1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-22 05:57:43 +03:00

7095 Commits

Author SHA1 Message Date
Tim Potter
bef4365647 Added client and server code for the GetPrintProcessorDirectory SPOOLSS
rpc.  This was supposed to fix a printer driver download bug but it didn't
but it seemed a shame to trash all this code so I'm commiting it #ifdef'ed
out in case someone needs it one day.
-
Martin Pool
d159415049 tdb_open_ex: Refactor to use a pointer to tdb, rather than an auto
tdb, to be consistent with the rest of the code.
-
Tim Potter
d902baf709 Formatting fixup. -
Martin Pool
a4cc69d945 Explain why snprintf has to be overridden in this way. -
Martin Pool
d7853d9937 (merge 1.130.4.93) Display results of checks for shared libraries. -
Tim Potter
62dfda654b Typo spotting. -
Andrew Tridgell
e5b484451a cleanup a little namespace pollution -
Andrew Tridgell
75ad6df184 switch off level 100 debug for server security -
Andrew Tridgell
34589d5a47 added some comments -
Andrew Tridgell
7c60ae5937 moved the domain sid lookup and enumeration of trusted domains into
the backends

at startup, loop until we get the domain sid for our primary domain,
trying every 10 seconds. This makes winbindd handle a room-wide power
failure better
-
Andrew Tridgell
5ab2c8b821 added some comments -
Andrew Tridgell
4a6d297686 make sid_binstring available without HAVE_ADS -
Andrew Tridgell
77c1376456 explicitly encode NULL strings in the cache -
Andrew Tridgell
ec4c90fd7f removed a debug line -
Andrew Tridgell
fddb4f4c04 completely new winbindd cache infrastructure
this one looks like just another winbind backend, and has the
following properties:

- does -ve and +ve cacheing of all queries

- can be disabled with -n switch to winbindd

- stores all records packed, so even huge domains are not a problem
for a complete cache

- handles the server being down

- uses sequence numbers for all entries

This fixes a lot of problems with winbindd. Serving from cache is now
*very* fast.
-
Andrew Tridgell
fa1e7a62ac add smb_xvasprintf() panic wrapper around vasprintf -
Motonobu Takahashi
3a3b3469e6 added fr.msg from Fanch -
Andrew Tridgell
c4f5a6c65d added a simple tdbdump utility -
Andrew Tridgell
4a7e1f6bb1 set return value to total errors -
Andrew Tridgell
3c17c64e31 better error checking in nsstest -
Andrew Tridgell
84a3390eac - check for correct error codes
- handle no initgroups fn
-
Andrew Tridgell
01f63b9c92 - use accountype not accountcontrol
- better debug code
-
Andrew Tridgell
0ff30848f3 fixed type passed to ads_search -
Andrew Tridgell
f7ead035eb fixed used of string after free -
Jean-François Micouleau
a0b5ae5822 small comment I don't want to loose.
J.F.
-
Jean-François Micouleau
39f2b23347 Fix domain logon that I broke 3 days ago.
And it's in sync with the docs, %U is really replaced by the name the user
asked. Whereas in 2.2 that's false, %U is replaced by the name the user
was mapped to.

	J.F.
-
Andrew Bartlett
75d0f4cf19 By popular demand: a new config.guess and config.sub
(I hope I did this right)

Andrew Bartlett
-
Andrew Tridgell
838fbac7a0 check for gssapi_generic.h -
Andrew Tridgell
18da530293 fix a DEBUG() line -
Andrew Tridgell
435fdf276a added internal sasl/gssapi code. This means we are no longer dependent on cyrus-sasl which makes the code much less fragile. Also added code to auto-determine the server name or realm -
Andrew Bartlett
ff91131ef9 Fix segfault, and add a comment. -
Andrew Bartlett
ad18f33bfa Leak less memory.
Now, is there any reason that the prs_init() doesn't use the talloc context
that it is supplied as an argument for the actual data buffer?

It would seem logical to replace the malloc with a talloc, but I'm sure
there is some method to the madness (extrnal use/Reallocing of it I presume)

Andrew Bartlett
-
Andrew Bartlett
a8a53c08f7 Ensure that 'use spnego' restricts, rather than just advises our clients.
This means that if a hole is found in the spnego code, we can tell people
to just set 'use spengo' in their config file while we sort it out.

Other than that, preventing 'unusual' behaviour is always a good thing.

Andrew Bartlett
-
Jean-François Micouleau
b48d58c768 basic howto -
Herb Lewis
ce84993e8e include/build_env.h wasn't getting built by default with new rules unless
you did make headers - fixed
-
Andrew Tridgell
b5cb57a367 added a "use spnego" option
you need to set "use spnego = no" for w2k to be able to join a samba
domain. Otherwise the w2k box will assume we can do kerberos as a KDC
-
Herb Lewis
bc918bce10 OK I think this does what everyone wants with the .headers.stamp
it gets removed on a make clean
it gets created on a make headers (if it doesn't already exist)

This makes it so I only rebuild everthing once after a make clean and
also so nothing gets rebuilt after jfm does a make headers (proto)
-
Andrew Tridgell
c531f4773e allow nsstest to test any nss module -
Herb Lewis
ba2dd34407 add smbgroupedit -
Jean-François Micouleau
fef52c4b96 again an intrusive patch:
- removed the ugly as hell sam_logon_in_ssb variable, I changed a bit the
definition of standard_sub_basic() to cope with that.

- removed the smb.conf: 'domain admin group' and 'domain guest group'
parameters ! We're not playing anymore with the user's group RIDs !

- in get_domain_user_groups(), if the user's gid is a group, put it first
in the group RID list.

I just have to write an HOWTO now ;-)

        J.F.
-
Jean-François Micouleau
9866c18193 remove .headers.stamp from the delheaders definition
It forced a complete build to occur each time the proto are rebuild !

	J.F.
-
Gerald Carter
f1ead192c6 merge from 2.2 -
Gerald Carter
c5ee06b7c8 merge from 2.2 -
Gerald Carter
54a453478a commit from 2.2 -
Andrew Tridgell
3de552f365 put the winbindd krb5 credentials cache in the lock directory
this prevents it clobbering the users cache
-
Andrew Tridgell
f34cac3b31 allow a MAX_DEBUG_LEVEL setting in local.h (or the Makefile)
This allows embedded systems to compile out the higher debug
levels. It should gain speed as well as reducing the code
size. Setting it to 1 saves about 300k of code on my system.
-
Andrew Tridgell
3ace8f1fcc added a propoer kerberos_kinit_password call
contribution from remus@snapserver.com

thanks!
-
Tim Potter
7c64e5f148 Fixed typo in fix for typo in debug. (-: -
Herb Lewis
8f3093fbd0 fix up packaging stuff -
Herb Lewis
83ec4c0f4d merge from 2.2
don't set WINBIND variables unless configure was run --with-winbind
-