| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
| |
| |
| | |
Guenther
|
| |
| |
| |
| |
| |
| | |
more precise inline comment why PAC verification may fail.
Guenther
|
| |
| |
| |
| | |
Jeremy.
|
| |
| |
| |
| |
| | |
attribute errors.
Jeremy.
|
| |
| |
| |
| |
| | |
Fix bug #3274 from Guenter Kukkukk <guenter.kukkukk@kukkukk.com>
Jeremy.
|
| |
| |
| |
| | |
Richard Bollinger
|
| |
| |
| |
| | |
for some common services
|
| |
| |
| |
| |
| | |
<dtucker@zip.com.au>
Jeremy.
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
client behaviour (ie.:
open pipe/open SAMR handle/enumerate 0 - 1024
close SAMR handle, close pipe.
open pipe/open SAMR handle/enumerate 1024 - 2048...
close SAMR handle, close pipe.
And on ad-nausium. Amazing.... probably object-oriented
client side programming in action yet again.
This change should *massively* improve performance when
enumerating users from an LDAP database.
Jeremy.
|
| |
| |
| |
| | |
Guenther
|
| |
| |
| |
| | |
Win9x or the do_cd() call will fail
|
| |
| |
| |
| |
| |
| | |
if changing to support samr_connect5 might help so quickly coded
it up. No it doesn't :-(. Don't merge this for 3.0.21 please.
Jeremy.
|
| |
| |
| |
| | |
Jeremy.
|
| |
| |
| |
| | |
Jeremy.
|
| | |
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
This feature got broken in some of the other updates.
Now each open handle stores an pointer to an open tdb
data structure (not the tdb pointer itself).
Clearing can be done with a simple elog_close_tdb( elog, True )
to force a close and then calling elog_open_tdb( logname, True )
to force an tdb truncate. Permissions on existing tdbs are
maintained which is important.
* We don't currently handle backup. Haven't looked at the
format of a backuped up eventlog to know what the deal is.
|
| |
| |
| |
| | |
better now as well but needs more testing
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
configure.in
needs something along the lines of
if [ $LOGNAME == "jht" ]
then
CFLAGS="$CFLAGS -DDEVELOPER"
fi
But that goes a bit far I think.... :-)))
Volker
|
| | |
|
| |
| |
| |
| |
| | |
Pointed out by timur@com.bat.ru.
Jeremy.
|
| |
| |
| |
| | |
#3260.
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Revert jerry's revert from 11685. :)
At the moment I don't see a way to check if there is an empty
${SMBWRAPPER} or none. If there is a way to check if ${SMBWRAPPER}
isn't set at all we could make the installman script even work if
config.log does not exist.
|
| | |
|
| |
| |
| |
| |
| |
| |
| | |
any code that includes libsmbclient.h that also calls the
system close() fn. Doh ! Thanks to John Terpstra for
reporting this.
Jeremy.
|
| |
| |
| |
| | |
Jeremy.
|
| |
| |
| |
| | |
Volker
|
| |
| |
| |
| |
| |
| |
| |
| | |
you the IP
address but also the fqdn of the remote dc and site info.
Volker
|
| | |
|
| |
| |
| |
| | |
'make installman' outside the source tree; will fix up after the rc1 release
|
| | |
|
| |
| |
| |
| |
| |
| |
| | |
Also remove the mem_ctx from the netsamlogon_cache_store() API.
Guenther, what should we be doing with the other fields in
the PAC_LOGON_INFO?
|
| |
| |
| |
| |
| |
| |
| |
| |
| | |
'NTSTATUS'
declaration before their call.
The compiler sees : { NTSTATUS fn_foo(); NT_STATUS fn_bar(); }
as *definitions: They need to be : { fn_foo(); fn_bar(); }
Jeremy.
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
* remove redundant call to sub_set_smb_name() in session setup code.
* Fix lockup when running 'wbinfo -t' on a Samba PDC. Cause
was new authenticated session setup from winbindd which
resulted in a mangled username (machine_) that was not found
in the local files and so was queiued up to nss_winbindd.
Deadlock....
So now make sure to keep the trailing '$' for machine account
names when calling sub_set_smb_name().
|
| |
| |
| |
| |
| |
| |
| | |
functions.
Some compilers (guess whose) have ABIs that return int values using a
different method than returning struct values.
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
around failed query_user calls. This fixes
logons to a member of a Samba domain as a user from a
trusted AD domain.
As per comments on samba-technical, I still need to add
(a) cache the PAC info as werll as NTLM net_user_info_3
(b) expire the cache when the SMB session goes away
Both Jeremy and Guenther have signed off on the idea.
|
| |
| |
| |
| | |
Still needs some more testing ni domains with multiple DCs. Coming next....
|
| | |
|
| |
| |
| |
| |
| |
| | |
* COPYRIGHT (C) 1986 Gary S. Brown. You may use this program, or
* code or tables extracted from it, as desired without restriction.
Jeremy.
|
| | |
|
| | |
|
| |
| |
| |
| | |
Volker
|
| |
| |
| |
| | |
fix copy/paste error
|
| |
| |
| |
| |
| |
| |
| |
| | |
Fixed "clean" target -- bin/libmsrpc.a was not being deleted.
Jerry, the shared version of libmsrpc is not using a version number. For consistency, I added LIBMSRPC_MAJOR and LIBMSRPC_MINOR definitions but they are not
currently being used. I don't know if the non-use of version is intentional
or not.
|
| |
| |
| |
| | |
winbindd_dual_getsidaliases()
|
| | |
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
logons work if the client gives the MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT
or MSV1_0_ALLOW_WORKSTATION_TRUST_ACCOUNT flags. This changes
the auth module interface to 2 (from 1). The effect of this is
that clients can access resources as a machine account if they
set these flags. This is the same as Windows (think of a VPN
where the vpn client authenticates itself to a VPN server
using machine account credentials - the vpn server checks
that the machine password was valid by performing a machine
account check with the PDC in the same was as it would a
user account check. I may add in a restriction (parameter)
to allow this behaviour to be turned off (as it was previously).
That may be on by default.
Andrew Bartlett please review this change carefully.
Jeremy.
|
| |
| |
| |
| | |
Jeremy.
|
| |
| |
| |
| |
| | |
Pointed out by Jay Fanlason @ Red Hat.
Jeremy.
|