Andrew Tridgell [Sun, 9 Dec 2001 06:10:02 +0000 (06:10 +0000)]
- use accountype not accountcontrol
- better debug code
(This used to be commit
01f63b9c92137e6de906412952c7a2c8da21dfbe)
Andrew Tridgell [Sun, 9 Dec 2001 00:46:37 +0000 (00:46 +0000)]
fixed type passed to ads_search
(This used to be commit
0ff30848f3ef4f38e9bc80dc96be4f37bb2dcb0e)
Andrew Tridgell [Sun, 9 Dec 2001 00:45:51 +0000 (00:45 +0000)]
fixed used of string after free
(This used to be commit
f7ead035ebe55e94cdd5807b173bd4612866b06f)
Jean-François Micouleau [Sat, 8 Dec 2001 23:57:35 +0000 (23:57 +0000)]
small comment I don't want to loose.
J.F.
(This used to be commit
a0b5ae58228d01ff5099180f16ffba4353bd28a7)
Jean-François Micouleau [Sat, 8 Dec 2001 23:56:58 +0000 (23:56 +0000)]
Fix domain logon that I broke 3 days ago.
And it's in sync with the docs, %U is really replaced by the name the user
asked. Whereas in 2.2 that's false, %U is replaced by the name the user
was mapped to.
J.F.
(This used to be commit
39f2b23347011acabe9dd3ab15025022da352b74)
Andrew Bartlett [Sat, 8 Dec 2001 17:37:59 +0000 (17:37 +0000)]
By popular demand: a new config.guess and config.sub
(I hope I did this right)
Andrew Bartlett
(This used to be commit
75d0f4cf198534680dd2b50227b230bf5d5aa777)
Andrew Tridgell [Sat, 8 Dec 2001 12:06:08 +0000 (12:06 +0000)]
check for gssapi_generic.h
(This used to be commit
838fbac7a086ff82498c3f0ba95b714123a7428c)
Andrew Tridgell [Sat, 8 Dec 2001 12:00:27 +0000 (12:00 +0000)]
fix a DEBUG() line
(This used to be commit
18da530293b11d895c62d08895ee1f77d8f97a12)
Andrew Tridgell [Sat, 8 Dec 2001 11:18:56 +0000 (11:18 +0000)]
added internal sasl/gssapi code. This means we are no longer dependent on cyrus-sasl which makes the code much less fragile. Also added code to auto-determine the server name or realm
(This used to be commit
435fdf276a79c2a517adcd7726933aeef3fa924b)
Andrew Bartlett [Sat, 8 Dec 2001 02:25:25 +0000 (02:25 +0000)]
Fix segfault, and add a comment.
(This used to be commit
ff91131ef9b384765de3e4f22202d1e493f02efc)
Andrew Bartlett [Sat, 8 Dec 2001 02:14:56 +0000 (02:14 +0000)]
Leak less memory.
Now, is there any reason that the prs_init() doesn't use the talloc context
that it is supplied as an argument for the actual data buffer?
It would seem logical to replace the malloc with a talloc, but I'm sure
there is some method to the madness (extrnal use/Reallocing of it I presume)
Andrew Bartlett
(This used to be commit
ad18f33bfa79ce93024f3cb3a334cff622fe82a4)
Andrew Bartlett [Sat, 8 Dec 2001 02:12:17 +0000 (02:12 +0000)]
Ensure that 'use spnego' restricts, rather than just advises our clients.
This means that if a hole is found in the spnego code, we can tell people
to just set 'use spengo' in their config file while we sort it out.
Other than that, preventing 'unusual' behaviour is always a good thing.
Andrew Bartlett
(This used to be commit
a8a53c08f7d607268a3959486a850a2df50ca7a2)
Jean-François Micouleau [Fri, 7 Dec 2001 10:20:17 +0000 (10:20 +0000)]
Herb Lewis [Fri, 7 Dec 2001 01:01:28 +0000 (01:01 +0000)]
include/build_env.h wasn't getting built by default with new rules unless
you did make headers - fixed
(This used to be commit
ce84993e8e66a151fcb7d5709763b0bf2d513a7c)
Andrew Tridgell [Fri, 7 Dec 2001 01:01:10 +0000 (01:01 +0000)]
added a "use spnego" option
you need to set "use spnego = no" for w2k to be able to join a samba
domain. Otherwise the w2k box will assume we can do kerberos as a KDC
(This used to be commit
b5cb57a367a6d9a82e082e2838e83e0997eb4930)
Herb Lewis [Fri, 7 Dec 2001 00:37:31 +0000 (00:37 +0000)]
OK I think this does what everyone wants with the .headers.stamp
it gets removed on a make clean
it gets created on a make headers (if it doesn't already exist)
This makes it so I only rebuild everthing once after a make clean and
also so nothing gets rebuilt after jfm does a make headers (proto)
(This used to be commit
bc918bce104954b39bd54cab3149a0f4573feb5f)
Andrew Tridgell [Thu, 6 Dec 2001 22:42:27 +0000 (22:42 +0000)]
allow nsstest to test any nss module
(This used to be commit
c531f4773e33cce4b4eb97c8f9147eed02edc2d5)
Herb Lewis [Thu, 6 Dec 2001 19:04:01 +0000 (19:04 +0000)]
add smbgroupedit
(This used to be commit
ba2dd34407aa51cdbfe6fe7fe8730af2b2cd00ed)
Jean-François Micouleau [Thu, 6 Dec 2001 13:09:15 +0000 (13:09 +0000)]
again an intrusive patch:
- removed the ugly as hell sam_logon_in_ssb variable, I changed a bit the
definition of standard_sub_basic() to cope with that.
- removed the smb.conf: 'domain admin group' and 'domain guest group'
parameters ! We're not playing anymore with the user's group RIDs !
- in get_domain_user_groups(), if the user's gid is a group, put it first
in the group RID list.
I just have to write an HOWTO now ;-)
J.F.
(This used to be commit
fef52c4b96c987115fb1818c00c2352c67790e50)
Jean-François Micouleau [Thu, 6 Dec 2001 12:57:50 +0000 (12:57 +0000)]
remove .headers.stamp from the delheaders definition
It forced a complete build to occur each time the proto are rebuild !
J.F.
(This used to be commit
9866c18193226ec4dc69ccc459f4f9b36610b945)
Gerald Carter [Thu, 6 Dec 2001 07:44:12 +0000 (07:44 +0000)]
merge from 2.2
(This used to be commit
f1ead192c668abf20f328a691caafd76874c6e47)
Gerald Carter [Thu, 6 Dec 2001 07:37:58 +0000 (07:37 +0000)]
merge from 2.2
(This used to be commit
c5ee06b7c8fc9f1fec679acc7d7f47f333707456)
Gerald Carter [Thu, 6 Dec 2001 07:33:48 +0000 (07:33 +0000)]
commit from 2.2
(This used to be commit
54a453478a087073a51822086bd9f985a5d8cf6a)
Andrew Tridgell [Thu, 6 Dec 2001 07:33:35 +0000 (07:33 +0000)]
put the winbindd krb5 credentials cache in the lock directory
this prevents it clobbering the users cache
(This used to be commit
3de552f365373de85298dbe911143e036805f9ea)
Andrew Tridgell [Thu, 6 Dec 2001 07:17:25 +0000 (07:17 +0000)]
allow a MAX_DEBUG_LEVEL setting in local.h (or the Makefile)
This allows embedded systems to compile out the higher debug
levels. It should gain speed as well as reducing the code
size. Setting it to 1 saves about 300k of code on my system.
(This used to be commit
f34cac3b312f273a2363919655ddd1e25cb91305)
Andrew Tridgell [Thu, 6 Dec 2001 05:41:53 +0000 (05:41 +0000)]
added a propoer kerberos_kinit_password call
contribution from remus@snapserver.com
thanks!
(This used to be commit
3ace8f1fcc27492d26f5ad0c3cdfc63235ca0609)
Tim Potter [Thu, 6 Dec 2001 04:23:06 +0000 (04:23 +0000)]
Fixed typo in fix for typo in debug. (-:
(This used to be commit
7c64e5f1481e832767ae07e63d7d9d116131b331)
Herb Lewis [Wed, 5 Dec 2001 21:49:51 +0000 (21:49 +0000)]
fix up packaging stuff
(This used to be commit
8f3093fbd092c0ddf38b49c0735308f4f5ba4492)
Herb Lewis [Wed, 5 Dec 2001 21:08:17 +0000 (21:08 +0000)]
merge from 2.2
don't set WINBIND variables unless configure was run --with-winbind
(This used to be commit
83ec4c0f4dbfa43c893f18af1c6bb58c55043c9b)
Herb Lewis [Wed, 5 Dec 2001 19:45:30 +0000 (19:45 +0000)]
dont add -I./popt to CFLAGS it really belongs in FLAGS1 with other include
paths. This make it hard to use a script that overrides CFLAGS options.
(This used to be commit
646b5ae752f7cd00e057d0d7cc6001161125fd3f)
Jeremy Allison [Wed, 5 Dec 2001 19:33:35 +0000 (19:33 +0000)]
Added fetch_domain_sid. Not used in current code, but a nice example
of how to use this interface.
Jeremy.
(This used to be commit
291985123515f99bb3fd86605d5b8a08301070a2)
Jean-François Micouleau [Wed, 5 Dec 2001 15:45:36 +0000 (15:45 +0000)]
changed the DEBUG level of tdb_pack and tdb_unpack. Instead of 8, it's now
18.
when you're looking at a level 10, and it's all clutered with
tdb_pack/unpack, it's getting .... And anyway most of our code using
tdb_pack/unpack have DEBUG around the call if there is a problem.
J.F.
(This used to be commit
7e20fad5ed00be4594bfc45603db89d600f46c55)
Jean-François Micouleau [Wed, 5 Dec 2001 15:41:44 +0000 (15:41 +0000)]
added samr_queryuseralias(). instead of returning BUILTIN_ALIAS_RID_USERS,
now return the alias correctly.
time to look at the netlogon case.
J.F.
(This used to be commit
72ee1791084d09e73d8057e37ced4a79cecffb35)
Samba Release Account [Wed, 5 Dec 2001 12:28:21 +0000 (12:28 +0000)]
preparing for release of 3.0alpha1
(This used to be commit
b56e8e72d6ae5602be0e3ec36643263f64b6178a)
Andrew Tridgell [Wed, 5 Dec 2001 11:32:25 +0000 (11:32 +0000)]
fixed a return value
(This used to be commit
56bdb152d8617c0a36c0bc25c677a2d98bcb1328)
Andrew Bartlett [Wed, 5 Dec 2001 11:00:26 +0000 (11:00 +0000)]
OK. Smbpasswd -j is DEAD.
This moves the rest of the functionality into the 'net rpc join' code.
Futhermore, this moves that entire area over to the libsmb codebase, rather
than the crufty old rpc_client stuff.
I have also fixed up the smbpasswd -a -m bug in the process.
We also have a new 'net rpc changetrustpw' that can be called from a
cron-job to regularly change the trust account password, for sites
that run winbind but not smbd.
With a little more work, we can kill rpc_client from smbd entirly!
(It is mostly the domain auth stuff - which I can rework - and the
spoolss stuff that sombody else will need to look over).
Andrew Bartlett
(This used to be commit
575897e879fc175ba702adf245384033342c903d)
Andrew Bartlett [Wed, 5 Dec 2001 10:52:13 +0000 (10:52 +0000)]
Add a couple of extra debugs for the secrets.tdb stuff
(This used to be commit
c76c1f6904510d6ecca3453f91433420f22b7bd6)
Andrew Bartlett [Wed, 5 Dec 2001 10:50:26 +0000 (10:50 +0000)]
Ensure we fill in the %U for NTLMSSP connections
(This used to be commit
d15ea4fa8e23469f104405c197206e2779461323)
Andrew Tridgell [Wed, 5 Dec 2001 10:44:30 +0000 (10:44 +0000)]
fixed a minor password memory leak
(This used to be commit
5985d7e6eec1eb80d8d7470ee2ceda8981c7410c)
Andrew Tridgell [Wed, 5 Dec 2001 10:43:43 +0000 (10:43 +0000)]
fixed a memory leak
(This used to be commit
45c328800e42ba01c8d6113c0691546804137677)
Andrew Tridgell [Wed, 5 Dec 2001 10:35:25 +0000 (10:35 +0000)]
fix link error
(This used to be commit
58e93a8b7de10f60a1e68570f1bdd6e3d8fa44a5)
Andrew Tridgell [Wed, 5 Dec 2001 10:14:22 +0000 (10:14 +0000)]
handle ldap server down better
(This used to be commit
0d85815c992c6ca77ba64dfb2d7538be4684654d)
Andrew Tridgell [Wed, 5 Dec 2001 09:46:53 +0000 (09:46 +0000)]
added a REALLY gross hack into kerberos_kinit_password so that
winbindd can do a kinit
this will be removed once we have code that gets a tgt
and puts it in a place where cyrus-sasl can see it
(This used to be commit
7d94f1b7365215a020d3678d03d820a7d086174f)
Andrew Tridgell [Wed, 5 Dec 2001 09:45:00 +0000 (09:45 +0000)]
auto-init secrets.tdb
(This used to be commit
aff916e543f1c70aa5fe0fc07dda21e772625097)
Andrew Tridgell [Wed, 5 Dec 2001 09:19:25 +0000 (09:19 +0000)]
added timeouts and retries to ldap operations
(This used to be commit
4f004eb54d66b6f811cb2f4791da6c70d77f87c2)
Andrew Tridgell [Wed, 5 Dec 2001 07:52:44 +0000 (07:52 +0000)]
moved the sequence number fetch into the backend, and fetch the
sequence number via ldap when using ads
(This used to be commit
9a084f0bb91883224ad44e2b76417d10c15cce42)
Andrew Tridgell [Wed, 5 Dec 2001 07:36:35 +0000 (07:36 +0000)]
don't double free ldap message lists
(This used to be commit
f64612b89bae1148d73555cac00f6019a01f9304)
Andrew Tridgell [Wed, 5 Dec 2001 07:35:57 +0000 (07:35 +0000)]
paranoia fixes in based ldap routines for potential memory leaks
(This used to be commit
13b933104e1389608e4831ca47dd8106ea0c60a5)
Andrew Tridgell [Wed, 5 Dec 2001 07:11:26 +0000 (07:11 +0000)]
fixed another leak - memory usage now seems to be quite small
(This used to be commit
a45e3968590a021c1b464db5265a09ba48cb5797)
Andrew Tridgell [Wed, 5 Dec 2001 07:05:53 +0000 (07:05 +0000)]
added very basic ads connection cacheing
(This used to be commit
7de670cd15c1a87dd01ab22d74a7e6cbf5ae6673)
Andrew Tridgell [Wed, 5 Dec 2001 06:26:56 +0000 (06:26 +0000)]
more memory leak fixes
(This used to be commit
eb6f0e91ddd2a97a907a569bc60beca99b494884)
Andrew Tridgell [Wed, 5 Dec 2001 06:16:33 +0000 (06:16 +0000)]
plugged most of the memory leaks
(This used to be commit
60b5d4432abd905ee61fe381487ed87139134685)
Andrew Tridgell [Wed, 5 Dec 2001 05:35:45 +0000 (05:35 +0000)]
added the last winbindd/ads backend function
winbindd is now fully functional with a native mode w2k server
now for the memory leaks and speed ...
(This used to be commit
fad564c177049eb47e5bf48c98b62281c6348ffc)
Andrew Tridgell [Wed, 5 Dec 2001 04:48:51 +0000 (04:48 +0000)]
finally worked out how to do ldap lookups by binary blobs, so I can
now do searches on SID. This allows me to do a true ldap sid_to_name()
function
one one function to go!
(This used to be commit
7d44aa3915bc88fd2b2f8454f190b11677cbb848)
Andrew Tridgell [Wed, 5 Dec 2001 04:44:34 +0000 (04:44 +0000)]
added functions that convert a ads binary blob to a string (for
searching on SID)
(This used to be commit
31d6d049b30e364e062f108d6f9221bbdc2ebec5)
Andrew Tridgell [Wed, 5 Dec 2001 04:43:53 +0000 (04:43 +0000)]
fixed an off by 1 bug in talloc_asprintf()
(This used to be commit
2b2155beaef17a13c0e867c3dcfe8c323e84a9a3)
Jeremy Allison [Wed, 5 Dec 2001 04:17:39 +0000 (04:17 +0000)]
Fixed parse_domain_user to be bool.
Jeremy.
(This used to be commit
9563de2ef8c1197f4941671d2fdade7d933c32d0)
Andrew Bartlett [Wed, 5 Dec 2001 03:14:35 +0000 (03:14 +0000)]
Add a new flag for anonymous connections
(This used to be commit
5a96391c75fd13b2fc385aa571244b82bc4736d0)
Andrew Bartlett [Wed, 5 Dec 2001 03:14:21 +0000 (03:14 +0000)]
Make it easier to construct anonymous connections with a new flag and helper
function.
(This used to be commit
61b0f5f4f9788784b0806a9a15cbc6bf1005aa68)
Andrew Bartlett [Wed, 5 Dec 2001 02:58:40 +0000 (02:58 +0000)]
Split out the name resolution code into a seperate function
(This used to be commit
b2443f6fca5840584926b7481acf1975507c445e)
Jeremy Allison [Wed, 5 Dec 2001 02:11:03 +0000 (02:11 +0000)]
Use print_queue_length() by preference if we don't need a queue
as it doesn't do a traversal.
Jeremy.
(This used to be commit
4bf4ee3f14a690592fa2e1b800fc0344522e6b30)
Andrew Bartlett [Wed, 5 Dec 2001 01:59:32 +0000 (01:59 +0000)]
Follow herb's suggestion and don't strdup a string to itself
(This used to be commit
d00f461f43558c8ef942df305bcc2c89060b4800)
Andrew Bartlett [Wed, 5 Dec 2001 01:58:33 +0000 (01:58 +0000)]
Follow herb's suggestion and don't strdup a string to itself.
(This used to be commit
ea76a687fc2614912fd6b0458622495f9920749e)
Herb Lewis [Wed, 5 Dec 2001 01:04:47 +0000 (01:04 +0000)]
merge from 2.2 branch
(This used to be commit
692c23fe86391204161adeb6cf9b8061d0121175)
Jeremy Allison [Wed, 5 Dec 2001 00:54:33 +0000 (00:54 +0000)]
Improved efficiency of enumerating print queue's under a particular
extreme condition...
Jeremy.
(This used to be commit
425bb0f40526b4eb17a3033892ca907b1d5293a4)
Andrew Bartlett [Wed, 5 Dec 2001 00:26:36 +0000 (00:26 +0000)]
Add a mechinism to allow for sane porting of rpcclient components into the new
'net' command.
This also gets us 'net rpc user add'.
Andrew Bartlett
(This used to be commit
1197689bc56f4b2ca6ffea3b2601b8f6f9f52207)
Andrew Bartlett [Wed, 5 Dec 2001 00:24:57 +0000 (00:24 +0000)]
Ditto on the const religion.
(This used to be commit
e1b940c91b748230664544fd9191123247dd1f24)
Andrew Bartlett [Wed, 5 Dec 2001 00:22:24 +0000 (00:22 +0000)]
Const religion for some of the RPC code.
(This used to be commit
64bf8f81c49744fc0653db655e457981f3bcbac2)
Herb Lewis [Tue, 4 Dec 2001 22:24:17 +0000 (22:24 +0000)]
Merge from 2.2
If you do not have one more expect than issue when talking to the passwd
program you will not send the last issue.
(This used to be commit
8aafec95cba0e8a002d20c4c0055a01690879f7a)
Jean-François Micouleau [Tue, 4 Dec 2001 21:58:37 +0000 (21:58 +0000)]
move proto.h and build_env.h from $(srcdir)/include to $(builddir)/include
tridge, martin, if you think it's wrong , you can revert it.
J.F.
(This used to be commit
f057d62aae620b042903dae61a19628cb57aba39)
Jean-François Micouleau [Tue, 4 Dec 2001 21:53:47 +0000 (21:53 +0000)]
added a boolean to the group mapping functions to specify if we need or
not the privileges. Usually we don't need them, so the memory is free
early.
lib/util_sid.c: added some helper functions to check an SID.
passdb/passdb.c: renamed local_lookup_rid() to local_lookup_sid() and pass
an RID all the way. If the group doesn't exist on the domain SID,
don't return a faked one as it can collide with a builtin one. Some rpc
structures have been badly designed, they return only rids and force the
client to do subsequent lsa_lookup_sid() on the domain sid and the builtin
sid !
rpc_server/srv_util.c: wrote a new version of get_domain_user_groups().
Only the samr code uses it atm. It uses the group mapping code instead of
a bloody hard coded crap. The netlogon code will use it too, but I have to
do some test first.
J.F.
(This used to be commit
6c87e96149101995b7d049657d5c26eefef37d8c)
Jeremy Allison [Tue, 4 Dec 2001 21:30:52 +0000 (21:30 +0000)]
Correct message on wbinfo fail to open config file.
Jeremy.
(This used to be commit
9b7182a9da24b53f3501f6562dc66bed67fb9133)
Jeremy Allison [Tue, 4 Dec 2001 18:37:14 +0000 (18:37 +0000)]
Tidup.
Jeremy.
(This used to be commit
837f2b961b1e7dcd6998f36d58d2059290e89e18)
Martin Pool [Tue, 4 Dec 2001 13:21:15 +0000 (13:21 +0000)]
Put back changes to set errno, which seem to do no harm.
(This used to be commit
3dbb5dfcfb29671f136d1ed6c865362eaf027446)
Martin Pool [Tue, 4 Dec 2001 13:17:22 +0000 (13:17 +0000)]
Fix headers. This I know is correct.
(This used to be commit
58cfea3c2aba5a8309e4084ec8df0cfcb48a4075)
Martin Pool [Tue, 4 Dec 2001 12:44:10 +0000 (12:44 +0000)]
Fix headers. This I know is correct.
(This used to be commit
0c22a10d738041b3dc0c92d8ea060a86de769563)
Andrew Tridgell [Tue, 4 Dec 2001 12:10:05 +0000 (12:10 +0000)]
added lookup_groups() to the ads backend
winbindd/ADS can now do initgroups()
(This used to be commit
43edeaca9f3a42699131939ed0d917111f57b678)
Andrew Tridgell [Tue, 4 Dec 2001 12:08:16 +0000 (12:08 +0000)]
added ads_search_dn() and ads_pull_sids()
(This used to be commit
bc83d55f4400cdcdfed44622954f11580b6d2f87)
Martin Pool [Tue, 4 Dec 2001 11:41:12 +0000 (11:41 +0000)]
Martin Pool [Tue, 4 Dec 2001 11:25:44 +0000 (11:25 +0000)]
Implement suggestion from tridge to leave the old tdb_open interface
as it was, and add tdb_open_ex() which takes a log callback. I guess
this makes more sense since it's a public interface.
(This used to be commit
391a65395e6cdc0300f81eb1072a3366cacd1203)
Martin Pool [Tue, 4 Dec 2001 07:40:25 +0000 (07:40 +0000)]
Better error handling:
- tdb_open api changed so that you now pass an error handling
callback when opening the file, so that errors detected during
opening have somewhere to go. (All calls from the body of Samba to
this function go through a wrapper in tdbutil, which has been
updated.)
- Clean up logic for deciding how to open tdb. Emit log messages if
something goes wrong (e.g. bad magic.)
- tdbtool now logs errors to stderr.
(This used to be commit
0aa800618eab1043d802c04fb1d125cd07936769)
Andrew Tridgell [Tue, 4 Dec 2001 06:56:58 +0000 (06:56 +0000)]
allow for passwords other than "samba2"
:)
(This used to be commit
cee58f10974b55ead68362166d12285568feeb23)
Andrew Tridgell [Tue, 4 Dec 2001 06:46:53 +0000 (06:46 +0000)]
moved lookup_usergroups() into the backend structure
(This used to be commit
689f45d2079d06b09947b2cdd314867df98c938d)
Andrew Tridgell [Tue, 4 Dec 2001 06:20:39 +0000 (06:20 +0000)]
moved init_account_policy() to the right place
(This used to be commit
e908f304a26b9f1100e301610151a9334bf117b0)
Andrew Tridgell [Tue, 4 Dec 2001 06:17:39 +0000 (06:17 +0000)]
added a query_user backend
fixed a winbindd crash when the group membership can't be looked up
(This used to be commit
088f4cc5be4a1a38781e4d019146d53993ed8c6f)
Andrew Tridgell [Tue, 4 Dec 2001 06:16:02 +0000 (06:16 +0000)]
Andrew Tridgell [Tue, 4 Dec 2001 06:14:42 +0000 (06:14 +0000)]
const religion in talloc calls
(This used to be commit
ea5d2857217b860da7e53bc6e8ccfe48a2b3620e)
Andrew Bartlett [Tue, 4 Dec 2001 05:16:54 +0000 (05:16 +0000)]
smbpasswd is *ugly*!
However this looks like the best spot to init the account policy db...
(fix segfaults on all local smbpasswd ops)
Andrew Bartlett
(This used to be commit
3f3bb62ba63373c3cdf2495f97c7461ed5b373ef)
Jeremy Allison [Tue, 4 Dec 2001 05:13:04 +0000 (05:13 +0000)]
winbindd friendly user_in_list code. Tested on a 65k user domain.
Jeremy.
(This used to be commit
5215bcca15f2cfbe438ac62cbaf94afae63ce993)
Andrew Bartlett [Tue, 4 Dec 2001 05:03:03 +0000 (05:03 +0000)]
Add 'net rpc join' to match the ADS equiv.
This kills off the offending code in smbpasswd -j -Uab%c
In the process we have changed from unsing compelatly random passwords
to random, 15 char ascii strings. While this does produce a decrese in
entropy, it is still vastly greater than we need, considering the application.
In the meantime this allows us to actually *type* the machine account
password duruign debugging.
This code also adds a 'check' step to the join, confirming that the
stored password does indeed do somthing of value :-)
Andrew Bartlett
(This used to be commit
c0b7ee6ee547dc7ff798eaf8cb63fbe344073029)
Andrew Bartlett [Tue, 4 Dec 2001 04:48:01 +0000 (04:48 +0000)]
Some changes to the name resolution code in 'net' to allow us to find a
PDC, as well as changes for correctness as per tridge.
Andrew Bartlett
(This used to be commit
16d302c5cc0da93a58e0ce10843f9c8d8062c689)
Andrew Bartlett [Tue, 4 Dec 2001 04:45:17 +0000 (04:45 +0000)]
Fix up funtion name, as this finds local, not domain master browsers.
(as per tridge's instructions)
(This used to be commit
0692d792f24f1c82c69532e50a6c4373c9a8b476)
Andrew Bartlett [Tue, 4 Dec 2001 04:33:22 +0000 (04:33 +0000)]
This comment no longer applies.
(This used to be commit
153c4a56b0b5473a1efb208551f36480cdb5d264)
Martin Pool [Tue, 4 Dec 2001 04:03:29 +0000 (04:03 +0000)]
Magic file for TDB databases.
(This used to be commit
e9085129ddf15d499d77c77694c05b028593718c)
Jeremy Allison [Tue, 4 Dec 2001 03:59:18 +0000 (03:59 +0000)]
Stop using getgrgid() - a very expensive call with winbindd, to look up
a group name.
Jeremy.
(This used to be commit
b926660e73d4c94c30ec5a365027770acdafe25e)
Jeremy Allison [Tue, 4 Dec 2001 03:47:44 +0000 (03:47 +0000)]
Moved name_is_local to the correct place. Ooops.
Jeremy.
(This used to be commit
708c0a8d16ca86439e451def5f8d37f600ff15f1)
Martin Pool [Tue, 4 Dec 2001 02:58:42 +0000 (02:58 +0000)]
Set errno in tdb_open in cases where we detect an error in opening the
database, but no underlying system call sets errno.
The particular case I had was a mangled .tdb, but there are others.
For this one, set EIO. It's a shame Unix messages aren't more
detailed -- "bad data format" would be better.
(This used to be commit
5630a988be05c21b60aba6304d4aaadce6024817)
Jeremy Allison [Tue, 4 Dec 2001 02:58:22 +0000 (02:58 +0000)]
Tidyup of lib/username. Add name_is_local fn to determine if name is
winbindd. Getting ready for efficiency fix in group lookups.
Jeremy.
(This used to be commit
8d41dfd149625e8ac53ab5e90a96e9a2daf9a629)
Tim Potter [Tue, 4 Dec 2001 00:46:12 +0000 (00:46 +0000)]
Added error message for ERRdiskfull.
(This used to be commit
9f5d7e8a04c36395570247bc5e1b7b3fc5d1a322)
Andrew Tridgell [Tue, 4 Dec 2001 00:07:08 +0000 (00:07 +0000)]
when using non-encrypted password ignore the ntpass variable to
session setup
(This used to be commit
c7665706cd5633ede710afe41413624124038238)