1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-28 17:47:29 +03:00

14582 Commits

Author SHA1 Message Date
Gerald Carter
fe585d49cc address bug #359. Andrew B's patch for implementing client
portion of NTLMv2 key exchange.  Also revert the default for
'client ntlmv2 auth' to no.  This caused no ends of grief in
different cases.

And based on abartlet's mail....

> All I care about at this point is that we use NTLMv2
> in our client code when connecting to a server that
> supports it.

There is *no* way to tell this.  The server can't tell us, because it
doesn't know what it's DC supports.  The DC can't tell us, because it
doesn't know what the trusted DC supports.  One DC might be Win2k, and
the PDC could be an older NT4.
-
Gerald Carter
89f6adf830 revert retry loops in winbindd_ads as abartket points out, we
already have ads_search_retry() for this.  However, neither
domain_sid() nor sequence_nunber() used this function.  So modify
them to us ads_do_search_retry() so we can specify the base search
DN and scope.
-
Jelmer Vernooij
9a603f6f07 Only set sids when they're retrurned by the MySQL query -
John Terpstra
6eaef4b6d2 Fix problem where stdarg.version would print the program name as smbd. -
Jeremy Allison
8cb9ec5d53 More cachegrind tuning, plus fix an error message.
Jeremy.
-
Jeremy Allison
f35e9a8b90 More tuning from cachegrind. Change most trim_string() calls to trim_char(0,
as that's what they do. Fix string_replace() to fast-path ascii.
Jeremy.
-
Gerald Carter
3913e43724 fixes for ads domain membership when only the realm is defined in
smb.conf

Fixes to ensure we work with disable netbios = yes
-
Gerald Carter
8fd13b6310 revert the change from r1.414 in HEAD that removed the
ability to use variables in paths for the [homes] service.
-
Gerald Carter
666d0fa721 updating readme with new links/address and removing outdated packages -
Gerald Carter
0283b0152e fix some output formatting -
Gerald Carter
5c3094ee55 reformatting -
Gerald Carter
50bb063f3b fix some problems with the findsmb script due to changes in smbclient & nmblookup -
Volker Lendecke
353d527291 Very weird. On my SLES8 installation ntlm_auth would give missing
kerberos symbols unless I do the same as smbd does. It does not hurt
on my debian, so simply give a pointer to LDAPLIBS as well.

Volker
-
Tim Potter
e3f5afb831 Fix for bug 282 that didn't get checked in. -
Gerald Carter
62d5611df0 fix bug 397: use a variant of alloc_sub_basic() for string lists. -
Gerald Carter
7021cf63a4 should fix bug 364 & 311: Retry patch based on suggestion from
Ken Cross.  Sometimes ads conenction get stale but we don't know
they are dead until we try them. This patch may need some optimization
after people bang on it for a while.
-
Tim Potter
f38679201e Fix for bug #73. Name types can be specified using name#type notation.
Also added shortcut so that 'net lookup foo#1b' works.
-
Gerald Carter
c9c7150a62 updated schema for 3.0 for eDirectory 8.7 and Netscape DS 4.x -
Tim Potter
04797e12d8 Move $(KRBCLIENT_OBJ) to libnss_wins PICOBJ variable so it is converted to
relocatable form.

Added a comment about this in the hope that it won't happen again.

Renamed PAM_WINBIND_OBJ to PAM_WINBIND_PICOBJ to make it a bit clearer.
-
Jeremy Allison
a9709700ee Hand optimisatinos for strrchr_m using the properties we know about MB
character sets and how we use this call.
Jeremy.
-
Tim Potter
6babab93ff Return 0 DFS links instead of -1 when dfs support is not enabled.
Possible fix for bug 403.
-
Tim Potter
061decb608 Removed {OLD,NEW}_NTDOMAIN cruft from mkproto.awk -
Jeremy Allison
b3176f2ec2 Fastpath strchr_m for ASCII.
Jeremy.
-
Jeremy Allison
467cafdb1f More hand-tuning of the fastpath. Don't do strlen() when we're doing
to walk to the end anyway.
Jeremy.
-
Gerald Carter
b1763ace4e Check in Andrew's fix for bug #305 (always use lp_realm() )
Also make sure thet ads_startup uses lp_realm instead of
just relying on the workgroup name.  Fixes bug in net ads join
when the workgroup defaults to "WORKGROUP" and we ignore the
realm name.
-
Jeremy Allison
e98fbfaf38 Remove convert_string_internal completely from fast path when processing
NBENCH calls. Requires fixed buffer size for strdup_upper().
Jeremy.
-
Jeremy Allison
17a241d9f7 Fix UNIX passwd sync properly. I've finally understood
the as_root parameter has bugger all to do with who you *currently*
are, and everything to do with who you run the script as. Doh !
Jeremy.
-
Tim Potter
4a3727b03b More FreeBSD PAM compile fixes. Don't redefine PAM_AUTHTOK_RECOVER_ERR
if it already exists.  FreeBSD 4.8 doesn't need the redefinition, 5.0 does.
-
Tim Potter
fe3fb58623 Produce an error if --with-pam_smbpass is specified and we can't
find libpam or security/pam_appl.h

Also change the warnings when we can't do --with-pam_smbpass when
is was requested to errors.
-
Tim Potter
24a1720472 Quieten level 0 debug when probing for modules. We shouldn't display so loud
an error when a smb_probe_module() fails.  Also tidy up debugs a bit.

Bug 375.
-
Jeremy Allison
ef140d15ea Used cachegrind to track down some bottlenecks.
Removed calls to clobber_region when not compiling with developer as
they were hiding speed problems.
Added fast path to convert_string() when dealing with ascii -> ascii,
ucs2-le to ascii and ascii to ucs2-le with values <= 0x7F. This
gives a speedup of 22% on my nbench tests.
Next I will do this on convert_string_allocate.
Jeremy.
-
Tim Potter
dc43c2dd1b Produce an error if --with-pam is specified but no PAM headers can be
found.
-
Tim Potter
4508e103d0 Fix typo, right branch this time. -
Jeremy Allison
e0c1460c6b Fix up overlapping memcpy -> memmove found by valgrind.
Jeremy.
-
Jim McDonough
a26fa5bee2 Try to add memory keytab support. It also includes much of the generic
keytab support code, but it won't be enabled until we add that to smb.conf.
Adapted from the work of Guenther Deschner (gd@suse.com).

Please hammer on this...
-
Jeremy Allison
e2b73477e7 Proposed patch for #308. Needs testing.
Jeremy
-
Gerald Carter
0109655411 removing debugging statement checked in by mistake -
Gerald Carter
a8de1f41c9 another round of changes for build on RedHat -
Jim McDonough
e039a61e51 Disable rc4-hmac on broken heimdal setups. Pre-0.7 heimdal (or at least up
to a very recent snapshot) has arcfour-hmac code that doesn't work with
windows.  Love suggested detecting it via the existence of KEYTYPE_ARCFOUR_56
which only exists in working versions.
-
Jim McDonough
85737fc937 Check for support for in-memory keytabs, which are needed to make heimdal
work properly.  MIT does not support them, so this check will be used to
decide whether to use them.  First part of fixing bug #372.
-
Jelmer Vernooij
b53d5064f3 Fix typo in smbcquotas manpage -
Gerald Carter
cca0f60350 I think this will gracefully get around issues between different rpm
versions.  Particularly the long standing problem with Net::LDAP
dependencies in examples/LDAP.  I'll build new packages tomorrow
as the final test.
-
Tim Potter
75411005fc Fix for bug 261. Create a configure #define for FreeBSD and a check in
nsswitch/pam_winbind.h so we can compile properly on this platform.
-
Jeremy Allison
f1ec43fae4 Fix comment strings to 43 bytes as per spec.
Jeremy.
-
Alexander Bokovoy
4ab08a4bb8 Proper fix for #380 -- use different algorithm to generate codepages
source code which allows to take gaps into account thus making unneccessary
extended [index] = value, syntax in to_ucs2 array
-
Alexander Bokovoy
61c671bd69 Fix CP437 and CP850 syntax for old compilers removing ANSI C99-specifics -
Tim Potter
233568dd6b Fix bug 342. Short version of --add now -a instead of -A. -
Tim Potter
71034cede8 We don't need to #include memory.h here. It's a BSD'ism and just includes
string.h anyways.
-
Gerald Carter
3c2bcc5804 i know there is an specfile macro for determing the RPM version
but I can't seem to find it right now.  This should get us around
all problems with RPM adding Net::LDAP to the list of requirements.
-
Gerald Carter
9e40477281 make changes in the template, not the generated files... :-( -