Andrew Bartlett ff354c99c5 This is another *BIG* change... ... Samba now features a pluggable passdb interface, along the same lines as the one in use in the auth subsystem. In this case, only one backend may be active at a time by the 'normal' interface, and only one backend per passdb_context is permitted outside that. This pluggable interface is designed to allow any number of passdb backends to be compiled in, with the selection at runtime. The 'passdb backend' paramater has been created (and documented!) to support this. As such, configure has been modfied to allow (for example) --with-ldap and the old smbpasswd to be selected at the same time. This patch also introduces two new backends: smbpasswd_nua and tdbsam_nua. These two backends accept 'non unix accounts', where the user does *not* exist in /etc/passwd. These accounts' don't have UIDs in the unix sense, but to avoid conflicts in the algroitmic mapping of RIDs, they use the values specified in the 'non unix account range' paramter - in the same way as the winbind ranges are specifed. While I was at it, I cleaned up some of the code in pdb_tdb (code copied directly from smbpasswd and not really considered properly). Most of this was to do with % macro expansion on stored data. It isn't easy to get the macros into the tdb, and the first password change will 'expand' them. tdbsam needs to use a similar system to pdb_ldap in this regard. This patch only makes minor adjustments to pdb_nisplus and pdb_ldap, becouse I don't have the test facilities for these. I plan to incoroprate at least pdb_ldap into this scheme after consultation with Jerry. Each (converted) passdb module now no longer has any 'static' variables, and only exports 1 init function outside its .c file. The non-unix-account support in this patch has been proven! It is now possible to join a win2k machine to a Samba PDC without an account in /etc/passwd! Other changes: Minor interface adjustments: pdb_delete_sam_account() now takes a SAM_ACCOUNT, not a char*. pdb_update_sam_account() no longer takes the 'override' argument that was being ignored so often (every other passdb backend). Extra checks have been added in some places. Minor code changes: smbpasswd no longer attempts to initialise the passdb at startup, this is now done on first use. pdbedit has lost some of its 'machine account' logic, as this behaviour is now controlled by the passdb subsystem directly. The samr subsystem no longer calls 'local password change', but does the pdb interactions directly. This allow the ACB_ flags specifed to be transferred direct to the backend, without interference. Doco: I've updated the doco to reflect some of the changes, and removed some paramters no longer applicable to HEAD.		0001-01-01 00:00:00 +00:00
..
basicsmb-domainsec-nt4.test	This is another *BIG* change...	0001-01-01 00:00:00 +00:00
basicsmb-domainsec.test	This is another *BIG* change...	0001-01-01 00:00:00 +00:00
basicsmb-hostsdeny.test	Add and modify some of the various tests I have had sitting around here for a	0001-01-01 00:00:00 +00:00
basicsmb-hostsequiv.test	Fix up the test for some of the quirkier hosts on the farm, and enable one	0001-01-01 00:00:00 +00:00
basicsmb-invalidusers.test	Add and modify some of the various tests I have had sitting around here for a	0001-01-01 00:00:00 +00:00
basicsmb-local-pass-change.test	Fix up the build farm again.	0001-01-01 00:00:00 +00:00
basicsmb-remote-pass-change.test	Fix up the build farm again.	0001-01-01 00:00:00 +00:00
basicsmb-serversec.test	Jigger around with the tests a bit more	0001-01-01 00:00:00 +00:00
basicsmb-shareguest.test	Update tests, start testing password server code, now I have it working and	0001-01-01 00:00:00 +00:00
basicsmb-sharelist.test	Changed some of the tests around, made failures for parts actualy count	0001-01-01 00:00:00 +00:00
basicsmb-sharesec.test	Jigger around with the tests a bit more	0001-01-01 00:00:00 +00:00
basicsmb-usersec.test	Jigger around with the tests a bit more	0001-01-01 00:00:00 +00:00
basicsmb.fns	Fix up the build farm again.	0001-01-01 00:00:00 +00:00
basicsmb.smb.conf.domain	Add and modify some of the various tests I have had sitting around here for a	0001-01-01 00:00:00 +00:00
basicsmb.smb.conf.hostsdeny	Add and modify some of the various tests I have had sitting around here for a	0001-01-01 00:00:00 +00:00
basicsmb.smb.conf.hostsequiv.template	Fix up the build farm again.	0001-01-01 00:00:00 +00:00
basicsmb.smb.conf.invalidusers.template	Add and modify some of the various tests I have had sitting around here for a	0001-01-01 00:00:00 +00:00
basicsmb.smb.conf.server	switch off level 100 debug for server security	0001-01-01 00:00:00 +00:00
basicsmb.smb.conf.share	Jigger around with the tests a bit more	0001-01-01 00:00:00 +00:00
basicsmb.smb.conf.template	This is another *BIG* change...	0001-01-01 00:00:00 +00:00
basicsmb.smb.conf.user	added line-feed at end of templates	0001-01-01 00:00:00 +00:00
runlist	Fix up runlist botchup.	0001-01-01 00:00:00 +00:00
torture_setup.fns	Fix up the build farm again.	0001-01-01 00:00:00 +00:00
torture-ATTR.test	Start of smbtorture based testing. Not all of smbtorture's facilites	0001-01-01 00:00:00 +00:00
torture-BROWSE.test	Start of smbtorture based testing. Not all of smbtorture's facilites	0001-01-01 00:00:00 +00:00
torture-DELETE.test	Start of smbtorture based testing. Not all of smbtorture's facilites	0001-01-01 00:00:00 +00:00
torture-DENY1.test	Start of smbtorture based testing. Not all of smbtorture's facilites	0001-01-01 00:00:00 +00:00
torture-DENY2.test	Start of smbtorture based testing. Not all of smbtorture's facilites	0001-01-01 00:00:00 +00:00
torture-DIR.test	Start of smbtorture based testing. Not all of smbtorture's facilites	0001-01-01 00:00:00 +00:00
torture-FDPASS.test	Start of smbtorture based testing. Not all of smbtorture's facilites	0001-01-01 00:00:00 +00:00
torture-LOCK1.test	Start of smbtorture based testing. Not all of smbtorture's facilites	0001-01-01 00:00:00 +00:00
torture-LOCK2.test	Start of smbtorture based testing. Not all of smbtorture's facilites	0001-01-01 00:00:00 +00:00
torture-LOCK3.test	Start of smbtorture based testing. Not all of smbtorture's facilites	0001-01-01 00:00:00 +00:00
torture-LOCK4.test	Start of smbtorture based testing. Not all of smbtorture's facilites	0001-01-01 00:00:00 +00:00
torture-LOCK5.test	Start of smbtorture based testing. Not all of smbtorture's facilites	0001-01-01 00:00:00 +00:00
torture-OPEN.test	Start of smbtorture based testing. Not all of smbtorture's facilites	0001-01-01 00:00:00 +00:00
torture-OPLOCK1.test	Start of smbtorture based testing. Not all of smbtorture's facilites	0001-01-01 00:00:00 +00:00
torture-OPLOCK3.test	Start of smbtorture based testing. Not all of smbtorture's facilites	0001-01-01 00:00:00 +00:00
torture-RANDOMIPC.test	Start of smbtorture based testing. Not all of smbtorture's facilites	0001-01-01 00:00:00 +00:00
torture-RW1.test	Start of smbtorture based testing. Not all of smbtorture's facilites	0001-01-01 00:00:00 +00:00
torture-RW2.test	Start of smbtorture based testing. Not all of smbtorture's facilites	0001-01-01 00:00:00 +00:00
torture-TCON.test	Start of smbtorture based testing. Not all of smbtorture's facilites	0001-01-01 00:00:00 +00:00
torture-TORTURE.test	Start of smbtorture based testing. Not all of smbtorture's facilites	0001-01-01 00:00:00 +00:00
torture-TRANS2.test	Start of smbtorture based testing. Not all of smbtorture's facilites	0001-01-01 00:00:00 +00:00
torture-UNLINK.test	Start of smbtorture based testing. Not all of smbtorture's facilites	0001-01-01 00:00:00 +00:00