Age | Commit message (Collapse) | Author | Files | Lines |
|
I'm not sure if this should go into 3.0.25... it fixes a compiler warning about
a missing acl_get_perm() prototype
metze
(This used to be commit 4b67f94c6a148d6fecaa90d66ce6893b5feb370a)
|
|
to return a NT_STATUS_TIME_DIFFERENCE_AT_DC error to
a client when there's clock skew. Will help people
debug this. Prepare us for being able to return the
correct sessionsetupX "NT_STATUS_MORE_PROCESSING_REQUIRED"
error with associated krb5 clock skew error to allow
clients to re-sync time with us when we're eventually
able to be a KDC.
Jeremy.
(This used to be commit c426340fc79a6b446033433b8de599130adffe28)
|
|
This is a starting point and may get changed. Basically we need follow the
exact same path to detect (K)DCs like other Samba tools/winbind do. In
particular with regard to the server affinity cache and the site-awarness for
DNS SRV lookups.
To compile just call "make bin/smb_krb5_locator.so", copy to
/usr/lib/plugin/krb5/ (Heimdal HEAD) or /usr/lib/krb5/plugins/libkrb5/ (MIT)
and you should immediately be able to kinit to your AD domain without having
your REALM with kdc or kpasswd directives defined in /etc/krb5.conf at all.
Tested with todays Heimdal HEAD and MIT krb5 1.5.
Guenther
(This used to be commit 34ae610bd5b9fd1210f16beac07a1c5984144ca7)
|
|
calling convention in the latest MIT changes. Apparantly Heimdal
is also changing to this calling convention.
(This used to be commit c29c69d2df377fabb88a78e6f5237de106d5c2c5)
|
|
(This used to be commit 262e4e1fd8398934780db354fcc5316368032d7b)
|
|
Jeremy.
(This used to be commit 5ed61d5af6fe56e22135406256f5d1f7ccd6a376)
|
|
(This used to be commit 934163782bf5444ee6535b628ef80dad4b5685e6)
|
|
others don't get stuck with the winbindd hang.
Still waiting on additional confirmation from Guenther
that this fixes thes issues he was observing as well.
But it's been running in my local tree for a day without
problems.
(This used to be commit 0d2b80c6c4a744b05a0efdec352cddccc430e0c4)
|
|
(This used to be commit ab053a3b7186989b41180857e21e7d837de81cbd)
|
|
Guenther
(This used to be commit 8700829c1f6b8851035c6b6d3da7aea720320db7)
|
|
this.
Volker
(This used to be commit e57a6d4d6341a52de55860e7f97031a63810dbfa)
|
|
This allows a provider to supply the homedirectory, etc...
attributes for a user without requiring support in core
winbindd code. The idmap_ad.c module has been modified
to provide the idmap 'ad' library as well as the rfc2307 and sfu
"winbind nss info" support.
The SID/id mapping is working in idmap_ad but the nss_info
still has a few quirks that I'm in the process of resolving.
(This used to be commit aaec0115e2c96935499052d9a637a20c6445986e)
|
|
(This used to be commit 0eb19b57286f176dd4b7e86504d004e1450f6a10)
|
|
from being
complete, in particular the various mask bits are not correctly supported
yet. Checkin in now, I want to see how the build farm likes it.
Volker
(This used to be commit c9a5d011a91359b242f6c26f46e96ecea6a44a3b)
|
|
metze
(This used to be commit 1f49b9c387ca91da233b0d3bf7a50ef3f6d81f98)
|
|
--with-smbmount.
(This used to be commit ee12348cf1e93d0e75714f3883bfea6525797dc1)
|
|
(This used to be commit d10dd47fb8908a4372aa6932e40b23189784522c)
|
|
(This used to be commit 86e6ae6a9fe2a6fdaeeb503653a312662c7f50e9)
|
|
is (effectively) in libc. Convert AC_LIBTESTFUNC to use the mystically
undocumented m4_ifval, which fixes some quoting problems when
providing shell code for the if-true and if-false branches.
(This used to be commit 5e1fbcc403c471ecaaa37e8cd54b719b65dd7495)
|
|
metze
(This used to be commit e5333d5628a585ff00b78d50a0a22b0cf98aa9ff)
|
|
metze
(This used to be commit b2feeee7485f0a1006b38e5abee05c2583923242)
|
|
this is done by libreplace...
this hopefully fixes the build on HPUX 11.00
metze
(This used to be commit eed50e104794d855b204cfea52626f47b6fa3f52)
|
|
Simo.
(This used to be commit 50cd8bffeeed2cac755f75fc3d76fe41c451976b)
|
|
(This used to be commit 23795be8b429d4423263e60ce80f454e2e42cae7)
|
|
SHLIBEXT
this fix the build on hpisgr8 HPUX 11.23
metze
(This used to be commit b61269d7e39382d395e84bf2b488f6b40a8049a6)
|
|
metze
(This used to be commit d8f9c200551038dad73be52bb066523312508089)
|
|
the vfs layer, since gpfs supports it. Thanks to Volker, Christian,
Mathias, Chetan, and Peter.
(This used to be commit 0620658890fa9c68a9848538728023192319c81a)
|
|
-lgssapi_krb5. With that change I could sucessfully verify that Heimdal
support is still working nicely after the changes from jpeach.
Guenther
(This used to be commit 53d09487a003c00b7bb6c1a4824bda799b928bfc)
|
|
Add configure option --enable-fam so that FAM support can explicitly
be controlled at build time. Default behaviour is to autodetect.
(This used to be commit 066951bc48723b1a26aab9ebb21ff2c897189043)
|
|
--with-aio-support from trimping on the $LIBS variable
(This used to be commit 00bf29d352af694373be035047cfcf1298891d25)
|
|
setting the nss soname version on FreeBSD
(This used to be commit e1490e72eafbe3a2f9cc2e3a46563a75a19672e0)
|
|
metze
(This used to be commit 785ab128c4d630819f141ede8bcf5fc0c705aebb)
|
|
winbind module by Luke
Mewburn.
Volker
(This used to be commit 104f5e9ec9aea71950308b8b73479f06bf3c66a2)
|
|
this shold be a strong dependency. If stuff from Fink is an optional
extra, there should be a --with-stuff-from-fink argument. It's just
too easy to unexpectedly end up with binaries that depend on
/sw/{lib,include}.
(This used to be commit d0166e117216b5196b27a7caef776007641072f2)
|
|
x, so we can't get at them even if we wanted to.
Kerberos experts, please take a look to make sure I've done the
right thing!
(This used to be commit 9b8e179fcc1fb877e8601bfd242ee1fd615b554c)
|
|
readline fixes for mac os 10
metze
(This used to be commit 976b97ecbf9bde400a6f92cad9d9709d56e73058)
|
|
we need to make sure
HAVE_GSSAPI
HAVE_KRB5_H
HAVE_GSSAPI_H
HAVE_GSSAPI_GSSAPI_GENERIC_H
HAVE_GSSAPI_GSSAPI_H
are not in config.h
this adds 2 new macros to libreplace
AC_REMOVE_DEFINE(), AC_REMOVE_INCLUDE()
metze
(This used to be commit eb1f0b49cf0e84385a62f9dfcb2167fea2e8fd8b)
|
|
patch from Bjoern Jacke and it fixes bug 3698
metze
(This used to be commit e54302b9163cfe726c30a8efdc779250e076d493)
|
|
metze
(This used to be commit 0882f0c9d671cd466668f65433ee33a71f127a95)
|
|
are missing! Bailing out at compile time is ugly.
Hopefully this fixes the Mac OS 10 boxes in the build-farm
there're some missing function. Fixing that is a different
problem...
metze
(This used to be commit e00a83a0b65f4685b946aa9a4d225645f67a6df6)
|
|
but still leave --with-pam=no the default for now
and wait for discussion on samba-technical
metze
(This used to be commit b045d5afcf2e352ebb797132bd6b7c02f3b685a0)
|
|
the defines are not used anywhere in the tree.
(grep -R SPINLOCKS . in the topdir)
metze
(This used to be commit 1697686d9da7dd1ac707c7af9c145c0fc6204108)
|
|
- and fix some whitespaces
metze
(This used to be commit 4906e601511fc2056393d8519bb249e5cce926e4)
|
|
we now don't compile mostly each .c file twice.
- we use PICFLAG for all object files
- PICFLAG defaults to PIE_CFLAGS and is then overwritten
if the system supports shared libraries
as we currently always use -fPIE if available
(and at least on linux -fPIE produces the same code as -fPIC)
it doesn't change anything in the resulting code.
"high performance" binaries can be build with
"--disable-pie --disable-shared" if someone really needs to...
metze
(This used to be commit 6db1f57f45bf0b382572aec72dda29657c4a5c3f)
|
|
metze
(This used to be commit c7788f6c7183a139f1aa572880faef5bd185d1c0)
|
|
metze
(This used to be commit 9900abf8ab97113ed33b84e3701d89cbc2cc2a76)
|
|
metze
(This used to be commit 035579b62c76e370356cb4a6ba5f652ac68b5862)
|
|
and pass -bbigtoc also to the linker when building shared libs
metze
(This used to be commit 4948b676a804a5a250d464a7848420ed79cb52b2)
|
|
but disable building of shared libs and modules whe enable_shared != yes
Also make it easier to track down the problem with lost LDFLAGS values
on AIX.
metze
(This used to be commit 3367e306e6aa5c2007fb41655b7af1fd37dea47d)
|
|
metze
(This used to be commit aafb86f6eb8661a1905a0ca4acda6673e9df51d5)
|