Age | Commit message (Collapse) | Author | Files | Lines |
|
reconnect code to cope with rebooting a DC. This
replaces the code I asked Volker to revert.
The logic is pretty simple. It adds a new parameter,
"winbind reconnect delay", set to 30 seconds by
default, which determines how long to wait between
connection attempts.
To avoid overwhelming the box with DC-probe
forked children, the code now keeps track of
the DC probe child per winbindd_domain struct
and only starts a new one if the existing one
has died.
I also added a little logic to make sure the
dc probe child always sends a message whatever
the reason for exit so we will always reschedule
another connect attempt.
Also added documentation.
Jeremy.
(This used to be commit 8027197635b988b3dcf9d3d00126a024e768fa62)
|
|
address
reported by Ted Percival <ted@midg3t.net>.
Jeremy.
(This used to be commit ab06efccf31fbc899536d2681a2076e6dfd65b9e)
|
|
Michael
(This used to be commit 5ef9da6f4f04b07804b389902862fae0fbbfed13)
|
|
These are also in dynconfig.h and were originally added
by "make proto" by accident.
Michael
(This used to be commit 4fb69fe1eeebc466944f3daacfacec60ad043b0c)
|
|
Michael
(This used to be commit 876f6793434174051084b17f3b02bd1bbb24ec44)
|
|
(Cleaning "ensure we exit with non-zero status on EOF on socket"
after rebasing to v3-3-test which has no "make proto" anymore.)
Michael
(This used to be commit a958c6bf1e0394e98df286974d78d3b07498e0b4)
|
|
(This used to be commit 8b9d12714679745b98755e6805e71b75828ce227)
|
|
Michael
(This used to be commit 363eb90ce8380ce1bbc74673936ba1e6d7eee23b)
|
|
"init logon delays hosts" takes a list of hosts names or addresses
or networks for which the initial SAMLOGON reply should be delayed
(so other DCs get preferred by XP workstations if there are any).
This option takes the same type of list as "hosts allow" does.
"init logon delay" allows one to configure the delay for the hosts
configured for delayed initial samlogon with "init logon delayed hosts".
The value is interpreted as milliseconds. The default value is 100.
This commit only introduces the parameters.
They will be activated in a subsequent commit.
Michael
(This used to be commit f7c1f85438f7e0da2a96e3fc8f774f8c6936370e)
|
|
Michael
(This used to be commit 742bedce417c666b5e91d8d0a7dc7682dc62eba2)
|
|
Michael
(This used to be commit 1b2dec93b635dfd23af78a370c223ea2dd486aa7)
|
|
Previously this was done at token creation time if the Administrators and Users
builtins hadn't been created yet. A major drawback to this approach is that if
a customer is joined to a domain and decides they want to join a different
domain, the domain groups from this new domain will not be added to the
builtins.
It would be ideal if these groups could be added exclusively at domain join
time, but we can't rely solely on that because there are cases where winbindd
must be running to allocate new gids for the builtins. In the future if there
is a way to allocate gids for builtins without running winbindd, this code
can be removed from create_local_nt_token.
- Made create_builtin_users and create_builtin_administrators non-static so
they can be called from libnet
- Added a new function to libnet_join that will make a best effort to add
domain administrators and domain users to BUILTIN\Administrators and
BUILTIN\Users, respectively. If the builtins don't exist yet, winbindd must be
running to allocate new gids, but if the builtins already exist, the domain
groups will be added even if winbindd is not running. In the case of a
failure the error will be logged, but the join will not be failed.
- Plumbed libnet_join_add_dom_rids_to_builtins into the join post processing.
(This used to be commit e92faf5996cadac480deb60a4f6232eea90b00f6)
|
|
Guenther
(This used to be commit 87b6aac13598a2ac28054de5ab90d63bef65f1fe)
|
|
(This used to be commit e115e2582256c34e6905afc8c2929efd6ea61088)
|
|
(This used to be commit e11b5cb1e061caf4c3793fb402ca6bee95a8f26c)
|
|
(This used to be commit defcf0eecfb8eb035d9ca80530720b9e6873f6c7)
|
|
(This used to be commit 256c93a8b3d4d9a4e52a656c91b89a043a087066)
|
|
(This used to be commit ffd2ff5325ef24f08dcb63e4561f5f62bffef6d3)
|
|
(This used to be commit 287ffc17a072d5e1a5b0e1ecae089faf67b814b7)
|
|
(This used to be commit ed4a447103cd9ada59222d79f5784818fe033209)
|
|
(This used to be commit e02a550527307f7b300d3fe13631e2d29dbc5e06)
|
|
(This used to be commit 2e60701e8d41132f90e64a86bccd99cc188d38c9)
|
|
(This used to be commit 726e56c72fdb685ab5eddefd2fd8b043dc38d6ad)
|
|
Pass in ndr_syntax_id instead of pipe_idx, return NTSTATUS
(This used to be commit f2656e5c2e700523ead7a62734d203ad0caaff0c)
|
|
Pass in ndr_syntax_id instead of pipe_idx, return NTSTATUS
(This used to be commit 1fcfca007f33a2c4e979abf30c2ea0db65bac718)
|
|
cli_rpc_pipe_open_ntlmssp_auth_schannel
Pass in ndr_syntax_id instead of pipe_idx, return NTSTATUS
(This used to be commit ff87127baf1d1bd62bb9c1be4a50c2ab2642b33d)
|
|
Pass in ndr_syntax_id instead of pipe_idx, return NTSTATUS
(This used to be commit 78e9c937ff2d2e1b70cfed4121e17feb6efafda1)
|
|
(This used to be commit a0793cc853d3bd43df2fc49df193a5fead6b01ab)
|
|
Pass in ndr_syntax_id instead of pipe_idx, return NTSTATUS
(This used to be commit a13f0599551609394904b99e4014d580ec65c506)
|
|
Pass in ndr_syntax_id instead of pipe_idx, return NTSTATUS
(This used to be commit 9abc9dc4dc13bd3e42f98eff64eacf24b51f5779)
|
|
This scans the list of pipes registered via rpc_pipe_register_commands instead
of using static tables.
(This used to be commit 283e6039989adea1c8921b3600b410cb67b6492a)
|
|
(This used to be commit 9a0bc277f23831124d049301bc7009a285d91a11)
|
|
Guenther
(This used to be commit 0122e4941db33f149a64d7e17286c0ba81247a19)
|
|
The per-server xxx_get_pipe_fns functions can go once all the RPC servers are
converted
(This used to be commit 6aa2391cbe1cbda8269ded767117f53d83b243e1)
|
|
Guenther
(This used to be commit 6aca163e898bfeeff824725bb27b2ef4f7b729f9)
|
|
This requires to store the rpc_interface in "struct rpc_table"
(This used to be commit 654f8de8497aff29f9b1f1822b6a8e734ff329e0)
|
|
(This used to be commit 5fc90908deb417130af122941e084542304a2543)
|
|
Jeremy
(This used to be commit 15920f838835f5dbbac8712202267c2a99237686)
|
|
(This used to be commit e113b7c13f2457676fdec9e52f09046286e25b60)
|
|
This reverts commit c8d1bbfddce41cd6bf37dd0a622ef3437a24b492.
(This used to be commit 5cded3da00c0af40a98d86011507553f97fe6a22)
|
|
This reverts commit 7a5a575ffe5196caecedc93970a25abfbe6f8059.
(This used to be commit 62e444dd50ae974c2ab9a553cdf7f188a8f2c538)
|
|
This reverts commit 0bf0434f22b0ea46fda3ccc4dd612adbc88dd4f2.
(This used to be commit cc536677735ecc318cbd2176ce53b124f44d85a0)
|
|
This reverts commit 81f334bd6da601a040f754c46705cfa2fd4f8c45.
(This used to be commit d4d106776af3f475d46a4dd78794b7b48a3572af)
|
|
Brian Sheehan provided a nice patch intended for the 3.0 code base. This
commit applies a similar patch for the 3.3 code base. It adds a new public
function to libsmbclient -- smbc_set_credentials() -- that may be called from
the authentication callback when DFS referrals are in use.
Derrell
(This used to be commit 888f922bd0d1c84a687d404e95ae314a9dd0aee1)
|
|
(This used to be commit 81f334bd6da601a040f754c46705cfa2fd4f8c45)
|
|
(This used to be commit 0bf0434f22b0ea46fda3ccc4dd612adbc88dd4f2)
|
|
Günther agreed that it might be unnecessary in dsgetdcname_cache_store() :-)
(This used to be commit 7a5a575ffe5196caecedc93970a25abfbe6f8059)
|
|
This is called only from idmap_alloc_init, which feels kindof weird.
Digging deeper in the code...
(This used to be commit c8d1bbfddce41cd6bf37dd0a622ef3437a24b492)
|
|
smbcontrol winbindd debug level would only set the debug level of the
parent winbindd process and not the child processes. This patch adds
the functionality of broadcasting the debug message to all winbindd
children. Now the debug level message is propagated to all the winbindd
processes that includes parent and children.
(This used to be commit cfbcfc3ffe74f28ec874a6bf1ab93f55f405b6e6)
|
|
It does not really need the whole smb_request
(This used to be commit d3facf4cbdb2915168e91d64c2d8320f67524df8)
|