1
0
mirror of https://github.com/samba-team/samba.git synced 2025-06-19 23:17:05 +03:00

217 Commits

Author SHA1 Message Date
Gerald Carter
b1763ace4e Check in Andrew's fix for bug #305 (always use lp_realm() )
Also make sure thet ads_startup uses lp_realm instead of
just relying on the workgroup name.  Fixes bug in net ads join
when the workgroup defaults to "WORKGROUP" and we ignore the
realm name.
-
Andrew Bartlett
96b4187963 - Make 'net' use a single funciton for setting the 'use machine account' code.
- Make winbindd try to use kerberos for connections to DCs, so that it can
   access RA=2 servers, particularly for netlogon.
 - Make rpcclient follow the new flags for the NETLOGON pipe
 - Make all the code that uses schannel use the centralised functions for doing so.

Andrew Bartlett
-
Jeremy Allison
879309671d Add a command line option (-S on|off|required) to enable signing on client
connections. Overrides smb.conf parameter if set.
Jeremy.
-
Andrew Bartlett
e6cc5ca780 Use the specified workgroup in 'net ads'. (Defaults to lp_workgroup()).
Andrew Bartlett
-
Jeremy Allison
ff222716a0 Removed strupper/strlower macros that automatically map to strupper_m/strlower_m.
I really want people to think about when they're using multibyte strings.
Jeremy.
-
Tim Potter
94fe3b2cdf Some fixes for ads printer publish:
- check error return for cli_full_connection() when trying to obtain
    printer data

  - check error return on ads_find_machine_acct()

  - Minor reformatting to separate fetching printer data from publishing it
-
Tim Potter
814519c5de Implemented 'net ads printer search' which searches the directory for
published printers.

At the moment we don't search using any parameters but this can be
fixed by changing the LDAP search string.  Also we should contact
the global catalog at SRV _gc._tcp instead of the ldap server we
get back from ads_startup().
-
Tim Potter
b401e78b6e Yet more shadow variable warnings. -
Andrew Tridgell
21d9280278 use lp_realm() to find the default realm for 'net ads password' -
Jim McDonough
0e9836c4e9 Fix bug #137: krb5_set_password is already defined in MIT 1.3 libs, so
we wouldn't build.
-
Jeremy Allison
2a6d0c2481 Fix obvious compiler warnings.
Jeremy.
-
Andrew Bartlett
00e08efb5c Patch from Ken Cross to allow an ADS domain join with a username of the form
user@realm, where realm might not be the realm we are joining.

Andrew Bartlett
-
Jim McDonough
b5b1732b11 Like net rpc user -l, let net ads user -l allow more than 50 characters in
comments.
-
Andrew Bartlett
f35674e755 Fix up bugs in the new 'store sec_channel type' code - we were always joining
as a BDC.

Andrew Bartlett
-
Andrew Bartlett
876e00fd11 Merge from HEAD - save the type of channel used to contact the DC.
This allows us to join as a BDC, without appearing on the network as one
until we have the database replicated, and the admin changes the configuration.

This also change the SID retreval order from secrets.tdb, so we no longer
require a 'net rpc getsid' - the sid fetch during the domain join is sufficient.
Also minor fixes to 'net'.

Andrew Bartlett
-
Jelmer Vernooij
f0982e1102 - Change ADS CHOSTPASS -> ADS CHANGETRUSTPW
- Add general CHANGETRUSTPW function that calls ADS CHANGETRUSTPW or RPC CHANGETRUSTPW
(Merged from HEAD)
-
Andrew Bartlett
3aa4f923e9 Merge from HEAD:
net ads password

Heimdal compile fixes.

Andrew Bartlett
-
Andrew Bartlett
de24fcb097 Merge from HEAD:
new 'net ads dn'

doxygen fixes

net help fixes.
-
Andrew Bartlett
56934f303c Missed a couple of files from the client-side kerberos merge -
Andrew Bartlett
9c3a1710ef Merge LDAP filter parinoia from HEAD, a few other pdb_ldap updates and some
misc libads fixes.

Andrew Bartlett
-
Gerald Carter
0fb724b321 *lots of small merges form HEAD
*sync up configure.in
*don't build torture tools in make all
*make sure to remove torture tools as part of make clean
-
Gerald Carter
25a9681ddd [merge]
* removed unused variable from rpcclient code
* added container option to net command (patch from SuSE)
* Makefile patch for examples/VFS from SuSE
-
Andrew Bartlett
3a7458f947 Merge from HEAD - make Samba compile with -Wwrite-strings without additional
warnings.  (Adds a lot of const).

Andrew Bartlett
-
Jeremy Allison
09a218a9f6 Forward port the change to talloc_init() to make all talloc contexts
named. Ensure we can query them.
Jeremy.
-
Jeremy Allison
e93bd375b9 jcmd really should run with a higher compiler warning level more often :-).
Jeremy.
-
Jim McDonough
efeaa8f4f4 Next step of printer publishing.
net ads printer publish <printername> [servername]
Will retreive the DsSpooler and DsDriver info by rpc for a remote server
then publish it.

Next comes doing it within smbd
-
Jeremy Allison
f755711df8 Removed global_myworkgroup, global_myname, global_myscope. Added liberal
dashes of const. This is a rather large check-in, some things may break.
It does compile though :-).
Jeremy.
-
Gerald Carter
65e7b5273b sync'ing up for 3.0alpha20 release -
Jelmer Vernooij
1b83b78e33 sync 3.0 branch with HEAD -
Andrew Tridgell
03ac082dcb updated the 3.0 branch from the head branch - ready for alpha18 -
Jim McDonough
b69f11170c Rename of ads_do_search_all2() to ads_do_search_all() and removal of
server sort controls.  Also put option externs in the net.h include.
-
Jim McDonough
e3a8138312 Use the new ads_do_search_all2 function. It provides sorted results. We now
also filter out users that end in '$', which gives us the same results as
the net rpc user and net rap user.
-
Jim McDonough
9daa5788c8 Lots more net consistency work:
- Added net_help.c for unified help when possible
- Added net rpc user listing, delete, info commands
- Unified net user command to autodetect ads/rpc/rap (try in that order)
- Added generic routine for detecting rpc (protocol > PROTOCOL_NT1)
- I'm sure I forgot something.
-
Jim McDonough
093297a27d More updates for auto-detecting server connection method. Added net_ads_check()
to make a connection (which stores the password in a global so it can be
used by rpc or rap function if ads fails) and close it to verify if ads
method should be used.
-
Jim McDonough
dd7c20e533 Add non-ads version of net_ads_help for build on non-ads machines. -
Jim McDonough
d7317ca8da Correct error string function call to ads_errstr() -
Jim McDonough
f6eb7c0c7e Add net ads user subcommands: add delete info. Also make user listing format
consistent with rap version.
-
Jim McDonough
4cf42c07ec Re-implemented net ads user and net ads group to use the new
ads_process_results function.  Also made sure net rap user and net ads
user display the same thing, to make auto-transport-detection smoother.
-
Andrew Tridgell
57645fd85b make net ads info work with -S -
Andrew Tridgell
98769f08e7 make "net ads user" and "net ads group" also use the new paged interface -
Jim McDonough
7ba235c0fb Fix build for non-ads case -
Jim McDonough
87ee483231 Expose net_ads_join to allow for auto-transport-detection for net join -
Jim McDonough
9c447920df Add paged search requests to net ads user and net ads group commands, allowing more than 1000 (or whatever the query limit is on the server) objects to be returned. Printers will come next. -
Andrew Tridgell
2a42e91397 try to use our workstation account password for ADS leave -
Andrew Bartlett
0511589088 dont strdup() possibly null values. -
Andrew Bartlett
a21a951ff9 Subject:
[PATCH] net ads error
    Date:
         Fri, 15 Feb 2002 20:03:32 +0200
   From:
         Alexander Bokovoy <a.bokovoy@sam-solutions.net>
     To:
         samba-technical@samba.org

Greetings!

Attached patch fixes a problem with non-working 'net ads -Uuser%pass'
in CVS HEAD.
-
Jim McDonough
1d326f8b7e Add support for net ads printer to publish, remove, or display printer info in the directory. Only publishes required fields right now. -
Tim Potter
6a58c9bd06 Removed version number from file header.
Changed "SMB/Netbios" to "SMB/CIFS" in file header.
-
Jim McDonough
7e5d7dfa83 Enable net ads commands to use existing tickets if the user doesn't specify a username on the commandline. Also don't continue past the kinit if a password is entered and fails because existing tickets would be used, which may not be desired if the username was specified. -
Andrew Tridgell
7e876057d5 much better support for organisational units in ADS join -