1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-24 21:34:56 +03:00
Commit Graph

623 Commits

Author SHA1 Message Date
Volker Lendecke
5929cfd451 This adds *experimental* kerberos gss spnego client support to ntlm_auth.
(This used to be commit 5522c79045)
2003-08-12 20:50:56 +00:00
Alexander Bokovoy
7bc6f49fe4 Add vfs_readonly module which allows to enforce periodic read-only limit on a share based on a specified start and end dates according to date(1) format
(This used to be commit 8b263c2fda)
2003-08-12 04:35:47 +00:00
Jim McDonough
f210ee9b99 Fix copyright statements for various pieces of Anthony Liguori's work.
(This used to be commit 15d2bc4785)
2003-08-01 14:47:39 +00:00
Volker Lendecke
a34ba76435 locking.c now refers to map_nt_error_from_unix, so link it in with
smbstatus and smbcontrol

Volker
(This used to be commit c2c901e06b)
2003-08-01 07:45:02 +00:00
Volker Lendecke
34b15df02d spnego.c has function definitions. Prototype them.
Anybody familiar with Makefile.in could you please look at this?
This is probably the wrong way to fix this.

Volker
(This used to be commit 9a04750dea)
2003-07-31 15:53:26 +00:00
Volker Lendecke
9dbc000ecd bin/net needs server_mutex as kerberos_verify now uses it.
Volker
(This used to be commit ee09db891a)
2003-07-30 08:05:34 +00:00
Herb Lewis
edabf75a54 split replace into replace and replace1 to allow setenv to be used by
nsswitch modules. Add required libraries to get rid of undefined
functions for libns_winbind.so and libns_wins.so
(This used to be commit cec5bf5f99)
2003-07-29 20:11:18 +00:00
Alexander Bokovoy
428653ef72 Add NT quotas support. Users allowed now to manage quotas on systems with sysquotas interface detected (Linux at least) using native Windows tools. Also move default quota support for NT quotas to VFS module default_quota. Code by Metze
(This used to be commit e856a96c2c)
2003-07-29 18:07:13 +00:00
Volker Lendecke
7730b658a1 This adds gss-spnego to ntlm_auth. It contains some new spnego support
from Jim McDonough. It is to enable cyrus sasl to provide the
gss-spnego support. For a preliminary patch to cyrus sasl see

http://samba.sernet.de/cyrus-gss-spnego.diff

Volker
(This used to be commit 45cef8f66e)
2003-07-29 15:00:38 +00:00
Andrew Bartlett
ed7cb84dea the testsuite lib needs dummyroot too.
(This used to be commit e09a7c767e)
2003-07-27 03:43:41 +00:00
Tim Potter
274f1f8806 Replace the eight (!) copies of dummy become/unbecome root with a single one.
(This used to be commit 8b818ce381)
2003-07-22 00:20:53 +00:00
Tim Potter
71a93a1551 Metze's AD/LDAP detection patches mainly to do with library detection.
Tested on a large combination of operating systems and versions.
Hopefully the build farm will find any remaining nasties if they
exist.
(This used to be commit 2e42fa3d72)
2003-07-21 23:42:45 +00:00
Tim Potter
09f90ae63e Uninstall modules as part of uninstall. Partial fix for 236.
We still don't uninstall swat or the man pages properly.
(This used to be commit 90157b9bd3)
2003-07-18 02:57:43 +00:00
Jeremy Allison
4fbbaff415 Add API framework for server SMB signing.
Jeremy.
(This used to be commit 61fc9a7b2e)
2003-07-16 21:06:21 +00:00
Alexander Bokovoy
5c327041d6 Add mandir to installdir target. Otherwise installman fails for clean DESTDIR
(This used to be commit bb31276c3d)
2003-07-15 09:50:44 +00:00
Herb Lewis
5cd3b7c71c get rid of CFLAGS from LDSHFLAGS and WINBIND_NSS_LDSHFLAGS and instead
define it in SHLD for those systems the use CC for SHLD.
(This used to be commit d0e2f3d109)
2003-07-11 14:20:12 +00:00
Tim Potter
5a02bb60e0 Fix for bug 203. Avoid using an autoconf expanded variable preceeded by a backslash
in case the variable is empty.  This apparently confuses some makes.
(This used to be commit 1e4043d54c)
2003-07-11 03:32:11 +00:00
Volker Lendecke
7f3f878abb pdbedit should not call idmap anymore. Otherwise pdbedit -L would
allocate id's.

Volker
(This used to be commit 0358cc7675)
2003-07-10 14:21:43 +00:00
Gerald Carter
16ff7b26f6 Large set of changes to add UNIX account/group management
to winbindd.  See README.idmap-and-winbind-changes for details.
(This used to be commit 1111bc7b0c)
2003-07-09 16:44:47 +00:00
Jeremy Allison
755486e011 Fix the build...
Jeremy.
(This used to be commit 61e9c49cd6)
2003-07-07 21:00:33 +00:00
Gerald Carter
fbc5f7e207 another compile fix
(This used to be commit 8b52802e5d)
2003-07-07 20:13:59 +00:00
Gerald Carter
b9d503defa fix some compile problems. Can't get IDMAP_OBJ our of proto.h
just yet.

`
(This used to be commit 6f0b5d474a)
2003-07-07 20:11:53 +00:00
Gerald Carter
5895dfb89b Cleaning up linking issues. sam/idmap*.c only links in
winbindd now.  Also removing an unused file.
(This used to be commit 688369c23c)
2003-07-07 20:00:29 +00:00
Gerald Carter
34f7dddab0 removing nisplussam
(This used to be commit f75683995c)
2003-07-01 18:08:11 +00:00
Gerald Carter
db6ce132e3 * fix the trustdom_cache to work when winbindd is not running.
smbd will update the trustdom_cache periodically after locking
  the timestamp key
(This used to be commit 7bc4b65b91)
2003-07-01 03:49:41 +00:00
Gerald Carter
e359dbcedb * cleanup more DC name resolution issues in check_*domain_security()
* is_trusted_domain() is broken without winbind.  Still working on this.
* get_global_sam_name() should return the workgroup name unless we
  are a standalone server (verified by volker)
* Get_Pwnam() should always fall back to the username (minus domain name)
  even if it is not our workgroup so that TRUSTEDOMAIN\user can logon
  if 'user' exists in the local list of accounts (on domain members w/o
  winbind)

Tested using Samba PDC with trusts (running winbindd) and a Samba 3.0
domain member not running winbindd.

notes: make_user_info_map() is slightly broken now due to the
fact that is_trusted_domain() only works with winbindd.  disabled
checks temporarily until I can sort this out.
(This used to be commit e1d6094d06)
2003-06-30 20:45:14 +00:00
Jelmer Vernooij
dde593e190 Remove the MODULES_CLEAN variable. It's no longer necessary since
object files for modules are in .po files, while object files for
static use are in .o files. Pointed out by metze.

This reduces the number of files that have to be recompiled after the Makefile
changes. Preventing unnecessary recompiling of the other few is high
on my todo list.
(This used to be commit b9b46d43c7)
2003-06-26 17:33:58 +00:00
Gerald Carter
7a4e38155d cleaning up more build issues. Tested
"--with-ads=no --with-ldap=yes" and "--with-ads=yes && make everything"
(This used to be commit 3e9e4bb7d1)
2003-06-26 05:26:20 +00:00
Gerald Carter
88f1591216 fix linking of some things that are not built by default
(This used to be commit 42133092a4)
2003-06-25 20:16:53 +00:00
Gerald Carter
f51d769dd3 large change:
*)  consolidates the dc location routines again (dns
    and netbios)  get_dc_list() or get_sorted_dc_list()
    is the authoritative means of locating DC's again.

    (also inludes a flag to get_dc_list() to define
     if this should be a DNS only lookup or not)

    (however, if you set "name resolve order = hosts wins"
     you could still get DNS queries for domain name IFF
     ldap_domain2hostlist() fails.  The answer?  Fix your DNS
     setup)

*)  enabled DOMAIN<0x1c> lookups to be funneled through
    resolve_hosts resulting in a call to ldap_domain2hostlist()
    if lp_security() == SEC_ADS

*)  enables name cache for winbind ADS backend

*)  enable the negative connection cache for winbind
    ADS backend

*)  removes some old dead code

*)  consolidates some duplicate code

*)  moves the internal_name_resolve() to use an IP/port pair
    to deal with SRV RR dns replies.  The namecache code
    also supports the IP:port syntax now as well.

*)  removes 'ads server' and moves the functionality back
    into 'password server' (which can support "hostname:port"
    syntax now but works fine with defaults depending on
    the value of lp_security())
(This used to be commit d7f7fcda42)
2003-06-25 17:41:05 +00:00
Andrew Bartlett
eb61c82382 Patch to move functions directly from pdb_ldap.c into lib/smbldap.c
The functions are unchanged.  Next step is to make idmap_ldap use them.

Andrew Bartlett
(This used to be commit 57617a0f8c)
2003-06-25 12:51:58 +00:00
Simo Sorce
52826c034e add tdb backup function separation and winbind idmap upgrade code form
pre-2.2.4 tdb database format.

tx volker for your work on this
(This used to be commit 2bdbeb9e97)
2003-06-24 14:02:21 +00:00
Andrew Bartlett
668a9af94e This removes the StrCaseCmp() stuff from 'net idmap' and 'net
groupmap'.  The correct way to implement this stuff is via a function
table, as exampled in all the other parts of 'net'.

This also moves the idmap code into a new file.  Volker, is this your
code?  You might want to put your name on it.

Andrew Bartlett
(This used to be commit 477f2d9e39)
2003-06-21 08:35:30 +00:00
Gerald Carter
93bcb9963b merge of the netsamlogon caching code from APPLIANCE_HEAD
This replaces the universal group caching code (was originally
based on that code).  Only applies to the the RPC code.

One comment: domain local groups don't show up in 'getent group'
that's easy to fix.

Code has been tested against 2k domain but doesn't change anything
with respect to NT4 domains.

netsamlogon caching works pretty much like the universal group
caching code did but has had much more testing and puts winbind
mostly back in sync between branches.
(This used to be commit aac01dc7bc)
2003-06-21 04:05:01 +00:00
Jelmer Vernooij
6605fec5dc Add installmodules to install
(This used to be commit 33e8dd8843)
2003-06-18 15:54:21 +00:00
Jelmer Vernooij
b9bf3252bf Fix building idmap_winbind as shared module
(This used to be commit 2556037796)
2003-06-17 10:41:08 +00:00
Tim Potter
35d0f987db Build libnss_wins.so as part of nsswitch target. Fix for bug #160
found by andreas@conectiva.com.br
(This used to be commit fa24fd6f5b)
2003-06-16 03:28:27 +00:00
Andrew Tridgell
50585d4c04 removed editreg from standard build until it is portable. Right now it
fails to build on a ton of platforms as it completely bypasses all of
our portability code.

if you want it then use 'make bin/editreg'. If some distros want to
add that to their spec files then thats up to them, but we really
can't have non-portable code unconditionally built in our main tree.
(This used to be commit 3c66111f32)
2003-06-10 14:09:20 +00:00
Herb Lewis
9960487103 get rid of IRIX o32 builds - some libraries (kerberos and ldap) are only
n32 so smbwrapper fails to link.
(This used to be commit 392f207a35)
2003-06-06 23:55:24 +00:00
Herb Lewis
6ae4c3c966 remove o32 targets for IRIX. kerberos and ldap libraries are n32 only so
linking smbwrappers will fail.
(This used to be commit f95f306729)
2003-06-06 23:35:22 +00:00
Herb Lewis
40eacb1648 get rid of warning about malformed if in Makefile
(This used to be commit 1e1e56efd8)
2003-06-06 22:24:36 +00:00
Gerald Carter
70da79f8a8 fix build on systems w/o LDAP libs
(This used to be commit f33aeaa039)
2003-06-06 20:31:19 +00:00
Herb Lewis
f5c21fc365 delete extra PASSDBLIB at beginning
(This used to be commit 1c82a3aa91)
2003-06-06 20:11:23 +00:00
Herb Lewis
bea0cf2c79 pdbedit needs PASSDBLIBS
(This used to be commit 0e91aca22c)
2003-06-06 19:44:32 +00:00
Gerald Carter
711f8d0a13 * break out more common code used between pdb_ldap and idmap_ldap
* remove 'winbind uid' and 'winbind gid' parameters (replaced
  by current idmap parameter)
* create the sambaUnixIdPool entries automatically in the 'ldap
  idmap suffix'
* add new 'ldap idmap suffix' and 'ldap group suffix' parametrer
* "idmap backend = ldap" now accepts 'ldap:ldap://server/' format
  (parameters are passed to idmap init() function
(This used to be commit 1665926281)
2003-06-06 13:48:39 +00:00
Gerald Carter
3bdfd57a2d working draft of the idmap_ldap code.
Includes sambaUnixIdPool objectclass

Still needs cleaning up wrt to name space.
More changes to come, but at least we now have a
a working distributed winbindd solution.
(This used to be commit 8241758544)
2003-06-05 02:34:30 +00:00
Jelmer Vernooij
69b50029f4 Add smb_register_idmap(). Based on a patch from metze
(This used to be commit 7e352f5c62)
2003-05-29 19:08:40 +00:00
Tim Potter
4e8052640e More fixes for builddir != srcdir.
- Use absolute directories for $builddir and $srcdir in the Makefile

 - Don't try and combine source files in $builddir and $srcdir to build
   proto.h.  It's just too hard to get it right across all targets we
   wish to compile on.  Use a hand created prototype for the single
   function in smbd/build_options.c that we need.  This allows us to ditch
   all the extra sed work that was causing problems: \t not portable - hah!

 - Fix bogus delheaders target to remove the correct files

This appears to work quite nicely now.  Let's see how it goes on the
buildfarm machines.
(This used to be commit 456184463d)
2003-05-27 02:35:53 +00:00
Jeremy Allison
9fd39e3f55 Don't use extensions like '\t' in a sed script. It breaks the make proto.
Jeremy.
(This used to be commit 7d546a6bad)
2003-05-23 18:31:57 +00:00
Andrew Tridgell
3d5d32826f installman needs to depend on installdirs, to fix parallel
build/install
(This used to be commit 8fa687701a)
2003-05-23 04:53:26 +00:00