1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-11 05:18:09 +03:00
Commit Graph

16369 Commits

Author SHA1 Message Date
Stefan Metzmacher
2326c9e0a2 r215: merge over svk fixes from 4_0
metze
2007-10-10 10:51:14 -05:00
Stefan Metzmacher
4d9d8e83aa r208: merge the version schema changes from 4_0
metze
2007-10-10 10:51:14 -05:00
Andrew Bartlett
57a5563b42 r201: Fix bugs in the --helper-protocol=ntlm-server-1 implementation.
(allow the use of base64 encoded strings, LM or NT passwords)

Andrew Bartlett
2007-10-10 10:51:13 -05:00
Gerald Carter
6b18012dc8 r197: mistaken merge from trunk 2007-10-10 10:51:13 -05:00
Gerald Carter
911a28361b r196: merging struct uuid from trunk 2007-10-10 10:51:13 -05:00
Gerald Carter
1501d58b8e r195: adding files to ignore list 2007-10-10 10:51:13 -05:00
Paul Green
35d7435cae r192: Fix configure.in to only use $BLDSHARED to select whether to build static or shared libraries. 2007-10-10 10:51:13 -05:00
Andrew Bartlett
c05016a2f7 r191: Only send the ntlm_auth 'ntlm-server-1' helper client a '.' after the
server had said something (such as an error).

Andrew Bartlett
2007-10-10 10:51:12 -05:00
Andrew Bartlett
8efdd957ba r188: Add a new 'helper protocol' to ntlm_auth.
This protocol looks rather like SMTP headers/LDAP:

NT-Domain: TESTWG
Username: abartlet
...

Password: foo

Challenge-response passwords are in hexideciaml, while any 'plain'
string can be base64 encoded when like this:

Password:: Zm9vCg==

(the :: indicates it, just like LDAP - I hope)

The protocol is not final, so it is #ifdef DEVELOPER for now (so
nobody starts to rely on it until I'm happy), but we may as well get
this into subversion.

My intention is to use this to power the next version of my
PPP/ntlm_auth plugin, and hopefully entice a FreeRadius plugin out of
the woods.

Andrew Bartlett
2007-10-10 10:51:12 -05:00
Gerald Carter
54912b70f2 r185: fix linking prob surrounding --with-fake-kaserver and -lcrypto 2007-10-10 10:51:12 -05:00
Andrew Bartlett
6e1b7a8848 r177: Split ntlm_auth --diagnostics into a seperate file, so as not to clutter
the main ntlm_auth program.

It quite possibly should belong in smbtorture, but relies on the
winbind client for now.

Andrew Bartlett
2007-10-10 10:51:12 -05:00
Andrew Bartlett
565305f7bb r176: Improve our fallback code for password changes - this would be better
with more correct NTLMSSP support in client and server, but it will do
for now.

Also implement LANMAN password only in the classical session setup code, but
#ifdef'ed out.  In Samba4, I'll make this run-time so we can torture it.

Lanman passwords over 14 dos characters long could be considered
'invalid' (they are truncated) - so SMBencrypt now returns 'False' if
it generates such a password.

Andrew Bartlett
2007-10-10 10:51:12 -05:00
Andrew Bartlett
e5bbb086b2 r175: Move this comment to the right place...
Andrew Bartlett
2007-10-10 10:51:12 -05:00
Andrew Bartlett
da4177209d r171: Continue the 'rename nt_session_key' work. This attempts to rename
this variable to 'user_session_key', where possible.  The command line
parameter is currently unchanged).

Andrew Bartlett
2007-10-10 10:51:11 -05:00
Volker Lendecke
c31feb045a r160: Fix msdfs proxy. Could others please also test this, this code is soo
cluttered. I've tested with w2k and xp with msdfs proxy and normal msdfs root,
but I would like others to also look at the code.

Thanks,

Volker
2007-10-10 10:51:11 -05:00
Gerald Carter
14d3794eec r155: real for for BUG 761 -- allow printing parameter to set defaults on a per share basis 2007-10-10 10:51:11 -05:00
Volker Lendecke
fbeff41991 r153: Fix memleak 2007-10-10 10:51:11 -05:00
Jeremy Allison
88a9bca9aa r150: Make 3.x pass the Samba 4.x RAW-SEARCH tests - except for the
UNIX info levels, and the short case preserve names. Tested
with NT - needs more testing. Will work on this more on Monday.
Jeremy.
2007-10-10 10:51:11 -05:00
Andrew Bartlett
b09d333aed r148: Ensure we do not dereference a null pointer when we return the user
session key.
2007-10-10 10:51:11 -05:00
Volker Lendecke
6e18bed170 r145: pdb_create_alias now returns NTSTATUS. More of this to follow.
Volker
2007-10-10 10:51:11 -05:00
Paul Green
3d045d46e4 r144: Move first use of AC_CHECK_HEADERS so it is always executed. Tidy up indendation. 2007-10-10 10:51:10 -05:00
Volker Lendecke
3eab8ed545 r139: Apply some const 2007-10-10 10:51:10 -05:00
Gerald Carter
bccee79653 r119: missed a file in volker patch 2007-10-10 10:51:10 -05:00
Gerald Carter
e2e1c0048c r118: adding some recent checkins to commit list 2007-10-10 10:51:10 -05:00
Gerald Carter
b393469d95 r116: volker's patch for local group and group nesting 2007-10-10 10:51:10 -05:00
Gerald Carter
1fae60ab20 r115: finally checking in tridge's winbindd_schannel patch for connections 2007-10-10 10:51:09 -05:00
Andrew Bartlett
0693b9e79f r104: Fix ntlm_auth by adding the new strhex_to_data_blob() call.
Andrew Bartlett
2007-10-10 10:51:09 -05:00
Jeremy Allison
21cc6ab7e8 r96: Stupid f&%'n UNIX extensions.... SETPATHINFO
normally takes as it's param entry the filename to
be acted upon.... Unless it's UNIX extensions create
hardlink, or UNIX extensions create symlink. Then it's
param -> newfile name
data -> oldfile name.
This caused me to stuff them up in 3.0.2 (and the
client commands link and symlink). Fixed them, everything
is now called oldname and newname - thus specifying which
name should already exist (hint - the old one...) and which
will be created (newname).
Jeremy.
2007-10-10 10:51:08 -05:00
Paul Green
4d1be258a1 r93: Update VOS _POSIX_C_SOURCE macro to 200112L. 2007-10-10 10:51:08 -05:00
Jim McDonough
68022f5ebc r91: Fix lsalookupnames. Previously we'd fail if we didn't find the name, but
we never checked if it was a domain user and didn't find a local one.
2007-10-10 10:51:08 -05:00
Steve French
e688c08d33 r88: Add missing guest mount option for mount.cifs 2007-10-10 10:51:08 -05:00
Jeremy Allison
09d82a0bef r87: Fix the build that Andrew Bartlett broke. Andrew - don't check *ANYTHING* in
unless you have done a make clean; make.
Jeremy.
2007-10-10 10:51:08 -05:00
Andrew Bartlett
1c6d0399d6 r86: This function was moved to lib/nterr.h
Andrew Bartlett
2007-10-10 10:51:08 -05:00
Andrew Bartlett
039883043d r85: Update the winbind interface version, as I just extended the struct.
Andrew Bartlett
2007-10-10 10:51:08 -05:00
Andrew Bartlett
eb1c1b5eb0 r84: Implement --required-membership-of=, an ntlm_auth option that restricts
all authentication to members of this particular group.

Also implement an option to allow ntlm_auth to get 'squashed' error codes,
which are safer to communicate to remote network clients.

Andrew Bartlett
2007-10-10 10:51:07 -05:00
Jeremy Allison
0661357484 r81: Make EA's case independent - fix smbtorture to test for this.
Jeremy.
2007-10-10 10:51:07 -05:00
Steve French
69861f168c r77: Fix path canonicalization of the mount target path and help text display in the cifs mount helper 2007-10-10 10:51:07 -05:00
Alexander Bokovoy
738666ce0a r76: Fix smbfs problem with Tree Disconnect issued before smbfs starts its work.
We use cli_state.smb_rw_error to pass this specific case into cli_close_connection()
from smbmount as smb_rw_error can have only selected number of states and
it is ignored in cli_close_connection().

Compiled and tested by Lars Mueller from SuSE on x86, x86_64, ppc, ppc64, s390 and
s390x.
2007-10-10 10:51:07 -05:00
Gerald Carter
673c3f8bc0 r75: patch from Cal Heldenbrand <calzplace@yahoo.com> for 'pam_smbpass migrate' 2007-10-10 10:51:07 -05:00
Gerald Carter
70fd78025b r73: bumping version to 3.0.3pre3 2007-10-10 10:51:07 -05:00
Andrew Bartlett
724e8d3f33 r69: Global rename of 'nt_session_key' -> 'user_session_key'. The session key could
be anything, and may not be based on anything 'NT'.  This is also what microsoft
calls it.
2007-10-10 10:51:06 -05:00
Volker Lendecke
b69e8e64d4 r63: Remove -lcrypto from wbinfo. Sorry.
Volker
2007-10-10 10:51:06 -05:00
Andrew Tridgell
40b5794ae0 r59: revert session key problem 2007-10-10 10:51:06 -05:00
Jim McDonough
5ebcb9081e r53: Remove modifyTimestamp from list of our attributes. We just check it for
cache entry time comparisons in password lockout.  Fixes problems where
pdb_ldap tries to delete the operational attribute modifyTimestamp when
deleting a user account.
2007-10-10 10:51:06 -05:00
Jeremy Allison
a205c56a75 r50: Fix bug 1139 as per fix suggested by jdev@panix.com,
swap lookups for user and group - group will do an
algorithmic lookup if it fails, user won't.
Jeremy.
2007-10-10 10:51:06 -05:00
Andrew Bartlett
26d8791dde r49: Support SMB signing on connections using only the
LANMAN password.  This also corrects the 'session key'
for these connections.
2007-10-10 10:51:06 -05:00
Jeremy Allison
85d9c92fd5 r48: Fix types for debug message parameters.
Jeremy.
2007-10-10 10:51:05 -05:00
Gerald Carter
a7e2730ec4 r39: * importing .cvsignore files
* updateing WHATSNEW with vl's change
2007-10-10 10:51:05 -05:00
Volker Lendecke
23c5769545 r38: Fix caching of name->sid lookups
Volker
2007-10-10 10:51:05 -05:00
Gerald Carter
de93e66fc7 r22: release notes for 3.0.3pre2 2007-10-10 10:51:03 -05:00