| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
| |
| |
| |
| | |
makes these functions fail for strings over 512 characters. Now we
use convert_string_allocate, which grows a buffer as necessary.
|
| |
| |
| |
| |
| | |
once, when init_iconv is first called. Use this in check_dos_char
rather than doing the conversion every time. Much faster.
|
| | |
|
| |
| |
| |
| |
| |
| | |
same functionality exists as "pool-usage".
Move initialisation of this and dmalloc messages inside message_init().
|
| |
| |
| |
| | |
(void **)
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| | |
This patch moves the ldap routines out of passdb into a generic
library and implements an LDAP backend for IDMAP. THe backend
can be enabled with "idmap backend = ldap" in smb.conf. THere
are also schema changes to make sure to update teh ldap schema files.
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
includes a --with-idmap=no switch to disable idmap usage if you find
problems.
cosmetic fixes and param aliases to separate winbind from idamp roles.
A temporarily remote idmap winbind compatibility backend.
As I have time I will further change code to not call directly winbind
(partly done but not tested) and a specilized module will be built in place
for the current glue hack.
The patch has been tested locally in my limited time, the patch is simple and
clear and should not reserve problems, if any just disable it.
As usual, comments and fisex are welcome :-)
Simo.
|
| |
| |
| |
| |
| |
| |
| | |
decoded.length after it's been zero'ed out by data_blob_free() doesn't
give you the original length...
Andrew Bartlett
|
| |
| |
| |
| |
| |
| |
| | |
- Fix typo in Makefile.in
- Fix compatibility with older vfs modules (from patch by metze)
- Build some modules shared by default and some static (and fall
back to static when dlopen() is not available)
|
| | |
|
| |
| |
| |
| | |
- Make passdb work with absolute paths (passdb backend = /path/to/smbpasswd.so works now). vfs, rpc and charset will follow
|
| | |
|
| | |
|
| |
| |
| |
| | |
(only on systems that support it, of course)
|
| | |
|
| |
| |
| |
| | |
some double options and broke some parameters.
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
- Add a 'privileged' mode to Winbindd. This is achieved by means of a directory
under lockdir, that the admin can change the group access for.
- This mode is now required to access with 'CRAP' authentication feature.
- This *will* break the current SQUID helper, so I've fixed up our ntlm_auth
replacement:
- Update our NTLMSSP code to cope with 'datagram' mode, where we don't get a
challenge.
- Use this to make our ntlm_auth utility suitable for use in current Squid 2.5
servers.
- Tested - works for Win2k clients, but not Win9X at present. NTLMSSP updates
are needed.
- Now uses fgets(), not x_fgets() to cope with Squid environment (I think
somthing to do with non-blocking stdin).
- Add much more robust connection code to wb_common.c - it will not connect to
a server of a different protocol version, and it will automatically try and
reconnect to the 'privileged' pipe if possible.
- This could help with 'privileged' idmap operations etc in future.
- Add a generic HEX encode routine to util_str.c,
- fix a small line of dodgy C in StrnCpy_fn()
- Correctly pull our 'session key' out of the info3 from th the DC. This is
used in both the auth code, and in for export over the winbind pipe to
ntlm_auth.
- Given the user's challenge/response and access to the privileged pipe,
allow external access to the 'session key'. To be used for MSCHAPv2
integration.
Andrew Bartlett
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| | |
- Add some const
|
| |
| |
| |
| | |
Andrew Bartlett
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
- safe_string.h - don't assume that __FUNCTION__ is available
- process.c - use new workaround from safe_string.h for the same
- util.c - Show how many bytes we smb_panic()ed trying to smb_xmalloc()
- gencache.c - Keep valgrind quiet by always null terminating.
- clistr.c - Add copyright
- srvstr.h - move srvstr_push into a .c file again, as a real function.
- srvstr.c - revive, with 'safe' checked srvstr_push
- loadparm.c - set a default for the display charset.
Andrew Bartlett
|
| |
| |
| |
| |
| | |
on 2000.
sending messages to 9x needs to be fixed, but that didn't work anyway
|
| |
| |
| |
| |
| | |
Apply the job returned limit across all requests for job queues.
Jeremy.
|
| |
| |
| |
| | |
Added new sid type = 9 for "computer" from MSDN.
|
| | |
|
| |
| |
| |
| | |
put a doc about it in dev-doc later today.
|
| |
| |
| |
| |
| |
| |
| |
| | |
First of all, do a char-by-char walk through both buffers until we get
to a non-ascii character, or a difference between the strings. This
prefix can be directly compared without needing to call into iconv.
This should be much faster for strings that are either all ascii, or
differ near the start.
|
| |
| |
| |
| | |
function. Patch by metze with some minor modifications.
|
| | |
|
| | |
|
| |
| |
| |
| | |
to find duplicates
|
| |
| |
| |
| |
| |
| | |
name.
Don't use strchr_m, which caused race conditions.
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
hostname.
This makes 'last -i' show the IP.
Thanks to Philip Anderson <pza@australia.op.org> for the idea.
Andrew Bartlett
|
| |
| |
| |
| |
| |
| |
| | |
for rpc_pull_string. If we had a NULL or zero-length string, we would use
uninitialised data in the result string.
Andrew Bartlett
|
| |
| |
| |
| |
| |
| |
| |
| | |
This includes the 'SIDs Rule' patch, mimir's trusted domains cacheing code,
the winbind_idmap abstraction (not idmap proper, but the stuff that held up
the winbind LDAP backend in HEAD).
Andrew Bartlett
|
| | |
|
| |
| |
| |
| | |
Andrew Bartlett
|
| |
| |
| |
| | |
Andrew Bartlett
|
| |
| |
| |
| |
| | |
1000.
Jeremy.
|
| |
| |
| |
| |
| |
| | |
which can restrict things like unix_strupper() to 512 byte strings.
Andrew Bartlett
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
include a domain portion, do a gethostbyname() lookup on that name.
Use this name in our PolicyPrimaryDomainInformation reply (_lsa_query_info2)
that Win2k uses when trying to trust us as a trusted domain.
(We need to do a better mapping between our Netbios and Win2k domain names,
but this will do for now - particularly annoying is the way this possibly needs
to map with our kerberos realm).
Andrew Bartlett
|
| | |
|