summaryrefslogtreecommitdiff
path: root/source3/utils/net_ads.c
AgeCommit message (Collapse)AuthorFilesLines
2008-03-07Enable libnetjoin debugging for now but avoid printing passwords.Günther Deschner1-2/+2
The gen_ndr needs proper fixing still. Guenther (This used to be commit 966d7244d7765d285a7026b97e6093fd1f8d83ce)
2008-03-04Move talloc_init to the right place in "net ads join".Günther Deschner1-6/+6
Guenther (This used to be commit 8cd07c1fa8f435f7ff3dc79c195da9324fb2452f)
2008-02-28Remove original copy of now redundant join code.Günther Deschner1-330/+0
Jerry, I checked this very carefully that nothing got lost. The only thing I need to re-add still is the normalized DN handling for account precreation in "net ads join". Guenther (This used to be commit a5c6347644f2aa138a8e67ffe6c167847df941d0)
2008-02-28Some fixes for net ads join (uninitialized vars).Günther Deschner1-9/+8
Guenther (This used to be commit 735235e32bf41a7564ce2d585c1dae187b00bf6b)
2008-02-28Use libnet_Join() for "net ads join".Günther Deschner1-150/+33
Guenther (This used to be commit 9a7a2777e4ea1a2b5d7c800af8522b38cf22c511)
2008-02-28Nicen error output in net_ads_leave.Günther Deschner1-2/+3
Guenther (This used to be commit b0d1db95e5d7590f9c67be7bf5cb78adfee16635)
2008-02-28Re-arrange dns update block during "net ads join" a little.Günther Deschner1-20/+22
Guenther (This used to be commit 5d30e9f9fef98de7764ae53d3cbe659b78ae9fce)
2008-02-28Use libnet_Unjoin() for "net ads leave".Günther Deschner1-47/+37
Guenther (This used to be commit 11a19e88e208e09d7590370f2e68aa1df5c89e31)
2008-02-28Some cosmetics for net_derive_salting_principal().Günther Deschner1-3/+1
Guenther (This used to be commit 6f8e83b43085c038bb8fb2500319fed1daf6e4e4)
2008-02-17Fix some more callers of PAC_DATA.Günther Deschner1-3/+5
Guenther (This used to be commit ea609d1b0e82d7c366dd73013228003136264b64)
2008-01-15Apply const to rpccli_lsa_query_info_policy() and ↵Günther Deschner1-3/+4
rpccli_lsa_query_info_policy2(). Guenther (This used to be commit 7a3fe68bef7acde9d9f8a7a44ce7e9432f3c5a95)
2008-01-15Fix some warnings -- Jeremy, please checkVolker Lendecke1-6/+5
(This used to be commit b66ac8567c16f2c35fceceba2f858d5503620309)
2008-01-10Remove unused string.Günther Deschner1-3/+0
Guenther (This used to be commit 88d6683872f4bb9c3074280f385f73c7af9de784)
2008-01-08Use ads_get_upn() in net_derive_salting_principal().Günther Deschner1-15/+1
Guenther (This used to be commit a3b348b113f248d2eccffd6073560619a97a2976)
2007-12-10Remove the char[1024] strings from dynconfig. ReplaceJeremy Allison1-4/+4
them with malloc'ing accessor functions. Should save a lot of static space :-). Jeremy. (This used to be commit 52dc5eaef2106015b3a8b659e818bdb15ad94b05)
2007-12-04The usual !pstring...Jeremy Allison1-4/+9
Jeremy. (This used to be commit b676262a781363e7be49b21817668a53cca75c2d)
2007-11-30Move param helper routines to one place.Günther Deschner1-14/+0
Guenther (This used to be commit 6bf2c8038c4bc7a52b7f260209ade0bdeb95c685)
2007-11-27Remove some staticsVolker Lendecke1-2/+5
(This used to be commit 1fab16ffb888cd4ec18e52d9da33976a67a5d104)
2007-10-24This is a large patch (sorry). Migrate from struct in_addrJeremy Allison1-15/+21
to struct sockaddr_storage in most places that matter (ie. not the nmbd and NetBIOS lookups). This passes make test on an IPv4 box, but I'll have to do more work/testing on IPv6 enabled boxes. This should now give us a framework for testing and finishing the IPv6 migration. It's at the state where someone with a working IPv6 setup should (theorecically) be able to type : smbclient //ipv6-address/share and have it work. Jeremy. (This used to be commit 98e154c3125d5732c37a72d74b0eb5cd7b6155fd)
2007-10-18RIP BOOL. Convert BOOL -> bool. I found a few interestingJeremy Allison1-10/+10
bugs in various places whilst doing this (places that assumed BOOL == int). I also need to fix the Samba4 pidl generation (next checkin). Jeremy. (This used to be commit f35a266b3cbb3e5fa6a86be60f34fe340a3ca71f)
2007-10-10r25201: Fight those red bars...Michael Adam1-182/+183
(This used to be commit cc4599fdc1fb9aa51f6a4487cb1aa78a5556757a)
2007-10-10r25200: Fix a debug message.Michael Adam1-1/+1
(This used to be commit f1f4758e2c40a470c19b4b738f79ec5807522909)
2007-10-10r25198: Change net_rpc_join_ok() to return NTSTATUS for betterMichael Adam1-2/+6
error propagation. Michael (This used to be commit 5a16da2185f07d1f48fabd93a7a6b8f2d6b91089)
2007-10-10r24853: Rename function as Jerry asked.Rafal Szczesniak1-2/+2
s/net_use_upn_machine_account/net_use_krb_machine_account/ rafal (This used to be commit 86af9fedad71697f22cc739518340f7753b8f9da)
2007-10-10r24789: Add implementation of machine-authenticated connection to netlogonRafal Szczesniak1-2/+2
pipe used when connecting to win2k and newer domain controllers. The server may be configured to deny anonymous netlogon connections which would stop domain join verification step. Still, winnt domains require such smb sessions not to be authenticated using machine credentials. Creds employed in smb session cannot have a username in upn form, so provide the separate function to use machine account. rafal (This used to be commit 30d99d8ac3379caadc5bdb353977149d1ee16403)
2007-10-10r24432: Expand kerberos_return_pac() so that it can be used in winbindd.Günther Deschner1-1/+8
Guenther (This used to be commit e70bf0ecc3ec6d3ba8ba384024bbdf9a783072ea)
2007-10-10r24107: Fix bug 4849. Thanks to Matthijs Kooijman <matthijs@stdin.nl>Volker Lendecke1-1/+1
(This used to be commit 6e6eea64a5f770a585487734b1d0c28746bf5550)
2007-10-10r23973: For debugging, add (undocumented) net ads kerberos commands (kinit, ↵Günther Deschner1-0/+111
renew, pac). Guenther (This used to be commit 4cada7c1485c9957e553d6e75cb6f30f4338489f)
2007-10-10r23968: Harmonize net's password prompts.Günther Deschner1-5/+2
Guenther (This used to be commit 7e2fb14d6e4f58fe6645b7e7468f925c21cb4c9d)
2007-10-10r23888: move elements belonging to the current ldap connection to aStefan Metzmacher1-13/+13
substructure. metze (This used to be commit 00909194a6c1ed193dfdb296f50f58a53450583c)
2007-10-10r23834: Allow to pass an ADS_STRUCT pointer down to the dump function ↵Günther Deschner1-1/+1
callback in libads. Guenther (This used to be commit 311bbbafa6d860b7b632beac6d9249b0a2fafb86)
2007-10-10r23784: use the GPLv3 boilerplate as recommended by the FSF and the license textAndrew Tridgell1-2/+1
(This used to be commit b0132e94fc5fef936aa766fb99a306b3628e9f07)
2007-10-10r23779: Change from v2 or later to v3 or later.Jeremy Allison1-1/+1
Jeremy. (This used to be commit 407e6e695b8366369b7c76af1ff76869b45347b3)
2007-10-10r23648: Allow to list a custom krb5 keytab file with:Günther Deschner1-3/+10
net ads keytab list /path/to/krb5.keytab Guenther (This used to be commit a2befee3f240543ea02ea99cebad886b54ae64eb)
2007-10-10r22954: More messaging_registerVolker Lendecke1-6/+0
(This used to be commit 9b8df24107ffe3016031e5257c5680689f061886)
2007-10-10r22736: Start to merge the low-hanging fruit from the now 7000-line cluster ↵Volker Lendecke1-1/+1
patch. This changes "struct process_id" to "struct server_id", keeping both is just too much hassle. No functional change (I hope ;-)) Volker (This used to be commit 0ad4b1226c9d91b72136310d3bbb640d2c5d67b8)
2007-10-10r22729: add help text for osver and osname options to 'net ads join' (patch ↵Gerald Carter1-1/+6
from Dnailo A.) (This used to be commit 3f588e0b65433176f8f80312c1456836717cf6de)
2007-10-10r22728: Patch from Danilo Almeida <dalmeida@centeris.com>:Gerald Carter1-9/+31
When asked to create a machine account in an OU as part of "net ads join" and the account already exists in another OU, simply move the machine object to the requested OU. (This used to be commit 3004cc6e593e6659a618de66f659f579e71c07f7)
2007-10-10r22479: Add "net ads keytab list".Günther Deschner1-1/+9
Guenther (This used to be commit 9ec76c542775ae58ff03f42ebfa1acc1a63a1bb1)
2007-10-10r21888: Add the osname and osver options to 'net ads join' as discussedGerald Carter1-1/+94
on the samba-technical ml. I'll add a 'net ads set attribute=value' utility later rather than the original 'net ads setmachineupn' patch that was also posted to the tech ml. (This used to be commit 5035778ae4b3a5e445faa535c5caf00bc8d220d8)
2007-10-10r21609: Fix memory leaks in error code paths (and one in winbindd_group.c).Jeremy Allison1-0/+9
Patch from Zack Kirsch <zack.kirsch@isilon.com>. Jeremy. (This used to be commit df07a662e32367a52c1e8473475423db2ff5bc51)
2007-10-10r21608: Fix a couple of memleaks in error code paths beforeJeremy Allison1-1/+10
Coverity finds them :-) Jeremy. (This used to be commit cbe725f1b09f3d0edbdf823e0862edf21e16d336)
2007-10-10r21606: Implement escaping function for ldap RDN valuesSimo Sorce1-1/+11
Fix escaping of DN components and filters around the code Add some notes to commandline help messages about how to pass DNs revert jra's "concistency" commit to nsswitch/winbindd_ads.c, as it was incorrect. The 2 functions use DNs in different ways. - lookup_usergroups_member() uses the DN in a search filter, and must use the filter escaping function to escape it Escaping filters that include escaped DNs ("\," becomes "\5c,") is the correct way to do it (tested against W2k3). - lookup_usergroups_memberof() instead uses the DN ultimately as a base dn. Both functions do NOT need any DN escaping function as DNs can't be reliably escaped when in a string form, intead each single RDN value must be escaped separately. DNs coming from other ldap calls (like ads_get_dn()), do not need escaping as they come already escaped on the wire and passed as is by the ldap libraries DN filtering has been tested. For example now it is possible to do something like: 'net ads add user joe#5' as now the '#' character is correctly escaped when building the DN, previously such a call failed with Invalid DN Syntax. Simo. (This used to be commit 5b4838f62ab1a92bfe02626ef40d7f94c2598322)
2007-10-10r21064: The core of this patch isVolker Lendecke1-1/+1
void message_register(int msg_type, void (*fn)(int msg_type, struct process_id pid, - void *buf, size_t len)) + void *buf, size_t len, + void *private_data), + void *private_data) { struct dispatch_fns *dfn; So this adds a (so far unused) private pointer that is passed from message_register to the message handler. A prerequisite to implement a tiny samba4-API compatible wrapper around our messaging system. That itself is necessary for the Samba4 notify system. Yes, I know, I could import the whole Samba4 messaging system, but I want to do it step by step and I think getting notify in is more important in this step. Volker (This used to be commit c8ae60ed65dcce9660ee39c75488f2838cf9a28b)
2007-10-10r20903: Replace the hardcoded "smb.conf" string with the dyn_CONFIGFILEGerald Carter1-6/+7
(This used to be commit ff8f27108d247aa9e46176f2b29fc8d2da103906)
2007-10-10r20857: Silence gives assent :-). Checking in the fix forJeremy Allison1-10/+2
site support in a network where many DC's are down. I heard via Volker there is still a bug w.r.t the wrong site being chosen with trusted domains but we'll have to layer that fix on top of this. Gd - complain if this doesn't work for you. Jeremy. (This used to be commit 97e248f89ac6548274f03f2ae7583a255da5ddb3)
2007-10-10r20173: DNS update fixes:Gerald Carter1-44/+62
* Fix DNS updates for multi-homed hosts * Child domains often don't have an NS record in DNS so we have to fall back to looking up the the NS records for the forest root. * Fix compile warning caused by mismatched 'struct in_addr' and 'in_addr_t' parameters called to DoDNSUpdate() (This used to be commit 3486acd3c3ebefae8f98dcc72d1c3d6b06fffcc7)
2007-10-10r20119: Update help info indicating how to use separators (forward slash only)Jim McDonough1-0/+2
and properly use backslashes in "net ads join computername=" (This used to be commit cc26e2f9a155529b8ac2122bd2bec401bb516264)
2007-10-10r19766: Fix a const-warning. Jerry, what did you want to fix with this line?Volker Lendecke1-1/+0
Volker (This used to be commit 55dc4741cfead0f21deb7ea2d28afb240505686b)
2007-10-10r19762: libaddns/*[ch] code fixes donated by Centeris CorporationGerald Carter1-62/+144
(http://www.centeris.com/) under my copyright. * Rework error reporting to use DNS_ERROR instead of int32 * Convert memory allocation to use talloc() * Generalize the DNS request/response packet marshalling * Fix the secure update requests (This used to be commit c78798333616c3f823514df0f58da2eb3a30a988)