Günther Deschner [Tue, 4 Sep 2007 14:06:33 +0000 (14:06 +0000)]
r24952: Set the kdc locator env vars. This makes the krb5 locator plugin fully
operational (from within winbindd and outside).
Guenther
(This used to be commit
800645d5388d7df1f8cf31b4218bfc7dd5b4d12a)
Volker Lendecke [Tue, 4 Sep 2007 13:21:24 +0000 (13:21 +0000)]
r24951: Warn if "os level" > 255
Thanks to Karolin Seeger <ks@sernet.de>
(This used to be commit
3abf06efc1286090caf380eb685e90ba7f412748)
Volker Lendecke [Tue, 4 Sep 2007 10:15:04 +0000 (10:15 +0000)]
r24949: Remove some static buffers
(This used to be commit
df648d47ff3c4e24f439fda839653bda98323100)
Volker Lendecke [Tue, 4 Sep 2007 05:39:06 +0000 (05:39 +0000)]
r24943: Some stackframes
(This used to be commit
cddb9f11d5fafcd3797cb242775c37f0c04d4f15)
Günther Deschner [Mon, 3 Sep 2007 12:23:45 +0000 (12:23 +0000)]
r24920: Reformatting.
Guenther
(This used to be commit
62426a055513c309a381d0d96d60edc07e6dfcdf)
Volker Lendecke [Sun, 2 Sep 2007 17:50:05 +0000 (17:50 +0000)]
r24903: One more tick in #if 0 code
(This used to be commit
e0b4fb55e3176785a85d66efece15d0a366a35f1)
Volker Lendecke [Sun, 2 Sep 2007 17:48:01 +0000 (17:48 +0000)]
r24902: DEBUG might use talloc_tos() itself...
(This used to be commit
1b39374a173bf6b40426000d010d092e94afc4d7)
Michael Adam [Sun, 2 Sep 2007 00:32:57 +0000 (00:32 +0000)]
r24879: Activate the winbindd cache-validation message handler.
Now the winbindd cache can be checked at runtime by
calling "smbcontrol winbindd validate-cache".
For the execution of the validation code, I fork a child
and in the child restore the default SIGCHLD handler in
order for the fork/waitpid mechanism of tdb_validate to work.
Michael
(This used to be commit
f379a5c47d5004a5a66b6c12ec119c739b9e146d)
Michael Adam [Sun, 2 Sep 2007 00:23:02 +0000 (00:23 +0000)]
r24877: Don't panic in tdb validation code when the fork or waitpid fails.
Return error instead.
Michael
(This used to be commit
9b25355dd66519afd548fecbf2da7608b024a35b)
Derrell Lipman [Sat, 1 Sep 2007 18:34:50 +0000 (18:34 +0000)]
r24864: - Correct failure of libsmbclient against a version of Windows found on a NAS
device. The device resets a NBT connection on port 139 when it receives a
NetBIOS keepalive request. That request should be supported when NetBIOS is
in use; Windows is behaving badly.
libsmbclient needs a way to determine if a connection is still alive, and
was using a NetBIOS keepalive request if port 139 was in use (on the
assumption that it was probably NBT), and getpeername() when port 139 was
not being used (assuming naked transport).
This patch simplifies the code by exclusively using getpeername() to check
whether a connection is still alive. The NetBIOS keepalive request is
optional anyway (with preference being given to using TCP mechanisms for the
same purpose), so this should be both simpler and more reliable.
Derrell
(This used to be commit
1f122352b02e3f4be9ac2d638b18807dafd05429)
Rafal Szczesniak [Fri, 31 Aug 2007 21:25:53 +0000 (21:25 +0000)]
r24853: Rename function as Jerry asked.
s/net_use_upn_machine_account/net_use_krb_machine_account/
rafal
(This used to be commit
86af9fedad71697f22cc739518340f7753b8f9da)
Michael Adam [Fri, 31 Aug 2007 16:30:40 +0000 (16:30 +0000)]
r24848: Make tdb_validate() take an open tdb handle instead of a file name.
A new wrapper tdb_validate_open() takes a filename an opens and closes
the tdb before and after calling tdb_validate() respectively.
winbindd_validata_cache_nobackup() now dynamically calls one of
the above functions depending on whether the cache tdb has already
been opened or not.
Michael
(This used to be commit
dc0b08e6590caa4974fd4d9f34f39f261d1f1dee)
Michael Adam [Fri, 31 Aug 2007 15:51:05 +0000 (15:51 +0000)]
r24847: Change standard failure return code of tdb_validate from "-1" to "1".
(This is more safely used with casts from int to uint8, e.g.)
Michael
(This used to be commit
cb3583b39212688a627a29bbddb2e98497714d42)
Michael Adam [Fri, 31 Aug 2007 15:34:26 +0000 (15:34 +0000)]
r24845: Fix a segfault in smbcontrol when called with parameters but no extra args.
Michael
(This used to be commit
f1bbf9bc18fc615a5660674f8346b4a7bed50044)
Michael Adam [Fri, 31 Aug 2007 15:24:43 +0000 (15:24 +0000)]
r24843: Add a "validate-cache" control message to winbindd.
So there is a new subcommand "smbcontrol winbindd validate-cache" now.
This change provides the infrastructure:
The function currently returns "true" unconditionally.
The call of a real cache validation function will be incorporated
in subsequent changes.
Michael
(This used to be commit
ef92d505c04397614cb0dd5ede967e9017a5e302)
Günther Deschner [Fri, 31 Aug 2007 15:01:50 +0000 (15:01 +0000)]
r24842: Fix build warning.
Guenther
(This used to be commit
205ef6ab3e9332a2a4a4f775c2cdddbcd3ec739d)
Günther Deschner [Fri, 31 Aug 2007 14:58:26 +0000 (14:58 +0000)]
r24841: The locator has no dependencies to ldap libs anymore. Also fix the build.
Guenther
(This used to be commit
ce7c816083db6fc844b936a14dd593fe1ef07374)
Günther Deschner [Fri, 31 Aug 2007 13:51:02 +0000 (13:51 +0000)]
r24838: Now for real: build the locator, if we can.
Guenther
(This used to be commit
28f9b8d98dabd9ba8e812ca01bcf4fc192fb5e44)
Michael Adam [Fri, 31 Aug 2007 13:39:51 +0000 (13:39 +0000)]
r24836: Initialize some uninitialized variables.
This prevents a segfault when get_kdc_ip_string() is called
with sitename == NULL.
Michael
(This used to be commit
58d31e057b57bc69a96e63aabba9aa1da5418d83)
Günther Deschner [Fri, 31 Aug 2007 12:21:18 +0000 (12:21 +0000)]
r24833: Move locator to nsswitch (does not belong to libads anymore).
Guenther
(This used to be commit
af90c6949c929c82d4390b2f87a420bd598275dd)
Günther Deschner [Fri, 31 Aug 2007 12:18:21 +0000 (12:18 +0000)]
r24832: In the winbind-locator recursion case, try to pick up the kdc from the
environment.
Guenther
(This used to be commit
7f42fe4e08c0899f5e8addbc5135d87af193ee68)
Michael Adam [Fri, 31 Aug 2007 10:47:42 +0000 (10:47 +0000)]
r24830: Add a winbindd cache validation function that does not do
backup and corrupt file handling. (To be used in subsequent
changes.)
(This used to be commit
b3dcadbed0b4a1b7bb2e83df2c66bca9dcbcad60)
Michael Adam [Fri, 31 Aug 2007 10:30:14 +0000 (10:30 +0000)]
r24829: Make use of a variable, that is available... :-)
(This used to be commit
90626652084c2ada6b2eb041db652720c03a1c3b)
Michael Adam [Fri, 31 Aug 2007 10:06:37 +0000 (10:06 +0000)]
r24828: Give smbcontrol an initial talloc stackframe.
(This used to be commit
55020b07b5568104091352fd3ae21e2b29e34501)
Michael Adam [Fri, 31 Aug 2007 09:54:30 +0000 (09:54 +0000)]
r24827: Give smbstatus an initial talloc stackframe.
Rewrite main() so as to exit only at a single point
where the stack frame is freed, too.
Michael
(This used to be commit
dbe38995ec6d2251562a3b10e750bbd681008e16)
Volker Lendecke [Fri, 31 Aug 2007 09:39:11 +0000 (09:39 +0000)]
r24826: Fix two memleaks in idmap_cache.c, bug 4917
Thanks again to Patrick Rynhart for persisting :-)
Simo, please check!
(This used to be commit
0a9171f9efc2322954c0d06757b91d9124ab8a8e)
Michael Adam [Fri, 31 Aug 2007 09:15:57 +0000 (09:15 +0000)]
r24825: Give testparm an initial talloc stackframe, so it does not complain
it is leaking.
(This used to be commit
705336ee1098a2c4d6e933dfa3e2f2968fa717ad)
Michael Adam [Fri, 31 Aug 2007 09:10:54 +0000 (09:10 +0000)]
r24824: Create an initial talloc stackframe for the net binary.
(This used to be commit
c97600b96f6315df8ab0d7ad186423ab75dd4ab5)
Jeremy Allison [Thu, 30 Aug 2007 23:07:10 +0000 (23:07 +0000)]
r24813: Reformat to 80 columns.
Jeremy.
(This used to be commit
c6c8f5a897602d53876fe75e86283d97a394037d)
Jeremy Allison [Thu, 30 Aug 2007 21:46:42 +0000 (21:46 +0000)]
r24811: Simple reformatting to fit the 80 columns rule.
Jeremy.
(This used to be commit
0cdf046dae8ba0741bb7786aa4e85c34fc35dade)
Volker Lendecke [Thu, 30 Aug 2007 19:48:31 +0000 (19:48 +0000)]
r24809: Consolidate the use of temporary talloc contexts.
This adds the two functions talloc_stackframe() and talloc_tos().
* When a new talloc stackframe is allocated with talloc_stackframe(), then
* the TALLOC_CTX returned with talloc_tos() is reset to that new
* frame. Whenever that stack frame is TALLOC_FREE()'ed, then the reverse
* happens: The previous talloc_tos() is restored.
*
* This API is designed to be robust in the sense that if someone forgets to
* TALLOC_FREE() a stackframe, then the next outer one correctly cleans up and
* resets the talloc_tos().
The original motivation for this patch was to get rid of the
sid_string_static & friends buffers. Explicitly passing talloc context
everywhere clutters code too much for my taste, so an implicit
talloc_tos() is introduced here. Many of these static buffers are
replaced by a single static pointer.
The intended use would thus be that low-level functions can rather
freely push stuff to talloc_tos, the upper layers clean up by freeing
the stackframe. The more of these stackframes are used and correctly
freed the more exact the memory cleanup happens.
This patch removes the main_loop_talloc_ctx, tmp_talloc_ctx and
lp_talloc_ctx (did I forget any?)
So, never do a
tmp_ctx = talloc_init("foo");
anymore, instead, use
tmp_ctx = talloc_stackframe()
:-)
Volker
(This used to be commit
6585ea2cb7f417e14540495b9c7380fe9c8c717b)
Jeremy Allison [Thu, 30 Aug 2007 17:34:47 +0000 (17:34 +0000)]
r24808: Fix the same problem Volker noticed.
For some funny reason us4/gcc seems to fall over the '
Jeremy.
(This used to be commit
229e02d732c1612c7dc4510325da1dcf50050a95)
Günther Deschner [Thu, 30 Aug 2007 16:24:51 +0000 (16:24 +0000)]
r24807: Add WINBINDD_LOCATOR_KDC_ADDRESS env which will be used for the case when the
locator gets called from within winbindd.
Guenther
(This used to be commit
46dbd6034ec2c6475f428cd2d5cce56268bc34a7)
Günther Deschner [Thu, 30 Aug 2007 16:02:22 +0000 (16:02 +0000)]
r24806: Fix the build, sorry...
Guenther
(This used to be commit
cd1fccaf8f2ad6e6e4c51909aa7a925efc0a13c4)
Günther Deschner [Thu, 30 Aug 2007 15:55:59 +0000 (15:55 +0000)]
r24805: When we can build the locator, build it.
Guenther
(This used to be commit
91d10fe1598b92090a94286f84395caa1bdf7a41)
Günther Deschner [Thu, 30 Aug 2007 15:39:51 +0000 (15:39 +0000)]
r24804: As a temporary workaround, also try to guess the server's principal in the
"not_defined_in_RFC4178@please_ignore" case to make at least LDAP SASL binds
succeed with windows server 2008.
Guenther
(This used to be commit
f5b3de4d3069eaa750240e3422bac5cb169b6c0a)
Volker Lendecke [Thu, 30 Aug 2007 14:55:32 +0000 (14:55 +0000)]
r24803: For some funny reason us4/gcc seems to fall over the '
(This used to be commit
08e309e955eea58df1eb88f848386eb2acbd31ba)
Volker Lendecke [Thu, 30 Aug 2007 14:16:20 +0000 (14:16 +0000)]
r24802: Activate new tests
RAW-SAMBA3CASEINSENSITIVE and RAW-SAMBA3POSIXTIMEDLOCK
(This used to be commit
1f396cc237e3861b216d03a7af9e461578cf448a)
Günther Deschner [Thu, 30 Aug 2007 11:26:17 +0000 (11:26 +0000)]
r24801: When told to ignore the winbind cache also do so while trying to store entries.
Thanks Michael for pointing this out.
Guenther
(This used to be commit
c7047604446c3fc33b5e14833267ac8ad3a906b1)
Günther Deschner [Thu, 30 Aug 2007 09:52:21 +0000 (09:52 +0000)]
r24799: Prefer IP address to dns name when replying in winbindd dsgetdcname.
Guenther
(This used to be commit
e5cc09c72f4acc851ed53ca02def5d692000d0da)
Günther Deschner [Thu, 30 Aug 2007 09:15:07 +0000 (09:15 +0000)]
r24797: Fix logic in dsgetdcname().
Guenther
(This used to be commit
aca2d78db139ed32bcedec9861e83cb8c42809cf)
Jeremy Allison [Wed, 29 Aug 2007 20:49:09 +0000 (20:49 +0000)]
r24791: Fix logic error in timeout of blocking lock processing found by
Ronnie. If a lock timeout expires, we must check we can get the
lock before responding with failure. Volker is writing a torture test.
Jeremy.
(This used to be commit
45380f356b99d575645873b05af17c504b091dc8)
Rafal Szczesniak [Wed, 29 Aug 2007 19:55:13 +0000 (19:55 +0000)]
r24789: Add implementation of machine-authenticated connection to netlogon
pipe used when connecting to win2k and newer domain controllers. The
server may be configured to deny anonymous netlogon connections which
would stop domain join verification step. Still, winnt domains require
such smb sessions not to be authenticated using machine credentials.
Creds employed in smb session cannot have a username in upn form, so
provide the separate function to use machine account.
rafal
(This used to be commit
30d99d8ac3379caadc5bdb353977149d1ee16403)
Gerald Carter [Wed, 29 Aug 2007 19:03:20 +0000 (19:03 +0000)]
r24788: Cleanup some linking msgs and remove references to libmsrpc
in SAMBA_3_2_0
(This used to be commit
ba05dc013fd14a7c8c3d7775dad9a70d45289de0)
Günther Deschner [Wed, 29 Aug 2007 14:50:04 +0000 (14:50 +0000)]
r24786: Fix another build warning.
Guenther
(This used to be commit
29a56dcc78c49653bcf72dea6313fd4852de8f72)
Günther Deschner [Wed, 29 Aug 2007 14:35:32 +0000 (14:35 +0000)]
r24785: Put checks in parentheses.
Guenther
(This used to be commit
d8197aca5a4a509d318124f708fe15c35a2b4e11)
Michael Adam [Wed, 29 Aug 2007 14:34:15 +0000 (14:34 +0000)]
r24784: Initialize uninitalized data to prevent segfaults.
Thanks to Volker for the hint!
Michael
(This used to be commit
3b7ed3ea881dc59b77a067d5d3738e9e03b6c538)
Günther Deschner [Wed, 29 Aug 2007 14:08:29 +0000 (14:08 +0000)]
r24783: Remove unused off_t type.
Guenther
(This used to be commit
85c816c27f2b9d20dfaf411b12ec1803a49574ce)
Volker Lendecke [Wed, 29 Aug 2007 13:56:52 +0000 (13:56 +0000)]
r24782: Fix C++ warnings
(This used to be commit
f7e8df81ef9e1deadb1251e5e5959e90a4432f40)
Günther Deschner [Wed, 29 Aug 2007 13:52:07 +0000 (13:52 +0000)]
r24781: Fix build warning.
Guenther
(This used to be commit
71307c371fea917b91214df7a24cd91170d40dd9)
Günther Deschner [Wed, 29 Aug 2007 12:43:23 +0000 (12:43 +0000)]
r24778: Make sure krb5 locator requests go to a separate locator winbind child.
Guenther
(This used to be commit
fb9228b8d167552f0a046ab674f66d4e5b73f5b6)
Günther Deschner [Wed, 29 Aug 2007 12:35:20 +0000 (12:35 +0000)]
r24776: Remove accidentially commited flag checks.
Guenther
(This used to be commit
1efc5009a4b72a5a4c600ca3af7dc7cf05f74353)
Volker Lendecke [Wed, 29 Aug 2007 11:46:44 +0000 (11:46 +0000)]
r24773: Fix a ctdb connection lockup
The lockup could happen when packet_read_sync() gets two packets in a row, the
first one being an async message, and the second one being the response to a
ctdb request.
Also add some debug msg to ctdb_conn.c, and cut off the "locking key" messages
to only dump 20 hex chars at debug level 10. >10 will dump everything.
(This used to be commit
0a55880a240b619810371a19144dd0a75208adfe)
Rafal Szczesniak [Wed, 29 Aug 2007 11:02:04 +0000 (11:02 +0000)]
r24771: Use infolevel 25 to set the machine account's password (just like winxp).
This correctly updates pwdLastSet field on win2k3 server.
rafal
(This used to be commit
dd6d44c1665121cff9ccc2c09580169ca4d330b9)
Günther Deschner [Wed, 29 Aug 2007 10:12:43 +0000 (10:12 +0000)]
r24769: Merge error handling for locator plugin.
Guenther
(This used to be commit
b83626676ca37437e62b826923fbd1d985eb7ce6)
Jeremy Allison [Wed, 29 Aug 2007 04:06:09 +0000 (04:06 +0000)]
r24764: Fix second TALLOC_SIZE definition. Still watching the
build farm to see I didn't stuff this up...
Jeremy.
(This used to be commit
4ca43172d9feae92060ddefb76a97622bca32d1b)
Jeremy Allison [Wed, 29 Aug 2007 01:48:46 +0000 (01:48 +0000)]
r24762: Fix the build, missed TALLOC_SIZE -> talloc_named_const.
Jeremy.
(This used to be commit
e2d924248ef4c8158e80bfffa5d734b9723112ce)
Jeremy Allison [Wed, 29 Aug 2007 01:23:31 +0000 (01:23 +0000)]
r24759: Comment out the _nonnull calls for 3.2.x, as agreed with tridge.
Leaving the commented out code for now, in case I need to re-test
some stuff.
Jeremy
(This used to be commit
343be0464342aac14a9592fd73a71b7589ba34d5)
Günther Deschner [Tue, 28 Aug 2007 16:39:03 +0000 (16:39 +0000)]
r24752: Make sure to return properly when the locator is called from within winbindd.
Guenther
(This used to be commit
6cf7187e88b4d4c1dfe90fcab459e39a0dbd3a11)
Michael Adam [Tue, 28 Aug 2007 15:38:03 +0000 (15:38 +0000)]
r24750: Fix one more caller of name_resolve_bcast().
Michael
(This used to be commit
757b5c1bd7ff3d6bbf99753c1b617338ee837531)
Günther Deschner [Tue, 28 Aug 2007 15:31:42 +0000 (15:31 +0000)]
r24749: Increase debuglevel.
Guenther
(This used to be commit
d82c1638b8ada43cfcbf9f71586c4c6849902c7e)
Günther Deschner [Tue, 28 Aug 2007 15:26:59 +0000 (15:26 +0000)]
r24748: Remove all dependencies to samba internals and convert the krb5 locator plugin
into a tiny winbindd DsGetDcName client. This still does not solve the case of
using the locator from within winbindd itself but at least gencache.tdb and
others are no longer corrupted.
Guenther
(This used to be commit
908e7963b8b2dd9b149f526a53dbb5dc7662bbef)
Günther Deschner [Tue, 28 Aug 2007 15:20:54 +0000 (15:20 +0000)]
r24747: Add WINBINDD_DSGETDCNAME call.
Guenther
(This used to be commit
429496a4ccb5c4f4eda11f1b522629889b972c71)
Günther Deschner [Tue, 28 Aug 2007 15:16:42 +0000 (15:16 +0000)]
r24746: As the winbindd pipe is officially broken since a while: split out request
specfic and generic flags in a winbindd_request.
It turns out that the WBFLAG_RECURSE flag is the only non-PAM specific flag we
put into the "flags" field of a winbind request anyway. Now each request
command can use the entire space of the "flags" field.
Guenther
(This used to be commit
18b29763d1ea0e9198f45bafa460dd68cb69a3d5)
Gerald Carter [Tue, 28 Aug 2007 15:12:11 +0000 (15:12 +0000)]
r24745: Merge Simo's shared lib build fix from svn r22842 that was lost
somehow. Don't include the PIE_FLAGS when building shared libs.
(This used to be commit
22f2f1e033a7a6877c6b8a0847179728a408af85)
Volker Lendecke [Tue, 28 Aug 2007 15:09:47 +0000 (15:09 +0000)]
r24744: Increase length by what we got from recv, not from ioctl
(This used to be commit
23c8f4f74bfb761894034ce9375258411c80d74d)
Günther Deschner [Tue, 28 Aug 2007 15:07:13 +0000 (15:07 +0000)]
r24743: Fix build warning.
Guenther
(This used to be commit
579fb55b7556dc90b42f77d5fc9e9c31f34974e5)
Günther Deschner [Tue, 28 Aug 2007 15:01:23 +0000 (15:01 +0000)]
r24742: Add experimental DsGetDcName() call (will be used by krb5 locator for fine
grained KDC DNS queries).
Guenther
(This used to be commit
3263cd680fe429430d789b284464fca72ef45719)
Günther Deschner [Tue, 28 Aug 2007 14:31:31 +0000 (14:31 +0000)]
r24740: Fix the build.
Guenther
(This used to be commit
a30549bbf4521232158262e117219b0fa8f5eb74)
Günther Deschner [Tue, 28 Aug 2007 14:27:48 +0000 (14:27 +0000)]
r24739: With resolve_ads() allow to query for PDCs as well.
Also add dns query functions to find GCs and DCs by GUID.
Guenther
(This used to be commit
cc469157f6684ec507bf1c3a659fc36a53d304a1)
Michael Adam [Tue, 28 Aug 2007 14:25:46 +0000 (14:25 +0000)]
r24738: Fix one more use of pwrite in tdb code in the spirit of r23972 and r23977.
Michael
(This used to be commit
a3506f291abfb8a9516b79c10c79841a7391651e)
Günther Deschner [Tue, 28 Aug 2007 14:20:53 +0000 (14:20 +0000)]
r24737: Remove older TODO: Convert internal_resolve_name() and friends to NTSTATUS.
Guenther
(This used to be commit
8300aac4944613e411a78ab98de5d77f8fd38fa7)
Günther Deschner [Tue, 28 Aug 2007 12:49:46 +0000 (12:49 +0000)]
r24734: Move nss_err_str() to a more public place.
Guenther
(This used to be commit
f62292c5a1bcae2bfa10632014c5ac06dd1f50bb)
Günther Deschner [Tue, 28 Aug 2007 12:40:01 +0000 (12:40 +0000)]
r24733: Add support for storing DATA_BLOBs in gencache.tdb (including torturetest).
Mimir, please have a look. DATA_BLOBs will now just show up as "DATA_BLOB"
values with "net cache list".
Guenther
(This used to be commit
b8ad546d041a2a8cc85c7db8eba4d2d3b97df1a8)
Gerald Carter [Mon, 27 Aug 2007 20:09:37 +0000 (20:09 +0000)]
r24722: Squashed commit of the following:
commit
fb52f971986dd298abbcd9745ddf702820ce0184
Author: Gerald Carter <coffeedude@plainjoe.org>
Date: Mon Aug 27 13:50:26 2007 -0500
Check correct return type for pam_winbind_request_log() wnibind_upn_to_username
which is an int and not NSS_STATUS.
commit
7382edf6fc0fe555df89d5b2a94d12b35049b279
Author: Gerald Carter <coffeedude@plainjoe.org>
Date: Mon Aug 27 13:30:26 2007 -0500
Allow wbinfo -n to convert a UPN to a SID
commit
8266c0fe1ccf2141e5a983f3213356419e626dda
Author: Gerald Carter <coffeedude@plainjoe.org>
Date: Fri Aug 3 09:53:16 2007 -0500
Merge some of Guenther UPN work for pam_winbind.c (check the winbind separator
and better pam logging when converting a upn to a username).
commit
15156c17bc81dbcadf32757015c4e5158823bf3f
Author: Gerald Carter <coffeedude@plainjoe.org>
Date: Fri Aug 3 08:52:50 2007 -0500
Include Universal groups from the cached PAC/SamLogon info when
generating the list of domain group SIDs for a user's token.
commit
979053c0307b051954261d539445102c55f309c7
Author: Gerald Carter <coffeedude@plainjoe.org>
Date: Thu Aug 2 17:35:41 2007 -0500
merge upnlogon patch from my tree
(This used to be commit
98fb5bcd5702d5086bdf9b58105a67efb90950f4)
Günther Deschner [Mon, 27 Aug 2007 18:26:40 +0000 (18:26 +0000)]
r24714: Fix confusing indent.
Guenther
(This used to be commit
6a9af88a2d5daa0335a4596f7a826141ba81e303)
Günther Deschner [Mon, 27 Aug 2007 18:12:29 +0000 (18:12 +0000)]
r24713: Fix obvious error in enum_dom_groups. We were returning NT_STATUS_OK when the realloc failed.
Guenther
(This used to be commit
750b52cb47b2fd0d31125274fb471a4f1ad6ffa9)
Günther Deschner [Mon, 27 Aug 2007 18:07:49 +0000 (18:07 +0000)]
r24711: Remove unused talloc context from query_user_list rpc.
Guenther
(This used to be commit
5187157607c0688e718079fb351e144d431e9040)
Volker Lendecke [Mon, 27 Aug 2007 12:04:09 +0000 (12:04 +0000)]
r24702: Remove the old API pointers
(This used to be commit
17df313db42199e26d7d2044f6a1d845aacd1a90)
Volker Lendecke [Mon, 27 Aug 2007 11:41:05 +0000 (11:41 +0000)]
r24701: Fix the swat build
Swat has not been built by default for a while, so I did not notice that
the _ macro is actually used. Re-add the lang_msg_rotate function, this
time only to swat so that this is the only binary that has to take the
16k penalty.
(This used to be commit
191e1ef840c293f8575cc0a3f3ffba2080431fae)
Volker Lendecke [Mon, 27 Aug 2007 11:01:13 +0000 (11:01 +0000)]
r24699: Actually write 24 zeros instead of zero 24's...
Jeremy, please check ;-)
(This used to be commit
85b64bde7df10ade5ba0abd493d433a7688f0979)
Volker Lendecke [Sun, 26 Aug 2007 10:50:39 +0000 (10:50 +0000)]
r24661: Fix some obvious diffs between 3_2 and 3_2_0
Jeremy, there are two remaining diffs in sesssetup.c which I don't really
know which one is right. Can you take a look?
Thanks,
Volker
(This used to be commit
d82f35448763eacd564836f34c9aa450b15ea582)
Volker Lendecke [Sat, 25 Aug 2007 19:47:57 +0000 (19:47 +0000)]
r24659: Some formatting changes helping to minimize the 3_2_0 diff
(This used to be commit
c5caea43af154671448df82881efe09a5c982386)
Günther Deschner [Fri, 24 Aug 2007 15:50:12 +0000 (15:50 +0000)]
r24654: Adapt to coding conventions.
Guenther
(This used to be commit
a669ac2bc45dc6f261a789050a021d625c083829)
Volker Lendecke [Fri, 24 Aug 2007 11:25:38 +0000 (11:25 +0000)]
r24649: Attempt to fix bug 4917. Simo, please check!
Thanks Patrick Rynhart for reporting this.
(This used to be commit
b7c0404893bb789382a11f86d5156c4623a6de3a)
Jeremy Allison [Thu, 23 Aug 2007 21:53:00 +0000 (21:53 +0000)]
r24639: Add parameter "directory name cache size" - parameterize
use of directory name cache, 100 by default. Will be needed
to turn this off for *BSD systems.
Jeremy.
(This used to be commit
bea8e9840fd65268e649f813eba10502b0c4d721)
Jeremy Allison [Thu, 23 Aug 2007 21:34:08 +0000 (21:34 +0000)]
r24638: Remove redundent setting of vuid.
Jeremy
(This used to be commit
fd682c3f397714ebdaf4af3f6d1cbcbab6a2f572)
Michael Adam [Thu, 23 Aug 2007 15:33:25 +0000 (15:33 +0000)]
r24637: In order for "net rpc registry" to be able to write to
Samba's own registry, the access mask for opening the
registry for the write operations needs to be
SEC_RIGHTS_MAXIMUM_ALLOWED instead of REG_WRITE: we can
not open e.g. HKLM read write explicitly, since we can
not write to this virtual part of the registry, only
to the subkeys like 'HKLM\Software\Samba\smbconf' that
are stored on disk.
Note that MAXIMUM_ALLOWED is also what windows' regedit
passed to the open calls.
Michael
(This used to be commit
57c30f7319b35fa452e8a6c585810e55c7e934b2)
Michael Adam [Thu, 23 Aug 2007 14:32:00 +0000 (14:32 +0000)]
r24636: Raise one debug level, since the callers (that want to do so)
issue a level 0 debug message.
Michael
(This used to be commit
c0022ff9278a06b92a550cf0d6a8e75af31a673c)
Günther Deschner [Thu, 23 Aug 2007 09:39:14 +0000 (09:39 +0000)]
r24632: Fix build warnings.
Guenther
(This used to be commit
e9178af01d68b7cbe91157d1d196f2148eeef7ca)
Michael Adam [Wed, 22 Aug 2007 16:03:17 +0000 (16:03 +0000)]
r24630: Store Samba configuratin options only under the default name, not as aliases.
This prevents creation of problematic configurations from registry editors
like regedit or "net rpc registry".
I will refactor the code to be somewhat more concise,
but I wanted to have this in the tree, now I got it working... :-)
Michael
(This used to be commit
4424a030324ab646a025b50fcb89e1b5cdfcbbe8)
Michael Adam [Wed, 22 Aug 2007 13:51:44 +0000 (13:51 +0000)]
r24629: Make read_sock return the total number of bytes read instead
of the number of bytes read in the last of possibly several
read calls.
This was noted by Metze.
Michael
(This used to be commit
0193a49223c6314e2834c89fff9920ae7edc4f8a)
Stefan Metzmacher [Wed, 22 Aug 2007 12:44:41 +0000 (12:44 +0000)]
r24627: merge from SAMBA_4_0:
as TALLOC_ABORT() is defined to abort() by default
wrap it into a function so that the function name
in the backtrace shows what happens.
metze
(This used to be commit
ddbe971030070ab1b9fc37b8b0ac44a3d9303fe4)
Stefan Metzmacher [Wed, 22 Aug 2007 12:28:58 +0000 (12:28 +0000)]
r24625: add '-D' option to winbindd
TODO: don't allow '-i -D' and '-D -i' on all
server binaries in the SAMBA_3_2 branch!
The &server_mode patch makes this difficult to check...
metze
(This used to be commit
102bb0fc17d6dec102d628f1051675a1ae5a9c27)
Stefan Metzmacher [Wed, 22 Aug 2007 12:06:27 +0000 (12:06 +0000)]
r24621: - deferr calling build_options();exit(0);
- use poptPrintUsage() to give the user more info
metze
(This used to be commit
a95d9d1ef99d6a2f77a289f8d2011cae482821b1)
Stefan Metzmacher [Wed, 22 Aug 2007 11:55:48 +0000 (11:55 +0000)]
r24618: move printing out the version string and exit()
into the popt _POST processing.
Now 'smbd -V --bla' complains about an unknown option
metze
(This used to be commit
c115de4beac887442a73b4a85367d7b5fded68e6)
Michael Adam [Wed, 22 Aug 2007 10:47:32 +0000 (10:47 +0000)]
r24616: In set_boolean(), only pass the result back to the caller
if parsing of the boolean string was successful.
Also, initialize the local result variable
(although not strictly necessary anymore, now.)
(This used to be commit
bf0daa74fadcd506b80c29d04ccf6ec7345ee0e1)
Günther Deschner [Wed, 22 Aug 2007 09:32:37 +0000 (09:32 +0000)]
r24615: Say for which domain the getdcname request failed.
Guenther
(This used to be commit
1ce1958f7a5f41072ad1e2f1fb55f3cd4ebe4b14)
Michael Adam [Tue, 21 Aug 2007 21:57:58 +0000 (21:57 +0000)]
r24610: Add a debug message that the workaround has been activated...
(This used to be commit
a12f3bf6e93f7a902a1f6274d67f15cc4eeb20bd)
Michael Adam [Tue, 21 Aug 2007 21:55:51 +0000 (21:55 +0000)]
r24609: Fix the fix of r23668 for win2k giving one zero byte
instead of a 2-byte zero character. I can't recall what
rode me when I put that "2" there. But now I think I
have got it right... :-)
Michael
(This used to be commit
fa010bef11b78ac3bbf0091870ce8cd5a53334af)