Age | Commit message (Collapse) | Author | Files | Lines |
|
Signed-off-by: Jeff Layton <jlayton@redhat.com>
(This used to be commit aa3443492c58a7c109fe159e15d763dbafc66f2a)
|
|
When building on linux, default to building cifs.upcall. Throw a
warning if ADS support is disabled or keyutils isn't installed.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
(This used to be commit d8018d15f013b8d7be8618b75dac5112711193b7)
|
|
cifs.upcall links to libraries that live under /usr, so installing it
in /sbin doesn't seem appropriate. Move it to EPREFIX/sbin instead
(i.e. /usr/sbin).
Signed-off-by: Jeff Layton <jlayton@redhat.com>
(This used to be commit 5c9a1b2c98cc712fc519225e62fba4e5088631a3)
|
|
When the kernel sends the upcall a sec=mskrb5 parameter, that means
the the MSKRB5 OID is preferred by the server. This patch fixes the
upcall to use that OID in place of the "normal" krb5 OID when it
gets a sec=mskrb5 parameter.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Acked-by: Steve French <smfrench@gmail.com>
(This used to be commit 6287e13b34efeaa8fd94c7c6d99468350ce6172e)
|
|
krb5 mounts require that the user already have a valid krb5 ticket.
Since we can't currently use the password entered, don't prompt for it.
Also, switch to using strncmp instead of strcmp here.
Signed-off-by: Jeff Layton <jlayton@redhat.com>
(This used to be commit c75791c34abebe23c6f6a5534b0358514ec4eabc)
|
|
domain name.
Jeremy.
(This used to be commit 33019fe2b5f521c143fc79edb915eca69b9ed98d)
|
|
Guenther
(This used to be commit f3791e03ab09cadb1f54e32e67f4dfb3cf42e708)
|
|
When we negotiated NETLOGON_NEG_PASSWORD_SET2 we need to use
NetrServerPasswordSet2 to change the machine password.
Tested with NT4, W2k, W2k3 and W2k8.
Guenther
(This used to be commit 5820360451e4db0fad0472f814cae667b2ea51fd)
|
|
<Douglas_E_Wegscheid@whirlpool.com>.
Jeremy.
(This used to be commit 1295bb9787dde69b4be4acee7b66eb782afe9c42)
|
|
Guenther
(This used to be commit f24cef9fa7be45212744d39b7c66804e64147afd)
|
|
Guenther
(This used to be commit 7b312a0abc6de5a51555ccfbde7f8f78fc11d043)
|
|
The output doesn't match the output from windows servers,
but it's a start...
metze
(This used to be commit 8a2f9688275aa150b739b5525e738df15c5e25cc)
|
|
This isn't really the final solution, as we compress the data twice,
but it works.
metze
(This used to be commit 6da1d41173a7b82412fcebdd751eade51cf82b2a)
|
|
Michael
(This used to be commit 25fed055c0ee1d892b902caae2a1188977316f14)
|
|
Michael
(This used to be commit b476400f0afcaf4e1a37b9f0b358f01dc7a194be)
|
|
build
Michael
(This used to be commit fe62098666a16b31b025867f273d407e77152c4c)
|
|
Without needing to install libsmbclient to /usr/local/samba first.
Michael
(This used to be commit f0e47bce2e98131812e96fb88cc3d1fe939e8d6c)
|
|
Michael
(This used to be commit 28688cfd57c322937f2c63087380c377bd961018)
|
|
metze
(This used to be commit 9fe466f84afcbd64c9bbfe0f9ea6c1933acb07fe)
|
|
This is a partial fix towards bugs due to us walking past the end of
what we think are strings in ldb. There is much more work to do in
this area.
Andrew Bartlett
(This used to be commit 5805a9a8f35fd90fa4f718f73534817fa3bbdfd2)
|
|
Andrew Bartlett
(This used to be commit 0b6e53f80b063d8702718c84409d7b069aee9c05)
|
|
Something in the search stack adds a distinguisedName record, which
isn't in the message we generate. So we compare, fail and rewrite the
record - every time ldb starts up...
Andrew Bartlett
(This used to be commit 44775d1ed4a4b8edc66a06e2b3710aba6a0dd019)
|
|
(This used to be commit 682ca3cae1d5e796bc58142f79c99d43742ac85c)
|
|
We don't need to just bail, for all these error cases there is still
real result that can be made - just fall back to binary copy/compare.
Andrew Bartlett
(This used to be commit 6aa5dde2aa9a5f070871ecc117e44bfcad363459)
|
|
template.
Andrew Bartlett
(This used to be commit b36c6a21ad12fdc1b53efdc3f29cde7614b4fa9e)
|
|
This ensures that a rudementary schema is always present (for
bootstrapping), and that the indexes are maintained equal to the
schema (rather than hard-coded).
Andrew Bartlett
(This used to be commit 747d683b0d92c3b1cde67245d514977a2c87dc44)
|
|
(This used to be commit 94d5e69190f34d66d4defd4a7de7ce24bee77bc3)
|
|
This is now handled by reading the schema into the attributes.
Also, when we do set something here, mark it as FIXED, so the schema
and any reload from @ATTRIBUTES won't touch it.
Andrew Bartlett
(This used to be commit 7b24701335398ece3d1b3a20cf5f1174500b16ce)
|
|
(This used to be commit 233dd885c2a2b4ee7cc2287efe7d6e03625d4981)
|
|
(This used to be commit 505a0c2b702b696b91dab683626bb25b14a49c38)
|
|
(This used to be commit 8003ee9abf474de534677283fc499f9a3d992b20)
|
|
reconnect code to cope with rebooting a DC. This
replaces the code I asked Volker to revert.
The logic is pretty simple. It adds a new parameter,
"winbind reconnect delay", set to 30 seconds by
default, which determines how long to wait between
connection attempts.
To avoid overwhelming the box with DC-probe
forked children, the code now keeps track of
the DC probe child per winbindd_domain struct
and only starts a new one if the existing one
has died.
I also added a little logic to make sure the
dc probe child always sends a message whatever
the reason for exit so we will always reschedule
another connect attempt.
Also added documentation.
Jeremy.
(This used to be commit 8027197635b988b3dcf9d3d00126a024e768fa62)
|
|
Michael
(This used to be commit e5c4cbbf5a4b3e5db1732043a74cd1f4a5eec136)
|
|
Michael
(This used to be commit fdf29c1cdf6b9bd1c6fb7a9f070084e0df5470bb)
|
|
Michael
(This used to be commit 11458f9a9ac17c68aa0496d2ade4b93d02e7ebcc)
|
|
Michael
(This used to be commit f1d84e76bb6935e80b01d13414980f8de1f71824)
|
|
Michael
(This used to be commit 02d4b820fccfef1387f47db4bb5ade3dfd0d25bb)
|
|
Michael
(This used to be commit d6fb6348a3672e915556dcb36c1a4999d4abae18)
|
|
Michael
(This used to be commit 6ad2090391a92ebe822b2d7b80e180c251dc8e7a)
|
|
Michael
(This used to be commit 702c0bc04668117e3521d687b9b5a87fd7e0f1b1)
|
|
Michael
(This used to be commit c3c3dadcab81f0a1ae8834e85e7e80a3da6601fb)
|
|
Michael
(This used to be commit ead9b9d7167d999d73cf4111f3b321236aac2a15)
|
|
Guenther
(This used to be commit a75055be5ff7ebe3476cfac86c6597a56a843c23)
|
|
Guenther
(This used to be commit ea9fc3bea31b11e715d9524defc18b75e5943842)
|
|
Guenther
(This used to be commit 43693ce6c678b961fa516bbf502af92f87cd5346)
|
|
According to the GNU libc nss guide, we should always set
errno to ENOENT when returning NSS_UNAVAIL.
http://www.gnu.org/software/libtool/manual/libc/NSS-Modules-Interface.html#NSS-Modules-Interface
At least the MQ Series message queing service that runs
on WebSphere will fail if you return any other errno in this case.
(This used to be commit ee26664602445fa7798e2061f6bcbef0756d6528)
|
|
Some of the bits generate INVALID_PARAMETER and some bits
are ignored when they come from a client, that's why we need
to use bits from the ignored range for our internal usage.
metze
(This used to be commit 7b4c8a4e39f310eb450918fa841b0ea1b4af19f7)
|
|
Serialization header
Now we should be able to handle bigendian PAC_LOGON_INFO buffers.
metze
(This used to be commit adbff0b0f92aa0742a8293071776b388879cbd8e)
|
|
This prepares the next commit...
metze
(This used to be commit 7d297f7fb7a3ac388390429db7cb16fa60d3f8c0)
|
|
metze
(This used to be commit 4b054cee51c39c5430bcadd5c06a94dc3e6b0d8f)
|