Age | Commit message (Collapse) | Author | Files | Lines |
|
Guenther
(This used to be commit 1142f3df546cbf4780c6f54667f7ed31b1a7621b)
|
|
(This used to be commit 461974d2cc18c729f152356a9c30cc776f288906)
|
|
Guenther
(This used to be commit 1a5c8780ae79e5ae4e6a36bfb66cd92ae7d3aa88)
|
|
metze
(This used to be commit 2075c05b3d8baa7d6d8510cd962471a5781740a6)
|
|
Guenther
(This used to be commit 1a62c731c6259bf4285d3735bff8b191002553f7)
|
|
substructure.
metze
(This used to be commit 00909194a6c1ed193dfdb296f50f58a53450583c)
|
|
metze
(This used to be commit ba70737b7043cae89dd90f8668a24881212ac6fb)
|
|
Guenther
(This used to be commit 684fcf39dcc08bcf571272549222fdeb11d2725f)
|
|
Guenther
(This used to be commit ad0a6d5703c35d48ab5bbfa8d6506d42e0cfb61d)
|
|
Guenther
(This used to be commit 4d62f1191b52569fcdbe674773b07a44aa469520)
|
|
callback in
libads.
Guenther
(This used to be commit 311bbbafa6d860b7b632beac6d9249b0a2fafb86)
|
|
Guenther
(This used to be commit 3effd1c3461301f9ccf7c55386810c36f4ee3ccc)
|
|
(This used to be commit b0132e94fc5fef936aa766fb99a306b3628e9f07)
|
|
Jeremy.
(This used to be commit 407e6e695b8366369b7c76af1ff76869b45347b3)
|
|
Guenther
(This used to be commit 6fafa64bea4ce6a7a5917fa02ed9c564a7c93ffb)
|
|
Jeremy.
(This used to be commit 03763bc5287fef5f100c911041668e23d4305f8d)
|
|
This fixes the build on solaris (host sun9).
And hopefully doesn't break any other builds... :-)
If it does, we need some configure magic.
Thanks to Björn Jacke <bj@sernet.de>.
(This used to be commit a43775ab36aa3d36108e1b5860bbee6c47e9b1b4)
|
|
tokenGroup attribute.
Guenther
(This used to be commit e4e8f840605dfdf92ca60cc8fc6a4c85336565fb)
|
|
Guenther
(This used to be commit 6e911c442bf9b076f43f99576f9b588df2c39233)
|
|
search with
the SD_FLAGS control.
Guenther
(This used to be commit 648df57e53ddabe74052e816b8eba95180736208)
|
|
When asked to create a machine account in an OU as part
of "net ads join" and the account already exists in another
OU, simply move the machine object to the requested OU.
(This used to be commit 3004cc6e593e6659a618de66f659f579e71c07f7)
|
|
Jeremy.
(This used to be commit 8968808c3b5b0208cbad9ac92eaf948f2c546dd9)
|
|
ranged LDAP
queries more generic. Michael, feel free to overwrite these and the following.
Guenther
(This used to be commit 0475b8eea99ebb467e52225ad54f4302a77376b9)
|
|
Jeremy.
(This used to be commit 7c45bd3a47fc2b24c5f1351a241ace2201c857d2)
|
|
Coverity finds them :-)
Jeremy.
(This used to be commit cbe725f1b09f3d0edbdf823e0862edf21e16d336)
|
|
Fix escaping of DN components and filters around the code
Add some notes to commandline help messages about how to pass DNs
revert jra's "concistency" commit to nsswitch/winbindd_ads.c, as it was
incorrect.
The 2 functions use DNs in different ways.
- lookup_usergroups_member() uses the DN in a search filter,
and must use the filter escaping function to escape it
Escaping filters that include escaped DNs ("\," becomes "\5c,") is the
correct way to do it (tested against W2k3).
- lookup_usergroups_memberof() instead uses the DN ultimately as a base dn.
Both functions do NOT need any DN escaping function as DNs can't be reliably
escaped when in a string form, intead each single RDN value must be escaped
separately.
DNs coming from other ldap calls (like ads_get_dn()), do not need escaping as
they come already escaped on the wire and passed as is by the ldap libraries
DN filtering has been tested.
For example now it is possible to do something like:
'net ads add user joe#5' as now the '#' character is correctly escaped when
building the DN, previously such a call failed with Invalid DN Syntax.
Simo.
(This used to be commit 5b4838f62ab1a92bfe02626ef40d7f94c2598322)
|
|
Guenther
(This used to be commit 7ad7847e5bbdd90fa6ae9ce91e5962f524ac2890)
|
|
Guenther
(This used to be commit 8462f323cf86f90b1bdf14a3953c5a4bda1b9533)
|
|
Guenther
(This used to be commit 4e622572eb7939c6aa8e99fd9595bf28836bd5a3)
|
|
the stored client sitename with the sitename from each sucessfull CLDAP
connection.
Guenther
(This used to be commit 6a13e878b5d299cb3b3d7cb33ee0d51089d9228d)
|
|
site support in a network where many DC's are down.
I heard via Volker there is still a bug w.r.t the
wrong site being chosen with trusted domains but
we'll have to layer that fix on top of this.
Gd - complain if this doesn't work for you.
Jeremy.
(This used to be commit 97e248f89ac6548274f03f2ae7583a255da5ddb3)
|
|
(This used to be commit 86e6ae6a9fe2a6fdaeeb503653a312662c7f50e9)
|
|
Volker
(This used to be commit b7dc9b81696aa5434419c5378a47b41c6dee3dfa)
|
|
Directory:
When having DC-less sites, AD assigns DCs from other sites to that site
that does not have it's own DC. The most reliable way for us to identify
the nearest DC - in that and all other cases - is the closest_dc flag in
the CLDAP reply.
Guenther
(This used to be commit ff004f7284cb047e738ba3d3ad6602e8aa84e883)
|
|
<david.hu@hp.com>. Fixes #4212.
Guenther
(This used to be commit 4ec896cdbe441b17d91895a50ac9be61efe2f9c1)
|
|
along with some memleaks.
Guenther
(This used to be commit 4bad52c5b3a983418d4216a2c3f5e04926e37e94)
|
|
Guenther
(This used to be commit 61ebedc82ee7d7a98e2a52b0677d723a801ab30f)
|
|
statement.
Guenther
(This used to be commit 62928734b820f512f940c1ed79048e14b322d060)
|
|
Guenther
(This used to be commit ecb632a1534d5178602b9143bb17712559fe2e4f)
|
|
Guenther
(This used to be commit e7cae9bbae2848ca1088a822883563062dd3f612)
|
|
Jeremy.
(This used to be commit e568271af2b5c20cff70b72b8ab4b1b704122b40)
|
|
Jeremy.
(This used to be commit 03e1078b459531af5a2336b584b3c886c5dd1e29)
|
|
Jeremy.
(This used to be commit f8984fa8b706bb76559e447b30a201e1cc2871b6)
|
|
Fix a C++ compat warning.
Volker
(This used to be commit 351e583f66714562eca1f40429bfee70f06d281c)
|
|
(This used to be commit 86db85423027d34cb053fc068159ddd2226e90ec)
|
|
a non-fatal error path if the 'disable machine
account' code succeeded.
Jeremy.
(This used to be commit f47bffa21ec1caf5ec3a6ec77af801df0b63d83a)
|
|
Guenther
(This used to be commit 6f301b2dc3dd64b4396e1d0307b3d539bda67d45)
|
|
cache the SAF name under both the domain name
and the realm name, as we could be looking up
under both. Jerry please check.
Jeremy.
(This used to be commit 9d954d2deb46698b3834c7caf5ee0cfe628086b5)
|
|
Compiled it on systems with and without LDAP, I hope it does not break the
build farm too badly. If it does, I'll fix it tomorrow.
Volker
(This used to be commit b2ff9680ebe0979fbeef7f2dabc2e3f27c959d11)
|
|
set_dc_type_and_flags().
Fix problem when DC is down in ads_connect, where
we fall back to NetBIOS and try exactly the same
IP addresses we just put in the negative connection
cache.... We can never succeed, so don't try lookups
a second time.
Jeremy.
(This used to be commit 2d28f3e94a1a87bc9e9ed6630ef48b1ce17022e8)
|