summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* changed query_dispinfo to query_user_listAndrew Tridgell2001-12-034-23/+23
|
* put sid_to_name behind the winbindd backend interfaceAndrew Tridgell2001-12-037-44/+85
| | | | | | | I spent quite a while trying to work out how to make this call via ldap and failed. I then found that MS servers seem use rpc for sid_to_name, and it works even when in native mode, I ended up just implementing it via rpc
* added name_to_sid to the backendAndrew Tridgell2001-12-0310-111/+186
|
* const religionAndrew Tridgell2001-12-032-3/+3
|
* added another ATYPE_Andrew Tridgell2001-12-031-1/+2
|
* make proto should build winbindd_proto.h as wellAndrew Tridgell2001-12-031-1/+1
|
* This change reworkes the connection code for both rpcclient and net newAndrew Bartlett2001-12-034-160/+164
| | | | | | | | | | | 'net' untility. This should make it easier to port rpcclient code across to net. It also allows SPNEGO (the NTLMSSP subsystem in particular) to work, becouse it kills off the early destruction of the clear-text password. Andrew Bartlett
* Forgot this one with the last commit...Andrew Bartlett2001-12-031-0/+36
| | | | Andrew Bartlett
* added a basic ADS backend to winbind. More work needed, but atAndrew Tridgell2001-12-037-22/+335
| | | | least basic operations work
* This is another major rework of the 'net' command.Andrew Bartlett2001-12-034-1058/+1274
| | | | | | | | | | | | | | | | | | | | | | | | | | This time, all the existing functionality has been moved into 'net rap', ready for new commands in the 'net ads' and 'net rpc' categories. In particular, we hope to have the abilty to autoselect the appropriate backend to use based on smb.conf or other paramaters. This will allow 'net user' to work no matter what the remote server. The new 'net rpc' command will soon gain a 'net rpc join' and a 'net rpc user' based on the existing samba code. Also in this commit, the connection establishment code has been almost entirly reworked, and now has some minor sense of sainity to it. In particular, we can now connect to hosts *other* than localhost! We also have the ability to state on a per-command basis whether the 'localhost' is a sane default value. (A net join, for example, would not be sane against localhost). Unfortunetly we have had to make the basic paramaters global variables, but the 'cli' is not opened and closed on a per-command basis. Andrew Bartlett
* Don't display any data if tdb_fetch() failed in the tdbtool "fetch"Tim Potter2001-12-031-1/+4
| | | | command.
* added nsstest targetAndrew Tridgell2001-12-031-1/+7
| | | | fixed winbindd_rpc.o typo
* fixed default location of libnss_winbind.soAndrew Tridgell2001-12-031-1/+1
|
* fixed the nsswitch initgroups codeAndrew Tridgell2001-12-032-8/+312
| | | | | added a nsstest test program that directly tests all the nss interfaces using dlopen()
* Writing decimal constants as "02" has been shown to cause cancer inMartin Pool2001-12-032-4/+4
| | | | rats.
* split winbindd_enum_dom_groups into the new backend structureAndrew Tridgell2001-12-036-95/+144
| | | | | | also created winbindd_rpc.c which contains the functions that have been converted to the new structure. There will soon be a winbindd_ads.c for the ldap backend
* Updated definition of fstring.Tim Potter2001-12-031-4/+11
| | | | | print_asc(): Don't try to print a trailing NULL character print_key(), print_rec(): Display key in ASCII
* re-enabled insure backtrace, calling /usr/bin/backtraceAndrew Tridgell2001-12-031-2/+4
|
* init group db before useAndrew Tridgell2001-12-031-0/+12
| | | | this fixes the smbpasswd segvs
* added queryuseraliases to rpcclientJean-François Micouleau2001-12-023-0/+150
| | | | | | | and some comments to the samr server code, to explain what we should return here. J.F.
* there was a bug in samr_lookup_names (my fault)Jean-François Micouleau2001-12-021-42/+77
| | | | | | and added comments and some debugs. J.F.
* added mapping of primary gid to rid thru the group mapping code.Jean-François Micouleau2001-12-025-29/+143
| | | | | | | and cleanup and comments in passdb/passdb.c J.F.
* added samr_query_sec_obj. and put back some code to display a securityJean-François Micouleau2001-12-021-8/+201
| | | | | | | | | descriptor. added to samr_lookup_name the choice to select the either the builtin (s-1-5-32) domain or our current domain (s-1-5-21-x-y-z) J.F.
* added samr_query_sec_obj for rpcclientJean-François Micouleau2001-12-011-0/+46
| | | | J.F.
* groups in the Builtin domain S-5-32 are alias and not well-known groupsJean-François Micouleau2001-12-011-11/+15
| | | | J.F.
* removed the #ifdef USING_GROUPNAME_MAP/#endif blocksJean-François Micouleau2001-12-011-10/+0
| | | | | | | | that GROUPNAME_MAP has never been used. I'll delete the smbd/groupname.c file too J.F.
* added smbgroupedit to compile by defaultJean-François Micouleau2001-12-011-1/+1
| | | | J.F.
* The beginnings of alternative backends for winbinddAndrew Tridgell2001-12-017-67/+112
| | | | | | This just splits off the dispinfo call behind a methods structure. I'll split off a few more functions soon, then we will be ready for LDAP replacement methods
* added $(LDFLAGS) to link smbmount/smbmnt/smbumount to make Red Hat LinuxMotonobu Takahashi2001-12-011-3/+3
| | | | happy
* not used any moreAndrew Tridgell2001-12-011-144/+0
|
* more specific DNS instructionsAndrew Tridgell2001-12-011-6/+9
|
* KDC DNS domain must be the kerberos realm. Or so it seems that wayJim McDonough2001-12-011-0/+3
|
* we need to look for liblber before libldapAndrew Tridgell2001-11-302-665/+678
|
* XFS quota patch for Linux.Jeremy Allison2001-11-304-657/+736
| | | | Jeremy.
* merge from APPLIANCE_HEADGerald Carter2001-11-301-16/+20
|
* Check error returns.Jeremy Allison2001-11-301-4/+12
| | | | Jeremy.
* Gerald's fix.Jeremy Allison2001-11-301-6/+2
| | | | Jeremy
* After conversations with Andrew, improved the robustness of theJeremy Allison2001-11-301-26/+53
| | | | | | | | | | | | | | | | | | | | | | | | | | sharemode db in the following way. Originally, on startup and shutdown, smbd would scan the share mode db to ensure it was correct. This lead to scalability issues as scans lock the db for quite a long time. Andrew had the brainstorm that we only care about the record we're about to read. This new code (small change really, but quite significant) causes get_share_modes() to do a process_exists() call against each pid in each record, and to delete any that don't and re-write the entry if any dead records were detected. This allowed me to remove the startup/shutdown scans of the db (they can be added into smbstatus if anyone really cares to have them back). This will please the vfs author who was worried about the time taken on open() calls, and will lead to much greater robustness and scalability in the share mode db. We need much testing of this, and also netbench tests to ensure the extra process_exists() calls don't hurt performance (they shouldn't it's a very simple system call). Jeremy.
* preparing for release of 3.0-alpha0Samba Release Account2001-11-301-412/+76
|
* Renamed sid field in SEC_ACE to trustee to be more in line with MS'sTim Potter2001-11-308-46/+58
| | | | definitions.
* Missing return in free_privilege()Tim Potter2001-11-301-0/+2
|
* Ensured the %G substitution exactly matches what the man page states.Jeremy Allison2001-11-301-1/+2
| | | | Jeremy.
* Comment deconfusification.Tim Potter2001-11-301-1/+1
|
* Added close-share message.Jeremy Allison2001-11-291-1/+10
| | | | Jeremy.
* Changed again how the privilege list is handled in the group mapping code.Jean-François Micouleau2001-11-299-155/+850
| | | | | | | | | | | | | | | | This time it's a PRIVILEGE_SET struct instead of a simple uint32 array. It makes much more sense. Also added a uint32 systemaccount to the GROUP_MAP struct as some privilege showing in USRMGR.EXE are not real privs but a bitmask flag. I guess it's an heritage from NT 3.0 ! I could setup an NT 3.1 box to verify, but I'm too lazy (yes I still have my CDs). Added 3 more LSA calls: SetSystemAccount, AddPrivileges and RemovePrivileges, we can manage all this privilege from UserManager. Time to change the NT_USER_TOKEN struct and add checks in all the rpc functions. Fun, fun, fun. J.F.
* ads->realm must not be NULLAndrew Tridgell2001-11-291-0/+3
| | | | perhaps we should just fail ads_init() in this case?
* define LDAP_PORT when not availableAndrew Tridgell2001-11-291-0/+3
|
* fixed typoAndrew Tridgell2001-11-291-1/+1
|
* Fix up the ./configure tests for kerberos. This ensures a more consistantAndrew Bartlett2001-11-292-667/+657
| | | | | behaviour no matter if kerberos was found automatically, found in the /usr/kerberos path or was specified.
* Make better use of the ads_init() function to get the kerberos relam etc.Andrew Bartlett2001-11-298-127/+221
| | | | | | | | | This allows us to use automagically obtained values in future, and the value from krb5.conf now. Also fix mem leaks etc. Andrew Bartlett
generated by cgit (git 2.34.1) at 2025-09-26 11:10:35 +0000