sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-28 07:21:54 +03:00
Code
13,268 Commits 60 Branches 1,144 Tags 452 MiB
5d643b9d03
Commit Graph

13268 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Richard Sharpe
5d643b9d03 A small patch from metze to fix builds on some platforms ... 
http://lists.samba.org/pipermail/samba-technical/attachments/20030512/0332258a/vfs-fix-01.obj
 0001-01-01 00:00:00 +00:00
John Terpstra
f03a13c0be Adding more info on File and Directory conventions / differences. 0001-01-01 00:00:00 +00:00
Alexander Bokovoy
f1c4f65ae0 Fix a wrong define check. 0001-01-01 00:00:00 +00:00
Alexander Bokovoy
fea5d85d94 Wrap into WITH_QUOTAS yet another place in trans2 0001-01-01 00:00:00 +00:00
Alexander Bokovoy
7c2395d7cd Forgot to actually change default for quotas to -no- in configure.in 0001-01-01 00:00:00 +00:00
Alexander Bokovoy
73cf63a27f Forgot to actually change default for quotas to -no- in configure.in 0001-01-01 00:00:00 +00:00
Alexander Bokovoy
73de13159c Better isolate quota stuff 0001-01-01 00:00:00 +00:00
Alexander Bokovoy
01cff3e2e4 Small fix for HAVE_SYS_QUOTAS usage, spotted by build farm 0001-01-01 00:00:00 +00:00
Andrew Bartlett
f67cc24acf Fix up a bit of my sloppy C. 0001-01-01 00:00:00 +00:00
Alexander Bokovoy
ee5fa84068 Small fix for HAVE_SYS_QUOTAS usage, spotted by build farm 0001-01-01 00:00:00 +00:00
Alexander Bokovoy
4bf022ce9e Add NT quota support. Patch from Stefan (metze) Metzemacher 
1. Allows to change quota settings for shared mount points from Win2K and WinXP from Explorer properties tab
2. Disabled by default and when requested, will be probed and enabled only on Linux where it works
3. Was tested for approx. two weeks now on Linux by two independent QA teams, have not found any bugs so far
Documentation to follow
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
4842de04cf Give up on the idea of avoiding lp_load() in ntlm_auth.... 
Also, we might be given a 0 length challenge, so don't smb_panic() for
smb_xmalloc() of zero size.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
dd14da7566 Make it possible to actually use --user-SID and --group-SID on a standard command line. 
Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
ca2e453c78 Fix compile. 0001-01-01 00:00:00 +00:00
Alexander Bokovoy
1dd5786359 Add new files needed for VFS fixes. 
1. idmap.h is used for unid_t only, agreed by Simo
2. sysquotas.h is used to add quota support to VFS layer and is needed for future NT quota commit
3. vfs_macros.h provides convenient macros to access VFS API.
 0001-01-01 00:00:00 +00:00
Alexander Bokovoy
91984ef5ca Fix VFS layer: 
1. Finally work with cascaded modules with private data storage per module
2. Convert VFS API to macro calls to simplify cascading
3. Add quota support to VFS layer (prepare to NT quota support)

Patch by Stefan (metze) Metzemacher, with review of Jelmer and me
Tested in past few weeks. Documentation to new VFS API for third-party developers to follow
 0001-01-01 00:00:00 +00:00
John Terpstra
02244dac83 Rolling in VL's changes. 0001-01-01 00:00:00 +00:00
Volker Lendecke
2143446043 Set the password for a newly created trustdom account. Tested against 
PDCs running NT4SP1, NT4SP6 and Samba 3.0.

Volker
 0001-01-01 00:00:00 +00:00
Volker Lendecke
e4e44cf3b1 When we have a NT4SP0 PDC trust us, we first have to check the 
password. On NT4, NT_STATUS_NOLOGON_INTERDOMAIN_TRUST_ACCOUNT means
the password was correct. So the PDC believed that he had his trust
account correctly added. Later the auth2 naturally failed.

BTW, setting up an interdom trust account is not what I would call
well documented and easy to handle... Working on that now :-)

Volker
 0001-01-01 00:00:00 +00:00
Volker Lendecke
8de04fcf68 Ok, this is a hack. On a netsec bind reply I did not see anything 
useful in the auth verifier yet. So this patch ignores it.

Really checking this would be a lot more intrusive: in rpc_api_pipe we
would have to distinguish between binds and normal requests, or have
more state in the netsec info of cli_state, which is also somewhat
hackish.

Volker
 0001-01-01 00:00:00 +00:00
John Terpstra
18b62570c4 Updating Global definitions. 0001-01-01 00:00:00 +00:00
John Terpstra
c0a1069463 Extending Access Control Docs 0001-01-01 00:00:00 +00:00
Andrew Bartlett
0e432817cb As discussed on samba-technical - move to 'primaryGroupSid' insted of 
primaryGroupID (rid).  This is consistant with the move from 'rid' to ntSid
for the primary user identifier.

Also cope with legacy installations where primaryGroupID might have been
stored as 0.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
640462a365 Using /dev/urandom for determining an ldap server backoff is a waste of system 
entropy - use sys_random() instead.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
John Terpstra
44dbed2317 Completion of Stand-Alone server docs. 0001-01-01 00:00:00 +00:00
John Terpstra
147676b44a Fix typos in StandAloneServer 
Remove admonition in ServerType - Until someone gives me a replacement for it
I consider it a non-issue.
 0001-01-01 00:00:00 +00:00
Jelmer Vernooij
9dc8f7b4d4 Reverse latest module_dummy patch from metze and me. 0001-01-01 00:00:00 +00:00
Jelmer Vernooij
d817eaf0ec Reverse previous patch from Stefan and me after comments by Andrew Bartlett 0001-01-01 00:00:00 +00:00
Jelmer Vernooij
74d9ecfe2d Patch from metze and me that adds dummy smb_register_*() functions so 
that is now possible to, for example, load a module which contains
an auth method into a binary without the auth/ subsystem built in.
 0001-01-01 00:00:00 +00:00
John Terpstra
ab1ff35187 Typos and fixes resulting from VL feedback. 0001-01-01 00:00:00 +00:00
Jeremy Allison
45953d59f7 Fix from Tom.Lackemann@falconstor.com to correctly set the flags based 
on the security entries sent.
Jeremy.
 0001-01-01 00:00:00 +00:00
Jeremy Allison
4cd8b27671 Optimisation. We don't need to do 2 strlen's when we're setting the stat 
struct in the correct place.
Jeremy.
 0001-01-01 00:00:00 +00:00
Jeremy Allison
151b7d0d88 Fix for possible segfault in readline handler. Found by vitalyb@mail333.com. 
Jeremy.
 0001-01-01 00:00:00 +00:00
John Terpstra
7bec28f23c Fix typo. 0001-01-01 00:00:00 +00:00
Gerald Carter
94780f0947 syncing README to go along with scripts 0001-01-01 00:00:00 +00:00
Gerald Carter
ee1374cabf syncing import/export smbpasswd file scripts from 2.2 0001-01-01 00:00:00 +00:00
Gerald Carter
b87be0dddf removing total print jobs since it is not used anymore 0001-01-01 00:00:00 +00:00
Andrew Bartlett
0c1946e51c Makefile changes to allow new NTLMv2 patch to work. 0001-01-01 00:00:00 +00:00
Andrew Bartlett
0c355c274a Cleanups. My NTLMv2 changes also changed the preference from using an implicit 
structure-memcpy for DATA_BLOB parameters to using a pointer to that DATA_BLOB.

auth_sam calls some of these functions, so I've cleaned it all up to use this
format now.

Also clean up some debug statements to make them easier to read.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
9f6a26769d Finally get NTLMv2 working on the client! 
With big thanks to tpot for the ethereal disector, and for the base code
behind this, we now fully support NTLMv2 as a client.

In particular, we support it with direct domain logons (tested with ntlm_auth
--diagnostics), with 'old style' session setups, and with NTLMSSP.

In fact, for NTLMSSP we recycle one of the parts of the server's reply directly...

(we might need to parse for unicode issues later).

In particular, a Win2k domain controller now supplies us with a session key
for this password, which means that doman joins, and non-spnego SMB signing
are now supported with NTLMv2!

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Jim McDonough
dcc6d9e76c Fix bug #4 for net rap. Allow more than 50 chars for long form listings of users and groups. 0001-01-01 00:00:00 +00:00
Andrew Bartlett
372a574a73 Fix comment - we now have 5 types of error... 0001-01-01 00:00:00 +00:00
Andrew Bartlett
b4ecdb2e58 Make sure we always have some client data, not just the hash. An NTLMv2 or 
LMv2 response less than 24 bytes is just silly.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
a4556786d2 Elsewhere, we use a #define for this environment variable name, so do the 
same here.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Andrew Bartlett
c61e5e3877 When checking if a SID is in a domain, make sure that indeed the user RID is 
one element longer than the domain sid.

Andrew Bartlett
 0001-01-01 00:00:00 +00:00
Richard Sharpe
045210e129 Sync up to head ... 0001-01-01 00:00:00 +00:00
John Terpstra
044489f218 More edits, hackety hack. 0001-01-01 00:00:00 +00:00
Richard Sharpe
7f76eac5a0 Sync to the changes in head ... 0001-01-01 00:00:00 +00:00
Tim Potter
5dcde9451b Added some more diagnostic tests to check out a theory that having either hash 
- auth with ntlmv2 and lmv2 but deliberately break the ntlmv2 hash
  - auth with ntlmv2 and lmv2 but deliberately break the lmv2 hash
  - auth with ntlm and lm but deliberately break the ntlm hash
  - auth with ntlm and lm but deliberately break the lm hash

My theory is that the NTLM or NTLMv2 field must be correct and if it is,
it doesn't matter what the value of the LM or LMv2 field is.

Fixed cosmetic test name display bug.
 0001-01-01 00:00:00 +00:00
Richard Sharpe
e91e648c9b Fix up a bunch of problems in editreg.c 
Now the build farm will no doubt find more.
 0001-01-01 00:00:00 +00:00