Age | Commit message (Collapse) | Author | Files | Lines |
|
support from HEAD -> 3.0
Andrew Bartlett
(This used to be commit 89d8ebd520e2a441e6d5b6b8adb6c483b0131adc)
|
|
(This used to be commit 6b218da6453032339f2451a434d14894050dd1b5)
|
|
big endian and little endian systems.
(This used to be commit f50051120f93b5f95f72dcb3df201979e6302f5b)
|
|
(This used to be commit 8f45315b913a9574dfeedaadf5560d143b38ca05)
|
|
say exactly the same thing - in particular that we can algorithmic rid base ==
1000, and use the BASE_RID macro to avoid the use of magic numbers.
Andrew Bartlett
(This used to be commit b70f2a8047ac549841bc103932b38951e9814186)
|
|
Volker
(This used to be commit ce5b2d991b42bbf6865ff75194f8ee4b46694841)
|
|
Thanks to Andrew Brtlet for the diff :-)
(This used to be commit cf67981e73cf52803eae589a6b86e1274bf72d2c)
|
|
(This used to be commit 82f6b264037a2f1b882dc75bc43c6c8b41477270)
|
|
The work here includes:
- metze' set/changed patch, which avoids making changes to ldap on unmodified
attributes.
- volker's group mapping in passdb patch
- volker's samsync stuff
- volkers SAMR changes.
- mezte's connection caching patch
- my recent changes (fix magic root check, ldap ssl)
Andrew Bartlett
(This used to be commit 2044d60bbe0043cdbb9aba931115672bde975d2f)
|
|
You must make two passes over NTUSER.DAT, one for the OWNER SID and one for
GROUP SID.
I have not tested this yet ... that is, I have not tried to use this on
a Win2K etc server.
(This used to be commit 7eb89ba467a66190775943834683a42b693d2e3b)
|
|
SecDescs in the NTUSER.DAT ...
(This used to be commit dbc608ba7e591175cd02f4adfdcfecd1350526a5)
|
|
(This used to be commit 59735a5aac88b076320874f06056d50947396fb3)
|
|
(This used to be commit daefe52a56a7b977b8e561f8f668c42183de413b)
|
|
Volker
(This used to be commit 54115fd16ff10d1958153268dfd0f22f3c400bb5)
|
|
This is an early, messy version of the code, but it illustrates what can
be done. It currently only prints the Owner SID, Group SID, and Perms and
SID from each ACE.
Once more work is done, it could actually walk the SEC DESCs and ACEs and
change the SIDS ...
(This used to be commit 322151509c255aa288627ae239661154ab0c83d5)
|
|
(This used to be commit 245e2cae251382b2f638517e3902413ddac2226a)
|
|
(This used to be commit 9daaf667543c44f5e6c23f65d39810073bc12211)
|
|
(This used to be commit a3d9fd65eb64ecd575fd07d0279c139093417c96)
|
|
set 'algorithmic rid base' correctly after a 'net rpc vampire'.
Volker
(This used to be commit 5c0869be321852919dba1566c6bcab02e4657541)
|
|
Currently this calls back to mapping.c, but we have the framework
to get the information into LDAP and the passdb.tdb (should we? I
think so..).
This has received moderate testing with net rpc vampire and
usrmgr. I found the add_groupmem segfault in add_aliasmem as
well, but that will be another checkin.
Volker
(This used to be commit f30095852fea19421ac8e25dfe9c5cd4b2206f84)
|
|
at me :-)
Volker
(This used to be commit c4452ef22cf63c73bfb3574a55a4810af511ff20)
|
|
(This used to be commit 2e328928aa9bfafbfa00596f261dbc68bcd51e6b)
|
|
(This used to be commit 07ac86323f71d6228a222a1680d1c7def0eb7109)
|
|
(This used to be commit 7bde74ae359da239af4a8398da9efc2f1fd8039e)
|
|
that app-head does.
Jeremy.
(This used to be commit b521abd86b10573ca8f9116907c81e6deb55f049)
|
|
that app-head does.
Jeremy.
(This used to be commit ec7953f20145799f6286a295472df4826bfdfb8f)
|
|
somebody with a large domain do a net rpc samdump to verify this?
Without this change, I don't get everything from a NT4 SP1 and SP6
PDC.
Volker
(This used to be commit f6a9180a5ff62932de0d4f890092b0d8281e9d6e)
|
|
The actual design change is relitivly small however:
It all goes back to jerry's 'BOOL store', added to many of the elements in a
SAM_ACCOUNT. This ensured that smb.conf defaults did not get 'fixed' into
ldap. This was a great win for admins, and this patch follows in the same way.
This patch extends the concept - we don't store values back into LDAP unless
they have been changed. So if we read a value, but don't update it, or we
read a value, find it's not there and use a default, we will not update
ldap with that value. This reduced clutter in our LDAP DB, and makes it
easier to change defaults later on.
Metze's particular problem was that when we 'write back' an unchanged value,
we would clear any muliple values in that feild. Now he can still have his
mulitivalued 'uid' feild, without Samba changing it for *every* other
operation.
This also applies to many other attributes, and helps to eliminate a nasty
race condition. (Time between get and set)
This patch is big, and needs more testing, but metze has tested usrmgr, and
I've fixed some pdbedit bugs, and tested domain joins, so it isn't compleatly
flawed ;-).
The same system will be introduced into the SAM code shortly, but this fixes
bugs that people were coming across in production uses of Samba 3.0/HEAD, hence
it's inclusion here.
Andrew Bartlett
(This used to be commit 7f237bde212eb188df84a5d8adb598a93fba8155)
|
|
(This used to be commit 09c6f6329d6ae9327b7ef06de0ea78d24d805456)
|
|
* s/driverlocation/comment
* detect native mode domain and enumerate local groups
Also
* Added sendfile stats from SAMBA_2_2
(This used to be commit 764b58e2c0b3179cffe157c0ab58761b156b8423)
|
|
also try to uniform names to a clean scheme.
first part.
(This used to be commit a123e05877caf90c28980be2d84b1d0b46e4fd21)
|
|
(This used to be commit de9ea4ee6b3a939044d84f43ce14f10dd16341ce)
|
|
the ones for debuglevel and configuration file in pdbedit
(This used to be commit cb0d03a393d9009c3e16b9d05d88c171de9a9414)
|
|
from APP_HEAD
(This used to be commit 1cfd2ee433305e91e87804dd55d10e025d30a69e)
|
|
from APP_HEAD
(This used to be commit 38c9e4299845fd77cc8629945ce2d259489f7437)
|
|
(i ignored the new SAMBA stuff, but the rest of this looks like it should
have been merged already).
(This used to be commit 3de09e5cf1f667e410ee8b9516a956860ce7290f)
|
|
- Fix segfaults in the 'net ads' commands when no password is provided
- Readd --with-ldapsam for 2.2 compatability. This conditionally compiles the
old options, but the actual code is available on all ldap systems.
- Fix shadow passwords (as per work with vl)
- Fix sending plaintext passwords to unicode servers (again vl)
- Add a bit of const to secrets.c functions
- Fix some spelling and grammer by vance.
- Document the -r option in smbgroupedit.
There are more changes in HEAD, I'm only merging the changes I've been involved
with.
Andrew Bartlett
(This used to be commit 83973c389355a5cc9ca74af467dfd8b5dabd2c8f)
|
|
(This used to be commit a1c4a16267653375fbbc73de9234ddadbe92a396)
|
|
(This used to be commit b9942092cf3d0a9fbf94b51b576836a86059551b)
|
|
Volker
(This used to be commit f68825e93371e3d3403167f608d1da0d7ada1a04)
|
|
Add const to some more functions, and reintroduce 'net rpc join oldstyle' as
*only* trying an old-style join.
This means that we can rely on it not prompting for a password on the build
farm.
Andrew Bartlett
(This used to be commit 31bdbeef0ea6f30247cd3b30cfea57b34102abe6)
|
|
(This used to be commit 42c7ecd3d5dc5eb8ff690635946a403a82ebb270)
|
|
(This used to be commit a6ec9af7e38b1b937eba7003f130d662d5bde035)
|
|
(This used to be commit ee9cbf58071adb627a49a94c6340aaba330486b5)
|
|
(This used to be commit e026b84815ad1a5fa981c24fff197fefa73b4928)
|
|
a rid.
Volker
(This used to be commit 11ec785f3f43b277ae3f28b38865f4de972495bc)
|
|
only the interface has been fully moved to NTSTATUS
not all the plugins make full use of it, but have been all converted.
My testings passed completely, however a bit of more testing is welcome
Simo.
(This used to be commit 102a26e06591928a03b49cd312a65811ed46314f)
|
|
(This used to be commit 65e7b5273bb58802bf0c389b77f7fcae0a1f6139)
|
|
used to be commit 9a5541595f78f2cbba16030552c6e780f6fddcf6)
|
|
getsid, then join as a BDC, and then watch net rpc vampire suck out
the good stuff out of a PDC :-). It's not perfect, but it does quite a
bit for me. Watch out for more.
Volker
(This used to be commit f0d7ac9feb5844c93789344285b1d66f480209ba)
|