| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
|
| |
nmbd and smbd. nmbd is now client: smbd is solely responsible for
creating sam_name.SID
|
| |
|
| |
|
|
|
|
|
|
|
| |
jean-francois' going to get annoyed, again.
andrew's going to threaten to take cvs access away, again.
missed compilation of this file when updating sam_unknown_12 call.
|
| |
|
| |
|
|
|
|
|
|
|
| |
query.
domain groups now work, hurrah! only thing is that the description is
one character long, don't know why (which is wierd in itself).
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
| |
being able to use next_token() outside of string_to_sid calls.
use strchr instead
|
|
|
|
|
| |
complaint about confusion because both the HEAD and SAMBA_2_0 reported
the same version info.
|
|
|
|
| |
rid is needed not the name (see DOMAIN_GRP_MEMBER) decided to go home.
|
|
|
|
|
|
|
|
|
|
|
| |
need to check, when looking up group members, that a group member is
a unix user [being mapped to an nt user] FIRST then if that fails
check that a group member is a unix group [being mapped to an nt group].
why? because you can have group names in a unix /etc/group file with
the same name as users.
this _might_ be a problem...
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
samr_query_aliasmembers (cool!)
util_pwdb.c sids.c nmbd.c server.c smbpasswd.c swat.c :
pwdb_initialise(BOOL is_server) now creates / reads DOMAIN_NAME.SID
if is_server is True, and does LsaQueryInfoPolicy(levels 3 and 5)
to obtain member and pdc sids.
|
|
|
|
|
| |
modified map_nt_and_unix_names() to never refuse a mapping (returns void
now not BOOL).
|
|
|
|
|
|
| |
restriction and "domain user map" seems to work.
amazing.
|
|
|
|
| |
stupid compile errors with file_rename() call just created.
|
|
|
|
| |
added code that moves MACHINE.SID to DOMAIN_NAME.SID if it exists.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
i may simply go for a response in the NetSamLogon returning the
unix username, forcing the NT user to appear to be a unix user,
however even that is fraught with implications.
might just have to go the whole hog and do this tuple thing,
"unix_name + nt_name" always associated together...
issue with api_net_sam_logon, getsam21pwent() being called twice,
the second time overwriting static buffer data (argh) so had to
make a copy.
noticed a nested "become_root()"/"unbecome_root()" which will have
to be tracked down...
|
|
|
|
|
| |
a call _outside_ of this was _also_ calling getpwnam. the calls to
getsmbpwnam() were therefore overwriting the static buffer.
|
| |
|
| |
|
|
|
|
|
| |
My bad... Earlier one was the patch from the CIFS conference that
didn't work, this fixes...
|
| |
|
| |
|
| |
|
|
|
|
| |
a connection succeeds...).
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- lib/sids.c:
generate_sam_sid() modified to take a domain name: it now
generates "DOMAIN_NAME.SID". reasons:
1) if you run multiple samba servers on the same machine
under different netbios names as members of a domain,
they won't all use the same SID, which is a _big_ mistake
but it would happen _by default_.
2) we have (had) a problem with sid_to_string() and string_to_sid()
which cause SIDs to be incorrectly read. one of the major
reasons for *NOT* making this change was so as not to disrupt
existing users. but as they will be anyway by this bug,
we might as well go ahead.
- passdb/smbpass.c:
wanted to change the meaning of the name in the smbpasswd
file to an "nt" name not a "unix" name. this is probably
not a good idea: reverted this.
- output formatting / bug-fixing in rpcclient query_useraliases code.
|
| |
|
| |
|
| |
|
|
|
|
| |
added their replacements, added sam password database API modules
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- split sam_passwd and smb_passwd into separate higher-order function tables
- renamed struct smb_passwd's "smb_user" to "unix_user". added "nt_user"
plus user_rid, and added a "wrap" function in both sam_passwd and smb_passwd
password databases to fill in the blank entries that are not obtained
from whatever password database API instance is being used.
NOTE: whenever a struct smb_passwd or struct sam_passwd is used, it MUST
be initialised with pwdb_sam_init() or pwd_smb_init(), see chgpasswd.c
for the only example outside of the password database APIs i could find.
- added query_useraliases code to rpcclient.
- dealt with some nasty interdependencies involving non-smbd programs
and the password database API. this is still not satisfactorily
resolved completelely, but it's the best i can do for now.
- #ifdef'd out some password database options so that people don't
mistakenly set them unless they recompile to _use_ those options.
lots of debugging done, it's still not finished. the unix/NT uid/gid
and user-rid/group-rid issues are better, but not perfect. the "BUILTIN"
domain is still missing: users cannot be added to "BUILTIN" groups yet,
as we only have an "alias" db API and a "group" db API but not "builtin-alias"
db API...
|
|
|
|
|
|
|
|
|
| |
SCO 3.2 (including it also requires lots of streams stuff, making it a
total mess).
If this causes problems on some other platform then please add a
comment stating what platform and why the include is needed so we can
work out how to test for it properly.
|
|
|
|
| |
processing.
|
| |
|
|
|
|
| |
Fix by Andrej Borsenkow <borsenkow.msk@sni.de>
|
|
|
|
| |
docs and do configuration at the same time.
|
|
|
|
|
| |
- changed swat welcome screen to have links to all Samba html docs instead
of just singing the praises of swat :)
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
Fix by Matt Chapman <m.chapman@student.unsw.edu.au>
|
| |
|