1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-04 17:47:26 +03:00

9906 Commits

Author SHA1 Message Date
Jelmer Vernooij
f90e9ae244 Change pdb_mysql function to return NTSTATUS
(This used to be commit fa056769a08c93f086f05baf9095ee93217f92f1)
2002-09-26 14:52:54 +00:00
Jelmer Vernooij
2ef81d7517 Make functions return NTSTATUS instead of BOOL
(This used to be commit 6347d40eff03ad780446bdae0f1dfe0bc9edf824)
2002-09-26 14:29:09 +00:00
Volker Lendecke
1de972299f Add -r parameter to smbgroupedit. With -r you can manually choose
a rid.

Volker
(This used to be commit 11ec785f3f43b277ae3f28b38865f4de972495bc)
2002-09-26 14:01:39 +00:00
Andrew Bartlett
a5c8985215 Patch from "Kai Krueger" <kai@kruegernetz.de> to get some more of our access
control bits right on the SAMR pipe.

Andrew Bartlett
(This used to be commit e87948c777b59592b130da081ef5d25600455d29)
2002-09-26 13:31:49 +00:00
Simo Sorce
fc4100eabe forgot include file, sorry
(This used to be commit 67d600ed8ed1cdd25503fdb2299bdfa93befee1f)
2002-09-26 10:31:51 +00:00
Andrew Bartlett
ad514000db Patch from "Stefan (metze) Metzmacher" <metze@metzemix.de> to do a *much*
better job of working with usrmgr.   Previously we were blanking out entires,
and all sort of mischif.

The new patch (which I've now had a chance to test/modify) also takes care not
to expand % values (ie we go \\%L\%U -> \\server\user, we don't want to store
\\server\user back) and to correctly notice 'not set' compared to 'null string'
etc.

Andrew Bartlett
(This used to be commit ab878b6cc4132594fc33f78aeebf0d8b7266c150)
2002-09-26 10:25:34 +00:00
Simo Sorce
9e70b39ab2 move all the passdb internal interface to NTSTATUS
only the interface has been fully moved to NTSTATUS
not all the plugins make full use of it, but have been all converted.

My testings passed completely, however a bit of more testing is welcome

Simo.
(This used to be commit 102a26e06591928a03b49cd312a65811ed46314f)
2002-09-26 09:50:53 +00:00
Jelmer Vernooij
2c33710351 notify user when no {domains,accounts} were found
(This used to be commit ee3b497962a28c7c58e866b8536b1d2ae6f9b23a)
2002-09-25 19:33:04 +00:00
Jelmer Vernooij
07d7643a6e Add samtest command 'enum_accounts' + few typo fixes in sam/interface.c
(This used to be commit 81156d6556dab2ea23dea69da6940a0482d79d9b)
2002-09-25 17:10:58 +00:00
Jelmer Vernooij
956767fdc4 add samtest commands:
- show_domain
 - context
(This used to be commit e969b1897269ebd27650c2192cd19ebda47e042e)
2002-09-25 15:54:40 +00:00
Gerald Carter
b55a4ca644 fix getpass replacement check (i thought I fixed this a few days
ago....)
(This used to be commit 1b55965f12dc2ede46ca2dbc82acbf56b7e33e2e)
2002-09-25 15:46:49 +00:00
Andrew Bartlett
1f5a153a6f Make it clear what this if statement applies to, and what it doesn't
(This used to be commit 6b78e554c3dd3c98bff7dbd1d3715a9b7e405b8d)
2002-09-25 14:18:11 +00:00
Jelmer Vernooij
284dd066a8 remove extern for AllowDebugChange since we don't use it
(This used to be commit 70d9b71ceaeba95712fa61e601376ff5cc8e7714)
2002-09-25 12:59:47 +00:00
Andrew Bartlett
d7ffd7a40a Fix the circular dependency that was preventing 'domain master = auto' (the
default) from working.

Andrew Bartlett
(This used to be commit 25950dbb3272949a235bed936c7d7b1d23f15fac)
2002-09-25 12:32:17 +00:00
Andrew Bartlett
d386b71d32 Metze claims that without this his win2k server gets horribly confused looking
for all sorts of AD things in lp_realm().  We need to get some non-Win2k
NTLMSSP and chase this up a bit, but this will do for now.

(Hmm, this might affect NTLMv2 as well)

Andrew Bartlett
(This used to be commit 0e6babc306f60e88fc28705a8d4ad112bafe92cb)
2002-09-25 12:09:56 +00:00
Andrew Bartlett
31b131b0e9 Whenever we deal with adding machine/trusted domain accounts, always reset the
flag to what we expect.  This handles the 'upgrade' from unixsam beter (where
all $ terminated accounts are machines).

Andrew Bartlett
(This used to be commit a198940ea6f7b7f3cba38c5a9f695e0731204583)
2002-09-25 12:02:57 +00:00
Jelmer Vernooij
059838a843 Don't crash when a backend doesn't have a setsampwent function available - bug reported by metze
(This used to be commit 4aea951102a6e82612560e6a59931fde433ee6ea)
2002-09-25 11:42:30 +00:00
Andrew Bartlett
82102d9c99 This patch from "Stefan (metze) Metzmacher" <metze@metzemix.de> cleans up
pdb_ldap and adds a 'ldap passwd sync' option.

The idea with this option is to do allow an ldap backend to do all the fancy
password hashing etc - and to tell smbd no to try and double-up.  Using 'ldap
passwd sync = only' will do this, but is not recommended unless such a backend
is in place...

Running 'ldap passwd sync = yes' just gets you the same as doing 'pam passwd
sync = yes' and having both PAM and pam_ldap correctly configured for 'magic
root' behaviour, but only using ldap connection, and one set of credentials.

This also gets us closer to allowing ldap to say 'password too short' etc,
which might assist in maintaining a consistant password policy.

Andrew Bartlett
(This used to be commit f13e243f1a13d34ae057b40b01f561e8b95d4570)
2002-09-25 11:34:31 +00:00
Jelmer Vernooij
8df2ac63f0 Fix debuglevel command-line argument
(This used to be commit 779aea57450db83fa7870e8a35db55d475682519)
2002-09-25 11:19:48 +00:00
Jelmer Vernooij
b9858339a4 Compile samtest with LIBADS_OBJ and PASSDB_OBJ...
(This used to be commit f0c095875758ef44ed2d25d3ed9d77e5e163b75f)
2002-09-25 11:08:16 +00:00
Jelmer Vernooij
efcf29fde6 samtest should load smb.conf by default
add command-line option to samtest to specify alternate config file - use /dev/null
to don't load any config file..
add 'conf' command to load specified config file
(This used to be commit 237883d1e68e99a3ea3df9b6e182c70cb31b2523)
2002-09-25 10:17:08 +00:00
Andrew Bartlett
780e048f58 At least try to get this function picked up by the autoprototyper
(This used to be commit d5303d5c080212486329f7e5a65f732e11efbb37)
2002-09-25 09:56:36 +00:00
Andrew Bartlett
8a3bb8b36b Kill of Get_Pwnam_Modify and smb_getpwnam(). The latter assumes some things
that just don't apply any more - now that we always keep username and domain
seperate.  Also, the policy it was trying to permit is now implemented by the
auth code.

Andrew Bartlett
(This used to be commit 760c0740cad948665db4a1d462fbbd99332713ef)
2002-09-25 09:55:41 +00:00
Andrew Bartlett
b06d2abe74 Another patch from metze, towards his work on sam_ads.
See mx-ldap.sf.net for his current progress.
(This used to be commit 9c62d1312fdf0aa7b1978e8bbb56fc076ba7e9d0)
2002-09-25 09:40:45 +00:00
Andrew Bartlett
891f580300 Header files should not include includes.h - therein lies maddness, particuarly
if we ever want to get rid of the magic macros.
(This used to be commit 13f33e466ed31d35221157d6b3a1a05507157b66)
2002-09-25 09:38:27 +00:00
Andrew Bartlett
3c39539ddf Actually pick up the kerberos libs in RedHat - the previous shell construct
didn't seem to work properly.

Andrew Bartlett
(This used to be commit c0925b6352ff6135da03edff44e0bbd72c949a20)
2002-09-25 09:37:18 +00:00
Andrew Bartlett
bfa04e42b8 If adding a user to ldap, make sure we have the 'account' structural class, or
else we can't add to OpenLDAP 2.1
(This used to be commit d9a91a41441c156223760cb356fa997ea7bdbc1a)
2002-09-25 09:35:45 +00:00
Andrew Bartlett
2bd2b243fc Move to common user token debugging, and ensure we always print both the
NT_TOKEN and the unix credentials - as we incresingly use the NT stuff we want
to make it easy to check they don't get out of wack.

Andrew Bartlett
(This used to be commit a3882a19254811ace2f9545580c14ce3bd588095)
2002-09-25 09:34:43 +00:00
Andrew Bartlett
6f67ae667a Avoid a segfault in net join when you have not done an kinit, and it's falling
back to NTLMSSP.  We need to get the password out of the user, and this
eventually does.

Andrew Bartlett
(This used to be commit bb518a3bae3bf91a589021fcc5b1e715247c5ded)
2002-09-25 09:32:08 +00:00
Tim Potter
5b71a0055f The security descriptor in a PRINTER_INFO_2 could be NULL. (Bong?)
(This used to be commit 7ce782c20c6b9e515a2fa831315ae14c66d322ee)
2002-09-25 06:25:02 +00:00
Jeremy Allison
b952ddfbe6 Merge of "profile acls" code.
Jeremy.
(This used to be commit cfd1bf250b417f3ba3ad21ff681ab282311bb7eb)
2002-09-25 05:11:25 +00:00
Gerald Carter
4912dd90ee merge from APP_HEAD
(This used to be commit 930c6710fe076b52ad21addf5fcda834f85e15a9)
2002-09-25 05:01:51 +00:00
Jeremy Allison
2b425763b8 Hold lock on NEXTJOB record for a very short time. Jerry needs to add code
to make this rebust w.r.t. stored devicemodes.
Jeremy.
(This used to be commit f93a008f09acda2ddaff9857f2fe0c86948539d1)
2002-09-24 22:57:51 +00:00
Jeremy Allison
f63ed5295a Moved -ve cache check to correct place.
Jeremy.
(This used to be commit 38c67632ade40413c0cc2b91e04105e4065a18b7)
2002-09-24 22:56:59 +00:00
Jelmer Vernooij
a3eb2684c3 enum_domains shouldn't crash when there are no domains available
(This used to be commit d312e1c2b44905af87c4d550975eee78dbf2edee)
2002-09-24 21:29:33 +00:00
Jelmer Vernooij
529848e988 Fix bug in get_methods_by_name
Fix bug in enum_domains
Add samtest commands:
 - lookup_sid
 - lookup_name
 - enum_domains
 - lookup_domain
(This used to be commit 0c01219850e5d9b77b3b2c0b4b87aa3c82e3292b)
2002-09-24 21:18:22 +00:00
Jelmer Vernooij
2cd64003e3 - Don't put pointer to sam_domain_handle in sam_methods but single domainsid and domainname
- Allocate sam_methods, set domain_sid, domain_name and backend_name in make_sam_methods_backend_entry instead of in the backend
- Remove sam_context and domain_sid pointers from the sam_init_function - we don't need those arguments anymore since they're
  available in sam_methods as well
(This used to be commit 50d2527eed0eb26c16f2f7e28badbf08d771380e)
2002-09-24 20:18:39 +00:00
Volker Lendecke
28947d6cd1 This is a first working version of net rpc vampire. First do a net rpc
getsid, then join as a BDC, and then watch net rpc vampire suck out
the good stuff out of a PDC :-). It's not perfect, but it does quite a
bit for me. Watch out for more.

Volker
(This used to be commit f0d7ac9feb5844c93789344285b1d66f480209ba)
2002-09-24 06:50:11 +00:00
Richard Sharpe
05c557c31c Make sure that Alfred Perlstein's changes get into head as smbprint and
that the old one becomes smbprint.old.

We still need to hack smbprint some more to make sure that we can pass
the username and password in a file rather than on the command line where
local hackers can see it.
(This used to be commit ef970a764eb97893ff2090f7cbf2f2ec06911d0f)
2002-09-24 06:44:37 +00:00
John Terpstra
0f72389a85 Typos! Fix 'em!
(This used to be commit d2976b6872c43e3b5bb9a589e8eaff1a08ad5352)
2002-09-24 01:59:08 +00:00
John Terpstra
68e361e72a Removed call to configure for VFS modules.
(This used to be commit a029d9781d8511eb5eb51568647fbeccde2efed3)
2002-09-24 01:37:05 +00:00
John Terpstra
6077a0a551 Updated in preparation for samba-3.0.0alpha20
(This used to be commit 05f61b2dc4c120f5303e1a7c85ca8b1409d9a95e)
2002-09-24 01:12:11 +00:00
Tim Potter
af78eafa6c Don't uppercase the username and domain in a session setup.
(This used to be commit 0ad19825df318030b1772404570cd993fe49e40a)
2002-09-23 21:24:31 +00:00
Volker Lendecke
2b6057ef1f Ok, what's this? Samba as a PDC wants to authenticate a user coming in
to a native NT member server. If the logoff time in the samlogon reply
is set to something else but infinity, the tree connect to the member
server comes back with 'bad uid'. In my traces, NT PDC sends
0x7fff.. always. Weird, but true.

I would really like others to double-check this. If you have questions
regarding the setup, feel free to ask!

Thanks!

Volker
(This used to be commit 066b163bde9419d32fe8ffe00c1841107357c138)
2002-09-23 17:50:04 +00:00
Richard Sharpe
9264711576 Update some help. People keep forgetting that!
(This used to be commit b53547bf663ed1714326f9b0e74215e012e728af)
2002-09-23 16:54:32 +00:00
Richard Sharpe
587c4c5aa6 Add net getlocalsid [name]
(This used to be commit 08c3e2b824cd2c93ca548fa18ea16a18f5b197e5)
2002-09-23 16:46:32 +00:00
Volker Lendecke
06ce201a29 Ok, getting a bit more ambitious. Stop me, if this is wrong. ;-)
When creating a group you have to take care of the fact that the
underlying unix might not like the group name. This change gets around
that problem by giving the add group script the chance to invent a
group name. It then must only return the newly created numerical gid.

Volker
(This used to be commit b959419ed38e66a12b63cad3e5fbfa849f952acc)
2002-09-23 16:21:01 +00:00
Volker Lendecke
83ca90a67d Cosmetic fix for debug message.
(This used to be commit 42774a7753eb8be1ec04bcb5dda089910a1b6d0b)
2002-09-23 15:36:02 +00:00
Volker Lendecke
7eb8c5e8d0 tdbdump also needs signal.h. Thanks to Guenther Deschner <gd@suse.de>
Volker
(This used to be commit a1bade0748fa46c6cb00e99d7022b21057679889)
2002-09-23 15:00:09 +00:00
Volker Lendecke
cd2924f94e Add the ability to view/set the current local domain SIDs.
Volker
(This used to be commit f6ed429838cc0140c0d033875012c7a999891549)
2002-09-23 10:05:15 +00:00