summaryrefslogtreecommitdiffstats
path: root/examples/LDAP
Commit message (Collapse)AuthorAgeFilesLines
* This patch cleans up some of our ldap code, for better behaviour:Andrew Bartlett2003-07-041-4/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We now always read the Domain SID out of LDAP. If the local secrets.tdb is ever different to LDAP, it is overwritten out of LDAP. We also store the 'algorithmic rid base' into LDAP, and assert if it changes. (This ensures cross-host synchronisation, and allows for possible integration with idmap). If we fail to read/add the domain entry, we just fallback to the old behaviour. We always use an existing DN when adding IDMAP entries to LDAP, unless no suitable entry is available. This means that a user's posixAccount will have a SID added to it, or a user's sambaSamAccount will have a UID added. Where we cannot us an existing DN, we use 'sambaSid=S-x-y-z,....' as the DN. The code now allows modifications to the ID mapping in many cases. Likewise, we now check more carefully when adding new user entires to LDAP, to not duplicate SIDs (for users, at this stage), and to add the sambaSamAccount onto the idmap entry for that user, if it is already established (ensuring we do not duplicate sambaSid entries in the directory). The allocated UID code has been expanded to take into account the space between '1000 - algorithmic rid base'. This much better fits into what an NT4 does - allocating in the bottom part of the RID range. On the code cleanup side of things, we now share as much code as possible between idmap_ldap and pdb_ldap. We also no longer use the race-prone 'enumerate all users' method for finding the next RID to allocate. Instead, we just start at the bottom of the range, and increment again if the user already exists. The first time this is run, it may well take a long time, but next time will just be able to use the next Rid. Thanks to metze and AB for double-checking parts of this. Andrew Bartlett (This used to be commit 9c595c8c2327b92a86901d84c3f2c284dabd597e)
* applying fix for group map conversion (patch from Kristyan Osborne)Gerald Carter2003-07-011-1/+1
| | | | (This used to be commit 6237fae9b8407ee04226b984a932150799191d29)
* This patch is Vorlon's fault!John Terpstra2003-06-151-22/+34
| | | | (This used to be commit 56d2049561e5d5c22ac9d76cb013643083d9644e)
* fix typo in descriptionGerald Carter2003-06-131-1/+1
| | | | (This used to be commit be82b3d9dfef938030731e1021076df4dcfdb443)
* check that an attribute is defined and not just non-zeroGerald Carter2003-06-121-1/+1
| | | | (This used to be commit 8c18174a899e9578e0e82d17c7602e84b342644c)
* working draft of the idmap_ldap code.Gerald Carter2003-06-051-0/+10
| | | | | | | | | Includes sambaUnixIdPool objectclass Still needs cleaning up wrt to name space. More changes to come, but at least we now have a a working distributed winbindd solution. (This used to be commit 824175854421f7c27d31ad673a8790dd018ae350)
* moving the sambaAccount objectclass to 'historical' to prevent confusion on ↵Gerald Carter2003-05-221-150/+142
| | | | | | which one should be used for new servers. I'll add a note about uncommenting the older items for ldapsam_compat in the release notes (This used to be commit 469c5ad1acfb452617b10653e06ce3b34ec9e146)
* fix group mapping in LDAP under new schemaGerald Carter2003-05-141-1/+1
| | | | (This used to be commit 0714dda7cc4a1df73e1b9d11daae80a1f46583de)
* s/primaryGroupSID/sambaPrimaryGroupSID/Gerald Carter2003-05-141-1/+1
| | | | (This used to be commit 925c60f5e2f5301da90fc26dddc1bad610eea0d0)
* perl script to convert from sambaAccount to sambaSamAccount; requires ↵Gerald Carter2003-05-141-0/+105
| | | | | | Net::LDAP::LDIF (This used to be commit 9cde1aa32aed55a3d7cb28881c6acd9800b02065)
* *****LDAP schema changes*****Gerald Carter2003-05-141-25/+134
| | | | | | | | | | | | | New objectclass named sambaSamAccount which uses attribute prefaced with the phrase 'samba' to prevent future name clashes. Change in functionality of the 'ldap filter' parameter. This always defaults to "(uid=%u)" now and is and'd with the approriate objectclass depending on whether you are using ldapsam_compat or ldapsam conversion script for migrating from sambaAccount to sambaSamAccount will come next. (This used to be commit 998586e65271daa919e47e1206c0007454cbca66)
* As discussed on samba-technical - move to 'primaryGroupSid' insted ofAndrew Bartlett2003-05-111-1/+11
| | | | | | | | | | | primaryGroupID (rid). This is consistant with the move from 'rid' to ntSid for the primary user identifier. Also cope with legacy installations where primaryGroupID might have been stored as 0. Andrew Bartlett (This used to be commit 0e432817cb927b41af7b49fb0b5081ffdb46f85e)
* syncing README to go along with scriptsGerald Carter2003-05-091-24/+7
| | | | (This used to be commit 94780f0947f7ad7d5bc83e61681148637b59d7ab)
* syncing import/export smbpasswd file scripts from 2.2Gerald Carter2003-05-094-231/+114
| | | | (This used to be commit ee1374cabf38c3d99e66a45316e232d1c2cfbe6a)
* A new pdb_ldap!Andrew Bartlett2003-04-281-5/+34
| | | | | | | | | | | | | | | | | | | | | | | This patch removes 'non unix account range' (same as idra's change in HEAD), and uses the winbind uid range instead. More importanly, this patch changes the LDAP schema to use 'ntSid' instead of 'rid' as the primary attribute. This makes it in common with the group mapping code, and should allow it to be used closely with a future idmap_ldap. Existing installations can use the existing functionality by using the ldapsam_compat backend, and users who compile with --with-ldapsam will get this by default. More importantly, this patch adds a 'sambaDomain' object to our schema - which contains 2 'next rid' attributes, the domain name and the domain sid. Yes, there are *2* next rid attributes. The problem is that we don't 'own' the entire RID space - we can only allocate RIDs that could be 'algorithmic' RIDs. Therefore, we use the fact that UIDs in 'winbind uid' range will be mapped by IDMAP, not the algorithm. Andrew Bartlett (This used to be commit 3e07406ade81e136f67439d4f8fd7fe1dbb6db14)
* uidPool and gidPool don't use cn anymore (but we don't use thsi anyways)Gerald Carter2003-04-181-2/+2
| | | | (This used to be commit 7f0fd03f699f24094e32a92dbb0ec55d9a602c36)
* Fix schema error not detected by OpenLDAP 2.0.23 but by 2.1.16.Volker Lendecke2003-03-271-1/+1
| | | | | Volker (This used to be commit 5acb9f421c149126370e79d66d3d9ace6be9a695)
* Put group mapping into LDAP.Volker Lendecke2003-03-191-0/+25
| | | | | Volker (This used to be commit da83d97eb50c3c3a67985e22410842100207431f)
* Minor merges from HEAD.Tim Potter2003-01-221-1/+1
| | | | (This used to be commit 902a1dc1d5f74ce94496d03327c07416bc2061be)
* removed idpool from schema file (experimental) to remove the dependencyGerald Carter2003-01-061-6/+6
| | | | | | | on nis.schema. add $(LDFLAGS) to libsmbclient build (This used to be commit cd16064784a5e5fd9d2a67d4dfba605f7d8046ac)
* sync 3_0 branch with HEADJelmer Vernooij2002-08-171-2/+14
| | | | (This used to be commit 19ab776bf9c91cf4e56887fd7a63d3253b7e36ef)
* merging some changes from SAMBA_2_2Gerald Carter2002-05-083-0/+171
| | | | (This used to be commit e8ede079b5af4187573f1b8ed0d94b6f03cbbd22)
* merge from 2.2Gerald Carter2002-02-111-2/+2
| | | | (This used to be commit bb574aab8f3f4ac2f7ae919790481a419f8173cb)
* fixes from 2,2Gerald Carter2002-02-111-27/+59
| | | | (This used to be commit 46bd77a02a47c26c4981472c8cea09e64c2ef4d2)
* sync up comments with 2.2Gerald Carter2002-01-061-1/+1
| | | | (This used to be commit 3d4adad1501fc02ee0c60c69c01a92bdb16a1711)
* sync with 2.2Gerald Carter2002-01-041-3/+3
| | | | (This used to be commit 9e3b432c57747e6fd876c53a576858ef1227ba8e)
* merge from 2.2Gerald Carter2001-12-281-0/+1
| | | | (This used to be commit 241b5218ea5ad83ecb02a0f838e84abee0672371)
* sync with 2.2Gerald Carter2001-12-268-0/+790
(This used to be commit aca58b0b72d2eb5024b4d5103fde5b281212d714)
generated by cgit (git 2.34.1) at 2026-04-26 13:18:34 +0000