| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| | |
|
| |
| |
| |
| | |
generating a warning
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
effective gid which could mean that the user gets group 0 in their
group list for acl interpretation
this is a replacement fix for the one richard did in 2.2 (which didn't
cope wiith variable behaviour depending on which nss module was in
use)
|
| |
| |
| |
| | |
fail sometimes, thats why they are non-blocking :)
|
| |
| |
| |
| |
| |
| | |
enumeration I realised it could be a security hole for setuid progs.
This adds a proper nss function instead.
|
| |
| |
| |
| |
| | |
they will get a const string and return a (t)alloced epanded one.
also modified passdb/* stuff to use this one.
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
a getgr*() function that lists groups without numerating all the
group members. Instead of definiing a new nss method (which might
cause problems) I added an environment variable WINBIND_GETGRLST
that tells winbind not to fill in the group members in a gergrent()
request. This can speed up group listing by a factor of 20 or more
(on my test system with 50000 groups it reduces the time from an hour
to 2 minutes)
|
| |
| |
| |
| | |
Andrew Bartlett
|
| |
| |
| |
| |
| |
| | |
determine what access masks should be applied to various SAMR calls.
Andrew Bartlett
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
The idea here is to allow invalid LM passwords in otherwise valid accounts.
This happens when we create an account without a password, for example.
Previously we would stop at the LM password, and not read things like the
account flags correctly. Now we process the record, and just set the password
to NULL.
(Note, 'no password for access' is decided only on the basis of the Account
Control bits, not on the 'NULL' value of the password feild.).
Andrew Bartlett
|
| |
| |
| |
| | |
warnings (literally!) for the irix compiler
|
| | |
|
| |
| |
| |
| |
| |
| | |
This could do with another eye looking over it, but it seems to work.
Andrew Bartlett
|
| |
| |
| |
| |
| | |
this also gives a way to distinguish a 'native mode' server from a
non-native server. This call will fail for a native mode server.
|
| |
| |
| |
| |
| | |
the current machine account and password. This is useful both for
diagnostics and domain leave.
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
will make it easier to prove this package correct from an audit point of view.
smbumount to follow, but it uses pstrcpy() so I'll need to decide what to do
with that.
Andrew Bartlett
|
| |
| |
| |
| |
| |
| | |
previously. Fix that.
Andrew Bartlett
|
| |
| |
| |
| |
| |
| |
| | |
LM password isn't anything special. All the users check the ACB nowadays,
and this allows us to correctly return flags set via usermgr.
Andrew Bartlett
|
| |
| |
| |
| |
| |
| |
| | |
Allow connection in the form of //server/share instead of just \\server\share
and show the reason for failure from cli_full_connection().
Andrew Bartlett
|
| |
| |
| |
| |
| | |
it turns out this is tricky to get right for both win9x and w2k with
and without unicode. This patch seems to do the trick.
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| | |
- removed an unused variable
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
marshalling/unmarshalling of
security descriptors. We need to calculate the maximum offset and set the offset
back after reading/writing every field in the SEC_DESC.
This was *nasty* to find....
Jeremy.
|
| |
| |
| |
| |
| | |
Fixes addprinterdriverex.
Jeremy.
|
| |
| |
| |
| |
| | |
same name as the machine name exists. (we ended up setting the users
password, not the machines password!)
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
membership from an ADS server. We now use a 'member' query on the
group and do a separate call to convert the resulting distinguished
name to a name, rid etc. This is *much* faster for very large numbers
of groups (on a quantum test system with 10000 groups it drops the
time from an hour to about 35 seconds).
strangely enough, this actually *increases* the amount of ldap
traffic, its just that the MS LDAP server answers these queries much
faster.
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
* DeletePrinterDriverEx() now has the ability to delete
driver files. I need to do some more testing
tro veriofy that we are in fact not deleting a file out from
under another driver, but it looks ok so far.
* DeletePrinterDriver() noiw deletes all versions of the
specified driver (cversion == 0, 1, 2, 3)
|
| |
| |
| |
| | |
a char** isn't quite the same thing as a struct berval** :)
|
| |
| |
| |
| |
| | |
file deletion now. I have the file list.
One more commit should do it.
|
| |
| |
| |
| |
| |
| | |
will actually delete driver files ( not yet though I don't think).
Just wanted to get it in since Jeremy and I are both
working on nt_printing.c
|
| |
| |
| |
| | |
Jeremy.
|
| |
| |
| |
| |
| |
| |
| | |
a separate tdb per printer, but only keeps (currently one) tdb open at
a time (although this is easily changed by changing a #define). Needs
scalability testing with large numbers of printers now....
Jeremy.
|
| |
| |
| |
| |
| |
| | |
Just set it directly.
Andrew Bartlett
|
| | |
|
| |
| |
| |
| |
| | |
Verified by looking at NT4 and 2k servers. First time
for everything I guess.
|