Age | Commit message (Collapse) | Author | Files | Lines |
|
Previously this was done at token creation time if the Administrators and Users
builtins hadn't been created yet. A major drawback to this approach is that if
a customer is joined to a domain and decides they want to join a different
domain, the domain groups from this new domain will not be added to the
builtins.
It would be ideal if these groups could be added exclusively at domain join
time, but we can't rely solely on that because there are cases where winbindd
must be running to allocate new gids for the builtins. In the future if there
is a way to allocate gids for builtins without running winbindd, this code
can be removed from create_local_nt_token.
- Made create_builtin_users and create_builtin_administrators non-static so
they can be called from libnet
- Added a new function to libnet_join that will make a best effort to add
domain administrators and domain users to BUILTIN\Administrators and
BUILTIN\Users, respectively. If the builtins don't exist yet, winbindd must be
running to allocate new gids, but if the builtins already exist, the domain
groups will be added even if winbindd is not running. In the case of a
failure the error will be logged, but the join will not be failed.
- Plumbed libnet_join_add_dom_rids_to_builtins into the join post processing.
(This used to be commit e92faf5996cadac480deb60a4f6232eea90b00f6)
|
|
Guenther
(This used to be commit 51062534fd58d7a914a6bbac2e52bb44e71363b7)
|
|
Michael
(This used to be commit 42f3d681cac4a443347d1ed253848d45f8746f89)
|
|
Pass in ndr_syntax_id instead of pipe_idx, return NTSTATUS
(This used to be commit 78e9c937ff2d2e1b70cfed4121e17feb6efafda1)
|
|
(This used to be commit a0793cc853d3bd43df2fc49df193a5fead6b01ab)
|
|
Pass in ndr_syntax_id instead of pipe_idx, return NTSTATUS
(This used to be commit 9abc9dc4dc13bd3e42f98eff64eacf24b51f5779)
|
|
Guenther
(This used to be commit f1cc39e3759357344cb7abcb6bfa9d3e3f4969e6)
|
|
Karolin
(This used to be commit 7dae8b04f126d0ac86a452dcf373a690ee687ead)
|
|
Michael
(This used to be commit 7d7b63e89bb2a067783362a24d81e44e0d67e2ec)
|
|
metze
(This used to be commit 6b7ddb6d664f5f3b62161cdb3abf12633b263a64)
|
|
Thanks to Atte Peltomäki.
Guenther
(This used to be commit 144d374ad9dd981430a82369ceaa2783e6dae90a)
|
|
Guenther
(This used to be commit 0ef420c3a478a8adce7483f14b45e9995bfa5e5d)
|
|
Guenther
(This used to be commit 48efe7dbce1cde6689f94fafe2d7756f673bc050)
|
|
Guenther
(This used to be commit 6194244bd9fcc1fb736f3d91433f107270cac1c9)
|
|
Guenther
(This used to be commit 48600a0019d70d22574cf08e8fe19d44cc332a0f)
|
|
Jeremy.
(This used to be commit 9e2ab30d3cf6950fc79152b2169e7aeae8d6a366)
|
|
Guenther
(This used to be commit 22bdee7fe0cdcd95e0bade70cacb095e0b348abf)
|
|
Guenther
(This used to be commit c16e1820f86f105853aa855eda322ba6cbff3a84)
|
|
Guenther
(This used to be commit fa1976e23a33bd3fab17c3f6ab5573ee1fdf9e31)
|
|
Guenther
(This used to be commit 69d8442bf3248f97ad23def424901d7fa87bfe48)
|
|
Guenther
(This used to be commit cbff970facae295650742d12768f23c7f67380a6)
|
|
processing routine.
Guenther
(This used to be commit 6eedd167e77969e2ab7d5abe7311de62fc413d17)
|
|
Guenther
(This used to be commit 891d4cca0ca5ccb075940517af25f3760a315219)
|
|
Thanks, Volker, for pointing this out.
Guenther
(This used to be commit b47899195e0c190445953243fe80da4e92994dd1)
|
|
Guenther
(This used to be commit 9486e532da602da587769d4ff8a1a2825e541a30)
|
|
Guenther
(This used to be commit ee6e422c0e035aa4779fa718bb6f142827cc2de0)
|
|
Guenther
(This used to be commit e884304206b512a1ffc70b7a4da8db3c6dfd4f11)
|
|
Guenther
(This used to be commit ebf31203e7cf22e32b986c536279688b17a65d22)
|
|
Guenther
(This used to be commit 3bcda522f025aff249678a8a086218679fc19c6b)
|
|
Guenther
(This used to be commit f020c947cfb1482176af8827ed9c361d7c21e26f)
|
|
Guenther
(This used to be commit 64b48a07e714d7eb97dd49c11d9ca62951d79524)
|
|
Guenther
(This used to be commit 74d431270d9b4cc1524f79fa2ad743420afef417)
|
|
Guenther
(This used to be commit 1dbe6ea8607549649f69e1b63cc427efe67e0778)
|
|
Guenther
(This used to be commit 8ec64a96e43d2e55e81f725fe693178ecdc65e88)
|
|
Guenther
(This used to be commit e0b117200441f842fbc11cc817ab2cde4d63a22e)
|
|
Guenther
(This used to be commit 7e7f07ec59d23e909809ed32adc8fc399826310d)
|
|
Turns out the password hashes are not rid encrypted in the samsync reply.
Guenther
(This used to be commit 7d8d60bcbae79f3cdd55b27217145ffbd19f161d)
|
|
Guenther
(This used to be commit eb4232fec05cd87ea85a781b84a3fbe85f469703)
|
|
Guenther
(This used to be commit e0843e631e379645296a5fe34dfc83bc265ebef3)
|
|
Guenther
(This used to be commit 1d5758ec3a5160e5649242c42f6e4a7b39eb6199)
|
|
Guenther
(This used to be commit b3b6af0a3e25fab0a14c9c802dbabd3d03448ebe)
|
|
Guenther
(This used to be commit 6c1904f8be1b4e08b09b64052c1aba24e7a4fb3d)
|
|
This code is vastly based on samba4 code.
Guenther
(cherry picked from commit 5b68be96996a710988b1fd1c176cd5dff0f2c6af)
(This used to be commit 2c53d87de4ecc5ac9c43bc7488a03bceecf35140)
|
|
This is required now if the join verify failed and we already
modified the local configuration.
Guenther
(This used to be commit 2870fe50af5163e30330f5a3ef21d0b7eea85ee5)
|
|
Jerry, this fixes the issues while joining with "config backend = registry".
Guenther
(This used to be commit b3d47f099286778252c6df6bf2c1fee0c4e26560)
|
|
Guenther
(This used to be commit f9e5450c9492b0f35bd90040739007963e765ab1)
|
|
Guenther
(This used to be commit 6dbed6e7b7300962e11fdce1a713e6f3ea2cb619)
|
|
Guenther
(This used to be commit d7ba98cc3f2d037ec01e079220a66da508b104b0)
|
|
Michael
(This used to be commit b455cd1a619a1f1922e2e7bc07f1af246e3201e6)
|
|
Guenther
(This used to be commit 452a9ea4af19d3aebc35929edaf4e5adf8c1fd11)
|