summaryrefslogtreecommitdiffstats
path: root/source
Commit message (Collapse)AuthorAgeFilesLines
...
* | Don't leak the session identifier string when we shut down a vuid.Andrew Bartlett2003-04-231-0/+1
| | | | | | | | Andrew Bartlett
* | Now that Volker fixed the real issues with ldapsam and adding null attributesAndrew Bartlett2003-04-231-40/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | etc, move the SAMR create_user code back to using the 'pdb_init_sam_pw' method to fill out the attributes. This is basicly the same code, but we really didn't need the duplication. Also, take advantage of the fact that RIDs will always be returned back into the SAM_ACCOUNT on ADD, so we don't need to duplicate the 'get'. This should also help in sites with replicated LDAP - the second fetch might occour before the first is replicated back. Andrew Bartlett
* | - Merge a memory leak fix from HEADAndrew Bartlett2003-04-231-11/+16
| | | | | | | | | | | | | | | | | | | | | | - change update behaviour for new RIDs: - store the new RID into the SAM_ACCOUNT, so that the caller get's it back automaticly - use this to make the code paths simpiler for the normal 'need_update' code. We must always store a RID if we intend to use the sambaAccount objectClass Andrew Bartlett
* | Merge idra's fix for pdb_tdb segfaults from HEAD to 3.0 - sombody changedAndrew Bartlett2003-04-231-3/+7
| | | | | | | | | | | | unix_strlower semantics. Andrew Bartlett
* | allow the unix group in a mapping to be changed; doesn't work with LDAP ↵Gerald Carter2003-04-231-1/+21
| | | | | | | | right now but should be ok with tdb's
* | Limit the number of outstanding print notify messages for a process toJeremy Allison2003-04-232-1/+39
| | | | | | | | | | 1000. Jeremy.
* | Added Stephen Roylance's patch - Adds to Status page, a Start All, Restart AllJohn Terpstra2003-04-221-9/+38
| | | | | | | | and Stop All deamons button.
* | Remove ldapsam_search_one_user_by_uid from pdb_ldap.Andrew Bartlett2003-04-222-68/+22
| | | | | | | | | | | | | | | | | | | | | | | | sambaAccount requires the rid to be present, and doing this fallback is quite dangerous, becouse it assumes that alorithmic RIDs are in use - which is quite often not the case. Also finish of vl's work on 'use a function pointer, not embedded logic' to tell lower levels that they should/should not attempt to set the user's password into LDAP with the extended operation. Andrew Bartlett
* | don't reset the group type unless specifiedGerald Carter2003-04-221-14/+8
| |
* | update copyright notice that is written to the logsGerald Carter2003-04-221-1/+1
| |
* | Add runtime tests for "impossible" case with -DDEVELOPER. Trying to catch logicJeremy Allison2003-04-221-0/+27
| | | | | | | | | | error on Linux. Jeremy.
* | Added editreg.John Terpstra2003-04-221-1/+6
| |
* | parse_string is only used for the authentication negotiators.Volker Lendecke2003-04-222-11/+13
| | | | | | | | | | | | | | | | | | | | It can itself determine the length of the string it has to transfer. Andrew B., could you take a look at the length calculation? Is that safe? Thanks, Volker
* | This is meant to be initialised to the size of the buffer.Andrew Bartlett2003-04-221-1/+1
| |
* | Add configure test for previous ldap modifications - we now check if theAndrew Bartlett2003-04-221-0/+1
| | | | | | | | | | | | ldap_initialze function exists, not just if we are on a particular OpenLDAP. Andrew Bartlett
* | Make pdb_ldap use a random factor in deciding how long we need to sleep.Andrew Bartlett2003-04-221-7/+22
| | | | | | | | | | | | | | | | | | | | This might help avoid killing the ldap server when all 100 smbd processes reconnect in pulses... Also, reduces the maximum wait time, as SMB clients will time out after 30 seconds anyway... Andrew Bartlett
* | Merge (HEAD->3.0) mbp's fixes to our charcnv code - don't use a staic buffer,Andrew Bartlett2003-04-221-12/+33
| | | | | | | | | | | | which can restrict things like unix_strupper() to 512 byte strings. Andrew Bartlett
* | Merge mimir's trusted domain code from HEAD -> 3.0, plus some memoryAndrew Bartlett2003-04-221-37/+55
| | | | | | | | | | | | leak fixes. (secrets.c portion) Andrew Bartlett
* | Merge comment with HEADAndrew Bartlett2003-04-221-3/+3
| |
* | Start merging mimir's trusted domain code from HEAD to 3.0. (for HEAD trustingAndrew Bartlett2003-04-222-8/+147
| | | | | | | | NT).
* | Setting the credentials for the netsec netlogon pipe connect upon eachVolker Lendecke2003-04-222-8/+5
| | | | | | | | | | | | | | samlogon call certainly breaks the credential chain. Do it once during the bind response. Volker
* | Oops...Andrew Bartlett2003-04-221-1/+1
| | | | | | | | Andrew Bartlett
* | Make our 'get DNS domain name' code try a bit harder - if gethostname() doesn'tAndrew Bartlett2003-04-222-9/+32
| | | | | | | | | | | | | | | | | | | | | | | | | | include a domain portion, do a gethostbyname() lookup on that name. Use this name in our PolicyPrimaryDomainInformation reply (_lsa_query_info2) that Win2k uses when trying to trust us as a trusted domain. (We need to do a better mapping between our Netbios and Win2k domain names, but this will do for now - particularly annoying is the way this possibly needs to map with our kerberos realm). Andrew Bartlett
* | default new groups to domain groupsGerald Carter2003-04-221-3/+3
| |
* | Fix up bugs in the new 'store sec_channel type' code - we were always joiningAndrew Bartlett2003-04-222-6/+4
| | | | | | | | | | | | as a BDC. Andrew Bartlett
* | support referencing group by sid in all operations; allow group name to be ↵Gerald Carter2003-04-221-13/+60
| | | | | | | | changed
* | wrap pdb_enum_group_mapping() in [un]become_root() so LDAP queries can get ↵Gerald Carter2003-04-221-0/+5
| | | | | | | | the credentials from secrets.tdb
* | removing some ifdef'd out codeGerald Carter2003-04-221-8/+0
| |
* | Tidyups of some dubious logic discovered whilst trying to track down aJeremy Allison2003-04-222-7/+6
| | | | | | | | | | strange oplock related issue on the PSA. Jeremy.
* | Fixup a few typos for Jerry.Jeremy Allison2003-04-211-4/+4
| | | | | | | | Jeremy.
* | * fix segfault when no vfs objects definedGerald Carter2003-04-213-8/+18
| | | | | | | | * add "sid=..." to 'net groupmap add'
* | Make it easier to select which domain to show the sid for.Andrew Bartlett2003-04-211-2/+2
| |
* | Merge from HEAD - save the type of channel used to contact the DC.Andrew Bartlett2003-04-2124-201/+360
| | | | | | | | | | | | | | | | | | | | | | This allows us to join as a BDC, without appearing on the network as one until we have the database replicated, and the admin changes the configuration. This also change the SID retreval order from secrets.tdb, so we no longer require a 'net rpc getsid' - the sid fetch during the domain join is sufficient. Also minor fixes to 'net'. Andrew Bartlett
* | Add const, static and fix a double free() (merge from HEAD).Andrew Bartlett2003-04-211-6/+5
| |
* | Merge whitespace and const from HEADAndrew Bartlett2003-04-211-9/+9
| |
* | Header updates for smb signing mergeAndrew Bartlett2003-04-211-3/+4
| |
* | Merge SMB signing, cli buffer clobber and NTLMSSP signing tweaks from HEAD.Andrew Bartlett2003-04-215-20/+50
| |
* | Default to "passdb.xml" as default output filename instead of "-"Jelmer Vernooij2003-04-211-1/+1
| |
* | - Fix modules build of pdb_mysql and pdb_xmlJelmer Vernooij2003-04-213-10/+4
| | | | | | | | - Fix typo in script/installswat.sh
* | Pdb modules are in $libdir/pdb not $libdir/passdbJelmer Vernooij2003-04-211-1/+1
| |
* | Merge a trivial fix across from HEAD. Not that thisVolker Lendecke2003-04-201-1/+1
| | | | | | | | | | | | would work now... Volker
* | Address gcc warnings.Volker Lendecke2003-04-191-1/+5
| | | | | | | | | | | | | | I could not fix the "passing arg 5 of `ldap_search_s'" completely with gcc -Wall. A non-developer compile does not complain though. Volker
* | Added smbgroupedit to PROGS2John Terpstra2003-04-191-1/+1
| |
* | use gid_t for gids not uid_tSimo Sorce2003-04-191-1/+1
| |
* | Merging smbgroupedit into 'net groupmap'. Not entirely done.Gerald Carter2003-04-194-2/+463
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Need to check on where the privilege code is sitting and update the docs. Examples: root# bin/net help groupmap net groupmap add Create a new group mapping net groupmap modify Update a group mapping net groupmap delete Remove a group mapping net groupmap list List current group map # bin/net groupmap add Usage: net groupmap add rid=<int> name=<string> type=<domain|local|builtin> [comment=<string>] # bin/net groupmap delete Usage: net groupmap delete name=<string|SID> # bin/net groupmap modify Usage: net groupmap modify name=<string|SID> [comment=<string>] [type=<domain|local>
* | 'vfs object' is a list not a string (we have cascaded VFS modules in 3_0 asJelmer Vernooij2003-04-181-20/+3
| | | | | | | | well now)
* | fix byte ordering when using CIDR notation in hosts allow/deny; spotted by ↵Gerald Carter2003-04-181-0/+4
| | | | | | | | Eloy Paris
* | Survive a samdump with an alias that has no descriptionVolker Lendecke2003-04-181-3/+6
| | | | | | | | Volker
* | fixing torture build by merging code from HEADGerald Carter2003-04-182-892/+1359
| |
* | Do not use lp_parm_bool() and lp_parm_ulong() yet. They're only in HEADJelmer Vernooij2003-04-171-138/+72
| |