summaryrefslogtreecommitdiff
path: root/source3
AgeCommit message (Collapse)AuthorFilesLines
2004-03-16BUG 1165, 1126: Fix bug with secondary groups (security = ads) and winbind ↵Gerald Carter4-76/+96
use default domain = yes (This used to be commit ca971cf76e5fbb33d51b1fdfa92e4d13b2e150b6)
2004-03-16Make sure we don't clobber the stack when response consists of the emptyRichard Sharpe1-1/+4
string. (This used to be commit e522663717f6b6141580f34502ad8686d326f8c8)
2004-03-16Avoid mb conversion overflow when sending an announcement.Jeremy Allison1-1/+4
Jeremy. (This used to be commit 7a62d6215d32e664345d10b87ab4e4ddeda5dc2e)
2004-03-15Use "unix netbios name" type unstring - 64 bytes long to manipulate netbiosJeremy Allison22-94/+97
names in nmbd. Allows conversion from dos codepage mb strings (ie. SJIS) to expand to utf8 size on read. Jeremy. (This used to be commit b9da3e941d4233c2d3931f32767f3e51b214033e)
2004-03-15removing extra comma in --with-fhsGerald Carter1-1/+1
(This used to be commit ad1bf59a795e90e0a3757f1dd33d92442928e80c)
2004-03-15more fixes from 3.0Gerald Carter1-3/+3
(This used to be commit 211cead67ca2c8c017ee5eec1d6989d4928236bf)
2004-03-15sync small fixes from 3.0 and fix compiler warning in priv codeGerald Carter6-13/+11
(This used to be commit c640594c9362dca625a8fa51b453dafe1f3e980d)
2004-03-15fix byte ordering problem when storing the updating pid for the lpq cache; ↵Gerald Carter1-2/+5
was causing an abort in process_exists() on solaris (This used to be commit ce49e4f2b904ab64ea98af4736147795669495df)
2004-03-14Ok, one of the latest cleanups did too much... :-)Volker Lendecke1-29/+62
Re-add adding the local aliases to winbindd_getgroups. Volker (This used to be commit ae080f2cfaa50cf16c91d760f63db2c721e251c5)
2004-03-14Clean up a bit :-)Volker Lendecke2-57/+13
Volker (This used to be commit 66c4a6dee88274c2e1493224b0ba694418b32796)
2004-03-14Fix 'getent group aliasname', this did not look in pdb.Volker Lendecke1-7/+12
(This used to be commit 3acac5d626b2897fd2c4b291dd4e0a6c9ceffcfe)
2004-03-14Add and delete aliases via srv_samr_nt. For that I added a RID allocation callVolker Lendecke7-58/+116
to winbindd. idmap_allocate_rid wants information about whether this will be a user or a group, I did not export this to the winbind interface. The reason for idmap to get that info is to keep consistent with the algorithmic convention to alloc only even rids for users and odd rids for groups. I'm not fully convinced that this really gains us anything. Any real good arguments? Volker (This used to be commit 7f62cf933cad69799204bfdc773e08ff0dde0b20)
2004-03-14When trying to remove a user from a group, winbind should be informedVolker Lendecke1-0/+3
about the user and group... Volker (This used to be commit 87fa7904f7da5f4a80ca465c09ae4ad274e81690)
2004-03-14Merge from 3.0Tim Potter1-1/+1
(This used to be commit c8db2f7cdbe280ad3c3d35c0640d19b0f664bd36)
2004-03-13Make alias membership maintainable via net rpc group add/delmem. AliasVolker Lendecke2-199/+60
creation and deletion still has to be done as well as a 'net alias' command. Volker (This used to be commit 975c60b997ac32610c5fa80a488e896596fa9917)
2004-03-13Rest of my winbindd_passdb alias supportVolker Lendecke2-0/+19
(This used to be commit d1f38cd73ed5d71ec32e52bee8a60d206fea38ae)
2004-03-13Add alias support to winbindd_passdb. Sorry, Simo, this does not leave tooVolker Lendecke5-221/+219
much of your winbindd_passdb, users are currently not provided by that, only aliases. Currently the code to maintain that stuff is not yet in, this will be next, see my next posting to samba-technical. Volker (This used to be commit 9e0fb457ba77a55f8271b6acc91a07f0a8df3760)
2004-03-13Remove the prototype for alias support in winbind again. This will beVolker Lendecke3-324/+29
replaced by a winbindd_passdb.c checkin soon. Volker (This used to be commit 4e96b46a8481bdf4f3408574ccc8c921ade7018b)
2004-03-13Add find_alias, create_alias, delete_alias, get_aliasinfo, set_aliasinfo andVolker Lendecke4-8/+339
enum_aliases to passdb. create and delete are not yet filled, you have to do this with net groupmap and net idmap restore. Volker (This used to be commit f44bf63d1143ddf6a1a2fdc15a301e0dc0840d50)
2004-03-13Ensure we don't truncate strcmps to nstring anymore...Jeremy Allison6-11/+16
Jeremy. (This used to be commit b3aff7f214da97925690a5d0a887ea1b336d107a)
2004-03-13Modified fix for bugid #784. Based on a patch from moriyama@miraclelinux.com ↵Jeremy Allison25-176/+197
(MORIYAMA Masayuki). Don't use nstrings to hold workgroup and netbios names. The problem with them is that MB netbios and workgroup names in unix charset (particularly utf8) may be up to 3x bigger than the name when represented in dos charset (ie. cp932). So go back to using fstrings for these but translate into nstrings (ie. 16 byte length values) for transport on the wire. Jeremy. (This used to be commit 128dec9ae68fd357550de2649d54056ca4fc65cf)
2004-03-13First part of patch from moriyama@miraclelinux.com (MORIYAMA Masayuki) toJeremy Allison5-809/+887
fix up netbios names with mb strings. Includes reformat of libsmb/nmblib.c so it's readable. Jeremy. (This used to be commit beca3829d1140bf7c2e394993a02dff1f2cf7bbd)
2004-03-12Bug report 1079 and fix both from Bert Driehuis.Christopher R. Hertel1-38/+78
This is an odd corner case having to do with <1C> group names (DC names). <1C> group names are called (by MS) "Internet Special Groups", which means that Microsoft's WINS servers will attempt to handle these names in something approximating an RFC1001/1002 compliant manner. The problem being reported here is this: If an initial registration sent by one of the group members is lost (network error, whatever) then subsequent refreshes from that particular machine will also fail. This only happens if the name is already active (because of other group members). In most cases, we (and MS) handle refreshes as registrations if the name is not in the database. In this situation, we missed the corner case. Bert's fix adds an 'else if' that catches the situation in which a refresh for an unlisted IP of an active <1C> group name is received. The refresh is simply handled as a registration when this happens. [Note: Committing in HEAD. I am writing some tools to do registrations and refreshes so that I can test this. I don't have an NT Domain for testing so I'm going to have to fudge. This fix is small (I cleaned up some Debug messages and comments in addition to the fix) and if you want to test it with 3.0.x you can just copy the HEAD version into your 3.0.x tree and recompile.] (This used to be commit 8e52439f4ae9de84107e2d0e9f33f0d4e3c5945a)
2004-03-12Fix from Robert.Dahlem@gmx.net (Robert Dahlem) for bugid #1048Jeremy Allison1-2/+2
when mangled names are turned off. Jeremy. (This used to be commit 11487e24666c7b3dd4b37f4ef8aec8f8a5bd5a6f)
2004-03-12Fix problems with very long filenames in both smbd and smbclient.Alexander Bokovoy3-48/+56
It appears that we pass filename through resolve_wildcards() as pstring and use fstring temporary buffer there. As result, a long filename in unix charset (UTF-8 by default) can easily expand over 255 bytes while Windows is able to send to us such names (e.g. Japanese name of ~190 mb chars) which we unable to process through this small fstring buffer. Tested with W2K and smbclient, Japanese and Cyrillics. (This used to be commit cc70a548f3c48a9503fd54d01896cc2499f5bbcd)
2004-03-12Fix build after Jeremy -- yet another place where convert_string() wasn't ↵Alexander Bokovoy1-2/+2
updated (This used to be commit e117ed1db84b2447793ccea4036e225c4a552e1e)
2004-03-12Fix string overflow due to wrong size calculationAlexander Bokovoy1-1/+1
(This used to be commit cf0285f3ea017d300d94e8c7f7042ae8ccc8f960)
2004-03-12Allow msdfs symlink syntax to be more forgiving (it took me ages to rememberJeremy Allison1-4/+12
what it was :-). Allow msdfs links to now look like UNC paths : eg. sym_link -> msdfs://server/share/path/in/share or : sym_link -> msdfs:\\server\share\path\in\share Jeremy. (This used to be commit 3c89393e2907e4a3318fb3e94a911cd35f16b4c2)
2004-03-11Fix bug introduced by Jim (touche :-) :-) - use new smbldap_get_single_pstringJeremy Allison1-4/+4
call :-). Jeremy. (This used to be commit 3c9fd2bdee097394cb0d0b6683748835c6a2d3a0)
2004-03-11Restore the contract on all convert_stringXX() interfaces. Add a ↵Jeremy Allison10-77/+81
"allow_bad_conv" boolean parameter that allows broken iconv conversions to work. Gets rid of the nasty errno checks in mangle_hash2 and check_path_syntax and allows correct return code checking. Jeremy. (This used to be commit 3b4fca7b7f410cb0f11322e22c8f26a662eff941)
2004-03-11Merge from 3.0. Fix munged dial in pdb_ldapJim McDonough4-48/+60
(This used to be commit 46544e957f00f71e3a49e3d90cd88b4cf1b33408)
2004-03-11add missing #ifdef HAVE_BICONV stuffHerb Lewis1-0/+3
(This used to be commit 5e831f48f0d15a02a3bc406a7dc5249a57ceec4f)
2004-03-11BUG 1088: patch from SATOH Fumiyasu <fumiya@miraclinux.com> -- use ↵Gerald Carter1-29/+19
strchr_m() for query_host (smbclient -L) (This used to be commit e7d2315e45df7e2e4e586a8fc4a32d6880e83e4f)
2004-03-11Ensure we use check_path_syntax() to pull out DFS paths.Jeremy Allison1-7/+2
Jeremy (This used to be commit ebf82e2c14827c0a0edd8ee373ce5200f7b0b3b0)
2004-03-11Fix processing of pathnames with embedded '\\' characters (0x5c) in CP932Jeremy Allison1-5/+23
character set. Because of the allowing of "broken conversions" for people who have broken iconv libraries we can't rely on the return from convert_string() to be valid - we must check errno instead. This is ripe for revisiting at some stage. I prefer adding a bool parameter to all convert_string_XX varients to specify if we will allow broken conversions or not. With "allow_broken_conversions" set to false we could then rely on the return from convert_string rather than checking errno. Jeremy. (This used to be commit 30c30c5ac53ec8f32a44d0b1b39cc99fe9844467)
2004-03-10lsa_enumaccounts lists all SIDs that have been granted privileges. Simo,Volker Lendecke1-22/+8
you should look at this. Change behaviour from listing all groups to listing only BUILTIN\Administrator Volker (This used to be commit 32d196e9bbf203855832da16eff3dee495679928)
2004-03-10Remove expanding sids from smbd, this will be done in winbindd.Volker Lendecke1-25/+0
Volker (This used to be commit 67bb1d2338b0d5ba3f8a4754ff1479cd42cfb051)
2004-03-10Apply some constVolker Lendecke5-14/+14
(This used to be commit e2696b81bb5e4d12281cf99dc50f91844ae51c2e)
2004-03-10Don't pass DOM_SIDs around when pointers are enough.Volker Lendecke2-6/+6
Volker (This used to be commit 27b27c28cd0421be3121e7f03c237df381c7ecb3)
2004-03-10another typeHerb Lewis1-1/+1
(This used to be commit 40634650d0489ebef17e090ef4544b772538b3dc)
2004-03-10Moving towards getting msdfs working again (this looks like it was brokenJeremy Allison1-5/+62
in 3.0.2a actually). We now send a correct referral back, but the client refuses to follow it... Not sure why. Will do more tests.. Maybe unicode character count is wrong (it looks it). Jeremy. (This used to be commit 859529aff348e66281d2ec4d54c5852121aae9e5)
2004-03-10Formatting reformat before I start to change anything here.Jeremy Allison1-273/+258
Jeremy. (This used to be commit e93aeb96771125ef8775a531257e7390217204d0)
2004-03-10fix type for tag in proto fileHerb Lewis1-1/+1
(This used to be commit cd1ed1a23b15002aab3387c6f6316f85574c11e8)
2004-03-09Fix dfs referrals - don't use check_path_syntax. Also use mb char calls inJeremy Allison2-16/+10
dfs code. Jeremy. (This used to be commit 70670841028aaeb72267ac41ca30af8dba412998)
2004-03-09Yet another '\n' termination of debug message.Rafal Szczesniak1-1/+1
rafal (This used to be commit 6c8e39b7ccc1ad8e7f39c2a51fa13423e5d6e227)
2004-03-09Forgot to put some more comments.Rafal Szczesniak1-0/+34
rafal (This used to be commit b3efdcf0aeec5a115c53de8bbedaa9ca8225b689)
2004-03-091) Two new functions to trust passwords interface in passdb:Rafal Szczesniak4-22/+280
settrustpwent, gettrustpwnam 2) Implementation of another couple of these functions in tdbsam: settrustpwent, gettrustpwnam, gettrustpwsid 3) Testing (mostly for now) usage of the interface in pdbedit which is soon to be offline tool back again. This is quite a new code, so many changes will be put in soon. rafal (This used to be commit 2ed23fbce846f9710747d72aa98c20d54894d61e)
2004-03-09Fix to debug message lacking termination with '\n'.Rafal Szczesniak1-14/+14
rafal (This used to be commit 6fdb20f5a7657556a3e4ceb4cab8c1d67e29ea21)
2004-03-09fix build with gcc 2.96 and --with-developerGerald Carter1-1/+1
(This used to be commit 45b2efd60a3c3c9f01b1ccaa828904a70d70d67d)
2004-03-09Commit to HEAD the updates to smb signing code that I was propsing for 3.0.Andrew Bartlett7-62/+101
This code implements 'opportunistic signing' in our client (when the server supports it, we will use it), and correct downgrading on both the client and server for the 'enabled' (rather than required) signing level. This means that we can actually set 'server signing = yes' and not have the world fall apart. We had a number of bugs in that code, and it certainly looks like most of the testing was with the 'requried' setting. While the changes are reasonable, I'm putting this into HEAD rather than 3.0 for the timebeing. SMB signing, like NTLMSSP, tends to have gotchas in it :-) (I also need to give it a workout with more than smbclient before I move it across). Andrew Bartlett (This used to be commit 6bad895462cf076a7e917c909e2a461d1b360bf1)
generated by cgit (git 2.34.1) at 2025-01-04 06:57:18 +0000