summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2009-02-02s4:auth/kerberos: s/private/private_dataStefan Metzmacher1-10/+10
metze
2009-02-02s4:auth/gensec: s/private/private_dataStefan Metzmacher1-10/+10
metze
2009-02-02docs: Describe "service" in man mount.cifs.Karolin Seeger1-4/+7
This fixes bug #5346. Thanks to the Debian Samba package maintainers for reporting and providing a patch! Karolin
2009-02-02s3 build: Fix "assignment discards qualifiers from pointer target type" warningsTim Prouty2-13/+6
2009-02-01Add two new parameters to control how we verify kerberos tickets. Removes ↵Dan Sledz10-34/+170
lp_use_kerberos_keytab parameter. The first is "kerberos method" and replaces the "use kerberos keytab" with an enum. Valid options are: secrets only - use only the secrets for ticket verification (default) system keytab - use only the system keytab for ticket verification dedicated keytab - use a dedicated keytab for ticket verification. secrets and keytab - use the secrets.tdb first, then the system keytab For existing installs: "use kerberos keytab = yes" corresponds to secrets and keytab "use kerberos keytab = no" corresponds to secrets only The major difference between "system keytab" and "dedicated keytab" is that the latter method relies on kerberos to find the correct keytab entry instead of filtering based on expected principals. The second parameter is "dedicated keytab file", which is the keytab to use when in "dedicated keytab" mode. This keytab is only used in ads_verify_ticket.
2009-02-02s3:winbind_group: fix "getent group" to allocate new gids.Michael Adam1-2/+8
"getent group" used to fill the idmap cache with negative cache entries for unmapped group sids. Don't pass domain name unconditionally to idmap_sid_to_gid(). idmap_sid_to_gid() only creates new mappings (allocating idmap backends tdb, tdb2, ldap...) when the domain name passed in is "". Note that it is _wrong_ to directly call the idmap_sid_to_gid() functions here, in the main winbindd. The correct fix would be to send a sid_to_gid request to winbindd itself, but this needs more work to prepare the async mechanisms, and we nee a quick fix for getent passwd now. Michael
2009-02-02s3:winbind_user: fix "getent passwd" to allocate new uids.Michael Adam1-2/+7
"getent passwd" used to fill the idmap cache with negative cache entries for unmapped user sids. Don't pass domain name unconditionally to idmap_sid_to_[ug]id(). idmap_sid_to_[ug]id() only creates new mappings (allocating idmap backends tdb, tdb2, ldap...) when the domain name passed in is "". Note that it is _wrong_ to directly call the idmap_sid_to_[ug]id() functions here, in the main winbindd. The correct fix would be to send a sid_to_[ug]id request to winbindd itself, but this needs more work to prepare the async mechanisms, and we nee a quick fix for getent passwd now. Michael
2009-02-02s3:winbind_user: move initialization of domain up in winbindd_fill_pwent()Michael Adam1-11/+9
and streamline logic some Michael
2009-02-01s3: Fix the non-merged build.Kai Blin1-1/+0
2009-02-01shared: Move dom_sid_* utility functions to top levelKai Blin14-26/+85
2009-02-01Make schannel not depend on samdb anymore.Simo Sorce2-6/+61
2009-02-01Fix headers, only ldb.h is requiredSimo Sorce1-2/+0
2009-02-01Split up async_req into a generic and a NTSTATUS specific partVolker Lendecke21-265/+343
2009-02-01"test" expects only one =Björn Jacke1-1/+1
Signed-off-by: Stefan Metzmacher <metze@samba.org>
2009-02-01Convert api_RNetUserEnum to use the srv_samr_nt.c directlyVolker Lendecke1-26/+77
This is a sample for other accesses to pdb to go via samr. The goal is to access passdb only via srv_samr_nt.c. If that is done, then we can easily swap in another samr implementation like for example samba4's via a unix domain socket.
2009-02-01Move rpc_pipe_open_internal to srv_pipe_hnd.cVolker Lendecke2-37/+37
This is a smbd-only function
2009-02-01Replace pipe names in pipes_struct by ndr_syntax_idVolker Lendecke5-72/+117
This was mainly used for debugging output
2009-02-01Fix some type-punned warningsVolker Lendecke1-3/+3
2009-02-01cli_get_pipe_name_from_interface does not really need a talloc_ctxVolker Lendecke6-32/+28
2009-02-01Fix nonempty blank linesVolker Lendecke2-119/+117
2009-02-01Just for fun: Move some bytes from bss to textVolker Lendecke2-2/+2
2009-02-01fix build with external dns_sd librariesBjörn Jacke1-1/+1
2009-01-31Start restoring the sqlite3 backendSimo Sorce1-320/+357
Passes many tests but not all yet.
2009-02-01s4:irpc: avoid c++ reserved word 'private'Stefan Metzmacher13-27/+30
metze
2009-02-01s4:lib/messaging: fix warnings in testsuiteStefan Metzmacher1-2/+2
metze
2009-02-01s4:lib/messaging: avoid c++ reserved word 'private'Stefan Metzmacher3-29/+29
metze
2009-02-01s4:kdc: avoid c++ reserved word 'private'Stefan Metzmacher3-49/+50
metze
2009-02-01s4:nbt_server/wins/: fix compiler warnings in winsdb.cStefan Metzmacher1-1/+1
metze
2009-02-01Fix the build on Solaris CCVolker Lendecke1-1/+1
2009-01-31Remove unused np_read sync wrapperVolker Lendecke2-32/+0
2009-01-31Make reply_pipe_read_andx asyncVolker Lendecke1-13/+57
2009-01-31Remove unused np_write sync wrapperVolker Lendecke2-32/+0
2009-01-31Make reply_pipe_write asyncVolker Lendecke1-13/+48
2009-01-31Make reply_pipe_write_and_X asyncVolker Lendecke1-20/+52
2009-01-31Make-np_write-handle-0-byte-writes-as-NT_STATUS_OKVolker Lendecke2-43/+33
2009-01-31Convert api_rpc_trans_reply to async np_*Volker Lendecke2-29/+135
2009-01-31Add an async np_read wrapperVolker Lendecke2-22/+107
2009-01-31Add an async np_write wrapperVolker Lendecke2-15/+106
2009-01-31s4:auth: try to fix the build on SolarisStefan Metzmacher1-0/+1
MAXHOSTNAMELEN comes in via system/network.h now. metze
2009-01-31make send_file_readbraw staticVolker Lendecke2-12/+6
2009-01-31Remove the global variable "chain_size"Volker Lendecke8-24/+34
2009-01-31Make is_andx_req non-staticVolker Lendecke3-26/+26
2009-01-31s4:repl_meta_data: fix segfault after ldb changesStefan Metzmacher1-1/+1
metze
2009-01-31lib/replace: move MAXHOSTNAMELEN to system/network.hStefan Metzmacher2-13/+5
Some platforms define it in netdb.h, so we should define the replace after including metdb.h. metze
2009-01-31s4:heimdal_build: fix the build of asn1_compile and compile_etStefan Metzmacher1-4/+2
We should not link in heimdal_build/replace.ho twice. HEIMDAL_ROKEN has everything we need.... metze
2009-01-31s4:build: require ldb 0.9.3 when building against an external libraryStefan Metzmacher2-2/+2
metze
2009-01-31heimdal: void functions should not return a valueStefan Metzmacher1-1/+1
metze
2009-01-30Explicitly include ldb_handlers.h where necessarySimo Sorce3-5/+2
2009-01-30Install mising public headersSimo Sorce1-1/+1
2009-01-30Do not install private headersSimo Sorce1-2/+0