summaryrefslogtreecommitdiffstats
path: root/source3/include/ads.h
Commit message (Collapse)AuthorAgeFilesLines
* r7994: This adds support in Winbindd's "security = ads"-mode to retrieve the ↵Günther Deschner2007-10-101-4/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | POSIX homedirectory and the loginshell from Active Directory's "Services for Unix". Enable it with: winbind sfu support = yes User-Accounts without SFU-Unix-Attributes will be assigned template-based Shells and Homedirs as before. Note that it doesn't matter which version of Services for Unix you use (2.0, 2.2, 3.0 or 3.5). Samba should detect the correct attributes (msSFULoginShell, msSFU30LoginShell, etc.) automatically. If you also want to share the same uid/gid-space as SFU then also use PADL's ad-idmap-Plugin: idmap backend = ad When using the idmap-plugin only those accounts will appear in Name Service Switch that have those UNIX-attributes which avoids potential uid/gid-space clashes between SFU-ids and automatically assigned idmap-ids. Guenther (This used to be commit 28b59699425b1c954d191fc0e3bd357e4a4e4cd8)
* r4665: Fix inspired by posting from Joe Meadows <jameadows@webopolis.com>.Jeremy Allison2007-10-101-3/+0
| | | | | | Make all LDAP timeouts consistent. Jeremy. (This used to be commit 0f0281c2348b10ffdea744ecade6b2be0814c872)
* r2832: Readd WKGUID-binding to match the correct default-locations of newGünther Deschner2007-10-101-0/+3
| | | | | | | | | | | | | | | | User-, Group- and Machine-Accounts in Active Directory (this got lost during the last trunk-merge). This way we match e.g. default containers moved by redircmp.exe and redirusr.exe in Windows 2003 and don't blindly default to cn=Users or cn=Computers. Further wkguids can be examied via "net ads search wellknownobjects=*". This should still keep a samba3-client joining a samba4 dc. Fixes Bugzilla #1343. Guenther (This used to be commit 8836621694c95779475fa9a1acf158e5e0577288)
* Fix bugzilla # 1208Jim McDonough2004-03-241-0/+1
| | | | | | | | | | | Winbind tickets expired. We now check the expiration time, and acquire new tickets. We couln't rely on renewing them, because if we didn't get a request before they expired, we wouldn't have renewed them. Also, there is a one-week limit in MS on renewal life, so new tickets would have been needed after a week anyway. Default is 10 hours, so we should only be acquiring them that often, unless the configuration on the DC is changed (and the minimum is 1 hour). (This used to be commit c2436c433afaab4006554a86307f76b6689d6929)
* bug 1195: add flag to ADS_STRUCT so we know who owns the main structure's ↵Gerald Carter2004-03-221-0/+2
| | | | | | memory (not the members though) (This used to be commit 4449e0e251190b741f51348819669453f0758f36)
* fix some warnings from the Sun compilerGerald Carter2004-01-091-9/+9
| | | | (This used to be commit ebabf72a78f0165521268b73e0fcabe1ea7834fd)
* Fix to properly set AP_OPTS_SUBKEY in heimdal. In MIT it is a #define, butJim McDonough2003-08-271-1/+1
| | | | | | | | in heimdal it is an enum. Thanks to Guenther Deschner (gd@suse.de). With this join will work, but without a keytab, cifs connections will still fail with heimdal. Fix to come later. (This used to be commit d30bef4c37e8203c273eb3852215a89348bece7a)
* added an auth flag that indicates if we should be allowed to fallbackAndrew Tridgell2003-06-101-0/+1
| | | | | | | to NTLMSSP for SASL if krb5 fails. This is important as otherwise the admin may think that a join has succeeeded when kerberos is actually broken. (This used to be commit 23a6ea385c4aea208adf36f039244bee14f56a33)
* Fix comment - we now have 5 types of error...Andrew Bartlett2003-05-091-1/+1
| | | | (This used to be commit 372a574a73b86855cf6efc18349e5ba24067d690)
* Merge from HEAD:Andrew Bartlett2003-03-171-0/+7
| | | | | | | | | net ads password Heimdal compile fixes. Andrew Bartlett (This used to be commit 3aa4f923e99f453310bb4a8d43ce43757591909d)
* Merge from HEAD - sync up SessionSetup code to HEAD, including Luke Howard'sAndrew Bartlett2003-03-171-0/+5
| | | | | | | session key and auth verifier patches. Andrew Bartlett (This used to be commit 3f9616a68a855acbae3f405c27ee2358fbe7ba2c)
* Merge from HEAD client-side authentication changes:Andrew Bartlett2003-02-241-0/+3
| | | | | | | | | | | - new kerberos code, allowing the account to change it's own password without special SD settings required - NTLMSSP client code, now seperated from cliconnect.c - NTLMv2 client code - SMB signing fixes Andrew Bartlett (This used to be commit 837680ca517982f2e5944730581a83012d4181ae)
* Revert changes to ADS_ERR_OK() as in head. Broke some compilers.Jim McDonough2002-11-181-1/+1
| | | | (This used to be commit a3ca6d5a191ee9d3c7022ec2dfcaf41533ee1244)
* Next step of printer publishing.Jim McDonough2002-11-181-56/+1
| | | | | | | | | net ads printer publish <printername> [servername] Will retreive the DsSpooler and DsDriver info by rpc for a remote server then publish it. Next comes doing it within smbd (This used to be commit 8f047a4492f7bd66ac2afd2a2f6194d5dad4a434)
* syncing up with HEAD. Seems to be a lot of differences creeping inGerald Carter2002-10-011-2/+5
| | | | | | (i ignored the new SAMBA stuff, but the rest of this looks like it should have been merged already). (This used to be commit 3de09e5cf1f667e410ee8b9516a956860ce7290f)
* sync'ing up for 3.0alpha20 releaseGerald Carter2002-09-251-20/+110
| | | | (This used to be commit 65e7b5273bb58802bf0c389b77f7fcae0a1f6139)
* sync 3.0 branch with headJelmer Vernooij2002-08-171-12/+50
| | | | (This used to be commit 3928578b52cfc949be5e0ef444fce1558d75f290)
* updated the 3.0 branch from the head branch - ready for alpha18Andrew Tridgell2002-07-151-0/+1
| | | | (This used to be commit 03ac082dcb375b6f3ca3d810a6a6367542bc23ce)
* Add ads ldap server controlsJim McDonough2002-04-101-0/+5
| | | | (This used to be commit 9126f008ef542b80f0040f621aa28478be5c80a0)
* Add ability to extend ads modification list on the fly. Added ADS_MODLIST type.Jim McDonough2002-02-111-0/+6
| | | | (This used to be commit 3f7ba70615008d74a145a94aa087cae08efab343)
* Change ADS_ERROR family of macros - removed semicolon from the end, since ↵Jim McDonough2002-02-021-4/+4
| | | | | | they were only being used correctly in one location, and all other assumed the semicolon wasn't there. Amazing that none of them mattered syntactically, until today. (This used to be commit 6515c3e8ef546975657e45fce7f147fe4a08e9ca)
* Add ads printer informationJim McDonough2002-02-011-0/+55
| | | | (This used to be commit a844d9af21d8047629129c5e842db7acbc059932)
* much better ADS error handling systemAndrew Tridgell2001-12-191-6/+16
| | | | (This used to be commit 05a90a28843e0d69183a49a76617c5f32817df16)
* - added initial support for trusted domains in winbindd_adsAndrew Tridgell2001-12-191-0/+11
| | | | | | | - gss error code patch from a.bokovoy@sam-solutions.net - better sid dumping in ads_dump - fixed help in wbinfo (This used to be commit ee1c3e1f044b4ef62169ad74c5cac40eef81bfda)
* added internal sasl/gssapi code. This means we are no longer dependent on ↵Andrew Tridgell2001-12-081-0/+2
| | | | | | cyrus-sasl which makes the code much less fragile. Also added code to auto-determine the server name or realm (This used to be commit 435fdf276a79c2a517adcd7726933aeef3fa924b)
* added a REALLY gross hack into kerberos_kinit_password so thatAndrew Tridgell2001-12-051-0/+1
| | | | | | | winbindd can do a kinit this will be removed once we have code that gets a tgt and puts it in a place where cyrus-sasl can see it (This used to be commit 7d94f1b7365215a020d3678d03d820a7d086174f)
* added timeouts and retries to ldap operationsAndrew Tridgell2001-12-051-0/+7
| | | | (This used to be commit 4f004eb54d66b6f811cb2f4791da6c70d77f87c2)
* added another ATYPE_Andrew Tridgell2001-12-031-1/+2
| | | | (This used to be commit 514bc61daa3f6d11dadac1baed5a5bf61313b1f9)
* added a basic ADS backend to winbind. More work needed, but atAndrew Tridgell2001-12-031-0/+3
| | | | | least basic operations work (This used to be commit 88241cab983b2c7db7d477c6c4654694a7a56cd3)
* forgot this fileAndrew Tridgell2001-11-201-0/+29
(This used to be commit 1dd255b06d4c8669d839a387d4c63ff3475ab1ab)
generated by cgit (git 2.34.1) at 2025-09-25 22:14:53 +0000