1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-05 09:18:06 +03:00
Commit Graph

7171 Commits

Author SHA1 Message Date
Jean-François Micouleau
a0b5ae5822 small comment I don't want to loose.
J.F.
0001-01-01 00:00:00 +00:00
Jean-François Micouleau
39f2b23347 Fix domain logon that I broke 3 days ago.
And it's in sync with the docs, %U is really replaced by the name the user
asked. Whereas in 2.2 that's false, %U is replaced by the name the user
was mapped to.

	J.F.
0001-01-01 00:00:00 +00:00
Andrew Bartlett
75d0f4cf19 By popular demand: a new config.guess and config.sub
(I hope I did this right)

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Andrew Tridgell
838fbac7a0 check for gssapi_generic.h 0001-01-01 00:00:00 +00:00
Andrew Tridgell
18da530293 fix a DEBUG() line 0001-01-01 00:00:00 +00:00
Andrew Tridgell
435fdf276a added internal sasl/gssapi code. This means we are no longer dependent on cyrus-sasl which makes the code much less fragile. Also added code to auto-determine the server name or realm 0001-01-01 00:00:00 +00:00
Andrew Bartlett
ff91131ef9 Fix segfault, and add a comment. 0001-01-01 00:00:00 +00:00
Andrew Bartlett
ad18f33bfa Leak less memory.
Now, is there any reason that the prs_init() doesn't use the talloc context
that it is supplied as an argument for the actual data buffer?

It would seem logical to replace the malloc with a talloc, but I'm sure
there is some method to the madness (extrnal use/Reallocing of it I presume)

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Andrew Bartlett
a8a53c08f7 Ensure that 'use spnego' restricts, rather than just advises our clients.
This means that if a hole is found in the spnego code, we can tell people
to just set 'use spengo' in their config file while we sort it out.

Other than that, preventing 'unusual' behaviour is always a good thing.

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Jean-François Micouleau
b48d58c768 basic howto 0001-01-01 00:00:00 +00:00
Herb Lewis
ce84993e8e include/build_env.h wasn't getting built by default with new rules unless
you did make headers - fixed
0001-01-01 00:00:00 +00:00
Andrew Tridgell
b5cb57a367 added a "use spnego" option
you need to set "use spnego = no" for w2k to be able to join a samba
domain. Otherwise the w2k box will assume we can do kerberos as a KDC
0001-01-01 00:00:00 +00:00
Herb Lewis
bc918bce10 OK I think this does what everyone wants with the .headers.stamp
it gets removed on a make clean
it gets created on a make headers (if it doesn't already exist)

This makes it so I only rebuild everthing once after a make clean and
also so nothing gets rebuilt after jfm does a make headers (proto)
0001-01-01 00:00:00 +00:00
Andrew Tridgell
c531f4773e allow nsstest to test any nss module 0001-01-01 00:00:00 +00:00
Herb Lewis
ba2dd34407 add smbgroupedit 0001-01-01 00:00:00 +00:00
Jean-François Micouleau
fef52c4b96 again an intrusive patch:
- removed the ugly as hell sam_logon_in_ssb variable, I changed a bit the
definition of standard_sub_basic() to cope with that.

- removed the smb.conf: 'domain admin group' and 'domain guest group'
parameters ! We're not playing anymore with the user's group RIDs !

- in get_domain_user_groups(), if the user's gid is a group, put it first
in the group RID list.

I just have to write an HOWTO now ;-)

        J.F.
0001-01-01 00:00:00 +00:00
Jean-François Micouleau
9866c18193 remove .headers.stamp from the delheaders definition
It forced a complete build to occur each time the proto are rebuild !

	J.F.
0001-01-01 00:00:00 +00:00
Gerald Carter
f1ead192c6 merge from 2.2 0001-01-01 00:00:00 +00:00
Gerald Carter
c5ee06b7c8 merge from 2.2 0001-01-01 00:00:00 +00:00
Gerald Carter
54a453478a commit from 2.2 0001-01-01 00:00:00 +00:00
Andrew Tridgell
3de552f365 put the winbindd krb5 credentials cache in the lock directory
this prevents it clobbering the users cache
0001-01-01 00:00:00 +00:00
Andrew Tridgell
f34cac3b31 allow a MAX_DEBUG_LEVEL setting in local.h (or the Makefile)
This allows embedded systems to compile out the higher debug
levels. It should gain speed as well as reducing the code
size. Setting it to 1 saves about 300k of code on my system.
0001-01-01 00:00:00 +00:00
Andrew Tridgell
3ace8f1fcc added a propoer kerberos_kinit_password call
contribution from remus@snapserver.com

thanks!
0001-01-01 00:00:00 +00:00
Tim Potter
7c64e5f148 Fixed typo in fix for typo in debug. (-: 0001-01-01 00:00:00 +00:00
Herb Lewis
8f3093fbd0 fix up packaging stuff 0001-01-01 00:00:00 +00:00
Herb Lewis
83ec4c0f4d merge from 2.2
don't set WINBIND variables unless configure was run --with-winbind
0001-01-01 00:00:00 +00:00
Herb Lewis
646b5ae752 dont add -I./popt to CFLAGS it really belongs in FLAGS1 with other include
paths. This make it hard to use a script that overrides CFLAGS options.
0001-01-01 00:00:00 +00:00
Jeremy Allison
2919851235 Added fetch_domain_sid. Not used in current code, but a nice example
of how to use this interface.
Jeremy.
0001-01-01 00:00:00 +00:00
Jean-François Micouleau
7e20fad5ed changed the DEBUG level of tdb_pack and tdb_unpack. Instead of 8, it's now
18.

when you're looking at a level 10, and it's all clutered with
tdb_pack/unpack, it's getting .... And anyway most of our code using
tdb_pack/unpack have DEBUG around the call if there is a problem.

	J.F.
0001-01-01 00:00:00 +00:00
Jean-François Micouleau
72ee179108 added samr_queryuseralias(). instead of returning BUILTIN_ALIAS_RID_USERS,
now return the alias correctly.

time to look at the netlogon case.

	J.F.
0001-01-01 00:00:00 +00:00
Samba Release Account
b56e8e72d6 preparing for release of 3.0alpha1 0001-01-01 00:00:00 +00:00
Andrew Tridgell
56bdb152d8 fixed a return value 0001-01-01 00:00:00 +00:00
Andrew Bartlett
575897e879 OK. Smbpasswd -j is DEAD.
This moves the rest of the functionality into the 'net rpc join' code.

Futhermore, this moves that entire area over to the libsmb codebase, rather
than the crufty old rpc_client stuff.

I have also fixed up the smbpasswd -a -m bug in the process.

We also have a new 'net rpc changetrustpw' that can be called from a
cron-job to regularly change the trust account password, for sites
that run winbind but not smbd.

With a little more work, we can kill rpc_client from smbd entirly!
(It is mostly the domain auth stuff - which I can rework - and the
spoolss stuff that sombody else will need to look over).

Andrew Bartlett
0001-01-01 00:00:00 +00:00
Andrew Bartlett
c76c1f6904 Add a couple of extra debugs for the secrets.tdb stuff 0001-01-01 00:00:00 +00:00
Andrew Bartlett
d15ea4fa8e Ensure we fill in the %U for NTLMSSP connections 0001-01-01 00:00:00 +00:00
Andrew Tridgell
5985d7e6ee fixed a minor password memory leak 0001-01-01 00:00:00 +00:00
Andrew Tridgell
45c328800e fixed a memory leak 0001-01-01 00:00:00 +00:00
Andrew Tridgell
58e93a8b7d fix link error 0001-01-01 00:00:00 +00:00
Andrew Tridgell
0d85815c99 handle ldap server down better 0001-01-01 00:00:00 +00:00
Andrew Tridgell
7d94f1b736 added a REALLY gross hack into kerberos_kinit_password so that
winbindd can do a kinit
this will be removed once we have code that gets a tgt
and puts it in a place where cyrus-sasl can see it
0001-01-01 00:00:00 +00:00
Andrew Tridgell
aff916e543 auto-init secrets.tdb 0001-01-01 00:00:00 +00:00
Andrew Tridgell
4f004eb54d added timeouts and retries to ldap operations 0001-01-01 00:00:00 +00:00
Andrew Tridgell
9a084f0bb9 moved the sequence number fetch into the backend, and fetch the
sequence number via ldap when using ads
0001-01-01 00:00:00 +00:00
Andrew Tridgell
f64612b89b don't double free ldap message lists 0001-01-01 00:00:00 +00:00
Andrew Tridgell
13b933104e paranoia fixes in based ldap routines for potential memory leaks 0001-01-01 00:00:00 +00:00
Andrew Tridgell
a45e396859 fixed another leak - memory usage now seems to be quite small 0001-01-01 00:00:00 +00:00
Andrew Tridgell
7de670cd15 added very basic ads connection cacheing 0001-01-01 00:00:00 +00:00
Andrew Tridgell
eb6f0e91dd more memory leak fixes 0001-01-01 00:00:00 +00:00
Andrew Tridgell
60b5d4432a plugged most of the memory leaks 0001-01-01 00:00:00 +00:00
Andrew Tridgell
fad564c177 added the last winbindd/ads backend function
winbindd is now fully functional with a native mode w2k server

now for the memory leaks and speed ...
0001-01-01 00:00:00 +00:00