Age | Commit message (Collapse) | Author | Files | Lines |
|
prior to this merge, checkout HEAD_PRE_3_0_0_BETA_3_MERGE
(This used to be commit adb98e7b7cd0f025b52c570e4034eebf4047b1ad)
|
|
We now always read the Domain SID out of LDAP. If the local secrets.tdb
is ever different to LDAP, it is overwritten out of LDAP. We also
store the 'algorithmic rid base' into LDAP, and assert if it changes.
(This ensures cross-host synchronisation, and allows for possible
integration with idmap). If we fail to read/add the domain entry, we just
fallback to the old behaviour.
We always use an existing DN when adding IDMAP entries to LDAP, unless
no suitable entry is available. This means that a user's posixAccount
will have a SID added to it, or a user's sambaSamAccount will have a UID
added. Where we cannot us an existing DN, we use
'sambaSid=S-x-y-z,....' as the DN.
The code now allows modifications to the ID mapping in many cases.
Likewise, we now check more carefully when adding new user entires to LDAP,
to not duplicate SIDs (for users, at this stage), and to add the sambaSamAccount
onto the idmap entry for that user, if it is already established (ensuring
we do not duplicate sambaSid entries in the directory).
The allocated UID code has been expanded to take into account the space
between '1000 - algorithmic rid base'. This much better fits into what
an NT4 does - allocating in the bottom part of the RID range.
On the code cleanup side of things, we now share as much code as
possible between idmap_ldap and pdb_ldap.
We also no longer use the race-prone 'enumerate all users' method for
finding the next RID to allocate. Instead, we just start at the bottom
of the range, and increment again if the user already exists. The first
time this is run, it may well take a long time, but next time will just
be able to use the next Rid.
Thanks to metze and AB for double-checking parts of this.
Andrew Bartlett
(This used to be commit 9c595c8c2327b92a86901d84c3f2c284dabd597e)
|
|
(This used to be commit 6237fae9b8407ee04226b984a932150799191d29)
|
|
(This used to be commit f3fd321b61dbf53b1dc33a42afe8a943c94c1135)
|
|
(This used to be commit 56d2049561e5d5c22ac9d76cb013643083d9644e)
|
|
(This used to be commit be82b3d9dfef938030731e1021076df4dcfdb443)
|
|
(This used to be commit 8c18174a899e9578e0e82d17c7602e84b342644c)
|
|
Jeremy
(This used to be commit 7c4cc2086d59e163ab89366c24ba399994a49462)
|
|
Includes sambaUnixIdPool objectclass
Still needs cleaning up wrt to name space.
More changes to come, but at least we now have a
a working distributed winbindd solution.
(This used to be commit 824175854421f7c27d31ad673a8790dd018ae350)
|
|
and one for transparent. Also add configure support for compiling third-party modules. Patch from Stefan Metzmacher <metze@metzemix.de>
(This used to be commit fcdf215753630d4173e50b7d93d6bc8ba254a5ff)
|
|
(This used to be commit 509232dd8d776ec8260a1f0858e1bcc2c1e1f650)
|
|
which one should be used for new servers. I'll add a note about uncommenting the older items for ldapsam_compat in the release notes
(This used to be commit 469c5ad1acfb452617b10653e06ce3b34ec9e146)
|
|
(This used to be commit 59328b8c8add974c7edaeecdf8eac0fb0d328fc2)
|
|
(This used to be commit 0714dda7cc4a1df73e1b9d11daae80a1f46583de)
|
|
(This used to be commit d6ee6a26523a02834a53f214fd6713f5af591be7)
|
|
(This used to be commit 925c60f5e2f5301da90fc26dddc1bad610eea0d0)
|
|
Net::LDAP::LDIF
(This used to be commit 5b6f22f7c986bc423246adeecc0d5a4bd5f307c6)
|
|
(This used to be commit a1326ea34831bf49942f7bcb954999091c3ea820)
|
|
Net::LDAP::LDIF
(This used to be commit 9cde1aa32aed55a3d7cb28881c6acd9800b02065)
|
|
New objectclass named sambaSamAccount which uses attribute
prefaced with the phrase 'samba' to prevent future name clashes.
Change in functionality of the 'ldap filter' parameter. This always
defaults to "(uid=%u)" now and is and'd with the approriate objectclass
depending on whether you are using ldapsam_compat or ldapsam
conversion script for migrating from sambaAccount to
sambaSamAccount will come next.
(This used to be commit 998586e65271daa919e47e1206c0007454cbca66)
|
|
primaryGroupID (rid). This is consistant with the move from 'rid' to ntSid
for the primary user identifier.
Also cope with legacy installations where primaryGroupID might have been
stored as 0.
Andrew Bartlett
(This used to be commit 0e432817cb927b41af7b49fb0b5081ffdb46f85e)
|
|
(This used to be commit 94780f0947f7ad7d5bc83e61681148637b59d7ab)
|
|
(This used to be commit ee1374cabf38c3d99e66a45316e232d1c2cfbe6a)
|
|
(This used to be commit a7520177b088589eec7f3989273020dab89d90b5)
|
|
(This used to be commit 277fa587d596449a6ac15b440ae07d6707d758ac)
|
|
his IDMAP work.
This version also works properly (the HEAD version had suffered from bitrot),
and should be a good basis to change into the new IDMAP rules.
It also includes UTF8 conversions.
Included also are the schema changes, and a note about the now very old scripts
in examples/LDAP (they don't work for this, or even the previous schema).
Andrew Bartlett
(This used to be commit 38a8f2b23a12f6a964d447f7904dd722a1ca046c)
|
|
function. Patch by metze with some minor modifications.
(This used to be commit f4576757d1d52a8f1b96894c869bb76450003fd1)
|
|
function. Patch by metze with some minor modifications.
(This used to be commit bc4b51bcb2daa7271c884cb83bf8bdba6d3a9b6d)
|
|
(This used to be commit d16f8f661a2a0be4fd89f7469b7e3e6a42860ad2)
|
|
(This used to be commit e112dc1641c47c7185e098918980df1a4d950bd7)
|
|
This patch removes 'non unix account range' (same as idra's change in HEAD),
and uses the winbind uid range instead.
More importanly, this patch changes the LDAP schema to use 'ntSid' instead
of 'rid' as the primary attribute. This makes it in common with the group
mapping code, and should allow it to be used closely with a future idmap_ldap.
Existing installations can use the existing functionality by using the
ldapsam_compat backend, and users who compile with --with-ldapsam will get
this by default.
More importantly, this patch adds a 'sambaDomain' object to our schema -
which contains 2 'next rid' attributes, the domain name and the domain sid.
Yes, there are *2* next rid attributes. The problem is that we don't 'own'
the entire RID space - we can only allocate RIDs that could be 'algorithmic'
RIDs. Therefore, we use the fact that UIDs in 'winbind uid' range will be
mapped by IDMAP, not the algorithm.
Andrew Bartlett
(This used to be commit 3e07406ade81e136f67439d4f8fd7fe1dbb6db14)
|
|
(This used to be commit 528c56176b186d9fa43f6a0c9831562c123ec25d)
|
|
(This used to be commit bd2444322956cd34a95159114547b5ddc804df9e)
|
|
(This used to be commit 765d87838dbf25ba69dc11f7956ce5814555bcc7)
|
|
the HOWTO Collection.
CVS: ----------------------------------------------------------------------
CVS: Enter Log. Lines beginning with `CVS:' are removed automatically
CVS:
CVS: Committing in .
CVS:
CVS: Modified Files:
CVS: Tag: SAMBA_3_0
CVS: smb.conf.default
CVS: ----------------------------------------------------------------------
(This used to be commit 280d627adb5305e8b814102aaa73825023c00571)
|
|
the HOWTO Collection.
(This used to be commit 31ce815283fcf81cf50f8026a91da04ea4a05071)
|
|
because we don't generate Makefile from configure anymore
(This used to be commit 0d322968cbf445df79153c0abc0d041edcf223ee)
|
|
because we don't generate Makefile from configure anymore.
(This used to be commit 29ba1e163f85aeaa3cd48a13e4f0a039fa80e7b0)
|
|
(This used to be commit a65b54a08eace793e23b8d6bc193b81ef08f77f5)
|
|
(This used to be commit 4c92994dfd231acb09411f89fd67a21a40400de0)
|
|
(This used to be commit 7f0fd03f699f24094e32a92dbb0ec55d9a602c36)
|
|
This patch moves the ldap routines out of passdb into a generic
library and implements an LDAP backend for IDMAP. THe backend
can be enabled with "idmap backend = ldap" in smb.conf. THere
are also schema changes to make sure to update teh ldap schema files.
(This used to be commit 87c7c582c60521da3a93d997386fe79935012aea)
|
|
(This used to be commit 73ef6d35bbadc3ea549309119857effe3c1bc7ef)
|
|
Volker
(This used to be commit 5acb9f421c149126370e79d66d3d9ace6be9a695)
|
|
Volker
(This used to be commit e92bfb766b08abccbf098c8d04347eb296b9be54)
|
|
Volker
(This used to be commit da83d97eb50c3c3a67985e22410842100207431f)
|
|
Volker
(This used to be commit f0f1518fc450834725902e9cdf33fb8d35f99360)
|
|
(This used to be commit 81bfd9a4d9c80b87b020b998e9722750339c422d)
|
|
(This used to be commit db3901827fe776041fa38900e80ab2fab94c28a6)
|
|
(This used to be commit 902a1dc1d5f74ce94496d03327c07416bc2061be)
|