1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-25 17:57:42 +03:00

7140 Commits

Author SHA1 Message Date
Andrew Tridgell
a181f49b42 handle a NULL hostname in cli_connect() -
Andrew Tridgell
75621d5284 better error handling -
Andrew Tridgell
2183c1f3b0 added a comment about /bin/date -
Andrew Tridgell
b3ba2293d0 added a net time command. Allow display or set of system time based on
a SMB server

particularly useful for ADS is:

	net time set -S DOMAIN#1B

this makes kerberos clock skew problems go away :)
-
Tim Potter
1217ef28a6 Modify winbindd to use authenticated user info from secrets.tdb when making
IPC$ connections to domain controllers.
-
Tim Potter
507003522b Converted wbinfo to use popt instead of getopt - popt is very nice!
Added a --set-auth-user function to set a username and password that can be
used by winbindd when making connections to domain controllers.  This is
necessary when restrictions have been placed on anonymous connections
either through the RestrictAnonymous registry setting, or the win2k Local
Security Policy -> Security Settings -> Local Policies -> Security Options
-> Additional restrictions for anonymous connections.  (phew)

Two new keys are set in secrets.tdb: SECRETS/AUTH_USER and
SECRETS/AUTH_PASSWORD which hold the username and plaintext password of the
user to connect as.

To reset these values, run wbinfo --set-auth-user ""
-
Andrew Tridgell
b4304c5231 detect attempts to connect to names of the type NAME#xx and do a
netbios lookup for name NAME with node type xx.

This affects all our client progs. Very useful :)
-
Andrew Tridgell
cb9dbcef7c allow overriding the local time in kerberos_kinit_password() -
Tim Potter
c87d1ad321 Removed unreferenced getopt() externals. -
Tim Potter
4ef50ef9f7 SAMR query sec obj returns different results depending on which sam handle
it is passed.  Not sure what these different contexts are called or what
they are used for.

 - if a rid is specified to samquerysecobj then use the sam user policy
    handle for that rid
 - if -d is specified then use the sam domain policy handle
 - otherwise just use the sam connect policy handle

JF, any ideas about this?
-
Tim Potter
d1ebd259c8 Grr - people who put const everywhere should fix up all the warnings they
generate.
-
Tim Potter
1dc0e9096d Removed unused variable. -
Tim Potter
59b2e3f408 Doing some research into ACLs on the LSA and SAM policy objects.
- added lsaquerysecobj to rpcclient
 - renamed querysecobj to samquerysecobj
 - removed duplicated display_sec_acl() code from cmd_spoolss.c and
   cmd_samr.c and moved it into display_sec.c
-
Samba Release Account
f2f3183811 preparing for release of 3.0-alpha4 -
Andrew Tridgell
34328e3031 removed the start_ndx parameter from group enumeration
I tried testing this by lowering the buffer size in
cli_samr_enum_dom_groups() but that didn't work - I think this needs
more looking into
-
Tim Potter
83caa883d7 Compile fix. -
Andrew Tridgell
1c909afe76 got rid of start_ndx from query_user_list() -
Jean-François Micouleau
80e36549b6 NT_STATUS(0x80000005) maps to ERRDOS,234
J.F.
-
Jean-François Micouleau
d4bc8f02f7 added enum alias groups to rpcclient -
Andrew Tridgell
d20c3717dd reinstated all the rap commands as top level commands until we get the
protocol switch mechanism in place
-
Andrew Tridgell
be254eb13c moved ccache location change into winbindd code -
Andrew Tridgell
24aa09ff3d robustness fixes and moved ccache location into winbindd_ads code -
Jeremy Allison
919b11a787 Treat RAP codes differently.
Jeremy.
-
Jeremy Allison
3c68b94199 RAP error strings take precedence as they are not encoded in the SMB header
(ie. the call can succeed, but still be an encoded error).
Jeremy.
-
Jim McDonough
55d55e311e Delay gssapi header checking until after kerberos has been located. Wasn't working on RedHat systems because of /usr/kerberos install location. -
Jean-François Micouleau
0a727afc66 added info level 3 to samrgetgroupinfo. I don't know what the value is.
It's just to keep usermanager happy ;-)

clean up a bit samr_query_aliasinfo to return the group description

added: samr_del_aliasmem, samr_del_groupmem and samr_del_domuser

with the correct scripts, you can now entirely manage the users from
usermanager ! Closer to full PDC every day ;-)

        J.F.
-
Martin Pool
83ab28a7e5 Make proto -
Martin Pool
f0878f19eb Add a panic action that tries to call gdb noninteractively to get a
backtrace.   Will break on many machines, but we're already crashed in
this case.
-
Samba Release Account
9c3f2ee906 preparing for release of 3.0-alpha3 -
Martin Pool
6c684c89a4 Doc. -
Martin Pool
caa08bb56e Allow for internal databases which may have no name. -
Samba Release Account
c5e45a4bc8 preparing for release of 3.0alpha2 -
Martin Pool
8118676f78 Log more error messages. -
Martin Pool
b50e566ab9 Log more error messages. -
Martin Pool
8edd29e099 Also show LDFLAGS/LDSHFLAGS when starting compilation, because they're
not visible later on.
-
Andrew Tridgell
4d3b827e5a use objectCategory instead of objectClass for faster searching -
Tim Potter
b198de92d2 Merge of memory leak fixes from APPLIANCE_TNG. -
Martin Pool
a228c7efcc Allocate tdb name up front in case log functions want to use it. -
Andrew Tridgell
217c39f232 winbindd backends can now be marked "consistent" or "inconsistent"
consistent backends (like ADS) always give correct primary group
info, so we can play cache tricks to speed things up a lot

inconsistent backends (like MSRPC) need to fetch stuff more often
-
Martin Pool
b1d7d80068 tdb_open_ex: More cleanups: just dynamically allocate the TDB_CONTEXT
up front, rather than working on the stack and then copying across.
-
Martin Pool
52ef112e10 Refactor code to check whether already open into its own function. -
Andrew Tridgell
2b396f9172 shrank the winbindd_cache.tdb somewhat
on my system it now uses 132k for 308 users
-
Martin Pool
fe901ec194 tdb_open_ex should always "goto fail" in case of error, rather than
just returning.  I don't think this would leak at the moment, but it's
an accident waiting to happen.
-
Martin Pool
bb6c0df4bc Doc. -
Martin Pool
fac685d30f tdb_open_ex: Continue previous refactoring so that we consistently
just say "tdb" not "&tdb".
-
Tim Potter
bef4365647 Added client and server code for the GetPrintProcessorDirectory SPOOLSS
rpc.  This was supposed to fix a printer driver download bug but it didn't
but it seemed a shame to trash all this code so I'm commiting it #ifdef'ed
out in case someone needs it one day.
-
Martin Pool
d159415049 tdb_open_ex: Refactor to use a pointer to tdb, rather than an auto
tdb, to be consistent with the rest of the code.
-
Tim Potter
d902baf709 Formatting fixup. -
Martin Pool
a4cc69d945 Explain why snprintf has to be overridden in this way. -
Martin Pool
d7853d9937 (merge 1.130.4.93) Display results of checks for shared libraries. -