1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-21 01:59:07 +03:00

6225 Commits

Author SHA1 Message Date
Andrew Bartlett
c76c1f6904 Add a couple of extra debugs for the secrets.tdb stuff -
Andrew Bartlett
d15ea4fa8e Ensure we fill in the %U for NTLMSSP connections -
Andrew Tridgell
5985d7e6ee fixed a minor password memory leak -
Andrew Tridgell
45c328800e fixed a memory leak -
Andrew Tridgell
58e93a8b7d fix link error -
Andrew Tridgell
0d85815c99 handle ldap server down better -
Andrew Tridgell
7d94f1b736 added a REALLY gross hack into kerberos_kinit_password so that
winbindd can do a kinit
this will be removed once we have code that gets a tgt
and puts it in a place where cyrus-sasl can see it
-
Andrew Tridgell
aff916e543 auto-init secrets.tdb -
Andrew Tridgell
4f004eb54d added timeouts and retries to ldap operations -
Andrew Tridgell
9a084f0bb9 moved the sequence number fetch into the backend, and fetch the
sequence number via ldap when using ads
-
Andrew Tridgell
f64612b89b don't double free ldap message lists -
Andrew Tridgell
13b933104e paranoia fixes in based ldap routines for potential memory leaks -
Andrew Tridgell
a45e396859 fixed another leak - memory usage now seems to be quite small -
Andrew Tridgell
7de670cd15 added very basic ads connection cacheing -
Andrew Tridgell
eb6f0e91dd more memory leak fixes -
Andrew Tridgell
60b5d4432a plugged most of the memory leaks -
Andrew Tridgell
fad564c177 added the last winbindd/ads backend function
winbindd is now fully functional with a native mode w2k server

now for the memory leaks and speed ...
-
Andrew Tridgell
7d44aa3915 finally worked out how to do ldap lookups by binary blobs, so I can
now do searches on SID. This allows me to do a true ldap sid_to_name()
function

one one function to go!
-
Andrew Tridgell
31d6d049b3 added functions that convert a ads binary blob to a string (for
searching on SID)
-
Andrew Tridgell
2b2155beae fixed an off by 1 bug in talloc_asprintf() -
Jeremy Allison
9563de2ef8 Fixed parse_domain_user to be bool.
Jeremy.
-
Andrew Bartlett
5a96391c75 Add a new flag for anonymous connections -
Andrew Bartlett
61b0f5f4f9 Make it easier to construct anonymous connections with a new flag and helper
function.
-
Andrew Bartlett
b2443f6fca Split out the name resolution code into a seperate function -
Jeremy Allison
4bf4ee3f14 Use print_queue_length() by preference if we don't need a queue
as it doesn't do a traversal.
Jeremy.
-
Andrew Bartlett
d00f461f43 Follow herb's suggestion and don't strdup a string to itself -
Andrew Bartlett
ea76a687fc Follow herb's suggestion and don't strdup a string to itself. -
Jeremy Allison
425bb0f405 Improved efficiency of enumerating print queue's under a particular
extreme condition...
Jeremy.
-
Andrew Bartlett
1197689bc5 Add a mechinism to allow for sane porting of rpcclient components into the new
'net' command.

This also gets us 'net rpc user add'.

Andrew Bartlett
-
Andrew Bartlett
e1b940c91b Ditto on the const religion. -
Andrew Bartlett
64bf8f81c4 Const religion for some of the RPC code. -
Herb Lewis
8aafec95cb Merge from 2.2
If you do not have one more expect than issue when talking to the passwd
program you will not send the last issue.
-
Jean-François Micouleau
f057d62aae move proto.h and build_env.h from $(srcdir)/include to $(builddir)/include
tridge, martin, if you think it's wrong , you can revert it.

	J.F.
-
Jean-François Micouleau
6c87e96149 added a boolean to the group mapping functions to specify if we need or
not the privileges. Usually we don't need them, so the memory is free
early.

lib/util_sid.c: added some helper functions to check an SID.

passdb/passdb.c: renamed local_lookup_rid() to local_lookup_sid() and pass
an RID all the way. If the group doesn't exist on the domain SID,
don't return a faked one as it can collide with a builtin one. Some rpc
structures have been badly designed, they return only rids and force the
client to do subsequent lsa_lookup_sid() on the domain sid and the builtin
sid !

rpc_server/srv_util.c: wrote a new version of get_domain_user_groups().
Only the samr code uses it atm. It uses the group mapping code instead of
a bloody hard coded crap. The netlogon code will use it too, but I have to
do some test first.

	J.F.
-
Jeremy Allison
9b7182a9da Correct message on wbinfo fail to open config file.
Jeremy.
-
Jeremy Allison
837f2b961b Tidup.
Jeremy.
-
Martin Pool
3dbb5dfcfb Put back changes to set errno, which seem to do no harm. -
Martin Pool
58cfea3c2a Fix headers. This I know is correct. -
Martin Pool
0c22a10d73 Fix headers. This I know is correct. -
Andrew Tridgell
43edeaca9f added lookup_groups() to the ads backend
winbindd/ADS can now do initgroups()
-
Andrew Tridgell
bc83d55f44 added ads_search_dn() and ads_pull_sids() -
Martin Pool
fc176f15f2 undo -
Martin Pool
391a65395e Implement suggestion from tridge to leave the old tdb_open interface
as it was, and add tdb_open_ex() which takes a log callback.  I guess
this makes more sense since it's a public interface.
-
Martin Pool
0aa800618e Better error handling:
- tdb_open api changed so that you now pass an error handling
   callback when opening the file, so that errors detected during
   opening have somewhere to go.  (All calls from the body of Samba to
   this function go through a wrapper in tdbutil, which has been
   updated.)

 - Clean up logic for deciding how to open tdb.  Emit log messages if
   something goes wrong (e.g. bad magic.)

 - tdbtool now logs errors to stderr.
-
Andrew Tridgell
cee58f1097 allow for passwords other than "samba2"
:)
-
Andrew Tridgell
689f45d207 moved lookup_usergroups() into the backend structure -
Andrew Tridgell
e908f304a2 moved init_account_policy() to the right place -
Andrew Tridgell
088f4cc5be added a query_user backend
fixed a winbindd crash when the group membership can't be looked up
-
Andrew Tridgell
660238adca typo fix -
Andrew Tridgell
ea5d285721 const religion in talloc calls -