1
0
mirror of https://github.com/samba-team/samba.git synced 2025-03-12 20:58:37 +03:00

11469 Commits

Author SHA1 Message Date
Andrew Bartlett
60fa5c308b Fix comment - we now have 5 types of error...
(This used to be commit 372a574a73b86855cf6efc18349e5ba24067d690)
2003-05-09 09:45:37 +00:00
Andrew Bartlett
5f5c4aaffd Make sure we always have some client data, not just the hash. An NTLMv2 or
LMv2 response less than 24 bytes is just silly.

Andrew Bartlett
(This used to be commit b4ecdb2e582376d2713f81e8e32a668014905d70)
2003-05-09 09:41:08 +00:00
Andrew Bartlett
376b8d57ee Elsewhere, we use a #define for this environment variable name, so do the
same here.

Andrew Bartlett
(This used to be commit a4556786d28724309321a02afbf5005158440258)
2003-05-09 09:37:12 +00:00
Andrew Bartlett
cfe8b79c77 When checking if a SID is in a domain, make sure that indeed the user RID is
one element longer than the domain sid.

Andrew Bartlett
(This used to be commit c61e5e38776d2de53d120b592a6685158e79ebb8)
2003-05-09 09:33:51 +00:00
Richard Sharpe
c3cad25e5e Sync up to head ...
(This used to be commit 045210e129e6e0aef8f847e7ed8714d0d9974e7f)
2003-05-09 07:43:07 +00:00
Richard Sharpe
f5dd6b2750 Sync to the changes in head ...
(This used to be commit 7f76eac5a0f93107d990b0fde651838c38970092)
2003-05-09 06:23:55 +00:00
Tim Potter
917c2fcf6a Added some more diagnostic tests to check out a theory that having either hash
- auth with ntlmv2 and lmv2 but deliberately break the ntlmv2 hash
  - auth with ntlmv2 and lmv2 but deliberately break the lmv2 hash
  - auth with ntlm and lm but deliberately break the ntlm hash
  - auth with ntlm and lm but deliberately break the lm hash

My theory is that the NTLM or NTLMv2 field must be correct and if it is,
it doesn't matter what the value of the LM or LMv2 field is.

Fixed cosmetic test name display bug.
(This used to be commit 5dcde9451bd0d6a7462b77cf5ed137bfd691adaa)
2003-05-09 06:03:11 +00:00
Richard Sharpe
01d58b75ea Fix up a bunch of problems in editreg.c
Now the build farm will no doubt find more.
(This used to be commit e91e648c9b0841fbffbc8f39e71abade0996a1e7)
2003-05-09 05:48:50 +00:00
Jeremy Allison
f359b4bdf6 Fix nasty bug pointed out by samba-technical poster. If name is mangled
then we weren't always correctly detecting that it had a valid stat struct
and so might now return a 'file existed'. Finally realized this when installing
the W2K resource kit as a test case.
Jeremy.
(This used to be commit d48069ccd8351e4bff097a7f7500c738870a413d)
2003-05-09 01:06:27 +00:00
Gerald Carter
417d0e9afc fix bug #47; revert registration of workgroup<1b> to 2.2 behavior
(This used to be commit 016f6b4e19c2b8e4f5e1d010cc428ca194650140)
2003-05-08 21:19:58 +00:00
Gerald Carter
27d68a306d fixed bug #75; add check for non-zero destlen
(This used to be commit 83bb84f13121267992e78f2d005257932c711f23)
2003-05-08 20:19:10 +00:00
Jim McDonough
1c84123026 Hopefully re-enable building heimdal. It needs -lresolv included in LIBS
to link during configure checks.
(This used to be commit 7af282e7ff9c2cccfab97130dc66515a4852c25f)
2003-05-08 17:02:13 +00:00
Volker Lendecke
7f0740b7c0 Revert a patch that somehow slipped in...
Volker
(This used to be commit 6cde3d4d655bbe1d81e68ec2ec7a23669ac82120)
2003-05-08 08:12:57 +00:00
Volker Lendecke
d1da999e0a This puts real netlogon connection caching to winbind. This becomes
important once we start doing schannel, as there would be a lot more
roundtrips for the second PIPE open and bind. With this patch logging
in to a member server is a matter of two (three if you count the
ack...) packets between us and the DC.

Volker
(This used to be commit 5b3cb7725a974629d0bd8b707bc2940c36b8745e)
2003-05-08 08:02:52 +00:00
Volker Lendecke
53f0ebc82b This puts back wins.dat into nmbd for easy editing. It leaves most of
the other infrastructure with name owners etc in place. If anybody is
really going to tackle winsrepld, it will probably not be hard to put
the additional info back.

Volker
(This used to be commit eb82daa84a5339f28ebf431ee1044b7e1e4a4300)
2003-05-08 07:33:39 +00:00
Tim Potter
bbdc326f15 Another attempt at undoing my bogus patch 1.55.2.19
(This used to be commit 05a684b3be1525aad3589ded9e59c3f012b5ef20)
2003-05-08 05:10:44 +00:00
Andrew Bartlett
5f86a4a85f Always initialise this - it helps callers who use this in a loop...
Andrew Bartlett
(This used to be commit 97bc047434284527f25e130a72981da704ed1212)
2003-05-07 23:09:18 +00:00
Andrew Bartlett
a0af88e8c1 Fix the spinning bug for 'net rpc user' as well - there are more errors in
this world than 'status more entires'...

Also move all the cases to 'NT_STATUS_EQUAL()' to test it.

Andrew Bartlett
(This used to be commit b4645bf0661dadcd077b21bb6f6452ed8b2eb726)
2003-05-07 22:56:02 +00:00
Jeremy Allison
2746a909b2 SMB_QUERY_FILE_ALT_NAME_INFO and SMB_FILE_ALTERNATE_NAME_INFORMATION
are identical - noticed by "Dr. Tilo Levante" <tilo@levante.de>.
Jeremy.
(This used to be commit f6d7c279bc8354202f2a9b39fec4a4c8ace368a3)
2003-05-07 22:19:43 +00:00
Jeremy Allison
075695ee7f Fix irritating typo - non arg functions should be fn(void).
Jeremy.
(This used to be commit 395dfd196cf4bcd432a4895d3dd09fefd46cd6d8)
2003-05-07 21:40:11 +00:00
Jeremy Allison
fae80fe1a0 Make fchown, fchmod conditional for systems that don't have them.
Jeremy.
(This used to be commit cf78b1e7fe72aec72d03c86c46a8ca49df539c11)
2003-05-07 18:28:24 +00:00
Andrew Bartlett
2752f4a533 SMB Signing with NTLMv2 works!
(well, under certain conditions :-)

There is no length limit on the size of the authentication response added
into the MD5 hash.  (We had previously limited this to lengths like 40, 44 or
64 in attempts to make sense of what the SNIA spec tells us).

Instead, the entire authentication response is added in.

Currently, this only works on a Win2k domain members with a Samba PDC,
becouse our NTLMv2 code currently fails against an Win2k PDC.

However, this splits the problem in half - particularly as the NTLMv2 format
is known, and even has an ethereal disector! (thanks tpot).

Andrew Bartlett
(This used to be commit 7645d3d28afbb8eea502c0e063df3afb3aa812f4)
2003-05-07 12:58:59 +00:00
Andrew Bartlett
3eeb40f9b5 Set our 'global sam name' in one place. For domain controllers, this is
lp_workgroup(), for all other server this is global_myname().

This is the name of the domain for accounts on *this* system, and getting
this wrong caused interesting bugs with 'take ownership' on member servers
and standalone servers at Snap.

(They lookup the username that they got, then convert that to a SID - but
becouse the domain out of the smbpasswd entry was wrong, we would fail the
lookup).

Andrew Bartlett
(This used to be commit 5fc78eba20411f3f5a8ccadfcba5c4ab73180dba)
2003-05-07 08:21:06 +00:00
Tim Potter
22fb803b39 Whoops - that wasn't a whitespace syncup after all.
(This used to be commit 42d0414ed244b92b665cb231f6756f60391861dd)
2003-05-07 05:52:44 +00:00
Jeremy Allison
1af398b169 Force ASCII for client messages. Patch from David Lee <t.d.lee@durham.ac.uk>
Jeremy.
(This used to be commit f219e8309c7d17b332873e9283ab3c3796e7e799)
2003-05-07 02:00:58 +00:00
Jeremy Allison
6b4330235f We used to use the name "*",0x0 here, but some Windows
servers don't answer that name. However we *know* they
have the name workgroup#1b (as we just looked it up).
So do the node status request on this name instead.
Found at LBL labs.
Jeremy.
(This used to be commit 41e3abe8b80026812ea7dd7ad535e8e41e26daa4)
2003-05-07 01:00:36 +00:00
cvs2svn Import User
27610826ad This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.(This used to be commit 8bee59ffcea1495f03b35d38da0eb76955b93f3d) 2003-05-06 13:10:11 +00:00
Simo Sorce
9cd45eeaf9 sort out some include dependencies
split out privileges from rpc_lsa.h
(This used to be commit 37d7cc8162d02a664095dbe0fc8d7250d1ed51c9)
2003-05-06 13:10:10 +00:00
Simo Sorce
0c6cdfadfd add mapping.h here
(This used to be commit fb03fafed14a2816808e98fd95850db3e655d5d9)
2003-05-06 10:00:02 +00:00
Simo Sorce
7835af32ec restore structures from previous erroneous commit
(This used to be commit 58d284bd06f5893a752c1f22828715f8bd130c82)
2003-05-06 09:36:51 +00:00
Jelmer Vernooij
ecbd2b5d1e Remove unused variables
(This used to be commit 2f631769f836baeec669456f786ecb38c81d9a23)
2003-05-06 02:35:33 +00:00
Jelmer Vernooij
06551c644c Patch from metze to add exit and interval events. Useful for modules
(This used to be commit 3033a63cefb5f28d4460885f7f4e4ecaed95443c)
2003-05-06 02:34:59 +00:00
Tim Potter
45f8fd3fa9 There appears to be no reason why we have to execute the
initialisation code in winbindd_init_common() after the fork when
running in dual daemon mode.

The only tricky bit is we have to run a tdb_reopen_all() somewhere in
the child to avoid tdb corruption.

Fixed bug #60.
(This used to be commit 25e55aca0fe315c2ccf4e34a94107b2321313714)
2003-05-06 02:32:47 +00:00
Richard Sharpe
7cd3bdc784 Fix up some of the warnings that the build farm is finding ...
(This used to be commit 29d775fe68be8988e344c35106a80d6ca8236e4d)
2003-05-05 22:52:45 +00:00
Richard Sharpe
5d653461e6 Syncronize head editreg.c with 3.0.0 ...
(This used to be commit 8257f537de57a2681e6d9cc2c421435b1d751a60)
2003-05-05 16:04:15 +00:00
Andrew Bartlett
9eccc216de We also get back the LM session key on pure 'NTLM' logins.
Andrew Bartlett
(This used to be commit 7342c70b4cecfc1f42c46b19360db6c077604be2)
2003-05-05 13:23:07 +00:00
Rafal Szczesniak
4905d39f4f Turn off using lsa_qos.
Rafal
(This used to be commit d03124fbf182f194e48c4ef9ae6aedc4db4f13b0)
2003-05-05 08:43:43 +00:00
Rafal Szczesniak
8be0f0d145 Turn off using lsa_qos in OpenPolicy call. This way we avoid annoying
debug msg while establishing trust and listing relations of Samba PDC.


Rafal
(This used to be commit 8681cbae0d142a1f9ac537cb22e611a6f5262b54)
2003-05-05 08:32:30 +00:00
Andrew Bartlett
89f6691cdc Add some comments.
(This used to be commit 855fab395f97dd232fd9bb78e62ad12b16fe2a24)
2003-05-05 06:33:58 +00:00
Tim Potter
60233cd356 Add a new entry to make check. If we have compiled python extensions,
run the pythoncheck.py test.  At the moment this just checks every
python extension can be imported sucessfully.
(This used to be commit 38dac4ca4e657b130acf3921573380d33399a5e6)
2003-05-05 06:22:36 +00:00
Tim Potter
da18088eea Fix for bug #60. Our autoconf code adds both libraries and linker
flags in the $LIBS make variable.  Separate the two so the python
extensions can build.
(This used to be commit 164ea3835724409d5b9badbad689d154307d2b59)
2003-05-05 06:21:26 +00:00
Andrew Bartlett
423bd582f4 Allow the NTLMv2 functions to spit out both possible varients on the session
key, so we can test it in ntlm_auth.

I suspect the 'lm' version doesn't exist, but it's easy to change back.

Andrew Bartlett
(This used to be commit 5efd95622c411f123660b6613b86c7a68bba68e8)
2003-05-05 05:15:54 +00:00
Andrew Bartlett
0e1c8fa7c3 Add some more tests to the ntlm_auth diagnositics package.
Our NTLMv2 client code needs work, becouse we don't get the session key for
any of the NTLMv2 stuff...

Also test some of the more 'odd' auth cases - like putting the NT password
into the LM feild.

Clean up some static globals into static locals.

Andrew Bartlett
(This used to be commit 62f0acc99166e9518f59bc5d091b76c35837e65c)
2003-05-05 05:01:59 +00:00
Tim Potter
59991233e1 Merge of backslash @LDAP_LIBS@ fix from HEAD.
(This used to be commit f4ea0cc17d6a5189ff7887f61b663eb1900c8a27)
2003-05-05 04:10:29 +00:00
Tim Potter
ddb870f36b A good reason to use make variables instead of autoconf substitutions
directly - fixed problem where the last line of the link command was
'\ @LDAP_LIBS@'.  If @LDAP_LIBS@ is zero then the backslash
incorrectly includes the next line of the Makefile in the current
target.

This should fix a bucketload of build farm failures.
(This used to be commit 895bef1a62f60f4e91dc6b1c244820b024c36a5c)
2003-05-05 04:09:56 +00:00
Tim Potter
c724747e2d Fixed typo introduced when reverting patch from revision 1.19
(This used to be commit a102734263a2cbd5b9eafbddf036e173b507a7fd)
2003-05-05 03:34:19 +00:00
Tim Potter
ea3d32fe9c Fixed typo introduced in reverted patch from version 1.12.4.5
(This used to be commit 4fccc1f16da74ac9e98bd58c7f11674c48c4dbac)
2003-05-05 03:31:50 +00:00
Tim Potter
c4c55a00db Fix some compiler warnings.
(This used to be commit 52d5ff7bdafabb421e76b6b19d95be22b380ddb4)
2003-05-05 02:47:41 +00:00
Tim Potter
4b8d28f832 AIX doesn't append $SHLIB_EXT to NSS libraries.
Also merged a little bit of abartlet's recent configure.in change of
duplicated IRIX stuff.
(This used to be commit d15406ad910bc952c741e8d4d574064dbc5e88ef)
2003-05-05 01:52:08 +00:00
Tim Potter
73a3105b57 AIX doesn't append $SHLIB_EXT to NSS libraries.
(This used to be commit af083d2760c79ef33b7e187a5c5a6238667da24e)
2003-05-05 01:40:10 +00:00