svn commit: samba r8786 - branches/SAMBA_3_0/source/utils trunk/source/utils

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

gd at samba.org wrote:

| Fix amazing and long-standing bug where user-accounts
| are just crippled accounts (accounts without AcctCtrl set)
| after a vampire-process.
|
| New Accounts tend to hace no acb_info at all which means "0"
| (ACB_NORMAL). Unless 0 becomes not 0 we don't do anything
| and set *no* acctrl for normal users at all (!). Those
| crippled users now don't show up in usrmgr since
| 3.0.20somethings ldap-routines now finally test if
| the attribute is there.

Guenther,

You added the change to start looking at the separating
searches based on the ACB value for 3.0.11 I thought.
Or are we talking about a different change to ldapsam
now?


============
LDAP Changes
============

If "ldap user suffix" or "ldap machine suffix" are defined in
smb.conf, all user-accounts must reside below the user suffix,
and all machine and inter-domain trust-accounts must be located
below the machine suffix.  Previous Samba releases would fall
back to searching the 'ldap suffix' in some cases.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFC55B2IR7qMdg1EfYRAnBgAJ94TAuoNvm3Cjo32t+GY2ajcUJ6SQCdE+tI
vWPAS34KW6IU7pf/blXjMgs=
=R6ht
-----END PGP SIGNATURE-----