Age | Commit message (Collapse) | Author | Files | Lines |
|
(This used to be commit 5c45b799d1b87fed8afa4665e075f2c8ccb6da84)
|
|
(This used to be commit ec65dabe9ddd116da41beae0b1a573724c991df6)
|
|
(This used to be commit bd9b90a391e3346ff22888bbc589e65ccdddd482)
|
|
(This used to be commit fe2b6317cbda34c2d00194884847642789f40e75)
|
|
(This used to be commit 64fa24dbabd8d211d276e19745561a11b7465158)
|
|
>The -P option to smbclient no longer works - update all smbprint scripts to
>remove it. Closes bug #473.
(This used to be commit 87e8d584e992df9170b3a36ef60bcdea8ddc9887)
|
|
remove it. Closes bug #473.
(This used to be commit a9f22ed9d715e4acf529ff873b0d99d4b29c5f1b)
|
|
keeps with IBM convention of separate attributetype and objectclass definitions
(This used to be commit 861f3b0d5fc11645f05494a6a5fe716031cfc79f)
|
|
Keeps with IBM convention of separate attributetype and objectclass definitions.
(This used to be commit 5dcf974c22b4bd54193dff876020bacd5b1691b2)
|
|
(This used to be commit c74c2903fb8bd38f8469b3c3b549ac8a431f36dd)
|
|
(This used to be commit 88725350d248fe017b77c7609544888ba40b7995)
|
|
(This used to be commit d31b5df82648767203ecee6ecb10030caa477250)
|
|
(This used to be commit 3f97a5ce47bbdd3010dd8e234a7aa5838b524b46)
|
|
(This used to be commit c9c7150a627abe93a5d3c866605f2300a3cc5ec9)
|
|
(This used to be commit 90133558073deb96a0e5baf26e44cf1af1acd538)
|
|
(This used to be commit 7105f4bcabb29126999b5494f6d60d6f766ab5cc)
|
|
(This used to be commit 29885eae591bdbb899d18ac2e7ae355751cd4be6)
|
|
(This used to be commit 5b20494aff3da9414ac0100220de96750c3f06a3)
|
|
sambaSamAccount schema
(This used to be commit 5f41cd76b793305e1e9e4da76d58daa2d8438c63)
|
|
addition to add
(This used to be commit 49457669f32ed1d8122633e2d0abdebaf05790da)
|
|
(This used to be commit 25753e2a336a72dc2275a0046003c3a659a0f880)
|
|
(This used to be commit 766a5070d58ada7a871a7fab45b5f7e203264952)
|
|
(This used to be commit f72f51d39ff3e6d22dbda8b9c115ca10e93e7022)
|
|
(This used to be commit a1e1421d1ef70088e1cf2308e8cfbf139e25ddaa)
|
|
(This used to be commit f27e696cd38501754fb996ca3ffbe48b28e861ae)
|
|
Jeremy.
(This used to be commit 80e14b176526a3038ea03214fc3dd0fd00fef922)
|
|
Jeremy.
(This used to be commit 3f8c77b116b96b01fd333c4b45d84666ef108fe9)
|
|
(This used to be commit c9b209be2b17c2e4677cc30b46b1074f48878f43)
|
|
(This used to be commit 99feae7b5b1c229a925367b87c0c0f636d9a2d75)
|
|
prior to this merge, checkout HEAD_PRE_3_0_0_BETA_3_MERGE
(This used to be commit adb98e7b7cd0f025b52c570e4034eebf4047b1ad)
|
|
We now always read the Domain SID out of LDAP. If the local secrets.tdb
is ever different to LDAP, it is overwritten out of LDAP. We also
store the 'algorithmic rid base' into LDAP, and assert if it changes.
(This ensures cross-host synchronisation, and allows for possible
integration with idmap). If we fail to read/add the domain entry, we just
fallback to the old behaviour.
We always use an existing DN when adding IDMAP entries to LDAP, unless
no suitable entry is available. This means that a user's posixAccount
will have a SID added to it, or a user's sambaSamAccount will have a UID
added. Where we cannot us an existing DN, we use
'sambaSid=S-x-y-z,....' as the DN.
The code now allows modifications to the ID mapping in many cases.
Likewise, we now check more carefully when adding new user entires to LDAP,
to not duplicate SIDs (for users, at this stage), and to add the sambaSamAccount
onto the idmap entry for that user, if it is already established (ensuring
we do not duplicate sambaSid entries in the directory).
The allocated UID code has been expanded to take into account the space
between '1000 - algorithmic rid base'. This much better fits into what
an NT4 does - allocating in the bottom part of the RID range.
On the code cleanup side of things, we now share as much code as
possible between idmap_ldap and pdb_ldap.
We also no longer use the race-prone 'enumerate all users' method for
finding the next RID to allocate. Instead, we just start at the bottom
of the range, and increment again if the user already exists. The first
time this is run, it may well take a long time, but next time will just
be able to use the next Rid.
Thanks to metze and AB for double-checking parts of this.
Andrew Bartlett
(This used to be commit 9c595c8c2327b92a86901d84c3f2c284dabd597e)
|
|
(This used to be commit 6237fae9b8407ee04226b984a932150799191d29)
|
|
(This used to be commit f3fd321b61dbf53b1dc33a42afe8a943c94c1135)
|
|
(This used to be commit 56d2049561e5d5c22ac9d76cb013643083d9644e)
|
|
(This used to be commit be82b3d9dfef938030731e1021076df4dcfdb443)
|
|
(This used to be commit 8c18174a899e9578e0e82d17c7602e84b342644c)
|
|
Jeremy
(This used to be commit 7c4cc2086d59e163ab89366c24ba399994a49462)
|
|
Includes sambaUnixIdPool objectclass
Still needs cleaning up wrt to name space.
More changes to come, but at least we now have a
a working distributed winbindd solution.
(This used to be commit 824175854421f7c27d31ad673a8790dd018ae350)
|
|
and one for transparent. Also add configure support for compiling third-party modules. Patch from Stefan Metzmacher <metze@metzemix.de>
(This used to be commit fcdf215753630d4173e50b7d93d6bc8ba254a5ff)
|
|
(This used to be commit 509232dd8d776ec8260a1f0858e1bcc2c1e1f650)
|
|
which one should be used for new servers. I'll add a note about uncommenting the older items for ldapsam_compat in the release notes
(This used to be commit 469c5ad1acfb452617b10653e06ce3b34ec9e146)
|
|
(This used to be commit 59328b8c8add974c7edaeecdf8eac0fb0d328fc2)
|
|
(This used to be commit 0714dda7cc4a1df73e1b9d11daae80a1f46583de)
|
|
(This used to be commit d6ee6a26523a02834a53f214fd6713f5af591be7)
|
|
(This used to be commit 925c60f5e2f5301da90fc26dddc1bad610eea0d0)
|
|
Net::LDAP::LDIF
(This used to be commit 5b6f22f7c986bc423246adeecc0d5a4bd5f307c6)
|
|
(This used to be commit a1326ea34831bf49942f7bcb954999091c3ea820)
|
|
Net::LDAP::LDIF
(This used to be commit 9cde1aa32aed55a3d7cb28881c6acd9800b02065)
|
|
New objectclass named sambaSamAccount which uses attribute
prefaced with the phrase 'samba' to prevent future name clashes.
Change in functionality of the 'ldap filter' parameter. This always
defaults to "(uid=%u)" now and is and'd with the approriate objectclass
depending on whether you are using ldapsam_compat or ldapsam
conversion script for migrating from sambaAccount to
sambaSamAccount will come next.
(This used to be commit 998586e65271daa919e47e1206c0007454cbca66)
|
|
primaryGroupID (rid). This is consistant with the move from 'rid' to ntSid
for the primary user identifier.
Also cope with legacy installations where primaryGroupID might have been
stored as 0.
Andrew Bartlett
(This used to be commit 0e432817cb927b41af7b49fb0b5081ffdb46f85e)
|