell5-2/+162
- moved some sec desc defines into misc.idl - fixed pw_len field in UserInfo26 - made some pipes available on TCP - added netr_DsrEnumerateDomainTrusts() to netlogon - added templates for remaining netlogon IDL calls (from ethereal) - added a unistr_noterm vs unistr error detector in ndr basic decoder - added torture test for netr_DsrEnumerateDomainTrusts() (This used to be commit ae5a5113fb83640dcb9ae4642c1b9eaf28487956)
2007-10-10r924: got rid of the global well-known SIDs, instead using const defines in ↵Andrew Tridgell1-0/+30
misc.idl (This used to be commit ce7920a5fac0dbccb01402129c341b410a032e60)
2007-10-10r920: a placeholder lsads.idl file (lack of this is why the build farm is ↵Andrew Tridgell1-0/+16
unhappy for samba4) (This used to be commit 35dfa3e07b2e4d200d9f6ab1aea27a6471d5e546)
2007-10-10r919: - added lsa_QueryInfoPolicy2() to IDL, test suite and serverAndrew Tridgell1-1/+8
- added lsa_OpenPolicy2() to server - added guid handling in samdb - added a couple more info policy levels in lsa server - added some DNS info in the provisioning template and script With the above changes WinXP professional can join a Samba4 domain (This used to be commit d6dca96352144d6061175c964069ed54d942b9c2)
2007-10-10r917: - added the start of a LSA server to samba4.Andrew Tridgell2-35/+27
- added start of QueryDomainInfo in samr server "net rpc info" from samba3 now works against a samba4 server. I suspect join will work fairly soon. (This used to be commit 0a2c6a1062d0e364356853001f5f39bdb542f453)
2007-10-10r884: convert samba4 to use [u]int32_t instead of [u]int32Stefan Metzmacher1-1/+1
metze (This used to be commit 0e5517d937a2eb7cf707991d1c7498c1ab456095)
2007-10-10r877: This attempt at IDL was accidently included in the pervious commit.Andrew Bartlett1-9/+1
Andrew Bartlett (This used to be commit 6b91ab152d7bfadc113b6f206fcce4db54429871)
2007-10-10r874: This patch is a pile of work on NTLMSSP:Andrew Bartlett1-1/+9
Samba's NTLMSSP code is now fully talloc based, which should go a long way to cleaning up the memory leaks in this code. This also avoids a lot of extra copies of data, as we now allocate the 'return' blobs on a caller-supplied context. I have also been doing a lot of work towards NTLM2 signing and sealing. I have this working for sealing, but not for the verifier (MD5 integrity check on the stream) which is still incorrect. (I can aim a rpcecho sinkdata from a Win2k3 box to my server, and the data arrives intact, but the signature check fails. It does however match the test values I have...). The new torture test is cludged in - when we get a unit test suite back, I'll happliy put it in the 'right' place.... Andrew Bartlett (This used to be commit 399e2e2b1149b8d1c070aa7f0d5131c0b577d2b9)
2007-10-10r873: converted samba4 to use real 64 bit integers instead ofAndrew Tridgell3-19/+18
structures. This was suggested by metze recently. I checked on the build farm and all the machines we have support 64 bit ints, and support the LL suffix for 64 bit constants. I suspect some won't support strtoll() and related functions, so we will probably need replacements for those. (This used to be commit 9a9244a1c66654c12abe4379661cba83a73c4c21)
2007-10-10r781: added level6 for logon level in SamLogon netlogon.idlAndrew Tridgell1-2/+3
(This used to be commit 446808ae4dbdcd0c64387c54b7d49649971e36d0)
2007-10-10r739: Implement GetNumRecords() call from eventlog pipe, including a torture ↵Jelmer Vernooij1-16/+76
test (This used to be commit 6a254e26f17c2b3175023764c02dc73615d585d6)
2007-10-10r712: fixed a bug in the NetShareGetInfo idl, and added another info levelAndrew Tridgell1-1/+6
(This used to be commit 93977055939c5282dbf218f3a6739fa17ebfc641)
2007-10-10r649: return unknown interface when the client not yetStefan Metzmacher1-0/+1
binds succesful to an interface metze (This used to be commit c39e450702cfa2b577c64e14ba1428fd95db7ade)
2007-10-10r644: add SPNEGO auth typeStefan Metzmacher1-0/+1
metze (This used to be commit 75bca5dcfa68de0d18a144a221260d2f728e0bfc)
2007-10-10r610: - Merge the Samba3 'ntlm_auth --diagnostics' testsuite to Samba4.Andrew Bartlett1-8/+0
- This required using NETLOGON_NEG_AUTH2_FLAGS for the SetupCredentials2 negotiation flags, which is what Samba3 does, because otherwise the server uses different crypto. - This tests the returned session keys, which we decrypt. - Update the Samba4 notion of a 'session key' to be a DATA_BLOB in most places. - Fix session key code to return NT_STATUS_NO_SESSION_KEY if none is available. - Remove a useless argument to SMBsesskeygen_ntv1 - move netr_CredentialState from the .idl to the new credentials.h Andrew Bartlett (This used to be commit 44f8b5b53e6abd4de8a676f78d729988fadff320)
2007-10-10r601: added the server code for all the samr_SetUserInfo and ↵Andrew Tridgell1-3/+18
samr_QueryUserInfo levels except for the password set levels. This means that a large part of the RPC-SAMR torture test now runs correctly against Samba4 (This used to be commit ec0a51898f543578e755207d81ed5c1524861c64)
2007-10-10r593: add a constant for the records size multiplier for max_size in ↵Andrew Tridgell1-0/+2
samr_EnumDomainUsers (This used to be commit 252b11112ce22152de3d53d0ba657879346ff243)
2007-10-10r587: added server code for samr_EnumDomainUsers, and started addingAndrew Tridgell1-0/+4
samr_SetUserInfo and samr_QueryUserInfo (This used to be commit e0db9659a85b59e52fbe033a94b411d6c64d9f9c)
2007-10-10r582: added the LMSessKey in SamInfo and SamInfo2, thanks to work by abartletAndrew Tridgell1-3/+11
added test code for SamLogon validation level 2 and 3, so we test both SamInfo and SamInfo2 (This used to be commit 321dbb61cc0743379ceb6b8fff6a0ca37f308bc2)
2007-10-10r575: moved the SID_NAME_USE enum into samr.idlAndrew Tridgell1-0/+12
(This used to be commit 2cb06b39d91ef18b21c18e9376ccbd8076aeecf8)
2007-10-10r469: considerably improved the ChangePasswordUser3() IDL thanks to an idea ↵Andrew Tridgell1-6/+13
from abartlet (This used to be commit 5f30c3b077b59fc7ec40644e3af7236292100c6b)
2007-10-10r464: a big improvement to the API for writing server-side RPCAndrew Tridgell1-28/+28
servers. Previously the server pipe code needed to return the RPC level status (nearly always "OK") and separately set the function call return using r->out.result. All the programmers writing servers (metze, jelmer and me) were often getting this wrong, by doing things like "return NT_STATUS_NO_MEMORY" which was really quite meaningless as there is no code like that at the dcerpc level. I have now modified pidl to generate the necessary boilerplate so that just returning the status you want from the function will work. So for a NTSTATUS function you return NT_STATUS_XXX and from a WERROR function you return WERR_XXX. If you really want to generate a DCERPC level fault rather than just a return value in your function then you should use the DCESRV_FAULT() macro which will correctly generate a fault for you. As a side effect, this also adds automatic type checking of all of our server side rpc functions, which was impossible with the old API. When I changed the API I found and fixed quite a few functions with the wrong type information, so this is definately useful. I have also changed the server side template generation to generate a DCERPC "operation range error" by default when you have not yet filled in a server side function. This allows us to correctly implement functions in any order in our rpc pipe servers and give the client the right information about the fault. (This used to be commit a4df5c7cf88891a78d82c8d6d7f058d8485e73f0)
2007-10-10r420: added nicer names for the field bits in userinfo21Andrew Tridgell1-2/+14
added tests for the level 23 and 25 password change methods (This used to be commit d49f7a6a0d1895de3d654a5b46c6aec3a57fde76)
2007-10-10r392: added IDL for 3 more netlogon Delta levels, thanks to a dump from ↵Andrew Tridgell1-5/+21
Richard Renard (This used to be commit 2d8772ec9607c4e06bbc559b35979e27d4b988d9)
2007-10-10r388: added IDL for 3 more set user info levels (all of which set theAndrew Tridgell1-0/+22
password). That makes 8 ways to change a password just on the SAMR pipe! Thanks to Luke Howard from PADL for this. (This used to be commit c8a49a7e004468d13f656f67eac4b7b4e1759022)
2007-10-10r365: improved the IDL for samr_Connect5()Andrew Tridgell1-11/+16
(This used to be commit 4b4f025504cb5b92c8b119259f1df622cd72ec7c)
2007-10-10r364: finally worked out the ancient samr_ChangePasswordUser() interfaceAndrew Tridgell1-15/+12
yay! (This used to be commit 0221566cf5ff7dc5ce0de9af451b935ed8615f4e)
2007-10-10r359: moved the share type definitions to srvsvc.idlAndrew Tridgell1-0/+8
I'd like to see more protocol defininitions in the IDL files and less in smb.h where possible. (This used to be commit 854b875bbe447955fb0c3876f046931d0bfde06c)
2007-10-10r358: added some more annotation on the samr unknown attributesAndrew Tridgell1-6/+9
(This used to be commit a946315193443feab786a588f371ad2a560327d4)
2007-10-10r336: added a -X command line option to smbtorture to enable dangerous orAndrew Tridgell1-2/+13
possibly destructive tests. Use with care! Added IDL and test code for samr_Shutdown() and samr_SetDsrmPassword() (This used to be commit 84de0b7e58c69e0817b9d475de0895a54cc95927)
2007-10-10r335: added much better handling of servers that die unexpectedly during aAndrew Tridgell1-6/+48
request (a dead socket). I discovered this when testing against Sun's PC-NetLink. cleaned up the naming of some of the samr requests add IDL and test code for samr_QueryGroupMember(), samr_SetMemberAttributesOfGroup() and samr_Shutdown(). (actually, I didn't leave the samr_Shutdown() test in, as its fatal to windows servers due to doing exactly what it says it does). (This used to be commit 925bc2622c105dee4ffff809c6c35cd209a839f8)
2007-10-10r326: tweaks to the RPC-SAMR test code to allow win2003 to pass the test ↵Andrew Tridgell1-2/+2
(for example, not filling in extra fields in level21 setuserinfo) (This used to be commit d06ed158f9aef94159bfc09065ca5ad0c4c99de3)
2007-10-10r325: added IDL and test code for samr_ChangePasswordUser3().Andrew Tridgell1-1/+12
Also added much better handling of random password generation in the password change test code (This used to be commit 67ae0b2a9851c1e77fdaa9f317a83bd54950618f)
2007-10-10r310: add missing ','Stefan Metzmacher1-1/+1
metze (This used to be commit d0aa749667cf0d9e7c290982d2b4232c27ced706)
2007-10-10r307: added IDL and test code for samr_GetDomPwInfo(), samr_SetUserInfo2(),Andrew Tridgell1-5/+31
samr_GetBootKeyInformation() and samr_Connect3() also added some stub IDL for samr_SetBootKeyInformation() although I don't yet have working test code. This one is tricky, as if you get it wrong then the target system won't boot any more :) (This used to be commit 118b6fc292ba3257511b1b83846582013fb59b23)
2007-10-10r306: added another define for a DCERPC fault codeAndrew Tridgell1-0/+1
(This used to be commit 3c8d580d2c2ae528c5725145d81761296b8be04d)
generated by cgit (git 2.34.1) at 2024-11-10 16:47:17 +0000