summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Give pdbedit a -D paramater for setting the DEBUGLEVEL (makes debugging passdbAndrew Bartlett2002-01-271-5/+10
| | | | | | | | | much saner :-). Change to pdb_init_sam()/pdb_free_sam() loop rather than reset based due to the talloc basis. Andrew Bartlett
* merge from APPLIANCE_HEADGerald Carter2002-01-262-38/+4
|
* - Provide sid->name lookup support for non-unix accounts.Andrew Bartlett2002-01-262-49/+72
| | | | | | | | | - Rework the name -> sid lookup function to always try local lookup first (for local domain names) before trying winbind. This seems to eliminate my winbind feedback loop problems. (I don't use winbind for nsswitch, where there are almost certainly further issues). Andrew Bartlett
* Back out some of the less well thought out ideas from last weeks work onAndrew Bartlett2002-01-265-33/+24
| | | | | | | | | | winbind default domains, particulary now I understand whats going on a lot better. This ensures that the RPC client code does as little 'magic' as possible - this is up to the application/user. (Where - for to name->sid code - it was all along). This leaves the change that allows the sid->name code to return domains and usernames in seperate paramaters. Andrew Bartlett
* Bring this code into line with new winbind_lookup_name() interface. I thinkAndrew Bartlett2002-01-261-10/+23
| | | | | | | | | this might need a bit more work - or at least documentation. This is certainly a worthwile little hack, as it avoids the need to invert the group database. I don't think we should allow unqualified domains here - as that allows us to distinguish between (at least some) usernames and these 'special' groups.
* Make a talloc'ed copy of this strings so we can pass the right kind of pointerAndrew Bartlett2002-01-261-1/+5
| | | | | | | to the function. This fixes a nice little segfault the brute-force-casting created. :-) Andrew Bartlett
* Rework lookup_name() to take seperate username/domain args, and to removeAndrew Bartlett2002-01-261-31/+24
| | | | | varioius crazy 'if winbind didn't find it' cases. This makes winbind default domain support easier to intergrate with smbd.
* Add the become_root()/unbecome_root() wrapper around the lookup_name() call,Andrew Bartlett2002-01-261-1/+9
| | | | and its new args.
* Move the lsa code across to the changed args for lookup_name, and surround itAndrew Bartlett2002-01-262-6/+13
| | | | | | | | | | | | in become_root()/unbecome_root(). Also only allocate the memory the client reqests - and don't allow the client to trigger an SMB_ASSERT if they ask for 'more'. Up the maximum number of sids allowed, and note that this is an arbiary guess, and can be raised without consequence. Andrew Bartlett
* We may as well not use these temporary variables - they are only used once andAndrew Bartlett2002-01-261-3/+1
| | | | just make it harder to debug (gcc stips optomises them away).
* local_lookup_name() doens't acutally use its 'domain' argument, so drop it andAndrew Bartlett2002-01-261-5/+3
| | | | make its use clearer.
* Change the winbind interface to use seperate 'domain' and 'username' feilds forAndrew Bartlett2002-01-269-149/+56
| | | | | | | | | the sid->uid and uid->sid conversions. Remove some duplicate arguments from these funcitons, and update the request/response structures for this and the 'winbind domain name' feature. As such 'winbindd_lookup_name' now takes both a domain and username.
* Allow a winbind client to obtain the server's domain name.Andrew Bartlett2002-01-261-1/+13
|
* Remove the 'direct to winbind' hacks, as they should (if I understandAndrew Bartlett2002-01-261-12/+0
| | | | | | | | correctly) be no longer needed. This is in aid of the 'winbind default domain' code - which works much better when smbd always goes via the standard unix interfaces. Andrew Bartlett
* This always points at a string literal, so it probably should be 'const'.Andrew Bartlett2002-01-261-1/+1
|
* Fix up a security issue with the way we handle domain groups retuned on theAndrew Bartlett2002-01-263-25/+20
| | | | | | | | | | | info3. These are RIDs, and it only makes sense to combine them with the domain SID returned with them. This is important for trusted domains, where that sid might be other than the one we currently reterive from the secrets.tdb. Also remove the become_root()/unbecome_root() wrapper from around both remaining TDB users: Both are now initialised at smbd startup. Andrew Bartlett
* fix typoAndrew Bartlett2002-01-261-1/+1
|
* The new plugable password backend system needs to be initialised afterAndrew Bartlett2002-01-261-5/+5
| | | | | | lp_load(). Andrew Bartlett
* These changes commited on a 'no less broken' basis.Andrew Bartlett2002-01-261-7/+5
| | | | | | | | | | | | | | | | | The previous code attempted to call winbind to find out the domain sid. This couldn't work for a number of reasons - not the least of which was that both the client and server ends would reject any name (in this case domain name) without a \ in it (or lp_winbind_seperator()). I think this is what was intended to occour. If there is still some need to contact winbind for this information, I suggest a new call be created for this - as it the server-side code doesn't allow for this information to be extracted easily in any case. Finally, it gets in the way of the default domain code a bit - hence why I was actually looking at it... Andrew Bartlett
* Try to get the compiler not to complain about assignments and truth values...Andrew Bartlett2002-01-261-2/+1
| | | | Andrew Bartlett
* Try to move towards slightly sane linking for Samba by removing some pdb_...()Andrew Bartlett2002-01-262-29/+62
| | | | | | | | | | calls from rpc_parse/parse_net.c - instead these values are passed as a paramater. Unfortunetly some there is still some samr work to be done before this is actually useful. Andrew Bartlett
* Add some information tidbits to an error DEBUG().Andrew Bartlett2002-01-261-1/+1
|
* Fixed ADDPRINTEREX to take a devmode and a security descriptor...Jeremy Allison2002-01-263-36/+37
| | | | Jeremy.
* that's the wins replication daemon !Jean-François Micouleau2002-01-258-2/+2789
| | | | | | there are still some work to do on it but it's already functionnal. J.F.
* rewrote nmbd's wins backend to use a tdb instead of a flat text file.Jean-François Micouleau2002-01-254-267/+683
| | | | | | | | | | | | Changed the way the wins record are handled in memory. Now they are living much longer with the different states: active, released and tombstone. Also added a version ID, some wins flags and the wins owner ip address to the namrec->data struct, and a function to process messages sent by the wins replication daemon. the initiate_wins_processing() function is not correct, I'll fix it later. J.F.
* Change this code so that we don't do a lookup_name() on root.Andrew Bartlett2002-01-251-11/+3
| | | | | | | | | | | This matches the lookup failure case in 2.2, and seems to make more sense than giving the printer to 'world'. (Avoiding this lookup makes some of my other changes - including winbind default domains - a little easier). In any case, tpot has promised to look at this and test it when he gets back to work. :-) Andrew Bartlett
* Enable net ads commands to use existing tickets if the user doesn't specify ↵Jim McDonough2002-01-253-5/+24
| | | | a username on the commandline. Also don't continue past the kinit if a password is entered and fails because existing tickets would be used, which may not be desired if the username was specified.
* Fixed display of "remote downlevel document" in old print job submissionJeremy Allison2002-01-253-4/+14
| | | | | case. Jeremy.
* Make systemtime work for spooling on bigendian systems. Fix fromJeremy Allison2002-01-251-3/+20
| | | | | Benjamin (Bj) Kuit bj@it.uts.edu.au. Jeremy.
* new message type for nmbdJean-François Micouleau2002-01-251-0/+1
| | | | J.F.
* remove unused variableJean-François Micouleau2002-01-251-1/+0
| | | | J.F.
* picky about reallocJean-François Micouleau2002-01-251-5/+6
| | | | J.F.
* merge from 2.2Gerald Carter2002-01-251-1/+1
|
* Passdb changes:Andrew Bartlett2002-01-253-11/+30
| | | | | | | | | | Modules now name themselves, which should allow for sane behaviour when we get an 'extern' passdb module (which in turn loads a .so). Fix up tdbsam for non-unix-accounts. Not sure if this fixes idra's bug, but its a start... Andrew Bartlett
* Fix a 'const' warning.Andrew Bartlett2002-01-251-1/+1
|
* Bring auth_winbind into line with the protocol changesAndrew Bartlett2002-01-251-0/+3
| | | | Andrew Bartlett
* micro fix :-)Simo Sorce2002-01-251-0/+1
|
* Removed dodgy init of local variable.Tim Potter2002-01-251-1/+1
|
* Return correct RPC fault PDU on bad handle incoming.Jeremy Allison2002-01-253-0/+15
| | | | Jeremy.
* Much more useful handling of backup domain controllers in winbindd. HonourTim Potter2002-01-251-25/+51
| | | | | | | | the "password server" smb.conf parameter when choosing a DC to connect to. Due to the origin of the code in cm_get_dc_name() it wouldn't try additional DCs if the first DC didn't work. This would wedge winbindd if you had "password server = foo1, foo2" and foo1 was down.
* Remove check for passwordserver = "*" as we now initialise it.Tim Potter2002-01-251-1/+6
| | | | | Added TODO about perhaps doing a SAMLOGON udp/138 request before a cli_full_connection in connect_to_domain_password_server()
* Initialise password server to "*" in init_globals()Tim Potter2002-01-251-0/+1
|
* Removed unused static variable.Tim Potter2002-01-251-1/+0
|
* minor fixesSimo Sorce2002-01-254-12/+15
|
* merge from 2.2Gerald Carter2002-01-2413-1018/+397
|
* handle filenames like .bashrc better in the new mangling codeAndrew Tridgell2002-01-241-8/+12
|
* Check request flag for unicode capability and respond accordingly, rather ↵Jim McDonough2002-01-231-1/+2
| | | | than only doing unicode. smbfs didn't work.
* Oops...Andrew Bartlett2002-01-231-1/+1
|
* getpwnam -> getpwnam_alloc.Andrew Bartlett2002-01-236-13/+27
| | | | idra has promised not to revert these this time :-)
* Change the order of this a bit - as unix password change can fail.Andrew Bartlett2002-01-231-11/+12
| | | | | | This due for abstraction into chgpasswd.c shortly. Andrew Bartlett