Age | Commit message (Collapse) | Author | Files | Lines |
|
(This used to be commit 51d296f25152ce9d719cec777bb306ca246fc3be)
|
|
Fix escaping of DN components and filters around the code
Add some notes to commandline help messages about how to pass DNs
revert jra's "concistency" commit to nsswitch/winbindd_ads.c, as it was
incorrect.
The 2 functions use DNs in different ways.
- lookup_usergroups_member() uses the DN in a search filter,
and must use the filter escaping function to escape it
Escaping filters that include escaped DNs ("\," becomes "\5c,") is the
correct way to do it (tested against W2k3).
- lookup_usergroups_memberof() instead uses the DN ultimately as a base dn.
Both functions do NOT need any DN escaping function as DNs can't be reliably
escaped when in a string form, intead each single RDN value must be escaped
separately.
DNs coming from other ldap calls (like ads_get_dn()), do not need escaping as
they come already escaped on the wire and passed as is by the ldap libraries
DN filtering has been tested.
For example now it is possible to do something like:
'net ads add user joe#5' as now the '#' character is correctly escaped when
building the DN, previously such a call failed with Invalid DN Syntax.
Simo.
(This used to be commit 5b4838f62ab1a92bfe02626ef40d7f94c2598322)
|
|
For those who are interested, try
net ads gpo refresh mybox$
to get your machine related GPOs downloaded to /var/lib/samba/gpo_cache.
Detailed information about GPOs is currently only printed when setting a
higher debuglevel then 0.
Guenther
(This used to be commit d086babf9d2592f041cc35db3d60b4452ea953f5)
|
|
Guenther
(This used to be commit e0e44bfadbf9bce8a5d3fe969c0f6da59a0cc29e)
|
|
Guenther
(This used to be commit 581152f81919f46c547fe7193b65384d49bea00e)
|
|
things.
Guenther
(This used to be commit a597ef83c44368f81956bcd722e69b53bf205a8a)
|
|
Guenther
(This used to be commit 7df5808d8b1d9458dbd47b92750c0b128325335c)
|
|
Guenther
(This used to be commit 40a6169aceb51dc7f73ae72ebac2e55c6b1edc3f)
|
|
Guenther
(This used to be commit 01a8562fe164453af4c5946710f9e58f917df2ce)
|
|
Guenther
(This used to be commit a0aedee1c90af163210dd459603dd5dffb73e132)
|
|
routines.
Guenther
(This used to be commit 0ef504a0a6dc8f5db1dbc7f2410aa981e11fd56c)
|
|
Sync with trunk as off r13315
(This used to be commit 17e63ac4ed8325c0d44fe62b2442449f3298559f)
|