summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Ditto on the const religion.Andrew Bartlett2001-12-051-2/+2
|
* Const religion for some of the RPC code.Andrew Bartlett2001-12-052-3/+3
|
* Merge from 2.2Herb Lewis2001-12-041-0/+6
| | | | | If you do not have one more expect than issue when talking to the passwd program you will not send the last issue.
* move proto.h and build_env.h from $(srcdir)/include to $(builddir)/includeJean-François Micouleau2001-12-041-2/+3
| | | | | | tridge, martin, if you think it's wrong , you can revert it. J.F.
* added a boolean to the group mapping functions to specify if we need orJean-François Micouleau2001-12-0413-159/+278
| | | | | | | | | | | | | | | | | | | | | not the privileges. Usually we don't need them, so the memory is free early. lib/util_sid.c: added some helper functions to check an SID. passdb/passdb.c: renamed local_lookup_rid() to local_lookup_sid() and pass an RID all the way. If the group doesn't exist on the domain SID, don't return a faked one as it can collide with a builtin one. Some rpc structures have been badly designed, they return only rids and force the client to do subsequent lsa_lookup_sid() on the domain sid and the builtin sid ! rpc_server/srv_util.c: wrote a new version of get_domain_user_groups(). Only the samr code uses it atm. It uses the group mapping code instead of a bloody hard coded crap. The netlogon code will use it too, but I have to do some test first. J.F.
* Correct message on wbinfo fail to open config file.Jeremy Allison2001-12-041-1/+2
| | | | Jeremy.
* Tidup.Jeremy Allison2001-12-041-43/+80
| | | | Jeremy.
* Put back changes to set errno, which seem to do no harm.Martin Pool2001-12-042-13/+55
|
* Fix headers. This I know is correct.Martin Pool2001-12-041-0/+1
|
* Fix headers. This I know is correct.Martin Pool2001-12-041-0/+1
|
* added lookup_groups() to the ads backendAndrew Tridgell2001-12-044-8/+69
| | | | winbindd/ADS can now do initgroups()
* added ads_search_dn() and ads_pull_sids()Andrew Tridgell2001-12-041-1/+42
|
* undoMartin Pool2001-12-047-184/+83
|
* Implement suggestion from tridge to leave the old tdb_open interfaceMartin Pool2001-12-045-13/+22
| | | | | as it was, and add tdb_open_ex() which takes a log callback. I guess this makes more sense since it's a public interface.
* Better error handling:Martin Pool2001-12-046-77/+139
| | | | | | | | | | | | | - tdb_open api changed so that you now pass an error handling callback when opening the file, so that errors detected during opening have somewhere to go. (All calls from the body of Samba to this function go through a wrapper in tdbutil, which has been updated.) - Clean up logic for deciding how to open tdb. Emit log messages if something goes wrong (e.g. bad magic.) - tdbtool now logs errors to stderr.
* allow for passwords other than "samba2"Andrew Tridgell2001-12-041-1/+1
| | | | :)
* moved lookup_usergroups() into the backend structureAndrew Tridgell2001-12-046-72/+83
|
* moved init_account_policy() to the right placeAndrew Tridgell2001-12-042-3/+5
|
* added a query_user backendAndrew Tridgell2001-12-047-97/+169
| | | | fixed a winbindd crash when the group membership can't be looked up
* typo fixAndrew Tridgell2001-12-041-1/+1
|
* const religion in talloc callsAndrew Tridgell2001-12-041-2/+2
|
* smbpasswd is *ugly*!Andrew Bartlett2001-12-041-0/+2
| | | | | | | | However this looks like the best spot to init the account policy db... (fix segfaults on all local smbpasswd ops) Andrew Bartlett
* winbindd friendly user_in_list code. Tested on a 65k user domain.Jeremy Allison2001-12-041-7/+15
| | | | Jeremy.
* Add 'net rpc join' to match the ADS equiv.Andrew Bartlett2001-12-046-308/+327
| | | | | | | | | | | | | | | | This kills off the offending code in smbpasswd -j -Uab%c In the process we have changed from unsing compelatly random passwords to random, 15 char ascii strings. While this does produce a decrese in entropy, it is still vastly greater than we need, considering the application. In the meantime this allows us to actually *type* the machine account password duruign debugging. This code also adds a 'check' step to the join, confirming that the stored password does indeed do somthing of value :-) Andrew Bartlett
* Some changes to the name resolution code in 'net' to allow us to find aAndrew Bartlett2001-12-042-25/+47
| | | | | | PDC, as well as changes for correctness as per tridge. Andrew Bartlett
* Fix up funtion name, as this finds local, not domain master browsers.Andrew Bartlett2001-12-041-2/+2
| | | | (as per tridge's instructions)
* This comment no longer applies.Andrew Bartlett2001-12-041-1/+0
|
* Magic file for TDB databases.Martin Pool2001-12-041-0/+10
|
* Stop using getgrgid() - a very expensive call with winbindd, to look upJeremy Allison2001-12-041-13/+10
| | | | | a group name. Jeremy.
* Moved name_is_local to the correct place. Ooops.Jeremy Allison2001-12-042-10/+10
| | | | Jeremy.
* Set errno in tdb_open in cases where we detect an error in opening theMartin Pool2001-12-042-12/+35
| | | | | | | | database, but no underlying system call sets errno. The particular case I had was a mangled .tdb, but there are others. For this one, set EIO. It's a shame Unix messages aren't more detailed -- "bad data format" would be better.
* Tidyup of lib/username. Add name_is_local fn to determine if name isJeremy Allison2001-12-042-171/+183
| | | | | winbindd. Getting ready for efficiency fix in group lookups. Jeremy.
* Added error message for ERRdiskfull.Tim Potter2001-12-041-0/+1
|
* when using non-encrypted password ignore the ntpass variable toAndrew Tridgell2001-12-041-2/+2
| | | | session setup
* Added prototypes for new fns. Thanks Elrond.Jeremy Allison2001-12-031-0/+7
| | | | Jeremy.
* added a tdb to store the account policy informations.Jean-François Micouleau2001-12-0311-133/+465
| | | | | | | | | | | | | | You can change them with either usermanager->policies->account or from a command prompt on NT/W2K: net accounts /domain we can add a rpc accounts to the net command. As the net_rpc.c is still empty, I did not start. How should I add command to it ? Should I take the rpcclient/cmd_xxx functions and call them from there ? alse changed the SAM_UNK_INFO_3 parser, it's an NTTIME. This one is more for jeremy ;-) J.F.
* changed query_dispinfo to query_user_listAndrew Tridgell2001-12-034-23/+23
|
* put sid_to_name behind the winbindd backend interfaceAndrew Tridgell2001-12-037-44/+85
| | | | | | | I spent quite a while trying to work out how to make this call via ldap and failed. I then found that MS servers seem use rpc for sid_to_name, and it works even when in native mode, I ended up just implementing it via rpc
* added name_to_sid to the backendAndrew Tridgell2001-12-0310-111/+186
|
* const religionAndrew Tridgell2001-12-032-3/+3
|
* added another ATYPE_Andrew Tridgell2001-12-031-1/+2
|
* make proto should build winbindd_proto.h as wellAndrew Tridgell2001-12-031-1/+1
|
* This change reworkes the connection code for both rpcclient and net newAndrew Bartlett2001-12-034-160/+164
| | | | | | | | | | | 'net' untility. This should make it easier to port rpcclient code across to net. It also allows SPNEGO (the NTLMSSP subsystem in particular) to work, becouse it kills off the early destruction of the clear-text password. Andrew Bartlett
* Forgot this one with the last commit...Andrew Bartlett2001-12-031-0/+36
| | | | Andrew Bartlett
* added a basic ADS backend to winbind. More work needed, but atAndrew Tridgell2001-12-037-22/+335
| | | | least basic operations work
* This is another major rework of the 'net' command.Andrew Bartlett2001-12-034-1058/+1274
| | | | | | | | | | | | | | | | | | | | | | | | | | This time, all the existing functionality has been moved into 'net rap', ready for new commands in the 'net ads' and 'net rpc' categories. In particular, we hope to have the abilty to autoselect the appropriate backend to use based on smb.conf or other paramaters. This will allow 'net user' to work no matter what the remote server. The new 'net rpc' command will soon gain a 'net rpc join' and a 'net rpc user' based on the existing samba code. Also in this commit, the connection establishment code has been almost entirly reworked, and now has some minor sense of sainity to it. In particular, we can now connect to hosts *other* than localhost! We also have the ability to state on a per-command basis whether the 'localhost' is a sane default value. (A net join, for example, would not be sane against localhost). Unfortunetly we have had to make the basic paramaters global variables, but the 'cli' is not opened and closed on a per-command basis. Andrew Bartlett
* Don't display any data if tdb_fetch() failed in the tdbtool "fetch"Tim Potter2001-12-031-1/+4
| | | | command.
* added nsstest targetAndrew Tridgell2001-12-031-1/+7
| | | | fixed winbindd_rpc.o typo
* fixed default location of libnss_winbind.soAndrew Tridgell2001-12-031-1/+1
|
* fixed the nsswitch initgroups codeAndrew Tridgell2001-12-032-8/+312
| | | | | added a nsstest test program that directly tests all the nss interfaces using dlopen()