Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | | Don't leak the session identifier string when we shut down a vuid. | Andrew Bartlett | 2003-04-23 | 1 | -0/+1 | |
| | | | | | | | | Andrew Bartlett | |||||
* | | Now that Volker fixed the real issues with ldapsam and adding null attributes | Andrew Bartlett | 2003-04-23 | 1 | -40/+8 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | etc, move the SAMR create_user code back to using the 'pdb_init_sam_pw' method to fill out the attributes. This is basicly the same code, but we really didn't need the duplication. Also, take advantage of the fact that RIDs will always be returned back into the SAM_ACCOUNT on ADD, so we don't need to duplicate the 'get'. This should also help in sites with replicated LDAP - the second fetch might occour before the first is replicated back. Andrew Bartlett | |||||
* | | - Merge a memory leak fix from HEAD | Andrew Bartlett | 2003-04-23 | 1 | -11/+16 | |
| | | | | | | | | | | | | | | | | | | | | | | - change update behaviour for new RIDs: - store the new RID into the SAM_ACCOUNT, so that the caller get's it back automaticly - use this to make the code paths simpiler for the normal 'need_update' code. We must always store a RID if we intend to use the sambaAccount objectClass Andrew Bartlett | |||||
* | | Merge idra's fix for pdb_tdb segfaults from HEAD to 3.0 - sombody changed | Andrew Bartlett | 2003-04-23 | 1 | -3/+7 | |
| | | | | | | | | | | | | unix_strlower semantics. Andrew Bartlett | |||||
* | | allow the unix group in a mapping to be changed; doesn't work with LDAP ↵ | Gerald Carter | 2003-04-23 | 1 | -1/+21 | |
| | | | | | | | | right now but should be ok with tdb's | |||||
* | | Limit the number of outstanding print notify messages for a process to | Jeremy Allison | 2003-04-23 | 2 | -1/+39 | |
| | | | | | | | | | | 1000. Jeremy. | |||||
* | | Added Stephen Roylance's patch - Adds to Status page, a Start All, Restart All | John Terpstra | 2003-04-22 | 1 | -9/+38 | |
| | | | | | | | | and Stop All deamons button. | |||||
* | | Remove ldapsam_search_one_user_by_uid from pdb_ldap. | Andrew Bartlett | 2003-04-22 | 2 | -68/+22 | |
| | | | | | | | | | | | | | | | | | | | | | | | | sambaAccount requires the rid to be present, and doing this fallback is quite dangerous, becouse it assumes that alorithmic RIDs are in use - which is quite often not the case. Also finish of vl's work on 'use a function pointer, not embedded logic' to tell lower levels that they should/should not attempt to set the user's password into LDAP with the extended operation. Andrew Bartlett | |||||
* | | don't reset the group type unless specified | Gerald Carter | 2003-04-22 | 1 | -14/+8 | |
| | | ||||||
* | | update copyright notice that is written to the logs | Gerald Carter | 2003-04-22 | 1 | -1/+1 | |
| | | ||||||
* | | Add runtime tests for "impossible" case with -DDEVELOPER. Trying to catch logic | Jeremy Allison | 2003-04-22 | 1 | -0/+27 | |
| | | | | | | | | | | error on Linux. Jeremy. | |||||
* | | Added editreg. | John Terpstra | 2003-04-22 | 1 | -1/+6 | |
| | | ||||||
* | | parse_string is only used for the authentication negotiators. | Volker Lendecke | 2003-04-22 | 2 | -11/+13 | |
| | | | | | | | | | | | | | | | | | | | | It can itself determine the length of the string it has to transfer. Andrew B., could you take a look at the length calculation? Is that safe? Thanks, Volker | |||||
* | | This is meant to be initialised to the size of the buffer. | Andrew Bartlett | 2003-04-22 | 1 | -1/+1 | |
| | | ||||||
* | | Add configure test for previous ldap modifications - we now check if the | Andrew Bartlett | 2003-04-22 | 1 | -0/+1 | |
| | | | | | | | | | | | | ldap_initialze function exists, not just if we are on a particular OpenLDAP. Andrew Bartlett | |||||
* | | Make pdb_ldap use a random factor in deciding how long we need to sleep. | Andrew Bartlett | 2003-04-22 | 1 | -7/+22 | |
| | | | | | | | | | | | | | | | | | | | | This might help avoid killing the ldap server when all 100 smbd processes reconnect in pulses... Also, reduces the maximum wait time, as SMB clients will time out after 30 seconds anyway... Andrew Bartlett | |||||
* | | Merge (HEAD->3.0) mbp's fixes to our charcnv code - don't use a staic buffer, | Andrew Bartlett | 2003-04-22 | 1 | -12/+33 | |
| | | | | | | | | | | | | which can restrict things like unix_strupper() to 512 byte strings. Andrew Bartlett | |||||
* | | Merge mimir's trusted domain code from HEAD -> 3.0, plus some memory | Andrew Bartlett | 2003-04-22 | 1 | -37/+55 | |
| | | | | | | | | | | | | leak fixes. (secrets.c portion) Andrew Bartlett | |||||
* | | Merge comment with HEAD | Andrew Bartlett | 2003-04-22 | 1 | -3/+3 | |
| | | ||||||
* | | Start merging mimir's trusted domain code from HEAD to 3.0. (for HEAD trusting | Andrew Bartlett | 2003-04-22 | 2 | -8/+147 | |
| | | | | | | | | NT). | |||||
* | | Setting the credentials for the netsec netlogon pipe connect upon each | Volker Lendecke | 2003-04-22 | 2 | -8/+5 | |
| | | | | | | | | | | | | | | samlogon call certainly breaks the credential chain. Do it once during the bind response. Volker | |||||
* | | Oops... | Andrew Bartlett | 2003-04-22 | 1 | -1/+1 | |
| | | | | | | | | Andrew Bartlett | |||||
* | | Make our 'get DNS domain name' code try a bit harder - if gethostname() doesn't | Andrew Bartlett | 2003-04-22 | 2 | -9/+32 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | include a domain portion, do a gethostbyname() lookup on that name. Use this name in our PolicyPrimaryDomainInformation reply (_lsa_query_info2) that Win2k uses when trying to trust us as a trusted domain. (We need to do a better mapping between our Netbios and Win2k domain names, but this will do for now - particularly annoying is the way this possibly needs to map with our kerberos realm). Andrew Bartlett | |||||
* | | default new groups to domain groups | Gerald Carter | 2003-04-22 | 1 | -3/+3 | |
| | | ||||||
* | | Fix up bugs in the new 'store sec_channel type' code - we were always joining | Andrew Bartlett | 2003-04-22 | 2 | -6/+4 | |
| | | | | | | | | | | | | as a BDC. Andrew Bartlett | |||||
* | | support referencing group by sid in all operations; allow group name to be ↵ | Gerald Carter | 2003-04-22 | 1 | -13/+60 | |
| | | | | | | | | changed | |||||
* | | wrap pdb_enum_group_mapping() in [un]become_root() so LDAP queries can get ↵ | Gerald Carter | 2003-04-22 | 1 | -0/+5 | |
| | | | | | | | | the credentials from secrets.tdb | |||||
* | | removing some ifdef'd out code | Gerald Carter | 2003-04-22 | 1 | -8/+0 | |
| | | ||||||
* | | Tidyups of some dubious logic discovered whilst trying to track down a | Jeremy Allison | 2003-04-22 | 2 | -7/+6 | |
| | | | | | | | | | | strange oplock related issue on the PSA. Jeremy. | |||||
* | | Fixup a few typos for Jerry. | Jeremy Allison | 2003-04-21 | 1 | -4/+4 | |
| | | | | | | | | Jeremy. | |||||
* | | * fix segfault when no vfs objects defined | Gerald Carter | 2003-04-21 | 3 | -8/+18 | |
| | | | | | | | | * add "sid=..." to 'net groupmap add' | |||||
* | | Make it easier to select which domain to show the sid for. | Andrew Bartlett | 2003-04-21 | 1 | -2/+2 | |
| | | ||||||
* | | Merge from HEAD - save the type of channel used to contact the DC. | Andrew Bartlett | 2003-04-21 | 24 | -201/+360 | |
| | | | | | | | | | | | | | | | | | | | | | | This allows us to join as a BDC, without appearing on the network as one until we have the database replicated, and the admin changes the configuration. This also change the SID retreval order from secrets.tdb, so we no longer require a 'net rpc getsid' - the sid fetch during the domain join is sufficient. Also minor fixes to 'net'. Andrew Bartlett | |||||
* | | Add const, static and fix a double free() (merge from HEAD). | Andrew Bartlett | 2003-04-21 | 1 | -6/+5 | |
| | | ||||||
* | | Merge whitespace and const from HEAD | Andrew Bartlett | 2003-04-21 | 1 | -9/+9 | |
| | | ||||||
* | | Header updates for smb signing merge | Andrew Bartlett | 2003-04-21 | 1 | -3/+4 | |
| | | ||||||
* | | Merge SMB signing, cli buffer clobber and NTLMSSP signing tweaks from HEAD. | Andrew Bartlett | 2003-04-21 | 5 | -20/+50 | |
| | | ||||||
* | | Default to "passdb.xml" as default output filename instead of "-" | Jelmer Vernooij | 2003-04-21 | 1 | -1/+1 | |
| | | ||||||
* | | - Fix modules build of pdb_mysql and pdb_xml | Jelmer Vernooij | 2003-04-21 | 3 | -10/+4 | |
| | | | | | | | | - Fix typo in script/installswat.sh | |||||
* | | Pdb modules are in $libdir/pdb not $libdir/passdb | Jelmer Vernooij | 2003-04-21 | 1 | -1/+1 | |
| | | ||||||
* | | Merge a trivial fix across from HEAD. Not that this | Volker Lendecke | 2003-04-20 | 1 | -1/+1 | |
| | | | | | | | | | | | | would work now... Volker | |||||
* | | Address gcc warnings. | Volker Lendecke | 2003-04-19 | 1 | -1/+5 | |
| | | | | | | | | | | | | | | I could not fix the "passing arg 5 of `ldap_search_s'" completely with gcc -Wall. A non-developer compile does not complain though. Volker | |||||
* | | Added smbgroupedit to PROGS2 | John Terpstra | 2003-04-19 | 1 | -1/+1 | |
| | | ||||||
* | | use gid_t for gids not uid_t | Simo Sorce | 2003-04-19 | 1 | -1/+1 | |
| | | ||||||
* | | Merging smbgroupedit into 'net groupmap'. Not entirely done. | Gerald Carter | 2003-04-19 | 4 | -2/+463 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Need to check on where the privilege code is sitting and update the docs. Examples: root# bin/net help groupmap net groupmap add Create a new group mapping net groupmap modify Update a group mapping net groupmap delete Remove a group mapping net groupmap list List current group map # bin/net groupmap add Usage: net groupmap add rid=<int> name=<string> type=<domain|local|builtin> [comment=<string>] # bin/net groupmap delete Usage: net groupmap delete name=<string|SID> # bin/net groupmap modify Usage: net groupmap modify name=<string|SID> [comment=<string>] [type=<domain|local> | |||||
* | | 'vfs object' is a list not a string (we have cascaded VFS modules in 3_0 as | Jelmer Vernooij | 2003-04-18 | 1 | -20/+3 | |
| | | | | | | | | well now) | |||||
* | | fix byte ordering when using CIDR notation in hosts allow/deny; spotted by ↵ | Gerald Carter | 2003-04-18 | 1 | -0/+4 | |
| | | | | | | | | Eloy Paris | |||||
* | | Survive a samdump with an alias that has no description | Volker Lendecke | 2003-04-18 | 1 | -3/+6 | |
| | | | | | | | | Volker | |||||
* | | fixing torture build by merging code from HEAD | Gerald Carter | 2003-04-18 | 2 | -892/+1359 | |
| | | ||||||
* | | Do not use lp_parm_bool() and lp_parm_ulong() yet. They're only in HEAD | Jelmer Vernooij | 2003-04-17 | 1 | -138/+72 | |
| | |