57 Commits

Author	SHA1	Message	Date
Andrew Bartlett	fa6713bf8b	Move pass_check.c over to NTSTATUS, allowing full NTSTATUS from PAM to wire! ... Add the ability for swat to run in non-root-mode (ie non-root from inetd). - we still need some of the am_root() calls fixed however. (This used to be commit 2c2317c56ee13abdbdbc866363c3b52dab826e3c)	2001-09-20 13:15:35 +00:00
Andrew Bartlett	395454db5d	Fix for MiXed and UPPER case usernames with plaintext PAM passwords. ... (This used to be commit ba1b411f556bfac8b953c44c81257c7d8fb9817d)	2001-09-20 03:31:57 +00:00
Andrew Bartlett	6adafe50d4	Remove the ugly hacks to get around the Get_Pwnam() calls in pass_check.c by ... simply not doing Get_Pwnam() calls in pass_check.c We now make *one* sys_getpnam() call in cgi.c and we always call PAM no matter what it returns. We also no longer run the password cracker for these logins. The truly parinod will note the slight difference in call paths, in that we only call crypt for valid password structs (if not --with-pam). The truly parinoid don't run SWAT either, so I don't think this is an issue. Andrew Bartlett (This used to be commit 9020d884935243f28c19cedc88f076f0709e12cb)	2001-09-19 05:26:11 +00:00
Tim Potter	b800a36b1c	Some patches to authentication: ... - the usersupplied_info now contains a smb_username (as it comes across on the wire) and a unix_username (after being passed through mapping functions) - when doing security={server,domain} use the smb_username, otherwise use the unix_username (This used to be commit d34fd8ec0716127c7a68eeb8e77d1ae8cc07b547)	2001-09-12 06:39:50 +00:00
Andrew Tridgell	19fea3242c	the next stage in the NTSTATUS/WERROR change. smbd and nmbd now compile, but the client code still needs some work ... (This used to be commit dcd6e735f709a9231860ceb9682db40ff26c9a66)	2001-09-04 07:13:01 +00:00
Andrew Tridgell	b031af348c	converted another bunch of stuff to NTSTATUS ... (This used to be commit 1d36250e338ae0ff9fbbf86019809205dd97d05e)	2001-08-27 19:46:22 +00:00
Andrew Bartlett	6ad80352dd	This patch does a number of things, mostly smaller than they look :-) ... In particuar, it moves the domain_client_validate stuff out of auth_domain.c to somwhere where they (I hope) they can be shared with winbind better. (This may need some work) The main purpose of this patch was however to improve some of the internal documentation and to correctly place become_root()/unbecome_root() calls within the code. Finally this patch moves some more of auth.c into other files, auth_unix.c in this case. Andrew Bartlett (This used to be commit ea1c547ac880def29f150de2172c95213509350e)	2001-08-12 11:19:57 +00:00