Age | Commit message (Collapse) | Author | Files | Lines |
|
(This used to be commit 331748202077ce9e0b5dcf3ed9b3ab6f89e9c0e4)
|
|
filename, not returning one. Makes us pass one more Samba4 RAW-SEARCH test.
Jeremy.
(This used to be commit 228d1e1649a0b4952eb5603cb5e1851cdc8f0c72)
|
|
(This used to be commit 175ec3ed518704920c7c55b050ec1cc00da7f560)
|
|
(This used to be commit 5f34139b68460f6fb1046e2b97f16dbeff3fb136)
|
|
by rfc1002.
Jeremy.
(This used to be commit 422fb43dda13e0840245ae272b7621640b8ad220)
|
|
Jeremy.
(This used to be commit 86c5548d272c0804c0188ae744ae1bb17eb817f6)
|
|
use the correct RR type of 0xA instead of reflecting back what
the query RR type was (0x20). See rfc1002 sections 4.2.14 and
4.2.16.
Jeremy.
(This used to be commit ab8c9240044f1ef3d5c6ac4850c8ec615c2e32fd)
|
|
Jeremy.
(This used to be commit ef73dfe0d6c3b7f71109e32115d528ecdbe562ea)
|
|
Jeremy.
(This used to be commit 9d131e94195df79e07c8fad20e12ba1b67441a81)
|
|
evaluation. This stops us from reading the entire directory into
memory at one go, and allows partial reads. It also keeps almost
the same interface to the OpenDir/ReadDir etc. code (sorry James :-).
Next I will optimise the findfirst with exact match code. This speeds
up our interactive response for large directories, but not when a
missing (ie. negative) findfirst is done.
Jeremy
(This used to be commit 0af1d2f6f24f238cb05e10d7d53dcd5b5e0f5f5d)
|
|
(This used to be commit e2ce048654fdb98a50622ac60abae18c6b6ba4d2)
|
|
don't leave administator-sid unmapped. Simply return "Administrator"
Guenther
(This used to be commit 168ddf31d1af49d52d17dd09c9653d3deafb9442)
|
|
* make sure to apply the rights_mask and not just the saved
bits from the mask in access_check_samr_object()
* allow root to grant/revoke privileges (in addition to Domain
Admins) as suggested by Volker.
Tested machine joins from XP, 2K, and NT4 with and without
pre-existing machine trust accounts. Also tested basic file
operations using cmd.exe and explorer.exe after changing the
STANDARD_RIGHTS_WRITE_ACCESS bitmask.
(This used to be commit c0e7f7ff60a4110809b8f500fdc68a1bf963da36)
|
|
(This used to be commit 17bc42b4c2e21004adaeac78db6231a384fda16c)
|
|
as the longname in the published printer information since this
is what we will have used when we joined the domain.
More testing on this tomorrow.
(This used to be commit d64fd1116d5fe29807be29c73809317f88fdb033)
|
|
of the user name
* fix some access_mask checks in _samr_set_userinfo2 (getting join from
XP without being a member of domain admins working)
(This used to be commit 04030534ffd35f8ebc997d9403fd87309403dcbf)
|
|
sync for the 3.0.11rc1 release
(This used to be commit c0e292e491c684b8ce19096e55338a27161c0a49)
|
|
* added SE_PRIV checks to access_check_samr_object() in order
to deal with the run-time security descriptor and their
interaction with user rights
* Reordered original patch in _samr_set_userinfo[2] to still
allow root/administrative password changes for users and machines.
(This used to be commit f9f9e6039bd9443d54445e41c3783a2be18925fb)
|
|
new function to make it clear when it's called. Remove async parameter
that had been overloaded into request_oplock_break.
Inspired by work from Nadav Danieli <nadavd@exanet.com>.
Jeremy.
(This used to be commit 05697fb50236dfc28e81f8b3900eac17cace57c1)
|
|
(This used to be commit 0ac3c4c5a231c314213dbce29e25911ddb04de2d)
|
|
shared memory area locked. This need to be in 3.0.11. Pointed
out by Nadav Danieli <nadavd@exanet.com>.
Jeremy.
(This used to be commit 47ed16aefbdcb6257101c6b78c93eeb7cf048185)
|
|
(This used to be commit 41d247d9643eb9cb9705f65f924e61c8dfbe6e00)
|
|
(This used to be commit 8946efe102f7a8a9b5a8059a80666b782159e7b8)
|
|
admins who never read what I write :-)
(This used to be commit 1d7a636e0e7f8a0bc3d3ae04b40f79db7f08d619)
|
|
When migrating account policies to ldapsam, handle the fact that an
admin might have changed the default location of the sambaDomain-object
after installation.
Guenther
(This used to be commit 78c3c7127444b8f9959f4d6ce9e540271869d70f)
|
|
Guenther
(This used to be commit d433c7b476005064b9cfd339bbd8a25b40de59c1)
|
|
administrator-sid mapping completely.
Guenther
(This used to be commit 4cbe37ecd544b01c57c7fce5b3be28669f4ba6c3)
|
|
that only acheive as much as 'security=server' does.
Andrew Bartlett
(This used to be commit fb694f2b1a809d221f48f9b9b0e54e9512325bae)
|
|
Guenther
(This used to be commit 1eabfa050b661168b42892c2d841c7891e59cf5f)
|
|
gnome vfs to prevent auto-anonymous logon.
Jeremy.
(This used to be commit 843e85bcd978d025964c4d45d9a3886c7cf7f63c)
|
|
Volker
(This used to be commit 78975ab9a996ac61be37410f18ddedb9df58d04b)
|
|
than once
(This used to be commit c488ce9934aaf640c3f63cbdabc3110b8cf70fae)
|
|
(This used to be commit d95c9c4d74ea2fb7e5aac4a58888ab6fbc571dfb)
|
|
Give the admin-user (rid 500) a chance to be found in passdb, not
returning the (possibly obscure) first entry of "admin users" before
that.
Guenther
(This used to be commit d319c0e189bc67a4552dafaff80113603b551eb3)
|
|
configure-checks (At least Heimdal uses KRB5_CONFIG for locating it's
configuration-file (usually /etc/krb5.conf)). Renaming it to KRB5CONFIG
prevents configure-checks that use heimdal-libs from segfaulting while
the lib reads the krb5-config binary as a configuration file...
Vendors that used the KRB5_CONFIG-variable to let configure find a
custom krb5-config binary have to use KRB5CONFIG now.
Guenther
(This used to be commit 95edb3c67f330afd8dbb8268f3f8ecaf1732c238)
|
|
...hmmm... completely bogus. This does not affect us as a domain controller,
as we never set other_sids, but I have *no* idea how winbind got away with it.
Please review thoroughly, samba4 idl looks closer to reality here.
Test case: Member of w2k3 domain, authenticate as a user who is member of one
or more domain local groups. Easiest review with 'client schannel = no'.
Thanks,
Volker
(This used to be commit a0a6388830d9457de3e42686c64bddeba42954f8)
|
|
Volker
(This used to be commit 9ca6cfcf1e4a905d47429a6dc18e2bd7ad5fe1e3)
|
|
Guenther
(This used to be commit 42e380303ddce890f313c221a766dc1e1ee972fb)
|
|
preparation of adding the ability of renaming users via setuserinfo
level 7).
Guenther
(This used to be commit 6f34ed6c203fa11182640da97581075612d26c0e)
|
|
Guenther
(This used to be commit eee0bd806b4fd4558f9c48c09f7e85274e2b807f)
|
|
Does automated migration from account_policy.tdb v1 and v2 and offers a
pdbedit-Migration interface. Jerry, please feel free to revert that if
you have other plans.
Guenther
(This used to be commit 75af83dfcd8ef365b4b1180453060ae5176389f5)
|
|
(This used to be commit 033105376ef4ed7d31ef7cab2442719ed57d29b9)
|
|
Added text explaining units in pdbedit time fields.
Jeremy.
(This used to be commit 3d09c15d8f06ad06fae362291a6c986f7b6107e6)
|
|
(This used to be commit 6b38a3923c403562c26642f24477c607a4295878)
|
|
(This used to be commit 15fd4a05ec2439f41591ee8a1c30021d9a34371b)
|
|
the cli* in cm_prepare_connection(). using credentials from a domain other thanour primary domain will cause the schannel setup to fail
(This used to be commit a13e29b5f2f1e48225b5b5964bc0777948f16622)
|
|
ippDelete(request) *ever*
(This used to be commit f65598b3b0dc99900d547eb67473cca5d371614f)
|
|
Jeremy.
(This used to be commit 5557e1409a9a22759ca3bea021d4a662099e683a)
|
|
Jeremy.
(This used to be commit 2afe2a16c92bb2500854b8e288c1d7704ede704a)
|
|
Jeremy
(This used to be commit 79f54d12759f9161dc5837a090391cd0cf6471f5)
|