7 Commits

Author	SHA1	Message	Date
Andrew Tridgell	5e54558c6d	r23784: use the GPLv3 boilerplate as recommended by the FSF and the license text ... (This used to be commit b0132e94fc)	2007-10-10 12:28:22 -05:00
Jeremy Allison	d824b98f80	r23779: Change from v2 or later to v3 or later. ... Jeremy. (This used to be commit 407e6e695b)	2007-10-10 12:28:20 -05:00
Lars Müller	3af6bf6b6e	r22839: Fix endif comment. ... (This used to be commit e522fb9bb7)	2007-10-10 12:22:01 -05:00
Jeremy Allison	305ceade39	r17970: Add missing include-guards around ads.h and ads_cldap.h. ... Remove all reference to "Default-First-Site-Name" and treat it like any other site. Jeremy. (This used to be commit 5ae3564d68)	2007-10-10 11:39:44 -05:00
Jeremy Allison	2fcd113f55	r17945: Store the server and client sitenames in the ADS ... struct so we can see when they match - only create the ugly krb5 hack when they do. Jeremy. (This used to be commit 9be4ecf24b)	2007-10-10 11:39:01 -05:00
Jeremy Allison	2abab7ee6d	r17928: Implement the basic store for CLDAP sitename ... support when looking up DC's. On every CLDAP call store the returned client sitename (if present, delete store if not) in gencache with infinate timeout. On AD DNS DC lookup, try looking for sitename DC's first, only try generic if sitename DNS lookup failed. I still haven't figured out yet how to ensure we fetch the sitename with a CLDAP query before doing the generic DC list lookup. This code is difficult to understand. I'll do some experiments and backtraces tomorrow to try and work out where to force a CLDAP site query first. Jeremy. (This used to be commit ab3f0c5b1e)	2007-10-10 11:38:59 -05:00
Gerald Carter	2c029a8b96	r15543: New implementation of 'net ads join' to be more like Windows XP. ... The motivating factor is to not require more privileges for the user account than Windows does when joining a domain. The points of interest are * net_ads_join() uses same rpc mechanisms as net_rpc_join() * Enable CLDAP queries for filling in the majority of the ADS_STRUCT->config information * Remove ldap_initialized() from sam/idmap_ad.c and libads/ldap.c * Remove some unnecessary fields from ADS_STRUCT * Manually set the dNSHostName and servicePrincipalName attribute using the machine account after the join Thanks to Guenther and Simo for the review. Still to do: * Fix the userAccountControl for DES only systems * Set the userPrincipalName in order to support things like 'kinit -k' (although we might be able to just use the sAMAccountName instead) * Re-add support for pre-creating the machine account in a specific OU (This used to be commit 4c4ea7b20f)	2007-10-10 11:16:57 -05:00