1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-20 14:03:59 +03:00

910 Commits

Author SHA1 Message Date
Andrew Bartlett
6744ca0a36 More updates to prevent account-guessing.
This moves the check that ensures that the account being looked up is the same
account as the machine logged in as to the front, before we even start with
passdb.

Merge for 2.2.2?

Andrew Bartlett
(This used to be commit f7ed0ecc14aeba5ad260f24a76ced70cf52f8e48)
2001-09-26 11:13:55 +00:00
Jeremy Allison
0f4281b9b4 Added Elrond patch to make se_access_check use NT datastructures, not Samba.
Jeremy.
(This used to be commit bca6419447e926e51aeecf3e484228f640cecb84)
2001-09-26 00:05:03 +00:00
Jeremy Allison
008ba27b28 Fixed enumeration of large numbers of groups from a Samba DC.
Tidied up debug messages in lib/messages.c
Jeremy.
(This used to be commit dfb58f227609d6c8a255677b85ec853efa19f602)
2001-09-25 00:50:37 +00:00
Andrew Tridgell
80ad52d5c2 fixed character set for user name pull
(This used to be commit 374f76fa2d5dcd036943c3f968a94f097a971ac7)
2001-09-21 13:22:22 +00:00
Andrew Bartlett
01529e340c fix debug
(This used to be commit d103371e8028efb6eec3c4b917b68734832f5844)
2001-09-19 02:53:14 +00:00
Andrew Bartlett
36939fcd24 Reverse some of the breakage I commited a day or two ago, as we need to
fill out the user_info struct (otherwise we don't have a vuid for
make_connection()).

Also add a become_user() call, becouse it really looks like it was missing
(we must pass it anyway to finish make_connection()).

Is there any reason not to be the user when reading an ACL?

Finally, fix up some formatting to show that the two functions are almost
identical.

Andrew Bartlett
(This used to be commit 00c667c0ad922a1bf388b8a2b8c6137fc7f0acaa)
2001-09-19 02:28:15 +00:00
Simo Sorce
87945989c0 move to SAFE_FREE()
(This used to be commit 5ceecc7bef71b455ba7c4efd9928e2433dccc961)
2001-09-17 10:26:23 +00:00
Andrew Bartlett
6ff605c283 Minor tidy-up.
(This used to be commit dbb21aedbf10ebc4ef0d549c4f919cf91459eef7)
2001-09-16 07:32:06 +00:00
Andrew Bartlett
dec3cbcaf0 Fix up workstaion and kickoff time checks, moved to auth_smbpasswd.c where
they can have general effect.

Fixed up workstaion support in the rest of samba, so that we can do these
checks.

Pass through the workstation for cli_net_logon(), if supplied.
(This used to be commit 7f04a139b2ee34b4c282590509cdf21395815a7a)
2001-09-16 06:35:35 +00:00
Andrew Bartlett
06ccf1e499 Looks like it missed these. make_connection now no longer takes a 'username'
argument.
(This used to be commit 0e1322227b0a91226b4b85c8e0ff838ebfd9e962)
2001-09-15 23:32:19 +00:00
Andrew Bartlett
7892c494e7 Kill off the //server/share%user hack in share level security.
This should help make much of this code simpiler.

Andrew Bartlett
(This used to be commit fb0c3629c360fd0c57129500474960e6da6f9ef0)
2001-09-15 12:55:59 +00:00
Gerald Carter
bd7595ec37 merge from appliance_head
(This used to be commit f70b1707e42b3f7aaa38cc5637fcc5cbcdd5a26a)
2001-09-14 15:22:49 +00:00
Andrew Bartlett
cbd99a13c5 Finally commit my fix to this little mess...
The same function that adds machines to the system also adds users, and the
new 'add user script'/'add machine script' distinction needs to be made
correctly.  Also introduces a sainity check for correct $ termination.

Andrew Bartlett
(This used to be commit ef377ea0cc55cb6647ecd7a634cf5983e11cfe99)
2001-09-14 10:31:39 +00:00
Tim Potter
b800a36b1c Some patches to authentication:
- the usersupplied_info now contains a smb_username (as it comes across on
   the wire) and a unix_username (after being passed through mapping
   functions)

 - when doing security={server,domain} use the smb_username, otherwise use
   the unix_username
(This used to be commit d34fd8ec0716127c7a68eeb8e77d1ae8cc07b547)
2001-09-12 06:39:50 +00:00
Andrew Tridgell
39d7983a47 - enable MSDFS by default, there seems no reason not to have it enabled
by default in Samba 3.x

- got rid of some unused parameters in Makefile.in

- declare DEBUGLEVEL in debug.h rather than in each file
(This used to be commit b8651acb9c0d7248a6a2e82c33b1e43633fd83fd)
2001-09-12 03:08:51 +00:00
Tim Potter
a39d4c052c Converted DFS error returns to WERROR instead of uint32.
(This used to be commit 97286570ef6f9151b5fe0be32aa4b294e7db9ab8)
2001-09-12 01:14:03 +00:00
Gerald Carter
cae476a1a2 cut-n-paste error
(This used to be commit b2ed211df0cad2013fd8ff67f48bf73962cc1d39)
2001-09-10 19:30:34 +00:00
Gerald Carter
c113b5196f merge from APPLIANCE_HEAD
(This used to be commit 55bd514c4576a273dac1ac5c37207a96b41f6572)
2001-09-10 19:29:00 +00:00
Andrew Tridgell
9a9ac2739b got rid of USE_TDB_MMAP_FLAG as its not needed any more
(This used to be commit c26e0d3f27a05ecc8bd2390f9aab7f9451524e47)
2001-09-06 22:08:19 +00:00
Tim Potter
b31055fa74 Logon workstation checks from Toomas Soome <tsoome@ut.ee>
Fixed compile warning.
(This used to be commit 3eee66516596835c70c8d652ca633d2e1158fbb7)
2001-09-06 05:24:37 +00:00
Andrew Tridgell
b04933dfbb a fix for fussy compilers
(This used to be commit 78f437b5073207606b23be42960e2b10f785a148)
2001-09-04 11:18:50 +00:00
Andrew Tridgell
19fea3242c the next stage in the NTSTATUS/WERROR change. smbd and nmbd now compile, but the client code still needs some work
(This used to be commit dcd6e735f709a9231860ceb9682db40ff26c9a66)
2001-09-04 07:13:01 +00:00
Andrew Tridgell
fbc1f326f4 more NTSTATUS/WERROR conversion
(This used to be commit ad648c5cd8ebe4be8304379117f403d7673dcbc8)
2001-09-03 10:38:13 +00:00
Andrew Tridgell
fd6ea43161 the next step in our error code handling change
- added WERROR for win32 error codes
- added a configure test for immediate structures

still lots to do, so its not enabled by default, but the main
structure is there
(This used to be commit 24f9ab683dec52587ee56717e821b49c0fa3d70f)
2001-09-03 08:50:59 +00:00
Tim Potter
cd0a9f6fcc Send a MSG_SMB_SAM_SYNC when a netlogon_ctrl2 message is received.
(This used to be commit 73e1b708d0ab7a6e612f8910c5815a6ab6de66cd)
2001-08-28 06:34:08 +00:00
Andrew Tridgell
b031af348c converted another bunch of stuff to NTSTATUS
(This used to be commit 1d36250e338ae0ff9fbbf86019809205dd97d05e)
2001-08-27 19:46:22 +00:00
Andrew Tridgell
ee5f7237de started converting NTSTATUS to be a structure on systems with gcc in order to make it type incompatible with BOOL so we catch errors sooner. This has already found a number of bugs
(This used to be commit 1b778bc7d22efff3f90dc450eb12baa1241cf68f)
2001-08-27 17:52:23 +00:00
Andrew Bartlett
3820578473 As per plug-fest discussions this paramater no longer defaults to the value
of add user script.
(This used to be commit 9e0c9a99f6ca01cd6a0ee3084f85e1c36b11d7c3)
2001-08-27 03:56:09 +00:00
Jeremy Allison
d309035c3e Spaces -> Tabs.
Jeremy.
(This used to be commit 5b665122f5a785f858f75c0a3c181ae193e2c503)
2001-08-26 20:05:33 +00:00
Herb Lewis
717533483b get rid of compiler warnings
(This used to be commit 0768991d04ea03e774ca8662c9cae5e1951b88e0)
2001-08-24 20:32:01 +00:00
Herb Lewis
40342d6917 fix missing )
(This used to be commit f3bc6b5d68bdb01b07b9d780f5ba81c05e22f48c)
2001-08-24 14:34:23 +00:00
Simo Sorce
0174ccc0d6 let admins also abort a shutdown
(This used to be commit 3b40ec4f149a8813c1d68f184858e2ddd605d8fd)
2001-08-24 07:51:59 +00:00
Jeremy Allison
659774bffd Fixed malloc -> talloc problems pointed out by Simo.
Jeremy
(This used to be commit 0f5b187387fb536a6866d9109eff82411798f79e)
2001-08-24 07:32:51 +00:00
Simo Sorce
8ef7ddba65 so let admins shutdown their samba servers remotely if they want :-)
(This used to be commit 6391fd7bdab07c83e9eed02e761db09918e60302)
2001-08-23 23:25:34 +00:00
Tim Potter
b5a5fe44cc Fix for filers sending -1 for the maximum read request length on the
LSA pipe.
(This used to be commit 95307a5d3881803e57639431da967ee3872aacc4)
2001-08-23 18:05:44 +00:00
Simo Sorce
28b206f163 some %things are not expanded properly in get share info levels
(This used to be commit 3e60636f2b7003ea1e915bc7c2d2e8dec5667bbd)
2001-08-22 16:10:28 +00:00
Jeremy Allison
e08ca02631 Added Jim McDonough's Win9x take ownership fix.
Jeremy.
(This used to be commit 800e46ea7e724460be2ba5f71e5baa2f2ddd2d3b)
2001-08-13 23:19:16 +00:00
Gerald Carter
26ceb74063 merge from 2.2
(This used to be commit 7049217eb40dbe3de6c05fe43742d2f684501723)
2001-08-13 21:30:27 +00:00
Simo Sorce
2e783a4707 this is a big global fix for the ptr = Realloc(ptr, size) bug.
many possible mem leaks, and segfaults fixed.

someone should port this fix to 2.2 also.
(This used to be commit fa8e55b8b465114ce209344965c1ca0333b84db9)
2001-08-12 17:30:01 +00:00
Andrew Bartlett
ddec830658 Kill of idra's extra become_root()/unbecome_root() now I have fixed the actual
problem.

Andrew Bartlett
(This used to be commit 895d1cd317d0838d711474f2f19186444a88b52c)
2001-08-12 12:23:50 +00:00
Andrew Bartlett
6ad80352dd This patch does a number of things, mostly smaller than they look :-)
In particuar, it moves the domain_client_validate stuff out of
auth_domain.c to somwhere where they (I hope) they can be shared
with winbind better.  (This may need some work)

The main purpose of this patch was however to improve some of the
internal documentation and to correctly place become_root()/unbecome_root()
calls within the code.

Finally this patch moves some more of auth.c into other files, auth_unix.c
in this case.

Andrew Bartlett
(This used to be commit ea1c547ac880def29f150de2172c95213509350e)
2001-08-12 11:19:57 +00:00
Simo Sorce
8d5916d5fa Without this become_root()/unbecome_root() pair I was not able to login
when samba acting as a PDC.
I also removed a pdb_free_sam(sampass), because it sampass was never
initialized before...

Please abartlet can you check this patch is ok?
I feel like this was a bad check-in
(This used to be commit f25a5dab6012ebbe83435b06650d6ab92432760a)
2001-08-11 16:34:11 +00:00
Jeremy Allison
4b2016305b Merge in the NT drivers changes from 2.2.
Jeremy.
(This used to be commit a3781ad38ff6c70238e7e9b83324477e5c9780d5)
2001-08-10 19:38:53 +00:00
Tim Potter
047a7c88d7 Replaced the duplicate DOS constants with appropriate ones from doserr.h to
emphasise the fact that the spoolss pipe returns DOS error codes instead of
32-bit nt status codes.
(This used to be commit 5f5ed41ee872d842e944cd2e84a80de714ad4385)
2001-08-10 05:41:53 +00:00
Gerald Carter
f8d3cac8af a few cleanups while mergeing the passdb code into 2.2
(This used to be commit ef01739708479c43f529c646dd136ee5670b08f9)
2001-08-09 15:53:49 +00:00
Andrew Bartlett
986372901e This is my 'Authentication Rewrite' version 1.01, mostly as submitted to
samba-technical a few weeks ago.

The idea here is to standardize the checking of user names and passwords,
thereby ensuring that all authtentications pass the same standards.  The
interface currently implemented in as

nt_status = check_password(user_info, server_info)

where user_info contains (mostly) the authentication data, and server_info
contains things like the user-id they got, and their resolved user name.

The current ugliness with the way the structures are created will be killed
the next revision, when they will be created and malloced by creator functions.

This patch also includes the first implementation of NTLMv2 in HEAD, but which
needs some more testing.  We also add a hack to allow plaintext passwords to be
compared with smbpasswd, not the system password database.

Finally, this patch probably reintroduces the PAM accounts bug we had in
2.2.0, I'll fix that once this hits the tree.  (I've just finished testing
it on a wide variety of platforms, so I want to get this patch in).
(This used to be commit b30b6202f31d339b48d51c0d38174cafd1cfcd42)
2001-08-03 13:09:23 +00:00
Jeremy Allison
996719cce2 Added "use mmap" for HPUX.
Jeremy.
(This used to be commit 840802f10677cb0009cb4df4c37c7d01aa5edacd)
2001-07-30 22:21:31 +00:00
Tim Potter
648528196c Held a shoot-out between NT_STATUS_NO_PROBLEMO and NT_STATUS_NOPROBLEMO.
According to the incorruptible judges find and grep, the latter won.

Mmm - procrastination.  (-:
(This used to be commit 2e339403605177b15d5185a8fdd1b06f3f043168)
2001-07-25 06:42:05 +00:00
Jeremy Allison
a9ab7eaa5d Fix case insensitive password change code.
Fixed crash bug with un-zeroed talloced memory.
Jeremy.
(This used to be commit eea1c30df246e081e672d7132345d0fd35ad9841)
2001-07-23 22:06:05 +00:00
Tim Potter
cdcf646c65 #ifdef'ed out some unused functions.
(This used to be commit ab5ccce2edd6118db0389701ff9e325ee1f818c7)
2001-07-19 07:44:59 +00:00