Age | Commit message (Collapse) | Author | Files | Lines |
|
Guenther
(This used to be commit 97f7f9f21f17e8414de15953cf4eaa9959dc6f75)
|
|
Jeremy.
(This used to be commit 1db7e00a5400863fd5dbb81c1a4c6ea6092d0495)
|
|
Jeremy.
(This used to be commit 6da33797b0549a2da7dc0fa7ee21dc5e8a6b1459)
|
|
create_builtin_administrators
The Debug messages in create_builtin_users and create_builtin_users have now
been encapsulated in add_sid_to_builtin.
(This used to be commit ca153139b1dced07c196aac93dbc9d9428d98124)
|
|
Previously this was done at token creation time if the Administrators and Users
builtins hadn't been created yet. A major drawback to this approach is that if
a customer is joined to a domain and decides they want to join a different
domain, the domain groups from this new domain will not be added to the
builtins.
It would be ideal if these groups could be added exclusively at domain join
time, but we can't rely solely on that because there are cases where winbindd
must be running to allocate new gids for the builtins. In the future if there
is a way to allocate gids for builtins without running winbindd, this code
can be removed from create_local_nt_token.
- Made create_builtin_users and create_builtin_administrators non-static so
they can be called from libnet
- Added a new function to libnet_join that will make a best effort to add
domain administrators and domain users to BUILTIN\Administrators and
BUILTIN\Users, respectively. If the builtins don't exist yet, winbindd must be
running to allocate new gids, but if the builtins already exist, the domain
groups will be added even if winbindd is not running. In the case of a
failure the error will be logged, but the join will not be failed.
- Plumbed libnet_join_add_dom_rids_to_builtins into the join post processing.
(This used to be commit e92faf5996cadac480deb60a4f6232eea90b00f6)
|
|
the new helper functions.
- Modified create_builtin_administrators and add_builtin_administrators to take
in the domain sid to reduce the number of times it needs to be looked up.
- Changed create_builtin_administrators to call the new helper functions.
- Changed create_local_nt_token to call the new version of
create_builtin_administrators and handle the new error that can be returned.
- Made it more explicit that add_builtin_administrators is only called when
winbindd can't be pinged.
(This used to be commit f6411ccb4a1530034e481e1c63b6114a93317b29)
|
|
helper functions.
- Modified create_builtin_users to take in the domain sid to reduce the number
of times it needs to be looked up.
- Changed create_builtin_users to call the new helper functions.
- Changed create_local_nt_token to call the new version of create_builtin_users
and handle the new error that can be returned.
(This used to be commit 8d75d40b9f6d22bae7430211f8a1fe99051b756c)
|
|
domain join time
Added two new helper functions which wrap the raw pdb alias functions so they
can be more conveniently called while adding domain groups to builtin groups.
(This used to be commit 668ef314559df40f1b8aa0991539adcd8d35ffe3)
|
|
wrapper.
Guenther
(This used to be commit fef58091408cce0d7870c86f28f78cf9400cf2b6)
|
|
Guenther
(This used to be commit 51062534fd58d7a914a6bbac2e52bb44e71363b7)
|
|
Guenther
(This used to be commit 0c1efc6c89b1a51a94d10971bf0fc515416709b3)
|
|
Guenther
(This used to be commit 09fed085bea9dae5bb8aacd986deed3d458e3574)
|
|
Guenther
(This used to be commit 0298f7fe9e273a94d14b5b6ce3dbd5e6deee9ecb)
|
|
Guenther
(This used to be commit d31f822b79ed5344ec3c6795d66ceefd024b7d30)
|
|
GUenther
(This used to be commit 0b4e2687ae8fb48faacceb4078d61f9fd2acea9d)
|
|
Guenther
(This used to be commit 93ff6548977cb3e1c84fcb659475664de54e31b5)
|
|
Guenther
(This used to be commit 81be6207e51924a7632dfc0ec16ca3e570d417aa)
|
|
Guenther
(This used to be commit ec2a56b5e726400f171d641587cbd0a4b99beec0)
|
|
Guenther
(This used to be commit 49ea8984e95618ff8dc8f1d5d757aec997899fd7)
|
|
Guenther
(This used to be commit 52218506d6ad51c4f340206d035f79272ba15e3b)
|
|
Guenther
(This used to be commit 80957bc1bc1462a2478b3eea64f5cb7a84d08677)
|
|
Guenther
(This used to be commit c4131c995d8b36c01b68160e0277b7c3610e9619)
|
|
Guenther
(This used to be commit 25522f0de081e819d661728f7f6767037e514094)
|
|
Guenther
(This used to be commit 97106199f1a2add886a14523aa7b402667d2cd89)
|
|
Guenther
(This used to be commit 87b6aac13598a2ac28054de5ab90d63bef65f1fe)
|
|
Guenther
(This used to be commit ff9bcd57738aa04c5e18e0e21dd0e788127317c4)
|
|
Guenther
(This used to be commit c3e4c7cb5f2728a8219789aeb2344bff368713d5)
|
|
Guenther
(This used to be commit 244ad49e6a993a0e3c56c5a19d38918be9deca3b)
|
|
Guenther
(This used to be commit 6c8ee639ecc789ea9052e999b6e998ac53ac521a)
|
|
Guenther
(This used to be commit 8b3149b4a663f59b504c1458cd7ecafe0c0e0322)
|
|
Guenther
(This used to be commit d4594a7a03381fb251c9f8caf4c70e1ed97674b6)
|
|
This one came up while using "csc policy = disabled" instead of
"disable"... ;-)
(This used to be commit d01da44de77abbf724389bce924771f2975867f4)
|
|
Karolin
(This used to be commit e04da654c0db6b0fb2e2ce9754e5eba80751c14c)
|
|
We were calculating the session key but did not return it to the caller...
(cherry picked from commit 8ab79b1d009d53e414b90e4a0ab8fc7a4889b6df)
(This used to be commit b63a6a1fd6a96bbafd88cacb9493bfea9944d404)
|
|
Michael
(This used to be commit 6dd1582e3583ed3c0766db552a368ddb30af5f7d)
|
|
metze
(cherry picked from commit 4b79a7678571ac2f7d5f827913fdcb419f5d2e20)
(This used to be commit e8ae49fc2aadfeee696ad7fde1fee643e167537c)
|
|
Michael
(This used to be commit e5d95c4f41c2fe25920b0b707f637a562cb23ed8)
|
|
metze
(cherry picked from commit 231e6f5ab2dc8a3e991a9872be252cffff6f14c6)
(This used to be commit 67de7455b66b6c6c959e5e4ca1b8d97e2f4cf71d)
|
|
This is for debugging and informational purposes only.
The assignment is implementation specific.
(WSPP docs, sec. 5.35).
Michael
(This used to be commit 18ea033909a5363c92530ed2a06a2b89be5e7c79)
|
|
(This used to be commit 1970eed1b79a5d9dc45eb96098d653ad62a20871)
|
|
(This used to be commit c63cb78b4c8a283c0eebe37ff2f60ddbfbfaac4a)
|
|
There were two bugs in those routines: They did not send INTERNAL_OPEN_ONLY to
open_file_ntcreate() and they did not chdir, so the file could never be found.
While there I decided to remove the become_root() calls and call create_file()
instead of the lower-level routines.
(This used to be commit 669771738422776f8c81086ffea4924b62d72957)
|
|
(This used to be commit e115e2582256c34e6905afc8c2929efd6ea61088)
|
|
A bit hard to believe, but substitute.c does not use current_user anymore.
(This used to be commit de5d27d70abcad996af91b4e93879fc415f2b38d)
|
|
This was just too easy not to use :-)
(This used to be commit a9922a2a3661a6cff7351ea6b3558f091bb45feb)
|
|
(This used to be commit e11b5cb1e061caf4c3793fb402ca6bee95a8f26c)
|
|
(This used to be commit 10b47a0c2cfd62489428518112da82f73a52b7bc)
|
|
(This used to be commit defcf0eecfb8eb035d9ca80530720b9e6873f6c7)
|
|
(This used to be commit 1dab45b16a23b1126fbf29890747a2b256f08968)
|
|
(This used to be commit 256c93a8b3d4d9a4e52a656c91b89a043a087066)
|