sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2024-12-23 17:34:34 +03:00
Code
20,289 Commits 60 Branches 1,144 Tags 452 MiB
ac25c32322
Commit Graph

8 Commits

Author SHA1 Message Date
Jeremy Allison
6fada7a82a r17943: The horror, the horror. Add KDC site support by 
writing out a custom krb5.conf file containing
the KDC I need. This may suck.... Needs some
testing :-).
Jeremy.
(This used to be commit d500e1f96d)
 2007-10-10 11:39:01 -05:00
Jeremy Allison
2abab7ee6d r17928: Implement the basic store for CLDAP sitename 
support when looking up DC's. On every CLDAP
call store the returned client sitename (if
present, delete store if not) in gencache with
infinate timeout. On AD DNS DC lookup, try looking
for sitename DC's first, only try generic if
sitename DNS lookup failed.
I still haven't figured out yet how to ensure
we fetch the sitename with a CLDAP query before
doing the generic DC list lookup. This code is
difficult to understand. I'll do some experiments
and backtraces tomorrow to try and work out where
to force a CLDAP site query first.
Jeremy.
(This used to be commit ab3f0c5b1e)
 2007-10-10 11:38:59 -05:00
Volker Lendecke
846e939260 r17089: Fix a possible null dereference and some memleaks. 
Jerry, please check.

Thanks,

Volker
(This used to be commit b87c495221)
 2007-10-10 11:38:11 -05:00
Günther Deschner
f3e71c6072 r16861: Fixing crash bug when passing no domain/realm name to the CLDAP request. 
Guenther
(This used to be commit 863aeb621a)
 2007-10-10 11:19:11 -05:00
Günther Deschner
1b12b48a09 r16452: Fix memleak in the CLDAP processing (found by valgrind). 
Guenther
(This used to be commit 479dec6845)
 2007-10-10 11:18:54 -05:00
Günther Deschner
453e4b50aa r15559: Smaller fixes for the new cldap code: 
* replace printf to stderr with DEBUG statements as they get printed in
  daemons
* "net ads lookup" return code

Guenther
(This used to be commit 8dd925c5fb)
 2007-10-10 11:17:01 -05:00
Günther Deschner
bae13fd8c8 r15558: Do not wait endless for a CLDAP reply when the LDAP server is 
unavailable; use "ldap timeout" handling.

Jerry, please check.

Guenther
(This used to be commit 821bbb4566)
 2007-10-10 11:16:59 -05:00
Gerald Carter
2c029a8b96 r15543: New implementation of 'net ads join' to be more like Windows XP. 
The motivating factor is to not require more privileges for
the user account than Windows does when joining a domain.

The points of interest are

* net_ads_join() uses same rpc mechanisms as net_rpc_join()
* Enable CLDAP queries for filling in the majority of the
  ADS_STRUCT->config information
* Remove ldap_initialized() from sam/idmap_ad.c and
  libads/ldap.c
* Remove some unnecessary fields from ADS_STRUCT
* Manually set the dNSHostName and servicePrincipalName attribute
  using the machine account after the join

Thanks to Guenther and Simo for the review.

Still to do:

* Fix the userAccountControl for DES only systems
* Set the userPrincipalName in order to support things like
  'kinit -k' (although we might be able to just use the sAMAccountName
  instead)
* Re-add support for pre-creating the machine account in
  a specific OU
(This used to be commit 4c4ea7b20f)
 2007-10-10 11:16:57 -05:00