summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Raise log level of warning produced when the open() of the tdb fails.Tim Potter2002-01-221-1/+1
| | | | Sometimes an open error is OK.
* Display tdb name of "unknown" in logging debug when tdb has not been named.Tim Potter2002-01-221-1/+1
|
* Added comment about running lp_load() before calling pidfile_create().Tim Potter2002-01-221-1/+4
|
* Call pidfile_create() as part of init sequence.Tim Potter2002-01-221-0/+3
|
* Having a const parameter for set_socket_options() causes too much confusion.Tim Potter2002-01-221-1/+1
|
* Removed freebsd hack. Not correct.Jeremy Allison2002-01-211-4/+0
| | | | Jeremy.
* Found and fixed the logic bug in write cache code. Amazingly helpfulJeremy Allison2002-01-211-4/+10
| | | | | work from Juergen.Hasch@de.bosch.com in tracking this down. Jermy.
* getpwnam_alloc -> getpwnamSimo Sorce2002-01-211-9/+8
| | | | | | same reason as per pdb_tdb.c there isn't (and will never be probably) another call to any getpw* fn, let's use getpwnam_alloc only when needed.
* hmm, get it right this time.Simo Sorce2002-01-211-1/+1
|
* fix also the comment.Simo Sorce2002-01-211-2/+5
|
* replace getpwnam_alloc with plain getpwnam.Simo Sorce2002-01-211-2/+1
| | | | | We are not going to reuse any getpw* call, so the extra alloc,copy and free only uses extra memory and extra cpu time for nothing.
* Make the -L option to smbclient slightly less gross:Martin Pool2002-01-211-4/+22
| | | | | | smbclient -L //nautilus1/ should definitely not say "unknown host "nautilus1/". Sheesh.
* Spelling fix.Tim Potter2002-01-211-1/+1
|
* getpwnam -> getpwnam_allocAndrew Bartlett2002-01-211-2/+3
|
* getpwnam -> getpwnam_allocAndrew Bartlett2002-01-211-1/+2
|
* One less Get_Pwnam_Modify call!Andrew Bartlett2002-01-211-5/+0
| | | | | | (the passdb backend is case-insensitive, so there isn't any point to this). Andrew Bartlett
* Add the -s command to keep smbpasswd quiet during the tests.Andrew Bartlett2002-01-211-2/+2
| | | | Andrew Bartlett
* Inititialise the gid to what standard_sub_advanced wants for 'no value'.Andrew Bartlett2002-01-201-1/+1
| | | | Andrew Bartlett
* Fix the negation of the extra parinoia check on machine password changes.Andrew Bartlett2002-01-201-1/+1
| | | | | | I *love* automated testing - this one got picked up by the build farm. Andew Bartlett
* Also echo the smbpasswd command lineAndrew Bartlett2002-01-201-0/+1
|
* Spelling fixes.Tim Potter2002-01-203-13/+15
|
* This should get the oldstyle domain join tests working again.Andrew Bartlett2002-01-201-1/+1
|
* A couple more little fixes for the domain security tests.Andrew Bartlett2002-01-202-5/+5
|
* Vance and his eagle eyes spotted a copy and paste error in my smb.conf updates.Andrew Bartlett2002-01-201-11/+0
| | | | | | Thanks! Andrew Bartlett
* Try to see if we can get these tests working...Andrew Bartlett2002-01-202-5/+1
|
* fixes from 2.2Simo Sorce2002-01-201-93/+127
|
* This is another *BIG* change...Andrew Bartlett2002-01-2026-721/+1363
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Samba now features a pluggable passdb interface, along the same lines as the one in use in the auth subsystem. In this case, only one backend may be active at a time by the 'normal' interface, and only one backend per passdb_context is permitted outside that. This pluggable interface is designed to allow any number of passdb backends to be compiled in, with the selection at runtime. The 'passdb backend' paramater has been created (and documented!) to support this. As such, configure has been modfied to allow (for example) --with-ldap and the old smbpasswd to be selected at the same time. This patch also introduces two new backends: smbpasswd_nua and tdbsam_nua. These two backends accept 'non unix accounts', where the user does *not* exist in /etc/passwd. These accounts' don't have UIDs in the unix sense, but to avoid conflicts in the algroitmic mapping of RIDs, they use the values specified in the 'non unix account range' paramter - in the same way as the winbind ranges are specifed. While I was at it, I cleaned up some of the code in pdb_tdb (code copied directly from smbpasswd and not really considered properly). Most of this was to do with % macro expansion on stored data. It isn't easy to get the macros into the tdb, and the first password change will 'expand' them. tdbsam needs to use a similar system to pdb_ldap in this regard. This patch only makes minor adjustments to pdb_nisplus and pdb_ldap, becouse I don't have the test facilities for these. I plan to incoroprate at least pdb_ldap into this scheme after consultation with Jerry. Each (converted) passdb module now no longer has any 'static' variables, and only exports 1 init function outside its .c file. The non-unix-account support in this patch has been proven! It is now possible to join a win2k machine to a Samba PDC without an account in /etc/passwd! Other changes: Minor interface adjustments: pdb_delete_sam_account() now takes a SAM_ACCOUNT, not a char*. pdb_update_sam_account() no longer takes the 'override' argument that was being ignored so often (every other passdb backend). Extra checks have been added in some places. Minor code changes: smbpasswd no longer attempts to initialise the passdb at startup, this is now done on first use. pdbedit has lost some of its 'machine account' logic, as this behaviour is now controlled by the passdb subsystem directly. The samr subsystem no longer calls 'local password change', but does the pdb interactions directly. This allow the ACB_ flags specifed to be transferred direct to the backend, without interference. Doco: I've updated the doco to reflect some of the changes, and removed some paramters no longer applicable to HEAD.
* Kill off another ugly wart from the side of the passdb subsystem.Andrew Bartlett2002-01-208-70/+23
| | | | | | | | | | | | | This time its the pdb_getsampwuid() function - which was only being used by the SAMR rpc subsystem to gain a 'user session key'. This 'user session key' is actually generated at login time, and the other changes here simply move that data around. This also means that (when I check some details) we will be able to use the user session key, even when we are not actually the DC, becouse its one of the components of the info3 struct returned on logon. Andrew Bartlett
* Fix up an embarrsing bug I introduced when I moved the id21/id23 -> SAM_ACCOUNTAndrew Bartlett2002-01-201-20/+40
| | | | | | | | | conversion across to the pdb_set...() interface. Now we only set strings that are non-null. This allows Win2k to join the domain again, particularly when using tdbsam. Andrew Bartlett
* Kill off the old varient of 'check_plaintext_password' (new version justAndrew Bartlett2002-01-202-103/+28
| | | | | | | committed in auth/auth_compat.c and use the new version to make the plaintext password change slightly sane... (Needs testing). Andrew Bartlett
* Add a touch of 'const' to some auth components, and move the simple plaintextAndrew Bartlett2002-01-202-32/+41
| | | | | | | password check into its own helper funciton. (This will allow it to be called from other places). Andrew Bartlett
* Fix a couple of memory leaks in the cli_establish_connection() code's failureAndrew Bartlett2002-01-201-0/+2
| | | | | | | | case. Thanks to Nigel Williams <nigel@wednesday.demon.co.uk> for spotting these! Andrew Bartlett
* This is the current patch from Luke Leighton <lckl@samba-tng.org> to add aAndrew Bartlett2002-01-209-95/+341
| | | | | | | | | | | | | | | | | | degree of seperation betwen reading/writing the raw NamedPipe SMB packets and the matching operations inside smbd's RPC components. This patch is designed for no change in behaviour, and my tests hold that to be true. This patch does however allow for the future loadable modules interface to specify function pointers in replacement of the fixed state. The pipes_struct has been split into two peices, with smb_np_struct taking the information that should be generic to where the data ends up. Some other minor changes are made: we get another small helper function in util_sock.c and some of the original code has better failure debugs and variable use. (As per on-list comments). Andrew Bartlett
* This patch makes the 'winbind use default domain' code interact better withAndrew Bartlett2002-01-2016-148/+134
| | | | | | | | | | | | | | | | | | | | | | | | | | smbd, and also makes it much cleaner inside winbindd. It is mostly my code, with a few changes and testing performed by Alexander Bokovoy <a.bokovoy@sam-solutions.net>. ab has tested it in security=domain and security=ads, but more testing is always appricatiated. The idea is that we no longer cart around a 'domain\user' string, we keep them seperate until the last moment - when we push that string into a pwent on onto the socket. This removes the need to be constantly parsing that string - the domain prefix is almost always already provided, (only a couple of functions actually changed arguments in all this). Some consequential changes to the RPC client code, to stop it concatonating the two strings (it now passes them both back as params). I havn't changed the cache code, however the usernames will no longer have a double domain prefix in the key string. The actual structures are unchanged - but the meaning of 'username' in the 'rid' will have changed. (The cache is invalidated at startup, so on-disk formats are not an issue here). Andrew Bartlett
* Ensure identical between 2.2.3 and 3.0 - no need for difference here..Jeremy Allison2002-01-201-1/+0
| | | | Jeremy.
* Fix file size calculations for write cache code.Jeremy Allison2002-01-201-5/+41
| | | | Jeremy.
* Attempt to fix bugs in write cache code (yes I know it's going away :-).Jeremy Allison2002-01-202-3/+21
| | | | Jeremy.
* Readline has problems on non tty fd's. Use readline replacement to in casesJeremy Allison2002-01-191-31/+32
| | | | | where stdin is !isatty to allow stripts to work. Jeremy.
* Added #ifdef for FreeBSD TCP bug.Jeremy Allison2002-01-191-0/+4
| | | | Jeremy.
* Report write fail in smb_dump.Jeremy Allison2002-01-191-1/+3
| | | | Jeremy.
* Fix to close winbindd_idmap on exit. Pointed out by Alexander Bokovoy.Jeremy Allison2002-01-193-0/+10
| | | | Jeremy.
* fixes (asprintf) from 2.2Simo Sorce2002-01-195-17/+24
|
* Fix up runlist botchup.Andrew Bartlett2002-01-191-3/+3
|
* Update the build farm's test runlist and make it a bit easier to read.Andrew Bartlett2002-01-181-1/+12
|
* Don't do tridge's crazy 'am I a trusted domain' lookup for guests.Andrew Bartlett2002-01-181-9/+12
| | | | Andrew Bartlett
* Ensure (C) message is output on startup.Jeremy Allison2002-01-182-4/+4
| | | | Jeremy.
* If 127.0.0.1 matches both allow & deny then allow. Patch from Steve Langasek ↵Jeremy Allison2002-01-181-1/+7
| | | | | | vorlon@netexpress.net Jeremy.
* This is the 'winbind default domain' patch from Alexander BokovoyAndrew Bartlett2002-01-1812-51/+178
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | <a.bokovoy@sam-solutions.net>. The idea is the domain\username is rather harsh for unix systems - people don't expect to have to FTP, SSH and (in particular) e-mail with a username like that. This 'corrects' that - but is not without its own problems. As you can see from the changes to files like username.c and wb_client.c (smbd's winbind client code) a lot of assumptions are made in a lot of places about lp_winbind_seperator determining a users's status as a domain or local user. The main change I will shortly be making is to investigate and kill off winbind_initgroups() - as far as I know it was a workaround for an old bug in winbind itself (and a bug in RH 5.2) and should no longer be relevent. I am also going to move to using the 'winbind uid' and 'winbind gid' paramaters to determine a user/groups's 'local' status, rather than the presence of the seperator. As such, this functionality is recommended for servers providing unix services, but is currently less than optimal for windows clients. (TODO: remove all references to lp_winbind_seperator() and lp_winbind_use_default_domain() from smbd) Andrew Bartlett
* Tidyup & code refactoring from Martin.Sheppard@csiro.au.Jeremy Allison2002-01-181-26/+23
| | | | Jeremy.
* Ensure we log tdb open fails. Patch from Alexander Bokovoy ↵Jeremy Allison2002-01-181-4/+2
| | | | | | <a.bokovoy@sam-solutions.net> Jeremy.
generated by cgit (git 2.34.1) at 2024-11-16 08:25:26 +0000