sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-17 02:05:21 +03:00
Code
19,743 Commits 60 Branches 1,145 Tags
Commit Graph

19743 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Gerald Carter
4f3a1c2c58 r15550: make sure to pick up the -lresolv libs on systems without -lldap to pull it in 2007-10-10 11:16:58 -05:00
Gerald Carter
d19dad8815 r15549: removing rhosts and 'hosts equiv' authentication features 2007-10-10 11:16:58 -05:00
Gerald Carter
1316fd4267 r15548: remove unused 'wins partners' 2007-10-10 11:16:58 -05:00
Gerald Carter
7d99e05ee8 r15547: say goodbye to --with-ldapsam (although the ldapsam_compat passdb backend still exists 2007-10-10 11:16:58 -05:00
Günther Deschner
bf077fb226 r15546: When debugging is enabled be just a little more verbose in logging in 
pam_winbind.

Guenther
 2007-10-10 11:16:57 -05:00
Gerald Carter
18f2e1a4e1 r15544: make sure to define NS_PACKETSZ for Bind 4 interfaces (fix build on us4) 2007-10-10 11:16:57 -05:00
Gerald Carter
4c4ea7b20f r15543: New implementation of 'net ads join' to be more like Windows XP. 
The motivating factor is to not require more privileges for
the user account than Windows does when joining a domain.

The points of interest are

* net_ads_join() uses same rpc mechanisms as net_rpc_join()
* Enable CLDAP queries for filling in the majority of the
  ADS_STRUCT->config information
* Remove ldap_initialized() from sam/idmap_ad.c and
  libads/ldap.c
* Remove some unnecessary fields from ADS_STRUCT
* Manually set the dNSHostName and servicePrincipalName attribute
  using the machine account after the join

Thanks to Guenther and Simo for the review.

Still to do:

* Fix the userAccountControl for DES only systems
* Set the userPrincipalName in order to support things like
  'kinit -k' (although we might be able to just use the sAMAccountName
  instead)
* Re-add support for pre-creating the machine account in
  a specific OU
 2007-10-10 11:16:57 -05:00
Günther Deschner
e4734cb99c r15542: Close the LDAP connection and free the struct, regardless whether the 
simple bind operation was successful or not.

Guenther
 2007-10-10 11:16:57 -05:00
Günther Deschner
4da79bd10c r15541: Only ever store a user's password in a WINBINDD_CCACHE_ENTRY struct when 
we have a reason to do so.

Guenther
 2007-10-10 11:16:57 -05:00
Jeremy Allison
2e65fcc9de r15539: Use portable wrapper functions instead of seteuid 
directly in winbindd.
Jeremy.
 2007-10-10 11:16:56 -05:00
Jeremy Allison
45cfba12cf r15537: Ignore // or \\ in //server or \\server. 
Jeremy.
 2007-10-10 11:16:56 -05:00
Stefan Metzmacher
a48b1f7fae r15531: fix linking of smbmnt and smbumount with socket wrapper 
metze
 2007-10-10 11:16:56 -05:00
James Peach
eb31ef3a0e r15529: Initialise our saved uid and gid so that we can tell when 
we created the profiling shmem segment and don't bogusly
refuse to look at it.
 2007-10-10 11:16:56 -05:00
Günther Deschner
9dac3ab328 r15528: Make the existance of the /etc/security/pam_winbind.conf file 
non-critical and fallback to only parse the argv options in that case.

Guenther
 2007-10-10 11:16:56 -05:00
Günther Deschner
3546187bb4 r15526: Avoid double \n. 
Guenther
 2007-10-10 11:16:56 -05:00
Gerald Carter
e439660f91 r15525: fix compile error on HP-UX reported by Ryan Novosielski 2007-10-10 11:16:56 -05:00
Günther Deschner
a75dd80c62 r15523: Honour the time_offset also when verifying kerberos tickets. This 
prevents a nasty failure condition in winbindd's pam_auth where a tgt
and a service ticket could have been succefully retrieved, but just not
validated.

Guenther
 2007-10-10 11:16:55 -05:00
Günther Deschner
a0548914c2 r15519: Fix segfault. 
Guenther
 2007-10-10 11:16:55 -05:00
James Peach
f06d94382f r15516: Use SMB_BIG_UINT in preference to unsigned long long. 2007-10-10 11:16:55 -05:00
James Peach
624318245f r15509: Preserve errno in fcntl lock wrappers. 2007-10-10 11:16:55 -05:00
James Peach
d448629282 r15508: Use clock_gettime for profiling timstamps if it is available. Use 
the fastest clock available on uniprocessors.
 2007-10-10 11:16:55 -05:00
Volker Lendecke
800f4cd158 r15496: current_user_info is not referenced in loadparm.c 2007-10-10 11:16:55 -05:00
Volker Lendecke
8cedbbfbcf r15495: current_user_info is not referenced in process.c 2007-10-10 11:16:54 -05:00
Volker Lendecke
8cdfe404ef r15494: Fix debug statement 2007-10-10 11:16:54 -05:00
Andrew Bartlett
221a6de7d0 r15492: Without this patch, the LDAP client libs will call abort() in 
ldap_get_values_len, because they were handed a NULL msgs pointer, for
example in ads_pull_sid().

This occurs when the AD server fails at the connect stage.  (The
toubled AD server is actually Samba4 in my example).

Andrew Bartlett
 2007-10-10 11:16:54 -05:00
Volker Lendecke
7729799be9 r15483: Fix 'declaration after code' warnings. 
Volker
 2007-10-10 11:16:54 -05:00
Volker Lendecke
ac79bba1a1 r15479: Check in patch from bug # 3746 -- Thanks Timur 2007-10-10 11:16:53 -05:00
Volker Lendecke
7188ec6bd8 r15478: Likewise for bug # 3763 2007-10-10 11:16:53 -05:00
Volker Lendecke
51b415d230 r15477: Committing parts of the patch Timur has submitted for bug 2961, as agreed upon 
on irc.

Thanks,

Volker
 2007-10-10 11:16:53 -05:00
Volker Lendecke
293b89dfb1 r15476: Transfer the was_mapped flag from user_info to server_info also in auth_sam 
and auth_domain. Thanks for Simo to point this out.

Volker
 2007-10-10 11:16:52 -05:00
Volker Lendecke
2765c4ff8d r15475: Ugly and disgusting patch to fix the username map problem I created by 
changing the token generation. I *hate* this code!

Jerry, you have been looking at this as well, can you double-check that I did
not screw it up?

Thanks,

Volker
 2007-10-10 11:16:52 -05:00
Volker Lendecke
d2f39ae7fe r15472: Remove an unused function parameter 2007-10-10 11:16:52 -05:00
Volker Lendecke
f21adc04f7 r15471: Clarify error message 2007-10-10 11:16:51 -05:00
Jeremy Allison
e9b016ced6 r15467: Ensure every exit error path calls nt_status_squash. 
Jeremy.
 2007-10-10 11:16:51 -05:00
Deryck Hodge
9bf07ba6cc r15466: Install the images for SWAT. 
And we don't install any JavaScript (hold over from a prior SWAT
svn ci trunk/ branches/SAMBA_3_0 -m
 2007-10-10 11:16:51 -05:00
Deryck Hodge
4ad7276cef r15465: Fix segfault in SWAT. 
Fixes bug #3702.

deryck
 2007-10-10 11:16:50 -05:00
Gerald Carter
43f5d09a16 r15464: fix dns build breakage on IRIX and OpenBSD 2007-10-10 11:16:50 -05:00
Gerald Carter
b0160f8933 r15463: compile fix for new DNS code for machine using Bind 4 libs (old IRIX host) 2007-10-10 11:16:50 -05:00
Gerald Carter
cf71f88a3c r15462: replace the use of OpenLDAP's ldap_domain2hostlist() for 
locating AD DC's with out own DNS SRV queries.
Testing on Linux and Solaris.
 2007-10-10 11:16:49 -05:00
Günther Deschner
f4af888282 r15461: Free LDAP result in ads_get_attrname_by_oid(). 
Guenther
 2007-10-10 11:16:49 -05:00
Günther Deschner
847882a983 r15460: Prefer to use the indexed objectCategory attribute (instead of 
objectClass which is not indexed on AD) in LDAP queries.

Guenther
 2007-10-10 11:16:49 -05:00
Günther Deschner
870495e2c8 r15455: Add rpccli_samr_query_dom_info2() and return the comment string in 
samr_query_domain_info(2) for consistency reasons.

Guenther
 2007-10-10 11:16:48 -05:00
Günther Deschner
3e181b46be r15454: As testing, documentation and samba4 idl indicate that there is no known 
difference between samr_query_domain_info and samr_query_domain_info2,
wrap the info2 call around the info call. There have been various "could
not access LDAP when not root" bugs lurking around in
samr_query_domain_info2 anyway.

Guenther
 2007-10-10 11:16:48 -05:00
Günther Deschner
9b0731b2a9 r15453: Process all the supported info levels in the samr_query_domain_info2 
call.

Guenther
 2007-10-10 11:16:48 -05:00
Günther Deschner
6ed7d7fa70 r15452: Again purely cosmetic reformat of the samr query domain info calls. 
Guenther
 2007-10-10 11:16:47 -05:00
James Peach
7a0c4f4997 r15451: Rewrite AC_LIBTESTFUNC so that it works like the callers 
of it expect.
 2007-10-10 11:16:47 -05:00
James Peach
ee75049881 r15450: Change profiling data macros to use stack variables rather than 
globals. This catches mismatched start/end calls and removes
the need for special nested profiling calls.
 2007-10-10 11:16:47 -05:00
James Peach
e7ddcd8c33 r15449: Remove unused function get_nttime_max (which claims it 
is incorrect).
 2007-10-10 11:16:46 -05:00
James Peach
a19d4f2bb4 r15448: New autoconf macro to test for sysconf variables. 2007-10-10 11:16:46 -05:00
James Peach
efd961e4ee r15447: Teach "smbd -b" to emit the sizes of a few more types that 
might be interesting. Push the spacing across a bit so that
it all lines up nicely.
 2007-10-10 11:16:46 -05:00