summaryrefslogtreecommitdiff
path: root/examples
AgeCommit message (Collapse)AuthorFilesLines
2003-07-04This patch cleans up some of our ldap code, for better behaviour:Andrew Bartlett1-4/+21
We now always read the Domain SID out of LDAP. If the local secrets.tdb is ever different to LDAP, it is overwritten out of LDAP. We also store the 'algorithmic rid base' into LDAP, and assert if it changes. (This ensures cross-host synchronisation, and allows for possible integration with idmap). If we fail to read/add the domain entry, we just fallback to the old behaviour. We always use an existing DN when adding IDMAP entries to LDAP, unless no suitable entry is available. This means that a user's posixAccount will have a SID added to it, or a user's sambaSamAccount will have a UID added. Where we cannot us an existing DN, we use 'sambaSid=S-x-y-z,....' as the DN. The code now allows modifications to the ID mapping in many cases. Likewise, we now check more carefully when adding new user entires to LDAP, to not duplicate SIDs (for users, at this stage), and to add the sambaSamAccount onto the idmap entry for that user, if it is already established (ensuring we do not duplicate sambaSid entries in the directory). The allocated UID code has been expanded to take into account the space between '1000 - algorithmic rid base'. This much better fits into what an NT4 does - allocating in the bottom part of the RID range. On the code cleanup side of things, we now share as much code as possible between idmap_ldap and pdb_ldap. We also no longer use the race-prone 'enumerate all users' method for finding the next RID to allocate. Instead, we just start at the bottom of the range, and increment again if the user already exists. The first time this is run, it may well take a long time, but next time will just be able to use the next Rid. Thanks to metze and AB for double-checking parts of this. Andrew Bartlett (This used to be commit 9c595c8c2327b92a86901d84c3f2c284dabd597e)
2003-07-01applying fix for group map conversion (patch from Kristyan Osborne)Gerald Carter1-1/+1
(This used to be commit 6237fae9b8407ee04226b984a932150799191d29)
2003-06-16Add DTD used by XML passdb backendJelmer Vernooij1-0/+46
(This used to be commit f3fd321b61dbf53b1dc33a42afe8a943c94c1135)
2003-06-15This patch is Vorlon's fault!John Terpstra1-22/+34
(This used to be commit 56d2049561e5d5c22ac9d76cb013643083d9644e)
2003-06-13fix typo in descriptionGerald Carter1-1/+1
(This used to be commit be82b3d9dfef938030731e1021076df4dcfdb443)
2003-06-12check that an attribute is defined and not just non-zeroGerald Carter1-1/+1
(This used to be commit 8c18174a899e9578e0e82d17c7602e84b342644c)
2003-06-06Make skeleton VFSs compile with new EA modules.Jeremy Allison3-0/+238
Jeremy (This used to be commit 7c4cc2086d59e163ab89366c24ba399994a49462)
2003-06-05working draft of the idmap_ldap code.Gerald Carter1-0/+10
Includes sambaUnixIdPool objectclass Still needs cleaning up wrt to name space. More changes to come, but at least we now have a a working distributed winbindd solution. (This used to be commit 824175854421f7c27d31ad673a8790dd018ae350)
2003-06-04Move VFS example skel.c to two different examples: one for opaque operations ↵Alexander Bokovoy10-491/+1563
and one for transparent. Also add configure support for compiling third-party modules. Patch from Stefan Metzmacher <metze@metzemix.de> (This used to be commit fcdf215753630d4173e50b7d93d6bc8ba254a5ff)
2003-05-22sync LDAP schema with SAMBA_3_0Gerald Carter1-150/+142
(This used to be commit 509232dd8d776ec8260a1f0858e1bcc2c1e1f650)
2003-05-22moving the sambaAccount objectclass to 'historical' to prevent confusion on ↵Gerald Carter1-150/+142
which one should be used for new servers. I'll add a note about uncommenting the older items for ldapsam_compat in the release notes (This used to be commit 469c5ad1acfb452617b10653e06ce3b34ec9e146)
2003-05-14fix group mapping in LDAP under new schemaGerald Carter1-1/+1
(This used to be commit 59328b8c8add974c7edaeecdf8eac0fb0d328fc2)
2003-05-14fix group mapping in LDAP under new schemaGerald Carter1-1/+1
(This used to be commit 0714dda7cc4a1df73e1b9d11daae80a1f46583de)
2003-05-14s/primaryGroupSID/sambaPrimaryGroupSID/Gerald Carter1-1/+1
(This used to be commit d6ee6a26523a02834a53f214fd6713f5af591be7)
2003-05-14s/primaryGroupSID/sambaPrimaryGroupSID/Gerald Carter1-1/+1
(This used to be commit 925c60f5e2f5301da90fc26dddc1bad610eea0d0)
2003-05-14perl script to convert from sambaAccount to sambaSamAccount; requires ↵Gerald Carter1-0/+105
Net::LDAP::LDIF (This used to be commit 5b6f22f7c986bc423246adeecc0d5a4bd5f307c6)
2003-05-14syncing LDAP schema changes with Samba_3_0Gerald Carter1-23/+142
(This used to be commit a1326ea34831bf49942f7bcb954999091c3ea820)
2003-05-14perl script to convert from sambaAccount to sambaSamAccount; requires ↵Gerald Carter1-0/+105
Net::LDAP::LDIF (This used to be commit 9cde1aa32aed55a3d7cb28881c6acd9800b02065)
2003-05-14*****LDAP schema changes*****Gerald Carter1-25/+134
New objectclass named sambaSamAccount which uses attribute prefaced with the phrase 'samba' to prevent future name clashes. Change in functionality of the 'ldap filter' parameter. This always defaults to "(uid=%u)" now and is and'd with the approriate objectclass depending on whether you are using ldapsam_compat or ldapsam conversion script for migrating from sambaAccount to sambaSamAccount will come next. (This used to be commit 998586e65271daa919e47e1206c0007454cbca66)
2003-05-11As discussed on samba-technical - move to 'primaryGroupSid' insted ofAndrew Bartlett1-1/+11
primaryGroupID (rid). This is consistant with the move from 'rid' to ntSid for the primary user identifier. Also cope with legacy installations where primaryGroupID might have been stored as 0. Andrew Bartlett (This used to be commit 0e432817cb927b41af7b49fb0b5081ffdb46f85e)
2003-05-09syncing README to go along with scriptsGerald Carter1-24/+7
(This used to be commit 94780f0947f7ad7d5bc83e61681148637b59d7ab)
2003-05-09syncing import/export smbpasswd file scripts from 2.2Gerald Carter4-231/+114
(This used to be commit ee1374cabf38c3d99e66a45316e232d1c2cfbe6a)
2003-05-01Don't crash if the underlying VFS doesn't support ACL'sJelmer Vernooij1-0/+10
(This used to be commit a7520177b088589eec7f3989273020dab89d90b5)
2003-05-01Don't crash if the underlying VFS doesn't support ACL'sJelmer Vernooij1-0/+10
(This used to be commit 277fa587d596449a6ac15b440ae07d6707d758ac)
2003-04-29Merge Samba 3.0 pdb_ldap from 3.0 into HEAD, so as to allow idra to continueAndrew Bartlett2-9/+37
his IDMAP work. This version also works properly (the HEAD version had suffered from bitrot), and should be a good basis to change into the new IDMAP rules. It also includes UTF8 conversions. Included also are the schema changes, and a note about the now very old scripts in examples/LDAP (they don't work for this, or even the previous schema). Andrew Bartlett (This used to be commit 38a8f2b23a12f6a964d447f7904dd722a1ca046c)
2003-04-28Use NTSTATUS as return value for smb_register_*() functions and init_module()Jelmer Vernooij1-1/+1
function. Patch by metze with some minor modifications. (This used to be commit f4576757d1d52a8f1b96894c869bb76450003fd1)
2003-04-28Use NTSTATUS as return value for smb_register_*() functions and init_module()Jelmer Vernooij1-1/+1
function. Patch by metze with some minor modifications. (This used to be commit bc4b51bcb2daa7271c884cb83bf8bdba6d3a9b6d)
2003-04-28Add example auth/ moduleJelmer Vernooij2-0/+90
(This used to be commit d16f8f661a2a0be4fd89f7469b7e3e6a42860ad2)
2003-04-28Add example authentication moduleJelmer Vernooij2-0/+90
(This used to be commit e112dc1641c47c7185e098918980df1a4d950bd7)
2003-04-28A new pdb_ldap!Andrew Bartlett1-5/+34
This patch removes 'non unix account range' (same as idra's change in HEAD), and uses the winbind uid range instead. More importanly, this patch changes the LDAP schema to use 'ntSid' instead of 'rid' as the primary attribute. This makes it in common with the group mapping code, and should allow it to be used closely with a future idmap_ldap. Existing installations can use the existing functionality by using the ldapsam_compat backend, and users who compile with --with-ldapsam will get this by default. More importantly, this patch adds a 'sambaDomain' object to our schema - which contains 2 'next rid' attributes, the domain name and the domain sid. Yes, there are *2* next rid attributes. The problem is that we don't 'own' the entire RID space - we can only allocate RIDs that could be 'algorithmic' RIDs. Therefore, we use the fact that UIDs in 'winbind uid' range will be mapped by IDMAP, not the algorithm. Andrew Bartlett (This used to be commit 3e07406ade81e136f67439d4f8fd7fe1dbb6db14)
2003-04-28Update for the new modules systemJelmer Vernooij1-4/+10
(This used to be commit 528c56176b186d9fa43f6a0c9831562c123ec25d)
2003-04-28Update for new modules systemJelmer Vernooij1-46/+7
(This used to be commit bd2444322956cd34a95159114547b5ddc804df9e)
2003-04-28Update for new modules systemJelmer Vernooij1-4/+5
(This used to be commit 765d87838dbf25ba69dc11f7956ce5814555bcc7)
2003-04-28Replace references to the old textdocs by references to chapters inJelmer Vernooij1-2/+6
the HOWTO Collection. CVS: ---------------------------------------------------------------------- CVS: Enter Log. Lines beginning with `CVS:' are removed automatically CVS: CVS: Committing in . CVS: CVS: Modified Files: CVS: Tag: SAMBA_3_0 CVS: smb.conf.default CVS: ---------------------------------------------------------------------- (This used to be commit 280d627adb5305e8b814102aaa73825023c00571)
2003-04-28Replace references to the old textdocs by references to chapters inJelmer Vernooij1-2/+6
the HOWTO Collection. (This used to be commit 31ce815283fcf81cf50f8026a91da04ea4a05071)
2003-04-28Update for the new modules system. Also, use Makefile rather then Makefile.inJelmer Vernooij2-9/+6
because we don't generate Makefile from configure anymore (This used to be commit 0d322968cbf445df79153c0abc0d041edcf223ee)
2003-04-28Update for the new modules system. Also, use Makefile rather then Makefile.inJelmer Vernooij2-9/+6
because we don't generate Makefile from configure anymore. (This used to be commit 29ba1e163f85aeaa3cd48a13e4f0a039fa80e7b0)
2003-04-27typoSimo Sorce1-1/+1
(This used to be commit a65b54a08eace793e23b8d6bc193b81ef08f77f5)
2003-04-18uidPool and gidPool don't use cn anymore (but we don't use thsi anyways)Gerald Carter1-6/+6
(This used to be commit 4c92994dfd231acb09411f89fd67a21a40400de0)
2003-04-18uidPool and gidPool don't use cn anymore (but we don't use thsi anyways)Gerald Carter1-2/+2
(This used to be commit 7f0fd03f699f24094e32a92dbb0ec55d9a602c36)
2003-04-03The ldap idmap backend from Anthony Liguori (aliguori@us.ibm.com):Jim McDonough1-6/+6
This patch moves the ldap routines out of passdb into a generic library and implements an LDAP backend for IDMAP. THe backend can be enabled with "idmap backend = ldap" in smb.conf. THere are also schema changes to make sure to update teh ldap schema files. (This used to be commit 87c7c582c60521da3a93d997386fe79935012aea)
2003-03-28Fix some uncleanness with testsmbc.cRichard Sharpe1-1/+1
(This used to be commit 73ef6d35bbadc3ea549309119857effe3c1bc7ef)
2003-03-27Fix schema error not detected by OpenLDAP 2.0.23 but by 2.1.16.Volker Lendecke1-1/+1
Volker (This used to be commit 5acb9f421c149126370e79d66d3d9ace6be9a695)
2003-03-27Fix schema error not detected by OpenLDAP 2.0.23 but by 2.1.16.Volker Lendecke1-1/+1
Volker (This used to be commit e92bfb766b08abccbf098c8d04347eb296b9be54)
2003-03-19Put group mapping into LDAP.Volker Lendecke1-0/+25
Volker (This used to be commit da83d97eb50c3c3a67985e22410842100207431f)
2003-03-19Put group mapping into LDAP.Volker Lendecke1-0/+25
Volker (This used to be commit f0f1518fc450834725902e9cdf33fb8d35f99360)
2003-01-22Sync with HEAD. The -L/usr/local/lib bit looks a bit dodgy though.Tim Potter1-1/+1
(This used to be commit 81bfd9a4d9c80b87b020b998e9722750339c422d)
2003-01-22Sync with HEAD.Tim Potter2-128/+8
(This used to be commit db3901827fe776041fa38900e80ab2fab94c28a6)
2003-01-22Minor merges from HEAD.Tim Potter2-1/+3
(This used to be commit 902a1dc1d5f74ce94496d03327c07416bc2061be)
2003-01-19only supporting the Net::LDAP module nowGerald Carter2-128/+0
(This used to be commit 3e9c970597b190335529e8854f3d2af2c7d8d80e)
generated by cgit (git 2.34.1) at 2024-11-03 06:59:15 +0000