summaryrefslogtreecommitdiff
path: root/source3/lib/sids.c
AgeCommit message (Collapse)AuthorFilesLines
1999-12-08jerry spotted that get_domain_sids() was being called with the wrongLuke Leighton1-2/+1
arguments: get_any_dc_name() was being called with a server name not a domain name. oops. (This used to be commit 631814302d6992138cfe024ba7bd456cc7e0d3bf)
1999-12-02cleaning up: removing those horrible references to server listLuke Leighton1-1/+1
functions (cli_net_use_addlist()). needed originally because there was no get_dc_any_name() function. (This used to be commit 3a2b920ea2e6704b2574f404e1e41c7cfc0f96b2)
1999-12-02added get_any_dc_name() function.Luke Leighton1-0/+14
(This used to be commit 455e17dbb7d451b462004f302f5c68770f17b65e)
1999-12-02default SID map now reads in "trusted domains" from smb.conf.Luke Leighton1-16/+124
(This used to be commit f0946d1ccafeb5f541935b41f2d54bcbc06797ed)
1999-11-20modified domain_client_validate to take trust account name / type. thisLuke Leighton1-1/+2
is to pass DOMAIN_NAME$ and SEC_CHAN_DOMAIN instead of WKSTA_NAME$ and SEC_CHAN_WKSTA. modified check_domain_security to determine if domain name is own domain, and to use wksta trust account if so, otherwise check "trusting domains" parameter and use inter-domain trust account if so, otherwise return False. (This used to be commit 97ec74e1fa99d773812d2df402251fafb76b181c)
1999-11-20doing a code reshuffle. want to add code to establish trust relationships.Luke Leighton1-251/+20
(This used to be commit 3ec269b402ba6898d905ea1029c427e1b645faf4)
1999-11-16added two new params: "trusted domains" and "trusting domains".Luke Leighton1-0/+23
these _may_ not actually ever get used, as trust relationships really need to be established with shared secrets, and you need to get the SID of the trusted and trusting domains, so this may have to go in a private/xxx.mac file. (This used to be commit 71f12138679251a9ebcada35969d9baea286a3e9)
1999-11-15added server-side samr enum domains. fixed some parsing issues, server-side.Luke Leighton1-0/+11
(This used to be commit 60b0840106a6f5c283a8339428f3cfeb62398355)
1999-07-21BDC support.Luke Leighton1-1/+1
(This used to be commit 2331aa32ab36c3ee5fd8cfbe972e57299939e33d)
1999-07-07use of dos_mkdir() in generate_sam_sid() should be unix mkdirLuke Leighton1-1/+1
(This used to be commit 16371d8fe130f89bedebc63fdc4bf0f6f993f309)
1998-12-07removed nt_pipe_fnum from struct cli_state. need to be able to callLuke Leighton1-6/+7
LsaLookupSids etc from within SamrQueryAliasMembers, for example. fnum is now a parameter to client functions. thanks to mike black for starting the ball rolling. (This used to be commit bee8f7fa6b0f7f995f71303f4e14a4aaed0c2437)
1998-12-04- renamed do_samr_xxx to samr_xxxLuke Leighton1-4/+4
- renamed do_lsa_xxx to lsa_xxx - added "enumgroups [-m]" command, enumerates groups, shows members. - added cmd_sam_add_groupmem(), need to call these in rpcclient.c - added cmd_sam_add_aliasmem(), need to call these in rpcclient.c - modified "enumaliases [-m]" command - improved "enumgroups" and "enumaliases" to display names not just RIDS/SIDs. - renamed "samr_unknown_12" to "samr_lookup_rids". - added the following client-side functions: get_samr_query_groupmem() get_samr_query_aliasmem() get_samr_query_groupinfo() samr_enum_dom_groups() samr_enum_dom_aliases() samr_add_aliasmem() samr_add_groupmem() - improved display output (display.c) (This used to be commit eacc5e581af2b4de24186b9be3238b352c54effe)
1998-12-03jean-f spotted bug in test for existence of MACHINE.SID and SAM_NAME.SID.Luke Leighton1-1/+1
(This used to be commit 81be1e60764d380adf47737552659854d94ca626)
1998-12-02removed check on name of domain having to be right, etc etc.Luke Leighton1-8/+0
(This used to be commit a74b6dcc76794c1fe350d6906f156fdf5189e18b)
1998-12-01fixing smbpasswd to link to smbd to obtain domain sidLuke Leighton1-3/+3
(This used to be commit bfb75e58ced1082d3bb7d6b3f3367d50a0ca26ea)
1998-12-01rpc_samr.h parse_samr.c srv_samr.c :Luke Leighton1-30/+50
samr_query_aliasmembers (cool!) util_pwdb.c sids.c nmbd.c server.c smbpasswd.c swat.c : pwdb_initialise(BOOL is_server) now creates / reads DOMAIN_NAME.SID if is_server is True, and does LsaQueryInfoPolicy(levels 3 and 5) to obtain member and pdc sids. (This used to be commit 3e1eb4f26b67e484b05e1dde94fd4e4dae982631)
1998-12-01fix to domain_namemap (domain, ntname wrong way round oops)Luke Leighton1-5/+5
stupid compile errors with file_rename() call just created. (This used to be commit f5cedb8c9618b83b63b5e2db867d238eebc7e13c)
1998-12-01adding some samr parsing calls (group / alias adding / deleting)Luke Leighton1-0/+20
added code that moves MACHINE.SID to DOMAIN_NAME.SID if it exists. (This used to be commit 51c1c31768a92d9c57ee6c09b78419bcbc544f03)
1998-11-30attempting to fix "domain user map" up, but it's a bit complicated.Luke Leighton1-2/+9
i may simply go for a response in the NetSamLogon returning the unix username, forcing the NT user to appear to be a unix user, however even that is fraught with implications. might just have to go the whole hog and do this tuple thing, "unix_name + nt_name" always associated together... issue with api_net_sam_logon, getsam21pwent() being called twice, the second time overwriting static buffer data (argh) so had to make a copy. noticed a nested "become_root()"/"unbecome_root()" which will have to be tracked down... (This used to be commit 474f94f419a531e33b475249da7efb99ac22f454)
1998-11-30- adding builtin[alias]db.Luke Leighton1-5/+9
- lib/sids.c: generate_sam_sid() modified to take a domain name: it now generates "DOMAIN_NAME.SID". reasons: 1) if you run multiple samba servers on the same machine under different netbios names as members of a domain, they won't all use the same SID, which is a _big_ mistake but it would happen _by default_. 2) we have (had) a problem with sid_to_string() and string_to_sid() which cause SIDs to be incorrectly read. one of the major reasons for *NOT* making this change was so as not to disrupt existing users. but as they will be anyway by this bug, we might as well go ahead. - passdb/smbpass.c: wanted to change the meaning of the name in the smbpasswd file to an "nt" name not a "unix" name. this is probably not a good idea: reverted this. - output formatting / bug-fixing in rpcclient query_useraliases code. (This used to be commit e4930f5f48f8246ceec8add8bf769954a963190c)
1998-11-29"retired" two modules to preserve their cvs history.Luke Leighton1-0/+554
added their replacements, added sam password database API modules (This used to be commit b1d1c1337c69c6f6bf25ab932a1a6a757e3ea2ae)