summaryrefslogtreecommitdiffstats
path: root/source/param
Commit message (Collapse)AuthorAgeFilesLines
* This is a merge of the NETLOGON schannel server code from SambaVolker Lendecke2003-04-041-0/+4
| | | | | | | | | | | | | | | | | | | | TNG. Actually, it exists in the main Samba cvs tree in APPLIANCE_TNG as I found out later :-) It adds a new parameter: server schannel = yes/auto/no defaulting to auto. What does this mean to the user: No requireSignOrSeal registry patch for XP anymore. Many thanks for this code to Luke Leighton, Elrond and anybody else I forgot to mention. My next thing will be to see if this applies cleanly to 3_0. Please test and comment! Volker
* THE Idmap patch :-)Simo Sorce2003-04-021-32/+38
| | | | | | | | | | | | | | | | | | | includes a --with-idmap=no switch to disable idmap usage if you find problems. cosmetic fixes and param aliases to separate winbind from idamp roles. A temporarily remote idmap winbind compatibility backend. As I have time I will further change code to not call directly winbind (partly done but not tested) and a specilized module will be built in place for the current glue hack. The patch has been tested locally in my limited time, the patch is simple and clear and should not reserve problems, if any just disable it. As usual, comments and fisex are welcome :-) Simo.
* 3 things:Volker Lendecke2003-03-311-1/+0
| | | | | | | | | | | | * Remove 'ldap del only sam attr' after asking Lars Mueller from SuSE first. It is replaced by 'ldap delete dn' * Fix a typo in docs. * Document 'set primary group script'. Alexander, could you check the file in smbdotconf/ please? Thanks. Volker
* This adds 'ldap delete dn' as the recommended parameterVolker Lendecke2003-03-231-4/+5
| | | | | | | | for the 'ldap del only sam attr' functionality. So we are compatiple to the current SuSE patches as well as to TNG... ;-) Volker
* Valgrind found a few memory leaks!Andrew Bartlett2003-03-221-0/+1
| | | | Andrew Bartlett
* Small clenaup patches:Andrew Bartlett2003-03-221-0/+3
| | | | | | | | | | | | | - safe_string.h - don't assume that __FUNCTION__ is available - process.c - use new workaround from safe_string.h for the same - util.c - Show how many bytes we smb_panic()ed trying to smb_xmalloc() - gencache.c - Keep valgrind quiet by always null terminating. - clistr.c - Add copyright - srvstr.h - move srvstr_push into a .c file again, as a real function. - srvstr.c - revive, with 'safe' checked srvstr_push - loadparm.c - set a default for the display charset. Andrew Bartlett
* Add paramter 'ldap del only sam attr'.Volker Lendecke2003-03-191-0/+4
| | | | | | | This patch is heavily based on a patch by SuSE. Thanks to Guenther Deschner <gd@suse.de> for providing it. Volker
* Clean up the VFS module loading logic by making the parameter an P_LIST,Andrew Bartlett2003-03-151-19/+2
| | | | | | rather than a runtime-parsed string. Andrew Bartlett
* fixed a strcat noticed by metzeAndrew Tridgell2003-03-121-1/+1
|
* security=domain and domain logons = yes should be a BDC (of sorts).Andrew Bartlett2003-03-111-2/+5
| | | | | | Matches 2.2 Andrew Bartlett
* Some further tought on the server role issue - try not to break it compeatly.Andrew Bartlett2003-03-111-3/+6
| | | | Andrew Bartlett
* After 'consultation' with idra, this is how I think the server roles should ↵Andrew Bartlett2003-03-111-4/+9
| | | | | | work... Andrew Bartlett
* This is how combination of domain logons and security parameter best combine.Simo Sorce2003-03-111-3/+3
| | | | | | | Comments wellcome. Simo.
* lp_string: Add note about dodgy StrnCpy use.Martin Pool2003-03-051-0/+3
|
* Added limit to number of jobs enumerated. Set to 0 (means no limit).Jeremy Allison2003-03-011-0/+4
| | | | | Yes I will add the docs.... Jeremy.
* - Rename 'modules = ' to 'preload modules = 'Jelmer Vernooij2003-02-271-3/+3
| | | | | | - Add smb_probe_module() - Add init_modules() - Call these functions
* Remove 'unixsam' from the default passdb backends.Andrew Bartlett2003-02-221-2/+2
| | | | | | | | | | | | | | | | | | | | | | The intention is to remove the muliple passdb backends, but we need the 'guest' account to always be there. If the admin adds the guest account to (say) LDAP, there will only be one backend required for operation. This helps remove some nasty behaviours with adding accounts to the system for both the RPC 'create user' and the SAMSYNC code. Users 'added' with an 'add user/machine' script won't magicly appear, and machine accounts 'pre-added' to unix, but not the smbpasswd file will not cause mayhem. This commit also implements somthing tridge discussed with me, the concept of 'default' passdb operation pointers - so that each backend does not need it's own stub funcitons wrapping the default tdb privilages/group mapping code. This also removes an implicit 'sid->name' and 'name->sid' mapping from our own local SID space, to winbind usernames. When adding mapping for NIS/LDAP non-sam users in future, we need to be careful. Andrew Bartlett
* rename 'winbind backend' to 'idmap backend'. Put paramter in security ↵Jim McDonough2003-02-211-4/+4
| | | | section...does this make sense?
* From aliguori@us.ibm.com:Jim McDonough2003-02-201-0/+6
| | | | | | This patch adds the architecture for an IDMAP backend system including a new smb.conf parameter "winbind backend". Right now, the only valid value is "tdb" but I'm currently working on an LDAP backend.
* (only for HEAD at the moment).Andrew Bartlett2003-02-091-1/+13
| | | | | | | | | | | | Add NTLMv2 support to our client, used when so configured ('client use NTLMv2 = yes') and only when 'client use spengo = no'. (A new option to allow the client and server ends to chose spnego seperatly). NTLMv2 signing doesn't yet work, and NTLMv2 is not done for NTLMSSP yet. Also some parinoia checks in our input parsing. Andrew Bartlett
* We now have client-side SMB signing support!Andrew Bartlett2003-02-011-4/+7
| | | | | | | | | | | | | | | | | | | | | | This checking allows us to connect to Microsoft servers the use SMB signing, within a few restrictions: - I've not get the NTLMSSP stuff going - it appears to work, but if you break the sig - say by writing a zero in it - it still passes... - We don't currently verfiy the server's reply - It works against one of my test servers, but not the other... However, it provides an excellent basis to work from. Enable it with 'client signing' in your smb.conf. Doc to come (tomorrow) and this is not for 3.0, till we get it complete. The CIFS Spec is misleading - the session key (for NTLMv1 at least) is the standard session key, ie MD4(NT#). Thanks to jra for the early work on this. Andrew Bartlett
* Patch from metze to to make testparm show values for 'workgroup', 'netbiosAndrew Bartlett2003-01-131-7/+29
| | | | | | | | name' and 'netbios scope'. Probably has a similar effect on SWAT. Also adds '-V' to testparm. Andrew Bartlett
* BIG patch...Andrew Bartlett2003-01-022-65/+65
| | | | | | | | | | | | | | | | This patch makes Samba compile cleanly with -Wwrite-strings. - That is, all string literals are marked as 'const'. These strings are always read only, this just marks them as such for passing to other functions. What is most supprising is that I didn't need to change more than a few lines of code (all in 'net', which got a small cleanup of net.h and extern variables). The rest is just adding a lot of 'const'. As far as I can tell, I have not added any new warnings - apart from making all of tdbutil.c's function const (so they warn for adding that const string to struct). Andrew Bartlett
* Add msdfs proxy functionality to HEAD.Shirish Kalele2002-12-291-0/+4
|
* Forward port the change to talloc_init() to make all talloc contextsJeremy Allison2002-12-201-1/+1
| | | | | named. Ensure we can query them. Jeremy.
* Added "kernel change notify" boolean to allow easier valgrind testing.Jeremy Allison2002-12-121-0/+4
| | | | Jeremy.
* finnally put in Alexander parametric pacthSimo Sorce2002-12-091-75/+298
|
* Make lp_winbind_separator a const string.Tim Potter2002-11-251-1/+1
|
* Add support for 'restrict anonymous=2' and make the doco give a slight hintAndrew Bartlett2002-11-221-1/+3
| | | | | | | | | | as to what it now does in 3.0. Needs more work, but better than documenting the old functionality :-). As the security benifits of this are nullified by a setting of 'guest ok' on any share, we might want to put some documentation there too. Andrew Bartlett
* add lp_modules()Jelmer Vernooij2002-11-131-0/+3
|
* Removed global_myworkgroup, global_myname, global_myscope. Added liberalJeremy Allison2002-11-121-316/+220
| | | | | | dashes of const. This is a rather large check-in, some things may break. It does compile though :-). Jeremy.
* Add a 'ldap trust ids' option that lets pdb_ldap check for posixAccountAndrew Bartlett2002-11-021-0/+3
| | | | | | | | | | | | | attributes rather than calling getpwnam() on the user. This should help fix some of metze's performance issues - particularly on enumerations. There is a consequential change to the operation of 'non unix account's in LDAP - they are no longer restricted to being 'within' the NUA range, but will always be added to that range. Finally, there is the doco for this and the previous LDAP SSL changes.
* Fixes for pdb_ldap:Andrew Bartlett2002-11-021-0/+2
| | | | | | | | | | | | | - Default is now for start-tls, on the ldap (not ldaps) port - We check for 'I am currently root' in the right place now, and don't accidentily use a cached connection. - We don't loop on failure to be root, or some other errors. - A bit cleaner error reporting for add/modify. - Both the OpenLDAP and manual URI parsing tested. Andrew Bartlett
* First cut of new ACL mapping code from Andreas Gruenbacher <agruen@suse.de>.Jeremy Allison2002-10-231-1/+20
| | | | | | | This is not 100% the same as what SuSE shipped in their Samba, there is a crash bug fix, a race condition fix, and a few logic changes I'd like to discuss with Andreas. Added Andreas to (C) notices for posix_acls.c Jeremy.
* merge from samba_3_0Gerald Carter2002-10-211-19/+0
| | | | | | | | | | | removed the following parameters * postscript * printer driver * printer driver location * printer driver file also removed the get_a_printer_driver_9x_compatible() function
* add a 'mangle prefix' option to allow people to tune the number ofAndrew Tridgell2002-10-211-1/+5
| | | | | | | | | characters used in the prefix for 8.3 names in the hash2 algorithm. The longer the prefix the more readable the 8.3 names will be, but the weaker the hash. this was added because of someone complaining that the new hashing algorithm was unreadable but the old one was broken :)
* Change default of max_xmit to match W2K. Ensure NT negprot uses it.Jeremy Allison2002-10-151-1/+3
| | | | Jeremy.
* removed stat() call in lp_add_home()Gerald Carter2002-10-091-7/+0
|
* Turn on sendfile detection by default in HEAD and 3.0.Jeremy Allison2002-10-051-8/+0
| | | | Jeremy.
* Add a timeout to tdb_lock_bystring(). Ensure we never have more thanJeremy Allison2002-10-041-1/+13
| | | | | MAX_PRINT_JOBS in a queue. Jeremy.
* make the default printed values for boolean the same for all parameters.Herb Lewis2002-10-031-2/+2
|
* Vance picked up a pile of typos etc at the CIFS confernce, and finally got themAndrew Bartlett2002-09-271-2/+2
| | | | | | off his laptop :-) Andrew Bartlett
* When compiled --with-ldapsam, make ldapsam the default passdb backend.Andrew Bartlett2002-09-271-1/+3
| | | | | | | | | | This is to allow painless upgrades from 2.2, and so people don't get a shock when they follow old docs. If ldap has been detected on the system, ldapsam is always available, just not the default. Andrew Bartlett
* Readd the 2.2 --with-ldapsam paramaters so as to allow a smooth upgrade path toAndrew Bartlett2002-09-271-0/+18
| | | | | | | | a 3.0 based PDC. Change defaults to use SSL, so that this also matches. Andrew Bartlett
* Fix the circular dependency that was preventing 'domain master = auto' (theAndrew Bartlett2002-09-251-1/+1
| | | | | | default) from working. Andrew Bartlett
* This patch from "Stefan (metze) Metzmacher" <metze@metzemix.de> cleans upAndrew Bartlett2002-09-251-4/+23
| | | | | | | | | | | | | | | | | | pdb_ldap and adds a 'ldap passwd sync' option. The idea with this option is to do allow an ldap backend to do all the fancy password hashing etc - and to tell smbd no to try and double-up. Using 'ldap passwd sync = only' will do this, but is not recommended unless such a backend is in place... Running 'ldap passwd sync = yes' just gets you the same as doing 'pam passwd sync = yes' and having both PAM and pam_ldap correctly configured for 'magic root' behaviour, but only using ldap connection, and one set of credentials. This also gets us closer to allowing ldap to say 'password too short' etc, which might assist in maintaining a consistant password policy. Andrew Bartlett
* Merge of "profile acls" code.Jeremy Allison2002-09-251-0/+6
| | | | Jeremy.
* Sorry for the new parameter, but I think to really reflect what's comingVolker Lendecke2002-09-211-0/+3
| | | | | | in via deltas, we need a way to set a user's primary group. Volker
* Added "use sendfile" per share option.Jeremy Allison2002-09-181-1/+12
| | | | Jeremy.
* Update to add DEVELOPER option to more parameters.John Terpstra2002-09-161-182/+182
|
generated by cgit (git 2.34.1) at 2025-09-25 08:37:11 +0000