summaryrefslogtreecommitdiff
path: root/source3/sam
AgeCommit message (Collapse)AuthorFilesLines
2003-05-02shouldn't wellknown group be well.. ..WKN_GRP ?Simo Sorce1-1/+1
make a new sam_Account contain our domain by default, windows will complain on logon otherwise. fix stupid typo in idmap_util.c (This used to be commit 21701876dc6c59ebfc51be708a98226a00a764e0)
2003-05-01fix wrong debug messages in idmap_util.cSimo Sorce1-2/+2
correctly handle allocated rids in tdbsam (This used to be commit 7ae6162e1dd668897628c4f7edff508616644d21)
2003-05-01init wellknown in pdbedit tooSimo Sorce1-24/+20
add group mapping mappings to idmap at startup (This used to be commit 62365023db61d5a4fa32845af3db73bce6cb94ea)
2003-05-01proper wellknown sids initialization at startupSimo Sorce1-0/+46
(This used to be commit 568feee8977ee1be210344c8ab1896512894cba2)
2003-05-01*id_to_*id call reshape to return NTSTATUS errorsSimo Sorce3-102/+128
plus internal fixes 1st stage (This used to be commit 6d036761e565bc93964bb3c939d5b7d78d5778a3)
2003-04-30correctly initiazlize idmap tdb when creationg newSimo Sorce2-94/+168
few fixes to *id_to_*id functions, we don't set the mapping for algoritmic RIDs, they are resolved in the classic way eliminate getpw* calls from tdbsam (This used to be commit 6a7689cf74cd4d5f29e0b12f4bf8ac3051d49157)
2003-04-30auto-init for utility functionsSimo Sorce1-0/+18
(This used to be commit db571a9fd7fbce1c13ed652616ad9725db00b49f)
2003-04-29This is a nice rewrite:Simo Sorce2-16/+19
SAM_ACCOUNT does not have anymore uid and gid fields all the code that used them has been fixed to use the proper idmap calls fix to idmap_tdb for first time idmap.tdb initialization. auth_serversupplied_info structure has now an uid and gid field few other fixes to make the system behave correctly with idmap tested only with tdbsam, but smbpasswd and nisplus should be ok have not tested ldap ! (This used to be commit 6a6f6032467e55aa9b76390e035623976477ba42)
2003-04-29forgot to add the file where things movedSimo Sorce1-0/+189
(This used to be commit 3c2963f8e3f98ecae9fe59336c35000cf4d386c5)
2003-04-29consolidate idmap code in one placeSimo Sorce1-1/+1
(This used to be commit f7041ec5d74475013c839b5ea9ecac10322e5e65)
2003-04-27make winbind use idmap as well.Simo Sorce2-159/+3
change idmap_init call removed ldap backend for winbind idmap, seem it had problems anyway and it have to be reworked to work with idmap without calling winbind code. simo (This used to be commit 9d7d007443fc75264b2764b90f272ffc40c9be6c)
2003-04-26enhancementsSimo Sorce1-5/+27
(This used to be commit ff051e9cf4b468aa9fe7e3f84483571d3d2de556)
2003-04-26add idmap only parameterSimo Sorce1-0/+29
make idmap not map SIDs outside the uid/gid range defined by default this is to keep backward compatibility (This used to be commit bec45093c379915082d7b7f44113f5c17110d123)
2003-04-24Patch from Stefan Metzmacher to add default parameters to the lp_parm()Jelmer Vernooij1-3/+3
smb.conf parameters along with some other small fixes. Binary compatible with older modules. (This used to be commit aa07b12fda732ca19d8dc41cebc7bb09e2549a30)
2003-04-19fixesSimo Sorce2-5/+18
fix debug, add "idmap" string to the list of classes fix idmap, check init failures, and enhance debugging fix idmap_tdb, _do_ init uid and gid low,high states (too bad I missed that before) fix smbd/uid.c, use gid_t for gids and uid_t for uids (This used to be commit bc95de4ebb014080bc70173e7df94c672cea8df6)
2003-04-17seem that someone changed the semanthic of unix_strlower without fixing allSimo Sorce2-5/+8
places where it was used, this caused me segfaults in the last week :( add more debugging in idmap to chase down a problem (This used to be commit 6393105bda12fb3f6211e4f0128aabf588431b49)
2003-04-16NTSTATUS strings are much more use than raw numbers...Andrew Bartlett1-2/+2
(This used to be commit aeaa60c8432fe06ad51bac52f473e5fdc6c00afc)
2003-04-08some more debugging in case of failureSimo Sorce2-3/+4
(This used to be commit 9374f8692f6587b5f773c72b7847b64edeee9614)
2003-04-06fix commitSimo Sorce1-2/+2
(This used to be commit ad1a2ab0d6330a0b0fbce7b30ec5f6f502133921)
2003-04-06This commit make winbindd copy winbindd_idmap.tdb into idmap.tdb on theSimo Sorce2-150/+18
first run if idmap.tdb is not found, and then eventually convert it to the new format. This is done to unify winbind and idmap databases and to make a backup of winbindd_idmap.tdb in case you want to downgrade (of course it will not be updated). This is needed because idmap.tdb contains also local mappings, not only foreign domains mappings. Added some other fixes/improvements Simo. (This used to be commit cf17261519fd8775500f9b9d6caa2bc462e04633)
2003-04-05some more idmapping :)Simo Sorce1-18/+61
(This used to be commit 5ac94535d7b7ce0cc0d44b9a77d6e42ddfd0cd26)
2003-04-04Fixed compiler warning.Tim Potter1-1/+1
(This used to be commit 9c706be7b4417a1dc36866c3bad7a156f30b8af6)
2003-04-02THE Idmap patch :-)Simo Sorce3-85/+170
includes a --with-idmap=no switch to disable idmap usage if you find problems. cosmetic fixes and param aliases to separate winbind from idamp roles. A temporarily remote idmap winbind compatibility backend. As I have time I will further change code to not call directly winbind (partly done but not tested) and a specilized module will be built in place for the current glue hack. The patch has been tested locally in my limited time, the patch is simple and clear and should not reserve problems, if any just disable it. As usual, comments and fisex are welcome :-) Simo. (This used to be commit 02781320476ed1b7ee5d943fa36f9a66ab67f208)
2003-03-22- Use FUNCTION_MACRO, not __FUNCTION__.Jelmer Vernooij1-2/+2
- Add some const (This used to be commit e149e70717f38e082ce35d55f9b4d84ba8419af7)
2003-03-08more on idmapSimo Sorce2-69/+192
two layers structure with - local tdb cache - remote idmap repository compiles (This used to be commit 8fb4e210bc7564ed491d121c20d598ba0bfbddff)
2003-03-08some more codeSimo Sorce2-0/+472
(not tested yet) (This used to be commit 0d6cec90c13731827abcbc61974efc993e794003)
2003-03-07initial work for the new idmpa interfaceSimo Sorce1-0/+145
(This used to be commit 8338e74ac4e5f31150c96f459a67e52090dc6013)
2003-03-07Some progress towards gums and tdbsam2Simo Sorce4-210/+1076
genparser works fine, and it is a marvelous tool to store objects in tdb :) (This used to be commit 4c6d461a8572f03cd33cba95500cc837638b732c)
2002-12-28some more work on gums.Simo Sorce3-36/+533
- Building a tdbsam2 backend to see what I got right and what not about the proposed API - Corrections to API based on tdbsam2 work (This used to be commit 54f11b7de84233209b7db2d01d876f9c6c6340d6)
2002-12-23Finish adding strings to all talloc_init() calls.Jeremy Allison1-1/+1
Jeremy. (This used to be commit 784d15761c3271bfd602866f8f9f880dac77671c)
2002-12-22talloc_init_named -> talloc_init.Jeremy Allison6-10/+10
Jeremy. (This used to be commit 20a44d4cf11d91e7a09176bfe673ad0cb230dffe)
2002-12-16updates to the gumsSimo Sorce2-90/+539
introduce genparser will be used by tdbsam2 (This used to be commit 831d3d1ec751f23481f26b31d22b09f3d9c0709a)
2002-12-04Remove FILE_MACRO as __FILE__ is ANSI C.Tim Potter1-1/+1
(This used to be commit 2a9d183cf6ae8333dc7d9d9445c17dce005c1d24)
2002-12-03use FILE_MACRO instead of __FILE__Herb Lewis3-42/+42
use FUNCTION_MACRO instead of __FUNCTION_ (This used to be commit 243763d6eb107ab2444d81025232c8fe795baaf1)
2002-10-22Some was asking to look at this code, so better it stay there until we ↵Simo Sorce4-0/+1622
decide what to do with it. Last updates are support for the right way to support privileges. Simo. (This used to be commit cae9074405dec5baf6bd34d48f36e2c81b24d2ea)
2002-10-21Sync with metze's CVS treeJelmer Vernooij1-79/+253
(This used to be commit 2a598d435d3eb46ca28b3591a4f7f9d856ce3c1f)
2002-10-14Don't use SAM FLAGS from smb.h since they're gone - patch from metzeJelmer Vernooij2-32/+3
(This used to be commit 82a0abf4c84ddd0672b3c5ea4ba9759abd6778c6)
2002-10-06try to put every security descriptors related definitions in the same file.Simo Sorce1-2/+2
also try to uniform names to a clean scheme. first part. (This used to be commit a123e05877caf90c28980be2d84b1d0b46e4fd21)
2002-10-02strchr -> strrchrJelmer Vernooij1-1/+1
(This used to be commit 598039599ca7c38a42ae75cf345c01b3cf3881ff)
2002-09-29Remove sam/api.c.Andrew Bartlett2-773/+547
In order to reduce complexity, this patch removes the upper layer of the SAM API. Also, we remove the function pointers on the sam context - there really is no point making these replaceable - that's for the modules. Move a number of functions in include/interface.c around to allow for use of 'static' and to keep the external API in one chunk, at the bottem. All these functions were renamed to remove the context_sam -> sam Consequential changes in the samtest module, and back out metze's change for ACB filtering, becouse I think it belongs in the SAM backeds. (But I will take debate on this one). Changes to the lib/util_sid.c code to create a 'system' token, and make it a SAM_ASSERT() enforced requirement to have a token on those calls that specify it. samtest now uses this. We should have a samtest call to set your own token. We also need to extend our se_access code to cover the things that Win2k is returning in it's access tokens. Currently our system token doesn't pass, due to unexpected flags. (When running sam_ads against Win2k) Andrew Bartlett (This used to be commit b9036900d0bb227ec16c6a5792c18ef943dcf015)
2002-09-29Updates for sam_ads by metze - add the start of domain policy searching, and aAndrew Bartlett1-25/+150
small fix for the previous merge. Andrew Bartlett (This used to be commit 85122800fce7a6f9eeee0651f6d9eb9218e35bb6)
2002-09-28Fix typos + report FIXMEJelmer Vernooij1-5/+5
(This used to be commit 470a1316324821984745bcf7321bafd8d0fd0a77)
2002-09-28Back out one of the API changes, now I recall how it was meant to work.Andrew Bartlett4-6/+258
(New accounts are created on thier internal talloc context, not a supplied one and not the one beloning to the SAM) Also actaully add the sam_skel to the tree. I need to work out with Jelmer an appropriate way to ensure we still have an example external build, and if this should move back out again. Andrew Bartlett (This used to be commit dc8b0d23e088d1e7f7fbc6ab0423eaa82f14e258)
2002-09-28Add the beginings of sam_ads to the tree.Andrew Bartlett3-17/+1100
This module, primarilly the work of "Stefan (metze) Metzmacher" <metze@metzemix.de>, uses the Active Directory schema to store the user/group/other information. I've been testing it against a real AD server, and it is intended to work with OpenLDAP as well. I've moved a few functions around in our other libads code, which has made it easier to tap into that existing code. Also, I've made some changes to the SAM interface, I hope there are not too many objections... To ensure we don't get silly bugs in the skel module, it is now in the default compile. This way you should not forget to update it :-) Andrew Bartlett (This used to be commit 24fb0cde2f0b657df1c99474cd694438c94a566e)
2002-09-26Fix segfault in sam_context_enum_domains - reported by KaiJelmer Vernooij1-0/+1
(This used to be commit 1430473d3fdcc8e711fe483b84dfeefa6bd54905)
2002-09-25Add samtest command 'enum_accounts' + few typo fixes in sam/interface.cJelmer Vernooij1-3/+1
(This used to be commit 81156d6556dab2ea23dea69da6940a0482d79d9b)
2002-09-24enum_domains shouldn't crash when there are no domains availableJelmer Vernooij1-4/+0
(This used to be commit d312e1c2b44905af87c4d550975eee78dbf2edee)
2002-09-24Fix bug in get_methods_by_nameJelmer Vernooij1-10/+9
Fix bug in enum_domains Add samtest commands: - lookup_sid - lookup_name - enum_domains - lookup_domain (This used to be commit 0c01219850e5d9b77b3b2c0b4b87aa3c82e3292b)
2002-09-24- Don't put pointer to sam_domain_handle in sam_methods but single domainsid ↵Jelmer Vernooij2-19/+26
and domainname - Allocate sam_methods, set domain_sid, domain_name and backend_name in make_sam_methods_backend_entry instead of in the backend - Remove sam_context and domain_sid pointers from the sam_init_function - we don't need those arguments anymore since they're available in sam_methods as well (This used to be commit 50d2527eed0eb26c16f2f7e28badbf08d771380e)
2002-09-19Move functionality to check whether entries for lp_workgroup() and "BUILTIN"Jelmer Vernooij2-69/+98
exist and add them if necessary from check_correct_backend_entries into sam_context_check_default_backends. The reason for this is that we don't always want to have BUILTIN and lp_workgroup() in a sam_context, for example when doing sam2sam. check_correct_backend_entries has been renamed to 'check_duplicate_backend_entries' since that's what it currently does. The sam_context_check_default_backends() function is only called by sam_get_static_context(BOOL reload) currently currently. (This used to be commit 2fe72652ee468bf5e1f8f151215f45b10f4c8a28)