tprouty/samba.git
11 years agor5287: fix build problem when HAVE_POSIX_ACL not defined
Herb Lewis [Wed, 9 Feb 2005 21:23:33 +0000 (21:23 +0000)]
r5287: fix build problem when HAVE_POSIX_ACL not defined

11 years agor5283: Merge -r5279 and-r5280 from trunk.
Tim Potter [Tue, 8 Feb 2005 23:17:44 +0000 (23:17 +0000)]
r5283: Merge -r5279 and-r5280 from trunk.

11 years agor5278: BUG 2327: fix compile bug in idmap_rid.c
Gerald Carter [Tue, 8 Feb 2005 19:27:18 +0000 (19:27 +0000)]
r5278: BUG 2327: fix compile bug in idmap_rid.c

11 years agor5272: BUG 2132, 2134: patch from Jason Mader <jason@ncac.gwu.edu> to remove unused...
Gerald Carter [Mon, 7 Feb 2005 22:42:43 +0000 (22:42 +0000)]
r5272: BUG 2132, 2134: patch from Jason Mader <jason@ncac.gwu.edu> to remove unused variables

11 years agor5271: patch from S Murthy Kambhampaty <smk_va@yahoo.com> to add idmap_rid.so to...
Gerald Carter [Mon, 7 Feb 2005 22:30:56 +0000 (22:30 +0000)]
r5271: patch from S Murthy Kambhampaty <smk_va@yahoo.com> to add idmap_rid.so to the Fedora and RedHat packaging

11 years agor5270: fixing some bashism's in autogen.sh
Gerald Carter [Mon, 7 Feb 2005 22:21:49 +0000 (22:21 +0000)]
r5270: fixing some bashism's in autogen.sh

11 years agor5269: BUG 858: fix order of popt args evalution so we don't crash when given no...
Gerald Carter [Mon, 7 Feb 2005 22:20:03 +0000 (22:20 +0000)]
r5269: BUG 858: fix order of popt args evalution so we don't crash when given no command line args

11 years agor5268: Fix bug #2310, only do 16-bit normalization on small dfree
Jeremy Allison [Mon, 7 Feb 2005 22:06:49 +0000 (22:06 +0000)]
r5268: Fix bug #2310, only do 16-bit normalization on small dfree
request.
Jeremy.

11 years agor5265: ensure that the Fedora RPMS build with cups support
Gerald Carter [Mon, 7 Feb 2005 19:39:15 +0000 (19:39 +0000)]
r5265: ensure that the Fedora RPMS build with cups support

11 years agor5264: Log with loglevel 0 when account-administration scripts fail.
Günther Deschner [Mon, 7 Feb 2005 18:20:06 +0000 (18:20 +0000)]
r5264: Log with loglevel 0 when account-administration scripts fail.

Guenther

11 years agor5263: bug 2249: patch from Manuel Baena <mbaena@lcc.uma.es> to print error message...
Gerald Carter [Mon, 7 Feb 2005 15:35:42 +0000 (15:35 +0000)]
r5263: bug 2249: patch from Manuel Baena <mbaena@lcc.uma.es> to print error message in fullpath()

11 years agor5262: Fix server_role in the samr_query_dom_info calls. When we are a BDC we
Günther Deschner [Mon, 7 Feb 2005 14:14:44 +0000 (14:14 +0000)]
r5262: Fix server_role in the samr_query_dom_info calls. When we are a BDC we
should not say we are a PDC.

Guenther

11 years agor5257: Upadate patches and control files
Simo Sorce [Mon, 7 Feb 2005 08:43:18 +0000 (08:43 +0000)]
r5257: Upadate patches and control files
Sync up with 3.0.11

11 years agor5246: We can't use a pointer to struct lsa_info until is has been
Tim Potter [Sun, 6 Feb 2005 01:12:15 +0000 (01:12 +0000)]
r5246: We can't use a pointer to struct lsa_info until is has been
initialised.  Fix for bugzilla #2315.  Can the privileges dude(s)
please verify this?

11 years agor5236: Ignore users mount parm (since unneeded by cifs kernel code). Suggested by...
Steve French [Fri, 4 Feb 2005 23:30:27 +0000 (23:30 +0000)]
r5236: Ignore users mount parm (since unneeded by cifs kernel code).  Suggested by Dirk Jagdmann.

11 years agor5235: Fix compile warning.
Günther Deschner [Fri, 4 Feb 2005 23:01:52 +0000 (23:01 +0000)]
r5235: Fix compile warning.

11 years agor5234: Do not use the "Local Unix Group"-default description for all kinds of
Günther Deschner [Fri, 4 Feb 2005 22:27:14 +0000 (22:27 +0000)]
r5234: Do not use the "Local Unix Group"-default description for all kinds of
group-mappings.

Guenther

11 years agor5233: fixing some typos
Gerald Carter [Fri, 4 Feb 2005 17:46:30 +0000 (17:46 +0000)]
r5233: fixing some typos

11 years agor5228: Fix typo, mention officially supported samba3/SLES8 packages on ftp.sernet.de.
Volker Lendecke [Fri, 4 Feb 2005 14:38:12 +0000 (14:38 +0000)]
r5228: Fix typo, mention officially supported samba3/SLES8 packages on ftp.sernet.de.

Volker

11 years agor5227: removed SuSE spec file @ Lars' request and updated read to point to package...
Gerald Carter [Fri, 4 Feb 2005 14:03:57 +0000 (14:03 +0000)]
r5227: removed SuSE spec file @ Lars' request and updated read to point to package download areas

11 years agor5225: fix mem leak and debug message
Stefan Metzmacher [Fri, 4 Feb 2005 07:01:33 +0000 (07:01 +0000)]
r5225: fix mem leak and debug message

metze

11 years agor5207: patches from Jay Fenlason @ RedHat (scooped from their Fedora packages)
Gerald Carter [Fri, 4 Feb 2005 00:25:33 +0000 (00:25 +0000)]
r5207: patches from Jay Fenlason @ RedHat (scooped from their Fedora packages)

11 years agor5205: more fixups for BUG 2291
Gerald Carter [Thu, 3 Feb 2005 16:23:49 +0000 (16:23 +0000)]
r5205: more fixups for BUG 2291

11 years agor5203: additional changes for BUG 2291 to restrict who can join a BDC and add domain...
Gerald Carter [Thu, 3 Feb 2005 15:14:54 +0000 (15:14 +0000)]
r5203: additional changes for BUG 2291 to restrict who can join a BDC and add domain trusts

11 years agor5192: missed one packaging fix for BUG 2299
Gerald Carter [Thu, 3 Feb 2005 04:40:52 +0000 (04:40 +0000)]
r5192: missed one packaging fix for BUG 2299

11 years agor5191: BUG 2299: better logrotate configuration from Levente Farkas <lfarkas@lfarkas...
Gerald Carter [Thu, 3 Feb 2005 04:38:48 +0000 (04:38 +0000)]
r5191: BUG 2299: better logrotate configuration from Levente Farkas <lfarkas@lfarkas.org>

11 years agor5183: Ensure we correctly set the per-connection "case_sensitive" setting.
Jeremy Allison [Thu, 3 Feb 2005 02:02:54 +0000 (02:02 +0000)]
r5183: Ensure we correctly set the per-connection "case_sensitive" setting.
Rename dptrs_open to the more correct dirhandles_open.
Remove old #if 1.
Jeremy.

11 years agor5180: Call the "add machine script" to create all kinds of trust accounts
Günther Deschner [Wed, 2 Feb 2005 20:11:37 +0000 (20:11 +0000)]
r5180: Call the "add machine script" to create all kinds of trust accounts
(this restores old behaviour). Fixes #2291.

Guenther

11 years agor5179: Add -P (password-menu-only) option to swat. Admins can allow users
Deryck Hodge [Wed, 2 Feb 2005 18:01:11 +0000 (18:01 +0000)]
r5179: Add -P (password-menu-only) option to swat.  Admins can allow users
to use swat to change their password without allowing them to see
the "View" and "Status" buttons.

deryck

11 years agor5176: Warn the user that print command is ignored when using cups libraries
Simo Sorce [Wed, 2 Feb 2005 16:22:59 +0000 (16:22 +0000)]
r5176: Warn the user that print command is ignored when using cups libraries

11 years agor5174: ensure that we consistently use the current_user_info.smb_name vs. smb_name...
Gerald Carter [Wed, 2 Feb 2005 16:05:55 +0000 (16:05 +0000)]
r5174: ensure that we consistently use the current_user_info.smb_name vs. smb_name when parsing smb.conf and reloading config files

11 years agor5166: From James Peach - remove minor C99-isms.
Jeremy Allison [Wed, 2 Feb 2005 01:58:18 +0000 (01:58 +0000)]
r5166: From James Peach - remove minor C99-isms.
Jeremy.

11 years agor5165: BUG 2295: always use get_local_machine_name() rather than digging in the glova...
Gerald Carter [Tue, 1 Feb 2005 20:43:14 +0000 (20:43 +0000)]
r5165: BUG 2295: always use get_local_machine_name() rather than digging in the gloval variable 'local_machine'

11 years agor5163: Fix bugzilla 2062:
Jim McDonough [Tue, 1 Feb 2005 19:32:54 +0000 (19:32 +0000)]
r5163: Fix bugzilla 2062:
turn off broadcast for all 390 NICs.

11 years agor5162: BUG 2264: remove shutdown and abortshurn commands from rpcclient since they...
Gerald Carter [Tue, 1 Feb 2005 19:04:13 +0000 (19:04 +0000)]
r5162: BUG 2264: remove shutdown and abortshurn commands from rpcclient since they are stable in 'net rpc' (to avoid fixing portability bugs)

11 years agor5160: First cut at refactoring of directory code to handle non-wildcard
Jeremy Allison [Tue, 1 Feb 2005 18:33:50 +0000 (18:33 +0000)]
r5160: First cut at refactoring of directory code to handle non-wildcard
directory match more efficiently. Passes RAW-SEARCH under valgrind but needs more
testing (which I'll do later today :-).
Jeremy.

11 years agor5159: BUG 2262: add support to detect *freebsd6* (same as *freebsd5* currently)
Gerald Carter [Tue, 1 Feb 2005 18:29:14 +0000 (18:29 +0000)]
r5159: BUG 2262: add support to detect *freebsd6* (same as *freebsd5* currently)

11 years agor5158: BUG 2263: patch from Timur Bakeyev <timur@com.bat.ru> to guard base64_encode_d...
Gerald Carter [Tue, 1 Feb 2005 18:24:39 +0000 (18:24 +0000)]
r5158: BUG 2263: patch from Timur Bakeyev <timur@com.bat.ru> to guard base64_encode_data_blob() against empty blobs

11 years agor5157: BUG 2266: conditionally include rpc/nettype.h to work around missing header...
Gerald Carter [Tue, 1 Feb 2005 18:14:15 +0000 (18:14 +0000)]
r5157: BUG 2266: conditionally include rpc/nettype.h to work around missing header onf FreeBSD4

11 years agor5154: Tidy up interface a little.
Jeremy Allison [Tue, 1 Feb 2005 02:06:00 +0000 (02:06 +0000)]
r5154: Tidy up interface a little.
Jeremy.

11 years agor5152: Restructure the directory handling code, stop using void * pointers
Jeremy Allison [Tue, 1 Feb 2005 00:28:20 +0000 (00:28 +0000)]
r5152: Restructure the directory handling code, stop using void * pointers
that just allow the wrong pointer to be assigned :-) and make the
interface more consistent. Fix the FreeBSD directory problem. Last
thing to do is to add the "singleton" directory concept from James
Peach's code.
Jeremy.

11 years agor5150: consolidate the samr_make.*obj_sd() functions to share code
Gerald Carter [Mon, 31 Jan 2005 22:42:30 +0000 (22:42 +0000)]
r5150: consolidate the samr_make.*obj_sd() functions to share code

11 years agor5140: (a) fix problem with enumerating domain trusts in security = ads; (b) fix...
Gerald Carter [Mon, 31 Jan 2005 16:32:14 +0000 (16:32 +0000)]
r5140: (a) fix problem with enumerating domain trusts in security = ads; (b) fix a segfault in rpcclient's dsenumdomtrusts

11 years agor5132: netscape DS 5.2 schema update from Richard Renard <rrenard@idealx.com>
Gerald Carter [Mon, 31 Jan 2005 13:26:00 +0000 (13:26 +0000)]
r5132: netscape DS 5.2 schema update from Richard Renard <rrenard@idealx.com>

11 years agor5131: BUG 2290: don;t call mkversion.sh since we don't have it in this directory
Gerald Carter [Mon, 31 Jan 2005 13:17:49 +0000 (13:17 +0000)]
r5131: BUG 2290: don;t call mkversion.sh since we don't have it in this directory

11 years agor5127: Fix Bug 2289 -- thanks to jason@ncac.gwu.edu
Volker Lendecke [Mon, 31 Jan 2005 09:27:12 +0000 (09:27 +0000)]
r5127: Fix Bug 2289 -- thanks to jason@ncac.gwu.edu

11 years agor5125: Fix bug 2113 -- thanks to jason@ncac.gwu.edu
Volker Lendecke [Mon, 31 Jan 2005 08:29:51 +0000 (08:29 +0000)]
r5125: Fix bug 2113 -- thanks to jason@ncac.gwu.edu

11 years agor5112: Fix for shared object creation in examples. Bugzilla #2058.
Tim Potter [Sun, 30 Jan 2005 22:47:26 +0000 (22:47 +0000)]
r5112: Fix for shared object creation in examples.  Bugzilla #2058.

11 years agor5111: Fix up changed prototype for setsampwent pdb function.
Tim Potter [Sun, 30 Jan 2005 22:45:46 +0000 (22:45 +0000)]
r5111: Fix up changed prototype for setsampwent pdb function.

11 years agor5100: We should only care about case-sensitivity when *reading* an incoming
Jeremy Allison [Sun, 30 Jan 2005 00:36:19 +0000 (00:36 +0000)]
r5100: We should only care about case-sensitivity when *reading* an incoming
filename, not returning one. Makes us pass one more Samba4 RAW-SEARCH test.
Jeremy.

11 years agor5098: Next round build-fixing
Volker Lendecke [Sat, 29 Jan 2005 10:05:46 +0000 (10:05 +0000)]
r5098: Next round build-fixing

11 years agor5096: Attempt to fix the build
Volker Lendecke [Sat, 29 Jan 2005 09:38:15 +0000 (09:38 +0000)]
r5096: Attempt to fix the build

11 years agor5082: Don't blindly copy question rr_type and class, set correctly as required
Jeremy Allison [Sat, 29 Jan 2005 02:49:01 +0000 (02:49 +0000)]
r5082: Don't blindly copy question rr_type and class, set correctly as required
by rfc1002.
Jeremy.

11 years agor5077: Use correct type for rr record on negative name query reply.
Jeremy Allison [Sat, 29 Jan 2005 02:18:01 +0000 (02:18 +0000)]
r5077: Use correct type for rr record on negative name query reply.
Jeremy.

11 years agor5076: Ensure that WINS negative name query responses and WACK packets
Jeremy Allison [Sat, 29 Jan 2005 02:03:46 +0000 (02:03 +0000)]
r5076: Ensure that WINS negative name query responses and WACK packets
use the correct RR type of 0xA instead of reflecting back what
the query RR type was (0x20). See rfc1002 sections 4.2.14 and
4.2.16.
Jeremy.

11 years agor5069: Ensure we return the correct errors for old-style search requests.
Jeremy Allison [Fri, 28 Jan 2005 23:17:12 +0000 (23:17 +0000)]
r5069: Ensure we return the correct errors for old-style search requests.
Jeremy.

11 years agor5066: A couple of small fixes from James Peach @ SGI.
Jeremy Allison [Fri, 28 Jan 2005 21:55:45 +0000 (21:55 +0000)]
r5066: A couple of small fixes from James Peach @ SGI.
Jeremy.

11 years agor5063: Shamelessly steal the Samba4 logic (and some code :-) for directory
Jeremy Allison [Fri, 28 Jan 2005 21:01:58 +0000 (21:01 +0000)]
r5063: Shamelessly steal the Samba4 logic (and some code :-) for directory
evaluation. This stops us from reading the entire directory into
memory at one go, and allows partial reads. It also keeps almost
the same interface to the OpenDir/ReadDir etc. code (sorry James :-).
Next I will optimise the findfirst with exact match code. This speeds
up our interactive response for large directories, but not when a
missing (ie. negative) findfirst is done.
Jeremy

11 years agor5060: BUG 2286: fix typoe on sambaConfig oc definition
Gerald Carter [Fri, 28 Jan 2005 17:36:41 +0000 (17:36 +0000)]
r5060: BUG 2286: fix typoe on sambaConfig oc definition

11 years agor5058: Due to the fragileness how windows reacts on unmapped sids sometimes,
Günther Deschner [Fri, 28 Jan 2005 17:05:55 +0000 (17:05 +0000)]
r5058: Due to the fragileness how windows reacts on unmapped sids sometimes,
don't leave administator-sid unmapped. Simply return "Administrator"

Guenther

11 years agor5056: * correct STANDARD_RIGHTS_WRITE_ACCESS bitmask define
Gerald Carter [Fri, 28 Jan 2005 16:55:09 +0000 (16:55 +0000)]
r5056: * correct STANDARD_RIGHTS_WRITE_ACCESS bitmask define
* make sure to apply the rights_mask and not just the saved
  bits from the mask in access_check_samr_object()
* allow root to grant/revoke privileges (in addition to Domain
  Admins) as suggested by Volker.

Tested machine joins from XP, 2K, and NT4 with and without
pre-existing machine trust accounts.  Also tested basic file
operations using cmd.exe and explorer.exe after changing the
STANDARD_RIGHTS_WRITE_ACCESS bitmask.

11 years agor5046: mark 'winbind enable local accounts' and testprns as depcrecated
Gerald Carter [Thu, 27 Jan 2005 15:13:16 +0000 (15:13 +0000)]
r5046: mark 'winbind enable local accounts' and testprns as depcrecated

11 years agor5029: after talking to Rob, ensure that we set the NETIOSNAME.domainname
Gerald Carter [Thu, 27 Jan 2005 02:56:18 +0000 (02:56 +0000)]
r5029: after talking to Rob, ensure that we set the NETIOSNAME.domainname
as the longname in the published printer information since this
is what we will have used when we joined the domain.

More testing on this tomorrow.

11 years agor5028: * check acb_info mask in _samr_create_user instead of the last character
Gerald Carter [Thu, 27 Jan 2005 02:16:02 +0000 (02:16 +0000)]
r5028: * check acb_info mask in _samr_create_user instead of the last character
  of the user name
* fix some access_mask checks in _samr_set_userinfo2 (getting join from
  XP without being a member of domain admins working)

11 years agor5020: bumping the 3.0 tree to 3.0.12pre1 since there will not be a full sync for...
Gerald Carter [Wed, 26 Jan 2005 20:48:21 +0000 (20:48 +0000)]
r5020: bumping the 3.0 tree to 3.0.12pre1 since there will not be a full sync for the 3.0.11rc1 release

11 years agor5015: (based on abartlet's original patch to restrict password changes)
Gerald Carter [Wed, 26 Jan 2005 20:36:44 +0000 (20:36 +0000)]
r5015: (based on abartlet's original patch to restrict password changes)

* added SE_PRIV checks to access_check_samr_object() in order
  to deal with the run-time security descriptor and their
  interaction with user rights

* Reordered original patch in _samr_set_userinfo[2] to still
  allow root/administrative password changes for users and machines.

11 years agor5014: Split out the request to send an async level II oplock break into a
Jeremy Allison [Wed, 26 Jan 2005 20:01:21 +0000 (20:01 +0000)]
r5014: Split out the request to send an async level II oplock break into a
new function to make it clear when it's called. Remove async parameter
that had been overloaded into request_oplock_break.
Inspired by work from Nadav Danieli <nadavd@exanet.com>.
Jeremy.

11 years agor5012: fix segfault caused by using a ipp_t * after calling cupsDoRequest()
Gerald Carter [Wed, 26 Jan 2005 14:46:54 +0000 (14:46 +0000)]
r5012: fix segfault caused by using a ipp_t * after calling cupsDoRequest()

11 years agor5002: Ensure we can't remove a level II oplock without having the
Jeremy Allison [Wed, 26 Jan 2005 00:13:15 +0000 (00:13 +0000)]
r5002: Ensure we can't remove a level II oplock without having the
shared memory area locked. This need to be in 3.0.11. Pointed
out by Nadav Danieli <nadavd@exanet.com>.
Jeremy.

11 years agor5000: 5000th post! w00tsvn diffsvn diff :-)
Gerald Carter [Tue, 25 Jan 2005 23:34:39 +0000 (23:34 +0000)]
r5000: 5000th post! w00tsvn diffsvn diff :-)

11 years agor4996: sync up copytights with trunk
Gerald Carter [Tue, 25 Jan 2005 23:33:18 +0000 (23:33 +0000)]
r4996: sync up copytights with trunk

11 years agor4995: fail set_privileges() if 'enable privileges = no' to prevent confused admins...
Gerald Carter [Tue, 25 Jan 2005 23:32:19 +0000 (23:32 +0000)]
r4995: fail set_privileges() if 'enable privileges = no' to prevent confused admins who never read what I write :-)

11 years agor4994: Patch from abartlet:
Günther Deschner [Tue, 25 Jan 2005 23:30:05 +0000 (23:30 +0000)]
r4994: Patch from abartlet:

When migrating account policies to ldapsam, handle the fact that an
admin might have changed the default location of the sambaDomain-object
after installation.

Guenther

11 years agor4989: Display failed LDAP-server-uri.
Günther Deschner [Tue, 25 Jan 2005 20:36:24 +0000 (20:36 +0000)]
r4989: Display failed LDAP-server-uri.

Guenther

11 years agor4988: After speaking with Jerry, remove old lp_admin_users to
Günther Deschner [Tue, 25 Jan 2005 19:56:01 +0000 (19:56 +0000)]
r4988: After speaking with Jerry, remove old lp_admin_users to
administrator-sid mapping completely.

Guenther

11 years agor4976: Try to scare people off from trying to write authentication modules
Andrew Bartlett [Tue, 25 Jan 2005 02:58:31 +0000 (02:58 +0000)]
r4976: Try to scare people off from trying to write authentication modules
that only acheive as much as 'security=server' does.

Andrew Bartlett

11 years agor4972: Fix a warning and some debugging-outputs.
Günther Deschner [Tue, 25 Jan 2005 01:19:02 +0000 (01:19 +0000)]
r4972: Fix a warning and some debugging-outputs.

Guenther

11 years agor4970: Fix for bug 2092, allowing fallback after kerberos and allow
Jeremy Allison [Mon, 24 Jan 2005 20:21:15 +0000 (20:21 +0000)]
r4970: Fix for bug 2092, allowing fallback after kerberos and allow
gnome vfs to prevent auto-anonymous logon.
Jeremy.

11 years agor4967: Not being in any domain local groups is obviously valid...
Volker Lendecke [Mon, 24 Jan 2005 19:33:20 +0000 (19:33 +0000)]
r4967: Not being in any domain local groups is obviously valid...

Volker

11 years agor4966: don't enumerate the drivers for the same architecture string more than once
Gerald Carter [Mon, 24 Jan 2005 18:42:33 +0000 (18:42 +0000)]
r4966: don't enumerate the drivers for the same architecture string more than once

11 years agor4965: comment out some unused attributes and oc's
Gerald Carter [Mon, 24 Jan 2005 17:42:19 +0000 (17:42 +0000)]
r4965: comment out some unused attributes and oc's

11 years agor4964: Fix our lsa lookupsid $OURDOMAINSID-500.
Günther Deschner [Mon, 24 Jan 2005 17:29:12 +0000 (17:29 +0000)]
r4964: Fix our lsa lookupsid $OURDOMAINSID-500.

Give the admin-user (rid 500) a chance to be found in passdb, not
returning the (possibly obscure) first entry of "admin users" before
that.

Guenther

11 years agor4963: It is actually a very bad idea to use KRB5_CONFIG in the
Günther Deschner [Mon, 24 Jan 2005 16:30:46 +0000 (16:30 +0000)]
r4963: It is actually a very bad idea to use KRB5_CONFIG in the
configure-checks (At least Heimdal uses KRB5_CONFIG for locating it's
configuration-file (usually /etc/krb5.conf)). Renaming it to KRB5CONFIG
prevents configure-checks that use heimdal-libs from segfaulting while
the lib reads the krb5-config binary as a configuration file...

Vendors that used the KRB5_CONFIG-variable to let configure find a
custom krb5-config binary have to use KRB5CONFIG now.

Guenther

11 years agor4946: Our notion the other_sids in the info3 SamLogon struct was
Volker Lendecke [Sun, 23 Jan 2005 14:10:57 +0000 (14:10 +0000)]
r4946: Our notion the other_sids in the info3 SamLogon struct was
...hmmm... completely bogus. This does not affect us as a domain controller,
as we never set other_sids, but I have *no* idea how winbind got away with it.

Please review thoroughly, samba4 idl looks closer to reality here.

Test case: Member of w2k3 domain, authenticate as a user who is member of one
or more domain local groups. Easiest review with 'client schannel = no'.

Thanks,

Volker

11 years agor4933: List not only the first 10 trusts with rpcclient -c enumtrust.
Volker Lendecke [Sat, 22 Jan 2005 17:12:19 +0000 (17:12 +0000)]
r4933: List not only the first 10 trusts with rpcclient -c enumtrust.

Volker

11 years agor4932: Forgot to increase version with the account-policy-commit.
Günther Deschner [Sat, 22 Jan 2005 12:02:13 +0000 (12:02 +0000)]
r4932: Forgot to increase version with the account-policy-commit.

Guenther

11 years agor4931: Add get_user_info_7 in SAMR. This just gives out the username. (In
Günther Deschner [Sat, 22 Jan 2005 11:26:13 +0000 (11:26 +0000)]
r4931: Add get_user_info_7 in SAMR. This just gives out the username. (In
preparation of adding the ability of renaming users via setuserinfo
level 7).

Guenther

11 years agor4926: Use LDAP_SCOPE_ONELEVEL instead of OpenLDAP's LDAP_SCOPE_ONE-scope.
Günther Deschner [Sat, 22 Jan 2005 04:09:21 +0000 (04:09 +0000)]
r4926: Use LDAP_SCOPE_ONELEVEL instead of OpenLDAP's LDAP_SCOPE_ONE-scope.

Guenther

11 years agor4925: Migrate Account Policies to passdb (esp. replicating ldapsam).
Günther Deschner [Sat, 22 Jan 2005 03:37:09 +0000 (03:37 +0000)]
r4925: Migrate Account Policies to passdb (esp. replicating ldapsam).

Does automated migration from account_policy.tdb v1 and v2 and offers a
pdbedit-Migration interface. Jerry, please feel free to revert that if
you have other plans.

Guenther

11 years agor4921: Typo.
Jeremy Allison [Sat, 22 Jan 2005 01:38:42 +0000 (01:38 +0000)]
r4921: Typo.

11 years agor4917: Merge some of Derrell.Lipman@UnwiredUniverse.com obvious fixes.
Jeremy Allison [Sat, 22 Jan 2005 01:22:39 +0000 (01:22 +0000)]
r4917: Merge some of Derrell.Lipman@UnwiredUniverse.com obvious fixes.
Added text explaining units in pdbedit time fields.
Jeremy.

11 years agor4913: fixing 'perl requires' filters for RPM packaging on RedHat/Fedora
Gerald Carter [Fri, 21 Jan 2005 23:06:27 +0000 (23:06 +0000)]
r4913: fixing 'perl requires' filters for RPM packaging on RedHat/Fedora

11 years agor4907: remove unreached code
Gerald Carter [Fri, 21 Jan 2005 19:09:51 +0000 (19:09 +0000)]
r4907: remove unreached code

11 years agor4905: patch from abartlet to remove storing the auth-user credentials from the cli...
Gerald Carter [Fri, 21 Jan 2005 19:08:17 +0000 (19:08 +0000)]
r4905: patch from abartlet to remove storing the auth-user credentials from the cli* in cm_prepare_connection().  using credentials from a domain other thanour primary domain will cause the schannel setup to fail

11 years agor4902: please note that cupsDoRequest() deletes the request* so don't call ippDelete...
Gerald Carter [Fri, 21 Jan 2005 18:14:31 +0000 (18:14 +0000)]
r4902: please note that cupsDoRequest() deletes the request* so don't call ippDelete(request) *ever*

11 years agor4882: Fix for #2255. Debug should have been 10 not 0.
Jeremy Allison [Fri, 21 Jan 2005 01:42:45 +0000 (01:42 +0000)]
r4882: Fix for #2255. Debug should have been 10 not 0.
Jeremy.

11 years agor4881: Varient of Lar's patch for #2270. Jerry promises to test :-).
Jeremy Allison [Fri, 21 Jan 2005 00:29:38 +0000 (00:29 +0000)]
r4881: Varient of Lar's patch for #2270. Jerry promises to test :-).
Jeremy.

11 years agor4879: Fix rewinddir -> rewind_dir. Noticed by James Peach.
Jeremy Allison [Thu, 20 Jan 2005 22:42:08 +0000 (22:42 +0000)]
r4879: Fix rewinddir -> rewind_dir. Noticed by James Peach.
Jeremy

11 years agor4877: When vampiring account policy AP_LOCK_ACCOUNT_DURATION honour "Lockout
Günther Deschner [Thu, 20 Jan 2005 21:42:05 +0000 (21:42 +0000)]
r4877: When vampiring account policy AP_LOCK_ACCOUNT_DURATION honour "Lockout
Duration: Forever".

Guenther

11 years agor4875: Fix for bugid #221, inspired by Mrinal Kalakrishnan <mail@mrinal.net>.
Jeremy Allison [Thu, 20 Jan 2005 18:31:11 +0000 (18:31 +0000)]
r4875: Fix for bugid #221, inspired by Mrinal Kalakrishnan <mail@mrinal.net>.
NT sometimes send garbage bytes in NT security descriptor linearizations
when sending well-known sids. Cope with these.
Jeremy.