1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-28 17:47:29 +03:00

1376 Commits

Author SHA1 Message Date
Volker Lendecke
154d5f913b r3566: Completely replace the queryuseraliases call. The previous implementation does
not exactly match what you would expect.

XP workstations during login actually do this, so we should better become a
bit more correct. The LDAP query issued is not really fully optimal, but it is
a lot faster and more correct than what was there before. The change in
passdb.h makes it possible that queryuseraliases is done with a single ldap
query.

Volker
(This used to be commit 2508d4ed1e16c268fc9f3676b0c6a122e070f93d)
2007-10-10 10:53:09 -05:00
Jeremy Allison
917a53cc58 r3492: Fixes from testing kerberos salted principal fix.
Jeremy.
(This used to be commit b356a8fdc5a1ac45f2f7f56a0836e794bdecddc6)
2007-10-10 10:53:07 -05:00
Jeremy Allison
0772ddbae1 r3377: Merge in first part of modified patch from Nalin Dahyabhai <nalin@redhat.com>
for bug #1717.The rest of the code needed to call this patch has not yet been
checked in (that's my next task). This has not yet been tested - I'll do this
once the rest of the patch is integrated.
Jeremy.
(This used to be commit 7565019286cf44f43c8066c005b1cd5c1556435f)
2007-10-10 10:53:05 -05:00
Jeremy Allison
f8345c1b18 r3273: Ensure we're consistent in the use of strchr_m for '@'.
Jeremy.
(This used to be commit 0f3f7b035b37bfc51d3a59d0472003c3d4ac1511)
2007-10-10 10:53:03 -05:00
Günther Deschner
3eff1f48d5 r2942: Add client-side support of triggering ads printer publishing over msrpc
setprinter calls inside the net-tool.

This is usefull to mimic the same queries a windows-client does. At
least win2k returns WERR_IO_PENDING when printer is published via
setprinter, samba returns WERR_OK but this does not hurt.

Guenther
(This used to be commit 69b745fb98b8054d1f52e8a3fe3b933fb04336db)
2007-10-10 10:52:57 -05:00
Volker Lendecke
e66c8217f8 r2935: This is a long-standing one in my patch-queue: A pair of net commands
(usersidlist/allowedusers) to scan a file server's share and list all users
who have permission to connect there.

Volker
(This used to be commit f7f84aa1ded70af3882e4122f34d5c7eed746993)
2007-10-10 10:52:57 -05:00
Günther Deschner
d15e6af706 r2852: Oh. Allow to migrate win2k3/xp-drivers as well.
Thanks to Bjoern Jacke for his moral support :)

Guenther
(This used to be commit ab875d3ecf3a80f5648432f7f4573f57442e6698)
2007-10-10 10:52:55 -05:00
Günther Deschner
e81aa8c59e r2837: Fix printer-migration w.r.t. to new naming-convention for
policy-handles. Also remove some unused vars.

Guenther
(This used to be commit 5181c1b2192d1802616e8c30cd9458c00a306a46)
2007-10-10 10:52:55 -05:00
Tim Potter
b4cf9e9505 r2835: Since we always have -I. and -I$(srcdir) in CFLAGS, we can get rid of
'..' from all #include preprocessor commands.   This fixes bugzilla #1880
where OpenVMS gets confused about the '.' characters.
(This used to be commit 7f161702fa4916979602cc0295919b541912acd6)
2007-10-10 10:52:55 -05:00
Günther Deschner
132879b285 r2832: Readd WKGUID-binding to match the correct default-locations of new
User-, Group- and Machine-Accounts in Active Directory (this got lost
during the last trunk-merge).

This way we match e.g. default containers moved by redircmp.exe and
redirusr.exe in Windows 2003 and don't blindly default to cn=Users or
cn=Computers.

Further wkguids can be examied via "net ads search wellknownobjects=*".
This should still keep a samba3-client joining a samba4 dc. Fixes
Bugzilla #1343.

Guenther
(This used to be commit 8836621694c95779475fa9a1acf158e5e0577288)
2007-10-10 10:52:54 -05:00
Jelmer Vernooij
1cc0c7414a r2826: Complain if 'password chat' doesn't contain the %u variable. based on a patch by Ronan Waide
(This used to be commit a48b3b291cfe5883da1a36b368ddf725b5ff9375)
2007-10-10 10:52:54 -05:00
Günther Deschner
2d016a67b8 r2821: Adding "Windows x64" as architecture string and driverdir "x64" for the
64bit AMD platform.

(This used to be "Windows AMD64" and "AMD64" in one of the release
candidates of SP2 for Windows XP. AMD64 is obviously still supported but
not documented.)

Guenther
(This used to be commit cc5892f0411b8eb5daebe746164a2cf21d3d4c68)
2007-10-10 10:52:53 -05:00
Andrew Bartlett
f219db7d69 r2762: Remove silly conversion to and from UTF8 on the winbind pipe. Fix the
naming of the require_membership_of parameter in pam_winbind and fix
the error code for 'you didn't specify a domain' in ntlm_auth.

Andrew Bartlett
(This used to be commit 4bf0b94011fe6bfbec5635e58cafbfe3dc898569)
2007-10-10 10:52:51 -05:00
Günther Deschner
676aa559fe r2746: Fix typos in net's usage-output.
Guenther
(This used to be commit 4886d6663d7479978e2c395602392accb5939fa0)
2007-10-10 10:52:50 -05:00
Christopher R. Hertel
4a96fb5d12 r2706: The code that prints the remote MAC address (from the statistics section
of the response packet) was outside of the if() that determined whether
the query was successful or not.  As a result, the MAC address would print
out even if there was no MAC address.  At least the garbage it printed was
relatively consistent.  :)

I moved the MAC printing into the if() block and added an 'else' to print
"No reply..." if the query fails.

Chris -)-----
(This used to be commit 2a5d66791fa5e1b19e0ec9072af254142245d0c2)
2007-10-10 10:52:49 -05:00
Günther Deschner
f81761600c r2477: Document "--destination" for "net rpc [printer|share] migrate".
Guenther
(This used to be commit 4aa670385f81ab3d90a2c5dd8ba6e0190f947452)
2007-10-10 10:52:45 -05:00
Günther Deschner
d25aba1d14 r2476: now that PRINTER_ATTRIBUTE_PUBLISHED does not get reset anymore, migrate
the publishing-state for migrated printers as well.

Therefor added client-side-support for setprinter level 7.

Next will be a "net rpc printer publish"-command (just for completeness).

Guenther
(This used to be commit 224920738fdc65ef170152062177421cfed85bbf)
2007-10-10 10:52:45 -05:00
Stefan Metzmacher
10e4a96b53 r2388: fix client quota support
for the client we need the windows path and for server we need unix path

metze
(This used to be commit 54fd28f5e7b70ce2b192c2037ce28da3fea9ef92)
2007-10-10 10:52:42 -05:00
Stefan Metzmacher
fe69a5e28d r2348: fix segmention faults
in smbcquotas and smbcacls caused by setup_logging() (-r 1425)

metze
(This used to be commit 39f3f76ea2097c10799f0bef8717d3ac71cacaa8)
2007-10-10 10:52:40 -05:00
Andrew Bartlett
f4c2e60ed0 r2147: Fix utility name in error message (pre-emptivly merged to trunk ;-)
Andrew Bartlett
(This used to be commit 657bb14789bcec65668d072fec0f954d1e5322ef)
2007-10-10 10:52:33 -05:00
Günther Deschner
e4c4d91896 r2080: Remove last traces of static migration to localhost. Needed to allow a
local netbios-alias bound to non-loopback interface as a migration target.

It's now possible to migrate printers|shares|files from Server A to
Server B while running the net-command on client C.

Guenther
(This used to be commit 0cfd2866dfe5e959ede169a77c39480790300de3)
2007-10-10 10:52:30 -05:00
Günther Deschner
f5a2dd73da r2079: Clear the publish-bit from the attributes-mask when migrating
printer-settings. publishing-info is not handled yet.

Guenther
(This used to be commit 1d76adb93c98857ed3460db241847e423c021a99)
2007-10-10 10:52:30 -05:00
Günther Deschner
c542a2c179 r2022: Add net_copy_fileattr as a separate function to copy just ACLs, attrs
and timestamps. This makes net_copy_file less complex.

Guenther
(This used to be commit 43af9e67dd7c0328f214def4b591041e9b69614a)
2007-10-10 10:52:28 -05:00
Günther Deschner
19e949a91b r1966: further work on and cleanup of the net-migration-tool.
It's now possible to migrate files preserving dos-attributes and correct
timestamps. Also added some small docu- and syntax-fixes.

Guenther
(This used to be commit 0e990582a0416933a8671ca660d22e980f828402)
2007-10-10 10:52:25 -05:00
Jeremy Allison
7fd7fbf472 r1812: Fix from Richard Renard <rrenard@idealx.com> to be able to reset
a users logon hours restrictions.
Jeremy.
(This used to be commit 887aa22dc90dd8653a6c9eedf91ce76830d93de6)
2007-10-10 10:52:21 -05:00
Jim McDonough
d86f6ceead r1750: This patch allows net ads lookup to rely on command line arguments if contacting an ADS server fails. This allows net ads lookup to work with clapd (very useful for testing).
from aliguori@us.ibm.com
(This used to be commit edb4e940b45cbb06a93004b15fc45a7a45a42498)
2007-10-10 10:52:20 -05:00
Günther Deschner
23f1b04b90 r1720: Show correct help for net groupmap commands.
Guenther
(This used to be commit 3677c6a8f67628d5bea0764f84e624730d57b423)
2007-10-10 10:52:19 -05:00
Volker Lendecke
4b32ee39d6 r1716: Get rid of a compiler warning. "pipe" is a symbol that is defined as a system
call, and gcc -Wall complains about a shadowed definition.

Volker
(This used to be commit 9a2fd67037769b5cbb10edd024f6d98c610bf875)
2007-10-10 10:52:19 -05:00
Günther Deschner
61b9639ac7 r1698: fix build.
guenther
(This used to be commit 925e28d0cbd9667bceb0762ef1e429735250c209)
2007-10-10 10:52:19 -05:00
Günther Deschner
60727acc3b r1692: first commit :)
* add IA64 to the architecture table of printer-drivers

* add new "net"-subcommands:

  net rpc printer migrate {drivers|printers|forms|security|settings|all}
        [printer]
  net rpc share migrate {shares|files|all} [share]

  this is the first part of the migration suite. this will will (once
  feature-complete) allow to do 1:1 server-cloning in the best possible way by
  making heavy use of samba's rpc_client-functions. all migration-steps
  are implemented as rpc/smb-client-calls; net communicates via rpc/smb
  with two servers at the same time (a remote, source server and a
  destination server that currently defaults to the local smbd). this
  allows e. g. printer-driver migration including driverfiles, recursive
  mirroring of file-shares including file-acls, etc. almost any migration
  step can be called with a migrate-subcommand to provide more flexibility
  during a migration process (at the cost of quite some redundancy :) ).

  "net rpc printer migrate settings" is still in a bad condition (many
  open questions that hopefully can be adressed soon).

  "net rpc share migrate security" as an isolated call to just migrate
  share-ACLs will be added later.

  Before playing with it, make sure to use a test-server. Migration is a
  serious business and this tool-set can perfectly overwrite your
  existing file/print-shares.

* along with the migration functions had to make I the following
  changes:

        - implement setprinter level 3 client-side

        - implement net_add_share level 502 client-side

        - allow security descriptor to be set in setprinterdata level 2
          serverside

guenther
(This used to be commit 8f1716a29b7e85baf738bc14df7dabf03762f723)
2007-10-10 10:52:19 -05:00
Andrew Bartlett
2b90927fa3 r1582: On failure, print the length of the right variable.
Andrew Bartlett
(This used to be commit 5bd6abb54e12aee2031d48bc5b240bb4f127bf5a)
2007-10-10 10:52:15 -05:00
Jeremy Allison
14ba47482f r1537: Fix to stop printing accounts from resetting the bas password
and account lockout flags. This is set when an account is updated
only from smbd or pdbedit. Bug found by "Dunn, Drew A." <Drew.Dunn@jhuapl.edu>.
Jeremy.
(This used to be commit bb3a0fa61f5fb74b8fe421260473c07847baeb2b)
2007-10-10 10:52:14 -05:00
Jeremy Allison
645d67c377 r1504: Remove insane use of "user password" on the COMMAND LINE !
in smbpasswd. Use -s if you want to script this.
Jeremy.
(This used to be commit a3589a18b6898e2b51570112c5acb2826ef6ba4a)
2007-10-10 10:52:13 -05:00
Andrew Bartlett
9d0783bf21 r1492: Rework our random number generation system.
On systems with /dev/urandom, this avoids a change to secrets.tdb for every fork().

For other systems, we now only re-seed after a fork, and on startup.
No need to do it per-operation.  This removes the 'need_reseed'
parameter from generate_random_buffer().

Andrew Bartlett
(This used to be commit 36741d3cf53a7bd17d361251f2bb50851cdb035f)
2007-10-10 10:52:13 -05:00
Simo Sorce
75900ae526 r1478: Useful patch from Tom Alsberg <alsbergt@cs.huji.ac.il>, to export a single user from a backend.
(This used to be commit 083740e74e0790f863c065a20e28f553fdc7d5bd)
2007-10-10 10:52:12 -05:00
Jeremy Allison
d4ac326d46 r1412: Fix password history list in tdbsam. Fix some memory leaks. Add
my (C) to a header file that was at least 50% mine :-).
Jeremy.
(This used to be commit 8ee6060977ec8e65082f3ad09e1e1ccf5b4672ed)
2007-10-10 10:52:10 -05:00
Gerald Carter
824bc32be7 r1399: applying heimdal krb5 fixes from Guenther and fixing compile warnings in libadskerberos_keyatb.c
(This used to be commit 837f56ec8bc171497fb84d332002776313c26305)
2007-10-10 10:52:10 -05:00
Jeremy Allison
792776782e r1240: Ensure we don't shadow Heimdal globals.
Jeremy.
(This used to be commit 464d2e90480c676688a851a141aabddf992e0b0e)
2007-10-10 10:52:02 -05:00
Jeremy Allison
7825677b86 r1222: Valgrind memory leak fixes. Still tracking down a strange one...
Can't fix the krb5 memory leaks inside that library :-(.
Jeremy.
(This used to be commit ad440213aaae58fb5bff6e8a6fcf811c5ba83669)
2007-10-10 10:52:00 -05:00
Jeremy Allison
2055155291 r1221: Added the last of the system keytab patch from "Dan Perry" <dperry@pppl.gov>,
fixed valgrind detected mem corruption in libads/kerberos_keytab.c.
Jeremy.
(This used to be commit 286f4c809cb1532b3f8ae7ddf92349c68cc8ce31)
2007-10-10 10:52:00 -05:00
Andrew Bartlett
2895acb6e7 r1128: The end-of-file is not the end of the world, so don't make a load DEBUG() about it.
Andrew Bartlett
(This used to be commit 4da976dbd07e70726055cc4251fd1c26f63b3b2c)
2007-10-10 10:51:57 -05:00
Andrew Bartlett
654524c71b r1126: Allow more flexible GSS-SPENGO client and server operation. The
client now falls back to NTLMSSP, and the server allows the client to
start, without first asking for a mech list.

Andrew Bartlett
(This used to be commit feccc3daca7b2e9091b81fbbb93dc7284baedb99)
2007-10-10 10:51:57 -05:00
Andrew Bartlett
2074b40485 r1124: ntlm_auth memory leak fixes by James Wilkinson - jwilk@alumni.cse.ucsc.edu
Andrew Bartlett
(This used to be commit 94c0827ce20d8d1084703f6f5e4ad3b3c33151f8)
2007-10-10 10:51:56 -05:00
Herb Lewis
8018892b3c r1103: need to leave empty dacl so we can remove last ACE
(This used to be commit d8a545368c8111fddcfdd423c4d6fcbab65e96d6)
2007-10-10 10:51:55 -05:00
Volker Lendecke
47af5445f3 r977: Implement 'net rpc group rename' -- rename domain groups.
Volker
(This used to be commit 9ceff803278bdbc09cb5ab678a108cea24ab49a9)
2007-10-10 10:51:52 -05:00
Volker Lendecke
92cb49de77 r964: The max_size field in cli_samr_enum_als_groups is more like an account_control
field with indiviual bits what to retrieve. Set this to 0xffff as NT4
usrmgr.exe does to get everything. I'm too lazy (sorry) to get this through to
rpc_parse/ etc.

Volker
(This used to be commit d7239c2611a62873cc9eff296c84e91198a5c552)
2007-10-10 10:51:51 -05:00
Andrew Bartlett
9d084af77c r780: Fix segfault in ntlm_auth --diagnostics
Andrew Bartlett
(This used to be commit 5cdc7f0cd6888740d3de3535cd70c9681fa57600)
2007-10-10 10:51:37 -05:00
Alexander Bokovoy
c04abe0c66 r517: Remove wrong commit I did by mistake
(This used to be commit 72d30ea06612461bdf19916fa40ca459f0c37acc)
2007-10-10 10:51:27 -05:00
Alexander Bokovoy
5afd47147d r516: On GNU/Linux distributions which allow to use both 2.4 and 2.6 kernels
there is SYS_utimes syscall defined at compile time in glibc-kernheaders but
it is available on 2.6 kernels only. Therefore, we can't rely on syscall at
compile time but have to check that behaviour during program execution. An easy
workaround is to have replacement for utimes() implemented within our wrapper and
do not rely on syscall at all. Thus, if REPLACE_UTIME is defined already (by packager),
skip these syscall shortcuts.
(This used to be commit e278e2e6e095b1c01eab307d55edf2cde48dcba2)
2007-10-10 10:51:26 -05:00
Herb Lewis
9139b89259 r416: add a newline to the debuglevel message returned string
and have smbcontrol print the PID with it
(This used to be commit d3edf71885bfb5d342e62d46542db8ca814f3303)
2007-10-10 10:51:22 -05:00