Age | Commit message (Collapse) | Author | Files | Lines |
|
Andrew Bartlett
(This used to be commit 595dee660742f8bd5770a5f7aaf3a5d1987dbcfa)
|
|
domains, this patch ensures that we always use the ADS backend when
security=ADS, and the remote server is capable.
The routines used for this behaviour have been upgraded to modern Samba
codeing standards.
This is a change in behaviour for mixed mode domains, and if the trusted
domain cannot be reached with our current krb5.conf file, we will show
that domain as disconnected.
This is in line with existing behaviour for native mode domains, and for
our primary domain.
As a consequence of testing this patch, I found that our kerberos error
handling was well below par - we would often throw away useful error
values. These changes move more routines to ADS_STATUS to return
kerberos errors.
Also found when valgrinding the setup, fix a few memory leaks.
While sniffing the resultant connections, I noticed we would query our
list of trusted domains twice - so I have reworked some of the code to
avoid that.
Andrew Bartlett
(This used to be commit 7c34de8096b86d2869e7177420fe129bd0c7541d)
|
|
'newrec' into the tdb.
This was not initialised, so valgrind warned about it.
(Note: valgrind only makes sense on tdbs with 'mmap = no' in your smb.conf)
Andrew Bartlett
(This used to be commit c9f9d6d3171d720b4ec0ba6af8c0c8ab178cd98b)
|
|
authentication.
Andrew Bartlett
(This used to be commit 7e6cc8f0037f9948230a1e1bd380f30cec5d511e)
|
|
find_domain_from_name(lp_workgroup()).
(as find_domain_from_name() can change the data in lp_workgroup())
Andrew Bartlett
(This used to be commit 2e6eaad9ce6a0ad6923b5952ef6cf1c3688b7cfa)
|
|
(This used to be commit 703f101136b8e9bbc16f57a37cd9d9d739606a84)
|
|
While machine accounts cannot use an NTLM login (NT4 style), they are
otherwise full and valid members of the domain, and expect to be able to
use kerberos to connect to CIFS servers.
This means that the LocalSystem account, used by various services, can
perform things like backups, without the admin needing to enter further
passwords.
This particular issue (bug 722) has started to come up a lot on the lists.
I have only enabled it for winbindd-based systems, as the macros use use
to call the 'add user script' will strip the $ from the username for
security reasons.
Andrew Bartlett
(This used to be commit 6a9bbd1da3bb961d24e74348fa0b68574022855f)
|
|
From ab@samba.org (Alexander Bokovoy).
Jeremy.
(This used to be commit fac9e6d7125fb9edfade3c92a3cd9e1f2c60cefd)
|
|
rafal
(This used to be commit 5d7f81eea2f3d9ba59eb549a45de030b0a277263)
|
|
rafal
(This used to be commit b5e492b8eaf7cefe185d44b6c708f96ff61bd27b)
|
|
FreeBSD winbindd.
Jeremy.
(This used to be commit 7c4d52014e4432c9bd430a8885f0c314312002d5)
|
|
(This used to be commit 344e113368cb46fc4d26107d1cd276e4c76a6a9b)
|
|
Jeremy.
(This used to be commit 8e20c06ed31d9ec10ff0155b1624eee3d60cd006)
|
|
just use one function for both places.
Andrew Bartlett
(This used to be commit 85da181e8a0ade839f6d595fabdf4cea606f82e1)
|
|
Fix some msgs
Volker
(This used to be commit d42953681731d18aef740cd7dd9919e0f4715645)
|
|
Supports recursive downloads and resume, progress indication and shows
estimated time remaining.
(This used to be commit 82bd1b45a4205706b57bae42c7b03974f8b44753)
|
|
but security=ADS, we would attempt to free the principal name that krb5
never allocated.
Also fix the dump_data() of the session key, now that we use a data_blob to
store that.
Andrew Bartlett
(This used to be commit 4ad67f13404ef0118265ad66d8bdfa256c914ad0)
|
|
Jeremy.
(This used to be commit d75db0bf1eee9c4341a3ec14c05f82b364a202b3)
|
|
(This used to be commit fd357ab4e5d4bc0661bfbdd10053a5664e8d1a01)
|
|
(This used to be commit 3c936f1cb58fb0f47e64342f65f72e51b5120387)
|
|
(This used to be commit 7495395c1cc3b09b27d6eeb7dff6f214701d03d6)
|
|
(This used to be commit fac5e05ca1b56cb6e3ab6537d0848fa373c00831)
|
|
(This used to be commit 52480d6d05c1008a25b4a45cbf7682fe227df83a)
|
|
(This used to be commit dc51a4c1f99d5727b5219b2c98586415ee58585a)
|
|
* adding jra's fix for bug 815
(This used to be commit 4d07f7dff8a60b4bce0e266a6a3b13d35dbff089)
|
|
(This used to be commit 7d7a262f45182e67daecdca49df85445c2b9700a)
|
|
Jeremy.
(This used to be commit cae5f158e583572436a2f4c20d919816d763f93d)
|
|
Jeremy.
(This used to be commit 53e7d1508efc6e7910d052845f718d19ef307794)
|
|
Volker
(This used to be commit 50be537b19dc6a4c63a58b9c73e6ad354b7c0d89)
|
|
Chew <darrenc@vicscouts.asn.au>
(This used to be commit 86e0015b06eb9590a6a3e64cb4fe5a88a9f156c2)
|
|
here's a small fix that fixes the new quota system on irix.
I need to reanable XFS quotas on irix for the new quota system
(Jerry do you want to wait for this for the release ?)
But the old system works and is the default on irix!
(This used to be commit 5d43e00a49afc4cf523a531ae6db1a3a8b86c650)
|
|
Volker
(This used to be commit 651f7cd69c4c808f9fbd096d21c852cb83e058a9)
|
|
using pread/pwrite. Modified a little to ensure fsp->pos is correct.
Fix for #889.
Jeremy.
(This used to be commit 019aaaf0df091c3f67048f591e70d4353a02bb9b)
|
|
Andrew Bartlett
(This used to be commit 93a5d8079a0291be14517e437f8f0c964c21e91d)
|
|
(This used to be commit 865fcdcb85d47eeff854f4df0aba0c0f3452bdd9)
|
|
(This used to be commit 6770f32c0e9fc3974504bf0cb303ea41beff3d29)
|
|
about our server-side lack of session key.
Andrew Bartlett
(This used to be commit ba33f1e0d5fe2aed3e378c9c23511c0b4d6f7d14)
|
|
Jeremy.
(This used to be commit ffaf9982dcf9e8d8aec1b3edb79ba7c93bfbb9ef)
|
|
Jeremy.
(This used to be commit 52eafc131e26ecc2c4ce8df856c380eb7fd8af69)
|
|
HAVE_SYS_ATTRIBUTES_H to fix AIX compile.
Jeremy.
(This used to be commit 1b1c216122e4dcf40e4ccaea528a7775521fa618)
|
|
(This used to be commit 134cf1d546cc46c8a907205ee7be7593cbb524b6)
|
|
2.2.x quota methods.
:-).
"here's a patch which ports the samba 2.2 samba_linux_quota.h stuff to 3_0.
This is needed because of so many broken quota files outthere.
Please, test this with old, new kernels
(strucr dqblk, struct mem_dqblk, and struct if_dqblk)
, quota.user, aquota.user formats
what is when a user is over soft quota and over hard quotas..."
Jeremy.
(This used to be commit 4350aa6ce6cfdaf71cdcfd2aebcdc9560fa7efcf)
|
|
this but we should log the fact it was negotiated.
Jeremy.
(This used to be commit 84d34e32be03ec99ce19520f24bb4daaeeddbbc3)
|
|
Volker
(This used to be commit 541e6998a06ac523ad794b10f4e7a46951a06726)
|
|
test for a valid length to fail...
This should fix 'security=server' and hosts-equiv failures picked up by
the build farm.
Andrew Bartlett
(This used to be commit 39311495de3bd0a902f730967f30176db97be05a)
|
|
(This used to be commit 7e5855dfd27ed9ec1fa924986f1ba02632a0d5a0)
|
|
(This used to be commit 3a4c56e4c60854bbd291adc7d321d3869e6dedab)
|
|
(This used to be commit 687aececa66c2c1ba8e5bc3127d8ca79a97436d1)
|
|
understood by humans.
Andrew Bartlett
(This used to be commit 3d91b0a0060f18d49b2fdd9f93ef310e2ea7779d)
|
|
us if we failed to open it earlier.
Andrew Bartlett
(This used to be commit 379368b0bec1f57cc5302b274362ce2f1df0fd9d)
|