| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
| |
code path
metze
|
|
|
|
| |
metze
|
|
|
|
| |
Guenther
|
|
|
|
| |
Michael
|
|
|
|
|
|
|
| |
This fixes mixed tabs/spaces and trailing whitespaces
I just ran across.
Michael
|
|
|
|
|
|
|
|
| |
wbcAuthenticateUser segfaults when passed NULL as password.
This only changes the caller in wbinfo.c to pass an empty
password string to wbcAuthenticateUser().
Michael
|
|
|
|
| |
Guenther
|
|
|
|
|
|
|
|
| |
Implements a wrapper layer in winbind_util.c which are just stubs
if compiled --without-winbind. When building with winbindd, it
is now required to build the libwbclient DSO first (in the Makefile)
and then either set LD_LIBRARY_PATH or /etc/ld.so.conf to pick up the
library PATH.
|
|
|
|
|
|
|
|
|
| |
We can't use POPT_COMMON_SAMBA as the -s option is
already used by -s, --sid-to-name=SID.
Also load the config file after processing the cmdline options
metze
|
|
|
|
|
|
| |
them with malloc'ing accessor functions. Should save a
lot of static space :-).
Jeremy.
|
|
|
|
|
| |
No more temptations to use static length strings.
Jeremy.
|
| |
|
|
|
|
|
|
|
| |
bugs in various places whilst doing this (places that assumed
BOOL == int). I also need to fix the Samba4 pidl generation
(next checkin).
Jeremy.
|
|
|
|
|
|
| |
is specified.
Michael
|
|
|
|
|
|
|
| |
as this is always answered by the winbindd parent and will
most times return old sequence number values.
metze
|
|
|
|
| |
metze
|
|
|
|
| |
Guenther
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
commit fb52f971986dd298abbcd9745ddf702820ce0184
Author: Gerald Carter <coffeedude@plainjoe.org>
Date: Mon Aug 27 13:50:26 2007 -0500
Check correct return type for pam_winbind_request_log() wnibind_upn_to_username
which is an int and not NSS_STATUS.
commit 7382edf6fc0fe555df89d5b2a94d12b35049b279
Author: Gerald Carter <coffeedude@plainjoe.org>
Date: Mon Aug 27 13:30:26 2007 -0500
Allow wbinfo -n to convert a UPN to a SID
commit 8266c0fe1ccf2141e5a983f3213356419e626dda
Author: Gerald Carter <coffeedude@plainjoe.org>
Date: Fri Aug 3 09:53:16 2007 -0500
Merge some of Guenther UPN work for pam_winbind.c (check the winbind separator
and better pam logging when converting a upn to a username).
commit 15156c17bc81dbcadf32757015c4e5158823bf3f
Author: Gerald Carter <coffeedude@plainjoe.org>
Date: Fri Aug 3 08:52:50 2007 -0500
Include Universal groups from the cached PAC/SamLogon info when
generating the list of domain group SIDs for a user's token.
commit 979053c0307b051954261d539445102c55f309c7
Author: Gerald Carter <coffeedude@plainjoe.org>
Date: Thu Aug 2 17:35:41 2007 -0500
merge upnlogon patch from my tree
|
|
|
|
|
| |
Merged from my Samba4 GSoC branch.
Volker, can you check if that's done the way you thought?
|
| |
|
|
|
|
| |
Jeremy.
|
|
|
|
|
|
|
|
| |
where a
torture test would be much more appropriate). Fix #4408.
Guenther
|
| |
|
| |
|
|
|
|
| |
allow detection of libbiconv if all others fail - need for FreeBSD
|
|
|
|
|
|
|
|
| |
against tdb corruption. Needs fleshing out
(and I forgot one record type) and needs helpful
suggestion from Volker to validate freelist,
but should give an idea of how this will look.
Jeremy.
|
|
|
|
|
|
|
|
|
|
|
| |
* autogenerate lsa ndr code
* rename 'enum SID_NAME_USE' to 'enum lsa_SidType'
* merge a log more security descriptor functions from
gen_ndr/ndr_security.c in SAMBA_4_0
The most embarassing thing is the "#define strlen_m strlen"
We need a real implementation in SAMBA_3_0 which I'll work on
after this code is in.
|
|
|
|
|
|
|
| |
to do the upper layer directories but this is what
everyone is waiting for....
Jeremy.
|
|
|
|
|
|
| |
info for our own domain.
Guenther
|
|
|
|
| |
Guenther
|
|
|
|
| |
Volker
|
|
|
|
| |
winbindd server
|
| |
|
|
|
|
| |
Sync with trunk as off r13315
|
|
|
|
| |
* update output from mkversion.sh to include the SAMBA_VENDOR_PATCH
|
|
|
|
|
|
|
|
|
|
|
|
| |
lp_load() could not be called multiple times to modify parameter settings based
on reading from multiple configuration settings. Each time, it initialized all
of the settings back to their defaults before reading the specified
configuration file.
This patch adds a parameter to lp_load() specifying whether the settings should
be initialized. It does, however, still force the settings to be initialized
the first time, even if the request was to not initialize them. (Not doing so
could wreak havoc due to uninitialized values.)
|
|
|
|
|
| |
What I'd give for a global constructor...
Jeremy.
|
|
|
|
|
|
| |
messages.
Guenther
|
|
|
|
|
|
| |
Needed for KDM/GDM login masks.
Guenther
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
logons work if the client gives the MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT
or MSV1_0_ALLOW_WORKSTATION_TRUST_ACCOUNT flags. This changes
the auth module interface to 2 (from 1). The effect of this is
that clients can access resources as a machine account if they
set these flags. This is the same as Windows (think of a VPN
where the vpn client authenticates itself to a VPN server
using machine account credentials - the vpn server checks
that the machine password was valid by performing a machine
account check with the PDC in the same was as it would a
user account check. I may add in a restriction (parameter)
to allow this behaviour to be turned off (as it was previously).
That may be on by default.
Andrew Bartlett please review this change carefully.
Jeremy.
|
|
|
|
| |
the request to winbindd (prevents the WB_RECURSE flags from accidentially getting set
|
|
|
|
|
|
|
| |
* \PIPE\unixinfo
* winbindd's {group,alias}membership new functions
* winbindd's lookupsids() functionality
* swat (trunk changes to be reverted as per discussion with Deryck)
|
|
|
|
|
|
| |
safe for using our headers and linking with C++ modules. Stops us
from using C++ reserved keywords in our code.
Jeremy
|
| |
|
| |
|
|
|
|
|
|
|
| |
naming of the require_membership_of parameter in pam_winbind and fix
the error code for 'you didn't specify a domain' in ntlm_auth.
Andrew Bartlett
|
|
|
|
|
|
|
|
|
| |
and the wbinfo -a test tool.
If 'client ntlmv2 auth' is set, then we will send an NTLMv2, rather
than an NT/LM response to the server.
Andrew Bartlett
|
|
|
|
|
|
| |
belongs into winbind itself, not into wbinfo.
Volker
|
|
|
|
|
|
|
|
|
| |
requested actually is of type asked for. I've come across more than one
installation where a group sid had ended up as a uid in idmap and vice
versa. This just closes one possible for this misconfiguration, people
are actually using wbinfo.
Volker
|
|
|
|
|
|
|
|
|
|
| |
On systems with /dev/urandom, this avoids a change to secrets.tdb for every fork().
For other systems, we now only re-seed after a fork, and on startup.
No need to do it per-operation. This removes the 'need_reseed'
parameter from generate_random_buffer().
Andrew Bartlett
|