1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-27 14:04:05 +03:00

18587 Commits

Author SHA1 Message Date
Jeremy Allison
d9f26f78f6 r11927: No users or groups to return in BUILTIN domain.
Jeremy.
(This used to be commit 908e671c75f78b87fe0ee9129f0aca004565c407)
2007-10-10 11:05:36 -05:00
Jeremy Allison
48c2f9fc72 r11924: Added Volkers's (C) to srv_samr_nt.c, removed separate "builtin"
search enumeration, fixed count of groups and users to return
zero if we're getting domain info on the builtin domain (need
to fix the enumgroup and enumuser calls also). Added count_sam_aliases
to return the correct alias count. Need to push the SID arg
down into the group mapping interface so we only return the
correct aliases. Upped passdb version numer for Volkers
changes. SAM-MYSQL guys - you will need to fix your backend
now. More tests needed.
Jeremy.
(This used to be commit b53d5cd565b05b0595979efba6176d0cafc8cb03)
2007-10-10 11:05:36 -05:00
Volker Lendecke
10bc204efb r11923: Add samr_lookup_rids for the builtin domain. Doing it this way feels a bit
wrong, but so far we don't have proper multi-domain support in passdb yet...

Volker
(This used to be commit c917cfc320f0250d23fda3525a7632bc01643707)
2007-10-10 11:05:36 -05:00
Volker Lendecke
046a8873b9 r11922: Looks bigger than it is: There's no point in allocating arrays in
samr_lookup_rids twice. It was done in the srv_samr_nt.c code as well as in
the pdb module. Remove the latter, this might happen more often.

Volker
(This used to be commit 57f0cf8cdd6928f4759036e5dd53d41736aa910d)
2007-10-10 11:05:36 -05:00
Volker Lendecke
fcf14ebee2 r11921: samr_open_domain can only open "our" domain and BUILTIN.
Volker
(This used to be commit 049920ce4f78723bc884c46b2ee4ef22f25c482c)
2007-10-10 11:05:36 -05:00
Volker Lendecke
d36eb68cb5 r11920: Rename local_lookup_rid to lookup_global_sam_rid, add lookup_builtin_rid.
Volker
(This used to be commit bc8836d5d7361041ce935f65bf2d172e1eb43299)
2007-10-10 11:05:35 -05:00
Volker Lendecke
add1493a86 r11919: The generic mappings in srv_samr_nt.c are only used there -- make them
static.

One long overdue simplification: Change local_lookup_sid to local_lookup_rid
its responsible for "our" domain only, in fact it checked for it.

Volker
(This used to be commit 35ba5e083cddfa5ddba5ad84233262fadfbe87b2)
2007-10-10 11:05:35 -05:00
Volker Lendecke
5976053f05 r11918: Remove two unused variables
(This used to be commit 5524d662954165eef3fdd15986fe0b4de09180d7)
2007-10-10 11:05:35 -05:00
Volker Lendecke
4ce6499849 r11917: Move nt_token_to_group_list to srv_netlog_nt.c. srv_util.c is empty now.
Volker
(This used to be commit ae4ffc1cfb745a756d047c35f947f80acf4b0e55)
2007-10-10 11:05:35 -05:00
Volker Lendecke
5cc200ae55 r11916: auth_get_sam_account is only used in auth_rhosts.c -- move it there
(This used to be commit 8e5bea3f84c61ea312278cbbb70542664be7bd14)
2007-10-10 11:05:35 -05:00
Volker Lendecke
3088a85c62 r11915: Remove unused extern declarations
(This used to be commit 3c35fb642a187b785816bb8cbb3573df9612a9f8)
2007-10-10 11:05:35 -05:00
Volker Lendecke
ace1212dec r11914: After talking to Jeremy, implement passdb:expand_explicit with a default of
no. This changes our default behaviour.

Sorry, Ingo, this *is* a bug that needs fixing.

Jerry, you might want to put a marker into the WHATSNEW.txt when this is due.

Volker
(This used to be commit 6622db97bb575b028b3c0bc016b91f62a8c561a2)
2007-10-10 11:05:34 -05:00
Volker Lendecke
1bfb5b734b r11909: Implement 'reset on zero vc'. This kills other connections when a session
setup comes in with the vc (virtual connection) field set to zero. This is
done by Windows, probably you can tweak that by some registry key.

	This boolean option controls whether an incoming session setup
	should kill other connections coming from the same IP. This matches
        the default Windows 2003 behaviour.

	Setting this parameter to yes becomes necessary when you have a flaky
	network and windows decides to reconnect while the old connection
	still has files with share modes open. These files become inaccessible
	over the new connection.

	The client sends a zero VC on the new connection, and Windows 2003
	kills all other connections coming from the same IP. This way the
	locked files are accessible again.

	Please be aware that enabling this option will kill connections behind
	a masquerading router.

Volker
(This used to be commit 5629ca16235f0aa21fea3afd9e414309e4e1374e)
2007-10-10 11:05:34 -05:00
Volker Lendecke
ed6936598e r11898: Add a missing become_root().
Volker
(This used to be commit efb7576d4e970e3cbb4621ebd754d329eec58b5a)
2007-10-10 11:05:33 -05:00
Jim McDonough
43600a1d58 r11886: Fix 3187: logon hours restrictions were off corresponding to our offset from
GMT.  Use gmtime() instead of localtime() in the calc, but still use
localtime() in displaying it.
(This used to be commit 9b34f2d0f4bfc623eaec9c1334e34fa3965ba25b)
2007-10-10 11:05:33 -05:00
Günther Deschner
98cd8edc56 r11876: When we are using START_TLS to secure the LDAP connection, we *have* to
call START_TLS again after rebinding to another LDAP server. (ldaps://
uri's are handled at by recent versions of OpenLDAP).

Guenther
(This used to be commit 3ccea032cb681426a1b29907a44b87b8a94e0840)
2007-10-10 11:05:33 -05:00
Günther Deschner
f6b8327fac r11875: Allow to use START_TLS (by manually setting "ldap ssl = start_tls") for
LDAP connections to ADS (Windows 2003).

Guenther
(This used to be commit 95543fab0f6aa1c483b40247c16cde79cbc9c012)
2007-10-10 11:05:33 -05:00
Günther Deschner
092e3e514b r11874: Merge LDAP connection setup in lib/smbldap.c and pdb_nds.c.
Also allow to use START_TLS in the pdb_nds_update_login_attempts
function when doing simple binds to eDir.

Guenther
(This used to be commit 04a3ac5e50e93f74dfddfead5cb3f335ce991e9a)
2007-10-10 11:05:33 -05:00
Gerald Carter
baba6d0395 r11867: attempt at fixing the compile issue with nss_winbind.so on HP-UX caused by Solaris specific return codes
(This used to be commit b823bcbc919d7e4b482c63cbe5b7f99e0bddd5f6)
2007-10-10 11:05:33 -05:00
Jeremy Allison
a509c20eb6 r11865: The only way to stop multiple LDAP searches is to agressively cache
results. We now cache them for 10 seconds, down from 30 seconds
(however each re-use will refresh the idle timeout). Any set calls
will flush the cache.
Jeremy.
(This used to be commit c9a0720f552719eb77a2c72fc2e942de52fbf1d6)
2007-10-10 11:05:32 -05:00
Gerald Carter
b6f68105ca r11864: fix build breakage with solaris LDAP patch (my fault)
(This used to be commit 7ac6afe4dcded2e3db9e2012aaa57879bb63b508)
2007-10-10 11:05:32 -05:00
Gerald Carter
ac331c48db r11863: BUG 3196: patch from Alex Deiter <tiamat@komi.mts.ru> to compile against the Sun LDAP client libs. But not for AD support; just ldap support
(This used to be commit a33e78acedb37df47905d326411e017794721250)
2007-10-10 11:05:31 -05:00
Jeremy Allison
056f06915e r11861: Fix inspired by Thomas Neumann <t.neumann@iku-ag.de> to ensure that
default case applies only to new files and correctly examines 8.3
and long names.
Jeremy.
(This used to be commit ba931a015132f7e8fffa52c617cd8345a1da35d2)
2007-10-10 11:05:31 -05:00
Gerald Carter
f2ecd4fed0 r11860: BUG 3156: don't use find_service() when explicitly looking for a printer as the username map might get in the way
(This used to be commit 46bf28c81c27dfdc412318a83bf565211a58a47d)
2007-10-10 11:05:31 -05:00
Günther Deschner
4826f9d413 r11859: Another place where the SE_GROUP constants read better then "7".
Guenther
(This used to be commit 4c4b2096459ffa6ca0130f1259499933e3182d47)
2007-10-10 11:05:31 -05:00
Günther Deschner
1b624b69bd r11858: Fill in the clientside TRUSTED_DOMAIN_INFO_EX query.
Guenther
(This used to be commit 02f13dee6d0bbca71a991682bfe214ed8363e818)
2007-10-10 11:05:31 -05:00
Günther Deschner
4c34e1b7e2 r11857: Fix the build.
Guenther
(This used to be commit 6508cb1c805dee291c87a57998f0f1f53b9a6013)
2007-10-10 11:05:31 -05:00
Günther Deschner
2770e98aec r11856: Replace unknown1 with group_attr.
Can anyone remember why we initialize groups only with 0x03 instead of 0x07 ?

Guenther
(This used to be commit 3282c7c458d390547fbaca44821eff376e8f9aaa)
2007-10-10 11:05:30 -05:00
Gerald Carter
b1e8785070 r11855: patch from Aruna Prabakar for checking that the spooler si running on HP-UX
(This used to be commit 017775f2879454f939c35196b3db6d1f2b9d1333)
2007-10-10 11:05:30 -05:00
Günther Deschner
d93c2b1046 r11854: Remove unused DOM_SID.
Guenther
(This used to be commit 8609484ff65aaf075d2f768960246dad398855a4)
2007-10-10 11:05:30 -05:00
Günther Deschner
63addcb4d7 r11853: Add Dsr_GetSiteName (handy for experimenting with GPOs).
Guenther
(This used to be commit c54430a7b5e40d3bdf8afdc813eb722c0a3b861e)
2007-10-10 11:05:30 -05:00
Günther Deschner
e09cc27d3b r11852: Fill in samr_get_dom_pwinfo based on Samba4.
Guenther
(This used to be commit a8bc4bc902075cfd009dc92674c4560a44a74277)
2007-10-10 11:05:30 -05:00
Günther Deschner
cf974b8d60 r11851: Display correct error string.
Guenther
(This used to be commit 4d681f560e59dd483f580c5fe5299af6242ae7c2)
2007-10-10 11:05:30 -05:00
Günther Deschner
0e8b90e45d r11847: Fix typo.
Guenther
(This used to be commit 6aefb3aebbbba486ea44ec9ef7bc46e0776eeba8)
2007-10-10 11:05:29 -05:00
Günther Deschner
90603cb3cd r11846: Destroy the TALLOC_CTX on error in the Kerberos session setup and give a
more precise inline comment why PAC verification may fail.

Guenther
(This used to be commit 43b57715e9b44a0a0c7cc7fe3674a5fd4369e78b)
2007-10-10 11:05:29 -05:00
Jeremy Allison
e98a396b76 r11845: Removed error code list as it isn't correct for Linux.
Jeremy.
(This used to be commit bea6fa293e2c1ee85ae72dcee00db13cb1fe5bb1)
2007-10-10 11:05:29 -05:00
Jeremy Allison
ac66d7cf69 r11841: Fix #3262 from Timur Bakeyev to improve reporting on FreeBSD DOS
attribute errors.
Jeremy.
(This used to be commit 8f2e472fa35098b1be16083ce9b5c06fdf5dbcd1)
2007-10-10 11:05:29 -05:00
Jeremy Allison
8e178d8dce r11839: Info level 0x101 is really a protocol NT level.
Fix bug #3274 from Guenter Kukkukk <guenter.kukkukk@kukkukk.com>
Jeremy.
(This used to be commit e4b3b70ef1c0fea3252b73c55ea3e9cad7229afd)
2007-10-10 11:05:29 -05:00
Gerald Carter
aef9a5fdc1 r11833: fix build issues in smbget with the Sun compiler. Reported by Richard Bollinger
(This used to be commit d381c125b0ffc269fd8671a855c9b899966a2320)
2007-10-10 11:05:29 -05:00
Gerald Carter
65540512df r11830: patch from Rashid N. Achilov <shelton@granch.ru> to add descriptions for some common services
(This used to be commit 69e168197e576bac6d4b29bdca876243eb7caf68)
2007-10-10 11:05:29 -05:00
Jeremy Allison
572e6dd578 r11799: Added OpenSSH fix for "%.*s" format crash. From Darren Tucker
<dtucker@zip.com.au>
Jeremy.
(This used to be commit b7dee71f26b26e2aed4124c7de52fa6771ce40dd)
2007-10-10 11:05:28 -05:00
Jeremy Allison
9be0ce4422 r11793: Fix the SAMR cache so it works across completely insane
client behaviour (ie.:
open pipe/open SAMR handle/enumerate 0 - 1024
close SAMR handle, close pipe.
open pipe/open SAMR handle/enumerate 1024 - 2048...
close SAMR handle, close pipe.
And on ad-nausium. Amazing.... probably object-oriented
client side programming in action yet again.
This change should *massively* improve performance when
enumerating users from an LDAP database.
Jeremy.
(This used to be commit 8ce705d9cc1b6a79d710a10ff38f72a0f1006dda)
2007-10-10 11:05:28 -05:00
Günther Deschner
4ba65300ec r11790: Avoid infinite retry to gather a connection.
Guenther
(This used to be commit 7b6195b421b6c572d82d00b9a11bcf8579456c21)
2007-10-10 11:05:28 -05:00
Volker Lendecke
d75de28c9e r11784: Fix minor glitch found by Rainer Weikusat <rainer.weikusat@sncag.com> -- Thanks
(This used to be commit 1128d054dd8d387e529bf92dad3a3db5e251d61d)
2007-10-10 11:05:28 -05:00
Gerald Carter
04b6c1303c r11770: BUG 2718: don't use qpathinfo_basic() call when remote server is Win9x or the do_cd() call will fail
(This used to be commit be31c2a105ae2b6e655530190c939caae1b41294)
2007-10-10 11:05:28 -05:00
Jeremy Allison
d09beee040 r11769: Looking at a performance problem enumerating accounts, wondered
if changing to support samr_connect5 might help so quickly coded
it up. No it doesn't :-(. Don't merge this for 3.0.21 please.
Jeremy.
(This used to be commit bff1df678a8948d382f4555e83a1df23146a4b12)
2007-10-10 11:05:27 -05:00
Jeremy Allison
394f87b914 r11767: Doesn't need to be exported.
Jeremy.
(This used to be commit 52b6f0db2e4a209641187255bd8815c8d03a5315)
2007-10-10 11:05:27 -05:00
Jeremy Allison
0ad770a626 r11764: Doesn't need to be exported from here.
Jeremy.
(This used to be commit 95665dfd77ac9959d1d538770157127a425b4b4e)
2007-10-10 11:05:26 -05:00
Gerald Carter
7c5d5ddb6d r11763: fix more build breakage
(This used to be commit 5ab76ec8f88da6d6f372b44b7533ca2cb6c2ba0b)
2007-10-10 11:05:26 -05:00
Gerald Carter
1ce2883865 r11762: fix my build breakage
(This used to be commit 9ee851630ec3443f27a61de6eaf222c74d2d064a)
2007-10-10 11:05:26 -05:00