| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
|
|
| |
from logic of using @BUILD_INIPARSER@
metze
|
|
|
|
|
|
|
|
|
| |
For some systems it's needed to inject replace.h into
the iniparser source code, I do it in a way we can still have
a unmodified copy of iniparser in source/iniparser/
and have the wrapper stuff in source/iniparser_build/.
metze
|
|
|
|
|
|
|
| |
always include "winbind_client.h" as first header
as it brings in "replace.h" this will bring in "config.h"
metze
|
|
|
|
|
|
|
| |
don't typedef ber_tag_t when it's already done by openldap
headers on HP-UX (lber_types.h defines _LBER_TYPES_H).
metze
|
| |
|
|
|
|
|
|
|
|
| |
- added back the ldb groupdb backend
- enable switching between the tdb and ldb backends using
"groupdb:backend". This is a safety net only, it should go away in
future versions
|
| |
|
| |
|
| |
|
|\ |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
INIPARSER_OBJ from the bin/net target altogether. I re-add it
in the guise of @BUILD_INIPARSER@ (to NET_OBJ). This also
eliminates the need to have @BUILD_INIPARSER@ in the deps for
the bin/net target.
Same procedure for the pam_winbindd module.
Michael
|
| |
| |
| |
| | |
anyway.
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
- unify handling on @BUILD_INIPARSER@
btw: nsswitch/pam_winbind.c doesn't compile anymore on SuSE 10.2!
I think we should build pam modules by default to notice things
like this in the build-farm...
metze
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
the iniparser source code, I do it in a way we can still have
a unmodified copy of iniparser in source/iniparser/
and have the wrapper stuff in source/iniparser_build/.
If the build-farm is happy with this I'll merge it to 3_0_26
tomorrow...
metze
|
| |
| |
| |
| |
| |
| | |
we need to use tdb_wrap_open in both these backends to allow for
multiple opens. This is done for notify.tdb. Otherwise we die when a
2nd share with notify is setup
|
| | |
|
| |
| |
| |
| | |
metze
|
| |
| |
| |
| |
| |
| |
| | |
as we can't replace this function in libreplace and we do
the some stuff for other function in the same way.
metze
|
| |
| |
| |
| |
| |
| | |
fix large file support on HP-UX 11.00 and 11.11
metze
|
| |
| |
| |
| | |
during ctdb tests
|
| |
| |
| |
| | |
if this is not correct.
|
| | |
|
| |
| |
| |
| |
| |
| |
| | |
Setting it
to False makes winbind use RPC and not LDAP methods to connect to the DCs,
even when it figured out they are AD.
|
| |
| |
| |
| | |
binaries. Fix vfs_zfsacl build rule in SAMBA_3_0.
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
The clear text presentaion of the sid in the ldap expression
does work with w2k3 but not with w2k....
Thanks to Guenther for advising me of this issue.
Michael
|
| |
| |
| |
| |
| |
| | |
Hopfully, I have finally got this right... :-)
Michael
|
| |
| |
| |
| |
| |
| | |
wanted to do.
Michael
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
with talloc randomly failing.
Hey, shouldn't TALLOC_ARRAY _not_ return NULL when
requested to allocate an array with zero entries? :-)
Michael
|
| |
| |
| |
| |
| |
| |
| |
| | |
And clean up unused stuff at the end.
Daringly, I use talloc_steal at some point, where it
appears natural to me.
Michael
|
| |
| |
| |
| | |
by sid_string_static.
|
| |
| |
| |
| | |
call renames for svcctl in the previous commit
|
| |
| |
| |
| | |
Jeremy.
|
| |
| |
| |
| | |
SAMBA_3_0_26
|
| | |
|
| |
| |
| |
| |
| | |
redeclaration compile failures in the generated client
code.
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
started in r23070, r23072, r23073, r23078, r23081 and r23082:
After retrieving the list of sids with the extended dn
ldap query, instead of passing all sids to the lsa_lookup_sids
call, now while extracting the sids from the extended dn member
entries, we first try to lookup the sid from cache and only pass
the sids that were not in cache to the lsa_lookup_sids call.
Michael
|
| | |
|
| | |
|
| |
| |
| |
| |
| | |
just to stay in sink. This was more or less just for me
to play with.
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
> Here's the problem I hit:
>
> getgrnam("foo") -> nscd -> NSS -> winbindd ->
> winbindd_passdb.c:nam_to_sid() -> lookup_global_sam_name() ->
> getgrnam("foo") -> nscd -> ....
>
> This is in the SAMBA_3_0 specifically but in theory could happen
> SAMBA_3_0_25 (or 26) for an unknown group.
>
> The attached patch passes down enough state for the
> name_to_sid() call to be able to determine the originating
> winbindd cmd that came into the parent. So we can avoid
> making more NSS calls if the original call came in trough NSS
> so we don't deadlock ? But you should still service
> lookupname() calls which are needed for example when
> doing the token access checks for a "valid groups" from
> smb.conf.
>
> I've got this in testing now. The problem has shown up with the
> DsProvider on OS X and with nscd on SOlaris and Linux.
|
| | |
|
| |
| |
| |
| | |
respond to events.c style events.
|
| |
| |
| |
| |
| |
| |
| |
| | |
session_claim. Jerry, this fixes the hanging smbstatus.
Sorry for that,
Volker
|
| |
| |
| |
| |
| | |
gpfs share modes in special situations. This might be split up in
several modules later.
|
| |
| |
| |
| | |
the debug level alway at least 2 digits
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
winbind. With this and W2k3 DCs around it is possible to use
more than one winbind on the same machine account, because
NetSamLogonEx does not use the credentials chain.
I added the flag domain->can_do_samlogon_ex because this
only works against W2k3 and with schannel. The theory is to
try if we're AD and have schannel, and fall back to
NetSamLogon if this fails. can_do_samlogon_ex is thus a
protection against multiple failures.
Only checking into 3_0, this needs more review before going
into a production release.
Feel free to comment :-)
|
| |
| |
| |
| | |
useful even in binaries that don't link in libsmb
|
| | |
|