| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
| |
Jeremy.
|
|
|
|
|
|
|
|
|
|
|
| |
remember under what mail address I have to post.
My last commit to this file made it compile again, my fingers were a bit
too fast to really type this message.
Sorry for this confusion,
Volker
|
| |
|
|
|
|
|
|
| |
it really is a developer hack...
Andrew Bartlett
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
When we look see if a user is in a list, and we try to 'expand' an @group, we
should lookup the user's own list of groups, rather than looking for all the
members of a group.
I'm sure this will fix some nasty performance issues, particularly on large
domains etc. In particular, this avoids contacting winbind at all, if the
group is not a winbind group.
(This caused a deadlock on my winbind-on-PDC setup).
The groups list always includes the user's primary group, as per the
getgrouplist manpage, and my recent changes to our implementation.
Andrew Bartlett
|
| |
|
| |
|
|
|
|
|
|
| |
In particular, make sure we include the primary gid in the list.
Andrew Bartlett
|
| |
|
|
|
|
| |
from an environment variable.)
|
|
|
|
|
|
|
|
|
| |
command lines. This makes the code much simpler and also stops
trivial syntax errors from causing a crash.
Also fix support for semicolon-separated commands in -c, which is
promised by the manual but apparently never working due to an
off-by-one error.
|
| |
|
| |
|
|
|
|
| |
rpc calls.
|
|
|
|
|
|
| |
set the 'guest' bit.
Andrew Bartlett
|
|
|
|
|
|
|
| |
as we don't need it for autoconf 2.53. Remove it from CVS, and assert the
newer autotools in configure.in
Andrew Bartlett
|
|
|
|
|
|
|
|
|
| |
it can be used for 'net rpc join'.
Also fix a bug in our server-side NTLMSSP code - a client without any domain
trust links to us may calculate the NTLMv2 response with "" as the domain.
Andrew Bartlett
|
|
|
|
| |
the regedit file parser etc.
|
|
|
|
|
|
|
| |
* never save a pointer to an automatic variable (they go away)
implement a deep copy for SPOOLSS_NOTIFY_MSG to correct
messages being sent that have junk for strings;
fix in response to changes for CR 1504
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
CFLAGS/CPPFLAGS
and LIBS/LDFALGS. In particular, they often don't check where the appropriate libraries
were installed and pass -I/usr/include and -L/usr/lib as part of CFLAGS/LDFLAGS.
While the latter isn't dangerous, passing system include directory through -I lead
to change of its status in CPP from system to user-defined in many cases.
This patch cleans up CFLAGS/CPPFLAGS from errorenous -I/usr/include and LIBS/LDFLAGS
from -L/usr/lib. This is done as two m4 macros which are called before AC_OUTPUT.
|
|
|
|
|
|
|
| |
We should look into how to deal with NULL v "" strings, and the NTLMSSP code
underneath properly at some stage.
Andrew Bartlett
|
|
|
|
| |
thanks to RedHat developers for the report
|
| |
|
| |
|
|
|
|
| |
traditional guessing only if krb5-config was not found.
|
|
|
|
| |
Samba-LDAP-HOWTO.sgml, pdb_mysql.sgml and pdb_xml.sgml
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
relitivly useful external lib from this code, and to remove the dupicate
NTLMSSP code elsewhere in samba (RPC pipes, LDAP client).
The code I've replaced this with in cliconnect.c is relitivly ugly, and
I hope to replace it with a more general SPENGO layer at some later date.
Andrew Bartlett
|
| |
|
| |
|
|
|
|
|
|
| |
all cm_get_XX calls and their subsequent requests in a retry loop in case
we've temporarily lost connection to the DC. Makes winbindd more reliable.
Jeremy.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
users w/o full administrative access on computer accounts to join a
computer into AD domain.
The patch and detailed changelog is available at:
http://www.itcollege.ee/~aandreim/samba
This is a list of changes in general:
1. When creating machine account do not fail if SD cannot be changed.
setting SD is not mandatory and join will work perfectly without it.
2. Implement KPASSWD CHANGEPW protocol for changing trust password so
machine account does not need to have reset password right for itself.
3. Command line utilities no longer interfere with user's existing
kerberos ticket cache.
4. Command line utilities can do kerberos authentication even if
username is specified (-U). Initial TGT will be requested in this case.
I've modified the patch to share the kinit code, rather than copying it,
and updated it to current CVS. The other change included in the original patch
(local realms) has been left out for now.
Andrew Bartlett
|
|
|
|
|
|
| |
of libsmb.
Andrew Bartlett
|
| |
|
|
|
|
|
|
| |
and make sure we can never get an 'authenticate' packet without a challenge.
Andrew Bartlett
|
|
|
|
|
| |
Needed to move to disk based i/o later.
Jeremy.
|
| |
|
| |
|
|
|
|
|
|
| |
NTLMSSP client code.
Andrew Bartlett
|
| |
|
|
|
|
|
|
|
|
|
|
| |
- return ret == 0 ? True : False;
+ return ret == 0;
and
- return tdb_close(cache) ? False : True;
+ return tdb_close(cache) != -1;
|
|
|
|
| |
(Sorry - I should have checked this in yesterday but forgot)
|
|
|
|
| |
Rafal
|
|
|
|
| |
Jeremy.
|
| |
|
|
|
|
|
|
|
| |
Removed extra copy of server name in the printername field (it was
mangling the the name to be \\server\\\server\printer ... yes, there
were 3 backslashes) reported by get & enum jobs level 2.
Jeremy.
|
|
|
|
| |
Fix typo.
|
|
|
|
| |
signal. Previously this was incorrectly treated as success.
|