sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-12-07 20:23:50 +03:00
Code Activity
22,895 Commits 64 Branches 1,179 Tags
06d0c74b74754c55f4c8ef0899bda08476e7dd4b
Commit Graph

229 Commits

Author SHA1 Message Date
Andrew Bartlett
ab8ff85f03 Fix up 'net ads join' to delete and rejoin if the account already exists. 
This fixes up a problem where a machine would join (or downgrade by trust
password change) to NT4 membership and not be able to regain full ADS
membership until a 'net ads leave'.

Andrew Bartlett
 -
Andrew Tridgell
f383e19e09 added nTSecurityDescriptor field to host acct dump -
Andrew Bartlett
14407c87e2 Make Samba compile on RH 6.2 again. 
We now include the libber.h file if required, but currently we just don't use
ldap.  (I'll chase this up).

In the meantime, I've moved the ads_status code about, its now in its own file,
and has a couple of #ifdefs to allow smbd to link - becouse the lack of LDAP
caused HAVE_ADS to be undefined. (I hope its not too ugly).

Andrew Bartlett
 -
Andrew Tridgell
ff002a458a added ads_domain_sid() function -
Andrew Tridgell
412e79c448 net ads password and net ads chostpass commands from Remus Koos -
Andrew Tridgell
05a90a2884 much better ADS error handling system -
Andrew Tridgell
ee1c3e1f04 - added initial support for trusted domains in winbindd_ads 
- gss error code patch from a.bokovoy@sam-solutions.net
- better sid dumping in ads_dump
- fixed help in wbinfo
 -
Andrew Tridgell
f1231c2b54 allow selection of the organisational unit when joining a realm -
Andrew Tridgell
4a6d297686 make sid_binstring available without HAVE_ADS -
Andrew Tridgell
18da530293 fix a DEBUG() line -
Andrew Tridgell
435fdf276a added internal sasl/gssapi code. This means we are no longer dependent on cyrus-sasl which makes the code much less fragile. Also added code to auto-determine the server name or realm -
Andrew Tridgell
3ace8f1fcc added a propoer kerberos_kinit_password call 
contribution from remus@snapserver.com

thanks!
 -
Andrew Tridgell
5985d7e6ee fixed a minor password memory leak -
Andrew Tridgell
0d85815c99 handle ldap server down better -
Andrew Tridgell
7d94f1b736 added a REALLY gross hack into kerberos_kinit_password so that 
winbindd can do a kinit
this will be removed once we have code that gets a tgt
and puts it in a place where cyrus-sasl can see it
 -
Andrew Tridgell
4f004eb54d added timeouts and retries to ldap operations -
Andrew Tridgell
9a084f0bb9 moved the sequence number fetch into the backend, and fetch the 
sequence number via ldap when using ads
 -
Andrew Tridgell
13b933104e paranoia fixes in based ldap routines for potential memory leaks -
Andrew Tridgell
eb6f0e91dd more memory leak fixes -
Andrew Tridgell
31d6d049b3 added functions that convert a ads binary blob to a string (for 
searching on SID)
 -
Andrew Tridgell
bc83d55f44 added ads_search_dn() and ads_pull_sids() -
Andrew Tridgell
88241cab98 added a basic ADS backend to winbind. More work needed, but at 
least basic operations work
 -
Andrew Bartlett
8f9ce71781 Make better use of the ads_init() function to get the kerberos relam etc. 
This allows us to use automagically obtained values in future, and the value
from krb5.conf now.

Also fix mem leaks etc.

Andrew Bartlett
 -
Andrew Tridgell
e2ba2383c9 fix a bunch of places where we can double-free a cli structure -
Andrew Tridgell
f482583139 added "net ads user" and "net ads group" commands -
Andrew Tridgell
ae0eabd04c added "net ads status" command -
Andrew Tridgell
69d256af46 better auto-selection of realm and ldap server -
Andrew Tridgell
058a5aee90 added "net join" command 
this completes the first stage of the smbd ADS support
 -
Andrew Tridgell
c7f6116919 added the beginnings of ADS support in smbd -