1
0
mirror of https://github.com/samba-team/samba.git synced 2025-07-28 11:42:03 +03:00
Commit Graph

87 Commits

Author SHA1 Message Date
b69f11170c Rename of ads_do_search_all2() to ads_do_search_all() and removal of
server sort controls.  Also put option externs in the net.h include.
-
e3a8138312 Use the new ads_do_search_all2 function. It provides sorted results. We now
also filter out users that end in '$', which gives us the same results as
the net rpc user and net rap user.
-
9daa5788c8 Lots more net consistency work:
- Added net_help.c for unified help when possible
- Added net rpc user listing, delete, info commands
- Unified net user command to autodetect ads/rpc/rap (try in that order)
- Added generic routine for detecting rpc (protocol > PROTOCOL_NT1)
- I'm sure I forgot something.
-
093297a27d More updates for auto-detecting server connection method. Added net_ads_check()
to make a connection (which stores the password in a global so it can be
used by rpc or rap function if ads fails) and close it to verify if ads
method should be used.
-
dd7c20e533 Add non-ads version of net_ads_help for build on non-ads machines. -
d7317ca8da Correct error string function call to ads_errstr() -
f6eb7c0c7e Add net ads user subcommands: add delete info. Also make user listing format
consistent with rap version.
-
4cf42c07ec Re-implemented net ads user and net ads group to use the new
ads_process_results function.  Also made sure net rap user and net ads
user display the same thing, to make auto-transport-detection smoother.
-
57645fd85b make net ads info work with -S -
98769f08e7 make "net ads user" and "net ads group" also use the new paged interface -
7ba235c0fb Fix build for non-ads case -
87ee483231 Expose net_ads_join to allow for auto-transport-detection for net join -
9c447920df Add paged search requests to net ads user and net ads group commands, allowing more than 1000 (or whatever the query limit is on the server) objects to be returned. Printers will come next. -
2a42e91397 try to use our workstation account password for ADS leave -
0511589088 dont strdup() possibly null values. -
a21a951ff9 Subject:
[PATCH] net ads error
    Date:
         Fri, 15 Feb 2002 20:03:32 +0200
   From:
         Alexander Bokovoy <a.bokovoy@sam-solutions.net>
     To:
         samba-technical@samba.org

Greetings!

Attached patch fixes a problem with non-working 'net ads -Uuser%pass'
in CVS HEAD.
-
1d326f8b7e Add support for net ads printer to publish, remove, or display printer info in the directory. Only publishes required fields right now. -
6a58c9bd06 Removed version number from file header.
Changed "SMB/Netbios" to "SMB/CIFS" in file header.
-
7e5d7dfa83 Enable net ads commands to use existing tickets if the user doesn't specify a username on the commandline. Also don't continue past the kinit if a password is entered and fails because existing tickets would be used, which may not be desired if the username was specified. -
7e876057d5 much better support for organisational units in ADS join -
dfbe442c66 make sure we store the domain sid when joining a ADS domain -
412e79c448 net ads password and net ads chostpass commands from Remus Koos -
05a90a2884 much better ADS error handling system -
ee1c3e1f04 - added initial support for trusted domains in winbindd_ads
- gss error code patch from a.bokovoy@sam-solutions.net
- better sid dumping in ads_dump
- fixed help in wbinfo
-
f1231c2b54 allow selection of the organisational unit when joining a realm -
b107ecef70 added "net ads info" to fetch basic ADS info without any auth -
435fdf276a added internal sasl/gssapi code. This means we are no longer dependent on cyrus-sasl which makes the code much less fragile. Also added code to auto-determine the server name or realm -
575897e879 OK. Smbpasswd -j is DEAD.
This moves the rest of the functionality into the 'net rpc join' code.

Futhermore, this moves that entire area over to the libsmb codebase, rather
than the crufty old rpc_client stuff.

I have also fixed up the smbpasswd -a -m bug in the process.

We also have a new 'net rpc changetrustpw' that can be called from a
cron-job to regularly change the trust account password, for sites
that run winbind but not smbd.

With a little more work, we can kill rpc_client from smbd entirly!
(It is mostly the domain auth stuff - which I can rework - and the
spoolss stuff that sombody else will need to look over).

Andrew Bartlett
-
7d94f1b736 added a REALLY gross hack into kerberos_kinit_password so that
winbindd can do a kinit
this will be removed once we have code that gets a tgt
and puts it in a place where cyrus-sasl can see it
-
ea76a687fc Follow herb's suggestion and don't strdup a string to itself. -
8f9ce71781 Make better use of the ads_init() function to get the kerberos relam etc.
This allows us to use automagically obtained values in future, and the value
from krb5.conf now.

Also fix mem leaks etc.

Andrew Bartlett
-
8227f6909c More compiler warnings fixed. Some minor reformatting. -
b390d6eef9 better help -
720c50a751 use generate_random_str() -
f482583139 added "net ads user" and "net ads group" commands -
ae0eabd04c added "net ads status" command -
2f8fa175b1 made a "net ads" command, currently with "net ads join" and "net ads leave" -