mirror of
https://github.com/samba-team/samba.git
synced 2025-01-13 13:18:06 +03:00
d7bb961859
This patch removes security=share, which Samba implemented by matching the per-share password provided by the client in the Tree Connect with a selection of usernames supplied by the client, the smb.conf or guessed from the environment. The rationale for the removal is that for the bulk of security=share users, we just we need a very simple way to run a 'trust the network' Samba server, where users mark shares as guest ok. This is still supported, and the smb.conf options are documented at https://wiki.samba.org/index.php/Public_Samba_Server At the same time, this closes the door on one of the most arcane areas of Samba authentication. Naturally, full user-name/password authentication remain available in security=user and above. This includes documentation updates for username and only user, which now only do a small amount of what they used to do. Andrew Bartlett -------------- / \ / REST \ / IN \ / PEACE \ / \ | SEC_SHARE | | security=share | | | | | | 5 March | | | | 2012 | *| * * * | * _________)/\\_//(\/(/\)/\//\/\///|_)_______
118 lines
4.4 KiB
Python
118 lines
4.4 KiB
Python
#!/usr/bin/env python
|
|
|
|
AUTH_BUILTIN_SRC = 'auth_builtin.c'
|
|
AUTH_DOMAIN_SRC = 'auth_domain.c'
|
|
AUTH_SAM_SRC = 'auth_sam.c'
|
|
AUTH_SERVER_SRC = 'auth_server.c'
|
|
AUTH_UNIX_SRC = 'auth_unix.c'
|
|
AUTH_WINBIND_SRC = 'auth_winbind.c'
|
|
AUTH_WBC_SRC = 'auth_wbc.c'
|
|
AUTH_SCRIPT_SRC = 'auth_script.c'
|
|
AUTH_NETLOGOND_SRC = 'auth_netlogond.c'
|
|
|
|
AUTH_SRC = '''auth.c
|
|
user_krb5.c
|
|
auth_ntlmssp.c auth_generic.c'''
|
|
|
|
bld.SAMBA3_SUBSYSTEM('TOKEN_UTIL',
|
|
source='token_util.c',
|
|
deps='samba-util pdb',
|
|
vars=locals())
|
|
|
|
bld.SAMBA3_SUBSYSTEM('USER_UTIL',
|
|
source='user_util.c',
|
|
deps='TOKEN_UTIL')
|
|
|
|
bld.SAMBA3_SUBSYSTEM('AUTH_COMMON',
|
|
source='''auth_util.c
|
|
check_samsec.c
|
|
server_info.c
|
|
server_info_sam.c
|
|
user_info.c''',
|
|
deps='TOKEN_UTIL DCUTIL USER_UTIL',
|
|
vars=locals())
|
|
|
|
bld.SAMBA3_LIBRARY('auth',
|
|
source=AUTH_SRC,
|
|
deps='''PLAINTEXT_AUTH SLCACHE DCUTIL TOKEN_UTIL AUTH_COMMON libcli_netlogon3 samba-hostconfig''',
|
|
private_library=True)
|
|
|
|
bld.SAMBA3_MODULE('auth_sam',
|
|
subsystem='auth',
|
|
source=AUTH_SAM_SRC,
|
|
deps='samba-util',
|
|
init_function='',
|
|
internal_module=bld.SAMBA3_IS_STATIC_MODULE('auth_sam'),
|
|
enabled=bld.SAMBA3_IS_ENABLED_MODULE('auth_sam'))
|
|
|
|
bld.SAMBA3_MODULE('auth_unix',
|
|
subsystem='auth',
|
|
source=AUTH_UNIX_SRC,
|
|
deps='samba-util',
|
|
init_function='',
|
|
internal_module=bld.SAMBA3_IS_STATIC_MODULE('auth_unix'),
|
|
enabled=bld.SAMBA3_IS_ENABLED_MODULE('auth_unix'))
|
|
|
|
bld.SAMBA3_MODULE('auth_winbind',
|
|
subsystem='auth',
|
|
source=AUTH_WINBIND_SRC,
|
|
deps='samba-util',
|
|
init_function='',
|
|
internal_module=bld.SAMBA3_IS_STATIC_MODULE('auth_winbind'),
|
|
enabled=bld.SAMBA3_IS_ENABLED_MODULE('auth_winbind'))
|
|
|
|
bld.SAMBA3_MODULE('auth_wbc',
|
|
subsystem='auth',
|
|
source=AUTH_WBC_SRC,
|
|
deps='samba-util',
|
|
init_function='',
|
|
internal_module=bld.SAMBA3_IS_STATIC_MODULE('auth_wbc'),
|
|
enabled=bld.SAMBA3_IS_ENABLED_MODULE('auth_wbc'))
|
|
|
|
bld.SAMBA3_MODULE('auth_server',
|
|
subsystem='auth',
|
|
source=AUTH_SERVER_SRC,
|
|
deps='samba-util',
|
|
init_function='',
|
|
internal_module=bld.SAMBA3_IS_STATIC_MODULE('auth_server'),
|
|
enabled=bld.SAMBA3_IS_ENABLED_MODULE('auth_server'))
|
|
|
|
bld.SAMBA3_MODULE('auth_domain',
|
|
subsystem='auth',
|
|
source=AUTH_DOMAIN_SRC,
|
|
deps='RPC_CLIENT_SCHANNEL trusts_util',
|
|
init_function='',
|
|
internal_module=bld.SAMBA3_IS_STATIC_MODULE('auth_domain'),
|
|
enabled=bld.SAMBA3_IS_ENABLED_MODULE('auth_domain'))
|
|
|
|
bld.SAMBA3_MODULE('auth_builtin',
|
|
subsystem='auth',
|
|
source=AUTH_BUILTIN_SRC,
|
|
deps='samba-util',
|
|
init_function='',
|
|
internal_module=bld.SAMBA3_IS_STATIC_MODULE('auth_builtin'),
|
|
enabled=bld.SAMBA3_IS_ENABLED_MODULE('auth_builtin'))
|
|
|
|
bld.SAMBA3_MODULE('auth_netlogond',
|
|
subsystem='auth',
|
|
source=AUTH_NETLOGOND_SRC,
|
|
deps='TLDAP',
|
|
init_function='',
|
|
internal_module=bld.SAMBA3_IS_STATIC_MODULE('auth_netlogond'),
|
|
enabled=bld.SAMBA3_IS_ENABLED_MODULE('auth_netlogond'))
|
|
|
|
bld.SAMBA3_MODULE('auth_script',
|
|
subsystem='auth',
|
|
source=AUTH_SCRIPT_SRC,
|
|
init_function='',
|
|
internal_module=bld.SAMBA3_IS_STATIC_MODULE('auth_script'),
|
|
enabled=bld.SAMBA3_IS_ENABLED_MODULE('auth_script'))
|
|
|
|
bld.SAMBA3_MODULE('auth_samba4',
|
|
subsystem='auth',
|
|
source='auth_samba4.c',
|
|
init_function='',
|
|
deps='auth4 samba_server_gensec gensec',
|
|
internal_module=bld.SAMBA3_IS_STATIC_MODULE('auth_samba4'),
|
|
enabled=bld.SAMBA3_IS_ENABLED_MODULE('auth_samba4'))
|