13 Commits

Author	SHA1	Message	Date
Jeremy Allison	9dafb7f48c	r16945: Sync trunk -> 3.0 for 3.0.24 code. Still need ... to do the upper layer directories but this is what everyone is waiting for.... Jeremy.	2007-10-10 11:19:14 -05:00
Günther Deschner	081409a724	r10976: Fix the build with openssl-0.9.8a. ... Guenther	2007-10-10 11:04:58 -05:00
Volker Lendecke	67dbc91b27	r6779: Use the SID in the user token for the %s expansion in 'afs username map'. This ... fixes a rather weird problem where an algorithmic SID ended up as the replacement for %s. Volker	2007-10-10 10:56:54 -05:00
Volker Lendecke	e7dc9fde45	r5331: Support SIDs as %s replacements in the afs username map parameter. ... Add 'log nt token command' parameter. If set, %s is replaced with the user sid, and %t takes all the group sids. Volker	2007-10-10 10:55:37 -05:00
Volker Lendecke	836a8277b2	r4256: Add a patch from kllin@it.su.se: New Parameter 'afs token lifetime' tells the ... AFS client when to throw away a token. Thanks, Volker	2007-10-10 10:53:40 -05:00
Volker Lendecke	207625c7ab	r4252: Comment clarification from Love Hörnquist Åstrand <lha@stacken.kth.se>. ... Thanks, Volker	2007-10-10 10:53:40 -05:00
Andrew Bartlett	36741d3cf5	r1492: Rework our random number generation system. ... On systems with /dev/urandom, this avoids a change to secrets.tdb for every fork(). For other systems, we now only re-seed after a fork, and on startup. No need to do it per-operation. This removes the 'need_reseed' parameter from generate_random_buffer(). Andrew Bartlett	2007-10-10 10:52:13 -05:00
Volker Lendecke	43870a3fc1	r449: Two AFS-related things: ... Split off the non-crypto related parts of lib/afs.c into lib/afs_settoken.c. This makes wbinfo link without -lcrypto. Commit vfs_afsacl.c, display & set AFS acls via the NT security editor. Volker	2007-10-10 10:51:23 -05:00
Volker Lendecke	2df6750a07	This restructures lib/afs.c so that the token data can be but into a ... stream. This is to implement wbinfo -k that asks winbind for authentication which then creates the AFS token for the authenticated user. Volker	-
Volker Lendecke	6d2285b6d1	The AFS pts command always generates completely lower-case user names. As case ... is not significant in windows user names we should not lose information by lower-casing the name before handing it to AFS. Volker	-
Volker Lendecke	556c62f935	After a phonecall with jra finally commit this. ... This changes our behaviour when the setresuid call is available. We now not only change the effective uid but also the real uid when becoming unprivileged. This is mainly for improved AFS compatibility, as AFS selects the token to send to the server based on the real uid of the process. I tested this with a W2k server with two non-root 'runas' sessions. They come in via a single smbd as two different users using two session setups. Samba on Linux can still switch between the two uids, proved by two different files created via those sessions. Volker	-
Volker Lendecke	4a3f7a9356	This only touches the fake kaserver support. It adds two parameters: ... afs share -- this is an AFS share, do AFS magic things afs username map -- We need a way to specify the cell and possibly weird username codings for several windows domains in the afs cell Volker	-
Volker Lendecke	5775690ee8	Nobody complained on the team-list, so commit it ... ... This implements some kind of improved AFS support for Samba on Linux with OpenAFS 1.2.10. ./configure --with-fake-kaserver assumes that you have OpenAFS on your machine. To use this, you have to put the AFS server's KeyFile into secrets.tdb with 'net afskey'. If this is done, on each tree connect smbd creates a Kerberos V4 ticket suitable for use by the AFS client and gives it to the kernel via the AFS syscall. This is meant to be very light-weight, so I did not link in a whole lot of libraries to be more platform-independent using the ka_SetToken function call. Volker	-