summaryrefslogtreecommitdiffstats
path: root/examples
Commit message (Collapse)AuthorAgeFilesLines
* This patch cleans up some of our ldap code, for better behaviour:Andrew Bartlett2003-07-041-4/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We now always read the Domain SID out of LDAP. If the local secrets.tdb is ever different to LDAP, it is overwritten out of LDAP. We also store the 'algorithmic rid base' into LDAP, and assert if it changes. (This ensures cross-host synchronisation, and allows for possible integration with idmap). If we fail to read/add the domain entry, we just fallback to the old behaviour. We always use an existing DN when adding IDMAP entries to LDAP, unless no suitable entry is available. This means that a user's posixAccount will have a SID added to it, or a user's sambaSamAccount will have a UID added. Where we cannot us an existing DN, we use 'sambaSid=S-x-y-z,....' as the DN. The code now allows modifications to the ID mapping in many cases. Likewise, we now check more carefully when adding new user entires to LDAP, to not duplicate SIDs (for users, at this stage), and to add the sambaSamAccount onto the idmap entry for that user, if it is already established (ensuring we do not duplicate sambaSid entries in the directory). The allocated UID code has been expanded to take into account the space between '1000 - algorithmic rid base'. This much better fits into what an NT4 does - allocating in the bottom part of the RID range. On the code cleanup side of things, we now share as much code as possible between idmap_ldap and pdb_ldap. We also no longer use the race-prone 'enumerate all users' method for finding the next RID to allocate. Instead, we just start at the bottom of the range, and increment again if the user already exists. The first time this is run, it may well take a long time, but next time will just be able to use the next Rid. Thanks to metze and AB for double-checking parts of this. Andrew Bartlett
* applying fix for group map conversion (patch from Kristyan Osborne)Gerald Carter2003-07-011-1/+1
|
* Add DTD used by XML passdb backendJelmer Vernooij2003-06-161-0/+46
|
* This patch is Vorlon's fault!John Terpstra2003-06-151-22/+34
|
* fix typo in descriptionGerald Carter2003-06-131-1/+1
|
* check that an attribute is defined and not just non-zeroGerald Carter2003-06-121-1/+1
|
* Make skeleton VFSs compile with new EA modules.Jeremy Allison2003-06-063-0/+238
| | | | Jeremy
* working draft of the idmap_ldap code.Gerald Carter2003-06-051-0/+10
| | | | | | | | Includes sambaUnixIdPool objectclass Still needs cleaning up wrt to name space. More changes to come, but at least we now have a a working distributed winbindd solution.
* Move VFS example skel.c to two different examples: one for opaque operations ↵Alexander Bokovoy2003-06-0410-491/+1563
| | | | and one for transparent. Also add configure support for compiling third-party modules. Patch from Stefan Metzmacher <metze@metzemix.de>
* moving the sambaAccount objectclass to 'historical' to prevent confusion on ↵Gerald Carter2003-05-221-150/+142
| | | | which one should be used for new servers. I'll add a note about uncommenting the older items for ldapsam_compat in the release notes
* fix group mapping in LDAP under new schemaGerald Carter2003-05-141-1/+1
|
* s/primaryGroupSID/sambaPrimaryGroupSID/Gerald Carter2003-05-141-1/+1
|
* perl script to convert from sambaAccount to sambaSamAccount; requires ↵Gerald Carter2003-05-141-0/+105
| | | | Net::LDAP::LDIF
* *****LDAP schema changes*****Gerald Carter2003-05-141-25/+134
| | | | | | | | | | | | New objectclass named sambaSamAccount which uses attribute prefaced with the phrase 'samba' to prevent future name clashes. Change in functionality of the 'ldap filter' parameter. This always defaults to "(uid=%u)" now and is and'd with the approriate objectclass depending on whether you are using ldapsam_compat or ldapsam conversion script for migrating from sambaAccount to sambaSamAccount will come next.
* As discussed on samba-technical - move to 'primaryGroupSid' insted ofAndrew Bartlett2003-05-111-1/+11
| | | | | | | | | | primaryGroupID (rid). This is consistant with the move from 'rid' to ntSid for the primary user identifier. Also cope with legacy installations where primaryGroupID might have been stored as 0. Andrew Bartlett
* syncing README to go along with scriptsGerald Carter2003-05-091-24/+7
|
* syncing import/export smbpasswd file scripts from 2.2Gerald Carter2003-05-094-231/+114
|
* Don't crash if the underlying VFS doesn't support ACL'sJelmer Vernooij2003-05-011-0/+10
|
* Use NTSTATUS as return value for smb_register_*() functions and init_module()Jelmer Vernooij2003-04-281-1/+1
| | | | function. Patch by metze with some minor modifications.
* Add example authentication moduleJelmer Vernooij2003-04-282-0/+90
|
* A new pdb_ldap!Andrew Bartlett2003-04-281-5/+34
| | | | | | | | | | | | | | | | | | | | | | This patch removes 'non unix account range' (same as idra's change in HEAD), and uses the winbind uid range instead. More importanly, this patch changes the LDAP schema to use 'ntSid' instead of 'rid' as the primary attribute. This makes it in common with the group mapping code, and should allow it to be used closely with a future idmap_ldap. Existing installations can use the existing functionality by using the ldapsam_compat backend, and users who compile with --with-ldapsam will get this by default. More importantly, this patch adds a 'sambaDomain' object to our schema - which contains 2 'next rid' attributes, the domain name and the domain sid. Yes, there are *2* next rid attributes. The problem is that we don't 'own' the entire RID space - we can only allocate RIDs that could be 'algorithmic' RIDs. Therefore, we use the fact that UIDs in 'winbind uid' range will be mapped by IDMAP, not the algorithm. Andrew Bartlett
* Update for the new modules systemJelmer Vernooij2003-04-281-4/+10
|
* Update for new modules systemJelmer Vernooij2003-04-281-46/+7
|
* Replace references to the old textdocs by references to chapters inJelmer Vernooij2003-04-281-2/+6
| | | | the HOWTO Collection.
* Update for the new modules system. Also, use Makefile rather then Makefile.inJelmer Vernooij2003-04-282-9/+6
| | | | because we don't generate Makefile from configure anymore
* typoSimo Sorce2003-04-271-1/+1
|
* uidPool and gidPool don't use cn anymore (but we don't use thsi anyways)Gerald Carter2003-04-181-2/+2
|
* Fix schema error not detected by OpenLDAP 2.0.23 but by 2.1.16.Volker Lendecke2003-03-271-1/+1
| | | | Volker
* Put group mapping into LDAP.Volker Lendecke2003-03-191-0/+25
| | | | Volker
* Sync with HEAD. The -L/usr/local/lib bit looks a bit dodgy though.Tim Potter2003-01-221-1/+1
|
* Sync with HEAD.Tim Potter2003-01-222-128/+8
|
* Minor merges from HEAD.Tim Potter2003-01-222-1/+3
|
* Adding genlogon obtained from a a mailing list posting in 2001.John Terpstra2003-01-161-0/+71
|
* [merge]Gerald Carter2003-01-151-1/+1
| | | | | | * removed unused variable from rpcclient code * added container option to net command (patch from SuSE) * Makefile patch for examples/VFS from SuSE
* removed idpool from schema file (experimental) to remove the dependencyGerald Carter2003-01-061-6/+6
| | | | | | on nis.schema. add $(LDFLAGS) to libsmbclient build
* This commit was manufactured by cvs2svn to create branch 'SAMBA_3_0'.cvs2svn Import User2002-12-162-0/+250
|\
| * Add win32 utility to query driver capabilities to publishJim McDonough2002-12-162-0/+250
| |
| * Ignore automatically generated Makefile.Tim Potter2002-11-201-0/+1
| |
| * One more small fix in tree.cRichard Sharpe2002-11-151-2/+2
| |
| * Fix some problems with tree.c reported by users.Richard Sharpe2002-11-153-125/+6
| |
| * Update to use smb_register_passdb()Jelmer Vernooij2002-11-152-47/+13
| |
| * a cups printing backend is now available as wellJelmer Vernooij2002-11-141-1/+1
| |
| * Ignore MakefileJelmer Vernooij2002-11-131-0/+2
| |
| * Move working VFS modules to source/modules/Jelmer Vernooij2002-11-133-1257/+0
| |
| * Move VFS documentation to the HOWTO collectionJelmer Vernooij2002-11-133-117/+9
| |
| * Fix typoJelmer Vernooij2002-11-111-1/+1
| |
* | Latest updates from author.John Terpstra2002-11-202-47/+44
| |
* | Added logon script generator provided by: Timothy Grant <tjg@craigelachie.org>John Terpstra2002-11-193-0/+583
| |
* | Sync with HEAD:Jelmer Vernooij2002-11-186-1374/+9
| | | | | | | | | | - Move working VFS modules to source/ - Move documentation to SGML
* | There is support for the cups printing system now as wellJelmer Vernooij2002-11-141-1/+1
| |
generated by cgit (git 2.34.1) at 2024-10-09 15:21:15 +0000