Age | Commit message (Collapse) | Author | Files | Lines |
|
logons work if the client gives the MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT
or MSV1_0_ALLOW_WORKSTATION_TRUST_ACCOUNT flags. This changes
the auth module interface to 2 (from 1). The effect of this is
that clients can access resources as a machine account if they
set these flags. This is the same as Windows (think of a VPN
where the vpn client authenticates itself to a VPN server
using machine account credentials - the vpn server checks
that the machine password was valid by performing a machine
account check with the PDC in the same was as it would a
user account check. I may add in a restriction (parameter)
to allow this behaviour to be turned off (as it was previously).
That may be on by default.
Andrew Bartlett please review this change carefully.
Jeremy.
(This used to be commit d1caef866326346fb191f8129d13d98379f18cd8)
|
|
of the Samba4 timezone handling code back into Samba3.
Gets rid of "kludge-gmt" and removes the effectiveness
of the parameter "time offset" (I can add this back
in very easily if needed) - it's no longer being
looked at. I'm hoping this will fix the problems people
have been having with DST transitions. I'll start comprehensive
testing tomorrow, but for now all modifications are done.
Splits time get/set functions into srv_XXX and cli_XXX
as they need to look at different timezone offsets.
Get rid of much of the "efficiency" cruft that was
added to Samba back in the day when the C library
timezone handling functions were slow.
Jeremy.
(This used to be commit 414303bc0272f207046b471a0364fa296b67c1f8)
|
|
Jeremy.
(This used to be commit cab76c3c33883aad444eefb6562ab1b27d9ca88a)
|
|
any potential lib/smbldap.c calls.
Jeremy.
(This used to be commit 915cfb48f08b3748e22e68ed028eaca6d558cbad)
|
|
(This used to be commit f5f40633bc3f641a0fef4934375d0d829899b0d7)
|
|
Don't count open pipes in the num_files_open on a connection.
conn_idle_all() handles this by looking for open rpc handles
If there are no open handles, we can close the IPC$ share.
(This used to be commit 747fba4dbf06c42495c430cd78c1cded3445f821)
|
|
spoolss backchannel connection by rewriting
spoolss_connect_to_client(). Ensure that we
save the cli_state* in the rpc_pipe_client struct.
* fix typo in debug message in cli_start_connection"
(This used to be commit 18400f96628ffdd332c2fb2aa52b5e9aee5cb3ce)
|
|
tdb as well to make naming consistent.
(This used to be commit ee91eb9a39cc5e3edd9e97eb040e7557930e4e62)
|
|
(This used to be commit f6f78877b485be5efd5cf1f3147b2e9fee647e52)
|
|
(This used to be commit 4e3ff41e1ee2e3c323814fd8c6aa44ecab412257)
|
|
x86_64 box.
Jeremy.
(This used to be commit d720867a788c735e56d53d63265255830ec21208)
|
|
Allocate memory in convert_printer_info() if necessary
(This used to be commit 7ada5da8e94a08a9a3e488172fa04ce688882299)
|
|
(This used to be commit e858eed813b5a9a8d57262142c5bbde2951b5590)
|
|
(This used to be commit bfdcbb7572352b3a3b7941249438a927eb91e18d)
|
|
(This used to be commit 1bcf7e82ede63a851a244162a3b939373787b693)
|
|
_srv_net_name_validate()
(This used to be commit b4e78520ccb8c896a52e3f3e7a52e19e3b2c33bf)
|
|
This gets it working before replacing tdb with the samba4 version.
(This used to be commit 8210b0503a050e12ee1b4335fa6e50d10ad06577)
|
|
* only keep the registry,tdb file open when we have an open key handle
* tpot's setup.py fix
* removing files that no longer exist in trunk and copying some
that were missing in 3.0
(This used to be commit 6c6bf6ca5fd430a7a20bf20ed08050328660e570)
|
|
Jeremy.
(This used to be commit 30bd894ee63e5be266b6069533138ccb3c0fbccb)
|
|
Based on the Samba4 solution - stores data in
$samba/private/schannel_store.tdb.
This tdb is not left open but open and closed on demand.
Jeremy.
(This used to be commit a6d8a4b1ff31c5552075455dbd98cb58795958a9)
|
|
(This used to be commit f10aa9fb84bfac4f1a22b74d63999668700ffaac)
|
|
Jeremy.
(This used to be commit 86ffef8162393be3da81fda13772f0f1d40b0d08)
|
|
Ensure that the mach_acct and remote machine entries are
set correctly in struct dcinfo - we'll need this as a key
for a persistent schannel state later.
Jeremy.
(This used to be commit 47269b5c7161d740c2e86227de3acd9e08c53817)
|
|
* \PIPE\unixinfo
* winbindd's {group,alias}membership new functions
* winbindd's lookupsids() functionality
* swat (trunk changes to be reverted as per discussion with Deryck)
(This used to be commit 939c3cb5d78e3a2236209b296aa8aba8bdce32d3)
|
|
(This used to be commit b41f997a2a67f7dc60b300866b38f72846c600fb)
|
|
Jeremy.
(This used to be commit e1c9813d63a441037bc71622a29acda099d72f71)
|
|
access_checks()
(This used to be commit 35b338a4fc95c14629579336dcf3bd240fda92d3)
|
|
(This used to be commit 24901187962e24bfa5ba7722aba0aeb9397ac7b6)
|
|
local group attributes (posted to samba ml and confirmed fix)
(This used to be commit 005d4cb3c636383ccf70c4891cd7cc4bd3b48ad2)
|
|
Guenther
(This used to be commit 12029e902277053a4066eae1b3ae311fae5e6422)
|
|
(This used to be commit 9c51aa5bd2862d73663c4148eff3080341010405)
|
|
(This used to be commit 623d2e69319ffead31a780a4d6156dae45f386d7)
|
|
Add a comment so someone else doesn't get bitten by this as well.
(This used to be commit 050364ef34b1e69260bd9df9e2140c45263e92f5)
|
|
the new talloc() features:
Note that the REGSUB_CTR and REGVAL_CTR objects *must* be talloc()'d
since the methods use the object pointer as the talloc context for
internal private data.
There is no longer a regXXX_ctr_intit() and regXXX_ctr_destroy()
pair of functions. Simply TALLOC_ZERO_P() and TALLOC_FREE() the
object.
Also had to convert the printer_info_2->NT_PRINTER_DATA field
to be talloc()'d as well. This is just a stop on the road to
cleaning up the printer memory management.
(This used to be commit ef721333ab9639cb5346067497e99fbd0d4425dd)
|
|
ldapsam code
(This used to be commit 62f9fb5e3a9bce539c9fedc5fdec1b8741a922c7)
|
|
(This used to be commit a769aaec88257ae006c61f0fcfd98efd4b639268)
|
|
(This used to be commit abe2ab72e6b1d53dbe04d02882e4fee9cb34dec7)
|
|
(This used to be commit e1fc7d89c26b671e77c7cb14e03690091b671b1d)
|
|
(This used to be commit bfebbc86fc0f90e580888da25006d8e5e50b6304)
|
|
defined locally because if we didn't find them as a DC we were marking
the response as authoritative. Now if it's not a domain we know, we
mark the response non-authoritative.
Fix from jpjanosi@us.ibm.com
(This used to be commit d522277b86ff728f6f2b9feb2f8e3fa38c43d162)
|
|
the user,
causing netlogon to return an invalid response for failed interactive logons.
(This used to be commit 4deb918b682fb51d8712cfdafc6210275dd10fc4)
|
|
allow admins to uncheck the "User must change Password at next Logon"
checkbox in Usermanager.
Guenther
(This used to be commit b1e4b72c1c36869c4dfc5ed284be24edc99f6774)
|
|
(This used to be commit 3a633a509e8e8e5239d456960f3014172f1e4b3d)
|
|
(This used to be commit ff6e3464a2df7fd8a79da8f059a080934d9b3749)
|
|
(This used to be commit c3e14230387d8644152cf7e1f612a7ca7ec6f583)
|
|
NT_STATUS_NO_USER returned. We were moving to the next step in the
chain when the client wasn't. Only update when the user logs on.
(This used to be commit b01a3a4111f544eef5bd678237d07a82d1ce9c22)
|
|
debuglevel 10
(This used to be commit f5756c2611df5a026d78f8acb229d7c25f1fd383)
|
|
Should fix usermgr on W2K3 SP1.
Jeremy.
(This used to be commit 592ec9fbffc704761c6b29cfc795cf3af7d5fe38)
|
|
RPC-SPOOLSS).
Guenther
(This used to be commit 06bfe789d54a12dfa3c46e9777f96ff7e162a9db)
|
|
more then 511 users.
After the rewrite, the old NT_STATUS-semantics didn't fit any longer.
Guenther
(This used to be commit 690da51d835fd780b16d8ce6521957146c90da78)
|