Age | Commit message (Collapse) | Author | Files | Lines |
|
group, testing for membership etc, use the already calculated NT_USER_TOKEN.
(which is initgroups() based)
So far we only fill out the 'domain' groups - we need to fill out the
'other sids' as well, and we possibly need to filter the list for 'domain
groups' only (the old code did that), but Win2k doesn't seem to mind
this for now.
I also need to find out what the magic '7' is about. Fortunetly JF is in town,
so I'll grill him tomorrow :-).
Andrew Bartlett
(This used to be commit 7e846e7387247f8bc2b07a1a1006014c6978143b)
|
|
(This used to be commit 43cd6e5a702bb1004b36a5845e0765851395ebf2)
|
|
(This used to be commit ea3787d819df14f8b451780a55d2bf76dc4030ef)
|
|
(This used to be commit 6ce20a61a85f129d42c06844d51f4b2b35b41869)
|
|
dashes of const. This is a rather large check-in, some things may break.
It does compile though :-).
Jeremy.
(This used to be commit 82b8f749a36b42e22186297482aad2abb04fab8a)
|
|
comment, or location field changed
(This used to be commit c6d45216f6d3573fb2342f4d3aa3a50415924674)
|
|
connections tdb
with an snum of -1 and a special printername.
Jeremy.
(This used to be commit 940b04ddfa87acc939911e3fe76496e3c4675632)
|
|
(This used to be commit f20de1f9b0dcac15fbf968e6d5d5af2fdd5fbda1)
|
|
(This used to be commit e87829b4942237de542d21051092fee069a9c73d)
|
|
(This used to be commit 62ee7b7dc08e7be261211de8f85b8e9be4df7b54)
|
|
Also tidied up some of Richard's code (I don't think he uses the compiler
flags -g -Wall -Wshadow -Wstrict-prototypes -Wpointer-arith -Wcast-qual like
I do :-) :-).
Jeremy.
(This used to be commit 10024ed06e9d91f24fdc78d59eef2f76bf395438)
|
|
(This used to be commit 8af12875b0608b83187e4156843e37097de4cd13)
|
|
place.
Jeremy.
(This used to be commit e46e38beabe8ae5b1ba1941dcffecbc89165ce2a)
|
|
Jeremy.
(This used to be commit 4d9b205362997f897be4739efd52ee2cfde4c6cb)
|
|
This is not 100% the same as what SuSE shipped in their Samba, there is
a crash bug fix, a race condition fix, and a few logic changes I'd like to
discuss with Andreas. Added Andreas to (C) notices for posix_acls.c
Jeremy.
(This used to be commit a81d700ae9c82d4b7ea631ab7862162a2ed3d512)
|
|
Jeremy.
(This used to be commit ff537f10a0c0b6b1d9055eb776d1e8a9864e8363)
|
|
Volker
(This used to be commit 1f702dcd2ced6f64a619e3ddbb570f41f7f0986b)
|
|
Currently this calls back to mapping.c, but we have the framework
to get the information into LDAP and the passdb.tdb (should we? I
think so..).
This has received moderate testing with net rpc vampire and
usrmgr. I found the add_groupmem segfault in add_aliasmem as
well, but that will be another checkin.
Volker
(This used to be commit f30095852fea19421ac8e25dfe9c5cd4b2206f84)
|
|
Volker
(This used to be commit 382c444225fae54ae577baae8948a64a843a2afc)
|
|
Volker
(This used to be commit 32d6bcf3acefc77873a7241cc0c7e26241a65301)
|
|
(This used to be commit 64a159144483457887df2c6d779e6a139dfc6d1f)
|
|
(This used to be commit b130c681d2e8e6dcabe8cfd85dd718a294b04233)
|
|
The actual design change is relitivly small however:
It all goes back to jerry's 'BOOL store', added to many of the elements in a
SAM_ACCOUNT. This ensured that smb.conf defaults did not get 'fixed' into
ldap. This was a great win for admins, and this patch follows in the same way.
This patch extends the concept - we don't store values back into LDAP unless
they have been changed. So if we read a value, but don't update it, or we
read a value, find it's not there and use a default, we will not update
ldap with that value. This reduced clutter in our LDAP DB, and makes it
easier to change defaults later on.
Metze's particular problem was that when we 'write back' an unchanged value,
we would clear any muliple values in that feild. Now he can still have his
mulitivalued 'uid' feild, without Samba changing it for *every* other
operation.
This also applies to many other attributes, and helps to eliminate a nasty
race condition. (Time between get and set)
This patch is big, and needs more testing, but metze has tested usrmgr, and
I've fixed some pdbedit bugs, and tested domain joins, so it isn't compleatly
flawed ;-).
The same system will be introduced into the SAM code shortly, but this fixes
bugs that people were coming across in production uses of Samba 3.0/HEAD, hence
it's inclusion here.
Andrew Bartlett
(This used to be commit 7f237bde212eb188df84a5d8adb598a93fba8155)
|
|
(This used to be commit b507dba452ecbd96ec95242f761501d0c5e0d7b5)
|
|
(This used to be commit 94201672a5c3cffd145e9f04a3ddd0d17a57e73b)
|
|
* s/driverlocation/comment
* detect native mode domain and enumerate local groups
Also
* Added sendfile stats from SAMBA_2_2
(This used to be commit 764b58e2c0b3179cffe157c0ab58761b156b8423)
|
|
only in parts of srv_samr_nt is not good.
This is soo broken. :-)
Volker
(This used to be commit 74e4a3479f380b320daa0d46c0ba4daa9f98c18f)
|
|
also try to uniform names to a clean scheme.
first part.
(This used to be commit a123e05877caf90c28980be2d84b1d0b46e4fd21)
|
|
MAX_PRINT_JOBS in a queue.
Jeremy.
(This used to be commit bb58a08af459b4abae9d53ab98c15f40638ce52b)
|
|
from APP_HEAD
(This used to be commit 38c9e4299845fd77cc8629945ce2d259489f7437)
|
|
Jeremy.
(This used to be commit 1b283b649f68890b0aa450aa1ac90f1e8031a6fd)
|
|
(This used to be commit 2613d3a48a8d60c3db38406a1abd943dbe0b7d09)
|
|
group mapping not as local, but as WKN_GRP.
Volker
(This used to be commit cb05dcab2de117ea4db54af313a05905cd5a0d0a)
|
|
opened by an admin user, then used on a pipe handle created
by an anonymous user..... but they're working on security.... riiight !
Jeremy.
(This used to be commit 322d8b4c83439261cfd2ff79b557bddb1e784660)
|
|
Jeremy.
(This used to be commit 0d27cc909b4489b54e57481bd8a9494fb077dc3d)
|
|
control bits right on the SAMR pipe.
Andrew Bartlett
(This used to be commit e87948c777b59592b130da081ef5d25600455d29)
|
|
better job of working with usrmgr. Previously we were blanking out entires,
and all sort of mischif.
The new patch (which I've now had a chance to test/modify) also takes care not
to expand % values (ie we go \\%L\%U -> \\server\user, we don't want to store
\\server\user back) and to correctly notice 'not set' compared to 'null string'
etc.
Andrew Bartlett
(This used to be commit ab878b6cc4132594fc33f78aeebf0d8b7266c150)
|
|
(This used to be commit 930c6710fe076b52ad21addf5fcda834f85e15a9)
|
|
to a native NT member server. If the logoff time in the samlogon reply
is set to something else but infinity, the tree connect to the member
server comes back with 'bad uid'. In my traces, NT PDC sends
0x7fff.. always. Weird, but true.
I would really like others to double-check this. If you have questions
regarding the setup, feel free to ask!
Thanks!
Volker
(This used to be commit 066b163bde9419d32fe8ffe00c1841107357c138)
|
|
When creating a group you have to take care of the fact that the
underlying unix might not like the group name. This change gets around
that problem by giving the add group script the chance to invent a
group name. It then must only return the newly created numerical gid.
Volker
(This used to be commit b959419ed38e66a12b63cad3e5fbfa849f952acc)
|
|
(This used to be commit 9d6331524089d76c5832b9ba001fb0e8a05f39d7)
|
|
(This used to be commit aa52351384abace54a89c9fbfa5e4c31a8464c91)
|
|
(This used to be commit 3524a4a348686ae5144a744696606123e4a66622)
|
|
(This used to be commit 7841753a03f7fdbd2f7f22e1b184dc1891118283)
|
|
attempt_netbios_... assumed that cli_shutdown was _not_ called on
error anyway...
Volker
(This used to be commit f0c741594f0dad2da16b1d5692dd56a48b4157f1)
|
|
(This used to be commit 8021bbbd0c5fad6db45a4c862848ea667cad0b79)
|
|
(This used to be commit 97ede49e1271fa00c6ffdf9e6e3c2330ea935461)
|
|
(This used to be commit b5227f0a645fdf2358fcb880f22e4662efdfe8e3)
|
|
add the printing msg flag, only remove it. Also, we already
refcount the printer backchannel connection to add the connection
tdb flag just before after we register/deregister the notification
message handler.
Jerry please check !
Jeremy.
(This used to be commit c45364ae82e06364cbb11545d1262032e12a21b1)
|
|
(This used to be commit 6a53a9cb7c56927423dea125c65d66605fae566f)
|