summaryrefslogtreecommitdiff
path: root/source3/param
diff options
context:
space:
mode:
authorZach Loafman <zach.loafman@isilon.com>2009-02-14 18:20:33 +0000
committerTim Prouty <tprouty@samba.org>2009-02-16 00:29:21 -0800
commit8e19a288052bca5efdb0277a40c1e0fdd099cc2b (patch)
treea4ce6f232c5b2059a4bcf5dc08757b7aabdf956f /source3/param
parent57a31ef2030d3146ec1c099c1c4036efa01a3dfa (diff)
downloadsamba-8e19a288052bca5efdb0277a40c1e0fdd099cc2b.tar.gz
samba-8e19a288052bca5efdb0277a40c1e0fdd099cc2b.tar.bz2
samba-8e19a288052bca5efdb0277a40c1e0fdd099cc2b.zip
s3 auth: Add parameter that forces every user through an NSS lookup
When set to yes, "force username map" forces every user, even AD users, through an NSS lookup. This allows the token to be overridden with information from NSS in certain broken environments.
Diffstat (limited to 'source3/param')
-rw-r--r--source3/param/loadparm.c11
1 files changed, 11 insertions, 0 deletions
diff --git a/source3/param/loadparm.c b/source3/param/loadparm.c
index a9f2809f8b..37af7038c1 100644
--- a/source3/param/loadparm.c
+++ b/source3/param/loadparm.c
@@ -144,6 +144,7 @@ struct global {
int iAfsTokenLifetime;
char *szLogNtTokenCommand;
char *szUsernameMap;
+ bool bForceUsernameMap;
char *szLogonScript;
char *szLogonPath;
char *szLogonDrive;
@@ -1282,6 +1283,15 @@ static struct parm_struct parm_table[] = {
.flags = FLAG_ADVANCED,
},
{
+ .label = "force username map",
+ .type = P_BOOL,
+ .p_class = P_GLOBAL,
+ .ptr = &Globals.bForceUsernameMap,
+ .special = NULL,
+ .enum_list = NULL,
+ .flags = FLAG_ADVANCED,
+ },
+ {
.label = "password level",
.type = P_INTEGER,
.p_class = P_GLOBAL,
@@ -5200,6 +5210,7 @@ FN_GLOBAL_CONST_STRING(lp_afs_username_map, &Globals.szAfsUsernameMap)
FN_GLOBAL_INTEGER(lp_afs_token_lifetime, &Globals.iAfsTokenLifetime)
FN_GLOBAL_STRING(lp_log_nt_token_command, &Globals.szLogNtTokenCommand)
FN_GLOBAL_STRING(lp_username_map, &Globals.szUsernameMap)
+FN_GLOBAL_BOOL(lp_force_username_map, &Globals.bForceUsernameMap)
FN_GLOBAL_CONST_STRING(lp_logon_script, &Globals.szLogonScript)
FN_GLOBAL_CONST_STRING(lp_logon_path, &Globals.szLogonPath)
FN_GLOBAL_CONST_STRING(lp_logon_drive, &Globals.szLogonDrive)