summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Added administrator access check for server side add, delete and setformTim Potter2002-01-311-10/+34
| | | | | rpcs. The only one I have been able to verify is addform - can't get the client side routines working properly yet. )-:
* Added make functions for SPOOL_Q_{ADD,SET,DELETE}FORM.Tim Potter2002-01-311-1/+42
| | | | | | | I'm pretty sure that the useless_ptr in spoolss_io_q_setform() needs to be initialised to 1 otherwise the form isn't marshalled at all. JF, can you verify this? If so then this probably applies to the io functions for setform and deleteform.
* Initialise some SAM_ACCOUNT structs to NULL, and add some more error checking.Andrew Bartlett2002-01-311-6/+14
| | | | Andrew Bartlett
* Added addform, setform and deleteform cli functions.Tim Potter2002-01-311-0/+164
|
* Added addform, setform and deleteform commands. The only one I could getTim Potter2002-01-311-4/+169
| | | | | | | | | to actually work was addform. )-: Removed a whole bunch of calls to werror_to_ntstatus() because there isn't a one-to-one mapping of NTSTATUS values to WERROR values. This function maps WERR_ACCESS_DENIED to NTSTATUS_INVALID_LOCK_SEQUENCE or something silly like that.
* Added some constants for the flags field in the FORM_1 structure.Tim Potter2002-01-311-1/+5
| | | | | The level2 field in SPOOL_Q_ADDFORM is probably part of the FORM structure as a discriminated union.
* Added constant for WERR_FILE_EXISTS.Tim Potter2002-01-311-0/+1
|
* this fixes the problem of not being able to add a SD to a file on aAndrew Tridgell2002-01-312-4/+1
| | | | | | | | | | | | | non-domain Samba server from a NT4 client. Note that this exactly reverses a change by Jeremy on the 18th of December 2001, reverting the code back to what JF originally wrote. I have looked carefully with a sniffer and JFs original NULL sid is correct (ie. it matches what NT4 does) and also fixes the problem. Sending a blank sid (which is what jeremy's patch did) causes NT4 to give a classic "parameter is incorrect error" and prevents the addition of new ACLs.
* preparing for release of 3.0-alpha14Samba Release Account2002-01-302-1/+30
|
* Back out herb's changes (to allow smbpasswd -x to work on accounts outsideAndrew Bartlett2002-01-301-10/+9
| | | | | | | | /etc/passwd) and replace them with a version that works. Unfortunetly HEAD and 2.2 have different passdb interfaces and different local_password_change functions... Andrew Bartlett
* An attempt at producing the correct Makefile magic for wrepld_proto.h to beAndrew Bartlett2002-01-301-8/+9
| | | | | | | | | | | | automatically generated on first 'make'. This wasn't being picked up by the build farm becouse of the explicit 'make proto'. The 'make proto' bit isn't somthing our alpha testers know about (its certainly not clearly documented) and its meant to be automatic. I hope this works... Andrew Bartlett
* Addd wrepld (what a cool name!)Tim Potter2002-01-301-0/+1
|
* Added wrepld_proto.hTim Potter2002-01-301-0/+1
|
* Removed version number from file header.Tim Potter2002-01-30413-788/+410
| | | | Changed "SMB/Netbios" to "SMB/CIFS" in file header.
* Unused file.Tim Potter2002-01-301-22/+0
|
* merge from 2.2Gerald Carter2002-01-301-1/+8
|
* merge change from @_2 to allow smbpasswd -x to delete user even if noHerb Lewis2002-01-301-7/+10
| | | | | | | | entry in /etc/passwd. There are still differences in the local_password_change function. I'm not sure which was the latest so I didn't change any thing else. Someone needs to take a look and sync these up.
* Fix for password change from Samuel Ziegler <sam@xpedion.com>Tim Potter2002-01-301-11/+11
|
* Removed silly fprintf(stderr, ...) debug.Tim Potter2002-01-301-2/+1
| | | | | Part of Samuel Ziegler's patch to get winbind password changing working again in HEAD.
* Doc.Martin Pool2002-01-291-1/+4
|
* Fix "strict allocate" to write the data out on ftruncate with extend.Jeremy Allison2002-01-291-8/+70
| | | | Jeremy.
* Since we have dynamic initialisation in the group mapping code, makeTim Potter2002-01-293-82/+94
| | | | | | | init_group_mapping() a static function and don't call it from any client programs. Not sure whether I've made a bigger mess here or not...
* make all-docs to make sure everything is up-to-dateGerald Carter2002-01-2831-32/+32
|
* Name another talloc.Andrew Bartlett2002-01-281-1/+1
|
* minor fix and checksSimo Sorce2002-01-271-2/+4
|
* Some more 'winbind default domain' support patches from Alexander BokovoyAndrew Bartlett2002-01-275-89/+38
| | | | | | | | | | | <a.bokovoy@sam-solutions.net>. This patch is designed to remove the 'special cases' required for this support. In particular this now kills off winbind_initgroups, as it appears no longer to be required. Andrew Bartlett
* Yes, dev is an 'input/output' paramater...Andrew Bartlett2002-01-271-2/+2
| | | | Andrew Bartlett
* Patch from Kevin Stefanik <kstef@mtppi.org> to do some more error checking forAndrew Bartlett2002-01-271-6/+24
| | | | group mapping init failures.
* merge from 2.2 and regenerateGerald Carter2002-01-279-2791/+1973
|
* Give pdbedit a -D paramater for setting the DEBUGLEVEL (makes debugging passdbAndrew Bartlett2002-01-271-5/+10
| | | | | | | | | much saner :-). Change to pdb_init_sam()/pdb_free_sam() loop rather than reset based due to the talloc basis. Andrew Bartlett
* merge from APPLIANCE_HEADGerald Carter2002-01-262-38/+4
|
* - Provide sid->name lookup support for non-unix accounts.Andrew Bartlett2002-01-262-49/+72
| | | | | | | | | - Rework the name -> sid lookup function to always try local lookup first (for local domain names) before trying winbind. This seems to eliminate my winbind feedback loop problems. (I don't use winbind for nsswitch, where there are almost certainly further issues). Andrew Bartlett
* Back out some of the less well thought out ideas from last weeks work onAndrew Bartlett2002-01-265-33/+24
| | | | | | | | | | winbind default domains, particulary now I understand whats going on a lot better. This ensures that the RPC client code does as little 'magic' as possible - this is up to the application/user. (Where - for to name->sid code - it was all along). This leaves the change that allows the sid->name code to return domains and usernames in seperate paramaters. Andrew Bartlett
* Bring this code into line with new winbind_lookup_name() interface. I thinkAndrew Bartlett2002-01-261-10/+23
| | | | | | | | | this might need a bit more work - or at least documentation. This is certainly a worthwile little hack, as it avoids the need to invert the group database. I don't think we should allow unqualified domains here - as that allows us to distinguish between (at least some) usernames and these 'special' groups.
* Make a talloc'ed copy of this strings so we can pass the right kind of pointerAndrew Bartlett2002-01-261-1/+5
| | | | | | | to the function. This fixes a nice little segfault the brute-force-casting created. :-) Andrew Bartlett
* Rework lookup_name() to take seperate username/domain args, and to removeAndrew Bartlett2002-01-261-31/+24
| | | | | varioius crazy 'if winbind didn't find it' cases. This makes winbind default domain support easier to intergrate with smbd.
* Add the become_root()/unbecome_root() wrapper around the lookup_name() call,Andrew Bartlett2002-01-261-1/+9
| | | | and its new args.
* Move the lsa code across to the changed args for lookup_name, and surround itAndrew Bartlett2002-01-262-6/+13
| | | | | | | | | | | | in become_root()/unbecome_root(). Also only allocate the memory the client reqests - and don't allow the client to trigger an SMB_ASSERT if they ask for 'more'. Up the maximum number of sids allowed, and note that this is an arbiary guess, and can be raised without consequence. Andrew Bartlett
* We may as well not use these temporary variables - they are only used once andAndrew Bartlett2002-01-261-3/+1
| | | | just make it harder to debug (gcc stips optomises them away).
* local_lookup_name() doens't acutally use its 'domain' argument, so drop it andAndrew Bartlett2002-01-261-5/+3
| | | | make its use clearer.
* Change the winbind interface to use seperate 'domain' and 'username' feilds forAndrew Bartlett2002-01-269-149/+56
| | | | | | | | | the sid->uid and uid->sid conversions. Remove some duplicate arguments from these funcitons, and update the request/response structures for this and the 'winbind domain name' feature. As such 'winbindd_lookup_name' now takes both a domain and username.
* Allow a winbind client to obtain the server's domain name.Andrew Bartlett2002-01-261-1/+13
|
* Remove the 'direct to winbind' hacks, as they should (if I understandAndrew Bartlett2002-01-261-12/+0
| | | | | | | | correctly) be no longer needed. This is in aid of the 'winbind default domain' code - which works much better when smbd always goes via the standard unix interfaces. Andrew Bartlett
* This always points at a string literal, so it probably should be 'const'.Andrew Bartlett2002-01-261-1/+1
|
* Fix up a security issue with the way we handle domain groups retuned on theAndrew Bartlett2002-01-263-25/+20
| | | | | | | | | | | info3. These are RIDs, and it only makes sense to combine them with the domain SID returned with them. This is important for trusted domains, where that sid might be other than the one we currently reterive from the secrets.tdb. Also remove the become_root()/unbecome_root() wrapper from around both remaining TDB users: Both are now initialised at smbd startup. Andrew Bartlett
* fix typoAndrew Bartlett2002-01-261-1/+1
|
* The new plugable password backend system needs to be initialised afterAndrew Bartlett2002-01-261-5/+5
| | | | | | lp_load(). Andrew Bartlett
* These changes commited on a 'no less broken' basis.Andrew Bartlett2002-01-261-7/+5
| | | | | | | | | | | | | | | | | The previous code attempted to call winbind to find out the domain sid. This couldn't work for a number of reasons - not the least of which was that both the client and server ends would reject any name (in this case domain name) without a \ in it (or lp_winbind_seperator()). I think this is what was intended to occour. If there is still some need to contact winbind for this information, I suggest a new call be created for this - as it the server-side code doesn't allow for this information to be extracted easily in any case. Finally, it gets in the way of the default domain code a bit - hence why I was actually looking at it... Andrew Bartlett
* Try to get the compiler not to complain about assignments and truth values...Andrew Bartlett2002-01-261-2/+1
| | | | Andrew Bartlett
* Try to move towards slightly sane linking for Samba by removing some pdb_...()Andrew Bartlett2002-01-262-29/+62
| | | | | | | | | | calls from rpc_parse/parse_net.c - instead these values are passed as a paramater. Unfortunetly some there is still some samr work to be done before this is actually useful. Andrew Bartlett
generated by cgit (git 2.34.1) at 2025-09-26 12:40:19 +0000