Gerald Carter [Mon, 21 Aug 2006 20:04:01 +0000 (20:04 +0000)]
r17669: Remove RID algorithm support from unmapped users and groups
when using smbpasswd
(This used to be commit
dde552336c732ddd6076a6a32575a37cb51aa94c)
Jeremy Allison [Mon, 21 Aug 2006 20:03:32 +0000 (20:03 +0000)]
r17668: Fix the miscalculations in pushing announces. Fixes
problems Kukks reported.
Jeremy.
(This used to be commit
426d722029b245e239f0ee39b6be249c59e1918c)
Jeremy Allison [Mon, 21 Aug 2006 17:58:41 +0000 (17:58 +0000)]
r17667: Merge snprintf fixes from tridge (Samba4).
Jeremy.
----------
several replacement snprintf() fixes.
1) when running the testsuite, actually test against the system
sprintf(), not against ourselves (doh!)
2) fix the buffer termination to terminate buf2 as well
3) fix handling of %llu, and add a simple test
This fixes a bug with password expiry on solaris
----------
(This used to be commit
64fd96666f391101c41b7a564fd20ab2e93e3923)
Jeremy Allison [Sun, 20 Aug 2006 20:05:49 +0000 (20:05 +0000)]
r17630: Looks like getpeerid() is a system function on
FreeBSD. Change to sys_getpeerid(). Thanks to
vl for pointing this out.
Jeremy.
(This used to be commit
dd0069cfcabb25dc7dc0d336696a5f2580abb5a1)
Volker Lendecke [Sun, 20 Aug 2006 17:55:06 +0000 (17:55 +0000)]
r17626: Some C++ Warnings
(This used to be commit
09e7c010f03ac3c621f7a7fad44685d278c1481a)
Volker Lendecke [Sun, 20 Aug 2006 17:46:20 +0000 (17:46 +0000)]
r17625: Fix the build
(This used to be commit
76ef8af881843685a5b14c9017cba32f6867bd28)
Volker Lendecke [Sun, 20 Aug 2006 17:30:27 +0000 (17:30 +0000)]
r17623: Revert accidential commit
(This used to be commit
8dcc4e7dd6dd879f341b58fc04cb1308c0463862)
Volker Lendecke [Sun, 20 Aug 2006 17:29:00 +0000 (17:29 +0000)]
r17622: Add a framework for a printing backend designed to support the build farm. If
we want to walk more printing code in the build farm I think doing that with a
customized printing backend is much easier than with a set of shell scripts.
Jerry, comments?
Volker
(This used to be commit
949cd6b992364d2bc60fd59051b6ac1c4cc4288c)
Volker Lendecke [Sun, 20 Aug 2006 17:08:37 +0000 (17:08 +0000)]
r17620: Fix two C++ Warnings and a memleak
(This used to be commit
d7246284e0117f7a97b3cbb80ff45b532559bf63)
Jeremy Allison [Sun, 20 Aug 2006 03:56:27 +0000 (03:56 +0000)]
r17618: Not using a cache version number (yet). We really should...
Jeremy
(This used to be commit
b711587f6e33bc5781b15da7bc49b31db4653073)
Jeremy Allison [Sun, 20 Aug 2006 03:53:42 +0000 (03:53 +0000)]
r17617: Take Andrew Bartletts excellent advice and don't store
the nt hash directly in the winbindd cache, store a
salted version (MD5 of salt + nt_hash). This is what
we do in the LDAP password history code. We store
this salted cache entry under the same name as an old
entry (CRED/<sid>) but detect it on read by checking
if there are 17 bytes of data after the first stored
hash (1 byte len, 16 bytes hash). GD PLEASE CHECK.
Jeremy.
(This used to be commit
89d0163a97edaa46049406ea3e2152bee4e0d1b2)
Jeremy Allison [Sun, 20 Aug 2006 01:25:26 +0000 (01:25 +0000)]
r17616: Add the lm and nt hashes to the cached credentials
stored - only store the password if we're going to
be doing a krb5 refresh. GD please review this change !
Now to add code to reference count the cached creds
(to allow multiple pam_logon/pam_logoffs to keep the
creds around), ensure that the cred cache is called
on all successful pam_logons (if we have winbindd cache
pam credentials = true, set this by default) and finally
ensure the creds cache is changed on successful password
change. GD - you *really* need to review this :-).
Jeremy.
(This used to be commit
017e7e14958d29246a1b221e33755bb91e96b08f)
Jeremy Allison [Sat, 19 Aug 2006 20:42:04 +0000 (20:42 +0000)]
r17612: Modify NTLMSSP session code so that it doesn't store
a copy of the plaintext password, only the NT and LM
hashes (all it needs). Fix smbencrypt to expose hash
verions of plaintext function. Andrew Bartlett, you
might want to look at this for gensec.
This should make it easier for winbindd to store
cached credentials without having to store plaintext
passwords in an NTLM-only environment (non krb5).
Jeremy.
(This used to be commit
629faa530f0422755823644f1c23bea74830912f)
Jeremy Allison [Sat, 19 Aug 2006 01:04:54 +0000 (01:04 +0000)]
r17610: Added the ability for firefox to drive the winbindd
ntlm_auth module to allow it to use winbindd cached
credentials.The credentials are currently only stored
in a krb5 MIT environment - we need to add an option to
winbindd to allow passwords to be stored even in an NTLM-only
environment.
Patch from Robert O'Callahan, modified with some fixes
by me.
Jeremy.
(This used to be commit
ae7cc298a113d8984557684bd6ad216cbb27cff3)
Volker Lendecke [Fri, 18 Aug 2006 16:25:09 +0000 (16:25 +0000)]
r17607: Adapt the Samba4 directory structure for tdb. Makes it easier to diff.
Let's see what it breaks. For me it works :-)
Volker
(This used to be commit
337be14b432e5dfd80c7418b2db4fe0087259b77)
Volker Lendecke [Fri, 18 Aug 2006 15:10:46 +0000 (15:10 +0000)]
r17606: Introduce krb5_to_ntstatus.
Thanks to Michael Adam <ma@sernet.de>
Volker
(This used to be commit
6e641c90b8f52a822a83701cdf305c60416d7f0c)
Volker Lendecke [Fri, 18 Aug 2006 14:05:25 +0000 (14:05 +0000)]
r17605: Some C++ warnings
(This used to be commit
05268d7a731861b10ce8556fd32a004808383923)
Volker Lendecke [Fri, 18 Aug 2006 13:37:36 +0000 (13:37 +0000)]
r17604: Fix a bug caught by g++.
Jeremy, please check this!
Volker
(This used to be commit
8117a7b3bf3f273dd018c42864b3136dec47ec79)
Volker Lendecke [Fri, 18 Aug 2006 12:45:51 +0000 (12:45 +0000)]
r17603: Make net_ads_join_ok return NTSTATUS.
Thanks to Michael Adam <ma@sernet.de>
hop, hop, hop... ;-)
Volker
(This used to be commit
47facab798bdc6e20b2620972f1b8f2338fac239)
Volker Lendecke [Fri, 18 Aug 2006 12:39:21 +0000 (12:39 +0000)]
r17602: Make check_ads_config return NTSTATUS, set some error codes in net_ads_join.
Thanks to Michael Adam <ma@sernet.de>
Volker
(This used to be commit
27cca861507afa9caf694ef89e543c86de01c2cd)
Jeremy Allison [Thu, 17 Aug 2006 19:49:54 +0000 (19:49 +0000)]
r17595: Fix from Ben Winslow <rain@bluecherry.net> to allow
client smb signing to be correctly turned off.
Jeremy.
(This used to be commit
61f052b0a67b8a05b5d925bf8bbad73369ac03bd)
Volker Lendecke [Thu, 17 Aug 2006 15:04:53 +0000 (15:04 +0000)]
r17592: Remove some unused functions pointed out by John E. Malmberg, make
do_file_lock static to pdb_smbpasswd.c, the only user of it.
Volker
(This used to be commit
543f77a45f0a75ede48b0f2c674a0abdd386fed5)
Volker Lendecke [Thu, 17 Aug 2006 14:38:59 +0000 (14:38 +0000)]
r17591: machine_account is unused, and ctx must be freed. Thanks Michael
(This used to be commit
a347f8a9c480cf09abac9144e04ab2b13457e3b0)
Volker Lendecke [Thu, 17 Aug 2006 14:28:03 +0000 (14:28 +0000)]
r17590: Some C++ Warnings
(This used to be commit
b7ec240880af0072ef20b2c0d688ef3cc386d484)
Volker Lendecke [Thu, 17 Aug 2006 13:46:02 +0000 (13:46 +0000)]
r17589: Check in the really uncontroversial patch from Michael
(This used to be commit
de76217cfb9d20431189e838999a634e4de067a9)
Volker Lendecke [Thu, 17 Aug 2006 12:44:59 +0000 (12:44 +0000)]
r17585: Don't let ads_status throw away the error information.
Thanks to Michael Adam <ma@sernet.de>.
Volker
(This used to be commit
ea3a4142a0f2140d8743a50518ae94df2d84d972)
Volker Lendecke [Thu, 17 Aug 2006 11:54:23 +0000 (11:54 +0000)]
r17584: Some C++ Warnings
(This used to be commit
f6194cf4b263454bbdf180a7d014ffc3498df497)
Volker Lendecke [Thu, 17 Aug 2006 10:01:48 +0000 (10:01 +0000)]
r17583: Change internal cli_session_setup functions to NTSTATUS.
Volker
(This used to be commit
990da03f0940371d20f89c145b7ebdbe8e9bf4c4)
Volker Lendecke [Wed, 16 Aug 2006 17:43:13 +0000 (17:43 +0000)]
r17573: Fix typo
(This used to be commit
fd6e3f133b267a9506699d1c2934a153dd732df2)
Volker Lendecke [Wed, 16 Aug 2006 17:33:47 +0000 (17:33 +0000)]
r17572: Fix the build
(This used to be commit
acf237b3cd1b546c2744447d977d36a8e3ed4d10)
Volker Lendecke [Wed, 16 Aug 2006 17:14:16 +0000 (17:14 +0000)]
r17571: Change the return code of cli_session_setup from BOOL to NTSTATUS
Volker
(This used to be commit
94817a8ef53589011bc4ead4e17807a101acf5c9)
Volker Lendecke [Wed, 16 Aug 2006 10:36:19 +0000 (10:36 +0000)]
r17569: Make 'max smbd processes' more robust. Counting on the child to decrement a
tdb entry is not the most reliable way to count children correctly.
This increments the number of children after a fork and decrements it upon
SIGCLD. I'm keeping a list of children just for consistency checks, so that we
at least get a debug level 0 message if something goes wrong.
Volker
(This used to be commit
eb45de167d24d07a218307ec5a48c0029ec097c6)
Volker Lendecke [Wed, 16 Aug 2006 09:10:54 +0000 (09:10 +0000)]
r17568: Reformatting -- more than 100 cols is too much :-)
(This used to be commit
2a66abca02b5e95b66ab336f0d0e3977676d4540)
Volker Lendecke [Tue, 15 Aug 2006 14:27:20 +0000 (14:27 +0000)]
r17557: Change net_join_domain to return NTSTATUS instead of int.
Thanks to Michael Adam <ma@sernet.de>.
Volker
(This used to be commit
c4e10afadb39ff562287ab2294df0a1f83b28908)
Volker Lendecke [Tue, 15 Aug 2006 14:18:15 +0000 (14:18 +0000)]
r17556: Remove duplicate entries. Thanks to Michael Adam <ma@sernet.de>
Volker
(This used to be commit
ea83001d3ed0b5da67cf367c17fdef662bc01681)
Volker Lendecke [Tue, 15 Aug 2006 14:09:12 +0000 (14:09 +0000)]
r17555: Cleanup
(This used to be commit
4199b5d2262e1e154f75f609fef20ed8e8c21cf2)
Volker Lendecke [Tue, 15 Aug 2006 14:07:15 +0000 (14:07 +0000)]
r17554: Cleanup
(This used to be commit
761cbd52f0cff6b864c506ec03c94039b6101ef9)
Volker Lendecke [Tue, 15 Aug 2006 12:28:23 +0000 (12:28 +0000)]
r17552: Attempt to fix tdb transactions on IRIX
(This used to be commit
4a7b06860cd2907eb0e0deb466a613529121b8b7)
Volker Lendecke [Tue, 15 Aug 2006 09:53:16 +0000 (09:53 +0000)]
r17551: Move some DEBUG to d_printf in interactive functions and return
NO_LOGON_SERVERS if no domain controller was found.
Thanks to Michael Adam <ma@sernet.de>.
Volker
(This used to be commit
d44599de3a61707a32851f37ddfb2425949622f8)
Volker Lendecke [Tue, 15 Aug 2006 08:05:52 +0000 (08:05 +0000)]
r17550: Fix a few bugs in the tdb_multikey code. Thanks to tridge for pointing them
out.
Volker
(This used to be commit
6bf5e7080a51c416d1d1466b1ca84c8f23a6bf2c)
Jeremy Allison [Mon, 14 Aug 2006 16:53:14 +0000 (16:53 +0000)]
r17541: When returning a trans2 request, if the "max data
bytes returned" is less than the amount we want
to send, return what we can and set STATUS_BUFFER_OVERFLOW
(doserror ERRDOS,ERRbufferoverflow). Required by
OS/2 to handle EA's that are too large. It's hard
to test this in Samba4 smbtorture as the max data
bytes returned is hard coded at 0xffff (as it is
in the Samba3 client libraries also). I used a
custom version of Samba4 smbtorture to test this
out. Might add a "max data bytes" param to make
this testable in the build farm. Confirmed by
"Guenter Kukkukk (sambaos2)" <sambaos2@kukkukk.com>
and Andreas Taegener <atsamba11@eideltown.de>
that this fixes the issue.
Jeremy.
(This used to be commit
ff2f1202b76991a404dae8df17c36f8135c8dc51)
Volker Lendecke [Mon, 14 Aug 2006 12:54:37 +0000 (12:54 +0000)]
r17536: Add a debug message citing the reason why an LDAP connection failed, inspired
by Christian M Ambach <CAMBACH1@de.ibm.com>.
Volker
(This used to be commit
cf7c83d462dc766fa6f48728d0a4e8d534cc2bd4)
Volker Lendecke [Mon, 14 Aug 2006 12:42:46 +0000 (12:42 +0000)]
r17535: Reformatting, this had many tabs instead of ^$
(This used to be commit
0f483cf66c203d8590998b83cbeeb236ba06ab63)
Simo Sorce [Sat, 12 Aug 2006 20:23:58 +0000 (20:23 +0000)]
r17509: same for old woody packaging stuff
(This used to be commit
4fc773080a43cc73906c99a38406706b23e84c3f)
Simo Sorce [Sat, 12 Aug 2006 20:22:55 +0000 (20:22 +0000)]
r17508: I didn;t realize we had this in our packages, remove it
(This used to be commit
47a462359562eea5d99e1c3965569615c3451397)
Jeremy Allison [Fri, 11 Aug 2006 18:09:59 +0000 (18:09 +0000)]
r17496: net groupmap add could add uninitialized sid_name_type
entries to the group mapping db. Ensure this can't happen.
Jeremy.
(This used to be commit
2ba0d93d53868c8b28dccf91dfa26e86817da511)
Andrew Bartlett [Fri, 11 Aug 2006 06:44:31 +0000 (06:44 +0000)]
r17487: Allocate some OID space for Samba4, so we don't trip on each other.
Andrew Bartlett
(This used to be commit
199a33ac80977782869b24ce86dcd51cb16d3851)
Volker Lendecke [Thu, 10 Aug 2006 11:33:42 +0000 (11:33 +0000)]
r17477: Add talloc_asprintf_len and make use of it.
Volker
(This used to be commit
c0ff2afe0683095401fa7b7654aa3b2fe950f7b3)
Volker Lendecke [Wed, 9 Aug 2006 20:25:13 +0000 (20:25 +0000)]
r17470: This is the group mapping rewrite announced a few days ago. I'm afraid it's
more than 1000 lines of patch, but doing it in smaller pieces is hardly
possible.
Anybody interested please look over this. The patch is not really interesting,
just look at the new groupdb/mapping.c file.
Jerry, one entry for the 3.0.24 release notes: smbd will refuse to start if we
have overlapping mappings in group_mapping.tdb. With the old db a unix gid can
be mapped to two different SIDs. This will be refused with the new code.
Volker
(This used to be commit
f0f0e893ca41d35b58b35929de78dcb911b3c7dc)
Simo Sorce [Wed, 9 Aug 2006 15:36:57 +0000 (15:36 +0000)]
r17469: remove unused variable
(This used to be commit
c7d115a7d08ecebe2ba70b3f0efae39a1fd8e42a)
Volker Lendecke [Wed, 9 Aug 2006 15:25:26 +0000 (15:25 +0000)]
r17468: To minimize the diff later on, pre-commit some changes independently: Change
internal mapping.c functions to return NTSTATUS instead of BOOL.
Volker
(This used to be commit
4ebfc30a28a6f48613098176c5acdfdafbd2941a)
Volker Lendecke [Tue, 8 Aug 2006 20:50:35 +0000 (20:50 +0000)]
r17465: Get rid of add_initial_entry. In the two places it was called in it seemed a
bit pointless to me.
Volker
(This used to be commit
244b25ae49d3c635fc54498dbee29f5b649ea1fa)
Jeremy Allison [Tue, 8 Aug 2006 20:35:17 +0000 (20:35 +0000)]
r17464: Ensure we use a hash16 data type, not a string,
for storing offline hashes.
Jeremy.
(This used to be commit
c8e6f7e41c9db436b34dd127d77940d7b43bf13b)
Volker Lendecke [Tue, 8 Aug 2006 19:29:34 +0000 (19:29 +0000)]
r17463: A bit of cleanup work:
Remove some unused code: pdb_find_alias is not used anymore, and nobody I
think has ever used the pdb_nop operations for group mapping. smbpasswd and
tdb use the default ones and ldap has its own.
Make the functions pdb_getgr* return NTSTATUS instead of BOOL. Nobody right
now really makes use of it, but it feels wrong to throw away information so
early.
Volker
(This used to be commit
f9856f6490fe44fdba97ea86062237d8c74d4bdc)
Simo Sorce [Tue, 8 Aug 2006 18:38:33 +0000 (18:38 +0000)]
r17462: Fix a cut&paste bug that caused us to return a null SID on some error conditions
(This used to be commit
954593bd41ff2475df5d37eae18be08ffa3002eb)
Jeremy Allison [Tue, 8 Aug 2006 17:34:51 +0000 (17:34 +0000)]
r17461: Ensure we never save a NULL SID mapping. || should be &&.
Found by Whitfield school.
Jeremy.
(This used to be commit
f8584a475853bd8937fb0cf1b304c98f96fbd872)
Volker Lendecke [Tue, 8 Aug 2006 16:08:22 +0000 (16:08 +0000)]
r17460: First step at fixing the build breakage with the groupmapping test. On Linux,
F_RDLCK is defined to 0, for example NetBSD has it at 1.
Still does not work fully though. Still investigating.
This might also be interesting to Samba4.
Volker
(This used to be commit
a1c3774e01710ae0edc89e05f7781d2928ea9319)
Simo Sorce [Tue, 8 Aug 2006 15:33:09 +0000 (15:33 +0000)]
r17459: As by Jerry's word commit this without his review.
This patch add some missing async functions to
solve UID/GID -> SID requests not just out of the cache,
but down the remote idmap if necessary.
This patch solves the problem of servers not showing users/groups names
for allocated UID/GIDs when joined to a group of servers that share a
prepopulated idmap backend.
Also correctly resolve UID/GIDs to SIDs when looking ACLs from the
windows security tab on teh same situation.
Simo.
(This used to be commit
b8578bfab6a04fcd65a2e65f507067459e326077)
Volker Lendecke [Tue, 8 Aug 2006 13:54:43 +0000 (13:54 +0000)]
r17457: Add a test to do some operations on group mapping.
Volker
(This used to be commit
68db058fdf508d5b4d38731ece21f5d92feca00c)
Günther Deschner [Tue, 8 Aug 2006 11:45:57 +0000 (11:45 +0000)]
r17454: Adding dfs_EnumEx for rpcclient (Samba4 IDL to follow).
Guenther
(This used to be commit
8c1198c1592e7c07904b448ed7a54b9b23c941df)
Günther Deschner [Tue, 8 Aug 2006 11:00:16 +0000 (11:00 +0000)]
r17453: Fix msdfs RPC management (this broke with the autogenerated dfs rpcs).
* Remove "unknown" from dfs_Enum (samba4 dfs IDL updates to follow).
* When encountering an unsupported infolevel the rpc server must reply
with a dfs_info_0 structure and WERR_OK (observed from w2k3 when talking
to nt4).
Guenther
(This used to be commit
f9bef1f08f7d2a4c95c28329ac73e8646f033998)
Volker Lendecke [Tue, 8 Aug 2006 09:56:38 +0000 (09:56 +0000)]
r17452: Some C++ warnings
(This used to be commit
e4b8c79a9d6f7323953121887af4f482d04a9228)
Volker Lendecke [Tue, 8 Aug 2006 08:26:40 +0000 (08:26 +0000)]
r17451: Change pdb_getgrsid not to take a DOM_SID but a const DOM_SID * as an
argument.
Volker
(This used to be commit
873a5a1211d185fd50e7167d88cbc869f70dfd3f)
Volker Lendecke [Mon, 7 Aug 2006 20:15:31 +0000 (20:15 +0000)]
r17446: Fix some C++ warnings and two memleaks found by Coverity, IDs 304 and 305.
Volker
(This used to be commit
4f6605a4880f54f2c7d1f3c7554408d893bc623c)
Gerald Carter [Mon, 7 Aug 2006 18:55:42 +0000 (18:55 +0000)]
r17445: fix bad PAM file on 64 bit boxes
(This used to be commit
d44a3228f08b8855e8f3a5a045b4366af24b82f8)
Gerald Carter [Mon, 7 Aug 2006 18:25:28 +0000 (18:25 +0000)]
r17444: put pam and nss libs in samba-common on RHEL for compatibility with system provides rpms
(This used to be commit
cad3d27e05a8c6e325795ce145b9f2840911f4bb)
Jeremy Allison [Mon, 7 Aug 2006 15:41:43 +0000 (15:41 +0000)]
r17439: Fix logic error in checking TALLOC return. Spotted by Volker.
Jeremy.
(This used to be commit
06aea05c52ee770a2dd6465e9e2fcd0ccd8c811d)
Jeremy Allison [Sat, 5 Aug 2006 20:05:37 +0000 (20:05 +0000)]
r17431: Fix bug #4003, reported by dale-keyword-samba.c7b741@codefu.org.
NTcancel doesn't send a reply, so in this case the signing
sequence number is only incremented by 1, not 2.
Jeremy.
(This used to be commit
85841a01987e653a085af00c7c437145686a332b)
Volker Lendecke [Sat, 5 Aug 2006 17:49:35 +0000 (17:49 +0000)]
r17425: Add the multi-key wrapper. If it's necessary to add general blobs as keys,
this can trivially be added later.
Volker
(This used to be commit
6915adb9780052952e4a1d9e1c3e6cac06f48463)
Simo Sorce [Fri, 4 Aug 2006 22:18:02 +0000 (22:18 +0000)]
r17408: Let us use netgroups even without a NIS domain but just using files
(This used to be commit
c065341d3ffc9125514f563c63d416cf7c40375f)
Jeremy Allison [Fri, 4 Aug 2006 21:15:52 +0000 (21:15 +0000)]
r17407: Don't do strchr_m twice when once will do.
Jeremy.
(This used to be commit
b5f0b1b6447ac3c77558b32d97ce96d357ce15c0)
Volker Lendecke [Fri, 4 Aug 2006 21:07:32 +0000 (21:07 +0000)]
r17406: We need to do a translation of winbind separator -> '\\' in
lookup_name_smbconf, otherwise
force user = domain+administrator
can not work. Also attempt to fix the 'valid users = domain+group' bug at the
same time.
Volker
(This used to be commit
255475901c13fde29b1b476560d969cc99712767)
Volker Lendecke [Fri, 4 Aug 2006 20:43:21 +0000 (20:43 +0000)]
r17404: Is this XP (extreme programming)? :-)
With lp_workgroup we end up with remote names again...
Volker
(This used to be commit
250b9f353118bee4c080655f57d09011679deaf7)
Gerald Carter [Fri, 4 Aug 2006 20:39:37 +0000 (20:39 +0000)]
r17403: add a helpful debug msg
(This used to be commit
63325b36872c92d9f9fe04a185d7bd3ac525d84c)
Jeremy Allison [Fri, 4 Aug 2006 20:35:52 +0000 (20:35 +0000)]
r17402: Added lookup_name_smbconf() to be called when looking
up names from smb.conf. If the name is unqualified it
causes the lookup to be done in WORKGROUP\name, then
"Unix [users|groups]"\name rather than searching the
domain. Should fix the problems with "force user"
selecting a domain user by preference.
Jeremy.
(This used to be commit
1e1fcb5eb2ac4bd360461b29f85c07dbf460025d)
Gerald Carter [Fri, 4 Aug 2006 17:36:31 +0000 (17:36 +0000)]
r17401: BUG 3855: remove bits of XML and SQL checks from aclocal.m4
(This used to be commit
92ccdec33f8afb01335f9b775b5af11296ba2aa2)
Volker Lendecke [Fri, 4 Aug 2006 12:15:53 +0000 (12:15 +0000)]
r17399: Some C++ warnings
(This used to be commit
d12b08fc619f7b566ef5c4cc7294174e887014fe)
Jeremy Allison [Fri, 4 Aug 2006 01:09:57 +0000 (01:09 +0000)]
r17393: Remove Volker's ASSERT that num_groupsids > 0.
For guest connection they may well be zero.
This should fix up the buildfarm (fingers
crossed).
Jeremy.
(This used to be commit
16ebccbc5889c3b4c1a20bf3453bd523ddf6f5b0)
Jeremy Allison [Fri, 4 Aug 2006 00:00:15 +0000 (00:00 +0000)]
r17392: Commit Volker's fix for the valid users problem.
Let's look at the build farm now... :-).
Jeremy.
(This used to be commit
6d822b85676f033a1a2e422e2d5ac92aaf566aef)
Jeremy Allison [Thu, 3 Aug 2006 23:44:07 +0000 (23:44 +0000)]
r17391: Revert the second part of the valid users fix - the
netlogon code uses pdb_get_group_sid() which could
return a S-1-1-22 unix sid. Who knew.... :-(.
I'm going to test Volker's fix instead. Once
3.0.23b is out we *have* to rip out the pdb_set_group_sid()
code....
Jeremy.
(This used to be commit
65003e1b251b4762cef2b3cdcc895269f9319eb8)
Jeremy Allison [Thu, 3 Aug 2006 19:07:12 +0000 (19:07 +0000)]
r17388: Fix the "valid users"/token issue for now. Volker,
please come in and fix it in a less ugly way once
you have some time. Thanks,
Jeremy.
(This used to be commit
79b1e668e2ce263c84ff8fafaafb3e57b06717ab)
Gerald Carter [Thu, 3 Aug 2006 15:19:01 +0000 (15:19 +0000)]
r17386: fix inverted logic pointed out by Volker. When deleting a printer return access denied if the printer still exists after the delete_printer_hook() is called
(This used to be commit
c05e2bdc0c068eb832035daea7962ab1a9e787b2)
Gerald Carter [Thu, 3 Aug 2006 12:41:20 +0000 (12:41 +0000)]
r17383: Patch from Michael Adams <ma@sernet.de> to catch
some memory leaks on error paths in net_ads_join()
(This used to be commit
24de2d83ff1d27400a89985126edee588bc415f3)
Jeremy Allison [Thu, 3 Aug 2006 01:49:14 +0000 (01:49 +0000)]
r17378: Fix the issues people have been having with mapped
users (username map) and failure to connect to a
share. Essentially, even on a standalone system
we were going into the create_token_from_username()
code (I think by mistake) if the username was mapped.
Fixes bug #3991.
Volker & Jerry - please go over this with a very careful eye
and let me know if this isn't correct (I think it is,
but this isn't my code and it's a dangerous area for
me to be playing in :-).
Jeremy
(This used to be commit
0b5b2b53ec6e4c25b5f6645451dfce4aa7ae8a61)
Jeremy Allison [Wed, 2 Aug 2006 16:18:45 +0000 (16:18 +0000)]
r17376: Fix bug #3985 - ensure in msdfs we check for our
netbios aliases. Reported by Björn Jacke <bjoern@j3e.de>.
Probably needs to be in 3.0.23b (if Björn approves
of the fix).
Jeremy.
(This used to be commit
e9e711fe37d9aec28b329dbfe2ad3ebfc1771825)
Volker Lendecke [Wed, 2 Aug 2006 09:32:18 +0000 (09:32 +0000)]
r17375: If a field containts only whitespace, we need to do base64 as well.
Volker
(This used to be commit
795d06f427061536c6e3a3eb5b5d60a27f5ec70d)
Volker Lendecke [Wed, 2 Aug 2006 08:53:22 +0000 (08:53 +0000)]
r17374: Get rid of a silly "System User" default for "description", also fetch the
sambaProfilePath.
Volker
(This used to be commit
61e7ed593b944fa14330729e585d1f790af93a7b)
Jeremy Allison [Tue, 1 Aug 2006 18:40:19 +0000 (18:40 +0000)]
r17367: Reverting the ab code. Note I'm not saying this
code is wrong or bad or anything, just that it
needs to be discussed & reviewed on the samba-technical
list before we add a platform-specific NFSv4 mapping.
That way lies a lot of future pain :-).
Jeremy.
(This used to be commit
330899ec30ffceb798e3a8362d20e103e20b2897)
Günther Deschner [Tue, 1 Aug 2006 15:31:16 +0000 (15:31 +0000)]
r17366: Save the logon script path from the info3 in the PAM session allowing
other PAM modules to pick it up from there.
Guenther
(This used to be commit
b3ac5a586ba37b1122b0dc941dfee648fc4fa6d5)
Günther Deschner [Tue, 1 Aug 2006 15:17:18 +0000 (15:17 +0000)]
r17365: Fix memleak.
Guenther
(This used to be commit
62a8e0b08919e71c6a575ce6d89d8a4a09acbd87)
Volker Lendecke [Tue, 1 Aug 2006 14:46:08 +0000 (14:46 +0000)]
r17364: Another NT4 join bug: The idealx tools set the primary group sid, and if we do
an update_sam_account later on, we want to also set it using the delete/add
method. As the idealx tools use the replace method, they don't care about what
has been in there before.
Jerry, this is a likely 3.0.23b candidate. Not merging, it's your call :-)
Volker
(This used to be commit
f002a3633892fc040f0a6d076723c660bb82a41a)
Volker Lendecke [Tue, 1 Aug 2006 12:45:12 +0000 (12:45 +0000)]
r17363: Some C++ warnings
(This used to be commit
fd82f185a2e0f94bfb75f4eee072556ad94bf27d)
Alexander Bokovoy [Tue, 1 Aug 2006 09:25:24 +0000 (09:25 +0000)]
r17358: Re-add JFS2 NFS4 ACLs support, move readme for it into AIX-specific examples directory.
(This used to be commit
c085355c323c65ee782516859eed8a76b53e6035)
Volker Lendecke [Tue, 1 Aug 2006 09:06:18 +0000 (09:06 +0000)]
r17356: Also transfer the sambaHomePath attribute.
Volker
(This used to be commit
49ad0d4d0eea85ef133e1a5c055305e06de109de)
Alexander Bokovoy [Tue, 1 Aug 2006 08:27:19 +0000 (08:27 +0000)]
r17354: Revert -r 17353 per Volker request while gpfs compatibility layer code will be released.
(This used to be commit
5b1db0151461af18d994359e86c649922fc6de65)
Alexander Bokovoy [Tue, 1 Aug 2006 07:38:36 +0000 (07:38 +0000)]
r17353: Add support for JFS2 NFS4/AIXC and GPFS acls based on NFSv4 ACLs.
(This used to be commit
72312cb2e255301f978455a559461ad83b13b6cb)
Volker Lendecke [Mon, 31 Jul 2006 21:40:25 +0000 (21:40 +0000)]
r17348: Some C++ warnings
(This used to be commit
ae6b9b34e59167e3958bfdb9997fa25340b9a0a3)
Volker Lendecke [Mon, 31 Jul 2006 21:11:03 +0000 (21:11 +0000)]
r17347: Some C++ warnings -- 271 left
(This used to be commit
641dac4f85c0e00484d90726bea1a4cb58c8235c)
Jeremy Allison [Mon, 31 Jul 2006 20:58:02 +0000 (20:58 +0000)]
r17346: Add optimisation vl needs for the cluster code where
we don't get the chainlock when getting the byte range
lock record read-only.
Jeremy.
(This used to be commit
fcd798ca0c1b76adb2bcda4a99c40c7aacb0addb)
Volker Lendecke [Mon, 31 Jul 2006 20:51:55 +0000 (20:51 +0000)]
r17345: Some C++ warnings
(This used to be commit
21c8fa2fc8bfd35d203b089ff61efc7c292b4dc0)