sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-31 01:48:16 +03:00
Code
6,553 Commits 60 Branches 1,146 Tags
Commit Graph

600 Commits

Author SHA1 Message Date
Herb Lewis
12c10e876e more compiler warnings -
Andrew Tridgell
3f919b4360 a quick fix to get rpcclient working again. This just disables 
NTLMSSP in cli_establish_connection()

What we really need to do is kill off the pwd_cache code. It is horrible,
and assumes the challenge comes in the negprot reply.
 -
Jeremy Allison
070fd5180f Fix for @ in pathname from Kian Win. 
Jeremy.
 -
Jeremy Allison
b668d7d656 Ok, I know it's a language thing and it shouldn't matter.... but a kerberos 
name is a "principal", not a principle. English majors will complain :-).
Jeremy.
 -
Andrew Bartlett
44bdb8b12b Fix for compilation on non-krb5 systems -
Andrew Tridgell
d1341d74b7 made smbclient cope better with arbitrary principle forms -
Andrew Tridgell
eac164c7e6 support both old and new kerberos OIDs -
Jeremy Allison
058ae6b58f Move from timestamp to gen count file id's for finding oplocked files 
in a tdb.
Jeremy.
 -
Andrew Tridgell
fd3a3daef3 better krb5 error handling (thanks andrewb!) -
Jim McDonough
b94427ddd5 Add additional client RAP calls -
Andrew Tridgell
353c290f05 the beginnings of kerberos support in smbd. It doesn't work yet, but 
it should give something for others to hack on and possibly find what
I'm doing wrong.
 -
Andrew Tridgell
b74fda69bf added basic NTLMSSP support in smbd. This is still quite rough, and 
loses things like username mapping. I wanted to get this in then
discuss it a bit to see how we want to split up the existing
session setup code
 -
Andrew Tridgell
888183a17c fix heimdal compilation -
Andrew Tridgell
1bcdf9106a minor Realloc() fix - pedantic -
Andrew Tridgell
131010e9fb fixed NTLMSSP with XP servers (who don't send the duplicate challenge 
in the asn1 spnego structures)
 -
Andrew Tridgell
b218d465a1 fixed two bugs in the NTLMSSP code 
- handle servers that don't send a kerberos principle (non-member servers)
 - enable spnego without KRB5
 -
Andrew Tridgell
7092beef9d moved some OIDs to the ASN.1 header -
Andrew Tridgell
076aa97bee added NTLMSSP authentication to libsmb. It seems to work well so I have enabled it by default if the server supports it. Let me know if this breaks anything. Choose kerberos with the -k flag to smbclient, otherwise it will use SPNEGO/NTLMSSP/NTLM -
Andrew Tridgell
8b692d8326 improve the error handling in the ASN1 code a bit -
Andrew Tridgell
395cfeea94 added a ASN.1 parser, so now I can properly parse the negTokenInit 
packet which means I can extract the service and realm, so we should
now work with realms other than the local realm.

it also means we now check the list of OIDs given by the server just
in case it says that it doesn't support kerberos. In that case we
should fall back to NTLMSSP but that isn't written yet.
 -
Andrew Tridgell
919734c1a6 fixed some memory leaks, started adding asn1 decoder for server side -
Andrew Tridgell
d330575856 initial kerberos/ADS/SPNEGO support in libsmb and smbclient. To 
activate you need to:

- install krb5 libraries
- run configure
- build smbclient
- run kinit to get a TGT
- run smbclient with the -k option to choose kerberos auth
 -
Tim Potter
2d0922b0ea Removed 'extern int DEBUGLEVEL' as it is now in the smb.h header. -
Andrew Bartlett
758d923fa1 Kill unused variables -
Andrew Bartlett
42402c87d6 Make use of the pdb_set_plaintext_passwd() update to vastly simplify 
decode_pw_buffer() and the samr password changing routines.

And yes, I know that we can lost some information in the Unicode->UTF->Unicode
bit of this, but its worth the code cleanup.

This also takes into account the possability of multibyte passwords.

Andrew Bartlett
 -
Andrew Tridgell
b2eb7feb7f added cli_qpathinfo_alt_name() for fetching the 8.3 name of a file -
Jeremy Allison
b5f4a97bb0 Removed extra '()' s. 
Jeremy.
 -
Tim Potter
e0bdcbc599 Converted cli_net_auth2() and cli_nt_setup_creds() to return NTSTATUS. -
Andrew Tridgell
2d507ec669 fixed ctemp in server and client. It turns out that ctemp on NT is completely broken, and it's pointless to emulate their brokenness completely in this case, but at least this makes us use approximately the same packet format. The spec is complelet wrong in this case -
Simo Sorce
23dc3fc700 typo -
Simo Sorce
48fc6a6cd5 move to SAFE_FREE() -
Tim Potter
b6cb6b837a Merge of sam_pwd_hash() function from tng. -
Tim Potter
e4a3231a07 Use session key from cli_state struct rather than the uninitialised one 
when calling cli_netlogon_sam_sync().  (-:
 -
Tim Potter
a83061ef3e Fixed return value for cli_dfs_exist() - nt4 returns 1, w2k returns 2. 
Use werror_to_ntstatus() to convert error returns from dfs client functions
into nt errors.
 -
Tim Potter
d34fd8ec07 Some patches to authentication: 
- the usersupplied_info now contains a smb_username (as it comes across on
   the wire) and a unix_username (after being passed through mapping
   functions)

 - when doing security={server,domain} use the smb_username, otherwise use
   the unix_username
 -
Tim Potter
97286570ef Converted DFS error returns to WERROR instead of uint32. -
Tim Potter
ff14930834 Added a string for NT_STATUS_OK, m'kay? -
Andrew Tridgell
fe6679dffb convert more code to use XFILE -
Richard Sharpe
a7842fac94 Make sure that if there are no interfaces, name_register_wins does not 
segfault.
 -
Andrew Tridgell
c26e0d3f27 got rid of USE_TDB_MMAP_FLAG as its not needed any more -
Andrew Tridgell
b36c98036b actually obey the "use mmap" smb.conf option -
Andrew Tridgell
55d5828e60 use cli_is_error() instead of looking in smb_rcls, otherwise NT status 
codes don't work correctly
 -
Andrew Tridgell
9bae57cfe3 fixed some compilation errors in cli_netlogon.c - tim, you need to rerun configure to get the new NTSTATUS stuff right -
Andrew Tridgell
c04c67fec8 more warning fixes on solaris -
Tim Potter
4ca085f253 Merged cli_net_req_chal() and cli_net_auth2() from rpc_client/cli_login.c 
except they are called new_cli_net_req_chal() and new_cli_net_auth2()
until they are working properly.
 -
Andrew Tridgell
5bb7e4f0f6 it now all compiles - so try enabling it by default and see what explodes on the build farm -
Andrew Tridgell
dcd6e735f7 the next stage in the NTSTATUS/WERROR change. smbd and nmbd now compile, but the client code still needs some work -
Andrew Tridgell
ad648c5cd8 more NTSTATUS/WERROR conversion -
Andrew Tridgell
24f9ab683d the next step in our error code handling change 
- added WERROR for win32 error codes
- added a configure test for immediate structures

still lots to do, so its not enabled by default, but the main
structure is there
 -
Andrew Tridgell
8e70666fcc use a name not a number for ERRinsufficientbuffer -