svn commit: samba r12453 - in trunk/source: . auth include lib passdb rpc_server smbd

[vlendec at samba.org]

Author: vlendec
Date: 2005-12-23 16:01:44 +0000 (Fri, 23 Dec 2005)
New Revision: 12453

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12453

Log:
This introduces S-1-22-1 (Unix Users) and S-1-22-2 (Unix Groups) for unmapped
Unix identities. Enabled if 'enable rid algorithm = no'.

Basic testing with XP shows that existing ACLs are shown correctly, but it
will not be possible to explicitly enter for example "unix users\username" as
XP tries to find the name via the samr lookupnames call, not via the lsa
lookupnames call. To be able to add users and groups to ACLs, you need to map
them via passdb and group mapping.

These new domains make uid2sid and gid2sid never fail.

Introduce 3 simple passdb calls: uid2rid, gid2rid and rid2id. These calls are
replacements for local_uid_to_sid and friends, without the algorithmic
fallback. This is now concentrated in lookup_sid.c.

Needs *heavy* testing....

But being sure [ug]id2sid never fails and SIDs created this way will always be
mappable back make further simplifications possible.

Volker

Added:
   trunk/source/passdb/util_unixsids.c
Modified:
   trunk/source/Makefile.in
   trunk/source/auth/auth_rhosts.c
   trunk/source/auth/auth_util.c
   trunk/source/include/passdb.h
   trunk/source/include/smb.h
   trunk/source/lib/system_smbd.c
   trunk/source/lib/util_sid.c
   trunk/source/passdb/lookup_sid.c
   trunk/source/passdb/passdb.c
   trunk/source/passdb/pdb_interface.c
   trunk/source/passdb/util_builtin.c
   trunk/source/rpc_server/srv_samr_nt.c
   trunk/source/rpc_server/srv_unixinfo_nt.c
   trunk/source/smbd/ntquotas.c
   trunk/source/smbd/nttrans.c
   trunk/source/smbd/posix_acls.c


Changeset:
Sorry, the patch is too large (1468 lines) to include; please use WebSVN to see it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=12453