1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-22 05:57:43 +03:00

6225 Commits

Author SHA1 Message Date
Andrew Tridgell
1421f2fbcb fix sense of lp_allow_trusted_domains()
fix a memory leak
-
Andrew Tridgell
00e4f0c803 don't try to auto-change the trust password unless we are in domain
security
-
Andrew Tridgell
0120dea7f0 automatically look for /usr/kerberos to make redhat happy -
Andrew Tridgell
b599947348 don't die with a FPE if there are no DCs -
Andrew Tridgell
e3698259af increment the value not the pointer -
Andrew Bartlett
6a919bcf3d Fix --enable-developer shadow warning -
Andrew Bartlett
44224ae156 Fix debug -
Andrew Bartlett
e89b47f65e A number of things to clean up the auth subsytem a bit...
We now default encrypt passwords = yes

We now check plaintext passwords (however aquired) with the 'sam' backend
rather than unix, if encrypt passwords = yes.

(this kills off the 'local' backed.  The sam backend may be renamed in its
place)

The new 'samstrict' wrapper backend checks that the user's domain is one of
our netbios aliases - this ensures that we don't get fallback crazies with
security = domain.

Similarly, the code in the 'ntdomain' and 'smbserver' backends now checks
that the user was not local before contacting the DC.

The default ordering has changed, we now check the local stuff first - but
becouse of the changes above, we will really only ever contact one
auth source.

Andrew Bartlett
-
Andrew Tridgell
b175c42080 add SEC_ADS auth method -
Andrew Tridgell
48df0d2b5d updated server_role for ADS -
Andrew Bartlett
70e9c2efaa prevent proto from picking up this as a defintion for 'main()' becoue it conflicts with nmbd's definition. -
Tim Potter
8227f6909c More compiler warnings fixed. Some minor reformatting. -
Andrew Tridgell
477b6d27fd we can safely give NO_SUCH_USER if the ticket decodes but the local
account doesn't exist
-
Tim Potter
4ab9ca31a0 Another merge from appliance-head: in [ug]id_to_sid don't call the
winbind function if the id is obviously going to be local.  Cleanup
of winbind [ug]id parameter handling.
-
Tim Potter
d6318add27 challange -> challenge -
Tim Potter
f85c976acc Merge from appliance-head: when creating a default security descriptor
for a printer, save it in ntprinters.tdb instead of recreating it
every time it is required.  This can save at least one winbind lookup
per secdesc creation.  Opening a port monitor and viewing the security
tab in the properties dialog required the security descriptor to be
returned 25 times!
-
Tim Potter
778f5f77a6 Got medieval on another pointless extern. Removed extern struct ipzero
and replaced with two functions:

	void zero_ip(struct in_adder *ip);
	BOOL is_zero_ip(struct in_addr ip);
-
Tim Potter
7d10fa2082 dyn_CONFIGFILE fixups. -
Tim Potter
bf491d2aa2 Fixed compiler warnings and dyn_CONFIGFILE related breakage. -
Andrew Bartlett
6caca4301b And delete domain_client_validate.c...
Andrew Bartlett
-
Andrew Bartlett
782835470c This compleats the of the authenticaion subystem into the new 'auth'
subdirectory.

(The insertion of these files was done with some CVS backend magic, hence the
lack of a commit message).

This also moves libsmb/domain_client_validate.c back into auth_domain.c,
becouse we no longer share it with winbind.

Andrew Bartlett
-
Tim Potter
dd2048c418 Removed bogus SAFE_FREE() call of talloced return data from
winbindd_lookup_usergroups()
-
Tim Potter
091f01f34a Ignore *.po files. -
Tim Potter
1dd462844a Fixed some indentation. -
Andrew Tridgell
5100ae4ae0 use DEBUG() not d_printf() in libraries -
Andrew Tridgell
2e916222a9 fixed spnego, non-kerberos negprot -
Tim Potter
36630f3984 Fixed compiler warning.
Why do people keep adding stuff to includes.h (OK I am guilty of this too)?
It's getting really huge and full of random junk.  )-:

I've noticed TNG have started to split stuff up in to individual header
files included as needed.
-
Andrew Tridgell
5a735a88e4 added 'security=ADS' -
Volker Lendecke
1c9d951f86 Minor typos -
Volker Lendecke
6dda341bc8 Don't close tdb twice. -
Andrew Tridgell
09127d85dc portability fixes -
Andrew Tridgell
b14ae49502 fixed typo -
Andrew Tridgell
0c1f90402b add popt build dependency -
Andrew Tridgell
db0bee1c68 move popt out of proto objs -
Andrew Tridgell
a1304be045 added HAVE_LDAP_H check -
Andrew Tridgell
d7216424d9 check for liblber separately -
Jeremy Allison
97dca242a9 #ifdefed DMF fix so not compiled by default. We need to look at this...
Jeremy.
-
Jeremy Allison
4aca67761f Use "password server" for searching for BDC's also as Tim suggested.
Jeremy.
-
Andrew Bartlett
9807e66f34 Add the PDC end of the smbtorture test for creating an NT_STATUS -> DOS error
map.

This little authentication module is #ifdef DEVELOPER, becouse it really is of
no use execept as a development tool

invoke by setting:

auth methods = guest sam name_to_ntstatus

in the smb.conf file (the SAM and guest elements are required for the member
server to authenticate itself).

Andrew Bartlett
-
Andrew Bartlett
c28956d860 oops, I forgot to include the header file -
Andrew Bartlett
adc7a6048c Add a new torture test to extract a NT->DOS error map from an NT member of a
samba domain.

The PDC must be running a special authenticaion module that spits out NT errors
based on username.

Andrew Bartlett
-
Andrew Bartlett
ea0331354e Unless the error is exactly NT_STATUS_OK, we might not have a server info, so
we need to bail here.
-
Jeremy Allison
84b62d3c8e I think this is a fix for the "out of space" errors with oplocks=no.
Jeremy.
-
Andrew Bartlett
3f1cfb62e8 Fix ./configure --enable-developer warnings (shadow of global) -
Andrew Tridgell
b390d6eef9 better help -
Andrew Tridgell
720c50a751 use generate_random_str() -
Andrew Tridgell
f482583139 added "net ads user" and "net ads group" commands -
Andrew Tridgell
ae0eabd04c added "net ads status" command -
Andrew Tridgell
2f8fa175b1 made a "net ads" command, currently with "net ads join" and "net ads leave" -
Andrew Tridgell
1a5ef24257 stop popt from doing its own intl stuff -