Age | Commit message (Collapse) | Author | Files | Lines |
|
When the kernel sends the upcall a sec=mskrb5 parameter, that means
the the MSKRB5 OID is preferred by the server. This patch fixes the
upcall to use that OID in place of the "normal" krb5 OID when it
gets a sec=mskrb5 parameter.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Acked-by: Steve French <smfrench@gmail.com>
(This used to be commit 6287e13b34efeaa8fd94c7c6d99468350ce6172e)
|
|
krb5 mounts require that the user already have a valid krb5 ticket.
Since we can't currently use the password entered, don't prompt for it.
Also, switch to using strncmp instead of strcmp here.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
(This used to be commit c75791c34abebe23c6f6a5534b0358514ec4eabc)
|
|
domain name.
Jeremy.
(This used to be commit 33019fe2b5f521c143fc79edb915eca69b9ed98d)
|
|
Guenther
(This used to be commit f3791e03ab09cadb1f54e32e67f4dfb3cf42e708)
|
|
When we negotiated NETLOGON_NEG_PASSWORD_SET2 we need to use
NetrServerPasswordSet2 to change the machine password.
Tested with NT4, W2k, W2k3 and W2k8.
Guenther
(This used to be commit 5820360451e4db0fad0472f814cae667b2ea51fd)
|
|
<Douglas_E_Wegscheid@whirlpool.com>.
Jeremy.
(This used to be commit 1295bb9787dde69b4be4acee7b66eb782afe9c42)
|
|
Guenther
(This used to be commit f24cef9fa7be45212744d39b7c66804e64147afd)
|
|
Guenther
(This used to be commit 7b312a0abc6de5a51555ccfbde7f8f78fc11d043)
|
|
Michael
(This used to be commit 25fed055c0ee1d892b902caae2a1188977316f14)
|
|
Michael
(This used to be commit b476400f0afcaf4e1a37b9f0b358f01dc7a194be)
|
|
build
Michael
(This used to be commit fe62098666a16b31b025867f273d407e77152c4c)
|
|
Without needing to install libsmbclient to /usr/local/samba first.
Michael
(This used to be commit f0e47bce2e98131812e96fb88cc3d1fe939e8d6c)
|
|
Michael
(This used to be commit 28688cfd57c322937f2c63087380c377bd961018)
|
|
reconnect code to cope with rebooting a DC. This
replaces the code I asked Volker to revert.
The logic is pretty simple. It adds a new parameter,
"winbind reconnect delay", set to 30 seconds by
default, which determines how long to wait between
connection attempts.
To avoid overwhelming the box with DC-probe
forked children, the code now keeps track of
the DC probe child per winbindd_domain struct
and only starts a new one if the existing one
has died.
I also added a little logic to make sure the
dc probe child always sends a message whatever
the reason for exit so we will always reschedule
another connect attempt.
Also added documentation.
Jeremy.
(This used to be commit 8027197635b988b3dcf9d3d00126a024e768fa62)
|
|
Michael
(This used to be commit e5c4cbbf5a4b3e5db1732043a74cd1f4a5eec136)
|
|
Michael
(This used to be commit fdf29c1cdf6b9bd1c6fb7a9f070084e0df5470bb)
|
|
Michael
(This used to be commit 11458f9a9ac17c68aa0496d2ade4b93d02e7ebcc)
|
|
Michael
(This used to be commit f1d84e76bb6935e80b01d13414980f8de1f71824)
|
|
Michael
(This used to be commit 02d4b820fccfef1387f47db4bb5ade3dfd0d25bb)
|
|
Michael
(This used to be commit d6fb6348a3672e915556dcb36c1a4999d4abae18)
|
|
Michael
(This used to be commit 6ad2090391a92ebe822b2d7b80e180c251dc8e7a)
|
|
Michael
(This used to be commit 702c0bc04668117e3521d687b9b5a87fd7e0f1b1)
|
|
Michael
(This used to be commit c3c3dadcab81f0a1ae8834e85e7e80a3da6601fb)
|
|
Michael
(This used to be commit ead9b9d7167d999d73cf4111f3b321236aac2a15)
|
|
Guenther
(This used to be commit a75055be5ff7ebe3476cfac86c6597a56a843c23)
|
|
Guenther
(This used to be commit ea9fc3bea31b11e715d9524defc18b75e5943842)
|
|
Guenther
(This used to be commit 43693ce6c678b961fa516bbf502af92f87cd5346)
|
|
According to the GNU libc nss guide, we should always set
errno to ENOENT when returning NSS_UNAVAIL.
http://www.gnu.org/software/libtool/manual/libc/NSS-Modules-Interface.html#NSS-Modules-Interface
At least the MQ Series message queing service that runs
on WebSphere will fail if you return any other errno in this case.
(This used to be commit ee26664602445fa7798e2061f6bcbef0756d6528)
|
|
Some of the bits generate INVALID_PARAMETER and some bits
are ignored when they come from a client, that's why we need
to use bits from the ignored range for our internal usage.
metze
(This used to be commit 7b4c8a4e39f310eb450918fa841b0ea1b4af19f7)
|
|
* Removed deprecated configuration parameters
* Silenced all warnings due to lack of doxygen comments
* Reordered config parameters to match doxygen's canonical ordering
(This used to be commit d3295d13aeb396377cb7fd46dcdb1f504f18efef)
|
|
address
reported by Ted Percival <ted@midg3t.net>.
Jeremy.
(This used to be commit ab06efccf31fbc899536d2681a2076e6dfd65b9e)
|
|
Guenther
(This used to be commit e8619121d16d086f1ab186051d0ecdc83c02e5b5)
|
|
Guenther
(This used to be commit ae35a5110ea03d8ff27f320cdc685e5623715a2a)
|
|
Guenther
(This used to be commit dbfa7ba14c9f1a4d7a1e7205dd0b3ea2fc2e6131)
|
|
Guenther
(This used to be commit f2a2ed315e393353110aa7760b4eca4f1f49ca21)
|
|
Guenther
(This used to be commit 687ef28874eb311b3e3919c3a38a22e5186d4c1b)
|
|
Guenther
(This used to be commit 7cf6ed68236e7dd64657cb1087a5a687d6f59ad1)
|
|
Guenther
(This used to be commit 8504a92ac55d6936df051be66207a59a76bf32a3)
|
|
Guenther
(This used to be commit 693f90fd2394309ce40d3ca5fc007543058b342a)
|
|
Guenther
(This used to be commit 8d19b2ceb131ca2a0fd983cdb4fd17acdad9c26e)
|
|
Guenther
(This used to be commit b5bb7844952a87b123551b478b60bfe232afc308)
|
|
Michael
(This used to be commit 661b7fdffda40a9ca7cb36627dbaf91cb4357cd0)
|
|
and "smbd" to mean the main smb daemon. Update docs to match.
Jeremy.
(This used to be commit e415420b086a236be6bcc1e7584bec276a74e457)
|
|
(This used to be commit 16ee95494ba495c5f5ff8779206f380db1067b2d)
|
|
was asking for a winbindd name to SID lookup of
"Unix Group\name" where "name" was also a valid username,
the winbindd passdb lookup of that name was losing the
domain string info before calling lookup name (ie. lookup_name()
was being called with just the string "name", not the
full string "Unix Group\name").
The passdb backend of winbindd has to cope with
not only names from it's own global SAM domain,
but it does lookups for BUILTIN and "Unix User"
and "Unix Group" also, so making it guess by
losing the domain string is "A Bad Idea" (tm) :-).
Note that as winbind globally calls winbind_off()
at startup, it's safe for winbind to call sys_getgrnam()
to do the "Unix Group" lookup from inside lookup_name().
Jeremy.
(This used to be commit 5293af6c3cbfdde340e6add47b914b6ee6fd7b6f)
|
|
Jeremy, please check & push if it's ok.
(This used to be commit f06070c188d6d2efed3205bbc9c3c290718397b1)
|
|
is_ipaddress already dereferences "name", so the NULL check is pointless after
calling it.
(This used to be commit 31ca7b2dbbbfbb3a55670b58c08ebda68888af7e)
|
|
should never include the user SID.
The comment for the function in winbindd/winbindd_ads.c says
/* Lookup groups a user is a member of. */
The following patch makes the wbinfo calls return the correct data
before and after a login.
wbinfo --user-domgroups and --user-sids
(This used to be commit 7849938906a9c859805cbaeca66fae9d3c515aad)
|
|
with-fhs.
This is what one actually wants:
Shared/static libs in /usr/lib, shared modules and so on in /usr/lib/samba.
Michael
(This used to be commit 03de8c1955a85f2e3e9f947309e09023138a1591)
|
|
Now after removing --with-libdir, the value of ${libdir} won't change
anymore at that stage, so there is no need to have the variable expansion
deferred to "make".
Michael
(This used to be commit 256977cf05cb4c4073ece1389a7e4939b18f5f13)
|