1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-29 21:47:30 +03:00

345 Commits

Author SHA1 Message Date
Jeremy Allison
b4fa49fe13 More Realloc fixes.
Jeremy.
-
Jeremy Allison
381c02e638 More Realloc fixes.
Jeremy.
-
Tim Potter
73addddb2e Fixed up 'orrible formatting. -
Simo Sorce
fa8e55b8b4 this is a big global fix for the ptr = Realloc(ptr, size) bug.
many possible mem leaks, and segfaults fixed.

someone should port this fix to 2.2 also.
-
Andrew Bartlett
ea1c547ac8 This patch does a number of things, mostly smaller than they look :-)
In particuar, it moves the domain_client_validate stuff out of
auth_domain.c to somwhere where they (I hope) they can be shared
with winbind better.  (This may need some work)

The main purpose of this patch was however to improve some of the
internal documentation and to correctly place become_root()/unbecome_root()
calls within the code.

Finally this patch moves some more of auth.c into other files, auth_unix.c
in this case.

Andrew Bartlett
-
Andrew Bartlett
b30b6202f3 This is my 'Authentication Rewrite' version 1.01, mostly as submitted to
samba-technical a few weeks ago.

The idea here is to standardize the checking of user names and passwords,
thereby ensuring that all authtentications pass the same standards.  The
interface currently implemented in as

nt_status = check_password(user_info, server_info)

where user_info contains (mostly) the authentication data, and server_info
contains things like the user-id they got, and their resolved user name.

The current ugliness with the way the structures are created will be killed
the next revision, when they will be created and malloced by creator functions.

This patch also includes the first implementation of NTLMv2 in HEAD, but which
needs some more testing.  We also add a hack to allow plaintext passwords to be
compared with smbpasswd, not the system password database.

Finally, this patch probably reintroduces the PAM accounts bug we had in
2.2.0, I'll fix that once this hits the tree.  (I've just finished testing
it on a wide variety of platforms, so I want to get this patch in).
-
Tim Potter
6e698d65ec Merge of change machine account password race fix from appliance branch. -
Andrew Tridgell
7b3d030e1f a better test for unix domain sockets -
Tim Potter
d5f12bc530 In wb_samr_query_dispinfo() pass back the 32-bit status code from
cli_samr_query_dispinfo().
-
Tim Potter
96bd7bdd0b Call cli_samr_lookup_rids() in bunches of < 1000 rids to avoid crashing
NT.  Note this can be done completely anonymously.
-
Tim Potter
36413784ae Merged across rewritten version of winbindd_kill_connections(). This now
works much better with trusted domains whose DCs cannot be reached.

I'm pretty impressed with how much faster winbindd is in HEAD rather than
TNG.  A lot fewer unecessary name lookups are performed and it feels a lot
zippier now.
-
Andrew Tridgell
c2c1f2027e the nss and pam modules in winbind don't have strchr_m() yet, so use
strchr() for the moment
-
Andrew Tridgell
d472ee3a69 added winbind_exclude_domain() so smbd can tell the winbind client
code not to do lookups for a particular domain. This allows winbind to
operate on a Samba PDC
-
Andrew Tridgell
001129e215 allow winbindd to run as non-root so we can test it more easily -
Andrew Tridgell
c41fc06376 strchr and strrchr are macros when compiling with optimisation in gcc, so we can't redefine them. damn. -
Andrew Tridgell
debb471267 The big character set handling changeover!
This commit gets rid of all our old codepage handling and replaces it with
iconv. All internal strings in Samba are now in "unix" charset, which may
be multi-byte. See internals.doc and my posting to samba-technical for
a more complete explanation.
-
Andrew Tridgell
e2ecff419f fixed usage of socklen_t and also tidied up SIG_ATOMIC_T, using a typedef instead of a define -
Andrew Tridgell
674ee2f1d1 next_token() was supposed to be a reentrant replacement for strtok(),
but the code suffered from bitrot and is not now reentrant. That means
we can get bizarre behaviour
i've fixed this by making next_token() reentrant and creating a
next_token_nr() that is a small non-reentrant wrapper for those lumps
of code (mostly smbclient) that have come to rely on the non-reentrant
behaviour
-
Tim Potter
8e982941d8 Merge from appliance branch:
Don't call find_domain_from_name() from winbindd_kill_connections() as
you get stuck in an infinite loop!
-
Tim Potter
6bd1ba9a04 Fixed typo in #ifndef at head of file. -
Tim Potter
bb01d2151c Added comment about possible optimisation to winbindd_pam_auth() -
Tim Potter
9a77f8530f Fixed bug in winbind_sid_to_gid() function. -
Tim Potter
15efbbd2fe Fix for cli_samr_connect() arg change. -
Tim Potter
369c911b44 Indent dodgy function prototype to avoid make proto picking it up and
causing mayhem throughout the tree.
-
Andrew Tridgell
dbb770ecc6 don't use c++ style comments -
Andrew Tridgell
f3c70e4248 fixed solaris compilation error (don't add to a void*) -
Andrew Tridgell
8ec9c87b5d use LDSHFLAGS not -shared in several places -
Tim Potter
086f332bb1 More compile fixups for winbind portability. -
Tim Potter
b44d3f912c Compile fix for solaris.
Fixed some compiler warnings.
-
Jeremy Allison
d52bc4d219 Try to fix build by adding autoconf tests for pam headers.
Jeremy.
-
Tim Potter
083b74c743 Fixes to get pam_auth() functionality working again. -
Jeremy Allison
86557d6336 Zero-fill struct hostent.
Jeremy.
-
Jeremy Allison
c38a465bef Fixed glibc crash problems with libnss_wins.so
Jeremy.
-
Tim Potter
03b1cab9a8 Memory leak fixes from insure. -
Tim Potter
a92a0d061b Compile fixes for dynamic samr_query_userinfo() stuff. -
Tim Potter
0e03209af6 Use sid_peek_rid() instead of sid_split_rid(). -
Tim Potter
014859b62b Fixes from nsswitch testsuite. Lots of stuff works much better now. (-: -
Tim Potter
011d459435 The substitution of %U and %D in the 'template homedir' is nowdone
by lp_string() calling standard_sub_basic().
-
Tim Potter
d761a7deb3 Added S_ISSOCK macros for systems which treat UNIX domain sockets as FIFOs
(SCO).
-
Tim Potter
a7728bfa52 Misc fixes to get winbindd working. We can now do a 'getent passwd'
and 'getent group' and have most things working.
-
Tim Potter
873e672b90 OK so I couldn't be as clever as I wanted to be with winbindd_glue.c
so all the glue functions are prefixed with wb_ to avoid conflicts with
the old rpc_client stuff which is still a dependency of smbd/nmbd.
-
Tim Potter
f8c83ce28b Ignore *.po files. -
Tim Potter
38ab3b31b5 iAdditional files for winbind merge. -
Tim Potter
59f95416b6 Preliminary merge of winbind into HEAD. Note that this compiles and links
but I haven't actually run it yet so it probably doesn't work.  (-:
-
Tim Potter
1e7b1c71b9 Merge from TNG branch. -
Andrew Tridgell
d854d01d11 added solaris wrapper from tng -
Andrew Tridgell
67ccfd2826 merge some of the nsswitch code from tng to head
the libnss_winbind.so from head now works with
the winbindd from tng
-
Andrew Tridgell
b9137b613d merge from 2_2 -
Jeremy Allison
fc76681812 Merge of Andrew's changes in 2.2.
Jeremy.
-
Jeremy Allison
94747b4639 Got "medieval on our ass" about adding the -1 to slprintf.
Jeremy.
-