Günther Deschner
f3a85fb152
r20536: In the offline PAM session close case the attempt to delete a
...
non-existing krb5 credential cache should not generate an error.
Guenther
(This used to be commit 11c6f573af5c1d3387e60f3fc44b00e28cd87813)
2007-10-10 12:16:55 -05:00
Gerald Carter
d3fc370fb9
r20487: Remove the unused dn2ad_canonical() call
...
(This used to be commit 86e6ae6a9fe2a6fdaeeb503653a312662c7f50e9)
2007-10-10 12:16:52 -05:00
Gerald Carter
725cb5d7c9
r20486: Always upper case the "host/<sAMAccoutnName>" entry in the keytab file
...
so apps will know which one to look for,
(This used to be commit d4a5dc3ad5f56a5f741424ecc4fffa0ef39bdc67)
2007-10-10 12:16:52 -05:00
Andrew Bartlett
76cdf68ee9
r20403: Cleaning out my Samba 3.0 tree:
...
As discussed with jerry at the CIFS conf: overriding the
administrator's wishes from the krb5.conf has only every given me
segfaults. We suggest leaving this up to the defaults from the
libraries anyway.
Andrew Bartlett
(This used to be commit 0b72c04906b1c25e80b217a8f34fd3a8e756b9ca)
2007-10-10 12:16:47 -05:00
Günther Deschner
2d34900088
r20273: Map KRB5_KDCREP_SKEW to NT_STATUS_TIME_DIFFERENCE_AT_DC.
...
This gives much nicer error messages when failing to join due to clock
skew.
Guenther
(This used to be commit 5c5a7611029ff1b630c53d4660578e188acf97f5)
2007-10-10 12:16:38 -05:00
Gerald Carter
db7bf9a6b6
r20173: DNS update fixes:
...
* Fix DNS updates for multi-homed hosts
* Child domains often don't have an NS record in
DNS so we have to fall back to looking up the the NS
records for the forest root.
* Fix compile warning caused by mismatched 'struct in_addr'
and 'in_addr_t' parameters called to DoDNSUpdate()
(This used to be commit 3486acd3c3ebefae8f98dcc72d1c3d6b06fffcc7)
2007-10-10 12:16:29 -05:00
Herb Lewis
dc06fda6c7
r20132: get rid of defined but not used warning - static function only used
...
inside the #ifdef HAVE_KRB5
(This used to be commit c6cdf76c5809b4a4b145acb7dd4a695aaf7fcd28)
2007-10-10 12:16:26 -05:00
Volker Lendecke
bae1fcd20f
r19687: Fix uninitialized variables found by Coverity (and gcc -O1... ;-))
...
Volker
(This used to be commit b7dc9b81696aa5434419c5378a47b41c6dee3dfa)
2007-10-10 12:15:47 -05:00
Günther Deschner
61a38bd4b8
r19651: Fix interesting bug with the automatic site coverage in Active Directory:
...
When having DC-less sites, AD assigns DCs from other sites to that site
that does not have it's own DC. The most reliable way for us to identify
the nearest DC - in that and all other cases - is the closest_dc flag in
the CLDAP reply.
Guenther
(This used to be commit ff004f7284cb047e738ba3d3ad6602e8aa84e883)
2007-10-10 12:15:44 -05:00
Günther Deschner
e513fb27d6
r19646: Fix memleak in the default_ou_string handling. Thanks to David Hu
...
<david.hu@hp.com>. Fixes #4212 .
Guenther
(This used to be commit 4ec896cdbe441b17d91895a50ac9be61efe2f9c1)
2007-10-10 12:15:43 -05:00
Günther Deschner
31a63ab19f
r19528: Fix container handling for "net ads user" and "net ads group" functions
...
along with some memleaks.
Guenther
(This used to be commit 4bad52c5b3a983418d4216a2c3f5e04926e37e94)
2007-10-10 12:15:41 -05:00
Günther Deschner
6b65a1c26d
r19526: Fix minor memleak.
...
Guenther
(This used to be commit 61ebedc82ee7d7a98e2a52b0677d723a801ab30f)
2007-10-10 12:15:40 -05:00
Günther Deschner
424d7640b8
r19263: Be more accurate in telling what the sitename problem is in this DEBUG
...
statement.
Guenther
(This used to be commit 62928734b820f512f940c1ed79048e14b322d060)
2007-10-10 12:15:26 -05:00
Günther Deschner
ac080e3184
r19039: Do not segfault in "net ads printer info" when a requested printserver
...
does not exist.
Guenther
(This used to be commit 359315021df3a4dbfe5142e529e3efdbc49e405c)
2007-10-10 12:15:04 -05:00
Günther Deschner
73f4ac012a
r18982: Move the gpo related functions to "libgpo".
...
Guenther
(This used to be commit 1308a842716bc3bd1a9853b9b206dc7308a8c1dd)
2007-10-10 12:14:53 -05:00
Günther Deschner
296b450f16
r18941: Minor cleanup in ads_parse_gpo().
...
Guenther
(This used to be commit 7579a91f81a43f570987fecca03c19f559887685)
2007-10-10 12:14:49 -05:00
Günther Deschner
f7633eca18
r18923: Fix more memleaks.
...
Guenther
(This used to be commit ecb632a1534d5178602b9143bb17712559fe2e4f)
2007-10-10 12:14:47 -05:00
Günther Deschner
dd992469dd
r18902: Also dump mS-DS-CreatorSID.
...
Guenther
(This used to be commit e7cae9bbae2848ca1088a822883563062dd3f612)
2007-10-10 12:14:44 -05:00
Günther Deschner
82bf0da9d3
r18879: Fix crash for "net ads gpo list".
...
Guenther
(This used to be commit 7df5808d8b1d9458dbd47b92750c0b128325335c)
2007-10-10 12:14:41 -05:00
Andrew Tridgell
78f2900a16
r18869: two build fixes for systems without ldap
...
the first is to not enable the ldap ldb backend just yet. This will
need configure tests to conditionally include. We should be able to
use the m4 files from lib/ldb/
The 2nd is to fix libads/gpo.o not to publicly prototype a function
that needs ldap.h
(This used to be commit 1cf17edc14ebd379b982b589a66e86316ef7087b)
2007-10-10 12:14:39 -05:00
Günther Deschner
846aa881cd
r18853: Fix remaining warnings. Volker, should be fine now.
...
Guenther
(This used to be commit 40a6169aceb51dc7f73ae72ebac2e55c6b1edc3f)
2007-10-10 12:01:04 -05:00
Günther Deschner
7fdd258c39
r18820: Comment out some unused functions.
...
Guenther
(This used to be commit cdc81927dbbc542500211ad8e6815815d7764731)
2007-10-10 12:01:03 -05:00
Günther Deschner
a6bb76765a
r18819: Fix build without LDAP.
...
Guenther
(This used to be commit a0aedee1c90af163210dd459603dd5dffb73e132)
2007-10-10 12:01:03 -05:00
Günther Deschner
0d12a35e6b
r18817: Enable the build of the gpo tool but do not make it available yet.
...
Guenther
(This used to be commit 927cda5d31e9cb02105df3cfc06f5cb273233747)
2007-10-10 12:01:03 -05:00
Günther Deschner
314d563b12
r18816: Fix some build warnings.
...
Guenther
(This used to be commit b70ed9e48394ddeaf0102e017cf706ff083e065b)
2007-10-10 12:01:03 -05:00
Jelmer Vernooij
4db7642caa
r18745: Use the Samba4 data structures for security descriptors and security descriptor
...
buffers.
Make security access masks simply a uint32 rather than a structure
with a uint32 in it.
(This used to be commit b41c52b9db5fc4a553b20a7a5a051a4afced9366)
2007-10-10 12:00:54 -05:00
Günther Deschner
4fa5a1c845
r18670: Fix memleaks.
...
Guenther
(This used to be commit 2fc63fb8f7927ea61c565801b4c6308d3a4afcd1)
2007-10-10 12:00:46 -05:00
Jeremy Allison
664c3f4166
r18663: Fix one more uuid -> GUID.
...
Jeremy.
(This used to be commit e568271af2b5c20cff70b72b8ab4b1b704122b40)
2007-10-10 12:00:44 -05:00
Günther Deschner
245aa33f0d
r18620: Fallback to non-paging LDAP searches in ads_do_search_retry_internal()
...
for anonymous bound connections.
When doing anonymous bind you can never use paged LDAP control for
RootDSE searches on AD.
Guenther
(This used to be commit dc1d92faabd4b291f607eb481349ba37e52ef11e)
2007-10-10 11:52:01 -05:00
Jeremy Allison
a0aaa82f6d
r18552: Ensure the sitename matches before we SAF store a DC in ADS mode.
...
Jeremy.
(This used to be commit 03e1078b459531af5a2336b584b3c886c5dd1e29)
2007-10-10 11:51:49 -05:00
Günther Deschner
2ad8c705b2
r18512: Add krb5conf file environment to debug statement.
...
Guenther
(This used to be commit 398f368c8a2df36d522583c733f7c22cac2f2059)
2007-10-10 11:51:45 -05:00
Günther Deschner
dda94fdf96
r18508: A query for the LDAP schema can never be done anonymously against AD.
...
Guenther
(This used to be commit 8bb6e82f02044a715dbeee020bcc4a01a83c4a64)
2007-10-10 11:51:44 -05:00
Jeremy Allison
a4743f3a76
r18480: Doh ! Double-free of hostnameDN.
...
Jeremy.
(This used to be commit f8984fa8b706bb76559e447b30a201e1cc2871b6)
2007-10-10 11:51:43 -05:00
Volker Lendecke
6b3c42b1a1
r18466: Attempt to fix the AIX build
...
(This used to be commit 1398425067d77d90ecf2ed4c17a12d643f7f5a88)
2007-10-10 11:51:42 -05:00
Volker Lendecke
dfa62cfa98
r18464: Solaris has LDAP_SCOPE_ONELEVEL. Linux seems to have it as well.
...
Fix a C++ compat warning.
Volker
(This used to be commit 351e583f66714562eca1f40429bfee70f06d281c)
2007-10-10 11:51:42 -05:00
Volker Lendecke
d3237d2233
r18453: Attempt to fix the non-ldap build
...
(This used to be commit 86db85423027d34cb053fc068159ddd2226e90ec)
2007-10-10 11:51:42 -05:00
Jeremy Allison
8c2c5c5d1d
r18446: Add the ldap 'leave domain' code - call this as
...
a non-fatal error path if the 'disable machine
account' code succeeded.
Jeremy.
(This used to be commit f47bffa21ec1caf5ec3a6ec77af801df0b63d83a)
2007-10-10 11:51:42 -05:00
Günther Deschner
59e5149d8f
r18425: Fix ads_ntstatus(). LDAP_SUCCESS should really map to NT_STATUS_OK.
...
Guenther
(This used to be commit 8ab214956ef11ff0b1532713cff65c17d2439570)
2007-10-10 11:51:23 -05:00
Gerald Carter
2b27c93a9a
r18271: Big change:
...
* autogenerate lsa ndr code
* rename 'enum SID_NAME_USE' to 'enum lsa_SidType'
* merge a log more security descriptor functions from
gen_ndr/ndr_security.c in SAMBA_4_0
The most embarassing thing is the "#define strlen_m strlen"
We need a real implementation in SAMBA_3_0 which I'll work on
after this code is in.
(This used to be commit 3da9f80c28b1e75ef6d46d38fbb81ade6b9fa951)
2007-10-10 11:51:18 -05:00
Jeremy Allison
6cfe7be80e
r18241: If replacing the krb5.conf, ensure it's readable.
...
Jeremy.
(This used to be commit dfd93a30311ff0e57ef23ae1f1cb58d4019a3eee)
2007-10-10 11:51:18 -05:00
Jeremy Allison
ed0274433c
r18234: DNS failures are too common to log at level zero or 1.
...
Jeremy.
(This used to be commit 943e21d5da2a8aadab1b2c3d700a9b8b880582f2)
2007-10-10 11:51:17 -05:00
Jeremy Allison
34a25efad2
r18226: Ensure we only do this evil thing if it's our realm.
...
Jeremy.
(This used to be commit 0a89b37b1a367470be410ae94b42c813c7dbefe6)
2007-10-10 11:51:16 -05:00
Jeremy Allison
80052bcf13
r18225: If we're going to overwrite krb5.conf, at least
...
be polite enough to make a backup.
Jeremy.
(This used to be commit c82aac594fd7262029f9c47c2998c9e6b0ffc739)
2007-10-10 11:51:16 -05:00
Jeremy Allison
253c01f29e
r18201: Make explicit what's going on here.
...
Jeremy.
(This used to be commit 38b8a2b5278d2538b9803c2b81f767036a16ad65)
2007-10-10 11:51:16 -05:00
Jeremy Allison
6d4c7b1345
r18200: Experimental code to allow system /etc/krb5.conf to be
...
overwritten by winbindd. Don't enable this :-).
Jeremy.
(This used to be commit 88e11ee91a2e97c93f5d34313d45b1e38f793038)
2007-10-10 11:51:16 -05:00
Jelmer Vernooij
995205fc60
r18188: merge 3.0-libndr branch
...
(This used to be commit 1115745caed3093c25d6be01ffee21819fb0a675)
2007-10-10 11:43:56 -05:00
Günther Deschner
b5f6cbbe1b
r18177: Some build- and memleak-fixes for the (not build by default) ADS GPO
...
routines.
Guenther
(This used to be commit 0ef504a0a6dc8f5db1dbc7f2410aa981e11fd56c)
2007-10-10 11:43:30 -05:00
Günther Deschner
171a5cd5c0
r18175: Forgot to call asn1_free() in previous commit.
...
Guenther
(This used to be commit af3779a51624977088c322ac98f52c02e9291b54)
2007-10-10 11:43:30 -05:00
Günther Deschner
4bc83e60de
r18174: Do not return "success" when we failed to write in the CLDAP code.
...
Guenther
(This used to be commit 1fe4724f57f4f25ed486240cb1e741da60f0c997)
2007-10-10 11:43:30 -05:00
Günther Deschner
5a87bbd48a
r18172: Just a little more verbosity in this debug statement.
...
Guenther
(This used to be commit e852bc46464fe6dbdf8530f43fcb88fd2eafae67)
2007-10-10 11:43:30 -05:00