Re: Samba 3.0 and UserManager?

2002-09-26 Thread Kai Krueger
- Original Message - From: Eddie Lania [EMAIL PROTECTED] Sent: Wednesday, September 25, 2002 8:47 PM I haven't got this to work altough I have read several mails now on this list of people that seem to have it working. I was wondering how this should be done. I can start

lookup_sid and well-known SIDs

2002-09-20 Thread Kai Krueger
Hi, the attached patch (against HEAD) tries to cleanup the way well-known SIDs are handled in the lookup_sid() and lookup_name() functions. With this patch, the SID or name is first checked against a list of well-known SIDs. If this failes, the SID or name is again checked against the list to see

Re: lp_sam_backend

2002-09-07 Thread Kai Krueger
Here comes the next version with the following changes: 1.) use SAM_ASSERT() some more 2.) implement context_sam_update_domain I forgot last time 3.) change the way context_sam_update_* and context_sam_delete_* find their sam_methods. Use current_sam_methods from the handle Kai Hi, This

Re: [PATCH] group control bits ....

2002-09-05 Thread Kai Krueger
- Original Message - From: Stefan (metze) Metzmacher [EMAIL PROTECTED] To: Jelmer Vernooij [EMAIL PROTECTED]; Andrew Bartlett [EMAIL PROTECTED]; Kai Krueger [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Thursday, September 05, 2002 7:39 PM Subject: [PATCH] group control bits

lp_sam_backend

2002-09-05 Thread Kai Krueger
Hi Jelmer, Hi Andrew, Hi Stefan I've started to code up some functions to parse the lp_sam_backend list and create a sam_context from it. In contrast to the current implementation, these functions can take a domain name per backend and pass it down to the apropriate sam_init(). To create a

typo in debug.c

2002-09-02 Thread Kai Krueger
Hi, there is a missing , in default_classname_table[] between sam and auth. The appended patch fixes this. Kai typo.diff Description: Binary data

DEBUG cleanup

2002-08-31 Thread Kai Krueger
Hi, The appended patches try to cleanup the debug logs a little by grouping debug messages together that belong together. I.e it removes the debug headers inbetween. Not only does it reduce the log size (up to 20% depending on debugleve), but IMHO also increases readability. They affect

Re: DEBUG cleanup

2002-08-31 Thread Kai Krueger
Here are some changes in codeing style of the first patches. Instead of dbgtext(), DEBUGADD() is used. I've also reversed if conditions to avoid whole of function if statements Kai util_sock_cleanup2.diff Description: Binary data util_cleanup2.diff Description: Binary data

typo in debug_ntlmssp_flags

2002-08-25 Thread Kai Krueger
I assume the following lines in HEAD/source/libsmb/clispnego.c if (neg_flags NTLMSSP_NEGOTIATE_SIGN) DEBUG(4, ( NTLMSSP_NEGOTIATE_SIGN\n)); if (neg_flags NTLMSSP_NEGOTIATE_SIGN) DEBUG(4, ( NTLMSSP_NEGOTIATE_SEAL\n)); should be if

Re: New sam system

2002-08-19 Thread Kai Krueger
From: Kai Krueger [EMAIL PROTECTED] Sent: Wednesday, July 31, 2002 10:21 PM So now back to the structure of the handles. As mentioned before, I don't think it has actually been decided upon (but perhaps I'm just not aware of it). All opinions with reasons are therefore very welcome

Re: New sam system

2002-08-10 Thread Kai Krueger
- Original Message - From: Andrew Bartlett [EMAIL PROTECTED] Sent: Thursday, August 01, 2002 1:09 AM Kai Krueger wrote: P.S. perhaps adding const all along would make it clear which parameters are in parameters and which are out paramters Yes, that would be a very good idea

Re: [Draft #2] Samba 3.0 roadmap...idmap storage central idmaprepository

2002-07-09 Thread Kai Krueger
- Original Message - From: Simo Sorce [EMAIL PROTECTED] To: Stefan (metze) Metzmacher [EMAIL PROTECTED] Cc: Samba Technical [EMAIL PROTECTED] Hi metze, on top of the first doc I see you state that all strings should be utf8. I hearteadly disagree, I woul d rather like to see all internal

problems with WINS initialisation

2002-07-07 Thread Kai Krueger
Hi, I'm haveing problems with the recent samba wins server after deleting the wins.tdb. After restarting samba, the wins_server_subnet does not contain all the names it should do (e.g. domain1b domain1c sambaserver00 sambaserver20 ...). If I use an old CVS checkout from the end of Mai everything

Re: Rework SAMR code, and remove rpc_parse dependency on passdb

2002-06-26 Thread Kai Krueger
- Original Message - From: Andrew Bartlett [EMAIL PROTECTED] Sent: Wednesday, June 26, 2002 5:49 AM It would be good, if all those q_u-pol could be renamed to identify on what type of sam-object each of the policies where opened. i.e. q_u-domain_pol, q_u-user_pol,

Re: Modulize Group mapping

2002-06-14 Thread Kai Krueger
- Original Message - From: Stefan (metze) Metzmacher [EMAIL PROTECTED] Sent: Thursday, June 13, 2002 12:07 PM My suggestion is something like the below. But it is more a thought till now than a proper api BOOL add_group_entry (GROUP_INFO1 group, BOOL local_global, DOM_SID

[Samba] Re: samba-3.0a13_1 PDC

2002-06-10 Thread Kai Krueger
Hi, I have just configured samba-3.0a13_1 with freebsd4.5. I am trying to setup a PDC I have followed the How-To and when logging in with a win2k client I get the error: There is no user session key for the specified logon session I had the same problem for a long time and the Howto and man

Re: Access control to SAM / _samr_query_sec_obj

2002-06-10 Thread Kai Krueger
Hi Here comes the next part of the access control patch. It fixes the nt_user_token in the pipes_struct and should therefore make the whole patch function correctly so that it probably could then be applied. Till now the current_user struct in pipes_struct was only initialised in the code for

Problems with get_group_alias_entries

2002-06-08 Thread Kai Krueger
I've noticed two problems with enumerating aliases in srv_samr_nt.c. The first problem is, that local unix groups only appear as aliases in win2k user manager if I have a debug level bigger than 2. I assume this is not a feature ?!? ;-) The problem seams to be that the smb.conf parameter

Re: Access control to SAM / _samr_query_sec_obj

2002-06-05 Thread Kai Krueger
This is the first version of the patch to implement access control to SAM. It implements checks of the desired access in all open functions (those that create handles) against the appropriate default SDs of the previous patch and associates the granted access bits with the handle. These

Re: Access control to SAM / _samr_query_sec_obj

2002-06-05 Thread Kai Krueger
- Original Message - From: Jeremy Allison [EMAIL PROTECTED] Sent: Wednesday, June 05, 2002 8:07 PM Subject: Re: Access control to SAM / _samr_query_sec_obj Nice patch. I do have one request though. I've (for years) been removing magic numerical constants from Samba (like the

Access control to SAM / _samr_query_sec_obj

2002-05-31 Thread Kai Krueger
Hi, currently, as far as I can see, the access control to the SAM database is only based upon file access to the db-files. On normal installations therefore only the root user can change, delete or add things instead of the entire administrators group. As this is IMHO rather unhelpfull,