20 years agoThis comment no longer applies.
Andrew Bartlett [Tue, 4 Dec 2001 04:33:22 +0000 (04:33 +0000)]
This comment no longer applies.
(This used to be commit 153c4a56b0b5473a1efb208551f36480cdb5d264)

20 years agoMagic file for TDB databases.
Martin Pool [Tue, 4 Dec 2001 04:03:29 +0000 (04:03 +0000)]
Magic file for TDB databases.
(This used to be commit e9085129ddf15d499d77c77694c05b028593718c)

20 years agoStop using getgrgid() - a very expensive call with winbindd, to look up
Jeremy Allison [Tue, 4 Dec 2001 03:59:18 +0000 (03:59 +0000)]
Stop using getgrgid() - a very expensive call with winbindd, to look up
a group name.
(This used to be commit b926660e73d4c94c30ec5a365027770acdafe25e)

20 years agoMoved name_is_local to the correct place. Ooops.
Jeremy Allison [Tue, 4 Dec 2001 03:47:44 +0000 (03:47 +0000)]
Moved name_is_local to the correct place. Ooops.
(This used to be commit 708c0a8d16ca86439e451def5f8d37f600ff15f1)

20 years agoSet errno in tdb_open in cases where we detect an error in opening the
Martin Pool [Tue, 4 Dec 2001 02:58:42 +0000 (02:58 +0000)]
Set errno in tdb_open in cases where we detect an error in opening the
database, but no underlying system call sets errno.

The particular case I had was a mangled .tdb, but there are others.
For this one, set EIO.  It's a shame Unix messages aren't more
detailed -- "bad data format" would be better.
(This used to be commit 5630a988be05c21b60aba6304d4aaadce6024817)

20 years agoTidyup of lib/username. Add name_is_local fn to determine if name is
Jeremy Allison [Tue, 4 Dec 2001 02:58:22 +0000 (02:58 +0000)]
Tidyup of lib/username. Add name_is_local fn to determine if name is
winbindd. Getting ready for efficiency fix in group lookups.
(This used to be commit 8d41dfd149625e8ac53ab5e90a96e9a2daf9a629)

20 years agoAdded error message for ERRdiskfull.
Tim Potter [Tue, 4 Dec 2001 00:46:12 +0000 (00:46 +0000)]
Added error message for ERRdiskfull.
(This used to be commit 9f5d7e8a04c36395570247bc5e1b7b3fc5d1a322)

20 years agowhen using non-encrypted password ignore the ntpass variable to
Andrew Tridgell [Tue, 4 Dec 2001 00:07:08 +0000 (00:07 +0000)]
when using non-encrypted password ignore the ntpass variable to
session setup
(This used to be commit c7665706cd5633ede710afe41413624124038238)

20 years agoAdded prototypes for new fns. Thanks Elrond.
Jeremy Allison [Mon, 3 Dec 2001 20:39:15 +0000 (20:39 +0000)]
Added prototypes for new fns. Thanks Elrond.
(This used to be commit 2a7bd621b400173d61bb0adab3eded0baeb48d0b)

20 years agoadded a tdb to store the account policy informations.
Jean-François Micouleau [Mon, 3 Dec 2001 17:14:23 +0000 (17:14 +0000)]
added a tdb to store the account policy informations.
You can change them with either usermanager->policies->account
or from a command prompt on NT/W2K: net accounts /domain

we can add a rpc accounts to the net command. As the net_rpc.c is still
empty, I did not start. How should I add command to it ? Should I take the
rpcclient/cmd_xxx functions and call them from there ?

alse changed the SAM_UNK_INFO_3 parser, it's an NTTIME. This one is more
for jeremy ;-)

(This used to be commit bc28a8eebd9245ce3004ae4b1a359db51f77bf21)

20 years agochanged query_dispinfo to query_user_list
Andrew Tridgell [Mon, 3 Dec 2001 11:32:55 +0000 (11:32 +0000)]
changed query_dispinfo to query_user_list
(This used to be commit 80010d80f93cfb32c53a1720c7564fb080846f35)

20 years agoput sid_to_name behind the winbindd backend interface
Andrew Tridgell [Mon, 3 Dec 2001 11:11:14 +0000 (11:11 +0000)]
put sid_to_name behind the winbindd backend interface
I spent quite a while trying to work out how to make this call
via ldap and failed. I then found that MS servers seem use rpc
for sid_to_name, and it works even when in native mode, I ended
up just implementing it via rpc
(This used to be commit 789833b44e342c0b5de463ed8f9b5f7474a99f27)

20 years agoadded name_to_sid to the backend
Andrew Tridgell [Mon, 3 Dec 2001 08:17:46 +0000 (08:17 +0000)]
added name_to_sid to the backend
(This used to be commit 816e40a51af80a7f703c0451304de406deab3dd8)

20 years agoconst religion
Andrew Tridgell [Mon, 3 Dec 2001 08:16:51 +0000 (08:16 +0000)]
const religion
(This used to be commit 359ca8f246c46b1700418fe0226458023f808d67)

20 years agoadded another ATYPE_
Andrew Tridgell [Mon, 3 Dec 2001 08:16:01 +0000 (08:16 +0000)]
added another ATYPE_
(This used to be commit 514bc61daa3f6d11dadac1baed5a5bf61313b1f9)

20 years agomake proto should build winbindd_proto.h as well
Andrew Tridgell [Mon, 3 Dec 2001 08:15:18 +0000 (08:15 +0000)]
make proto should build winbindd_proto.h as well
(This used to be commit c8339ce5c88a371728a329d0e80266fe41c00fee)

20 years agoThis change reworkes the connection code for both rpcclient and net new
Andrew Bartlett [Mon, 3 Dec 2001 07:42:18 +0000 (07:42 +0000)]
This change reworkes the connection code for both rpcclient and net new
'net' untility.

This should make it easier to port rpcclient code across to net.

It also allows SPNEGO (the NTLMSSP subsystem in particular) to work, becouse
it kills off the early destruction of the clear-text password.

Andrew Bartlett
(This used to be commit eee925861a3af3aa16efa3b1700a980c9510c14e)

20 years agoForgot this one with the last commit...
Andrew Bartlett [Mon, 3 Dec 2001 06:49:47 +0000 (06:49 +0000)]
Forgot this one with the last commit...

Andrew Bartlett
(This used to be commit 8dbd9702d829eaefcdab8e3f8a4750befa884234)

20 years agoadded a basic ADS backend to winbind. More work needed, but at
Andrew Tridgell [Mon, 3 Dec 2001 06:04:18 +0000 (06:04 +0000)]
added a basic ADS backend to winbind. More work needed, but at
least basic operations work
(This used to be commit 88241cab983b2c7db7d477c6c4654694a7a56cd3)

20 years agoThis is another major rework of the 'net' command.
Andrew Bartlett [Mon, 3 Dec 2001 04:39:23 +0000 (04:39 +0000)]
This is another major rework of the 'net' command.

This time, all the existing functionality has been moved into
'net rap', ready for new commands in the 'net ads' and 'net rpc' categories.

In particular, we hope to have the abilty to autoselect the appropriate
backend to use based on smb.conf or other paramaters.

This will allow 'net user' to work no matter what the remote server.

The new 'net rpc' command will soon gain a 'net rpc join' and a
'net rpc user' based on the existing samba code.

Also in this commit, the connection establishment code has been almost entirly
reworked, and now has some minor sense of sainity to it.
In particular, we can now connect to hosts *other* than localhost!

We also have the ability to state on a per-command basis whether the 'localhost'
is a sane default value.  (A net join, for example, would not be sane against

Unfortunetly we have had to make the basic paramaters global variables, but
the 'cli' is not opened and closed on a per-command basis.

Andrew Bartlett
(This used to be commit 8739d426caabe3794a018dd28ab139b08f88b603)

20 years agoDon't display any data if tdb_fetch() failed in the tdbtool "fetch"
Tim Potter [Mon, 3 Dec 2001 04:15:26 +0000 (04:15 +0000)]
Don't display any data if tdb_fetch() failed in the tdbtool "fetch"
(This used to be commit a1cf70ab65058258e56ffcff5b28087b29425b1c)

20 years agoadded nsstest target
Andrew Tridgell [Mon, 3 Dec 2001 04:09:43 +0000 (04:09 +0000)]
added nsstest target
fixed winbindd_rpc.o typo
(This used to be commit 2ce7f38fe96c6f5faf45d3c71a3c8d3386ea5107)

20 years agofixed default location of
Andrew Tridgell [Mon, 3 Dec 2001 03:57:34 +0000 (03:57 +0000)]
fixed default location of
(This used to be commit adc9268216f87d915c9d971137b859c949e150dd)

20 years agofixed the nsswitch initgroups code
Andrew Tridgell [Mon, 3 Dec 2001 03:53:57 +0000 (03:53 +0000)]
fixed the nsswitch initgroups code
added a nsstest test program that directly tests all the nss
interfaces using dlopen()
(This used to be commit aee19090d3b957372b234a412cd9db8896650feb)

20 years agoWriting decimal constants as "02" has been shown to cause cancer in
Martin Pool [Mon, 3 Dec 2001 02:30:27 +0000 (02:30 +0000)]
Writing decimal constants as "02" has been shown to cause cancer in
(This used to be commit 142d3dad0ab6870acb0d46d1f189d5e2e1f71b17)

20 years agosplit winbindd_enum_dom_groups into the new backend structure
Andrew Tridgell [Mon, 3 Dec 2001 01:23:42 +0000 (01:23 +0000)]
split winbindd_enum_dom_groups into the new backend structure

also created winbindd_rpc.c which contains the functions that
have been converted to the new structure. There will soon be
a winbindd_ads.c for the ldap backend
(This used to be commit e4ccc602ba65838646f2632120069f3274619dd9)

20 years agoUpdated definition of fstring.
Tim Potter [Mon, 3 Dec 2001 00:23:14 +0000 (00:23 +0000)]
Updated definition of fstring.

print_asc(): Don't try to print a trailing NULL character
print_key(), print_rec(): Display key in ASCII
(This used to be commit 303b3a35951211775a4e87bcca47cc21236aa422)

20 years agore-enabled insure backtrace, calling /usr/bin/backtrace
Andrew Tridgell [Mon, 3 Dec 2001 00:21:51 +0000 (00:21 +0000)]
re-enabled insure backtrace, calling /usr/bin/backtrace
(This used to be commit 21a366afbe9dc5f4878f97bb03525452bbbc4e41)

20 years agoinit group db before use
Andrew Tridgell [Mon, 3 Dec 2001 00:00:43 +0000 (00:00 +0000)]
init group db before use
this fixes the smbpasswd segvs
(This used to be commit d2bcdfd995b9562872d865e723b23ed84247a73f)

20 years agoadded queryuseraliases to rpcclient
Jean-François Micouleau [Sun, 2 Dec 2001 01:45:50 +0000 (01:45 +0000)]
added queryuseraliases to rpcclient

and some comments to the samr server code, to explain what we should
return here.

(This used to be commit 06cb20a46d9d9f8abf0d92ba4cfa4d23187ad715)

20 years agothere was a bug in samr_lookup_names (my fault)
Jean-François Micouleau [Sun, 2 Dec 2001 00:06:10 +0000 (00:06 +0000)]
there was a bug in samr_lookup_names (my fault)
and added comments and some debugs.

(This used to be commit 114eba496fa020a7f491eb549c91fb38ca34dabb)

20 years agoadded mapping of primary gid to rid thru the group mapping code.
Jean-François Micouleau [Sun, 2 Dec 2001 00:03:35 +0000 (00:03 +0000)]
added mapping of primary gid to rid thru the group mapping code.
and cleanup and comments in passdb/passdb.c

(This used to be commit 6533339887832ca6dd42d99385c615db7bee3d43)

20 years agoadded samr_query_sec_obj. and put back some code to display a security
Jean-François Micouleau [Sun, 2 Dec 2001 00:00:21 +0000 (00:00 +0000)]
added samr_query_sec_obj. and put back some code to display a security

added to samr_lookup_name the choice to select the either the builtin
(s-1-5-32) domain or our current domain (s-1-5-21-x-y-z)

(This used to be commit d9d1486165591d9f7dad04f197fa692654a17a59)

20 years agoadded samr_query_sec_obj for rpcclient
Jean-François Micouleau [Sat, 1 Dec 2001 23:57:11 +0000 (23:57 +0000)]
added samr_query_sec_obj for rpcclient

(This used to be commit d8809c58614cd97ef78d398645788e41022a8c39)

20 years agogroups in the Builtin domain S-5-32 are alias and not well-known groups
Jean-François Micouleau [Sat, 1 Dec 2001 23:56:05 +0000 (23:56 +0000)]
groups in the Builtin domain S-5-32 are alias and not well-known groups

(This used to be commit 192978e3fc96bc60fc3ceaad8f024bc91bf69da7)

20 years agoremoved the #ifdef USING_GROUPNAME_MAP/#endif blocks
Jean-François Micouleau [Sat, 1 Dec 2001 23:53:32 +0000 (23:53 +0000)]
removed the #ifdef USING_GROUPNAME_MAP/#endif blocks

that GROUPNAME_MAP has never been used.

I'll delete the smbd/groupname.c file too

(This used to be commit 2285e98f205752ec801d11b4bb9afa33e768fd93)

20 years agoadded smbgroupedit to compile by default
Jean-François Micouleau [Sat, 1 Dec 2001 23:51:21 +0000 (23:51 +0000)]
added smbgroupedit to compile by default

(This used to be commit 540a6122dc58a216a94a11a36baa209521dd1981)

20 years agoThe beginnings of alternative backends for winbindd
Andrew Tridgell [Sat, 1 Dec 2001 12:31:43 +0000 (12:31 +0000)]
The beginnings of alternative backends for winbindd
This just splits off the dispinfo call behind a methods structure.
I'll split off a few more functions soon, then we will be ready for
LDAP replacement methods
(This used to be commit 0216b0fca115c903ec31ed21427a83c62077dc95)

20 years agoadded $(LDFLAGS) to link smbmount/smbmnt/smbumount to make Red Hat Linux
Motonobu Takahashi [Sat, 1 Dec 2001 05:28:14 +0000 (05:28 +0000)]
added $(LDFLAGS) to link smbmount/smbmnt/smbumount to make Red Hat Linux
(This used to be commit 7dfde592aa47f735c08718844db083500b020a60)

20 years agonot used any more
Andrew Tridgell [Sat, 1 Dec 2001 03:26:57 +0000 (03:26 +0000)]
not used any more
(This used to be commit 97627e424a1de3df0a6f7a9bfaaf3ece4dd2036d)

20 years agomore specific DNS instructions
Andrew Tridgell [Sat, 1 Dec 2001 02:23:06 +0000 (02:23 +0000)]
more specific DNS instructions
(This used to be commit 630e01cafde863beaa367be3c4e01c9c5232b682)

20 years agoKDC DNS domain must be the kerberos realm. Or so it seems that way
Jim McDonough [Sat, 1 Dec 2001 01:25:51 +0000 (01:25 +0000)]
KDC DNS domain must be the kerberos realm.  Or so it seems that way
(This used to be commit e89543c7e90c5303e61674bb4a258176918e0111)

20 years agowe need to look for liblber before libldap
Andrew Tridgell [Fri, 30 Nov 2001 22:45:52 +0000 (22:45 +0000)]
we need to look for liblber before libldap
(This used to be commit 93a652b705e99df6cd493eacb1a8a61a3a2b82f7)

20 years agoXFS quota patch for Linux.
Jeremy Allison [Fri, 30 Nov 2001 21:50:02 +0000 (21:50 +0000)]
XFS quota patch for Linux.
(This used to be commit ce099faf6ce07e14bd9610960bd09f56c5bee864)

20 years agomerge from APPLIANCE_HEAD
Gerald Carter [Fri, 30 Nov 2001 20:33:35 +0000 (20:33 +0000)]
(This used to be commit f8b18b25944135c196c8134100f601e84c583382)

20 years agoCheck error returns.
Jeremy Allison [Fri, 30 Nov 2001 03:45:21 +0000 (03:45 +0000)]
Check error returns.
(This used to be commit fc8638e89effb0ebf2e40cee8cd0d7467e49e2a8)

20 years agoGerald's fix.
Jeremy Allison [Fri, 30 Nov 2001 03:38:59 +0000 (03:38 +0000)]
Gerald's fix.
(This used to be commit b0c1fcfc8bae83788c7595931321833bf177ec4b)

20 years agoAfter conversations with Andrew, improved the robustness of the
Jeremy Allison [Fri, 30 Nov 2001 01:59:03 +0000 (01:59 +0000)]
After conversations with Andrew, improved the robustness of the
sharemode db in the following way.

Originally, on startup and shutdown, smbd would scan the share mode
db to ensure it was correct. This lead to scalability issues as
scans lock the db for quite a long time. Andrew had the brainstorm
that we only care about the record we're about to read.

This new code (small change really, but quite significant) causes
get_share_modes() to do a process_exists() call against each pid
in each record, and to delete any that don't and re-write the
entry if any dead records were detected.

This allowed me to remove the startup/shutdown scans of the
db (they can be added into smbstatus if anyone really cares to
have them back). This will please the vfs author who was worried
about the time taken on open() calls, and will lead to much
greater robustness and scalability in the share mode db.

We need much testing of this, and also netbench tests to
ensure the extra process_exists() calls don't hurt performance
(they shouldn't it's a very simple system call).

(This used to be commit 4098d442030e66601450baeb09ae06b39a1ab571)

20 years agopreparing for release of 3.0-alpha0
Samba Release Account [Fri, 30 Nov 2001 01:38:49 +0000 (01:38 +0000)]
preparing for release of 3.0-alpha0
(This used to be commit ac1889a2bbba99543d3ecdbd897f17657e9ce89f)

20 years agoRenamed sid field in SEC_ACE to trustee to be more in line with MS's
Tim Potter [Fri, 30 Nov 2001 01:04:15 +0000 (01:04 +0000)]
Renamed sid field in SEC_ACE to trustee to be more in line with MS's
(This used to be commit 9712d3f15a47155f558d0034ef71fd06afb11301)

20 years agoMissing return in free_privilege()
Tim Potter [Fri, 30 Nov 2001 00:46:40 +0000 (00:46 +0000)]
Missing return in free_privilege()
(This used to be commit b35d90cd89849f0a01e8c79f0962ec9388673ad1)

20 years agoEnsured the %G substitution exactly matches what the man page states.
Jeremy Allison [Fri, 30 Nov 2001 00:28:39 +0000 (00:28 +0000)]
Ensured the %G substitution exactly matches what the man page states.
(This used to be commit 518084a70d0b20347411535f1dcf7453981499cf)

20 years agoComment deconfusification.
Tim Potter [Fri, 30 Nov 2001 00:24:43 +0000 (00:24 +0000)]
Comment deconfusification.
(This used to be commit b5fac3a56d917b13fedc0ace3ea56ae82f51ccdd)

20 years agoAdded close-share message.
Jeremy Allison [Thu, 29 Nov 2001 22:37:58 +0000 (22:37 +0000)]
Added close-share message.
(This used to be commit 6a10accbcaa130b51381d43cb10c55e86ba2a320)

20 years agoChanged again how the privilege list is handled in the group mapping code.
Jean-François Micouleau [Thu, 29 Nov 2001 16:05:05 +0000 (16:05 +0000)]
Changed again how the privilege list is handled in the group mapping code.
This time it's a PRIVILEGE_SET struct instead of a simple uint32 array. It
makes much more sense. Also added a uint32 systemaccount to the GROUP_MAP
struct as some privilege showing in USRMGR.EXE are not real privs but a
bitmask flag. I guess it's an heritage from NT 3.0 ! I could setup an NT
3.1 box to verify, but I'm too lazy (yes I still have my CDs).

Added 3 more LSA calls: SetSystemAccount, AddPrivileges and
RemovePrivileges, we can manage all this privilege from UserManager.

Time to change the NT_USER_TOKEN struct and add checks in all the rpc
functions. Fun, fun, fun.

(This used to be commit 3f0a9ef2b8c626cfa2878394bb7b642342342bf3)

20 years agoads->realm must not be NULL
Andrew Tridgell [Thu, 29 Nov 2001 08:22:45 +0000 (08:22 +0000)]
ads->realm must not be NULL

perhaps we should just fail ads_init() in this case?
(This used to be commit 2a4ce3de6ae8fb833370d1f9d6e5e7193fafa979)

20 years agodefine LDAP_PORT when not available
Andrew Tridgell [Thu, 29 Nov 2001 06:38:54 +0000 (06:38 +0000)]
define LDAP_PORT when not available
(This used to be commit 5a5f140f84f4dd377d141e352f4cb7f9bea4fe64)

20 years agofixed typo
Andrew Tridgell [Thu, 29 Nov 2001 06:26:05 +0000 (06:26 +0000)]
fixed typo
(This used to be commit 624cb28271289aa697f23c32f7b5159f6fcbb51d)

20 years agoFix up the ./configure tests for kerberos. This ensures a more consistant
Andrew Bartlett [Thu, 29 Nov 2001 06:23:43 +0000 (06:23 +0000)]
Fix up the ./configure tests for kerberos.  This ensures a more consistant
behaviour no matter if kerberos was found automatically, found in the
/usr/kerberos path or was specified.
(This used to be commit 4e212f728c429b986bb3e2230fbc9cd4bcf6dd40)

20 years agoMake better use of the ads_init() function to get the kerberos relam etc.
Andrew Bartlett [Thu, 29 Nov 2001 06:21:56 +0000 (06:21 +0000)]
Make better use of the ads_init() function to get the kerberos relam etc.

This allows us to use automagically obtained values in future, and the value
from krb5.conf now.

Also fix mem leaks etc.

Andrew Bartlett
(This used to be commit 8f9ce717819235d98a1463f20ac659cb4b4ebbd2)

20 years agoI think the lookup_pdc_name() should be called lookup_dc_name() and the
Tim Potter [Thu, 29 Nov 2001 05:50:32 +0000 (05:50 +0000)]
I think the lookup_pdc_name() should be called lookup_dc_name() and the
name_status_find() call here should look up a #1c name instead of #1d.
This fixes some bugs currently with BDC authentication in winbindd and in
smbd as you can't query the #1d name with the ip address of a BDC.

Who is Uncle Tom Cobbley anyway?
(This used to be commit 4215048f7b20a8f9e5877bdbb2f54841b2f7fa64)

20 years agofixed toupper_w() and friends on big-endian
Andrew Tridgell [Thu, 29 Nov 2001 05:20:23 +0000 (05:20 +0000)]
fixed toupper_w() and friends on big-endian

this fixes the core dumps on sparc
(This used to be commit e6004062a508b1fe6dd7f93d8a933da9916598f8)

20 years ago2nd attempt at fixing lame char tables on big endian machines
Andrew Tridgell [Thu, 29 Nov 2001 05:03:15 +0000 (05:03 +0000)]
2nd attempt at fixing lame char tables on big endian machines
(This used to be commit 80841f5763b3ab03a82ab0a18a9126d89ffed2d5)

20 years agofixed lame char tables on big endian machines
Andrew Tridgell [Thu, 29 Nov 2001 04:58:29 +0000 (04:58 +0000)]
fixed lame char tables on big endian machines
(This used to be commit 568425709d11b2eed86643d18973542d0504d5ca)

20 years agofixed some krb5 ifdefs
Andrew Tridgell [Wed, 28 Nov 2001 23:54:07 +0000 (23:54 +0000)]
fixed some krb5 ifdefs
(This used to be commit 23ef22f11700bbaa5778a9678a990a2b041fcefe)

20 years agomerge from APPLIANCE_HEAD
Gerald Carter [Wed, 28 Nov 2001 21:51:11 +0000 (21:51 +0000)]
(This used to be commit c60aa6c06f376684b6d6d9a2c14305ca9f4657ef)

20 years agospace -> tab.
Jeremy Allison [Wed, 28 Nov 2001 19:51:25 +0000 (19:51 +0000)]
space -> tab.
(This used to be commit c7dd0364f2b084d9a372ac885fd788bbb5113125)

20 years agoadd .po32 files to ignore list
Herb Lewis [Wed, 28 Nov 2001 19:49:43 +0000 (19:49 +0000)]
add .po32 files to ignore list
(This used to be commit 5f625f2877fc5132be3030fc6ea9df4d59ecff05)

20 years agoSpelling pedents strike again :-).
Jeremy Allison [Wed, 28 Nov 2001 18:10:13 +0000 (18:10 +0000)]
Spelling pedents strike again :-).
(This used to be commit 0187d4ba16c794faa372bf1a50261b8f47482064)

20 years agominor update
Andrew Tridgell [Wed, 28 Nov 2001 07:33:18 +0000 (07:33 +0000)]
minor update
(This used to be commit aaf111c9ff6247ea4071d6f69bdb01afaded5476)

20 years agoAllow kerberos to work on RedHat and other non /usr systems again
Andrew Bartlett [Wed, 28 Nov 2001 06:52:33 +0000 (06:52 +0000)]
Allow kerberos to work on RedHat and other non /usr systems again

the configure test uses the CPPFLAGS when checking that krb5.h exists
(This used to be commit 1e4fc749ad17114ac715c8ab833ef1d50dd318da)

20 years agofixed a core dump in server level security
Andrew Tridgell [Wed, 28 Nov 2001 05:49:36 +0000 (05:49 +0000)]
fixed a core dump in server level security
(This used to be commit e790bb21d3895bef97522b68c6f00812e6c286f2)

20 years agoSome random updates for the ADS-HOWTO
Andrew Bartlett [Wed, 28 Nov 2001 05:13:12 +0000 (05:13 +0000)]
Some random updates for the ADS-HOWTO
(This used to be commit c39bf5ba05d04cbc6dd0a328ee43193588ea5134)

20 years agoEnsure the CAN_WRITE is checked and prevents O_CREAT and O_TRUNC from
Jeremy Allison [Wed, 28 Nov 2001 05:03:37 +0000 (05:03 +0000)]
Ensure the CAN_WRITE is checked and prevents O_CREAT and O_TRUNC from
being set. Also prevent an open on a file on a readonly share from
setting delete on close.
(This used to be commit 1f3dcd99bdd36cd3ff492394e80c3e2037a9aa48)

20 years agoRe-added "Share modes" meaning don't allow deny mode conflict. Due to
Jeremy Allison [Wed, 28 Nov 2001 04:47:46 +0000 (04:47 +0000)]
Re-added "Share modes" meaning don't allow deny mode conflict. Due to
user demand (don't talk to me about removing parameters.... :-).
(This used to be commit b69127391b322d81cc648f73a601ed61e79c8a44)

20 years agoturn off the insure xterm hack for now
Andrew Tridgell [Wed, 28 Nov 2001 04:44:23 +0000 (04:44 +0000)]
turn off the insure xterm hack for now
(This used to be commit 8698f7ef3ee9b83370e895607297245b6df74934)

20 years agoAdded a 'keys' command to tdbtool which prints out all keys in the tdb.
Tim Potter [Wed, 28 Nov 2001 03:58:33 +0000 (03:58 +0000)]
Added a 'keys' command to tdbtool which prints out all keys in the tdb.
(This used to be commit 1d2305c233ef40ccb016688f918e34392d1a691e)

20 years agofix a bunch of places where we can double-free a cli structure
Andrew Tridgell [Wed, 28 Nov 2001 03:56:30 +0000 (03:56 +0000)]
fix a bunch of places where we can double-free a cli structure
(This used to be commit e2ba2383c9f679c076749a8f4fccefc3559e37ec)

20 years agoCross merge to make 2.2 and HEAD closer.
Jeremy Allison [Wed, 28 Nov 2001 02:42:55 +0000 (02:42 +0000)]
Cross merge to make 2.2 and HEAD closer.
(This used to be commit 39f076b56cf457cc780dd30a4d3150d8bfc60d13)

20 years agoadded samr_set_domain_info and samr_unknown_2E.
Jean-François Micouleau [Wed, 28 Nov 2001 00:06:00 +0000 (00:06 +0000)]
added samr_set_domain_info and samr_unknown_2E.
We now get the full account policy window in usermanager, and the
framework to store all those values. I plan to add a TDB file to store

oh, and found that the last value in a sam_unknown_info_12_inf struct is
an uint16 and not a uint32.

andrewb: you hardcoded the MAX_PASSWORD_AGE to 21 days. We can now turn it
to a value setable in usermanager.

(This used to be commit 99471d25693f6672d433b90a060378f6faad867f)

20 years agoSome reformatting.
Tim Potter [Tue, 27 Nov 2001 23:48:44 +0000 (23:48 +0000)]
Some reformatting.

M-x tabify
(This used to be commit 6446d2acd5ead098e5e51b06df5bf78b9e315418)

20 years agoalways send an OID list until we handle raw (unwrapped) NTLMSSP
Andrew Tridgell [Tue, 27 Nov 2001 23:41:14 +0000 (23:41 +0000)]
always send an OID list until we handle raw (unwrapped) NTLMSSP
packets in session setup
(This used to be commit 3b3f8a935064811906cba221d386697e699af18c)

20 years agoFix for the logic bug wrt. existant oplocks. See long message
Jeremy Allison [Tue, 27 Nov 2001 23:12:25 +0000 (23:12 +0000)]
Fix for the logic bug wrt. existant oplocks. See long message
in samba-technical for explaination.
(This used to be commit 8150f0f3f72957e77a1e6ca06760c87c516792eb)

20 years agoup the log level for server level security to try to track down the
Andrew Tridgell [Tue, 27 Nov 2001 22:49:29 +0000 (22:49 +0000)]
up the log level for server level security to try to track down the
segvs in the build farm
(This used to be commit 228d4fc47b8adbcbda81bffaea09b616b5d89992)

20 years agodon't use /dev/null for a smbpasswd file
Andrew Tridgell [Tue, 27 Nov 2001 22:47:09 +0000 (22:47 +0000)]
don't use /dev/null for a smbpasswd file
(This used to be commit 067a4f87ac5dc2b5cf902c42f56923d0c5e29bc2)

20 years agoAdded negative caching to group lookups.
Jeremy Allison [Tue, 27 Nov 2001 22:39:57 +0000 (22:39 +0000)]
Added negative caching to group lookups.
(This used to be commit fceba7dea5b09ac9ce509c5252a46be8e4d3de85)

20 years agoadded test for krb5.h
Andrew Tridgell [Tue, 27 Nov 2001 22:37:25 +0000 (22:37 +0000)]
added test for krb5.h

this was causing the kerberos stuff to fail compilation on several
(This used to be commit 17e2f3897374c76dd66b21fdcd93c3a04671f4ce)

20 years agoAdded negative caching to the user pw lookup by name and by uid.
Jeremy Allison [Tue, 27 Nov 2001 20:57:14 +0000 (20:57 +0000)]
Added negative caching to the user pw lookup by name and by uid.
(This used to be commit 4013ae87a1c73ceba346de2a0b905e7c8df355c4)

20 years agoAdded PRINTER_ALREADY_EXISTS error check from Gerry.
Jeremy Allison [Tue, 27 Nov 2001 20:01:23 +0000 (20:01 +0000)]
Added PRINTER_ALREADY_EXISTS error check from Gerry.
(This used to be commit c7f1d3d6f776da8619f1221d38619d084ffb990b)

20 years agoallow printing of NULL pointers with internal snprintf
Andrew Tridgell [Tue, 27 Nov 2001 13:31:02 +0000 (13:31 +0000)]
allow printing of NULL pointers with internal snprintf
(This used to be commit 91bc14f430f798c6be3cb21cb5199ec56308d4f2)

20 years agofixed the panics on basicsmb-sharelist on sun1
Andrew Tridgell [Tue, 27 Nov 2001 13:29:14 +0000 (13:29 +0000)]
fixed the panics on basicsmb-sharelist on sun1
(This used to be commit 1bd3235744bebefa6ba09795438400b4674c165c)

20 years agoFix another memory leak spotted by Tom Jansen.
Richard Sharpe [Tue, 27 Nov 2001 10:42:39 +0000 (10:42 +0000)]
Fix another memory leak spotted by Tom Jansen.
(This used to be commit 6e2c06a6e6173e68a75fd1adfaa73fe9a9210fef)

20 years agosigh.
Andrew Tridgell [Tue, 27 Nov 2001 07:09:06 +0000 (07:09 +0000)]

some systems have libkrb5 but not krb5.h
(This used to be commit 4b89fdecfcf384e7434470a9dcc963f9d96498d1)

20 years agonsswitch/winbindd_group.c nsswitch/winbindd_user.c: formatting fixups.
Jeremy Allison [Tue, 27 Nov 2001 06:28:06 +0000 (06:28 +0000)]
nsswitch/winbindd_group.c nsswitch/winbindd_user.c: formatting fixups.
smbd/open.c: Fix "delete on close" for directories.
(This used to be commit 014b0973a3b3b9eb22cce3053171fa55f5c16a63)

20 years agoreverted incorrect patch
Andrew Tridgell [Tue, 27 Nov 2001 05:00:55 +0000 (05:00 +0000)]
reverted incorrect patch
(This used to be commit 96224fe2d40d0ce79d1215bb6f0d17291cace7b9)

20 years agofixed leak in free_user_info()
Andrew Tridgell [Tue, 27 Nov 2001 04:07:57 +0000 (04:07 +0000)]
fixed leak in free_user_info()
(This used to be commit 8eb4277b12b600cdbf8a5205ebc76d1d9d52f1aa)

20 years agoanother memory leak bites the dust
Andrew Tridgell [Tue, 27 Nov 2001 04:05:28 +0000 (04:05 +0000)]
another memory leak bites the dust
(This used to be commit 982d6d447add2d4079c28c0b8ecb0e499f391a2a)

20 years agofixed another memory leak
Andrew Tridgell [Tue, 27 Nov 2001 03:54:15 +0000 (03:54 +0000)]
fixed another memory leak
(This used to be commit 37aa2873e5f476a587316893b0ea3a6fbdfe746f)

20 years agoprevent a bogus insure wild ptr message
Andrew Tridgell [Tue, 27 Nov 2001 03:50:53 +0000 (03:50 +0000)]
prevent a bogus insure wild ptr message
(This used to be commit 1976a8f87544140363449a361f7c7347ef2c44f5)

20 years agoadded -i option to nmbd, giving interactive mode (like winbindd)
Andrew Tridgell [Tue, 27 Nov 2001 03:40:06 +0000 (03:40 +0000)]
added -i option to nmbd, giving interactive mode (like winbindd)
(This used to be commit 1a30efdc2c7e5b385197bbfbcebac6a7305929b8)