1
0
mirror of https://github.com/samba-team/samba.git synced 2025-06-19 23:17:05 +03:00

217 Commits

Author SHA1 Message Date
Andrew Tridgell
dfbe442c66 make sure we store the domain sid when joining a ADS domain -
Andrew Tridgell
412e79c448 net ads password and net ads chostpass commands from Remus Koos -
Andrew Tridgell
05a90a2884 much better ADS error handling system -
Andrew Tridgell
ee1c3e1f04 - added initial support for trusted domains in winbindd_ads
- gss error code patch from a.bokovoy@sam-solutions.net
- better sid dumping in ads_dump
- fixed help in wbinfo
-
Andrew Tridgell
f1231c2b54 allow selection of the organisational unit when joining a realm -
Andrew Tridgell
b107ecef70 added "net ads info" to fetch basic ADS info without any auth -
Andrew Tridgell
435fdf276a added internal sasl/gssapi code. This means we are no longer dependent on cyrus-sasl which makes the code much less fragile. Also added code to auto-determine the server name or realm -
Andrew Bartlett
575897e879 OK. Smbpasswd -j is DEAD.
This moves the rest of the functionality into the 'net rpc join' code.

Futhermore, this moves that entire area over to the libsmb codebase, rather
than the crufty old rpc_client stuff.

I have also fixed up the smbpasswd -a -m bug in the process.

We also have a new 'net rpc changetrustpw' that can be called from a
cron-job to regularly change the trust account password, for sites
that run winbind but not smbd.

With a little more work, we can kill rpc_client from smbd entirly!
(It is mostly the domain auth stuff - which I can rework - and the
spoolss stuff that sombody else will need to look over).

Andrew Bartlett
-
Andrew Tridgell
7d94f1b736 added a REALLY gross hack into kerberos_kinit_password so that
winbindd can do a kinit
this will be removed once we have code that gets a tgt
and puts it in a place where cyrus-sasl can see it
-
Andrew Bartlett
ea76a687fc Follow herb's suggestion and don't strdup a string to itself. -
Andrew Bartlett
8f9ce71781 Make better use of the ads_init() function to get the kerberos relam etc.
This allows us to use automagically obtained values in future, and the value
from krb5.conf now.

Also fix mem leaks etc.

Andrew Bartlett
-
Tim Potter
8227f6909c More compiler warnings fixed. Some minor reformatting. -
Andrew Tridgell
b390d6eef9 better help -
Andrew Tridgell
720c50a751 use generate_random_str() -
Andrew Tridgell
f482583139 added "net ads user" and "net ads group" commands -
Andrew Tridgell
ae0eabd04c added "net ads status" command -
Andrew Tridgell
2f8fa175b1 made a "net ads" command, currently with "net ads join" and "net ads leave" -