1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-25 23:21:54 +03:00
Commit Graph

646 Commits

Author SHA1 Message Date
Tim Potter
2002fbd72e Remove tags file for distclean.
(This used to be commit c972fac195)
2003-09-10 03:59:07 +00:00
Tim Potter
605281ef4b Rename FOOLIBS to FOO_LIBS to be consistent with the rest of the
library variable names.
(This used to be commit 9b0b0256a8)
2003-09-08 02:48:06 +00:00
Volker Lendecke
1c38391c70 Nobody complained on the team-list, so commit it ...
This implements some kind of improved AFS support for Samba on Linux with
OpenAFS 1.2.10. ./configure --with-fake-kaserver assumes that you have
OpenAFS on your machine. To use this, you have to put the AFS server's KeyFile
into secrets.tdb with 'net afskey'. If this is done, on each tree connect
smbd creates a Kerberos V4 ticket suitable for use by the AFS client and
gives it to the kernel via the AFS syscall. This is meant to be very
light-weight, so I did not link in a whole lot of libraries to be more
platform-independent using the ka_SetToken function call.

Volker
(This used to be commit 5775690ee8)
2003-09-07 16:36:13 +00:00
Volker Lendecke
f0441479f4 Very weird. On my SLES8 installation ntlm_auth would give missing
kerberos symbols unless I do the same as smbd does. It does not hurt
on my debian, so simply give a pointer to LDAPLIBS as well.

Volker
(This used to be commit 353d527291)
2003-09-05 09:36:10 +00:00
Tim Potter
5bbdf6a5d0 Move $(KRBCLIENT_OBJ) to libnss_wins PICOBJ variable so it is converted to
relocatable form.

Added a comment about this in the hope that it won't happen again.

Renamed PAM_WINBIND_OBJ to PAM_WINBIND_PICOBJ to make it a bit clearer.
(This used to be commit 04797e12d8)
2003-09-05 03:05:37 +00:00
Tim Potter
d425729fd9 Add log2pcap to everything target.
(This used to be commit fb446ba811)
2003-08-29 01:25:17 +00:00
Alexander Bokovoy
e83031c84d Refactor charset plugins a bit and add CP437 module.
Now all 8-bit charsets with gaps (not all symbols defined) could be produced through
one macro -- SMB_GENERATE_CHARSET_MODULE_8_BIT_GAP(CHARSETNAME) within source file
with three charset tables. Full source code for such modules can be generated by
source/script/gen-8bit-gap.sh script which was taken from GNU libc and changed slightly
to follow our data types and structure.
(This used to be commit 37042c7bc0)
2003-08-28 17:16:27 +00:00
Jim McDonough
53a2778363 Fix email address in copyright statement
(This used to be commit ffc82460f2)
2003-08-28 14:57:23 +00:00
Gerald Carter
c2983f9323 Fix bug 327 (again and I think for the last time). Make sure that
pam_smbpass.so will load ok.  Had to move some functions around to work
around dependency problems (hence the new passdb/lookup_sid.c)

Also make sure that libsmbclient.a is built and installed when
we support shared libraries.
(This used to be commit 780055f442)
2003-08-27 20:52:56 +00:00
Alexander Bokovoy
da0397bd2f Add CAP VFS module from Monyo. Primary purpose of this module is to provide CAP-compatible encoded file names for CJKV
(This used to be commit e8a5a962ed)
2003-08-27 20:04:23 +00:00
Alexander Bokovoy
7e27147422 Fix for #150.
We now fallback to Samba-provided CP850 charset module if CP850 or IBM850 does not exist on target system at runtime.
1. Introduce CP850 charset module based on charmaps table from GNU libc 2.2.5
2. Make CP850 charset module shared and build it by default

Should fix Solaris run-time
(This used to be commit e855dc8c91)
2003-08-26 19:48:16 +00:00
Gerald Carter
a1d6ba950b fix bugs 327 & 340; make sure pam_smbpass.so gets linked with all the neccessary files & libs
(This used to be commit e52f95d681)
2003-08-25 19:09:24 +00:00
Gerald Carter
eff91556a3 * Fix for bug 290:
smbadduser must obeys the paths from configure options

* Try to get libsmbclient files installed during 'make install'
  Still one outstanding problem with static lib.  INSTALLCLIENTCMD_A
  is not getting set correctly.
(This used to be commit 50ab28bd25)
2003-08-22 18:00:17 +00:00
Gerald Carter
5600804bfa fix bug 327; make sure to link SMBLDAP_OBJ with PAM_SMBPASS_OBJ
(This used to be commit b7ccfb1592)
2003-08-21 21:09:29 +00:00
Gerald Carter
35063a3cc3 actually check in the fix for make torture
(This used to be commit 4d49ebf713)
2003-08-21 13:04:42 +00:00
Gerald Carter
8bfe26b62d metze's autogenerate patch for version.h
(This used to be commit ae452e51b0)
2003-08-20 17:13:38 +00:00
Jelmer Vernooij
f4dcc68e58 Remove nasty hack in modules system. We don't recompile files anymore
after the Makefile changes.
(This used to be commit 104f62272d)
2003-08-15 06:07:36 +00:00
Jelmer Vernooij
22535011e2 Add ability to output native pcap files without the requirement for text2pcap.
IP and TCP checksums are not calculated, but that should not matter.
(This used to be commit aa96f78001)
2003-08-15 05:31:46 +00:00
Volker Lendecke
4ad85bf48e Add the gss-spnego kerberos server side to ntml_auth. This uses the
same ads_verify_ticket routine that smbd uses, so in the current state
we have to be have the host password in secrets.tdb instead of the
keytab. This means we have to be an ADS member, but it's a start.

Volker
(This used to be commit dc2d2ad467)
2003-08-15 02:57:59 +00:00
Jelmer Vernooij
6c396ea577 Add utility that takes a samba log file (at least level 5 for headers and
10 for data contents as well) and creates a packet trace readable by
ethereal.

What does not work yet:
 - SMB data contents (log level 5)
 - SMB data contents beyond the 512 byte range (log level 99 or something?)
(This used to be commit 95b1d4933b)
2003-08-15 00:04:20 +00:00
Gerald Carter
11777e6a30 Attempt at fixing bug #283. There however is no solution.
There is a workaround documented in the bug report.

This patch does:

  * add server support for the LSA_DS UUID on the lsarpc pipe
  * store a list of context_ids/api_structs in the pipe_struct
    so that we don't have to lookup the function table for a pipe.
    We just match the context_id.  Note that a dce/rpc alter_context
    does not destroy the previous context so it is possible to
    have multiple bindings active on the same pipe. Observed from
    standalone win2k sp4 client.
  * added server code for DsROleGetPrimaryDOmainInfo() but disabled it
    since it causes problems enumerating users and groups from a 2ksp4
    domain member in a Samba domain.
(This used to be commit 96bc2abfcb)
2003-08-14 21:14:28 +00:00
Andrew Bartlett
172766eea7 Change Samba to always use extended security for it's guest logins, (ie,
NTLMSSP with "" username, NULL password), and add --machine-pass (-P) to
all of Samba's clients.

When connecting to an Active Directory DC, you must initiate the CIFS level
session setup with Kerberos, not a guest login.  If you don't, your machine
account is demoted to NT4.

Andrew Bartlett
(This used to be commit 3547cb3def)
2003-08-14 01:08:00 +00:00
Jelmer Vernooij
fd4c40a00d Create symlinks for modules that register multiple functions (fixes bug #91 )
(This used to be commit 3000a99b2d)
2003-08-13 04:11:50 +00:00
Volker Lendecke
5929cfd451 This adds *experimental* kerberos gss spnego client support to ntlm_auth.
(This used to be commit 5522c79045)
2003-08-12 20:50:56 +00:00
Alexander Bokovoy
7bc6f49fe4 Add vfs_readonly module which allows to enforce periodic read-only limit on a share based on a specified start and end dates according to date(1) format
(This used to be commit 8b263c2fda)
2003-08-12 04:35:47 +00:00
Jim McDonough
f210ee9b99 Fix copyright statements for various pieces of Anthony Liguori's work.
(This used to be commit 15d2bc4785)
2003-08-01 14:47:39 +00:00
Volker Lendecke
a34ba76435 locking.c now refers to map_nt_error_from_unix, so link it in with
smbstatus and smbcontrol

Volker
(This used to be commit c2c901e06b)
2003-08-01 07:45:02 +00:00
Volker Lendecke
34b15df02d spnego.c has function definitions. Prototype them.
Anybody familiar with Makefile.in could you please look at this?
This is probably the wrong way to fix this.

Volker
(This used to be commit 9a04750dea)
2003-07-31 15:53:26 +00:00
Volker Lendecke
9dbc000ecd bin/net needs server_mutex as kerberos_verify now uses it.
Volker
(This used to be commit ee09db891a)
2003-07-30 08:05:34 +00:00
Herb Lewis
edabf75a54 split replace into replace and replace1 to allow setenv to be used by
nsswitch modules. Add required libraries to get rid of undefined
functions for libns_winbind.so and libns_wins.so
(This used to be commit cec5bf5f99)
2003-07-29 20:11:18 +00:00
Alexander Bokovoy
428653ef72 Add NT quotas support. Users allowed now to manage quotas on systems with sysquotas interface detected (Linux at least) using native Windows tools. Also move default quota support for NT quotas to VFS module default_quota. Code by Metze
(This used to be commit e856a96c2c)
2003-07-29 18:07:13 +00:00
Volker Lendecke
7730b658a1 This adds gss-spnego to ntlm_auth. It contains some new spnego support
from Jim McDonough. It is to enable cyrus sasl to provide the
gss-spnego support. For a preliminary patch to cyrus sasl see

http://samba.sernet.de/cyrus-gss-spnego.diff

Volker
(This used to be commit 45cef8f66e)
2003-07-29 15:00:38 +00:00
Andrew Bartlett
ed7cb84dea the testsuite lib needs dummyroot too.
(This used to be commit e09a7c767e)
2003-07-27 03:43:41 +00:00
Tim Potter
274f1f8806 Replace the eight (!) copies of dummy become/unbecome root with a single one.
(This used to be commit 8b818ce381)
2003-07-22 00:20:53 +00:00
Tim Potter
71a93a1551 Metze's AD/LDAP detection patches mainly to do with library detection.
Tested on a large combination of operating systems and versions.
Hopefully the build farm will find any remaining nasties if they
exist.
(This used to be commit 2e42fa3d72)
2003-07-21 23:42:45 +00:00
Tim Potter
09f90ae63e Uninstall modules as part of uninstall. Partial fix for 236.
We still don't uninstall swat or the man pages properly.
(This used to be commit 90157b9bd3)
2003-07-18 02:57:43 +00:00
Jeremy Allison
4fbbaff415 Add API framework for server SMB signing.
Jeremy.
(This used to be commit 61fc9a7b2e)
2003-07-16 21:06:21 +00:00
Alexander Bokovoy
5c327041d6 Add mandir to installdir target. Otherwise installman fails for clean DESTDIR
(This used to be commit bb31276c3d)
2003-07-15 09:50:44 +00:00
Herb Lewis
5cd3b7c71c get rid of CFLAGS from LDSHFLAGS and WINBIND_NSS_LDSHFLAGS and instead
define it in SHLD for those systems the use CC for SHLD.
(This used to be commit d0e2f3d109)
2003-07-11 14:20:12 +00:00
Tim Potter
5a02bb60e0 Fix for bug 203. Avoid using an autoconf expanded variable preceeded by a backslash
in case the variable is empty.  This apparently confuses some makes.
(This used to be commit 1e4043d54c)
2003-07-11 03:32:11 +00:00
Volker Lendecke
7f3f878abb pdbedit should not call idmap anymore. Otherwise pdbedit -L would
allocate id's.

Volker
(This used to be commit 0358cc7675)
2003-07-10 14:21:43 +00:00
Gerald Carter
16ff7b26f6 Large set of changes to add UNIX account/group management
to winbindd.  See README.idmap-and-winbind-changes for details.
(This used to be commit 1111bc7b0c)
2003-07-09 16:44:47 +00:00
Jeremy Allison
755486e011 Fix the build...
Jeremy.
(This used to be commit 61e9c49cd6)
2003-07-07 21:00:33 +00:00
Gerald Carter
fbc5f7e207 another compile fix
(This used to be commit 8b52802e5d)
2003-07-07 20:13:59 +00:00
Gerald Carter
b9d503defa fix some compile problems. Can't get IDMAP_OBJ our of proto.h
just yet.

`
(This used to be commit 6f0b5d474a)
2003-07-07 20:11:53 +00:00
Gerald Carter
5895dfb89b Cleaning up linking issues. sam/idmap*.c only links in
winbindd now.  Also removing an unused file.
(This used to be commit 688369c23c)
2003-07-07 20:00:29 +00:00
Gerald Carter
34f7dddab0 removing nisplussam
(This used to be commit f75683995c)
2003-07-01 18:08:11 +00:00
Gerald Carter
db6ce132e3 * fix the trustdom_cache to work when winbindd is not running.
smbd will update the trustdom_cache periodically after locking
  the timestamp key
(This used to be commit 7bc4b65b91)
2003-07-01 03:49:41 +00:00
Gerald Carter
e359dbcedb * cleanup more DC name resolution issues in check_*domain_security()
* is_trusted_domain() is broken without winbind.  Still working on this.
* get_global_sam_name() should return the workgroup name unless we
  are a standalone server (verified by volker)
* Get_Pwnam() should always fall back to the username (minus domain name)
  even if it is not our workgroup so that TRUSTEDOMAIN\user can logon
  if 'user' exists in the local list of accounts (on domain members w/o
  winbind)

Tested using Samba PDC with trusts (running winbindd) and a Samba 3.0
domain member not running winbindd.

notes: make_user_info_map() is slightly broken now due to the
fact that is_trusted_domain() only works with winbindd.  disabled
checks temporarily until I can sort this out.
(This used to be commit e1d6094d06)
2003-06-30 20:45:14 +00:00
Jelmer Vernooij
dde593e190 Remove the MODULES_CLEAN variable. It's no longer necessary since
object files for modules are in .po files, while object files for
static use are in .o files. Pointed out by metze.

This reduces the number of files that have to be recompiled after the Makefile
changes. Preventing unnecessary recompiling of the other few is high
on my todo list.
(This used to be commit b9b46d43c7)
2003-06-26 17:33:58 +00:00