Age | Commit message (Collapse) | Author | Files | Lines |
|
rafal
(This used to be commit b3efdcf0aeec5a115c53de8bbedaa9ca8225b689)
|
|
settrustpwent, gettrustpwnam
2) Implementation of another couple of these functions in tdbsam:
settrustpwent, gettrustpwnam, gettrustpwsid
3) Testing (mostly for now) usage of the interface in pdbedit
which is soon to be offline tool back again.
This is quite a new code, so many changes will be put in soon.
rafal
(This used to be commit 2ed23fbce846f9710747d72aa98c20d54894d61e)
|
|
rafal
(This used to be commit 6fdb20f5a7657556a3e4ceb4cab8c1d67e29ea21)
|
|
(This used to be commit 45b2efd60a3c3c9f01b1ccaa828904a70d70d67d)
|
|
This code implements 'opportunistic signing' in our client (when the
server supports it, we will use it), and correct downgrading on both
the client and server for the 'enabled' (rather than required) signing
level.
This means that we can actually set 'server signing = yes' and not
have the world fall apart. We had a number of bugs in that code, and
it certainly looks like most of the testing was with the 'requried'
setting.
While the changes are reasonable, I'm putting this into HEAD rather
than 3.0 for the timebeing. SMB signing, like NTLMSSP, tends to have
gotchas in it :-)
(I also need to give it a workout with more than smbclient before I
move it across).
Andrew Bartlett
(This used to be commit 6bad895462cf076a7e917c909e2a461d1b360bf1)
|
|
STF rules! (Pity we don't use it for more stuff)
Andrew Bartlett
(This used to be commit a9363b45b0ef652a5fd621915fafb97ada0c7d5e)
|
|
(should fix the mb service name problem, can't remember the bugid).
Jeremy.
(This used to be commit 93c2d50f1adbf257c0c0185b420a1d73d56be2f9)
|
|
need to try and convert 1 byte, then 2 bytes if that fails. Fixes bug
reported by Simo.
Jeremy.
(This used to be commit 0f84801ff3ed5acfcf8e0c4a825f90b9b4823da5)
|
|
(This used to be commit 77142a1ca6853fcae3b806830d077f6f84bebd6d)
|
|
1 fix for a memleak
(This used to be commit 9f3b0295fe7bd6c0c3a6061e5d00e7b88f702b21)
|
|
A windows DC does not reply to DCNAME\\Administrator, only to
DOMAIN\\Administrator. Fix that.
Without winbind we are wrong as domain members, we should forward the request
DOMAIN\\Username to the DC on behalf of the asking client. Winbind fixes that
nicely.
Volker
(This used to be commit c39f698dde98de9b6be40a6c81e669dcd7696b3a)
|
|
should work as expected :-)
Fix wb_delgrpmember.
Volker
(This used to be commit 2a2b4a159a973678b7279a8d91060c7c27aa22e8)
|
|
(This used to be commit 7798a52d82c46759635e90a7e48ddad4ce48b763)
|
|
(This used to be commit 92f6895dd11189ce966b8b5a3f9ace54f478a375)
|
|
Bugzilla #1154.
(This used to be commit 311bbf41ec50d5caf4388cb4745173739744a049)
|
|
Jeremy.
(This used to be commit 13edba472a0a5eb56586458a2432d53f495d0129)
|
|
active connections
(This used to be commit f0e454f6eb3ed25c3210f288d48044b3eed9d129)
|
|
(This used to be commit 7153cbf8cbb07d4e7a9dc9adc9e0a40c57a6e305)
|
|
Bas van Sisseren <bas@dnd.utwente.nl>
(This used to be commit a90df1c170a168092e0c90f684ea968bd1f6f768)
|
|
so breaks when substitution '/' and '\'). It's used by unix_clean_name(),
which is used by reduce_name, which is used by check_name() (phew!).
Now that we know all filenames passed to check_name() are in a "good"
format (no double slashes, all '\\' chars translated to '/' etc.) due
to the new check_path_syntax() we can avoid calling reduce_name unless
widelinks are denied. After this check-in I can fix all_string_sub() to
handle mb chars correctly as it won't be in the direct path in the
main path handling code.
Jeremy.
(This used to be commit bce0678331aa4746181389e0f91f11fb2a6dadcb)
|
|
original srvstr_pull_buf() function to get the pipename not srvstr_get_path().
Jeremy.
(This used to be commit ac5e0c4bb686e2aaccc9b70f240f79747fd48cd8)
|
|
(This used to be commit d9a9e214a8dd3b79284f4cff6052210b758bbf72)
|
|
(This used to be commit 0b17a4105ecbad26b6bb79ed8148495c02518430)
|
|
(This used to be commit 0ad00bce0752373a1ac471f6629a5e64ee5af280)
|
|
(This used to be commit da59bab769dac3702dbddd6ad718f918befee6db)
|
|
Volker
(This used to be commit 6287141f10e6c774990b4fdf65bfd2a55afca35a)
|
|
right in the middle of the code.
I just love catching jra on stuff like this, after all the crap
I've done. :-)
(This used to be commit 217791cab21b79fdbe2ddb96079fb9abb8545dd7)
|
|
(This used to be commit 00c998c5030560d096d7f3c0f9d89ce18e2d006b)
|
|
(This used to be commit 29bc83080f47b2f945686e706f2cfef221ac3795)
|
|
Added hardlink_internals() code - UNIX extensions now use this too.
Jeremy.
(This used to be commit 3f2b9f10dec58d3e3ae463e3804d96052fb27a4d)
|
|
much closer emulation of Win2k3 error return codes.
Jeremy.
(This used to be commit 883f89a0184e37bff4f5877a25d31b994996ab08)
|
|
(This used to be commit 95e7cfdb19bab4a5aac59e10afb3b1416e6079c5)
|
|
array. need to update passdb for this.
(This used to be commit 1d3079bf4c661939e291cca5e96157b5fa492340)
|
|
files for SWAT
(This used to be commit 42d8455a02fa89d37864d32c49d598ba9cdc1552)
|
|
(This used to be commit c1b1a1961f19e2fba680d48e41d0b29cdfd6d39c)
|
|
(This used to be commit 90640a523e9898157a361f3fbf5923b1ef2a6651)
|
|
very efficient though, it only does one group at a time. Needs improving, but
the structures are not particularly easy to set up, so check in the basically
working part for others to review.
I'm close to saying that I would like to remove aliases from general group
mapping. These can not be reflected correctly in /etc/group, winbind could do
a better job here.
And having aliases only on machines with nss_winbind at least for me is not a
too severe limitation.
Comments?
Volker
(This used to be commit 6cad5bcc280c2964473346cc467423a44cc6a5c2)
|
|
The problem was that the current_printif struct was set during
print_backend_init() based on the 'printcap name'. So you could
not use cups and then override the setting for a specific printer
by setting 'printing = bsd' (a common setup for pdf generation
print services.
There is a subtle change in behavior in that the print
interface functions are selecting on the basis of lp_printing()
and not lp_printcap_name(), but the new behavior seems more
intuitive IMHO.
(This used to be commit e721255e8f7d719dbcc2cad94c9b11f6124676e6)
|
|
that pdb_default_get_privilege_set returns NOT_IMPLEMENTED and not a privilege
set that does not grant anything. I don't really understand privileges yet, so
work around that by not failing if pdb_get_privilege_set fails.
Volker
(This used to be commit b790753f443092a65eeef7b146a18d4c5ffcb323)
|
|
(This used to be commit fa6500fe773ae1f0aa70f370600b6f7aa7f65f3d)
|
|
Do:
wbinfo -C alias
net groupmap set alias alias -L
net rpc group addmem alias DOMAIN\\group -S localhost -Uroot%secret
getent group alias
And hopefully the members of domain\\group show up :-)
Still have to get them to show up in 'getent group'.
Volker
(This used to be commit 18e48190838907a29347d471e81945257f540aa7)
|
|
(This used to be commit fae17e0f9d228bab9992287507babd6a8fd53f97)
|
|
(This used to be commit eb8a8c290f893b6ffa3d16e282829230be56b212)
|
|
This patch add privilege support for samba
Currently it is implemented only for tdbsam backend but estending it to
other sam backends is straightforward.
I must make a big thank to JFM for his teachings on the matter and the
functions at the base of this work.
At thye moment only samr_create_user honours SeAddUsersPrivilege and
SeMachineAccountPrivilege to permit any user to add machines and/or users to
the server.
The command "net priv" has been provided to manipulate the privileges
database.
There are still many things to do (like support in "net rpc vampire") but
the working core is here.
Feel free to comment/extend on this work.
Of course I will deny that any bug may affect this code :-)
Simo.
This patch adds also my patch about add share command enhancements.
(This used to be commit 7a78c3605e203bd8e0d7ae244605f076a5d0b0bc)
|
|
With only your fix in for example smb.conf was expected in /smb.conf...
Thanks,
Volker
(This used to be commit eb18cb83d13d664896468d200d9dc353da13c561)
|
|
Volker
(This used to be commit f95a5d81479b467c837b727831c2224832c8205c)
|
|
su - WINDOWS\\vl
now includes the locally defined aliases I'm member of.
Next will be getent group.
Volker
(This used to be commit 52dae45684317ac8ac529017607bb5787dda7c50)
|
|
turn on fhs compliant paths. Spotted by Timur Bakeyev.
(This used to be commit e0382635a5490e1a6b6388dc98e6ce318e197808)
|
|
merge to 3_0, as the pdb interfaces has changed a bit between the two.
This has not been tested too severly (which means it's completely broken ;-),
but I want it in for review. Feel free to revert it :-)
TODO:
make 'net groupmap' a bit more friendly for alias members.
Put that stuff into pdb_ldap.
Getting the information over to winbind. One plan without linking pdb into
winbind would be to fill group_mapping.tdb with the membership information and
have that as a cache (or use gencache.tdb?). smbd on a PDC or stand-alone
could trigger that itself, the problem is a BDC using LDAP. This needs to do
it on a regular basis. The BDC smbd needs to be informed about SAM changes
somehow...
Volker
(This used to be commit 30ef8fe1e85c0ca229b54f3f1595c4330f7191d1)
|
|
srv_samr_nt.c: Correctly report that a user is not member of an alias.
Volker
(This used to be commit 26d99204b7cbfa8e259f2a8438eadc9ff6be0709)
|