summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Move a number of ADS related functions out into utility libs, so that thingsAndrew Bartlett2002-09-277-218/+345
| | | | | | | | like metze's sam_ads can also use them. Also add error checking etc to a few more functions. Andrew Bartlett
* An example of a group creation command that can handle failuresVolker Lendecke2002-09-271-0/+27
| | | | | | of groupadd. Volker
* Do not update manpages directly...Volker Lendecke2002-09-271-1/+10
|
* Doco patch from metze. This reformats the 'ldap ssl' docs, and add doco forAndrew Bartlett2002-09-271-9/+35
| | | | | | the new 'ldap passwd sync' option. Andrew Bartlett
* Vance picked up a pile of typos etc at the CIFS confernce, and finally got themAndrew Bartlett2002-09-274-15/+15
| | | | | | off his laptop :-) Andrew Bartlett
* Minor updates:Andrew Bartlett2002-09-273-10/+24
| | | | | | | | | | Add const to some more functions, and reintroduce 'net rpc join oldstyle' as *only* trying an old-style join. This means that we can rely on it not prompting for a password on the build farm. Andrew Bartlett
* Some small cleanups to the libads code (mainly error checking), and give aAndrew Bartlett2002-09-273-7/+30
| | | | | | sane prototype for the push_utf8_allocate code. Andrew Bartlett
* I missed committing this - all updates to configure.in adding --with-fooAndrew Bartlett2002-09-271-1/+1
| | | | | | options need a matching entry in acconfig.h to actually do anything... Andrew Bartlett
* Fix typoAndrew Bartlett2002-09-271-1/+1
|
* When compiled --with-ldapsam, make ldapsam the default passdb backend.Andrew Bartlett2002-09-271-1/+3
| | | | | | | | | | This is to allow painless upgrades from 2.2, and so people don't get a shock when they follow old docs. If ldap has been detected on the system, ldapsam is always available, just not the default. Andrew Bartlett
* Readd the 2.2 --with-ldapsam paramaters so as to allow a smooth upgrade path toAndrew Bartlett2002-09-275-835/+912
| | | | | | | | a 3.0 based PDC. Change defaults to use SSL, so that this also matches. Andrew Bartlett
* Make explicit the difference between a tdb key with no data attached, andJeremy Allison2002-09-261-2/+11
| | | | | a non existent entry. Stop a malloc(0) being called in the first case. Jeremy.
* tagging version as post3.0-HEAD to differentiate from the SAMBA_3_0Gerald Carter2002-09-261-1/+1
| | | | branch.
* add -r to usage outputGerald Carter2002-09-261-0/+1
|
* preparing for release of 3.0alpha20Samba Release Account2002-09-262-10/+10
|
* sync with SAMBA_3_0Gerald Carter2002-09-261-0/+162
|
* Fix segfault in sam_context_enum_domains - reported by KaiJelmer Vernooij2002-09-261-0/+1
|
* Don't define PASS_MUST_CHANGE_AT_NEXT_LOGON twice..Jelmer Vernooij2002-09-261-3/+0
|
* Change pdb_xml functions to return NTSTATUSJelmer Vernooij2002-09-261-14/+15
|
* Change pdb_mysql function to return NTSTATUSJelmer Vernooij2002-09-261-65/+76
|
* Make functions return NTSTATUS instead of BOOLJelmer Vernooij2002-09-261-14/+14
|
* Add -r parameter to smbgroupedit. With -r you can manually chooseVolker Lendecke2002-09-261-21/+26
| | | | | | a rid. Volker
* Patch from "Kai Krueger" <kai@kruegernetz.de> to get some more of our accessAndrew Bartlett2002-09-262-47/+58
| | | | | | control bits right on the SAMR pipe. Andrew Bartlett
* forgot include file, sorrySimo Sorce2002-09-261-14/+14
|
* Patch from "Stefan (metze) Metzmacher" <metze@metzemix.de> to do a *much*Andrew Bartlett2002-09-266-85/+419
| | | | | | | | | | | | better job of working with usrmgr. Previously we were blanking out entires, and all sort of mischif. The new patch (which I've now had a chance to test/modify) also takes care not to expand % values (ie we go \\%L\%U -> \\server\user, we don't want to store \\server\user back) and to correctly notice 'not set' compared to 'null string' etc. Andrew Bartlett
* move all the passdb internal interface to NTSTATUSSimo Sorce2002-09-267-269/+320
| | | | | | | | | only the interface has been fully moved to NTSTATUS not all the plugins make full use of it, but have been all converted. My testings passed completely, however a bit of more testing is welcome Simo.
* notify user when no {domains,accounts} were foundJelmer Vernooij2002-09-251-0/+10
|
* Add samtest command 'enum_accounts' + few typo fixes in sam/interface.cJelmer Vernooij2002-09-252-4/+30
|
* add samtest commands:Jelmer Vernooij2002-09-251-1/+134
| | | | | - show_domain - context
* fix getpass replacement check (i thought I fixed this a few daysGerald Carter2002-09-251-0/+2
| | | | ago....)
* Make it clear what this if statement applies to, and what it doesn'tAndrew Bartlett2002-09-251-0/+1
|
* remove extern for AllowDebugChange since we don't use itJelmer Vernooij2002-09-251-1/+0
|
* Fix the circular dependency that was preventing 'domain master = auto' (theAndrew Bartlett2002-09-251-1/+1
| | | | | | default) from working. Andrew Bartlett
* Metze claims that without this his win2k server gets horribly confused lookingAndrew Bartlett2002-09-251-2/+2
| | | | | | | | | for all sorts of AD things in lp_realm(). We need to get some non-Win2k NTLMSSP and chase this up a bit, but this will do for now. (Hmm, this might affect NTLMv2 as well) Andrew Bartlett
* Whenever we deal with adding machine/trusted domain accounts, always reset theAndrew Bartlett2002-09-251-20/+23
| | | | | | | flag to what we expect. This handles the 'upgrade' from unixsam beter (where all $ terminated accounts are machines). Andrew Bartlett
* Don't crash when a backend doesn't have a setsampwent function available - ↵Jelmer Vernooij2002-09-251-2/+2
| | | | bug reported by metze
* This patch from "Stefan (metze) Metzmacher" <metze@metzemix.de> cleans upAndrew Bartlett2002-09-255-128/+231
| | | | | | | | | | | | | | | | | | pdb_ldap and adds a 'ldap passwd sync' option. The idea with this option is to do allow an ldap backend to do all the fancy password hashing etc - and to tell smbd no to try and double-up. Using 'ldap passwd sync = only' will do this, but is not recommended unless such a backend is in place... Running 'ldap passwd sync = yes' just gets you the same as doing 'pam passwd sync = yes' and having both PAM and pam_ldap correctly configured for 'magic root' behaviour, but only using ldap connection, and one set of credentials. This also gets us closer to allowing ldap to say 'password too short' etc, which might assist in maintaining a consistant password policy. Andrew Bartlett
* Fix debuglevel command-line argumentJelmer Vernooij2002-09-251-1/+0
|
* Compile samtest with LIBADS_OBJ and PASSDB_OBJ...Jelmer Vernooij2002-09-251-1/+1
|
* samtest should load smb.conf by defaultJelmer Vernooij2002-09-251-1/+26
| | | | | | add command-line option to samtest to specify alternate config file - use /dev/null to don't load any config file.. add 'conf' command to load specified config file
* At least try to get this function picked up by the autoprototyperAndrew Bartlett2002-09-251-2/+2
|
* Kill of Get_Pwnam_Modify and smb_getpwnam(). The latter assumes some thingsAndrew Bartlett2002-09-252-59/+2
| | | | | | | | that just don't apply any more - now that we always keep username and domain seperate. Also, the policy it was trying to permit is now implemented by the auth code. Andrew Bartlett
* Another patch from metze, towards his work on sam_ads.Andrew Bartlett2002-09-254-11/+108
| | | | See mx-ldap.sf.net for his current progress.
* Header files should not include includes.h - therein lies maddness, particuarlyAndrew Bartlett2002-09-251-3/+0
| | | | if we ever want to get rid of the magic macros.
* Actually pick up the kerberos libs in RedHat - the previous shell constructAndrew Bartlett2002-09-252-8/+8
| | | | | | didn't seem to work properly. Andrew Bartlett
* If adding a user to ldap, make sure we have the 'account' structural class, orAndrew Bartlett2002-09-251-0/+1
| | | | else we can't add to OpenLDAP 2.1
* Move to common user token debugging, and ensure we always print both theAndrew Bartlett2002-09-252-17/+26
| | | | | | | NT_TOKEN and the unix credentials - as we incresingly use the NT stuff we want to make it easy to check they don't get out of wack. Andrew Bartlett
* Avoid a segfault in net join when you have not done an kinit, and it's fallingAndrew Bartlett2002-09-251-0/+5
| | | | | | | back to NTLMSSP. We need to get the password out of the user, and this eventually does. Andrew Bartlett
* The security descriptor in a PRINTER_INFO_2 could be NULL. (Bong?)Tim Potter2002-09-251-2/+6
|
* Merge of "profile acls" code.Jeremy Allison2002-09-253-4/+41
| | | | Jeremy.