1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-12 09:18:10 +03:00
Commit Graph

18911 Commits

Author SHA1 Message Date
Jeremy Allison
d672d8fd6b r13473: Back port r13470, r13471, r13472 from Samba4. Thanks Andrew:
-----------------------------------
Thanks to a report from VL:

We were causing mayhem by weakening the keys at the wrong point in time.

I think this is the correct place to do it.  The session key for SMB
signing, and the 'smb session key' (used for encrypting password sets)
is never weakened.

The session key used for bulk data encryption/signing is weakened.

This also makes more sense, when we look at the NTLM2 code.

Andrew Bartlett
-----------------------------------
With more 'try all options' testing, I found this 'simple' but in the
NTLM2 signing code.

Andrew Bartlett
-----------------------------------
After Volker's advise, try every combination of parameters.  This
isn't every parameter on NTLMSSP, but it is most of the important
ones.

This showed up that we had the '128bit && LM_KEY' case messed up.
This isn't supported, so we must look instead at the 56 bit flag.

Andrew Bartlett
-----------------------------------

We should now try retesting with NT4. This should be standalone
enough to port into a SAMBA_3_0_RELEASE branch fix.

Jeremy.
(This used to be commit b9b8cd1752)
2007-10-10 11:10:05 -05:00
Gerald Carter
75ef18fa75 r13460: by popular demand....
* remove pdb_context data structure
* set default group for DOMAIN_RID_GUEST user as RID 513 (just
  like Windows)
* Allow RID 513 to resolve to always resolve to a name
* Remove auto mapping of guest account primary group given the
  previous 2 changes
(This used to be commit 7a2da5f0cc)
2007-10-10 11:10:04 -05:00
Jeremy Allison
85160e654e r13458: Add parsing functions - but stub internals for lookupnames3 and 4.
Jeremy.
(This used to be commit f1a362580a)
2007-10-10 11:10:04 -05:00
Jeremy Allison
785c78b795 r13456: Add lsa_lookup_names2.
Jeremy.
(This used to be commit b57406c89f)
2007-10-10 11:10:04 -05:00
Jeremy Allison
e22d38bdde r13455: Prepare to add lookupnames2.
Jeremy.
(This used to be commit 2274709587)
2007-10-10 11:10:04 -05:00
Günther Deschner
f0a6a004f3 r13451: Fix build warning.
Guenther
(This used to be commit d27771ca1d)
2007-10-10 11:10:04 -05:00
Jeremy Allison
acc4a837aa r13449: Ensure we don't crash if no dc struct on pipe.
Jeremy.
(This used to be commit a9e1d0f3b4)
2007-10-10 11:10:04 -05:00
Günther Deschner
8675ab8787 r13448: Fix the build (again).
Guenther
(This used to be commit 7eacb47660)
2007-10-10 11:10:03 -05:00
Jeremy Allison
06cf1e18e5 r13447: Added LSA_LOOKUPSIDS2 and LSA_LOOKUPSIDS3.
Jeremy.
(This used to be commit a164cfab42)
2007-10-10 11:10:03 -05:00
Günther Deschner
a48f4e832f r13445: We already made the decision whether to include the dominfo and
changereject.

Guenther
(This used to be commit 98d3c63e04)
2007-10-10 11:10:03 -05:00
Günther Deschner
72b30eba64 r13444: Add REJECT_REASON_OTHER for samr_chgpasswd_user3
Guenther
(This used to be commit 58baf718be)
2007-10-10 11:10:03 -05:00
Günther Deschner
fbf45d8ce9 r13443: Fix the build.
Guenther
(This used to be commit 40a21776a7)
2007-10-10 11:10:03 -05:00
Günther Deschner
e83c7d0141 r13442: Implement samr_chgpasswd_user3 server-side.
Guenther
(This used to be commit f60eddc0a4)
2007-10-10 11:10:03 -05:00
Jeremy Allison
e493d32912 r13439: Fix NET_SAM_LOGON_EX.
Jeremy.
(This used to be commit 9437ffc84f)
2007-10-10 11:10:02 -05:00
Jeremy Allison
e19ae28581 r13436: Add in NET_SAM_LOGON_EX. Still needs testing.
Jeremy
(This used to be commit f58d0ebf74)
2007-10-10 11:10:02 -05:00
Jeremy Allison
4d2b4c92d2 r13434: Add stub for NET_SAM_LOGON_EX.
Jeremy.
(This used to be commit 58544eb3c8)
2007-10-10 11:10:02 -05:00
Jeremy Allison
74bc039f1e r13433: Get ready to implement NET_SAM_LOGON_EX.
Jeremy.
(This used to be commit 666b03b4a9)
2007-10-10 11:10:01 -05:00
Jeremy Allison
e5ec28ae55 r13427: Fix ctime -> st_ctime.
Jeremy.
(This used to be commit 95793d7e64)
2007-10-10 11:10:01 -05:00
James Peach
457e6ac043 r13425: Revert all the "clever" compiler options checks. They broke
the build on Solaris, AIX and S390. The fundamental problem is
that macros like AX_CFLAGS_IRIX_OPTION can spuriously succeed.
(This used to be commit 30122f61c3)
2007-10-10 11:10:01 -05:00
James Peach
e2ad693d03 r13424: Don't attempt to use cc -O2. This breaks the solaris build.
(This used to be commit 341d554e2f)
2007-10-10 11:10:01 -05:00
Jeremy Allison
687e5be25e r13423: Write wrapper functions (and configure tests) so we can
always assume we can get a struct timespec out of a stat
struct. This will allow us to portably move to nsec timestamps
on files and directories in the file server code in future.
Jeremy.
(This used to be commit 07132d8796)
2007-10-10 11:10:01 -05:00
James Peach
e97ad44d55 r13420: Support profile-guided optimisation in the build system. This is
implemented for gcc 3.x, gcc 4.x and MIPSPro compilers.
(This used to be commit 5e57021723)
2007-10-10 11:10:01 -05:00
James Peach
e6d847d8c4 r13418: Formalise support for checking compiler options.
(This used to be commit eb3ba826ef)
2007-10-10 11:10:00 -05:00
Lars Müller
34352fe039 r13417: Add .2 to the SONAME as version suffix if we link the nss modules on
linux.

Heads up: This might be required on other OS using glibc too.
(This used to be commit b28e43427b)
2007-10-10 11:10:00 -05:00
Lars Müller
45f2e5997b r13416: Remove superfluous -lc while linking libnss_wins.so and pam_winbind.so.
(This used to be commit e64134a859)
2007-10-10 11:10:00 -05:00
Jeremy Allison
30e47fdfe2 r13412: Don't use arbitrary uint32 size for uid and gid storage. Use
correct system size. Fixed a bug that was accidentally introduced
by use of uint32 - uid was stored twice, not uid and gid.
Jeremy.
(This used to be commit 89db006997)
2007-10-10 11:10:00 -05:00
Simo Sorce
9fc7ee4f6c r13411: Sync with the latest fix I've made to package 3.0.21b
(This used to be commit 46f9f7a6f0)
2007-10-10 11:10:00 -05:00
Günther Deschner
c1ffb8d9bc r13410: Dump a netbootGUID as a GUID.
Guenther
(This used to be commit 9b19a68456)
2007-10-10 11:09:59 -05:00
Günther Deschner
2d743ac8f1 r13409: No functional changes, just some DEBUG cleanup.
Guenther
(This used to be commit 286f6fc233)
2007-10-10 11:09:59 -05:00
Günther Deschner
ae25f82ac2 r13408: Remove C++ comments (# 3494)
Guenther
(This used to be commit cf86d4c9f0)
2007-10-10 11:09:59 -05:00
Jeremy Allison
ad8b47a2ba r13407: Change the credentials code to be more like the Samba4 structure,
makes fixes much easier to port. Fix the size of dc->sess_key to
be 16 bytes, not 8 bytes - only store 8 bytes in the inter-smbd
store in secrets.tdb though. Should fix some uses of the dc->sess_key
where we where assuming we could read 16 bytes.
Jeremy.
(This used to be commit 5b3c2e63c7)
2007-10-10 11:09:59 -05:00
Jeremy Allison
cf7c47aac9 r13399: Get closer to passing RPC-SCHANNEL test.
Jeremy.
(This used to be commit 8ae70122b7)
2007-10-10 11:09:59 -05:00
Jeremy Allison
86358fc10b r13396: Add in userinfo26, re-enable userinfo25 - took the knowledge
from Samba4 on how to decode the 532 byte password buffers.
Getting closer to passing samba4 RPC-SCHANNEL test.
Jeremy.
(This used to be commit 205db6968a)
2007-10-10 11:09:59 -05:00
Volker Lendecke
1e68cce96d r13394: Fix rpcclient to obey the -W parameter. Not that I *like* the smbclient
solution, but it does this particular job... :-)

Volker
(This used to be commit df6d67cd10)
2007-10-10 11:09:58 -05:00
Gerald Carter
ef3f2c9675 r13393: Do not initialize the lp_svcctl_list() value since it is handled
internally in services_db.c now.  This prevents internal services from
being listed twice (one internal and one external) when no
'svcctl list' parameter is explcitly set in smb.conf
(This used to be commit 6c4ede6cee)
2007-10-10 11:09:58 -05:00
Gerald Carter
034877ca33 r13392: check gcc version before trying 'make pch'. remove some historical actions
(This used to be commit e0c4e5cfde)
2007-10-10 11:09:58 -05:00
Günther Deschner
d5c5c856ae r13391: Only fall into password change when ACB_PWNOEXP is not set
(got it wrong the first time as administrator has this flag set by
default).

Guenther
(This used to be commit e9ccebf45a)
2007-10-10 11:09:58 -05:00
Volker Lendecke
7fc2c0befb r13389: get_ldap_filter is only used once, make it static
(This used to be commit d3b66fb871)
2007-10-10 11:09:58 -05:00
Jeremy Allison
1b14d3b697 r13386: Fix parsing of SAMR_Q_CONNECT_ANON.
Jeremy.
(This used to be commit 6f8334ad31)
2007-10-10 11:09:58 -05:00
Gerald Carter
a988be716b r13384: Adding in some more SuSE patches
* uninitialized-variables.diff
* samba-smbadduser.diff
* samba-implicit_decl.patch
(This used to be commit 064338c6f5)
2007-10-10 11:09:57 -05:00
Gerald Carter
4379662d91 r13383: pulling in swat-welcome patch from SuSE packaging
(This used to be commit 1b955bbf59)
2007-10-10 11:09:57 -05:00
Gerald Carter
f351b9c6eb r13382: added server affinity cache stores for 'net rpc join' and trusted domain code
(This used to be commit 9eb743584d)
2007-10-10 11:09:57 -05:00
Volker Lendecke
845e49bdab r13379: Andrew correctly noted that this breaks -s. Not sure what to do...
(This used to be commit 5f9f772c25)
2007-10-10 11:09:57 -05:00
Volker Lendecke
b2d98799e6 r13378: Not sure what this breaks, but we have to do the popt processing after the
lp_load, because otherwise the lp_load overwrites the -W setting again.

Volker
(This used to be commit c7cc625d63)
2007-10-10 11:09:57 -05:00
Günther Deschner
3ad6e4d279 r13377: Fix from Volker: Make offline authentication work with NT4 as well
(handle no ACB_NORMAL flag and save name2sid as early as possible).

Guenther
(This used to be commit a04a5e40b7)
2007-10-10 11:09:57 -05:00
Gerald Carter
88aae1a6e8 r13376: break docs out to a separate package; cleanup /var/cache/samba -> /var/lib/samba
(This used to be commit 9cb372605c)
2007-10-10 11:09:56 -05:00
Günther Deschner
9cdab6ddc0 r13375: Match XP behaviour: Don't force 'Administrator' to change an expired
password on logon. (this might be true for all domain admins as well).

Guenther
(This used to be commit 24c6b9fecb)
2007-10-10 11:09:56 -05:00
Simo Sorce
0b09d4b2f6 r13374: new revision of the snprintf replace code
still missing a configure test to make us
substitute our snprintf to system one when
the system one does not have positional parameters support
(This used to be commit e9bcc24b13)
2007-10-10 11:06:27 -05:00
Volker Lendecke
de0337163f r13371: Remove an unused function
(This used to be commit dde8322b5c)
2007-10-10 11:06:26 -05:00
Jeremy Allison
616fea56e7 r13368: I must write out 1000 times, "Don't use C++ reserved words..."
Jeremy.
(This used to be commit b1ebc12b50)
2007-10-10 11:06:26 -05:00