Age | Commit message (Collapse) | Author | Files | Lines |
|
source/libsmb/ntlmssp.c:
Picked up by the build farm - despite all my efforts, security=server was
broken by my NTLM2 commit. This should correctly cause the NTLM2 case
not to be negotiated when 'security=server' is in effect.
testsuide/build_farm/runlist:
Without 'non unix accounts' we can't test security=domain on the build farm.
source/rpc_server/srv_samr_nt.c:
Match Win2k and return 'invalid parameter' for creating of a new account with
account flags of 0.
Andrew Bartlett
(This used to be commit e97f1eb62ae01b5259d7ecfab9b55b07103379c7)
|
|
(This used to be commit c74c2903fb8bd38f8469b3c3b549ac8a431f36dd)
|
|
(This used to be commit 953ada19904900c6f6ef65fa0006a695657b3d0b)
|
|
(This used to be commit 99feae7b5b1c229a925367b87c0c0f636d9a2d75)
|
|
prior to this merge, checkout HEAD_PRE_3_0_0_BETA_3_MERGE
(This used to be commit adb98e7b7cd0f025b52c570e4034eebf4047b1ad)
|
|
(This used to be commit 3c7155424aaa880c2e9e570f8c29fd5679e827b1)
|
|
(This used to be commit 082bdcd662aed47827c9d4fb1272c327a0ae79b1)
|
|
(This used to be commit cf69c69594797032d1427de3266af86d12b15cb2)
|
|
names can be shortened to 30 characters. Helps Stratus VOS, which has a
32-character file name limit.
(This used to be commit 58a4be041ee92434672959b9df888cf1366bb02e)
|
|
(This used to be commit 015924491e2f06ff5a96729c7db7411a29281594)
|
|
(This used to be commit 0048a81abe99e43655d4482df27903dba774213b)
|
|
Andrew Bartlett
(This used to be commit 35b73aa0a139721d8560e81ba1caf26ebdf7d0b6)
|
|
(This used to be commit 644b5e30c825d26ee34be79847c9469acd9fb640)
|
|
- Get valid/invalid users working
- Test preexec, preexec close
Andrew Bartlett
(This used to be commit 36441899e61a711b8fe03ec7b6f95973b1e69fc5)
|
|
succeed
(This used to be commit f1058012b9662f0f9ce62ea05833e78a411f80b9)
|
|
do not run 'unixsam', so add it to smbpasswd.
Andrew Bartlett
(This used to be commit 2ff6d53db550c1f4472b735b1bc87c9705716241)
|
|
gdb....
Andrew Bartlett
(This used to be commit 7cb080559eaf39fb0afd6d846bf56715f1303801)
|
|
have a lot of users ;-).
Andrew Bartlett
(This used to be commit 2f164e28c349b8e20700e0e2fca204ed08228316)
|
|
(This used to be commit 3167ec8a49a8da58f77b7c4f202c865ef9f9414c)
|
|
(This used to be commit 8bb798ab3d7245e61530913d771d58f08e77a200)
|
|
(This used to be commit ca56042c032e95ff3e1e40ae9e89a0b847d83081)
|
|
Andrew Bartlett
(This used to be commit 18f6d476154163543e865b1fe200cd94288d5dc1)
|
|
(This used to be commit f1eb782eeeaca6efc0f89713ca449a379272eaad)
|
|
(if you remove the smbpasswd file, you wont be able to change the passwords
contained therein... :-)
Andrew Bartlett
(This used to be commit dd8388330e5ad0ae1a82f876e3a95fba854d1528)
|
|
Andrew Bartlett
(This used to be commit 180d7e8c43d754a0ba4494707ac7924ab4a06d72)
|
|
(This used to be commit 71b63db1bf08b5d0b88d5d83dca8f2c6767c4123)
|
|
(This used to be commit 983fe933431d0ee6f2e5083a5c768b8ed8911463)
|
|
(This used to be commit 409fb69ecbf1849b5c92ea018eaed126a4f8a24d)
|
|
(This used to be commit e809e6c20f08658f0d087c30767f9e38e53507fc)
|
|
Samba now features a pluggable passdb interface, along the same lines as the
one in use in the auth subsystem. In this case, only one backend may be active
at a time by the 'normal' interface, and only one backend per passdb_context is
permitted outside that.
This pluggable interface is designed to allow any number of passdb backends to
be compiled in, with the selection at runtime. The 'passdb backend' paramater
has been created (and documented!) to support this.
As such, configure has been modfied to allow (for example) --with-ldap and the
old smbpasswd to be selected at the same time.
This patch also introduces two new backends: smbpasswd_nua and tdbsam_nua.
These two backends accept 'non unix accounts', where the user does *not* exist
in /etc/passwd. These accounts' don't have UIDs in the unix sense, but to
avoid conflicts in the algroitmic mapping of RIDs, they use the values
specified in the 'non unix account range' paramter - in the same way as the
winbind ranges are specifed.
While I was at it, I cleaned up some of the code in pdb_tdb (code copied
directly from smbpasswd and not really considered properly). Most of this was
to do with % macro expansion on stored data. It isn't easy to get the macros
into the tdb, and the first password change will 'expand' them. tdbsam needs
to use a similar system to pdb_ldap in this regard.
This patch only makes minor adjustments to pdb_nisplus and pdb_ldap, becouse I
don't have the test facilities for these. I plan to incoroprate at least
pdb_ldap into this scheme after consultation with Jerry.
Each (converted) passdb module now no longer has any 'static' variables, and
only exports 1 init function outside its .c file.
The non-unix-account support in this patch has been proven! It is now possible
to join a win2k machine to a Samba PDC without an account in /etc/passwd!
Other changes:
Minor interface adjustments:
pdb_delete_sam_account() now takes a SAM_ACCOUNT, not a char*.
pdb_update_sam_account() no longer takes the 'override' argument that was being
ignored so often (every other passdb backend). Extra checks have been added in
some places.
Minor code changes:
smbpasswd no longer attempts to initialise the passdb at startup, this is
now done on first use.
pdbedit has lost some of its 'machine account' logic, as this behaviour is now
controlled by the passdb subsystem directly.
The samr subsystem no longer calls 'local password change', but does the pdb
interactions directly. This allow the ACB_ flags specifed to be transferred
direct to the backend, without interference.
Doco:
I've updated the doco to reflect some of the changes, and removed some paramters
no longer applicable to HEAD.
(This used to be commit ff354c99c585068af6dc1ff35a1f109a806b326b)
|
|
(This used to be commit af37a86917c969118a46cff7574487dbe1c75a2f)
|
|
(This used to be commit 12dcb55a3a89ce4b7daa5d41c41ebaf9e15b3de0)
|
|
backtrace. Will break on many machines, but we're already crashed in
this case.
(This used to be commit f0878f19eb729d70cc96f450b4b0d2c180498a35)
|
|
(This used to be commit 75ad6df18454022372526332dcde51bcb4285b97)
|
|
segvs in the build farm
(This used to be commit 228d4fc47b8adbcbda81bffaea09b616b5d89992)
|
|
(This used to be commit 067a4f87ac5dc2b5cf902c42f56923d0c5e29bc2)
|
|
This should get us 'green' for once...
Andrew Bartlett
(This used to be commit 042b9e3a6332473dc88c36dd7f99428644324ac4)
|
|
(This used to be commit 751ea8cfb931e1de6df447ed05e051262cdeb304)
|
|
Made test names more verbose.
(This used to be commit 87955fcf303d82d38ae543e7986c59fd086dc2db)
|
|
(This used to be commit fa7367a9731bc139ff4611f2781f3ca9bc7f89a7)
|
|
for the build farm this is actually the root directory for building,
or something like that. Thanks a.b.
(This used to be commit 309b718842dc36cd0b74c4c735684cd4613fff01)
|
|
(This used to be commit af65a01d0d80a86f405439ed5c46cf71026a5eb8)
|
|
farm but not present in Make.
(This used to be commit 0d6d0c31f9aecf1e35487ad26cc2f2c4c7d732f0)
|
|
(This used to be commit b6745ccd33544cfae5811ecdff7c1aea9d454eed)
|
|
Try not to run tests if the user specified --prefix=/usr* or something
similar, because it would not be nice(!) to clobber their
configuration file and passwords. Eventually I think we want to run
the installed versions, but specify different paths for everything.
(This used to be commit b18703fc8e15244dd840d1a1e9455a114e3f0408)
|
|
the rhosts and hostsequiv stuff with.
Andrew Bartlett
(This used to be commit 3a2a96772304bbf04a2bdb2d3a8f9d92df62fc5f)
|
|
previously disabled sub-test.
(This used to be commit 4df974527c7dbe88e7cbe9feb8e87f7ce89012b2)
|
|
little while. This should give us a bit more coverage.
Andrew Bartlett
(This used to be commit 9e5a1d1623872a598c936e596270abe519c36e97)
|
|
(This used to be commit 2138c4461921b8ac3141231169af1eaa6e85f9ba)
|
|
(This used to be commit 6f388502622fe77ae13ac2b0ae8f39b2e77ba455)
|