1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
Commit Graph

144 Commits

Author SHA1 Message Date
Günther Deschner
3b9a03a7c3 s3: fix samlogon client and server calls.
Guenther
2008-10-15 16:14:20 +02:00
Günther Deschner
e194ded26e netlogon: move password change code out to rpccli_netlogon_set_trust_password.
Guenther
2008-09-21 22:30:39 +02:00
Günther Deschner
84bc4ff546 rpc_client: Bug 5616 - fix session keys also in rpccli_netr_LogonSamLogonEx wrapper.
Guenther
(This used to be commit fef5809140)
2008-07-30 19:14:00 +02:00
Volker Lendecke
91df5551a4 Attempt to fix bug 5616
We were calculating the session key but did not return it to the caller...
(cherry picked from commit 8ab79b1d00)
(This used to be commit b63a6a1fd6)
2008-07-28 18:07:01 +02:00
Volker Lendecke
abce3cdf56 Remove some unused code
(This used to be commit b60a681dd0)
2008-07-21 14:36:31 +02:00
Volker Lendecke
d460ead468 Remove one reference to PI_NETLOGON
(This used to be commit e89bbab1b8)
2008-07-21 14:36:31 +02:00
Volker Lendecke
2e905d2cd1 Allocate rpc_cli->dc in rpccli_netlogon_setup_creds()
The general cli_pipe routines should not have to know about this NETLOGON
speciality.
(This used to be commit d30237598d)
2008-07-20 17:06:21 +02:00
Volker Lendecke
f56eedb95c Remove the pipe_idx variable from rpc_pipe_client
(This used to be commit 4840febcd4)
2008-04-20 11:47:33 +02:00
Volker Lendecke
2a2188591b Add "desthost" to rpc_pipe_client
This reduces the dependency on cli_state
(This used to be commit 783afab9c8)
2008-04-20 00:13:09 +02:00
Volker Lendecke
b46d340fd5 Refactoring: Make struct rpc_pipe_client its own talloc parent
(This used to be commit a6d74a5a56)
2008-04-20 00:12:52 +02:00
Günther Deschner
99d3590455 Fix NETLOGON credential chain with Windows 2008 all over the place.
In order to avoid receiving NT_STATUS_DOWNGRADE_DETECTED from a w2k8
netr_ServerAuthenticate2 reply, we need to start with the AD netlogon negotiate
flags everywhere (not only when running in security=ads). Only for NT4 we need
to do a downgrade to the returned negotiate flags.

Tested with w2k8, w2ksp4, w2k3r2 and nt4sp6.

Guenther
(This used to be commit 0970369ca0)
2008-04-02 11:12:47 +02:00
Günther Deschner
b1198fc9fd Fix samlogon rpc client & server.
Guenther
(This used to be commit 0aaf975560)
2008-03-27 13:06:43 +01:00
Günther Deschner
d8d1eea136 Fix typo.
Guenther
(This used to be commit ffe77dc8b0)
2008-03-27 00:48:08 +01:00
Günther Deschner
7269a504fd Add my copyright.
Guenther
(This used to be commit d078a87571)
2008-02-27 19:38:48 +01:00
Günther Deschner
bdd5f1cb2a Fix some uninitialized data in new netlogon client.
Guenther
(This used to be commit bd6e2fcf3b)
2008-02-19 01:51:41 +01:00
Günther Deschner
95cd28299e Remove unused marshalling for NET_AUTH3.
Guenther
(This used to be commit ccf3ba0f5c)
2008-02-17 02:53:23 +01:00
Günther Deschner
9519d95c4a Use rpccli_netr_LogonSamLogonEx in rpccli wrapping function.
Guenther
(This used to be commit 51a664cd5f)
2008-02-17 02:37:12 +01:00
Günther Deschner
9f8f9c1483 Finally let our samlogon routines call rpccli_netr_LogonSamLogon internally and
return netr_SamInfo3.

Guenther
(This used to be commit 9e5b732d45)
2008-02-17 02:12:01 +01:00
Günther Deschner
697f8904e7 Remove unused marshalling for NET_SRV_PWSET.
Guenther
(This used to be commit e48737f04d)
2008-02-16 16:06:55 +01:00
Günther Deschner
26106d2e39 Remove unused marshalling for NET_REQ_CHAL and NET_AUTH2.
Guenther
(This used to be commit 2123aff75c)
2008-02-16 00:05:45 +01:00
Günther Deschner
3f24ef1848 Replace DOM_CHAL with "struct netr_Credential" where we can right now.
This allows to remove some more old netlogon client calls.

Guenther
(This used to be commit c0b1a87658)
2008-02-15 23:57:54 +01:00
Günther Deschner
34df32446d Remove unused marshalling for NET_SAM_SYNC.
Guenther
(This used to be commit a94d93725a)
2008-02-15 14:24:31 +01:00
Günther Deschner
99f1806af9 Remove unused marshalling for NET_SAM_DELTAS.
Guenther
(This used to be commit 2dd01f0741)
2008-02-15 14:06:50 +01:00
Günther Deschner
d134bd3c27 Remove unused marshalling for NET_LOGON_CTRL and NET_LOGON_CTRL2.
Guenther
(This used to be commit c94538e742)
2008-02-13 23:12:42 +01:00
Günther Deschner
5da927716a Remove unused marshalling for NET_DSR_GETDCNAME.
Guenther
(This used to be commit 65c2aa344e)
2008-02-08 23:38:13 +01:00
Günther Deschner
44f1485f0b Remove unused marshalling for NET_DSR_GESITENAME.
Guenther
(This used to be commit c2682273fd)
2008-02-07 10:42:59 +01:00
Günther Deschner
f79051fe19 Remove unused marshalling for NET_GETANYDCNAME and NET_GETANYDCNAME.
Guenther
(This used to be commit a495e0e7c1)
2008-02-07 10:31:09 +01:00
Günther Deschner
a6ce6c5649 Remove hand-written rpccli_netlogon_dsr_getdcnameex[2].
Guenther
(This used to be commit 3ded8b9b7e)
2008-01-25 21:43:55 +01:00
Volker Lendecke
533d6f617e Remove static zeros
(This used to be commit dbcc213710)
2007-12-28 17:02:34 +01:00
Günther Deschner
8ded1df767 Kill fstring in getdcname & getanydcname return.
Guenther
(This used to be commit b738381816)
2007-12-21 15:12:40 +01:00
Andrew Tridgell
5e54558c6d r23784: use the GPLv3 boilerplate as recommended by the FSF and the license text
(This used to be commit b0132e94fc)
2007-10-10 12:28:22 -05:00
Jeremy Allison
d824b98f80 r23779: Change from v2 or later to v3 or later.
Jeremy.
(This used to be commit 407e6e695b)
2007-10-10 12:28:20 -05:00
Günther Deschner
1ea5dfae04 r23380: netr_getdcname returns WERROR not NTSTATUS.
Guenther
(This used to be commit 5e75ea7f2b)
2007-10-10 12:23:12 -05:00
Volker Lendecke
d807dec0f4 r23219: Two warnings
(This used to be commit eccd50abda)
2007-10-10 12:22:54 -05:00
Günther Deschner
d8e454664a r23210: Very funny, we thought to use netr_GetDcName (e.g. in winbind) but were using
netr_GetDcAnyName all the time (which is the correct thing to do).

Fix the naming and opcode mixup in all branches.

Guenther
(This used to be commit def6464c87)
2007-10-10 12:22:54 -05:00
Günther Deschner
94e4a468f0 r23127: Fill in some more netlogon dsgetdcname flavours (netr_DsRGetDCNameEx,
netr_DsRGetDCNameEx2) and add new ds request and reply flags, also add some
more WERROR codes.

Guenther
(This used to be commit 37ae7f4197)
2007-10-10 12:22:48 -05:00
Volker Lendecke
2945490a0f r23091: Add rpccli_netlogon_sam_network_logon_ex, fix its parsing. This does not
use the credential chain and only works over netlogon, but it would
allow multiple outstanding auth requests for a single workstation
account.
(This used to be commit 123290d094)
2007-10-10 12:22:44 -05:00
Günther Deschner
aeb834036d r20970: Allow to define workstation for samlogon in rpcclient (for testing).
Guenther
(This used to be commit 5d4747fdf2)
2007-10-10 12:17:22 -05:00
Günther Deschner
7b84b133fe r19161: Add NET_GETANYDCNAME (getdcname only gives the PDC while getanydcname
gives just any DC), also make sure to set timeouts in rpcclient
accordingly so that we actually get the DC's reply.

Guenther
(This used to be commit 6091c8152a)
2007-10-10 12:15:18 -05:00
Günther Deschner
adc299bd08 r19143: getdcname on the NETLOGON pipe returns WERROR, not NTSTATUS.
Guenther
(This used to be commit 44e228ac79)
2007-10-10 12:15:16 -05:00
Jelmer Vernooij
4e7d11449a r18654: Rename "struct uuid" => "struct GUID" for consistency.
(This used to be commit 5de76767e8)
2007-10-10 11:52:19 -05:00
Jelmer Vernooij
995205fc60 r18188: merge 3.0-libndr branch
(This used to be commit 1115745cae)
2007-10-10 11:43:56 -05:00
Günther Deschner
fd5ecef41c r13639: Never overwrite the acct_flags in rpccli_netlogon_sam_network_logon().
Guenther
(This used to be commit c201e51de3)
2007-10-10 11:10:20 -05:00
Jeremy Allison
39a572e010 r13539: Add 128 bit creds processing client and server. Thanks to Andrew Bartlett's
Samba4 code.
Jeremy.
(This used to be commit a2fb436fc5)
2007-10-10 11:10:11 -05:00
Gerald Carter
0af1500fc0 r13316: Let the carnage begin....
Sync with trunk as off r13315
(This used to be commit 17e63ac4ed)
2007-10-10 11:06:23 -05:00
Günther Deschner
54b1c585bb r12853: Fix segfault in "net rpc vampire|samdump" (Bugzilla #3390).
The session key, after beeing set, was zeroed later on by the prs_init
in the CLI_DO_RPC macro.

Guenther
(This used to be commit eaaeaa767e)
2007-10-10 11:06:04 -05:00
Günther Deschner
63addcb4d7 r11853: Add Dsr_GetSiteName (handy for experimenting with GPOs).
Guenther
(This used to be commit c54430a7b5)
2007-10-10 11:05:30 -05:00
Volker Lendecke
32cf16f3cf r11706: Implement dsr_getdcname client code. It's handy: It not only gives you the IP
address but also the fqdn of the remote dc and site info.

Volker
(This used to be commit 62d01ce7e6)
2007-10-10 11:05:24 -05:00
Jeremy Allison
fcceedd67c r11573: Adding Andrew Bartlett's patch to make machine account
logons work if the client gives the MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT
or MSV1_0_ALLOW_WORKSTATION_TRUST_ACCOUNT flags. This changes
the auth module interface to 2 (from 1). The effect of this is
that clients can access resources as a machine account if they
set these flags. This is the same as Windows (think of a VPN
where the vpn client authenticates itself to a VPN server
using machine account credentials - the vpn server checks
that the machine password was valid by performing a machine
account check with the PDC in the same was as it would a
user account check. I may add in a restriction (parameter)
to allow this behaviour to be turned off (as it was previously).
That may be on by default.
Andrew Bartlett please review this change carefully.
Jeremy.
(This used to be commit d1caef8663)
2007-10-10 11:05:20 -05:00
Jeremy Allison
5678e4abb0 r11492: Fix bug #3224 (I hope). Correctly use machine_account_name
and client_name when doing netlogon credential setup.
Jeremy.
(This used to be commit 37e6ef9389)
2007-10-10 11:05:18 -05:00