From 5cd4b7b7c03df6e896186d985b6858a06aa40b3f Mon Sep 17 00:00:00 2001 From: Steven Danneman Date: Thu, 12 Feb 2009 13:01:45 -0800 Subject: s3: Added new parameter "map untrusted to domain" When enabled this reverts smbd to the legacy domain remapping behavior when a user provides an untrusted domain This partially reverts d8c54fdd --- source3/param/loadparm.c | 13 +++++++++++++ 1 file changed, 13 insertions(+) (limited to 'source3/param/loadparm.c') diff --git a/source3/param/loadparm.c b/source3/param/loadparm.c index 0dfbb09331..a127ec5394 100644 --- a/source3/param/loadparm.c +++ b/source3/param/loadparm.c @@ -345,6 +345,7 @@ struct global { struct param_opt_struct *param_opt; int cups_connection_timeout; char *szSMBPerfcountModule; + bool bMapUntrustedToDomain; }; static struct global Globals; @@ -1776,6 +1777,15 @@ static struct parm_struct parm_table[] = { .enum_list = enum_kerberos_method, .flags = FLAG_ADVANCED, }, + { + .label = "map untrusted to domain", + .type = P_BOOL, + .p_class = P_GLOBAL, + .ptr = &Globals.bMapUntrustedToDomain, + .special = NULL, + .enum_list = NULL, + .flags = FLAG_ADVANCED | FLAG_GLOBAL, + }, {N_("Logging Options"), P_SEP, P_SEPARATOR}, @@ -5053,6 +5063,8 @@ static void init_globals(bool first_time_only) Globals.bRegistryShares = False; Globals.iminreceivefile = 0; + + Globals.bMapUntrustedToDomain = false; } /******************************************************************* @@ -5351,6 +5363,7 @@ FN_GLOBAL_BOOL(lp_nt_status_support, &Globals.bNTStatusSupport) FN_GLOBAL_BOOL(lp_stat_cache, &Globals.bStatCache) FN_GLOBAL_INTEGER(lp_max_stat_cache_size, &Globals.iMaxStatCacheSize) FN_GLOBAL_BOOL(lp_allow_trusted_domains, &Globals.bAllowTrustedDomains) +FN_GLOBAL_BOOL(lp_map_untrusted_to_domain, &Globals.bMapUntrustedToDomain) FN_GLOBAL_INTEGER(lp_restrict_anonymous, &Globals.restrict_anonymous) FN_GLOBAL_BOOL(lp_lanman_auth, &Globals.bLanmanAuth) FN_GLOBAL_BOOL(lp_ntlm_auth, &Globals.bNTLMAuth) -- cgit