1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-25 17:57:42 +03:00

7562 Commits

Author SHA1 Message Date
Herb Lewis
f881a8f197 ran autoconf -
Herb Lewis
564bfd7728 allow IRIX to build nsswitch/libnss_wins.so -
Herb Lewis
fe0db4c55f add *.po32 to ignore list -
Jean-François Micouleau
d49c8e4d3d added a -V[erbose] option to samsync. Decode a lot of information
I'm looking at chaining the credentials

	J.F.
-
Jean-François Micouleau
8d359e6213 decoded SAM_DELTA 0x0e and 0x12.
One is an entry for the trusted domains
The other is an entry for the trusting domains

They are pretty basic, I'll improve them.

	J.F.
-
Samba Release Account
6daac61894 preparing for release of 3.0-alpha6 -
Jean-François Micouleau
314b675ed9 a ugly decoder for SAM_DELTA_DOM_INFO (0x0d)
a correct decoder for SAM_PRIVS_INFO (0x10)

this code is totally useless right now, it's just fun to decode those and
will save tpot some time.

	J.F.
-
Andrew Tridgell
4e2691b1c1 added "net time zone" command to show the timezone on a computer -
Andrew Tridgell
016e203a2c pam_smbpass updates from a.bokovoy@sam-solutions.net -
Tim Potter
6194f874bb Oops, the -a option disappeared. -
Andrew Tridgell
188e59ae96 ads howto update -
Herb Lewis
5bf6f91937 add PATH_FLAGS to .po32 objects so dynconfig builds with smbwrapper -
Herb Lewis
b9dbb38bf2 sync with 2.2
added multiple include protection
added IRIX defines
-
Jim McDonough
6688781331 Replace backslash with winbind separator before calling parse_domain_user(). Winbind separators other than backslash didn't work. -
Herb Lewis
b110f57e49 fix for IRIX compilers -
Volker Lendecke
5b7a2a2441 Clarify a little
Volker
-
Andrew Tridgell
784a3f2951 allow join of already joined domain -
Andrew Tridgell
3628a978d1 prevent double free -
Jeremy Allison
9e3581827d Fix up warnings. Make tdb_openXX() names const.
Jeremy.
-
Jeremy Allison
b03aaddcf3 Tidyups to remove warnings on tdb standalone code.
Jeremy.
-
Samba Release Account
c5fafb7f79 preparing for release of 3.0-alpha5 -
Andrew Tridgell
8709065246 handle systems without setenv() -
Andrew Tridgell
a181f49b42 handle a NULL hostname in cli_connect() -
Andrew Tridgell
75621d5284 better error handling -
Andrew Tridgell
2183c1f3b0 added a comment about /bin/date -
Andrew Tridgell
b3ba2293d0 added a net time command. Allow display or set of system time based on
a SMB server

particularly useful for ADS is:

	net time set -S DOMAIN#1B

this makes kerberos clock skew problems go away :)
-
Tim Potter
1217ef28a6 Modify winbindd to use authenticated user info from secrets.tdb when making
IPC$ connections to domain controllers.
-
Tim Potter
507003522b Converted wbinfo to use popt instead of getopt - popt is very nice!
Added a --set-auth-user function to set a username and password that can be
used by winbindd when making connections to domain controllers.  This is
necessary when restrictions have been placed on anonymous connections
either through the RestrictAnonymous registry setting, or the win2k Local
Security Policy -> Security Settings -> Local Policies -> Security Options
-> Additional restrictions for anonymous connections.  (phew)

Two new keys are set in secrets.tdb: SECRETS/AUTH_USER and
SECRETS/AUTH_PASSWORD which hold the username and plaintext password of the
user to connect as.

To reset these values, run wbinfo --set-auth-user ""
-
Andrew Tridgell
b4304c5231 detect attempts to connect to names of the type NAME#xx and do a
netbios lookup for name NAME with node type xx.

This affects all our client progs. Very useful :)
-
Andrew Tridgell
cb9dbcef7c allow overriding the local time in kerberos_kinit_password() -
Tim Potter
c87d1ad321 Removed unreferenced getopt() externals. -
Tim Potter
4ef50ef9f7 SAMR query sec obj returns different results depending on which sam handle
it is passed.  Not sure what these different contexts are called or what
they are used for.

 - if a rid is specified to samquerysecobj then use the sam user policy
    handle for that rid
 - if -d is specified then use the sam domain policy handle
 - otherwise just use the sam connect policy handle

JF, any ideas about this?
-
Tim Potter
d1ebd259c8 Grr - people who put const everywhere should fix up all the warnings they
generate.
-
Tim Potter
1dc0e9096d Removed unused variable. -
Tim Potter
59b2e3f408 Doing some research into ACLs on the LSA and SAM policy objects.
- added lsaquerysecobj to rpcclient
 - renamed querysecobj to samquerysecobj
 - removed duplicated display_sec_acl() code from cmd_spoolss.c and
   cmd_samr.c and moved it into display_sec.c
-
Samba Release Account
f2f3183811 preparing for release of 3.0-alpha4 -
Andrew Tridgell
34328e3031 removed the start_ndx parameter from group enumeration
I tried testing this by lowering the buffer size in
cli_samr_enum_dom_groups() but that didn't work - I think this needs
more looking into
-
Tim Potter
83caa883d7 Compile fix. -
Andrew Tridgell
1c909afe76 got rid of start_ndx from query_user_list() -
Jean-François Micouleau
80e36549b6 NT_STATUS(0x80000005) maps to ERRDOS,234
J.F.
-
Jean-François Micouleau
d4bc8f02f7 added enum alias groups to rpcclient -
Andrew Tridgell
d20c3717dd reinstated all the rap commands as top level commands until we get the
protocol switch mechanism in place
-
Andrew Tridgell
be254eb13c moved ccache location change into winbindd code -
Andrew Tridgell
24aa09ff3d robustness fixes and moved ccache location into winbindd_ads code -
Jeremy Allison
919b11a787 Treat RAP codes differently.
Jeremy.
-
Jeremy Allison
3c68b94199 RAP error strings take precedence as they are not encoded in the SMB header
(ie. the call can succeed, but still be an encoded error).
Jeremy.
-
Jim McDonough
55d55e311e Delay gssapi header checking until after kerberos has been located. Wasn't working on RedHat systems because of /usr/kerberos install location. -
Jean-François Micouleau
0a727afc66 added info level 3 to samrgetgroupinfo. I don't know what the value is.
It's just to keep usermanager happy ;-)

clean up a bit samr_query_aliasinfo to return the group description

added: samr_del_aliasmem, samr_del_groupmem and samr_del_domuser

with the correct scripts, you can now entirely manage the users from
usermanager ! Closer to full PDC every day ;-)

        J.F.
-
Martin Pool
83ab28a7e5 Make proto -
Martin Pool
f0878f19eb Add a panic action that tries to call gdb noninteractively to get a
backtrace.   Will break on many machines, but we're already crashed in
this case.
-