Age | Commit message (Collapse) | Author | Files | Lines |
|
(This used to be commit 89a8c607af4ca67fcefe285480f7c9b832f6720c)
|
|
on "result", don't free result first.
Jeremy.
(This used to be commit 9b24715170c6ca5dd3d5df0675f430852ae6a50d)
|
|
<adegremont@idealx.com>
Jeremy.
(This used to be commit a92555e6060294afcfecc075bfac5c836f150b01)
|
|
in iconv.c and nsswitch/). Using them means you're not thinking about multibyte at
all and I really want to discourage that.
Jeremy.
(This used to be commit 5c050a735f86927c7ef2a98b6f3a56abe39e4674)
|
|
>Make pdb_ldap.c compile with SUN iPlanet headers. Whether this works will be
>tested soon, but this fix is somewhat obvious.
>
>Volker
(This used to be commit e4551b3d7f85bf39778a1de952eaa370bc3716e3)
|
|
fields, bad_password_count and logon_count. Ensure this is stored/fetched
in the various SAMs. As it replaces the unknown_5 field this fits
exactly into the tdb SAM without any binary problems. It also is added
to the LDAP SAM as two extra attributes. It breaks compatibility with
the experimental SAMs xml and mysql. The maintainers of these SAMs must
fix them so upgrades like this can be done transparently. I will insist
on the "experimental" status until this is solved.
Jeremy.
(This used to be commit 71ecd10181cd35313b79f618c2928c2f45424812)
|
|
>remove getpwnam() calls from init_sam_from_xxx().
>This means that %u & %g will no longer expand, but %U
>and %G still do. The payback is that winbindd local
>accounts for users work with 'wbinfo -u' when winbind
>is running on a PDC.
>Fix a nasty mess, and also bug #296. passdb/pdb_ldap.c was not converting
>to/from utf8 for some calls. The libads code gets this right. Wonder why
>the passdb code doesn't use it ?
>Jeremy.
(This used to be commit 1e60bbff70efe3b5c306bc1ef560ee8032b1a852)
|
|
(This used to be commit c17a7dc9a190156a069da3e861c18fd3f81224ad)
|
|
(This used to be commit 3101c236b8241dc0183995ffceed551876427de4)
|
|
prior to this merge, checkout HEAD_PRE_3_0_0_BETA_3_MERGE
(This used to be commit adb98e7b7cd0f025b52c570e4034eebf4047b1ad)
|
|
(This used to be commit 34a0c7313a12d581e9aaf08322b105216cc94478)
|
|
(This used to be commit 1f02ca540dff5366a1ad2e8a98b626635a8e9018)
|
|
(This used to be commit dc18ffcc5a215975a90232374a84ffbe6b6903ea)
|
|
don't try to change a string that only differs in case
(This used to be commit 60c6bc9883b4b969626da85af834362ca2bfcd54)
|
|
(This used to be commit d9fd4b8be36b0175d68f9b3c3200dbb03df64c76)
|
|
(This used to be commit 59328b8c8add974c7edaeecdf8eac0fb0d328fc2)
|
|
(This used to be commit a1326ea34831bf49942f7bcb954999091c3ea820)
|
|
(This used to be commit 04e2fe104dfa4508b59276ecd7bee201d453462e)
|
|
(This used to be commit 6097b050d082c7c88dca5416389617306e6dab0c)
|
|
Jeremy.
(This used to be commit e12934c67b6aea9e3e449009e159ce6814dcbd11)
|
|
(This used to be commit bd660f45df4df686f58a181f002ca1d88e7c1015)
|
|
SAM_ACCOUNT does not have anymore uid and gid fields
all the code that used them has been fixed to use the proper idmap calls
fix to idmap_tdb for first time idmap.tdb initialization.
auth_serversupplied_info structure has now an uid and gid field
few other fixes to make the system behave correctly with idmap
tested only with tdbsam, but smbpasswd and nisplus should be ok
have not tested ldap !
(This used to be commit 6a6f6032467e55aa9b76390e035623976477ba42)
|
|
his IDMAP work.
This version also works properly (the HEAD version had suffered from bitrot),
and should be a good basis to change into the new IDMAP rules.
It also includes UTF8 conversions.
Included also are the schema changes, and a note about the now very old scripts
in examples/LDAP (they don't work for this, or even the previous schema).
Andrew Bartlett
(This used to be commit 38a8f2b23a12f6a964d447f7904dd722a1ca046c)
|
|
function. Patch by metze with some minor modifications.
(This used to be commit f4576757d1d52a8f1b96894c869bb76450003fd1)
|
|
(This used to be commit 09eb02cba0747ae47aa4a76f4fac69af293a774a)
|
|
Andrew Bartlett
(This used to be commit c98bbc750773f7c49dbb1e69a5936f52416dd51c)
|
|
(This used to be commit 84b116f9c007c0f933af82462dff4324ffa53f0f)
|
|
This patch moves the ldap routines out of passdb into a generic
library and implements an LDAP backend for IDMAP. THe backend
can be enabled with "idmap backend = ldap" in smb.conf. THere
are also schema changes to make sure to update teh ldap schema files.
(This used to be commit 87c7c582c60521da3a93d997386fe79935012aea)
|
|
Andrew Bartlett
C VS: ----------------------------------------------------------------------
(This used to be commit d84a3fc522a588bdcd36cb86df304572947a456a)
|
|
are handled, though we assume that always everything needs to
be updated in LDAP. PDB_IS_* is not done yet for groups.
Do we need it?
Volker
(This used to be commit 409a26282f8fcbd583a85df40c70b504eac26f6e)
|
|
Andrew Bartlett
(This used to be commit 5dc29b10b08658178133aee7b4c47197fadc533a)
|
|
easier to understand by moving the logic for init_ldap_from_sam
and friends around.
Volker
(This used to be commit 124c80facba364033f72b20660f347390effba59)
|
|
hand can be somewhat error-prone..
Volker
(This used to be commit 12fabd07148c21f5481cb750f1cfdab2e8112e4b)
|
|
are 'SET' when adding the account.
I really don't like passing flags down to inner routines and
complicated if/else conditions, but this time he might be right. ;-)
Volker
(This used to be commit 80d2578108da14f60133df3a308b867beb27e920)
|
|
for the 'ldap del only sam attr' functionality. So
we are compatiple to the current SuSE patches as well
as to TNG... ;-)
Volker
(This used to be commit 353309e2a3bc27e918bd0a6cf22833d57895fbc8)
|
|
> Hi Volker,
>
> if 'displayName' is not available we should fallback to 'cn' for map->nt_name
> 'cn' is used as unix group name by nss_ldap.
>
> and if nt_name is not available we should fail (so does this patch)
Volker
(This used to be commit 3a7d1e72e208b9609da4ff65d9fff9179799ecac)
|
|
This repairs domain join with fully existing wks-account which I broke
with my last patch...
Volker
(This used to be commit 582a34efbe3c1570b852c93318ff6002954ddf6a)
|
|
anymore, but instead look at what is currently stored in the
database. Then we explicitly delete the existing attribute and add the
new value if it is not NULL or "". This way we can handle appearing
and disappearing attributes quite nicely.
This currently breaks pdbedit -o, as this does not set the CHANGED
flag on the SAM_ACCOUNT.
Jelmer suggested that we set all the fields on CHANGED in
context_add_sam_account. This sounds not too unreasonable.
Volker
(This used to be commit f7149cf500d2b10ee72163c018a39fdd192d7632)
|
|
(This used to be commit 44e9bf88cc2bbb2aa34711354258c3abb319cb9b)
|
|
Volker
(This used to be commit e8725913f9f174c03683a35bbce16ee33ab4c707)
|
|
put a doc about it in dev-doc later today.
(This used to be commit af7bfee0c6902c07fdb8d3abccf4c8d6bab00b5a)
|
|
This patch is heavily based on a patch by SuSE. Thanks
to Guenther Deschner <gd@suse.de> for providing it.
Volker
(This used to be commit 5eaf9195eefda5ababba85cc0f6d581ff6f0f454)
|
|
(This used to be commit aa9b8382d38346cb3e94ddf2e7caf6d663034579)
|
|
Volker
(This used to be commit a5218499eb3f0a62cd663a06157591fbb0dfcbef)
|
|
Volker
(This used to be commit f0f1518fc450834725902e9cdf33fb8d35f99360)
|
|
Volker
(This used to be commit e8975d6e7bdcceb78a83a3446cf1430e1e3f1a72)
|
|
The intention is to remove the muliple passdb backends, but we need the
'guest' account to always be there. If the admin adds the guest account to
(say) LDAP, there will only be one backend required for operation.
This helps remove some nasty behaviours with adding accounts to the system
for both the RPC 'create user' and the SAMSYNC code. Users 'added' with
an 'add user/machine' script won't magicly appear, and machine accounts
'pre-added' to unix, but not the smbpasswd file will not cause mayhem.
This commit also implements somthing tridge discussed with me, the concept
of 'default' passdb operation pointers - so that each backend does not
need it's own stub funcitons wrapping the default tdb privilages/group
mapping code.
This also removes an implicit 'sid->name' and 'name->sid' mapping from our
own local SID space, to winbind usernames. When adding mapping for NIS/LDAP
non-sam users in future, we need to be careful.
Andrew Bartlett
(This used to be commit 6f32fa234961a525760a05418a08ec48d22d7617)
|
|
get them in should be indeterminate, so just picking the first one would be
bad...
Andrew Bartlett
(This used to be commit 21da8c3bb39c507eb90865549c3bb3538dcea138)
|
|
blame for the realloc() stuff.
Plus a couple of minor updates to libads.
Andrew Bartlett
(This used to be commit 34b2e558a4b3cfd753339bb228a9799e27ed8170)
|
|
remove ldap_msgfree(result); as result is unitialized at this point
(This used to be commit dc8882778694289ca461de57d443992f52ab7524)
|