1
0
mirror of https://github.com/samba-team/samba.git synced 2025-02-23 09:57:40 +03:00

6105 Commits

Author SHA1 Message Date
Andrew Tridgell
c8339ce5c8 make proto should build winbindd_proto.h as well -
Andrew Bartlett
eee925861a This change reworkes the connection code for both rpcclient and net new
'net' untility.

This should make it easier to port rpcclient code across to net.

It also allows SPNEGO (the NTLMSSP subsystem in particular) to work, becouse
it kills off the early destruction of the clear-text password.

Andrew Bartlett
-
Andrew Bartlett
8dbd9702d8 Forgot this one with the last commit...
Andrew Bartlett
-
Andrew Tridgell
88241cab98 added a basic ADS backend to winbind. More work needed, but at
least basic operations work
-
Andrew Bartlett
8739d426ca This is another major rework of the 'net' command.
This time, all the existing functionality has been moved into
'net rap', ready for new commands in the 'net ads' and 'net rpc' categories.

In particular, we hope to have the abilty to autoselect the appropriate
backend to use based on smb.conf or other paramaters.

This will allow 'net user' to work no matter what the remote server.

The new 'net rpc' command will soon gain a 'net rpc join' and a
'net rpc user' based on the existing samba code.

Also in this commit, the connection establishment code has been almost entirly
reworked, and now has some minor sense of sainity to it.
In particular, we can now connect to hosts *other* than localhost!

We also have the ability to state on a per-command basis whether the 'localhost'
is a sane default value.  (A net join, for example, would not be sane against
localhost).

Unfortunetly we have had to make the basic paramaters global variables, but
the 'cli' is not opened and closed on a per-command basis.

Andrew Bartlett
-
Tim Potter
a1cf70ab65 Don't display any data if tdb_fetch() failed in the tdbtool "fetch"
command.
-
Andrew Tridgell
2ce7f38fe9 added nsstest target
fixed winbindd_rpc.o typo
-
Andrew Tridgell
adc9268216 fixed default location of libnss_winbind.so -
Andrew Tridgell
aee19090d3 fixed the nsswitch initgroups code
added a nsstest test program that directly tests all the nss
interfaces using dlopen()
-
Martin Pool
142d3dad0a Writing decimal constants as "02" has been shown to cause cancer in
rats.
-
Andrew Tridgell
e4ccc602ba split winbindd_enum_dom_groups into the new backend structure
also created winbindd_rpc.c which contains the functions that
have been converted to the new structure. There will soon be
a winbindd_ads.c for the ldap backend
-
Tim Potter
303b3a3595 Updated definition of fstring.
print_asc(): Don't try to print a trailing NULL character
print_key(), print_rec(): Display key in ASCII
-
Andrew Tridgell
21a366afbe re-enabled insure backtrace, calling /usr/bin/backtrace -
Andrew Tridgell
d2bcdfd995 init group db before use
this fixes the smbpasswd segvs
-
Jean-François Micouleau
06cb20a46d added queryuseraliases to rpcclient
and some comments to the samr server code, to explain what we should
return here.

	J.F.
-
Jean-François Micouleau
114eba496f there was a bug in samr_lookup_names (my fault)
and added comments and some debugs.

	J.F.
-
Jean-François Micouleau
6533339887 added mapping of primary gid to rid thru the group mapping code.
and cleanup and comments in passdb/passdb.c


	J.F.
-
Jean-François Micouleau
d9d1486165 added samr_query_sec_obj. and put back some code to display a security
descriptor.

added to samr_lookup_name the choice to select the either the builtin
(s-1-5-32) domain or our current domain (s-1-5-21-x-y-z)

	J.F.
-
Jean-François Micouleau
d8809c5861 added samr_query_sec_obj for rpcclient
J.F.
-
Jean-François Micouleau
192978e3fc groups in the Builtin domain S-5-32 are alias and not well-known groups
J.F.
-
Jean-François Micouleau
2285e98f20 removed the #ifdef USING_GROUPNAME_MAP/#endif blocks
that GROUPNAME_MAP has never been used.

I'll delete the smbd/groupname.c file too

	J.F.
-
Jean-François Micouleau
540a6122dc added smbgroupedit to compile by default
J.F.
-
Andrew Tridgell
0216b0fca1 The beginnings of alternative backends for winbindd
This just splits off the dispinfo call behind a methods structure.
I'll split off a few more functions soon, then we will be ready for
LDAP replacement methods
-
Motonobu Takahashi
7dfde592aa added $(LDFLAGS) to link smbmount/smbmnt/smbumount to make Red Hat Linux
happy
-
Andrew Tridgell
97627e424a not used any more -
Andrew Tridgell
93a652b705 we need to look for liblber before libldap -
Jeremy Allison
ce099faf6c XFS quota patch for Linux.
Jeremy.
-
Gerald Carter
f8b18b2594 merge from APPLIANCE_HEAD -
Jeremy Allison
fc8638e89e Check error returns.
Jeremy.
-
Jeremy Allison
b0c1fcfc8b Gerald's fix.
Jeremy
-
Jeremy Allison
4098d44203 After conversations with Andrew, improved the robustness of the
sharemode db in the following way.

Originally, on startup and shutdown, smbd would scan the share mode
db to ensure it was correct. This lead to scalability issues as
scans lock the db for quite a long time. Andrew had the brainstorm
that we only care about the record we're about to read.

This new code (small change really, but quite significant) causes
get_share_modes() to do a process_exists() call against each pid
in each record, and to delete any that don't and re-write the
entry if any dead records were detected.

This allowed me to remove the startup/shutdown scans of the
db (they can be added into smbstatus if anyone really cares to
have them back). This will please the vfs author who was worried
about the time taken on open() calls, and will lead to much
greater robustness and scalability in the share mode db.

We need much testing of this, and also netbench tests to
ensure the extra process_exists() calls don't hurt performance
(they shouldn't it's a very simple system call).

Jeremy.
-
Tim Potter
9712d3f15a Renamed sid field in SEC_ACE to trustee to be more in line with MS's
definitions.
-
Tim Potter
b35d90cd89 Missing return in free_privilege() -
Jeremy Allison
518084a70d Ensured the %G substitution exactly matches what the man page states.
Jeremy.
-
Tim Potter
b5fac3a56d Comment deconfusification. -
Jean-François Micouleau
3f0a9ef2b8 Changed again how the privilege list is handled in the group mapping code.
This time it's a PRIVILEGE_SET struct instead of a simple uint32 array. It
makes much more sense. Also added a uint32 systemaccount to the GROUP_MAP
struct as some privilege showing in USRMGR.EXE are not real privs but a
bitmask flag. I guess it's an heritage from NT 3.0 ! I could setup an NT
3.1 box to verify, but I'm too lazy (yes I still have my CDs).

Added 3 more LSA calls: SetSystemAccount, AddPrivileges and
RemovePrivileges, we can manage all this privilege from UserManager.

Time to change the NT_USER_TOKEN struct and add checks in all the rpc
functions. Fun, fun, fun.

        J.F.
-
Andrew Tridgell
2a4ce3de6a ads->realm must not be NULL
perhaps we should just fail ads_init() in this case?
-
Andrew Tridgell
5a5f140f84 define LDAP_PORT when not available -
Andrew Tridgell
624cb28271 fixed typo -
Andrew Bartlett
4e212f728c Fix up the ./configure tests for kerberos. This ensures a more consistant
behaviour no matter if kerberos was found automatically, found in the
/usr/kerberos path or was specified.
-
Andrew Bartlett
8f9ce71781 Make better use of the ads_init() function to get the kerberos relam etc.
This allows us to use automagically obtained values in future, and the value
from krb5.conf now.

Also fix mem leaks etc.

Andrew Bartlett
-
Tim Potter
4215048f7b I think the lookup_pdc_name() should be called lookup_dc_name() and the
name_status_find() call here should look up a #1c name instead of #1d.
This fixes some bugs currently with BDC authentication in winbindd and in
smbd as you can't query the #1d name with the ip address of a BDC.

Who is Uncle Tom Cobbley anyway?
-
Andrew Tridgell
e6004062a5 fixed toupper_w() and friends on big-endian
this fixes the core dumps on sparc
-
Andrew Tridgell
80841f5763 2nd attempt at fixing lame char tables on big endian machines -
Andrew Tridgell
568425709d fixed lame char tables on big endian machines -
Andrew Tridgell
23ef22f117 fixed some krb5 ifdefs -
Gerald Carter
c60aa6c06f merge from APPLIANCE_HEAD -
Jeremy Allison
c7dd0364f2 space -> tab.
Jeremy.
-
Herb Lewis
5f625f2877 add .po32 files to ignore list -
Jeremy Allison
0187d4ba16 Spelling pedents strike again :-).
Jeremy.
-