1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-21 01:59:07 +03:00

6225 Commits

Author SHA1 Message Date
Tim Potter
bef4365647 Added client and server code for the GetPrintProcessorDirectory SPOOLSS
rpc.  This was supposed to fix a printer driver download bug but it didn't
but it seemed a shame to trash all this code so I'm commiting it #ifdef'ed
out in case someone needs it one day.
-
Martin Pool
d159415049 tdb_open_ex: Refactor to use a pointer to tdb, rather than an auto
tdb, to be consistent with the rest of the code.
-
Tim Potter
d902baf709 Formatting fixup. -
Martin Pool
a4cc69d945 Explain why snprintf has to be overridden in this way. -
Martin Pool
d7853d9937 (merge 1.130.4.93) Display results of checks for shared libraries. -
Tim Potter
62dfda654b Typo spotting. -
Andrew Tridgell
e5b484451a cleanup a little namespace pollution -
Andrew Tridgell
34589d5a47 added some comments -
Andrew Tridgell
7c60ae5937 moved the domain sid lookup and enumeration of trusted domains into
the backends

at startup, loop until we get the domain sid for our primary domain,
trying every 10 seconds. This makes winbindd handle a room-wide power
failure better
-
Andrew Tridgell
5ab2c8b821 added some comments -
Andrew Tridgell
4a6d297686 make sid_binstring available without HAVE_ADS -
Andrew Tridgell
77c1376456 explicitly encode NULL strings in the cache -
Andrew Tridgell
ec4c90fd7f removed a debug line -
Andrew Tridgell
fddb4f4c04 completely new winbindd cache infrastructure
this one looks like just another winbind backend, and has the
following properties:

- does -ve and +ve cacheing of all queries

- can be disabled with -n switch to winbindd

- stores all records packed, so even huge domains are not a problem
for a complete cache

- handles the server being down

- uses sequence numbers for all entries

This fixes a lot of problems with winbindd. Serving from cache is now
*very* fast.
-
Andrew Tridgell
fa1e7a62ac add smb_xvasprintf() panic wrapper around vasprintf -
Motonobu Takahashi
3a3b3469e6 added fr.msg from Fanch -
Andrew Tridgell
c4f5a6c65d added a simple tdbdump utility -
Andrew Tridgell
4a7e1f6bb1 set return value to total errors -
Andrew Tridgell
3c17c64e31 better error checking in nsstest -
Andrew Tridgell
84a3390eac - check for correct error codes
- handle no initgroups fn
-
Andrew Tridgell
01f63b9c92 - use accountype not accountcontrol
- better debug code
-
Andrew Tridgell
0ff30848f3 fixed type passed to ads_search -
Andrew Tridgell
f7ead035eb fixed used of string after free -
Jean-François Micouleau
a0b5ae5822 small comment I don't want to loose.
J.F.
-
Jean-François Micouleau
39f2b23347 Fix domain logon that I broke 3 days ago.
And it's in sync with the docs, %U is really replaced by the name the user
asked. Whereas in 2.2 that's false, %U is replaced by the name the user
was mapped to.

	J.F.
-
Andrew Bartlett
75d0f4cf19 By popular demand: a new config.guess and config.sub
(I hope I did this right)

Andrew Bartlett
-
Andrew Tridgell
838fbac7a0 check for gssapi_generic.h -
Andrew Tridgell
18da530293 fix a DEBUG() line -
Andrew Tridgell
435fdf276a added internal sasl/gssapi code. This means we are no longer dependent on cyrus-sasl which makes the code much less fragile. Also added code to auto-determine the server name or realm -
Andrew Bartlett
ff91131ef9 Fix segfault, and add a comment. -
Andrew Bartlett
ad18f33bfa Leak less memory.
Now, is there any reason that the prs_init() doesn't use the talloc context
that it is supplied as an argument for the actual data buffer?

It would seem logical to replace the malloc with a talloc, but I'm sure
there is some method to the madness (extrnal use/Reallocing of it I presume)

Andrew Bartlett
-
Andrew Bartlett
a8a53c08f7 Ensure that 'use spnego' restricts, rather than just advises our clients.
This means that if a hole is found in the spnego code, we can tell people
to just set 'use spengo' in their config file while we sort it out.

Other than that, preventing 'unusual' behaviour is always a good thing.

Andrew Bartlett
-
Herb Lewis
ce84993e8e include/build_env.h wasn't getting built by default with new rules unless
you did make headers - fixed
-
Andrew Tridgell
b5cb57a367 added a "use spnego" option
you need to set "use spnego = no" for w2k to be able to join a samba
domain. Otherwise the w2k box will assume we can do kerberos as a KDC
-
Herb Lewis
bc918bce10 OK I think this does what everyone wants with the .headers.stamp
it gets removed on a make clean
it gets created on a make headers (if it doesn't already exist)

This makes it so I only rebuild everthing once after a make clean and
also so nothing gets rebuilt after jfm does a make headers (proto)
-
Andrew Tridgell
c531f4773e allow nsstest to test any nss module -
Herb Lewis
ba2dd34407 add smbgroupedit -
Jean-François Micouleau
fef52c4b96 again an intrusive patch:
- removed the ugly as hell sam_logon_in_ssb variable, I changed a bit the
definition of standard_sub_basic() to cope with that.

- removed the smb.conf: 'domain admin group' and 'domain guest group'
parameters ! We're not playing anymore with the user's group RIDs !

- in get_domain_user_groups(), if the user's gid is a group, put it first
in the group RID list.

I just have to write an HOWTO now ;-)

        J.F.
-
Jean-François Micouleau
9866c18193 remove .headers.stamp from the delheaders definition
It forced a complete build to occur each time the proto are rebuild !

	J.F.
-
Andrew Tridgell
3de552f365 put the winbindd krb5 credentials cache in the lock directory
this prevents it clobbering the users cache
-
Andrew Tridgell
f34cac3b31 allow a MAX_DEBUG_LEVEL setting in local.h (or the Makefile)
This allows embedded systems to compile out the higher debug
levels. It should gain speed as well as reducing the code
size. Setting it to 1 saves about 300k of code on my system.
-
Andrew Tridgell
3ace8f1fcc added a propoer kerberos_kinit_password call
contribution from remus@snapserver.com

thanks!
-
Tim Potter
7c64e5f148 Fixed typo in fix for typo in debug. (-: -
Herb Lewis
83ec4c0f4d merge from 2.2
don't set WINBIND variables unless configure was run --with-winbind
-
Herb Lewis
646b5ae752 dont add -I./popt to CFLAGS it really belongs in FLAGS1 with other include
paths. This make it hard to use a script that overrides CFLAGS options.
-
Jeremy Allison
2919851235 Added fetch_domain_sid. Not used in current code, but a nice example
of how to use this interface.
Jeremy.
-
Jean-François Micouleau
7e20fad5ed changed the DEBUG level of tdb_pack and tdb_unpack. Instead of 8, it's now
18.

when you're looking at a level 10, and it's all clutered with
tdb_pack/unpack, it's getting .... And anyway most of our code using
tdb_pack/unpack have DEBUG around the call if there is a problem.

	J.F.
-
Jean-François Micouleau
72ee179108 added samr_queryuseralias(). instead of returning BUILTIN_ALIAS_RID_USERS,
now return the alias correctly.

time to look at the netlogon case.

	J.F.
-
Andrew Tridgell
56bdb152d8 fixed a return value -
Andrew Bartlett
575897e879 OK. Smbpasswd -j is DEAD.
This moves the rest of the functionality into the 'net rpc join' code.

Futhermore, this moves that entire area over to the libsmb codebase, rather
than the crufty old rpc_client stuff.

I have also fixed up the smbpasswd -a -m bug in the process.

We also have a new 'net rpc changetrustpw' that can be called from a
cron-job to regularly change the trust account password, for sites
that run winbind but not smbd.

With a little more work, we can kill rpc_client from smbd entirly!
(It is mostly the domain auth stuff - which I can rework - and the
spoolss stuff that sombody else will need to look over).

Andrew Bartlett
-