1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-21 01:59:07 +03:00

1088 Commits

Author SHA1 Message Date
Volker Lendecke
6622db97bb r11914: After talking to Jeremy, implement passdb:expand_explicit with a default of
no. This changes our default behaviour.

Sorry, Ingo, this *is* a bug that needs fixing.

Jerry, you might want to put a marker into the WHATSNEW.txt when this is due.

Volker
2007-10-10 11:05:34 -05:00
Günther Deschner
04a3ac5e50 r11874: Merge LDAP connection setup in lib/smbldap.c and pdb_nds.c.
Also allow to use START_TLS in the pdb_nds_update_login_attempts
function when doing simple binds to eDir.

Guenther
2007-10-10 11:05:33 -05:00
Gerald Carter
a33e78aced r11863: BUG 3196: patch from Alex Deiter <tiamat@komi.mts.ru> to compile against the Sun LDAP client libs. But not for AD support; just ldap support 2007-10-10 11:05:31 -05:00
Günther Deschner
6aefb3aebb r11847: Fix typo.
Guenther
2007-10-10 11:05:29 -05:00
Jeremy Allison
f46d847065 r11256: Remove use of long long and strtoll in libsmbclient (we
can't assume long long is always there). Removed unused
var in new a/c rename code.
long long still used in eventlog code but Jerry has promised
to fix that.
Jeremy.
2007-10-10 11:05:09 -05:00
Jim McDonough
ee91eb9a39 r11236: Implement user rename for smbpasswd and ldap backends. Some cleanup on
tdb as well to make naming consistent.
2007-10-10 11:05:08 -05:00
Jeremy Allison
d720867a78 r11137: Compile with only 2 warnings (I'm still working on that code) on a gcc4
x86_64 box.
Jeremy.
2007-10-10 11:05:02 -05:00
Jim McDonough
8210b0503a r10911: part of #2861: add rename support for usrmgr.exe when using tdbsam
This gets it working before replacing tdb with the samba4 version.
2007-10-10 11:04:56 -05:00
Jeremy Allison
a6d8a4b1ff r10792: Fix the "schannel not stored across client disconnects" problem.
Based on the Samba4 solution - stores data in
$samba/private/schannel_store.tdb.
This tdb is not left open but open and closed on demand.
Jeremy.
2007-10-10 11:04:54 -05:00
Volker Lendecke
cf06a090a3 r10658: It's so nice to have CVSIN to blame for this kind of bugs :-)
Volker
2007-10-10 11:04:49 -05:00
Gerald Carter
939c3cb5d7 r10656: BIG merge from trunk. Features not copied over
* \PIPE\unixinfo
* winbindd's {group,alias}membership new functions
* winbindd's lookupsids() functionality
* swat (trunk changes to be reverted as per discussion with Deryck)
2007-10-10 11:04:48 -05:00
Gerald Carter
8bf124adaf r10606: pdb_*sql patches from
Uli Meis <a.sporto@gmail.com>
Peter Rindfuss <rindfuss@wz-berlin.de>
2007-10-10 11:04:48 -05:00
Gerald Carter
b1524999e0 r9661: fallback to cn attribubte if displayName is not available 2007-10-10 11:03:24 -05:00
Gerald Carter
62f9fb5e3a r9660: real fix for group enumeration bug in 3.0.20; only affected the ldapsam code 2007-10-10 11:03:24 -05:00
Günther Deschner
df90ea016a r9522: Give better error-message when "NDS Universal Password" change fails.
Guenther
2007-10-10 11:01:11 -05:00
James Peach
98d364459d r9303: Clobber compiler warnings. Patch from Jason Mader <jason@ncac.gwu.edu> plus
some extra function declarations. Bugzilla bug #2523.
2007-10-10 11:00:32 -05:00
Lars Müller
7423895900 r9051: Fix from Fernando Schapachnik <fernando@mecon.gov.ar> to add logon hours
support for the Postgres backend.

Also add these changes from svn rev 7787 to trunk.
2007-10-10 11:00:24 -05:00
Günther Deschner
c2810bcf66 r8797: avoid unset rids for builtin-aliases.
Guenther
2007-10-10 11:00:17 -05:00
Günther Deschner
0c8859474d r8787: Make enumeration of builtin-aliases work again.
Guenther
2007-10-10 11:00:17 -05:00
Günther Deschner
793c82c017 r8542: - (re-)add better search-semantics: look for Interdomain trust accounts
below the machine-suffix (this is where we create them)) to avoid
  digging through thousands of user-accounts just to find a handful of
  trust-accounts in the enumdomusers-samr-call.

- don't access freed data in DEBUG-statement

Guenther
2007-10-10 11:00:08 -05:00
Jeremy Allison
9506b8e145 r7882: Looks like a large patch - but what it actually does is make Samba
safe for using our headers and linking with C++ modules. Stops us
from using C++ reserved keywords in our code.
Jeremy
2007-10-10 10:58:00 -05:00
Jeremy Allison
dd5d36c95f r7787: Fix from Fernando Schapachnik <fernando@mecon.gov.ar> to add logon hours
support for the Postgres backend.
Jeremy.
2007-10-10 10:57:21 -05:00
Volker Lendecke
5b4720598b r7730: Some merges 2007-10-10 10:57:20 -05:00
Volker Lendecke
10606be050 r7718: Remove some unused code 2007-10-10 10:57:20 -05:00
Gerald Carter
e6df9a7ac7 r7577: switching to macro for IS_DC 2007-10-10 10:57:14 -05:00
Gerald Carter
a0ac9a8ffd r7415: * big change -- volker's new async winbindd from trunk 2007-10-10 10:57:08 -05:00
Gerald Carter
e2f8eeb4e2 r7142: removing 'ldap filter' smb.conf option 2007-10-10 10:57:03 -05:00
Gerald Carter
9727d05241 r7139: trying to reduce the number of diffs between trunk and 3.0; changing version to 3.0.20pre1 2007-10-10 10:57:02 -05:00
Volker Lendecke
6af57d4bae r6774: Fix 2 memleaks 2007-10-10 10:56:54 -05:00
Volker Lendecke
f406dda687 r6770: Fix bug 2705. Thanks, John, for beating my stuff :-)
Volker
2007-10-10 10:56:54 -05:00
Volker Lendecke
85320c1257 r6748: With reconnects, state->connection->ldap_struct can change in smbldap_search
and friends. This should be a fix for bug 2701. Thanks to jht for giving me
access to his box!

Volker
2007-10-10 10:56:53 -05:00
Gerald Carter
b0289d2258 r6713: another talloc() fix. This time in pdb_xml.c 2007-10-10 10:56:52 -05:00
Jelmer Vernooij
0a7eabd46d r6635: Fix build of the various sql pdb backends after new talloc. 2007-10-10 10:56:48 -05:00
Jeremy Allison
316df944a4 r6595: This is Volkers new-talloc patch. Just got the go-ahead from
Volker to commit. Woo Hoo !
Jeremy.
2007-10-10 10:56:46 -05:00
Volker Lendecke
61d40ac60d r6445: Make us survive the PARANOID_MALLOC_CHECKER. Should we enable that for
--enable-developer=yes?

Volker
2007-10-10 10:56:41 -05:00
Gerald Carter
0ac57ae942 r6421: use add machine script when creating a user (ACB_NORMAL)
who has a name ending in '$' (usrmgr.exe does this for
domain trusts (that's was jfm's original comment I think).

avoid an assert() call in libldap.
2007-10-10 10:56:41 -05:00
Volker Lendecke
a831e54738 r6367: Slim down pdb_interface.c a bit. next_entry and search_end are function
pointers now.

Yes, Jeremy, this is about re-inventing C++... :-)

Volker
2007-10-10 10:56:39 -05:00
Volker Lendecke
f0bb44ac58 r6351: This is quite a large and intrusive patch, but there are not many pieces that
can be taken out of it, so I decided to commit this in one lump. It changes
the passdb enumerating functions to use ldap paged results where possible. In
particular the samr calls querydispinfo, enumdomusers and friends have
undergone significant internal changes. I have tested this extensively with
rpcclient and a bit with usrmgr.exe. More tests and the merge to trunk will
follow later.

The code is based on a first implementation by Günther Deschner, but has
evolved quite a bit since then.

Volker
2007-10-10 10:56:38 -05:00
Volker Lendecke
8b4f67a1e9 r6277: This implements a new caching API for enumerating the pdb elements. It is
modeled after query_displayinfo and should hide the differences between users,
groups and aliases while allowing a cache analog load_sampw_entries:

struct pdb_search *pdb_search_users(uint16 acct_flags);
struct pdb_search *pdb_search_groups(void);
struct pdb_search *pdb_search_aliases(const DOM_SID *sid);
uint32 pdb_search_entries(struct pdb_search *search, uint32 start_idx,
                          uint32 max_entries,
                          struct samr_displayentry **result);
void pdb_search_destroy(struct pdb_search *search);

Why this API? Eventually we will need to apply the work gd has started on
enumerating users with paged ldap searches to groups and aliases. Before doing
that I want to clean up the search routines we have.

The sample application (more to follow) is 'net maxrid'.

Volker
2007-10-10 10:56:34 -05:00
Volker Lendecke
3493d9f383 r6263: Get rid of generate_wellknown_sids, they are const static and initializable
statically.

Volker
2007-10-10 10:56:33 -05:00
Herb Lewis
efea76ac71 r6225: get rid of warnings from my compiler about nested externs 2007-10-10 10:56:30 -05:00
Derrell Lipman
994694f7f2 r6149: Fixes bugs #2498 and 2484.
1. using smbc_getxattr() et al, one may now request all access control
   entities in the ACL without getting all other NT attributes.
2. added the ability to exclude specified attributes from the result set
   provided by smbc_getxattr() et al, when requesting all attributes,
   all NT attributes, or all DOS attributes.
3. eliminated all compiler warnings, including when --enable-developer
   compiler flags are in use.  removed -Wcast-qual flag from list, as that
   is specifically to force warnings in the case of casting away qualifiers.

Note: In the process of eliminating compiler warnings, a few nasties were
      discovered.  In the file libads/sasl.c, PRIVATE kerberos interfaces
      are being used; and in libsmb/clikrb5.c, both PRIAVE and DEPRECATED
      kerberos interfaces are being used.  Someone who knows kerberos
      should look at these and determine if there is an alternate method
      of accomplishing the task.
2007-10-10 10:56:24 -05:00
Jeremy Allison
051f0ed807 r6092: This much const causes the compiler on Fedora Core 2
to throw up.
Jeremy.
2007-10-10 10:56:21 -05:00
Volker Lendecke
3a67865169 r6080: Port some of the non-critical changes from HEAD to 3_0. The main one is the
change in pdb_enum_alias_memberships to match samr.idl a bit closer.

Volker
2007-10-10 10:56:20 -05:00
Jim McDonough
e2117bcb09 r5965: Apply Volker's patch for "ldapsam trusted = yes" for samr_lookup_rids. Gives us
again up to ~6x improvement on group membership lookups.
2007-10-10 10:56:13 -05:00
Gerald Carter
b0f4346082 r5957: BUGS 2478, 2093: compiler warning patches from Jason Mader 2007-10-10 10:56:12 -05:00
Gerald Carter
e84d070275 r5951: gotta love that SGI compiler :-) (thanks Jason) 2007-10-10 10:56:10 -05:00
Jim McDonough
bf3ce651ff r5927: Fix ldapsam trusted enum_group_members. We were searching in the user
suffix instead of the group suffix.

Thanks to John Janosik (jpjanosi@us.ibm.com).
2007-10-10 10:56:09 -05:00
Jeremy Allison
0976793e30 r5817: Patch from Vince Brimhall <vbrimhall@novell.com> to change the way pdb_nds
handles users with no Universal or Simple Password. Bug #2453.
Jeremy.
2007-10-10 10:56:03 -05:00
Volker Lendecke
66471de977 r5767: Get rid of some compiler warnings 2007-10-10 10:56:00 -05:00