Attachment 299950 Details for Bug 429024 – Patches to fix some issues still open with trusts

[patch] Patches to fix some issues still open with trusts

rhel5.2-429024-more.patch (text/plain), 4.31 KB, created by Simo Sorce on 2008-04-01 19:24:06 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Simo Sorce

Created: 2008-04-01 19:24:06 UTC

Size: 4.31 KB

patch

obsolete

>Index: samba-3.0.28-w2k8.patch
>===================================================================
>RCS file: /cvs/dist/rpms/samba/RHEL-5/samba-3.0.28-w2k8.patch,v
>retrieving revision 1.1
>diff -u -p -r1.1 samba-3.0.28-w2k8.patch
>--- samba-3.0.28-w2k8.patch	31 Jan 2008 20:53:39 -0000	1.1
>+++ samba-3.0.28-w2k8.patch	1 Apr 2008 17:03:22 -0000
>@@ -506,3 +506,35 @@ index 3168dd1..2f6606f 100644
>  		    libads/ldap_schema.o
>  
>  SECRETS_OBJ = passdb/secrets.o passdb/machine_sid.o
>+commit 9b5ed88d4ae6885bc70f7c9ef4f10c381af7260e
>+Author: GÃ¼nther Deschner <gd@samba.org>
>+Date:   Wed Mar 26 21:08:53 2008 +0100
>+
>+    Fix winbind NETLOGON cred chain on a samba dc for w2k8 trusts.
>+    
>+    Guenther
>+
>+diff --git a/source/nsswitch/winbindd_cm.c b/source/nsswitch/winbindd_cm.c
>+index 14c3fc1..7f6076e 100644
>+--- a/source/nsswitch/winbindd_cm.c
>++++ b/source/nsswitch/winbindd_cm.c
>+@@ -2027,7 +2027,7 @@ NTSTATUS cm_connect_netlogon(struct winbindd_domain *domain,
>+ 	struct winbindd_cm_conn *conn;
>+ 	NTSTATUS result;
>+ 
>+-	uint32 neg_flags = NETLOGON_NEG_SELECT_AUTH2_FLAGS;
>++	uint32 neg_flags = NETLOGON_NEG_AUTH2_FLAGS;
>+ 	uint8  mach_pwd[16];
>+ 	uint32  sec_chan_type;
>+ 	const char *account_name;
>+@@ -2040,6 +2040,10 @@ NTSTATUS cm_connect_netlogon(struct winbindd_domain *domain,
>+ 		return result;
>+ 	}
>+ 
>++	if (domain->active_directory) {
>++		neg_flags = NETLOGON_NEG_AUTH2_ADS_FLAGS;
>++	}
>++
>+ 	conn = &domain->conn;
>+ 
>+ 	if (conn->netlogon_pipe != NULL) {
>Index: samba-3.0.28-winbindd-on-dc.patch
>===================================================================
>RCS file: /cvs/dist/rpms/samba/RHEL-5/samba-3.0.28-winbindd-on-dc.patch,v
>retrieving revision 1.1
>diff -u -p -r1.1 samba-3.0.28-winbindd-on-dc.patch
>--- samba-3.0.28-winbindd-on-dc.patch	1 Feb 2008 19:39:18 -0000	1.1
>+++ samba-3.0.28-winbindd-on-dc.patch	1 Apr 2008 17:03:22 -0000
>@@ -51,3 +51,46 @@ index d2daf78..ecd919d 100644
>  	return (sid_check_is_in_our_domain(sid) || sid_check_is_in_builtin(sid));
>  }
>  
>+commit bddd96297948e5405415275da00dc673f17c0d48
>+Author: Volker Lendecke <vl@samba.org>
>+Date:   Wed Mar 26 17:45:27 2008 +0100
>+
>+    Fix wbinfo -a trusted\\user%password on a Samba DC with trusts
>+    
>+    Winbind can't be allowed to connect to the local smbd.
>+
>+diff --git a/source/nsswitch/winbindd_cache.c b/source/nsswitch/winbindd_cache.c
>+index a88a061..42f5565 100644
>+--- a/source/nsswitch/winbindd_cache.c
>++++ b/source/nsswitch/winbindd_cache.c
>+@@ -37,6 +37,7 @@ extern BOOL opt_nocache;
>+ #ifdef HAVE_ADS
>+ extern struct winbindd_methods ads_methods;
>+ #endif
>++extern struct winbindd_methods passdb_methods;
>+ 
>+ /*
>+  * JRA. KEEP THIS LIST UP TO DATE IF YOU ADD CACHE ENTRIES.
>+@@ -136,6 +137,10 @@ static struct winbind_cache *get_cache(struct winbindd_domain *domain)
>+ 
>+ 	/* We have to know what type of domain we are dealing with first. */
>+ 
>++	if (domain->internal) {
>++		domain->backend = &passdb_methods;
>++		domain->initialized = True;
>++	}
>+ 	if ( !domain->initialized ) {
>+ 		init_dc_connection( domain );
>+ 	}
>+diff --git a/source/nsswitch/winbindd_dual.c b/source/nsswitch/winbindd_dual.c
>+index fa6add3..7df630d 100644
>+--- a/source/nsswitch/winbindd_dual.c
>++++ b/source/nsswitch/winbindd_dual.c
>+@@ -994,7 +994,6 @@ static BOOL fork_domain_child(struct winbindd_child *child)
>+ 	 * but not the main daemon */
>+ 
>+ 	if (child->domain && child->domain->internal && IS_DC) {
>+-		child->domain->internal = False;
>+ 		child->domain->methods = &cache_methods;
>+ 		child->domain->online = False;
>+ 	}
>Index: samba.spec
>===================================================================
>RCS file: /cvs/dist/rpms/samba/RHEL-5/samba.spec,v
>retrieving revision 1.95
>diff -u -p -r1.95 samba.spec
>--- samba.spec	14 Feb 2008 19:10:05 -0000	1.95
>+++ samba.spec	1 Apr 2008 17:03:23 -0000
>@@ -3,7 +3,7 @@
> Summary: The Samba SMB server.
> Name: samba
> Version: 3.0.28
>-Release: 0%{?dist}.6
>+Release: 0%{?dist}.7
> Epoch: 0
> License: GNU GPL Version 2
> Group: System Environment/Daemons
>@@ -478,6 +478,10 @@ fi
> %{_mandir}/man8/eventlogadm.8.gz
> 
> %changelog
>+* Tue Apr 1 2008 Guenther Deschner <gdeschner@redhat.com> 3.0.28-0.el5.7
>+- Fix domain trusts while running as a DC
>+- Fix credential chain with windows 2008
>+
> * Thu Feb 14 2008 Simo Sorce <ssorce@redhat.com> 3.0.28-0.el5.6
> - Back out moiunt cifs patches for prepath, as the corresponding
>   kernel changes can't be put in at this time

Actions: View | Diff

Attachments on bug 429024: 291892 | 291893 | 291897 | 291898 | 292014 | 292015 | 292202 | 292203 | 293489 | 293625 | 293626 | 295318 | 299950 | 300141