1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-23 09:57:40 +03:00

1125 Commits

Author SHA1 Message Date
Jeremy Allison
7fde193efe Patch from Stefan Metzmacher <metze@metzemix.de> to fix signing problems
when reverse connecting back to a client for printer notify.
Jeremy.
-
Jeremy Allison
419834edee Fix signing miss-sequence noticed by Stefan Metzmacher <metze@metzemix.de>
Jeremy.
-
Jeremy Allison
f67154fe41 Merge Volker's fix.
We are doing NT error codes now.... If we have an NT error, report that
back the same way we handle the DOS error. Although I don't see why
BUFFER_TOO_SMALL should not be handled as an error, simply copy the logic.

This is only called from smbcacls and smbcquotas.

Jeremy.
-
Jeremy Allison
c6a36d4e48 Enable us to see what sequence number we were expecting when we fail a sign
(should help track down out of sequence bugs).
Jeremy.
-
Tim Potter
3d777f5389 Enclose usage of st_blksize and st_blocks struct stat members in
#ifdef HAVE_STAT_ST_BLKSIZE and #ifdef HAVE_STAT_ST_BLOCKS,
respectively.

Fixes bug 550 reported by Joachim Schmitz <schmitz@hp.com>.
-
Jeremy Allison
960e2b4a5f Fixup error code returns from Samba4 tester. Ensure invalid paths are
validated the same way.
Jeremy.
-
Tim Potter
50ae61b674 Merge from 3.0:
>Applied Steve Langasek's patch for bug #450.
-
Jeremy Allison
07cfce2830 Fix #442 which Alexander considered a showstopper. Allow us to join mixed
mode domains.
Jeremy.
-
Gerald Carter
1a9145015d removing unused files -
Gerald Carter
c17a7dc9a1 sync 3.0 into HEAD for the last time -
Simo Sorce
3101c236b8 port latest changes from SAMBA_3_0 tree -
Gerald Carter
99feae7b5b ading new files from 3.0 -
Gerald Carter
adb98e7b7c trying to get HEAD building again. If you want the code
prior to this merge, checkout HEAD_PRE_3_0_0_BETA_3_MERGE
-
Tim Potter
ab60980461 Merge from 3.0: quieten debug message for trust acct password change. -
Tim Potter
cb4188941e Added string error for NT_STATUS_NOT_A_REPARSE_POINT error. -
Jelmer Vernooij
c9c8eccdba Fix list of servers in 'smbclient -L' (debian bug #194553, patch by Heine Larsen) -
Gerald Carter
207186e1c8 fix for UNICODE plaintext passwords (bug #59) and fix smbclient to send the unicode plain text password if negoitated -
Tim Potter
249a697470 spelling -
Jeremy Allison
748ae44d55 Fix from Tom.Lackemann@falconstor.com to correctly set the flags based
on the security entries sent.
Jeremy.
-
Jeremy Allison
56fd842738 Force ASCII for client messages. Patch from David Lee <t.d.lee@durham.ac.uk>
Jeremy.
-
Andrew Bartlett
61255a2b36 For NTLM2 (not yet even close to real implementation) we must use the
server hash for checking the server's signiture.

Andrew Bartlett
-
Andrew Bartlett
6e6b7b79ed Store the type of 'sec channel' that we establish to the DC. If we are a
workstation, we have to use the workstation type, if we have a BDC account,
we must use the BDC type - even if we are pretending to be a workstation
at the moment.

Also actually store and retreive the last change time, so we can do
periodic password changes again (for RPC at least).

And finally, a couple of minor fixes to 'net'.

Andrew Bartlett
-
Tim Potter
38efab087c Add string message for WERR_SERVER_UNAVAILABLE. -
Paul Green
bd69cbce93 Rebalance parentheses in cliquota.c when LARGE_SMB_OFF_T is false. -
Gerald Carter
74fab8f0d2 smbcquota patch from metze -
Volker Lendecke
ecd0ee4d24 This is the netlogon schannel client code. Try a
rpcclient -S pdc -U% -c "samlogon user password"

and it should work with the schannel. Needs testing platforms
different from NT4SP6.

Volker
-
Andrew Bartlett
9656b87091 Only warn about short packets if we are already 'doing signing'.
Andrew Bartlett
-
Richard Sharpe
15fa48d19d Fix the handling of smb.conf in libsmbclient.
The right thing to do is to try for the user's local one in ~/.smbc/smb.conf,
and if that fails, try the one in dyn_CONFIGFILE, and if that fails, keep
going with the defaults but log a message.
-
Andrew Bartlett
b010b6c2dc Clean up error messages on cli pipe disconnection, including adding the message
for broken-due-to-bad-sig.

Andrew Bartlett
-
Andrew Bartlett
808d1fcf20 SMB signing updates - this gets NTLMSSP signing workin to the point where I
just need to get the verifiction code working - we get back a signiture from
the server, and just can't verify it yet.

This also brings the short-packet checks into common code, and breaks the
connection if the server sends a signed reply, on an established connection,
that fails the test.

This breaks our read/write code at the moment, as we need to keep a list
of outstanding packets.

(signing is not enabled by default, unless the server demands it)

Not for 3.0 till I fix the outstanding packet list.

Andrew Barlett
-
Richard Sharpe
7f6367aac8 Fix debug handling in libsmbclient.c.
Also, PLEASE, PLEASE, PLEASE, do not include bashism and Cisms in shell
scripts.
-
Richard Sharpe
41b320ffc5 Some more good stuff from coolo. -
Richard Sharpe
b03ac852a8 Some castiness for Don McCall. -
Richard Sharpe
21a99fdec3 More of coolo's changes for UTF-8 and some minor fixes of mine. -
Richard Sharpe
e1a159c55f Commit some more fixes for Coolo ... -
Jelmer Vernooij
8b5ad24231 Add const (from a patch by Stephan Kulow <coolo@kde.org>) -
Andrew Tridgell
ca982a9f1d added simple tests for SMBchkpath and SMBioctl -
Andrew Bartlett
7064edf853 Don't modify the incoming packet when checking the signiture.
Andrew Bartlett
-
Andrew Tridgell
c95ae394c5 added a simple test for the old SMBtcon interface -
Richard Sharpe
b988e16b7d More patches from coolo. One of these functions needs to be moved
elsewhere so other code can use it.
-
Richard Sharpe
de49c3f48f Some fixes to URL syntax from coolo. -
Andrew Bartlett
5562f1865c Fix debug (thanks metze)
Andrew Bartlett
-
Jelmer Vernooij
1481cd9ecf Add mapping for Bad Network Path -
Andrew Bartlett
dcdc75ebd8 NTLM Authentication:
- Add a 'privileged' mode to Winbindd.  This is achieved by means of a directory
  under lockdir, that the admin can change the group access for.

- This mode is now required to access with 'CRAP' authentication feature.
- This *will* break the current SQUID helper, so I've fixed up our ntlm_auth
  replacement:
 - Update our NTLMSSP code to cope with 'datagram' mode, where we don't get a
   challenge.
 - Use this to make our ntlm_auth utility suitable for use in current Squid 2.5
   servers.
 - Tested - works for Win2k clients, but not Win9X at present.  NTLMSSP updates
   are needed.
 - Now uses fgets(), not x_fgets() to cope with Squid environment (I think
   somthing to do with non-blocking stdin).

- Add much more robust connection code to wb_common.c - it will not connect to
  a server of a different protocol version, and it will automatically try and
  reconnect to the 'privileged' pipe if possible.
  - This could help with 'privileged' idmap operations etc in future.

- Add a generic HEX encode routine to util_str.c,
- fix a small line of dodgy C in StrnCpy_fn()

- Correctly pull our 'session key' out of the info3 from th the DC.  This is
  used in both the auth code, and in for export over the winbind pipe to
  ntlm_auth.

- Given the user's challenge/response and access to the privileged pipe,
  allow external access to the 'session key'.  To be used for MSCHAPv2
  integration.

Andrew Bartlett
-
Andrew Bartlett
fb680f610c Valgrind found a few memory leaks!
Andrew Bartlett
-
Jelmer Vernooij
2e1e5719f1 Don't use EDQUOT on systems where it's not available -
Jelmer Vernooij
6df38e250a Use FUNCTION_MACRO, not __FUNCTION__ -
Jelmer Vernooij
b757a43748 Don't use errno's when they're not available -
Andrew Bartlett
a7eba37aad Small clenaup patches:
- safe_string.h - don't assume that __FUNCTION__ is available
 - process.c - use new workaround from safe_string.h for the same
 - util.c - Show how many bytes we smb_panic()ed trying to smb_xmalloc()
 - gencache.c - Keep valgrind quiet by always null terminating.
 - clistr.c - Add copyright
 - srvstr.h - move srvstr_push into a .c file again, as a real function.
 - srvstr.c - revive, with 'safe' checked srvstr_push
 - loadparm.c - set a default for the display charset.

Andrew Bartlett
-
Andrew Bartlett
e8b4b13666 Fix compile on IA64 by noting that this should be the integer, not a pointer
to the integer for SIVAL().
-