Age | Commit message (Collapse) | Author | Files | Lines |
|
(This used to be commit 299eb0abd36072af51cbcb761fa9fb6a77584585)
|
|
ensure the desired access is read from the incoming RPC request.
Jeremy.
(This used to be commit fdc5dda44f0190af4e4b0782cb2c5c7de3506d12)
|
|
functions to
display verbose debugs. Increase the probe debugs to level 3.
(This used to be commit d71a7470d721be05ecde44010cf278e8de08d9d3)
|
|
Jeremy.
(This used to be commit 8a57f1a72c88cde233b126d468183c52c2598420)
|
|
(rant off :-). Inspired by work from Benjamin Riefenstahl <Benjamin.Riefenstahl@epost.de>.
Also add MacOSX/Darwin configure fixes.
Jerry - can we put this in 3.0 release ? :-).
Jeremy.
(This used to be commit f23acb4ca5feac8ad2acfa1baf7df31283aba3ea)
|
|
condition meant fast-path in strchr_m was not being used. Doh !
Jeremy.
(This used to be commit f23c9d36b0cd4083722012e4a94df8295f29d04c)
|
|
with filenames > 100 chars.
Jeremy.
(This used to be commit aa40a86cbe797cba4e281cb8dc09b2ae67e93dc2)
|
|
(This used to be commit 8382cd6796992e55bf10f381089cb740052a0bca)
|
|
This means that %u & %g will no longer expand, but %U
and %G still do. The payback is that winbindd local
accounts for users work with 'wbinfo -u' when winbind
is running on a PDC.
(This used to be commit eb02fcf3c212eee1dc267959f23da5a26c1eac4f)
|
|
entry. Bug #431.
(This used to be commit bc8a181477866d0d97324bf45431bcdff895ad18)
|
|
Jeremy.
(This used to be commit b5d953bc26de5c4e0e1a15f70ae56ea2dd2843f2)
|
|
values.
Jeremy.
(This used to be commit 41e4479aa9f186d68300086984d6f4c8f9fd2a27)
|
|
to/from utf8 for some calls. The libads code gets this right. Wonder why
the passdb code doesn't use it ?
Jeremy.
(This used to be commit 910d21d3164c2c64773031fddaad35ea88e72a04)
|
|
Someone only half changed the code to use dc_name
instead of remote machine... Found via back trace from Dariush Forouher
<dariush@forouher.de>.
Jeremy.
(This used to be commit 963b24ac1a721a8b0d348b578f25b1d8cb7e2124)
|
|
<ungermann@elzet80.de>
Jeremy.
(This used to be commit c5ed59b37be1bf779e0d0e61c31227b520430afd)
|
|
(This used to be commit 424b13823b666c122f43d63098cec3e54b4fa353)
|
|
to build on systems with fixed getgrouplist() in GNU libc < 2.3.2.
Unfortunately, we can't detect correctness of getgrouplist() functioning in
portable way so this is left up to developer/packager.
This patch adds --with-good-getgrouplist[=no] switch to configure which packagers
on Linux platforms could use to specify in their own builds if they now that glibc
on their platform is fixed w.r.t CAN-2003-0689. By default we still think that glibc
is vulnerable and perform our version check.
** This patch does not change default behaviour in Samba 3.0 -- by default we are not
vulnerable on glibc as we are not using getgrouplist()
See http://www.securityfocus.com/bid/8477 for vulnerability description.
Right now there are following Linux vendors released glibc updates for CAN-2003-0689:
RedHat -- https://rhn.redhat.com/errata/RHSA-2003-249.html
ALTLinux -- http://www.altlinux.com/index.php?module=sisyphus&package=glibc
(This used to be commit e53622c114e0368515c50b357567fcdd0b95979e)
|
|
Display an error if we can't create a posix account for the user
(e.g no add user/machine script was specified; bug #323).
(This used to be commit 0c35ba2cd65ff64c5db2b20d5528a0d486cba51e)
|
|
we can override the value in smb.conf with the -w option.
Migrating accounts from another domain can now be done like:
# bin/net join bdc -w nt4dom -Uadministrator%password
# bin/net rpc vampire -w nt4dom -U administrator%password
(This used to be commit d7bd3c1efbd02a7ca01ad9a4b242ea4cc4a63c1f)
|
|
(This used to be commit c030d1401950b6efcbdf30ad899c25a61efb1814)
|
|
(This used to be commit c972fac195fd9280ab2a0da28b8ed11aaacd3bff)
|
|
not number of bytes. Reproduce this by trying to rename the file named :
sibréseau -> sibréseaU
from Windows 2000 explorer.
Jeremy.
(This used to be commit 035f59599514491609078ac0fe5804278c43a9b3)
|
|
(This used to be commit 5c0c9d68b44f867bf6c2b24b9fd9ba2408b9f83c)
|
|
(This used to be commit fb69ca974db9aca4aa88952f7872369ce6274e8b)
|
|
Jeremy.
(This used to be commit 514d9361c7be8cb8ef1a1309773baab1d982eea6)
|
|
Jeremy.
(This used to be commit 6fc0e529f70253244628017a372257e8dc053294)
|
|
on a patch posted from Richard Renard <rrenard@idealx.com>.
Jeremy.
(This used to be commit abf54b58e95a949cb883d4485853dc560489c03f)
|
|
by Iskantharajah T <is@tracetec.com.my>.
Jeremy.
(This used to be commit a9f9dd71da41801c975303a385ff229788c9498a)
|
|
Jeremy.
(This used to be commit 28631ef23f855ce91740fd144e3dc235a3ae7af6)
|
|
(This used to be commit 52bea54d35e7fb32c7ed7b067c13afe53761affb)
|
|
(This used to be commit 15d53fd53c622de316d0ff41f1b60f0e2c69f908)
|
|
(This used to be commit 02ae82fb3f70dc37e815d8e88bfd31a8c3ff43db)
|
|
(This used to be commit 7f2533207ee46fa968cf1fd31ac0cd89e1fb0bb1)
|
|
There was some confusion over dynamically allocated lists of pointers
(i.e you have to make space for the list of pointers and what they are
pointing too) in the memory buffer passed in from libc.
Valgrind is much happer now and as a bonus there is no segfault.
(This used to be commit 7907c44414acb841a9001e82285790eece73d032)
|
|
library variable names.
(This used to be commit 9b0b0256a8bb93482fad4032902a4ab6d1e99e23)
|
|
info delta correctly and thus crash when doing a net rpc samdump.
The easiest thing at the moment it to comment out these functions as
they seriously don't correspond with reality (netmon/ethereal) and the
data in the containers aren't used anyway.
(This used to be commit 695aa39c5d798b112f0a06281b499fcac8a5bf31)
|
|
(This used to be commit 3aab7a3bc7920b6e479700c176ac7a7b80262f42)
|
|
relying on lp_servicename(n) to return an empty string for invalid
service numbers. For some reason it is returning NULL now.
Fixes bug 403.
(This used to be commit cebb2abd2e946a5f9f2d84a7e8ae82eceecd0274)
|
|
This implements some kind of improved AFS support for Samba on Linux with
OpenAFS 1.2.10. ./configure --with-fake-kaserver assumes that you have
OpenAFS on your machine. To use this, you have to put the AFS server's KeyFile
into secrets.tdb with 'net afskey'. If this is done, on each tree connect
smbd creates a Kerberos V4 ticket suitable for use by the AFS client and
gives it to the kernel via the AFS syscall. This is meant to be very
light-weight, so I did not link in a whole lot of libraries to be more
platform-independent using the ka_SetToken function call.
Volker
(This used to be commit 5775690ee8e17d3e98355b5147e4aed47e8dc213)
|
|
Jeremy.
(This used to be commit f094555ed9d4f72841869e79037d6ff980ebe324)
|
|
ads_search_XXX() calls.
(This used to be commit 74c02e5fbc411d6fd1b13a1e21599da030897efe)
|
|
to be calculated less often. No change to external interface.
Jeremy.
(This used to be commit 155c9ce6663df9963c7563adf78a232d3650b7b5)
|
|
flushing connections in winbindd_pam_auth[_crap]()
(This used to be commit 60c8796edd84249db5419329a0fea4bbc7f9bb98)
|
|
portion of NTLMv2 key exchange. Also revert the default for
'client ntlmv2 auth' to no. This caused no ends of grief in
different cases.
And based on abartlet's mail....
> All I care about at this point is that we use NTLMv2
> in our client code when connecting to a server that
> supports it.
There is *no* way to tell this. The server can't tell us, because it
doesn't know what it's DC supports. The DC can't tell us, because it
doesn't know what the trusted DC supports. One DC might be Win2k, and
the PDC could be an older NT4.
(This used to be commit fe585d49cc3df0d71314ff43d3271d276d7d4503)
|
|
already have ads_search_retry() for this. However, neither
domain_sid() nor sequence_nunber() used this function. So modify
them to us ads_do_search_retry() so we can specify the base search
DN and scope.
(This used to be commit 89f6adf830187d020bf4b35d1a4b2b48c7a075d0)
|
|
(This used to be commit 9a603f6f077a2e1ddc41849cca3641421ecbaf11)
|
|
Jeremy.
(This used to be commit 8cb9ec5d533085d40fc6bfe4ca9647d80bf41ac7)
|
|
as that's what they do. Fix string_replace() to fast-path ascii.
Jeremy.
(This used to be commit f35e9a8b909d3c74be47083ccc4a4e91a14938db)
|
|
smb.conf
Fixes to ensure we work with disable netbios = yes
(This used to be commit 3913e43724870c62a0d77ec3e73cbe9480cb6247)
|
|
ability to use variables in paths for the [homes] service.
(This used to be commit 8fd13b63103b3c144bdd170edcb3b642dfd9bb54)
|