svn commit: samba r15543 - branches/SAMBA_3_0/source branches/SAMBA_3_0/source/include branches/SAMBA_3_0/source/libads branches/SAMBA_3_0/source/libsmb branches/SAMBA_3_0/source/nsswitch branches/SAMBA_3_0/source/printing branches/SAMBA_3_0/source/sam branches/SAMBA_3_0/source/utils trunk/source trunk/source/include trunk/source/libads trunk/source/libsmb trunk/source/nsswitch trunk/source/printing trunk/source/sam trunk/source/utils

[jerry at samba.org]

Author: jerry
Date: 2006-05-12 15:17:35 +0000 (Fri, 12 May 2006)
New Revision: 15543

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=15543

Log:
New implementation of 'net ads join' to be more like Windows XP.
The motivating factor is to not require more privileges for
the user account than Windows does when joining a domain.

The points of interest are

* net_ads_join() uses same rpc mechanisms as net_rpc_join()
* Enable CLDAP queries for filling in the majority of the
  ADS_STRUCT->config information
* Remove ldap_initialized() from sam/idmap_ad.c and
  libads/ldap.c
* Remove some unnecessary fields from ADS_STRUCT
* Manually set the dNSHostName and servicePrincipalName attribute
  using the machine account after the join

Thanks to Guenther and Simo for the review.

Still to do:

* Fix the userAccountControl for DES only systems
* Set the userPrincipalName in order to support things like
  'kinit -k' (although we might be able to just use the sAMAccountName
  instead)
* Re-add support for pre-creating the machine account in 
  a specific OU




Added:
   branches/SAMBA_3_0/source/include/ads_cldap.h
   branches/SAMBA_3_0/source/libads/cldap.c
   trunk/source/include/ads_cldap.h
   trunk/source/libads/cldap.c
Removed:
   branches/SAMBA_3_0/source/utils/net_ads_cldap.c
   trunk/source/utils/net_ads_cldap.c
Modified:
   branches/SAMBA_3_0/source/Makefile.in
   branches/SAMBA_3_0/source/include/ads.h
   branches/SAMBA_3_0/source/include/includes.h
   branches/SAMBA_3_0/source/libads/ads_struct.c
   branches/SAMBA_3_0/source/libads/ldap.c
   branches/SAMBA_3_0/source/libsmb/namequery.c
   branches/SAMBA_3_0/source/nsswitch/winbindd_cm.c
   branches/SAMBA_3_0/source/printing/nt_printing.c
   branches/SAMBA_3_0/source/sam/idmap_ad.c
   branches/SAMBA_3_0/source/utils/net.c
   branches/SAMBA_3_0/source/utils/net.h
   branches/SAMBA_3_0/source/utils/net_ads.c
   branches/SAMBA_3_0/source/utils/net_rpc.c
   branches/SAMBA_3_0/source/utils/net_rpc_join.c
   trunk/source/Makefile.in
   trunk/source/include/ads.h
   trunk/source/include/includes.h
   trunk/source/libads/ads_struct.c
   trunk/source/libads/ldap.c
   trunk/source/libsmb/namequery.c
   trunk/source/nsswitch/winbindd_cm.c
   trunk/source/printing/nt_printing.c
   trunk/source/sam/idmap_ad.c
   trunk/source/utils/net.c
   trunk/source/utils/net.h
   trunk/source/utils/net_ads.c
   trunk/source/utils/net_rpc.c
   trunk/source/utils/net_rpc_join.c


Changeset:
Sorry, the patch is too large (5445 lines) to include; please use WebSVN to see it!
WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=15543