1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-07 17:18:11 +03:00
Commit Graph

6512 Commits

Author SHA1 Message Date
Andrew Bartlett
c04f063573 Kill of the reply.c end of the workstaion trust account mess.
Fix the NT errror codes, this time in line with WinXP/2k.
 - Return the normal error codes, expect for bad user/bad password.  These map
   to logon failure, as a quick security hack.  We follow suit.

Simplfy some of the password extraction code, the auth subsytem has the
 intelegence to sort this stuff out, no need to do it here.

Move to 'global_encrypted_passwords_negotiated' to determine the use of
unencrypted hacks, replacing the current mess.

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Andrew Bartlett
da4873d889 Process the workstation trust account code INSIDE the authenticaion subsystem,
just like any other logon.  Matching code removal in reply.c to follow.

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Andrew Bartlett
53c1c5091e Rearrange the order of the checks in auth_smbpasswd.c, always check passwords
first.

Add password expiry and 'must change before first logon' support.
 - This requires that the passdb be up to the job to supply the info.
0001-01-01 00:00:00 +00:00
Andrew Bartlett
37655b4289 Fix this to use the plaintext password code directly, like SWAT does.
This whole area needs to be cleaned up.  Should this kind of passowrd
change/check be permitted with encrypt passwords = yes?

In any case I've also had trouble testing this, as I can't find the right
software/configuration to exersise this behaviour.  But its better than the
previous situation.  Any assistance greatly appriciated.

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Andrew Bartlett
ce676f8bfc Update for new pdb_set_plaintext_passwd() interface. 0001-01-01 00:00:00 +00:00
Andrew Bartlett
42402c87d6 Make use of the pdb_set_plaintext_passwd() update to vastly simplify
decode_pw_buffer() and the samr password changing routines.

And yes, I know that we can lost some information in the Unicode->UTF->Unicode
bit of this, but its worth the code cleanup.

This also takes into account the possability of multibyte passwords.

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Andrew Bartlett
27f0510a0b Fix the uninitialised variable, but more importantly fix the SEGFAULT.
Merge for 2.2.2

Should TDB cope with TDB pointers itself?

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Andrew Bartlett
540abc8125 Fix up TDB_SAM with repect to case sensitvity. (need to use unix_strlower)
Also attempt to make some of the syntax clearer, its confusing enought for the
compiler... (it thinks that there is use of an unitilaised variable)

In fact there is, see next patch...
0001-01-01 00:00:00 +00:00
Andrew Bartlett
f0f315f315 Fix up pdbedit to initialise its structures with the standard functions,
therfore ensuring sensible defaults for some values, notably account expriries
which mean 'locked out' if == 0.

This NEEDS to be merged into 2.2.2 or people can get wrongly initilaised TDB
records.  (which will only fail on future versions of samba).

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Andrew Bartlett
33e3591b2d Add a new interface pdb_set_plaintext_passwd() to the passdb. This simply
interfaces to the existing set NT and LM functions, but ensures we always do it
in the same way.

This also allows for the possibility for the unix password sync code to be
hidden behind the passdb interface as some stage.
0001-01-01 00:00:00 +00:00
Andrew Bartlett
f7ed0ecc14 More updates to prevent account-guessing.
This moves the check that ensures that the account being looked up is the same
account as the machine logged in as to the front, before we even start with
passdb.

Merge for 2.2.2?

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Andrew Bartlett
e0e05cb5a5 We don't use a modified 'user' in any case, so don't modifiy it. 0001-01-01 00:00:00 +00:00
Andrew Bartlett
3f10b04566 Update build_options.c in line with new configure options. 0001-01-01 00:00:00 +00:00
Andrew Bartlett
0b9e13530d Finish Jeremy's passdb merge :-).
(fix up configure.in for default (smbpasswd) option)

Rerun autoconf.
0001-01-01 00:00:00 +00:00
Jeremy Allison
bca6419447 Added Elrond patch to make se_access_check use NT datastructures, not Samba.
Jeremy.
0001-01-01 00:00:00 +00:00
Jeremy Allison
611bf806d5 Fixup passdb stuff to add new nisplus and ldap backends.
Jeremy.
0001-01-01 00:00:00 +00:00
Motonobu Takahashi
322ba52f71 sorry to forget re-run autoconf again... 0001-01-01 00:00:00 +00:00
Motonobu Takahashi
9ec2d5e96e now --with-i18n-swat works to install some international files
used by SWAT into $swatdir/$ln/{help,images,include}

we have still points which needs to discuss, that is how to archive
and install lots of HTML help files and Using Samba files.

-- monyo
0001-01-01 00:00:00 +00:00
Andrew Bartlett
29b7434293 Don't segfault when deleting accounts not in /etc/passwd. The RID we want is
the one in the sampass anyway.

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Andrew Bartlett
cad971f4c3 Fix up the ./configure for the BSDs:
Subject:
         Re: bugs in installman.sh script
    Date:
         Tue, 25 Sep 2001 16:02:11 +0200 (CEST)
   From:
         Rafal Szczesniak <mimir@spin.ict.pwr.wroc.pl>
     To:
         Andrew Bartlett <abartlet@pcug.org.au>
     CC:
         <samba-technical@lists.samba.org>

On Tue, 25 Sep 2001, Andrew Bartlett wrote:

> Its broken for BSDs and was broken for many others.  You might want to
> re-checkout.  Any fixes appricatiated.

OK. Here's the patch for configure.in. Replaces illegal, under [t]csh,
substitution with more general sed construction. Apply it, please, and
I'll see if I can clean up the installman.sh further.
0001-01-01 00:00:00 +00:00
Simo Sorce
7f07004571 memory leak fixes .. 0001-01-01 00:00:00 +00:00
Simo Sorce
4ade36446e - the inactive core of the new mangling code that use tdb
- some more utils for unicode string manipulation
0001-01-01 00:00:00 +00:00
Andrew Tridgell
fdc9952391 fixed the really awful performance problem with the stat cache when it
ran out of primes and used a power of two hash modulus. It ended up
sticking all the entries in just a few buckets. Yuck!
0001-01-01 00:00:00 +00:00
Andrew Tridgell
11a2808e10 fixed a typo 0001-01-01 00:00:00 +00:00
Andrew Tridgell
eb668b54af added a little smbtorture test for dumping the unicode table of a
server. This is just a framework right now - I want this to eventually
replace the win32 test code from monyo

The interesting this about this test is that it shows up a really
horrible performance bug in our stat cache code. I'll see if I can fix
it.
0001-01-01 00:00:00 +00:00
Andrew Bartlett
23173125cd Change ./configure.developer to stay in effect across a
'./config.status --recheck' by making it a real configure option.

reran autoconf
0001-01-01 00:00:00 +00:00
Andrew Tridgell
e13e8b190c allow all ucs2 chars in utf8, rather than mapping some to a single
char like libiconv does
0001-01-01 00:00:00 +00:00
Andrew Tridgell
b2eb7feb7f added cli_qpathinfo_alt_name() for fetching the 8.3 name of a file 0001-01-01 00:00:00 +00:00
Andrew Bartlett
a302bb20e2 Try to fix up manpage installation 0001-01-01 00:00:00 +00:00
Jeremy Allison
dfb58f2276 Fixed enumeration of large numbers of groups from a Samba DC.
Tidied up debug messages in lib/messages.c
Jeremy.
0001-01-01 00:00:00 +00:00
Jeremy Allison
4a54a633c5 Log sys_acl_set_XX at level 2 not zero.
Jeremy.
0001-01-01 00:00:00 +00:00
Jeremy Allison
fa74d07207 Change log message to 2 from zero when failing to create directory.
Stops spurious profile creation messages.
Jeremy.
0001-01-01 00:00:00 +00:00
Jeremy Allison
b5f4a97bb0 Removed extra '()' s.
Jeremy.
0001-01-01 00:00:00 +00:00
Motonobu Takahashi
c2e256c18c fixed a typo in installman.sh
fixed a problem that source/install-sh is not executable
0001-01-01 00:00:00 +00:00
Motonobu Takahashi
87a945f13d fixed a typo 0001-01-01 00:00:00 +00:00
Motonobu Takahashi
736b713c49 added files and directories to support gettext() feature
Also added some po files to support:
    English, Japanese, Polish, Turlish
0001-01-01 00:00:00 +00:00
Motonobu Takahashi
50a61b221b Update configure from configure.in 0001-01-01 00:00:00 +00:00
Motonobu Takahashi
486b79a6fc Added SWAT i18n feature:
TO enable configure with --with-i18n-swat
  to support this gettext is integrated
  and a new directories name "po" and "intl" are created.

  now these languages are supported:

  en - English (default)
  ja - Japanese
  po - Polish
  tr - Turkish

  To add your language,
  to create ${your_language}.po by translating source/po/en.po
  into your language is needed.

  some of html and image files of various language version are not
  included yet, though message catalogue files are installed.
  you need to copy files manually under
  ${swatdir}/lang/$ln/{help,images,included,using_samba}


And also added a option to intall manual pages:
of various lang version
  To enable configure with --with-manlangs
  but manual pages themself are not included yet.
0001-01-01 00:00:00 +00:00
Motonobu Takahashi
1e77e87dcf added SWAT i18n support files for Japanese and Turkish 0001-01-01 00:00:00 +00:00
Andrew Tridgell
e558ab6ac8 fixed a silly off by 1 bug 0001-01-01 00:00:00 +00:00
Andrew Tridgell
73f10d3ef6 fixed bug in POST var handling 0001-01-01 00:00:00 +00:00
Andrew Bartlett
3a2a967723 If we disable hostname lookups we can at least get a uniform answer for testing
the rhosts and hostsequiv stuff with.

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Andrew Tridgell
b8d9d1fca3 tdbtorture updates from when I was trying to track down the hp tdb bug 0001-01-01 00:00:00 +00:00
Andrew Tridgell
cd6478ad98 convert all POST variables from display to unix charset 0001-01-01 00:00:00 +00:00
Andrew Bartlett
e12d757099 Add .headers.stamp 0001-01-01 00:00:00 +00:00
Andrew Bartlett
b6048e28ab Lets call an NTSTATUS an nt_status, not an ecode. 0001-01-01 00:00:00 +00:00
Andrew Bartlett
d417b6b5cb Zero out these pstrings before we start: makes for much easier debugging. 0001-01-01 00:00:00 +00:00
Andrew Bartlett
67947bf6e3 Fix up NT_STATUS return for session setups, Win2k objects to anything other
than NT_STATUS_LOGON_FAILURE.  This also brings us (almost) back in line with
their implementation.

Kill off SMBENCRYPT() macro

Kill off 'nt smb support' paramater - tridge okayed this one.

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Andrew Tridgell
e78d0a3615 fixed the Makefile so we don't rebuild libsmbclient and build_env.h
(and thus smbd) every time
0001-01-01 00:00:00 +00:00
Jeremy Allison
bc7963bd64 Ignore unmappable (NT Authority, BUILTIN etc.) SIDs in an ACL set.
Jeremy.
0001-01-01 00:00:00 +00:00