| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
| |
domain name. We were passing in an already initialised string which was
causing the warning.
|
| |
|
|
|
|
|
|
|
|
| |
information into it re the privilaged pipe.
Also clean up some bugs in winbindd_pam.c
Andrew Bartlett
|
|
|
|
| |
patch by Stephan Kulow <coolo@kde.org>)
|
| |
|
|
|
|
|
|
|
| |
the returned session key is the one that we expect to get for that each
of login.
Andrew Bartlett
|
| |
|
|
|
|
|
|
| |
downloading stuff.
Volker
|
|
|
|
|
|
|
| |
we end up with an empty domain field, which a workstation
does not really like in sam_logon..
Volker
|
|
|
|
| |
- Make passdb work with absolute paths (passdb backend = /path/to/smbpasswd.so works now). vfs, rpc and charset will follow
|
| |
|
|
|
|
|
|
| |
please remember to *test* your changes before committing them. This is
especially the case when you receive patches from outside the team -
before you commit you must make sure that the patch actually works.
|
| |
|
| |
|
|
|
|
| |
some double options and broke some parameters.
|
| |
|
|
|
|
|
|
|
|
|
| |
are 'SET' when adding the account.
I really don't like passing flags down to inner routines and
complicated if/else conditions, but this time he might be right. ;-)
Volker
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Add a 'privileged' mode to Winbindd. This is achieved by means of a directory
under lockdir, that the admin can change the group access for.
- This mode is now required to access with 'CRAP' authentication feature.
- This *will* break the current SQUID helper, so I've fixed up our ntlm_auth
replacement:
- Update our NTLMSSP code to cope with 'datagram' mode, where we don't get a
challenge.
- Use this to make our ntlm_auth utility suitable for use in current Squid 2.5
servers.
- Tested - works for Win2k clients, but not Win9X at present. NTLMSSP updates
are needed.
- Now uses fgets(), not x_fgets() to cope with Squid environment (I think
somthing to do with non-blocking stdin).
- Add much more robust connection code to wb_common.c - it will not connect to
a server of a different protocol version, and it will automatically try and
reconnect to the 'privileged' pipe if possible.
- This could help with 'privileged' idmap operations etc in future.
- Add a generic HEX encode routine to util_str.c,
- fix a small line of dodgy C in StrnCpy_fn()
- Correctly pull our 'session key' out of the info3 from th the DC. This is
used in both the auth code, and in for export over the winbind pipe to
ntlm_auth.
- Given the user's challenge/response and access to the privileged pipe,
allow external access to the 'session key'. To be used for MSCHAPv2
integration.
Andrew Bartlett
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* pdbedit -i -e sets all SAM_ACCOUNT elements
to CHANGED to satisfy the new pdb_ldap.c handling
* pdbedit -g transfers group mappings. I made this
separate from the user database, as current installations
have to live with a split backend.
So, if you are running 3_0 alphas with LDAP as a backend
and upgrade to the next 3_0 alpha, you should call
pdbedit -i tdbsam -e ldapsam -g
to transfer your group mapping database to LDAP.
You certainly have to have all your groups as posixGroup
objects in LDAP and adapt the LDAP schema before this
call.
Volker
|
|
|
|
|
|
|
|
| |
- Decode all the database names, even if we don't decode their contents
- Update the 'set' code to match rpc_server/srv_samr_nt.c in only recording
the difference between the old and new.
Andrew Bartlett
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
| |
have some of the labels 'duplicated' (ie, the defines double-up).
Also, to an ads_connect() to try and find our KDC. (So we don't segfualt
*every* time)
Andrew Bartlett
|
|
|
|
|
|
|
|
| |
- signed/unsigned
- quieten warning about assignment as truth value
- whitespace
Andrew Bartlett
|
|
|
|
|
|
| |
Fix an inconpatible poitner type that caused the IA64 not to build
Andrew Bartlett
|
| |
|
|
|
|
|
|
| |
an expected situation.
Andrew Bartlett
|
|
|
|
|
|
| |
of user@realm for kerberos logins.
Andrew Bartlett
|
| |
|
|
|
|
| |
Andrew Bartlett
|
| |
|
|
|
|
| |
- added general options to 'net -h' help
|
| |
|
|
|
|
|
|
|
| |
- More info is printed
- (grand)child domains handled properly
Thanks to Anthony Liguori (aliguori@us.ibm.com)
|
|
|
|
|
|
| |
- Add smb_probe_module()
- Add init_modules()
- Call these functions
|
| |
|
|
|
|
|
|
|
|
|
| |
in general searches, but only if searching for the DN only.
In my case, it was the tokenGroups attribute that caused me trouble, hence
this patch.
Andrew Bartlett
|
|
|
|
|
|
| |
we were overwriting the user's ccache with the machine password (the -P option).
Andrew Bartlett
|
| |
|