Age | Commit message (Collapse) | Author | Files | Lines |
|
- Make it possible to list users that are given a specific privilege
- Make the lisitng interface a bit more usable by distinguishing
between "keys" and "names", using user names directly still
supported for backward compatibility
(This used to be commit 9797b33f2377375875b2c473d9899f36fe75246b)
|
|
fix is a
bit more effort.
The real fix for this would be to open an schannel netlogon connection to the
remote DC and change the trust account password...
Volker
(This used to be commit ab8991c384d81d32ac13f89592e8b35208127b32)
|
|
(This used to be commit ede9fd08cf0ce04528f73c74e2345ba46d26f1e2)
|
|
(This used to be commit 2461a8e482ab22dde4b7af8ea6d6ee043f302bf8)
|
|
(This used to be commit dc442ea7a0eed0a496522dd518bc53bc9304b705)
|
|
(This used to be commit df6f0815af0171a47483f2f3d347d350704a012f)
|
|
Guenther
(This used to be commit 5c578d14ba1036354a339b0804c4500805b25747)
|
|
(This used to be commit 7df1cfed723d1c22070b0a829946fe61d064e0d1)
|
|
partial fix for Bug 2417 - we need to look for other missing
commands
(This used to be commit bd4405b41592e064428bfa0dab8f216692f0fec6)
|
|
(This used to be commit fb8e746ed65fa3aacda3d6be0e3f28f690fbdacb)
|
|
(This used to be commit 6884a2fa6e3d19a436edfb428056978ae127f442)
|
|
samr_remove_sid_from_foreign_domain.
(This used to be commit 8360695fc02dfb09aff92a434bf9d411e65c478c)
|
|
referencing unknown_6 from sam, because it's just fixed at 1260, the max
len of LOGON_HRS. Need to go in and mark it as "remove me" from passdb.
(This used to be commit ffac752875938d510446ebbeba6fc983f65cda1e)
|
|
Guenther
(This used to be commit a5e215650e09f087f8aede96475bd26649aa244e)
|
|
Guenther
(This used to be commit 67552103ee77013d08e06ed651f6ca6b3b76813e)
|
|
With Windows2003 it's perfectly legal to receive no data when querying a
value-less subkey. Found while migrating printer settings.
Guenther
(This used to be commit 3e04def03377b2eae2987c87b18ccadf5b48a6fe)
|
|
rejects
everything but 1000 here, so there's no point in exposing that to the caller.
Thanks,
Volker
(This used to be commit 03ec1bd9e54b065c0494bc57a3d78ac0ae28e234)
|
|
trunction of service names
(This used to be commit 440a4ecc1641658a2553312b759b6b97a8e5c981)
|
|
passdb in 3_0 (they are still in trunk).
Guenther
(This used to be commit fdf9bdbbac1d8d4f3b3e1fc7e49c1e659b9301b1)
|
|
SamrGetGroupsForUser
that says the user is in 0 groups, and we issue an RPC to LookupIds for 0 RIDs.
The printing that there are no groups the user is a member of might be overkill
in that it might upset existing scripts that don't expect that output.
(This used to be commit d3482e118f99002c0460291d41708fdf7708c41f)
|
|
Implement 'net afs impersonate', generate a token for a specified user. You
obviously need to be root for this operation.
Volker
(This used to be commit 5818b092e6e50d38238b0520329eb8912125c90a)
|
|
given no command line args
(This used to be commit aff2fb7a65a9fc40220d971fba8ba3cf1eeeee9f)
|
|
Guenther
(This used to be commit 3d391ef149639750db376b05528a27422f8a3321)
|
|
group-mappings.
Guenther
(This used to be commit 2556e6570ec8074bb67827f95eb365800c5c9827)
|
|
add domain trusts
(This used to be commit 5ec1faa2ad33772fb48c3863e67d2ce4be726bb2)
|
|
(This used to be commit 142461204718d489bbeff451878a52208b9891bc)
|
|
(This used to be commit 17bc42b4c2e21004adaeac78db6231a384fda16c)
|
|
Guenther
(This used to be commit 1eabfa050b661168b42892c2d841c7891e59cf5f)
|
|
Does automated migration from account_policy.tdb v1 and v2 and offers a
pdbedit-Migration interface. Jerry, please feel free to revert that if
you have other plans.
Guenther
(This used to be commit 75af83dfcd8ef365b4b1180453060ae5176389f5)
|
|
(This used to be commit 033105376ef4ed7d31ef7cab2442719ed57d29b9)
|
|
Added text explaining units in pdbedit time fields.
Jeremy.
(This used to be commit 3d09c15d8f06ad06fae362291a6c986f7b6107e6)
|
|
Duration: Forever".
Guenther
(This used to be commit aecacf4d9cc5e2aa69b358292b9d591ade696500)
|
|
Note that Samba3 does not yet support it server-side.
Guenther
(This used to be commit b2c8220931733593fd312fc25b6c73f440b4567a)
|
|
To get all entries use a 0 acb_mask.
Guenther
(This used to be commit bc729f8fd877236a503cc9df64138b2be2e1a91d)
|
|
* define some const SE_PRIV structure for use when
you need a SE_PRIV* to a privilege
* fix an annoying compiler warngin in smbfilter.c
* translate SIDs to names in 'net rpc rights list accounts'
* fix a seg fault in cli_lsa_enum_account_rights caused by
me forgetting the precedence of * vs. []
(This used to be commit d25fc84bc2b14da9fcc0f3c8d7baeca83f0ea708)
|
|
(This used to be commit f1d59c3a2693fe36b9abe9c1da4b703c5543f938)
|
|
This allows the ldap-backend to search much more effeciently. Machines
will be searched in the ldap_machine_suffix and users in the
ldap_users_suffix. (Note that we already use the ldap_group_suffix in
ldapsam_setsamgrent for quite some time).
Using the specific ldap-bases becomes notably important in large
domains: On my testmachine "net rpc trustdom list" has to search through
40k accounts just to list 3 interdomain-trust-accounts, similiar effects
show up the non-user query_dispinfo-calls, etc.
Also renamed all_machines to only_machines in load_sampwd_entries()
since that reflects better what is really meant.
Guenther
(This used to be commit 6394257cc721ca739bda0e320375f04506913533)
|
|
(This used to be commit 002ece931917e2952ed795939384764d14f93ce9)
|
|
one small todo item is to add a 'accounts' sub option
to 'net rpc list' so enumerate all privileged SIDs
and their associated rights.
(This used to be commit bf4385c79a0ce2e4983ffa11d39367dbf1d4dcfd)
|
|
(This used to be commit 164f94e52929330bd638f19bcf3bfce50303269e)
|
|
Also fix return of NT_STATUS_NO_MORE_ENTRIES should be
ERROR_NO_MORE_ITEMS reported by "Marcin Porwit" <mporwit@centeris.com>.
Jeremy.
(This used to be commit 511cdec60d431d767fb02f68ca5ddd4ddb59e64a)
|
|
supported pipe. Netlogon is still special, as we open that twice, one to do
the auth2, the other one with schannel.
The client interface is completely unchanged for those who only use a single
pie. cli->pipe_idx is used as the index for everything except the "real"
client rpc calls, which have been explicitly converted in my last commit. Next
step is to get winbind to just use a single smb connection for multiple pipes.
Volker
(This used to be commit dc294c52e0216424236057ca6cd35e1ebf51d0da)
|
|
up printcap reloads
(This used to be commit 1cad5250932b963c2eb9b775221b13db386d601b)
|
|
no passwords after vampire. Set password last set field to now.
(This used to be commit 60c3a638e4e63d009728c2ce7a6264c3c120a9e5)
|
|
Guenther
(This used to be commit b209f97f246cd65719f1000c7de368babec26d47)
|
|
Guenther
(This used to be commit 98f3e3353df988e819bc41d145b13c76e1b86b55)
|
|
Guenther
(This used to be commit 0930ad662770278cbe9fd4e3deaa523957b96697)
|
|
Guenther
(This used to be commit 4eec06b461c295f90c2ec01a0eef1e173eab22b3)
|
|
Jeremy
(This used to be commit efc1b688cf9b1a17f1a6bf46d481280ed8bd0c46)
|
|
Based on samba4-idl. The decoding of account-lockout-string is somewhat
experimental though.
Guenther
(This used to be commit 721bf50d7446b8ce18bc1d45e17d4214d5a43d26)
|