Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | basic ADS HOWTO | Andrew Tridgell | 2001-11-26 | 1 | -0/+115 | |
| | ||||||
* | A number of things to clean up the auth subsytem a bit... | Andrew Bartlett | 2001-11-26 | 7 | -53/+110 | |
| | | | | | | | | | | | | | | | | | | | | | | | We now default encrypt passwords = yes We now check plaintext passwords (however aquired) with the 'sam' backend rather than unix, if encrypt passwords = yes. (this kills off the 'local' backed. The sam backend may be renamed in its place) The new 'samstrict' wrapper backend checks that the user's domain is one of our netbios aliases - this ensures that we don't get fallback crazies with security = domain. Similarly, the code in the 'ntdomain' and 'smbserver' backends now checks that the user was not local before contacting the DC. The default ordering has changed, we now check the local stuff first - but becouse of the changes above, we will really only ever contact one auth source. Andrew Bartlett | |||||
* | add SEC_ADS auth method | Andrew Tridgell | 2001-11-26 | 1 | -0/+12 | |
| | ||||||
* | updated server_role for ADS | Andrew Tridgell | 2001-11-26 | 1 | -0/+1 | |
| | ||||||
* | prevent proto from picking up this as a defintion for 'main()' becoue it ↵ | Andrew Bartlett | 2001-11-26 | 1 | -1/+1 | |
| | | | | conflicts with nmbd's definition. | |||||
* | More compiler warnings fixed. Some minor reformatting. | Tim Potter | 2001-11-26 | 2 | -94/+143 | |
| | ||||||
* | we can safely give NO_SUCH_USER if the ticket decodes but the local | Andrew Tridgell | 2001-11-26 | 1 | -1/+1 | |
| | | | | account doesn't exist | |||||
* | Another merge from appliance-head: in [ug]id_to_sid don't call the | Tim Potter | 2001-11-26 | 3 | -71/+97 | |
| | | | | | winbind function if the id is obviously going to be local. Cleanup of winbind [ug]id parameter handling. | |||||
* | challange -> challenge | Tim Potter | 2001-11-26 | 12 | -71/+72 | |
| | ||||||
* | Merge from appliance-head: when creating a default security descriptor | Tim Potter | 2001-11-26 | 1 | -1/+11 | |
| | | | | | | | | for a printer, save it in ntprinters.tdb instead of recreating it every time it is required. This can save at least one winbind lookup per secdesc creation. Opening a port monitor and viewing the security tab in the properties dialog required the security descriptor to be returned 25 times! | |||||
* | Got medieval on another pointless extern. Removed extern struct ipzero | Tim Potter | 2001-11-26 | 30 | -86/+70 | |
| | | | | | | | and replaced with two functions: void zero_ip(struct in_adder *ip); BOOL is_zero_ip(struct in_addr ip); | |||||
* | Fix up the build farm again. | Andrew Bartlett | 2001-11-26 | 5 | -3/+54 | |
| | | | | | | This should get us 'green' for once... Andrew Bartlett | |||||
* | dyn_CONFIGFILE fixups. | Tim Potter | 2001-11-26 | 1 | -4/+3 | |
| | ||||||
* | Fixed compiler warnings and dyn_CONFIGFILE related breakage. | Tim Potter | 2001-11-26 | 1 | -10/+9 | |
| | ||||||
* | And delete domain_client_validate.c... | Andrew Bartlett | 2001-11-26 | 1 | -432/+0 | |
| | | | | Andrew Bartlett | |||||
* | This compleats the of the authenticaion subystem into the new 'auth' | Andrew Bartlett | 2001-11-26 | 12 | -2722/+415 | |
| | | | | | | | | | | | | subdirectory. (The insertion of these files was done with some CVS backend magic, hence the lack of a commit message). This also moves libsmb/domain_client_validate.c back into auth_domain.c, becouse we no longer share it with winbind. Andrew Bartlett | |||||
* | Removed bogus SAFE_FREE() call of talloced return data from | Tim Potter | 2001-11-26 | 3 | -19/+19 | |
| | | | | winbindd_lookup_usergroups() | |||||
* | Ignore *.po files. | Tim Potter | 2001-11-26 | 1 | -0/+1 | |
| | ||||||
* | Fixed some indentation. | Tim Potter | 2001-11-26 | 1 | -2/+2 | |
| | ||||||
* | use DEBUG() not d_printf() in libraries | Andrew Tridgell | 2001-11-26 | 1 | -2/+2 | |
| | ||||||
* | fixed spnego, non-kerberos negprot | Andrew Tridgell | 2001-11-26 | 1 | -2/+2 | |
| | ||||||
* | Allow lookup of users with spaces in their name. | Tim Potter | 2001-11-26 | 1 | -5/+3 | |
| | ||||||
* | Fixed compiler warning. | Tim Potter | 2001-11-25 | 1 | -1/+1 | |
| | | | | | | | | Why do people keep adding stuff to includes.h (OK I am guilty of this too)? It's getting really huge and full of random junk. )-: I've noticed TNG have started to split stuff up in to individual header files included as needed. | |||||
* | added 'security=ADS' | Andrew Tridgell | 2001-11-25 | 3 | -1/+9 | |
| | ||||||
* | Minor typos | Volker Lendecke | 2001-11-25 | 1 | -2/+2 | |
| | ||||||
* | Don't close tdb twice. | Volker Lendecke | 2001-11-25 | 1 | -1/+0 | |
| | ||||||
* | portability fixes | Andrew Tridgell | 2001-11-25 | 1 | -3/+6 | |
| | ||||||
* | fixed typo | Andrew Tridgell | 2001-11-25 | 1 | -1/+1 | |
| | ||||||
* | add popt build dependency | Andrew Tridgell | 2001-11-25 | 1 | -1/+1 | |
| | ||||||
* | move popt out of proto objs | Andrew Tridgell | 2001-11-25 | 1 | -2/+2 | |
| | ||||||
* | added HAVE_LDAP_H check | Andrew Tridgell | 2001-11-25 | 1 | -2/+2 | |
| | ||||||
* | check for liblber separately | Andrew Tridgell | 2001-11-25 | 3 | -74/+116 | |
| | ||||||
* | #ifdefed DMF fix so not compiled by default. We need to look at this... | Jeremy Allison | 2001-11-25 | 1 | -22/+39 | |
| | | | | Jeremy. | |||||
* | Use "password server" for searching for BDC's also as Tim suggested. | Jeremy Allison | 2001-11-25 | 1 | -6/+8 | |
| | | | | Jeremy. | |||||
* | Add the PDC end of the smbtorture test for creating an NT_STATUS -> DOS error | Andrew Bartlett | 2001-11-25 | 4 | -0/+72 | |
| | | | | | | | | | | | | | | | | map. This little authentication module is #ifdef DEVELOPER, becouse it really is of no use execept as a development tool invoke by setting: auth methods = guest sam name_to_ntstatus in the smb.conf file (the SAM and guest elements are required for the member server to authenticate itself). Andrew Bartlett | |||||
* | oops, I forgot to include the header file | Andrew Bartlett | 2001-11-25 | 1 | -0/+2 | |
| | ||||||
* | Add a new torture test to extract a NT->DOS error map from an NT member of a | Andrew Bartlett | 2001-11-25 | 5 | -5/+148 | |
| | | | | | | | | | samba domain. The PDC must be running a special authenticaion module that spits out NT errors based on username. Andrew Bartlett | |||||
* | Unless the error is exactly NT_STATUS_OK, we might not have a server info, so | Andrew Bartlett | 2001-11-25 | 1 | -1/+1 | |
| | | | | we need to bail here. | |||||
* | I think this is a fix for the "out of space" errors with oplocks=no. | Jeremy Allison | 2001-11-25 | 1 | -49/+58 | |
| | | | | Jeremy. | |||||
* | Fix ./configure --enable-developer warnings (shadow of global) | Andrew Bartlett | 2001-11-25 | 1 | -2/+2 | |
| | ||||||
* | better help | Andrew Tridgell | 2001-11-25 | 1 | -1/+7 | |
| | ||||||
* | use generate_random_str() | Andrew Tridgell | 2001-11-25 | 1 | -47/+4 | |
| | ||||||
* | added "net ads user" and "net ads group" commands | Andrew Tridgell | 2001-11-25 | 2 | -29/+80 | |
| | ||||||
* | added "net ads status" command | Andrew Tridgell | 2001-11-25 | 2 | -29/+115 | |
| | ||||||
* | made a "net ads" command, currently with "net ads join" and "net ads leave" | Andrew Tridgell | 2001-11-25 | 3 | -5/+192 | |
| | ||||||
* | stop popt from doing its own intl stuff | Andrew Tridgell | 2001-11-25 | 1 | -16/+0 | |
| | ||||||
* | better auto-selection of realm and ldap server | Andrew Tridgell | 2001-11-25 | 1 | -3/+4 | |
| | ||||||
* | added "net join" command | Andrew Tridgell | 2001-11-24 | 19 | -251/+902 | |
| | | | | this completes the first stage of the smbd ADS support | |||||
* | removed unused function | Andrew Tridgell | 2001-11-24 | 1 | -18/+0 | |
| | ||||||
* | rewrote net.c | Andrew Tridgell | 2001-11-24 | 1 | -1260/+1071 | |
| | | | | | | | | | | The rewrite fixes a number of things: - much better command line parsing - fixed usage of static and const - better finding of hosts - clean internal separation of sub-functions - expandable design |