Age | Commit message (Collapse) | Author | Files | Lines |
|
unix groups are not explicitly mapped.
i.e as a PDC or BDC you can have domain groups, as a member of a domain
you cannot.
as a member of a domain, unmapped unix groups are assumed to be aliases,
and as a PDC or BDC, unmapped unix groups are assumed to be unix groups.
there is _one_ other check needed with aliases to be added: unmapped unix
groups that have the same name as an NT group on the PDC (for which i will
need to write an LsaLookupNames call) should be assumed to be domain groups
on the PDC.
(This used to be commit 53b49b44e13a4ca9818ebc947372b1374831b568)
|
|
could never be a PDC.
(This used to be commit 2bcc540af80c37b8032a23d6d0045160a7c40e32)
|
|
(This used to be commit b67d66a1e9d879cd5960380c94422c0af8dedaad)
|
|
Jeremy.
(This used to be commit 252dd8b8929adbdff9917395d4f8caad2d7882b2)
|
|
Jeremy.
(This used to be commit 81b90208910528a4ace683f30e39c54d8cfa12b7)
|
|
(This used to be commit 403f53d696d17f34dd1afc035a72eda792dd20ea)
|
|
(This used to be commit c89642ff3fa0c0bc2bca62304db0282676e0b649)
|
|
(This used to be commit d50238823411f07d5db112843d9a1e3a84c7dbd7)
|
|
(This used to be commit 53339b63897f51913fef183fd3b4565dad2ffad1)
|
|
(This used to be commit 0fdac4b42fb55a26cdd73d6d5f4a3017d1b4db46)
|
|
(This used to be commit 22802195ed544b6042d791b34e704d608bbdfd84)
|
|
(This used to be commit 30b3f339f8d55c2d3a4cbc380b7f12eb040bf381)
|
|
(This used to be commit 16ac5c89b7417a6aa2596c5c7fbb1fa7542accfd)
|
|
(This used to be commit ba78b5932a1ed3f7c07720703b9131234f035689)
|
|
(This used to be commit 10e4cbd2647eb629b60b0060fa184212a89e54f2)
|
|
in the file were gids: they are not.
(This used to be commit 8af860394fa3251a26285c8c96c9e4093346f20b)
|
|
(This used to be commit 82b6292dff38f4e22ee8feab1b54504b95d705fa)
|
|
(This used to be commit e76f593b3572ac881f1aa1fb3326d8b7169b0078)
|
|
(This used to be commit e93491953a2555401a372de74ac2aee0cc44cb88)
|
|
use all_string_sub() if you don't want this.
(This used to be commit a3357ab49335106674fe7a7481cd0f146d74fbe5)
|
|
(This used to be commit bdcee2557bd243a1bfbde3353ebcfe3d82bf9fc5)
|
|
(This used to be commit 42d2509c9fab5c774fd33b9d4b5bd1ee125479c3)
|
|
Added some extra documentation for smbclient
Grr, Jeremy beat me to a bug fix in client.c
Will have to get Jeremy to tell me how to check out SAMBA_2_0 :-)
(This used to be commit 8594c4bcae503972679c55a2fcab8eb69faf3ae3)
|
|
any attempt to run swat from a host that is disallowed will give an
error.
(This used to be commit fe4ef4bbef01aed75807c884249ca8efa5de4140)
|
|
session_request fails.
(This used to be commit ab2370e7ac770f1e32b8d726ab955457fcc8c2d7)
|
|
(This used to be commit 05696b4bbfb66bfdbdc19f395efe062ac890bc41)
|
|
(This used to be commit 94fc7fe3afa1dc5547050248738eb697c1eeef59)
|
|
existing setups
(This used to be commit e97cbd6912a58d4985c2b8a649cfe6982809892d)
|
|
web/swat.c: Changed '?' to help.
Jeremy.
(This used to be commit 631913ea856926a77304692c74a1bd27faead179)
|
|
Jeremy.
(This used to be commit 10f51b85722141f99ffecc3f19a39de108400828)
|
|
-lsecurity checks
in a more sane way.
rpc_client/cli_netlogon.c: Removed correct bits check to see if this works with an NT3.51 PDC.
rpc_parse/parse_samr.c: Fixed compile warnings.
Jeremy.
(This used to be commit 34d8f4b1c4d59ab3c009360fc67eef9361dd859b)
|
|
Jeremy.
(This used to be commit b02d21a73d7f098c5599c606abbb5c92ea4ba13e)
|
|
(This used to be commit a33b4f623f196ca7e8056454b9212fe0ffa389c2)
|
|
configure
configure.in
include/config.h.in: Fixes for AIX4.x. AIX *will not*
enable large file support of *any* description unless
either -D_LARGE_FILES or -D_LARGE_FILES_API are defined.
I chose "-D_LARGE_FILES" as this leads to cleaner code...
Also fixed bug where getpwnam was listed as getpw(a)nam in configure.in.
Jeremy.
(This used to be commit 2d62dc26f4e3a171ecbe56f33d94db2fea0ef0ad)
|
|
Added HPUX autoconf changes.
Added "gross hack" printer code.
Jeremy.
(This used to be commit 1ef6d3bd63722afe9c376793a6ea72046d1a0602)
|
|
also allow specifying [host hostip] without [configfile]
updated man page
(This used to be commit 85fbd401026e7f1464c9a125cbaa505b768f8a10)
|
|
acconfig.h configure configure.in include/config.h.in: Fixes to DEC OSF1.
libsmb/nmblib.c: Fixes to nmbd jumps in scope names.
Jeremy.
(This used to be commit 5ad77769be85e6727319afb0f02e5d94c2f9f16f)
|
|
groupdb/groupdb.c: Fixed compile error caught by IRIX compiler.
utils/smbpasswd.c: Fixed SunOS optind, optarg problem.
Jeremy.
(This used to be commit 30af39ae1edf51d5d06a1764982e5df431c142ac)
|
|
(which is not the case with open directories).
Jeremy.
(This used to be commit c154b1601f5891d664fc538ec8874fa8ef2061e6)
|
|
that cannot support it.
Jeremy.
(This used to be commit 7a6f25ac4ab0f0bef7a66f26004c15120248ff66)
|
|
If a client does a modify timestamp on an open file (which will
do no good at all on UNIX :-) then keep the modify request pending
in the files_struct and apply it at close instead.
Jeremy.
(This used to be commit 92a7a86f0e0255e3812dd35bebfcd653091514ae)
|
|
NOTE: The packaging scripts will have to be changed !!!!
Jeremy.
(This used to be commit 79c259f05cf7cd4f2d3d1bb92fff3bde7acd8a50)
|
|
Tidied up some of the mess (no other word for it). Still doesn't
compile cleanly. There are calls with incorrect parameters that
don't seem to be doing the right thing.
This code still needs surgery :-(.
Jeremy.
(This used to be commit 18ff93a9abbf68ee8c59c0af3e57c63e4a015dac)
|
|
(This used to be commit 2a98135bbc759ab334d76cce98ea673871445db1)
|
|
(This used to be commit 06da8e49f1cf5d6b954f586f6720ade1c5b8de74)
|
|
(This used to be commit 7da1b0bb511e6c5e44ab83759914134cf91f6f78)
|
|
u:u:a:g
(This used to be commit 2f456ed92ffbf596945a9ec800c373495fc4e38a)
|
|
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
|
|
Jeremy.
(This used to be commit 6db04cd4622289dbdbd0c6d4d084baa8f84c40c2)
|
|
be tuned per system type.
Jeremy.
(This used to be commit c1a3346547d887bfd2402a6b0bcc185680eb4470)
|