| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
| |
| |
| | |
(This used to be commit 05b1681b03688c0d4e57e8dfb881b111f947e6c6)
|
| |
| |
| |
| | |
(This used to be commit 3bad73ca870bb43324bdb5dfc6bb02e0fa1fb1e0)
|
| |
| |
| |
| | |
(This used to be commit 9387caf3cebecd50de2b295560355b779135d8c3)
|
| |
| |
| |
| | |
(This used to be commit 1d33afdef9ea11e17c633109170d35ed66c4e2b8)
|
| |
| |
| |
| | |
(This used to be commit 44e9bf88cc2bbb2aa34711354258c3abb319cb9b)
|
| |
| |
| |
| | |
(This used to be commit 5c6f5bef30db62f351d83ecdd6aa6990a567d842)
|
| |
| |
| |
| |
| |
| |
| | |
when debugging pdc stuff...
Volker
(This used to be commit e1c275a66aa8a0fe29c61f4742fed5953671cb43)
|
| |
| |
| |
| | |
(This used to be commit 45e5374e89730e7ad497edf9e344fbd1b8992589)
|
| |
| |
| |
| | |
(This used to be commit 3cd1650d389850c2a36997a1a404d37bb28130e4)
|
| |
| |
| |
| |
| | |
Volker
(This used to be commit e8725913f9f174c03683a35bbce16ee33ab4c707)
|
| |
| |
| |
| |
| |
| |
| |
| | |
Otherwise add -O.
(We used to always set -O, which is sometimes annoying when debugging
and anyhow clashes with normal autoconf behaviour.)
(This used to be commit aee2ad9c3444d59dd6f53dda5379a6c391e00002)
|
| |
| |
| |
| |
| |
| | |
Apply the job returned limit across all requests for job queues.
Jeremy.
(This used to be commit dee1326a1d8a0bf8977df22a0fe014dd5d8dc769)
|
| |
| |
| |
| |
| | |
Added new sid type = 9 for "computer" from MSDN.
(This used to be commit 45929d126932e5cac5a23fe76d28a4fa05b54b77)
|
| |
| |
| |
| | |
(This used to be commit ea85f8ff21bfad378eb8464a94bb182cb3e4f988)
|
| |
| |
| |
| | |
(This used to be commit 6acbb37e4e32de635ace8420a5182b04b6527e34)
|
| |
| |
| |
| | |
(This used to be commit 1960a650c1546323708ed6bea615dc7215a97b4f)
|
| |
| |
| |
| | |
(This used to be commit dd03aec26dc39a4e56f18d547132768204a500db)
|
| |
| |
| |
| | |
(This used to be commit 25412880251839de3dd17882fab30c873c886454)
|
| |
| |
| |
| | |
(This used to be commit c6eb950b6879d7566ded33dd6a3853cf2d5310db)
|
| |
| |
| |
| | |
(This used to be commit fa1c8eee1fdd2452f9e3595b2b3957ea8c0ea46a)
|
| |
| |
| |
| | |
(This used to be commit e6034a03d543d8672303f2b24982cfc03b124391)
|
| |
| |
| |
| |
| |
| |
| | |
ugly :-)
Andrew Bartlett
(This used to be commit 12579a62945d0d475b53c4ab49761a01be9e8394)
|
| |
| |
| |
| |
| |
| |
| |
| | |
easier to understand by moving the logic for init_ldap_from_sam
and friends around.
Volker
(This used to be commit 09a92984baaee94521d0cacf16daaf0291242b42)
|
| |
| |
| |
| |
| | |
twice (probably a cut/paste error).
(This used to be commit d9b799d8c35a7453e6ccb92b3fc4ec2ec510449a)
|
| |
| |
| |
| |
| | |
Jeremy.
(This used to be commit ef1782121bc4ebcdd2731fd6863209352f815dbe)
|
| |
| |
| |
| |
| | |
Jeremy.
(This used to be commit 7787815da498382a380230912e0573f41347d0d8)
|
| |
| |
| |
| |
| | |
Jeremy.
(This used to be commit b2ef052adad01c37f0fd4b9b82a16a9989d57082)
|
| |
| |
| |
| | |
(This used to be commit 14499e64555481fdd5fa8ba656a4cba9a597a86b)
|
| |
| |
| |
| |
| |
| |
| | |
Apply metzes patch (hopefully) correctly this time
Volker
(This used to be commit e52a2d5d49e3c784d5db06bade2c866422258fcc)
|
| |
| |
| |
| |
| |
| | |
For some reason, explicitly setting the service type during the
tcon&X fixes this.
(This used to be commit 4dd81caeff96d2b7f08b4846a524f917a85407a4)
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
NTLM Authentication:
- Add a 'privileged' mode to Winbindd. This is achieved by means of a directory
under lockdir, that the admin can change the group access for.
- This mode is now required to access with 'CRAP' authentication feature.
- This *will* break the current SQUID helper, so I've fixed up our ntlm_auth
replacement:
- Update our NTLMSSP code to cope with 'datagram' mode, where we don't get a
challenge.
- Use this to make our ntlm_auth utility suitable for use in current Squid 2.5
servers.
- Tested - works for Win2k clients, but not Win9X at present. NTLMSSP updates
are needed.
- Now uses fgets(), not x_fgets() to cope with Squid environment (I think
somthing to do with non-blocking stdin).
- Add much more robust connection code to wb_common.c - it will not connect to
a server of a different protocol version, and it will automatically try and
reconnect to the 'privileged' pipe if possible.
- This could help with 'privileged' idmap operations etc in future.
- Add a generic HEX encode routine to util_str.c,
- fix a small line of dodgy C in StrnCpy_fn()
- Correctly pull our 'session key' out of the info3 from th the DC. This is
used in both the auth code, and in for export over the winbind pipe to
ntlm_auth.
- Given the user's challenge/response and access to the privileged pipe,
allow external access to the 'session key'. To be used for MSCHAPv2
integration.
Andrew Bartlett
(This used to be commit ec071ca3dcbd3881dc08e6a8d7ac2ff0bcd57664)
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
are 'SET' when adding the account.
I really don't like passing flags down to inner routines and
complicated if/else conditions, but this time he might be right. ;-)
Volker
(This used to be commit 339c14906802db6ddb59f07a0c71dcc3c73cc3d6)
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
* pdbedit -i -e sets all SAM_ACCOUNT elements
to CHANGED to satisfy the new pdb_ldap.c handling
* pdbedit -g transfers group mappings. I made this
separate from the user database, as current installations
have to live with a split backend.
So, if you are running 3_0 alphas with LDAP as a backend
and upgrade to the next 3_0 alpha, you should call
pdbedit -i tdbsam -e ldapsam -g
to transfer your group mapping database to LDAP.
You certainly have to have all your groups as posixGroup
objects in LDAP and adapt the LDAP schema before this
call.
Volker
(This used to be commit 09a3db0ffcbbe578788d3dd5ee7540d27cc7c09a)
|
| |
| |
| |
| |
| |
| |
| |
| | |
directly anymore, but instead through the passdb
interface. So we can make them static.
Volker
(This used to be commit 99da1119a7a7fc0879e63f7e11cb4500419359e8)
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This adds 'ldap delete dn' as the recommended parameter
for the 'ldap del only sam attr' functionality. So
we are compatiple to the current SuSE patches as well
as to TNG... ;-)
Volker
(This used to be commit 53b5704ff21de6fce097d74dd7f235d3ceccec66)
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
> Hi Volker,
>
> if 'displayName' is not available we should fallback to 'cn' for map->nt_name
> 'cn' is used as unix group name by nss_ldap.
>
> and if nt_name is not available we should fail (so does this patch)
Volker
(This used to be commit 7ae9c2500e3ac5f671d41077327156f1f3767fff)
|
| |
| |
| |
| |
| |
| |
| |
| | |
(Decode all database names, and set only changes, not all info from the samsync
record).
Andrew Bartlett
(This used to be commit c7b8405bdebb9241ec335ccbbef630d90e61a419)
|
| |
| |
| |
| | |
(This used to be commit 8315b9c3119dde62aeb72ad5e20f63aee89abd0b)
|
| |
| |
| |
| |
| |
| | |
krb5-config
(This used to be commit 70634d248e74395c05d9980b07d53a20327a30a8)
|
| |
| |
| |
| |
| |
| |
| |
| | |
This repairs domain join with fully existing wks-account which I broke
with my last patch...
Volker
(This used to be commit bc59912aa10e5000225110e48ad548f19756bed5)
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
anymore, but instead look at what is currently stored in the
database. Then we explicitly delete the existing attribute and add the
new value if it is not NULL or "". This way we can handle appearing
and disappearing attributes quite nicely.
This currently breaks pdbedit -o, as this does not set the CHANGED
flag on the SAM_ACCOUNT.
Jelmer suggested that we set all the fields on CHANGED in
context_add_sam_account. This sounds not too unreasonable.
Volker
(This used to be commit a75015c9ce8246670ee7c7d73df585390696fe95)
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Small clenaup patches:
- safe_string.h - don't assume that __FUNCTION__ is available
- process.c - use new workaround from safe_string.h for the same
- util.c - Show how many bytes we smb_panic()ed trying to smb_xmalloc()
- gencache.c - Keep valgrind quiet by always null terminating.
- clistr.c - Add copyright
- srvstr.h - move srvstr_push into a .c file again, as a real function.
- srvstr.c - revive, with 'safe' checked srvstr_push
- loadparm.c - set a default for the display charset.
- connection.c - use safe_strcpy()
Andrew Bartlett
(This used to be commit c91e76bddbe1244ddc8d12b092eba875834029ac)
|
| |
| |
| |
| |
| | |
to the integer for SIVAL().
(This used to be commit 5e20868fadc4e01ea09639bc57c51d1eb687f78c)
|
| |
| |
| |
| | |
(This used to be commit f16a70a405a702945ada42be638c3d17c59517c0)
|
| |
| |
| |
| |
| | |
Andrew Bartlett
(This used to be commit 6bf04c41ed88528345f6bb19d48f5909753a8322)
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
- pdb_guest (including change defaults)
- 'default' passdb actions (instead of 'not implemented' stubs in each module)
- net_rpc_samsync no longer assumes pdb_unix
Andrew Bartlett
(This used to be commit 4bec53c8c81019f0f06a93c4df0800bbf7281dd6)
|
| |
| |
| |
| |
| |
| |
| | |
'minimum password age' during a password SET.
Andrew Bartlett
(This used to be commit dd6516e2e87cbe6bcbc371756d99ebb3b5617c2b)
|
| |
| |
| |
| |
| | |
Jeremy.
(This used to be commit 331e621b580f997592892be0226fb452c67ae9e1)
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Give volker a hand, and let domain joins with existing user accounts work
a bit better.
This just sets the minimum possible attributes - if we are 'upgrading' an
LDAP based user account, the attributes will be there anyway. This matches
NT pretty well to.
This also fixes some use of unitialised values in the desired_access checking.
(found by valgrind).
Andrew Bartlett
(This used to be commit 536e24ee5b83eaa77be81dd50e3e1a5010b5abf4)
|
| |
| |
| |
| | |
(This used to be commit d59a7bea6b22a4c3e6cacd1a4c5ee95f42b13a26)
|